Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 18084

All 18084 CVE vulnerabilities found in Linux, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumeration (CWE) vulnerabilities affecting the Linux operating system product. It aggregates security data related to weaknesses within the kernel, distributions, and associated utilities provided by various Linux vendors and maintainers. The collection encompasses a wide range of vulnerability types, including memory corruption issues, privilege escalation flaws, information leaks, and denial-of-service conditions. The database covers historical records spanning several decades, reflecting the evolution of the Linux ecosystem from its early releases to modern stable and development branches. This extensive time range allows for the analysis of long-term security trends and the remediation status of legacy systems that remain in production environments. Visitors to this resource can track vendor-specific advisories to stay informed about patches and updates released by major Linux distribution maintainers. You can also use the page to understand the characteristics and impact of specific weakness classes as they manifest in the Linux environment. Additionally, the interface supports looking up a specific product’s vulnerability history, enabling security professionals to assess risk exposure and prioritize mitigation efforts for critical infrastructure components. The data is organized to facilitate efficient searching and correlation between weakness identifiers and affected software versions, ensuring that administrators and developers have access to comprehensive security insights necessary for maintaining system integrity and compliance.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2026-43354 iio: proximity: hx9023s: Protect against division by zero in set_samp_freq 5.5AI Medium AI 2026-05-08
CVE-2026-43352 i3c: mipi-i3c-hci: Correct RING_CTRL_ABORT handling in DMA dequeue 7.8 High 2026-05-08
CVE-2026-43353 i3c: mipi-i3c-hci: Fix race in DMA ring dequeue 7.8 High 2026-05-08
CVE-2026-43351 KVM: arm64: Eagerly init vgic dist/redist on vgic creation 7.0AI High AI 2026-05-08
CVE-2026-43350 smb: client: require a full NFS mode SID before reading mode bits 7.6 High 2026-05-08
CVE-2026-43349 f2fs: fix to avoid uninit-value access in f2fs_sanity_check_node_footer 7.1AI High AI 2026-05-08
CVE-2026-43348 mshv_vtl: Fix vmemmap_shift exceeding MAX_FOLIO_ORDER 7.1AI High AI 2026-05-08
CVE-2026-43347 arm64: dts: qcom: monaco: Reserve full Gunyah metadata region 7.5 High 2026-05-08
CVE-2026-43346 ice: ptp: don't WARN when controlling PF is unavailable 7.5 - 2026-05-08
CVE-2026-43345 net: ipa: fix event ring index not programmed for IPA v5.0+ 7.5 High 2026-05-08
CVE-2026-43344 perf/x86/intel/uncore: Fix die ID init and look up bugs 5.5 - 2026-05-08
CVE-2026-43343 usb: gadget: f_subset: Fix unbalanced refcnt in geth_free 5.5AI Medium AI 2026-05-08
CVE-2026-43342 usb: gadget: f_rndis: Protect RNDIS options with mutex 7.0AI High AI 2026-05-08
CVE-2026-43340 comedi: Reinit dev->spinlock between attachments to low-level drivers 7.8AI High AI 2026-05-08
CVE-2026-43341 net/ipv6: ioam6: prevent schema length wraparound in trace fill 9.8 Critical 2026-05-08
CVE-2026-43339 ipv6: prevent possible UaF in addrconf_permanent_addr() 7.8 High 2026-05-08
CVE-2026-43338 btrfs: reserve enough transaction items for qgroup ioctls 4.7AI Medium AI 2026-05-08
CVE-2026-43337 drm/amd/display: Fix NULL pointer dereference in dcn401_init_hw() 7.1AI High AI 2026-05-08
CVE-2026-43336 lib/crypto: chacha: Zeroize permuted_state before it leaves scope 7.5 High 2026-05-08
CVE-2026-43335 interconnect: qcom: sm8450: Fix NULL pointer dereference in icc_link_nodes() 5.5AI Medium AI 2026-05-08
CVE-2026-43334 Bluetooth: SMP: force responder MITM requirements before building the pairing response 8.8 High 2026-05-08
CVE-2026-43333 bpf: reject direct access to nullable PTR_TO_BUF pointers 5.5AI Medium AI 2026-05-08
CVE-2026-43332 thermal: core: Fix thermal zone device registration error path 7.8 High 2026-05-08
CVE-2026-43331 x86/kexec: Disable KCOV instrumentation after load_segments() 5.5AI Medium AI 2026-05-08
CVE-2026-43330 crypto: caam - fix overflow on long hmac keys 7.8 High 2026-05-08
CVE-2026-43328 cpufreq: governor: fix double free in cpufreq_dbs_governor_init() error path 7.1AI High AI 2026-05-08
CVE-2026-43329 netfilter: flowtable: strictly check for maximum number of actions 7.8 High 2026-05-08
CVE-2026-43327 USB: dummy-hcd: Fix locking/synchronization error 5.9AI Medium AI 2026-05-08
CVE-2026-43325 wifi: iwlwifi: mvm: don't send a 6E related command when not supported 5.5AI Medium AI 2026-05-08
CVE-2026-43326 sched_ext: Fix SCX_KICK_WAIT deadlock by deferring wait to balance callback 5.5AI Medium AI 2026-05-08

All 18084 known CVE vulnerabilities affecting Linux with full Chinese analysis, references, and POCs where available.