Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 18084

All 18084 CVE vulnerabilities found in Linux, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumeration (CWE) vulnerabilities affecting the Linux operating system product. It aggregates security data related to weaknesses within the kernel, distributions, and associated utilities provided by various Linux vendors and maintainers. The collection encompasses a wide range of vulnerability types, including memory corruption issues, privilege escalation flaws, information leaks, and denial-of-service conditions. The database covers historical records spanning several decades, reflecting the evolution of the Linux ecosystem from its early releases to modern stable and development branches. This extensive time range allows for the analysis of long-term security trends and the remediation status of legacy systems that remain in production environments. Visitors to this resource can track vendor-specific advisories to stay informed about patches and updates released by major Linux distribution maintainers. You can also use the page to understand the characteristics and impact of specific weakness classes as they manifest in the Linux environment. Additionally, the interface supports looking up a specific product’s vulnerability history, enabling security professionals to assess risk exposure and prioritize mitigation efforts for critical infrastructure components. The data is organized to facilitate efficient searching and correlation between weakness identifiers and affected software versions, ensuring that administrators and developers have access to comprehensive security insights necessary for maintaining system integrity and compliance.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2026-43045 mshv: Fix error handling in mshv_region_pin 7.8 - 2026-05-01
CVE-2026-43043 crypto: af-alg - fix NULL pointer dereference in scatterwalk 8.1 - 2026-05-01
CVE-2026-43044 crypto: caam - fix DMA corruption on long hmac keys 7.8 High 2026-05-01
CVE-2026-43042 mpls: add seqcount to protect the platform_label{,s} pair 7.1 High 2026-05-01
CVE-2026-43041 net: qrtr: replace qrtr_tx_flow radix_tree with xarray to fix memory leak 7.1 - 2026-05-01
CVE-2026-43040 net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-leak 6.5 - 2026-05-01
CVE-2026-43039 net: ti: icssg-prueth: fix missing data copy and wrong recycle in ZC RX dispatch 9.8 Critical 2026-05-01
CVE-2026-43038 ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() 9.8 Critical 2026-05-01
CVE-2026-43036 net: use skb_header_pointer() for TCPv4 GSO frag_off check 7.5 - 2026-05-01
CVE-2026-43037 ip6_tunnel: clear skb2->cb[] in ip4ip6_err() 9.8 Critical 2026-05-01
CVE-2026-43035 net: sched: cls_api: fix tc_chain_fill_node to initialize tcm_info to zero to prevent an info-leak 6.5 - 2026-05-01
CVE-2026-43033 crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption 7.8 High 2026-05-01
CVE-2026-43034 bnxt_en: set backing store type from query type 7.8 - 2026-05-01
CVE-2026-43032 NFC: pn533: bound the UART receive buffer - - 2026-05-01
CVE-2026-43030 bpf: Fix regsafe() for pointers to packet 7.8 High 2026-05-01
CVE-2026-43031 net: xilinx: axienet: Fix BQL accounting for multi-BD TX packets 7.5 High 2026-05-01
CVE-2026-43029 mptcp: fix soft lockup in mptcp_recvmsg() 7.5 High 2026-05-01
CVE-2026-43028 netfilter: x_tables: ensure names are nul-terminated 7.1 High 2026-05-01
CVE-2026-43027 netfilter: nf_conntrack_helper: pass helper to expect cleanup 7.1 - 2026-05-01
CVE-2026-43026 netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent 5.5 - 2026-05-01
CVE-2026-43025 netfilter: ctnetlink: ignore explicit helper on new expectations 7.3 High 2026-05-01
CVE-2026-43023 Bluetooth: SCO: fix race conditions in sco_sock_connect() 7.8 High 2026-05-01
CVE-2026-43024 netfilter: nf_tables: reject immediate NF_QUEUE verdict 5.5 - 2026-05-01
CVE-2026-43022 Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists 6.5 - 2026-05-01
CVE-2026-43020 Bluetooth: MGMT: validate LTK enc_size on load 8.1 - 2026-05-01
CVE-2026-43021 Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails 6.5 - 2026-05-01
CVE-2026-43019 Bluetooth: hci_conn: fix potential UAF in set_cig_params_sync 7.8 High 2026-05-01
CVE-2026-43017 Bluetooth: MGMT: validate mesh send advertising payload length 8.3 - 2026-05-01
CVE-2026-43018 Bluetooth: hci_event: fix potential UAF in hci_le_remote_conn_param_req_evt 8.8 High 2026-05-01
CVE-2026-43016 bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready(). 7.8 High 2026-05-01

All 18084 known CVE vulnerabilities affecting Linux with full Chinese analysis, references, and POCs where available.