Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 18084

All 18084 CVE vulnerabilities found in Linux, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumeration (CWE) vulnerabilities affecting the Linux operating system product. It aggregates security data related to weaknesses within the kernel, distributions, and associated utilities provided by various Linux vendors and maintainers. The collection encompasses a wide range of vulnerability types, including memory corruption issues, privilege escalation flaws, information leaks, and denial-of-service conditions. The database covers historical records spanning several decades, reflecting the evolution of the Linux ecosystem from its early releases to modern stable and development branches. This extensive time range allows for the analysis of long-term security trends and the remediation status of legacy systems that remain in production environments. Visitors to this resource can track vendor-specific advisories to stay informed about patches and updates released by major Linux distribution maintainers. You can also use the page to understand the characteristics and impact of specific weakness classes as they manifest in the Linux environment. Additionally, the interface supports looking up a specific product’s vulnerability history, enabling security professionals to assess risk exposure and prioritize mitigation efforts for critical infrastructure components. The data is organized to facilitate efficient searching and correlation between weakness identifiers and affected software versions, ensuring that administrators and developers have access to comprehensive security insights necessary for maintaining system integrity and compliance.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2026-43131 drm/amd/pm: Fix null pointer dereference issue 4.7AI Medium AI 2026-05-06
CVE-2026-43132 dm-verity: correctly handle dm_bufio_client_create() failure 5.5AI Medium AI 2026-05-06
CVE-2026-43130 iommu/vt-d: Flush dev-IOTLB only when PCIe device is accessible in scalable mode 5.5AI Medium AI 2026-05-06
CVE-2026-43129 ima: verify the previous kernel's IMA buffer lies in addressable RAM 5.5AI Medium AI 2026-05-06
CVE-2026-43127 ntfs3: fix circular locking dependency in run_unpack_ex 5.5AI Medium AI 2026-05-06
CVE-2026-43128 RDMA/umem: Fix double dma_buf_unpin in failure path 7.8 High 2026-05-06
CVE-2026-43126 ALSA: mixer: oss: Add card disconnect checkpoints 7.8 High 2026-05-06
CVE-2026-43125 dlm: validate length in dlm_search_rsb_tree 9.8 Critical 2026-05-06
CVE-2026-43124 pstore: ram_core: fix incorrect success return when vmap() fails 5.5AI Medium AI 2026-05-06
CVE-2026-43123 fbcon: check return value of con2fb_acquire_newinfo() 4.7AI Medium AI 2026-05-06
CVE-2026-43121 io_uring/zcrx: fix user_ref race between scrub and refill paths 7.5AI High AI 2026-05-06
CVE-2025-71274 rpmsg: core: fix race in driver_override_show() and use core helper 7.8 High 2026-05-06
CVE-2025-71273 wifi: rtw88: Use devm_kmemdup() in rtw_set_supported_band() 7.8AI High AI 2026-05-06
CVE-2025-71272 most: core: fix resource leak in most_register_interface error paths - - AI 2026-05-06
CVE-2025-71271 hfsplus: ensure sb->s_fs_info is always cleaned up 5.5AI Medium AI 2026-05-06
CVE-2026-43120 RDMA/irdma: Fix double free related to rereg_user_mr 7.8 High 2026-05-06
CVE-2026-43118 btrfs: fix zero size inode with non-zero size after log replay 5.5AI Medium AI 2026-05-06
CVE-2026-43119 Bluetooth: hci_sync: annotate data-races around hdev->req_status 6.2AI Medium AI 2026-05-06
CVE-2026-43117 btrfs: tracepoints: get correct superblock from dentry in event btrfs_sync_file() 9.1 Critical 2026-05-06
CVE-2026-43116 netfilter: ctnetlink: ensure safe access to master conntrack 7.8 High 2026-05-06
CVE-2026-43115 srcu: Use irq_work to start GP in tiny SRCU 5.5AI Medium AI 2026-05-06
CVE-2026-43114 netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry 9.4 Critical 2026-05-06
CVE-2026-43113 wifi: wl1251: validate packet IDs before indexing tx_frames 8.8 High 2026-05-06
CVE-2026-43112 fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath 8.8 High 2026-05-06
CVE-2026-43111 HID: roccat: fix use-after-free in roccat_report_event 7.8 High 2026-05-06
CVE-2026-43109 x86: shadow stacks: proper error handling for mmap lock 7.1AI High AI 2026-05-06
CVE-2026-43110 wifi: brcmfmac: validate bsscfg indices in IF events 8.8 High 2026-05-06
CVE-2026-43108 soc: qcom: pd-mapper: Fix element length in servreg_loc_pfr_req_ei 7.5AI High AI 2026-05-06
CVE-2026-43107 xfrm: account XFRMA_IF_ID in aevent size calculation 7.1AI High AI 2026-05-06
CVE-2026-43105 drm/vc4: Fix memory leak of BO array in hang state 5.5AI Medium AI 2026-05-06

All 18084 known CVE vulnerabilities affecting Linux with full Chinese analysis, references, and POCs where available.