Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 18084

All 18084 CVE vulnerabilities found in Linux, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumeration (CWE) vulnerabilities affecting the Linux operating system product. It aggregates security data related to weaknesses within the kernel, distributions, and associated utilities provided by various Linux vendors and maintainers. The collection encompasses a wide range of vulnerability types, including memory corruption issues, privilege escalation flaws, information leaks, and denial-of-service conditions. The database covers historical records spanning several decades, reflecting the evolution of the Linux ecosystem from its early releases to modern stable and development branches. This extensive time range allows for the analysis of long-term security trends and the remediation status of legacy systems that remain in production environments. Visitors to this resource can track vendor-specific advisories to stay informed about patches and updates released by major Linux distribution maintainers. You can also use the page to understand the characteristics and impact of specific weakness classes as they manifest in the Linux environment. Additionally, the interface supports looking up a specific product’s vulnerability history, enabling security professionals to assess risk exposure and prioritize mitigation efforts for critical infrastructure components. The data is organized to facilitate efficient searching and correlation between weakness identifiers and affected software versions, ensuring that administrators and developers have access to comprehensive security insights necessary for maintaining system integrity and compliance.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2026-43383 net/tcp-md5: Fix MAC comparison to be constant-time 9.4 Critical 2026-05-08
CVE-2026-43384 net/tcp-ao: Fix MAC comparison to be constant-time 9.8 Critical 2026-05-08
CVE-2026-43382 batman-adv: Avoid double-rtnl_lock ELP metric worker 5.5AI Medium AI 2026-05-08
CVE-2026-43380 hwmon: (pmbus/q54sj108a2) fix stack overflow in debugfs read 7.8 High 2026-05-08
CVE-2026-43381 nouveau/dpcd: return EBUSY for aux xfer if the device is asleep 5.5AI Medium AI 2026-05-08
CVE-2026-43379 ksmbd: fix use-after-free in smb_lazy_parent_lease_break_close() 9.8 Critical 2026-05-08
CVE-2026-43378 smb: server: fix use-after-free in smb2_open() 9.8 Critical 2026-05-08
CVE-2026-43377 ksmbd: Don't log keys in SMB3 signing and encryption key generation 8.1 High 2026-05-08
CVE-2026-43376 ksmbd: fix use-after-free by using call_rcu() for oplock_info 9.8 Critical 2026-05-08
CVE-2026-43374 net: nexthop: fix percpu use-after-free in remove_nh_grp_entry 7.8 High 2026-05-08
CVE-2026-43375 net: mctp: fix device leak on probe failure 7.1AI High AI 2026-05-08
CVE-2026-43373 net: ncsi: fix skb leak in error paths 7.5 High 2026-05-08
CVE-2026-43372 net: dsa: microchip: Fix error path in PTP IRQ setup 7.1AI High AI 2026-05-08
CVE-2026-43371 net: macb: Shuffle the tx ring before enabling tx 5.5AI Medium AI 2026-05-08
CVE-2026-43370 drm/amdgpu: Fix use-after-free race in VM acquire 7.8 High 2026-05-08
CVE-2026-43369 drm/amd: Fix NULL pointer dereference in device cleanup 5.5AI Medium AI 2026-05-08
CVE-2026-43368 drm/i915: Fix potential overflow of shmem scatterlist length 7.8 High 2026-05-08
CVE-2026-43367 drm/amd: Fix a few more NULL pointer dereference in device cleanup 5.5AI Medium AI 2026-05-08
CVE-2026-43366 io_uring/kbuf: check if target buffer list is still legacy on recycle 7.8 High 2026-05-08
CVE-2026-43365 xfs: fix undersized l_iclog_roundoff values 8.2 High 2026-05-08
CVE-2026-43364 ublk: fix NULL pointer dereference in ublk_ctrl_set_size() 5.5 - 2026-05-08
CVE-2026-43363 x86/apic: Disable x2apic on resume if the kernel expects so 5.5AI Medium AI 2026-05-08
CVE-2026-43361 btrfs: fix transaction abort when snapshotting received subvolumes 5.5 - 2026-05-08
CVE-2026-43362 smb: client: fix in-place encryption corruption in SMB2_write() 8.1 High 2026-05-08
CVE-2026-43360 btrfs: fix transaction abort on file creation due to name hash collision 5.5 - 2026-05-08
CVE-2026-43359 btrfs: fix transaction abort on set received ioctl due to item overflow 5.5 - 2026-05-08
CVE-2026-43358 btrfs: add missing RCU unlock in error path in try_release_subpage_extent_buffer() 7.1AI High AI 2026-05-08
CVE-2026-43357 iio: gyro: mpu3050-core: fix pm_runtime error handling 5.5AI Medium AI 2026-05-08
CVE-2026-43356 iio: imu: adis: Fix NULL pointer dereference in adis_init 7.8AI High AI 2026-05-08
CVE-2026-43355 iio: light: bh1780: fix PM runtime leak on error path 5.5AI Medium AI 2026-05-08

All 18084 known CVE vulnerabilities affecting Linux with full Chinese analysis, references, and POCs where available.