Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 18073

All 18073 CVE vulnerabilities found in Linux, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumeration (CWE) vulnerabilities affecting the Linux operating system product. It aggregates security data related to weaknesses within the kernel, distributions, and associated utilities provided by various Linux vendors and maintainers. The collection encompasses a wide range of vulnerability types, including memory corruption issues, privilege escalation flaws, information leaks, and denial-of-service conditions. The database covers historical records spanning several decades, reflecting the evolution of the Linux ecosystem from its early releases to modern stable and development branches. This extensive time range allows for the analysis of long-term security trends and the remediation status of legacy systems that remain in production environments. Visitors to this resource can track vendor-specific advisories to stay informed about patches and updates released by major Linux distribution maintainers. You can also use the page to understand the characteristics and impact of specific weakness classes as they manifest in the Linux environment. Additionally, the interface supports looking up a specific product’s vulnerability history, enabling security professionals to assess risk exposure and prioritize mitigation efforts for critical infrastructure components. The data is organized to facilitate efficient searching and correlation between weakness identifiers and affected software versions, ensuring that administrators and developers have access to comprehensive security insights necessary for maintaining system integrity and compliance.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2026-46145 RDMA/mana: Validate rx_hash_key_len 7.8 High 2026-05-28
CVE-2026-46144 RDMA/mana: Fix error unwind in mana_ib_create_qp_rss() - - 2026-05-28
CVE-2026-46143 ASoC: qcom: q6apm-lpass-dai: Fix multiple graph opens - - 2026-05-28
CVE-2026-46142 net: libwx: fix VF illegal register access - - 2026-05-28
CVE-2026-46141 powerpc/xive: fix kmemleak caused by incorrect chip_data lookup - - 2026-05-28
CVE-2026-46140 Bluetooth: btmtk: validate WMT event SKB length before struct access - - 2026-05-28
CVE-2026-46139 smb: client: use kzalloc to zero-initialize security descriptor buffer - - 2026-05-28
CVE-2026-46138 Bluetooth: hci_event: Fix OOB read and infinite loop in hci_le_create_big_complete_evt 8.1 High 2026-05-28
CVE-2026-46137 mptcp: pm: ADD_ADDR rtx: fix potential data-race 9.8 Critical 2026-05-28
CVE-2026-46136 wifi: mt76: mt7921: fix a potential clc buffer length underflow - - 2026-05-28
CVE-2026-46135 nvmet-tcp: fix race between ICReq handling and queue teardown 9.8 Critical 2026-05-28
CVE-2026-46134 platform/chrome: cros_ec_typec: Init mutex in Thunderbolt registration - - 2026-05-28
CVE-2026-46133 RDMA/rxe: Reject unknown opcodes before ICRC processing 7.5 High 2026-05-28
CVE-2026-46132 net: rtnetlink: zero ifla_vf_broadcast to avoid stack infoleak in rtnl_fill_vfinfo - - 2026-05-28
CVE-2026-46131 KVM: x86: check for nEPT/nNPT in slow flush hypercalls - - 2026-05-28
CVE-2026-46130 dm-verity-fec: fix reading parity bytes split across blocks (take 3) - - 2026-05-28
CVE-2026-46129 btrfs: fix double free in create_space_info() error path 7.8 High 2026-05-28
CVE-2026-46128 ipmi: Check event message buffer response for bad data - - 2026-05-28
CVE-2026-46127 RDMA/ocrdma: Don't NULL deref uctx on errors in ocrdma_copy_pd_uresp() - - 2026-05-28
CVE-2026-46126 RDMA/mana: Fix mana_destroy_wq_obj() cleanup in mana_ib_create_qp_rss() - - 2026-05-28
CVE-2026-46125 wifi: mac80211: remove station if connection prep fails 8.8 High 2026-05-28
CVE-2026-46124 isofs: validate block number from NFS file handle in isofs_export_iget 7.5 High 2026-05-28
CVE-2026-46123 Bluetooth: virtio_bt: clamp rx length before skb_put 7.7 High 2026-05-28
CVE-2026-46122 wifi: b43: enforce bounds check on firmware key index in b43_rx() - - 2026-05-28
CVE-2026-46121 mm/damon/sysfs-schemes: protect memcg_path kfree() with damon_sysfs_lock - - 2026-05-28
CVE-2026-46120 ip6_gre: Use cached t->net in ip6erspan_changelink(). 7.8 High 2026-05-28
CVE-2026-46119 libceph: Fix slab-out-of-bounds access in auth message processing 9.1 Critical 2026-05-28
CVE-2026-46118 pseries/papr-hvpipe: Fix null ptr deref in papr_hvpipe_dev_create_handle() - - 2026-05-28
CVE-2026-46117 RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() 7.8 High 2026-05-28
CVE-2026-46116 xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete 7.8 High 2026-05-28

All 18073 known CVE vulnerabilities affecting Linux with full Chinese analysis, references, and POCs where available.