Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 18073

All 18073 CVE vulnerabilities found in Linux, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumeration (CWE) vulnerabilities affecting the Linux operating system product. It aggregates security data related to weaknesses within the kernel, distributions, and associated utilities provided by various Linux vendors and maintainers. The collection encompasses a wide range of vulnerability types, including memory corruption issues, privilege escalation flaws, information leaks, and denial-of-service conditions. The database covers historical records spanning several decades, reflecting the evolution of the Linux ecosystem from its early releases to modern stable and development branches. This extensive time range allows for the analysis of long-term security trends and the remediation status of legacy systems that remain in production environments. Visitors to this resource can track vendor-specific advisories to stay informed about patches and updates released by major Linux distribution maintainers. You can also use the page to understand the characteristics and impact of specific weakness classes as they manifest in the Linux environment. Additionally, the interface supports looking up a specific product’s vulnerability history, enabling security professionals to assess risk exposure and prioritize mitigation efforts for critical infrastructure components. The data is organized to facilitate efficient searching and correlation between weakness identifiers and affected software versions, ensuring that administrators and developers have access to comprehensive security insights necessary for maintaining system integrity and compliance.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2026-46085 rxrpc: Fix rxkad crypto unalignment handling 7.5 High 2026-05-27
CVE-2026-46084 RDMA/mana_ib: Disable RX steering on RSS QP destroy - - 2026-05-27
CVE-2026-46083 spi: fix resource leaks on device setup failure - - 2026-05-27
CVE-2026-46082 KVM: SVM: Inject #UD for INVLPGA if EFER.SVME=0 - - 2026-05-27
CVE-2026-46081 crypto: acomp - fix wrong pointer stored by acomp_save_req() 7.8 High 2026-05-27
CVE-2026-46080 ocfs2: split transactions in dio completion to avoid credit exhaustion - - 2026-05-27
CVE-2026-46079 rbd: fix null-ptr-deref when device_add_disk() fails - - 2026-05-27
CVE-2026-46078 erofs: fix the out-of-bounds nameoff handling for trailing dirents 7.1 High 2026-05-27
CVE-2026-46077 crypto: atmel-tdes - fix DMA sync direction - - 2026-05-27
CVE-2026-46076 KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 7.9 High 2026-05-27
CVE-2026-46075 crypto: atmel-sha204a - Fix potential UAF and memory leak in remove path - - 2026-05-27
CVE-2026-46074 spi: ch341: fix memory leaks on probe failures - - 2026-05-27
CVE-2026-46073 hwmon: (powerz) Fix missing usb_kill_urb() on signal interrupt - - 2026-05-27
CVE-2026-46072 ntfs3: add buffer boundary checks to run_unpack() - - 2026-05-27
CVE-2026-46071 KVM: nSVM: Avoid clearing VMCB_LBR in vmcb12 - - 2026-05-27
CVE-2026-46070 md/raid5: validate payload size before accessing journal metadata 7.1 High 2026-05-27
CVE-2026-46069 wifi: mwifiex: fix use-after-free in mwifiex_adapter_cleanup() - - 2026-05-27
CVE-2026-46068 crypto: nx - fix bounce buffer leaks in nx842_crypto_{alloc,free}_ctx - - 2026-05-27
CVE-2026-46067 mm/damon/core: validate damos_quota_goal->nid for node_memcg_{used,free}_bp - - 2026-05-27
CVE-2026-46066 ceph: fix num_ops off-by-one when crypto allocation fails - - 2026-05-27
CVE-2026-46065 fbdev: defio: Disconnect deferred I/O from the lifetime of struct fb_info 7.8 High 2026-05-27
CVE-2026-46064 ibmasm: fix heap over-read in ibmasm_send_i2o_message() - - 2026-05-27
CVE-2026-46063 x86/shstk: Prevent deadlock during shstk sigreturn - - 2026-05-27
CVE-2026-46062 ntfs3: fix integer overflow in run_unpack() volume boundary check 7.8 High 2026-05-27
CVE-2026-46061 jbd2: fix deadlock in jbd2_journal_cancel_revoke() - - 2026-05-27
CVE-2026-46060 crypto: qat - fix IRQ cleanup on 6xxx probe failure - - 2026-05-27
CVE-2026-46059 KVM: nSVM: Always use NextRIP as vmcb02's NextRIP after first L2 VMRUN - - 2026-05-27
CVE-2026-46058 media: amphion: Fix race between m2m job_abort and device_run 7.8 High 2026-05-27
CVE-2026-46057 landlock: Fix LOG_SUBDOMAINS_OFF inheritance across fork() - - 2026-05-27
CVE-2026-46056 Bluetooth: hci_event: fix potential UAF in SSP passkey handlers 8.8 High 2026-05-27

All 18073 known CVE vulnerabilities affecting Linux with full Chinese analysis, references, and POCs where available.