Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 18073

All 18073 CVE vulnerabilities found in Linux, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumeration (CWE) vulnerabilities affecting the Linux operating system product. It aggregates security data related to weaknesses within the kernel, distributions, and associated utilities provided by various Linux vendors and maintainers. The collection encompasses a wide range of vulnerability types, including memory corruption issues, privilege escalation flaws, information leaks, and denial-of-service conditions. The database covers historical records spanning several decades, reflecting the evolution of the Linux ecosystem from its early releases to modern stable and development branches. This extensive time range allows for the analysis of long-term security trends and the remediation status of legacy systems that remain in production environments. Visitors to this resource can track vendor-specific advisories to stay informed about patches and updates released by major Linux distribution maintainers. You can also use the page to understand the characteristics and impact of specific weakness classes as they manifest in the Linux environment. Additionally, the interface supports looking up a specific product’s vulnerability history, enabling security professionals to assess risk exposure and prioritize mitigation efforts for critical infrastructure components. The data is organized to facilitate efficient searching and correlation between weakness identifiers and affected software versions, ensuring that administrators and developers have access to comprehensive security insights necessary for maintaining system integrity and compliance.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2026-46115 block: add pgmap check to biovec_phys_mergeable 9.8 Critical 2026-05-28
CVE-2026-46114 RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads 7.5 High 2026-05-28
CVE-2026-46113 KVM: x86: Fix shadow paging use-after-free due to unexpected GFN 8.8 High 2026-05-28
CVE-2026-46112 RDMA/hns: Fix unlocked call to hns_roce_qp_remove() 7.8 High 2026-05-28
CVE-2026-46111 Bluetooth: hci_conn: fix potential UAF in create_big_sync 7.8 High 2026-05-28
CVE-2026-46110 net: stmmac: Prevent NULL deref when RX memory exhausted 7.5 High 2026-05-28
CVE-2026-46109 usb: ulpi: fix memory leak on ulpi_register() error paths - - 2026-05-28
CVE-2026-46108 ipmi:si: Return state to normal if message allocation fails - - 2026-05-28
CVE-2026-46107 dm-thin: fix metadata refcount underflow 7.8 High 2026-05-28
CVE-2026-46106 eventfs: Hold eventfs_mutex and SRCU when remount walks events - - 2026-05-28
CVE-2026-46105 scsi: mpt3sas: Limit NVMe request size to 2 MiB 7.8 High 2026-05-28
CVE-2026-46104 selinux: use sk blob accessor in socket permission helpers - - 2026-05-28
CVE-2026-46103 can: ucan: fix devres lifetime - - 2026-05-27
CVE-2026-46102 net: strparser: fix skb_head leak in strp_abort_strp() 7.5 High 2026-05-27
CVE-2026-46101 netfilter: reject zero shift in nft_bitwise - - 2026-05-27
CVE-2026-46100 fs: afs: revert mmap_prepare() change 7.8 High 2026-05-27
CVE-2026-46099 net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels 8.1 High 2026-05-27
CVE-2026-46098 net: caif: clear client service pointer on teardown - - 2026-05-27
CVE-2026-46097 Input: edt-ft5x06 - fix use-after-free in debugfs teardown - - 2026-05-27
CVE-2026-46096 tpm2-sessions: Fix missing tpm_buf_destroy() in tpm2_read_public() - - 2026-05-27
CVE-2026-46095 md/md-llbitmap: raise barrier before state machine transition - - 2026-05-27
CVE-2026-46094 ext4: fix bounds check in check_xattrs() to prevent out-of-bounds access - - 2026-05-27
CVE-2026-46093 mm/vmalloc: take vmap_purge_lock in shrinker 7.8 High 2026-05-27
CVE-2026-46092 wifi: rtw88: check for PCI upstream bridge existence - - 2026-05-27
CVE-2026-46091 media: rc: igorplugusb: heed coherency rules - - 2026-05-27
CVE-2026-46090 ALSA: aloop: Fix peer runtime UAF during format-change stop 7.8 High 2026-05-27
CVE-2026-46089 zram: do not forget to endio for partial discard requests - - 2026-05-27
CVE-2026-46088 ALSA: control: Validate buf_len before strnlen() in snd_ctl_elem_init_enum_names() - - 2026-05-27
CVE-2026-46087 mm/damon/stat: fix memory leak on damon_start() failure in damon_stat_start() - - 2026-05-27
CVE-2026-46086 net: bridge: use a stable FDB dst snapshot in RCU readers - - 2026-05-27

All 18073 known CVE vulnerabilities affecting Linux with full Chinese analysis, references, and POCs where available.