Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 18084

All 18084 CVE vulnerabilities found in Linux, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumeration (CWE) vulnerabilities affecting the Linux operating system product. It aggregates security data related to weaknesses within the kernel, distributions, and associated utilities provided by various Linux vendors and maintainers. The collection encompasses a wide range of vulnerability types, including memory corruption issues, privilege escalation flaws, information leaks, and denial-of-service conditions. The database covers historical records spanning several decades, reflecting the evolution of the Linux ecosystem from its early releases to modern stable and development branches. This extensive time range allows for the analysis of long-term security trends and the remediation status of legacy systems that remain in production environments. Visitors to this resource can track vendor-specific advisories to stay informed about patches and updates released by major Linux distribution maintainers. You can also use the page to understand the characteristics and impact of specific weakness classes as they manifest in the Linux environment. Additionally, the interface supports looking up a specific product’s vulnerability history, enabling security professionals to assess risk exposure and prioritize mitigation efforts for critical infrastructure components. The data is organized to facilitate efficient searching and correlation between weakness identifiers and affected software versions, ensuring that administrators and developers have access to comprehensive security insights necessary for maintaining system integrity and compliance.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2026-43075 ocfs2: fix out-of-bounds write in ocfs2_write_end_inline 7.8 High 2026-05-06
CVE-2026-43074 eventpoll: defer struct eventpoll free to RCU grace period 7.8 High 2026-05-06
CVE-2026-43073 x86-64: rename misleadingly named '__copy_user_nocache()' function 7.7 - 2026-05-05
CVE-2026-43072 drm/vc4: platform_get_irq_byname() returns an int - - 2026-05-05
CVE-2026-43071 dcache: Limit the minimal number of bucket to two 9.1 Critical 2026-05-05
CVE-2026-43070 bpf: Reset register ID for BPF_END value tracking 7.8 High 2026-05-05
CVE-2026-43069 Bluetooth: hci_ll: Fix firmware leak on error path 4.0 - 2026-05-05
CVE-2026-43067 ext4: handle wraparound when searching for blocks for indirect mapped blocks 9.8 Critical 2026-05-05
CVE-2026-43068 ext4: avoid allocate block from corrupted group in ext4_mb_find_by_goal() - - 2026-05-05
CVE-2026-43066 ext4: fix iloc.bh leak in ext4_fc_replay_inode() error paths 5.0 - 2026-05-05
CVE-2026-43065 ext4: always drain queued discard work in ext4_mb_release() 7.1 - 2026-05-05
CVE-2026-43064 dmaengine: idxd: Fix not releasing workqueue on .release() 7.3 - 2026-05-05
CVE-2026-43063 xfs: don't irele after failing to iget in xfs_attri_recover_work 7.8 High 2026-05-05
CVE-2026-43062 Bluetooth: L2CAP: Fix type confusion in l2cap_ecred_reconf_rsp() 7.1 High 2026-05-05
CVE-2026-43061 serial: 8250: Fix TX deadlock when using DMA 5.5 - 2026-05-05
CVE-2026-43059 Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers 8.8 - 2026-05-05
CVE-2026-43060 netfilter: nft_ct: drop pending enqueued packets on removal 7.8 High 2026-05-05
CVE-2026-43058 media: vidtv: fix pass-by-value structs causing MSAN warnings 7.8 - 2026-05-02
CVE-2026-43057 net: correctly handle tunneled traffic on IPV6_CSUM GSO fallback 7.5 High 2026-05-01
CVE-2026-43056 net: mana: fix use-after-free in add_adev() error path 7.8 High 2026-05-01
CVE-2026-43055 scsi: target: file: Use kzalloc_flex for aio_cmd 7.5 High 2026-05-01
CVE-2026-43054 scsi: target: tcm_loop: Drain commands in target_reset handler 7.8 - 2026-05-01
CVE-2026-43053 xfs: close crash window in attr dabtree inactivation - - 2026-05-01
CVE-2026-43052 wifi: mac80211: check tdls flag in ieee80211_tdls_oper 7.3 - 2026-05-01
CVE-2026-43050 atm: lec: fix use-after-free in sock_def_readable() 6.3 - 2026-05-01
CVE-2026-43051 HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq 8.1 High 2026-05-01
CVE-2026-43049 HID: logitech-hidpp: Prevent use-after-free on force feedback initialisation failure 8.4 - 2026-05-01
CVE-2026-43047 HID: multitouch: Check to ensure report responses match the request 7.8 High 2026-05-01
CVE-2026-43048 HID: core: Mitigate potential OOB by removing bogus memset() 8.8 High 2026-05-01
CVE-2026-43046 btrfs: reject root items with drop_progress and zero drop_level 6.3 - 2026-05-01

All 18084 known CVE vulnerabilities affecting Linux with full Chinese analysis, references, and POCs where available.