Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 18084

All 18084 CVE vulnerabilities found in Linux, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumeration (CWE) vulnerabilities affecting the Linux operating system product. It aggregates security data related to weaknesses within the kernel, distributions, and associated utilities provided by various Linux vendors and maintainers. The collection encompasses a wide range of vulnerability types, including memory corruption issues, privilege escalation flaws, information leaks, and denial-of-service conditions. The database covers historical records spanning several decades, reflecting the evolution of the Linux ecosystem from its early releases to modern stable and development branches. This extensive time range allows for the analysis of long-term security trends and the remediation status of legacy systems that remain in production environments. Visitors to this resource can track vendor-specific advisories to stay informed about patches and updates released by major Linux distribution maintainers. You can also use the page to understand the characteristics and impact of specific weakness classes as they manifest in the Linux environment. Additionally, the interface supports looking up a specific product’s vulnerability history, enabling security professionals to assess risk exposure and prioritize mitigation efforts for critical infrastructure components. The data is organized to facilitate efficient searching and correlation between weakness identifiers and affected software versions, ensuring that administrators and developers have access to comprehensive security insights necessary for maintaining system integrity and compliance.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2026-31737 net: ftgmac100: fix ring allocation unwind on open failure 6.1 - 2026-05-01
CVE-2026-31736 net: ethernet: mtk_ppe: avoid NULL deref when gmac0 is disabled 7.5 - 2026-05-01
CVE-2026-31735 iommupt: Fix short gather if the unmap goes into a large mapping 8.8 High 2026-05-01
CVE-2026-31733 sched_ext: Fix stale direct dispatch state in ddsp_dsq_id 5.5 - 2026-05-01
CVE-2026-31734 sched_ext: Fix is_bpf_migration_disabled() false negative on non-PREEMPT_RCU 6.1 - 2026-05-01
CVE-2026-31732 gpio: Fix resource leaks on errors in gpiochip_add_data_with_key() 5.5 - 2026-05-01
CVE-2026-31730 misc: fastrpc: possible double-free of cctx->remote_heap 7.8 High 2026-05-01
CVE-2026-31731 thermal: core: Address thermal zone removal races with resume 7.8 High 2026-05-01
CVE-2026-31729 usb: typec: ucsi: validate connector number in ucsi_notify_common() 5.5 - 2026-05-01
CVE-2026-31728 usb: gadget: u_ether: Fix race between gether_disconnect and eth_stop 4.7 - 2026-05-01
CVE-2026-31727 usb: gadget: u_ether: Fix NULL pointer deref in eth_get_drvinfo 5.5 - 2026-05-01
CVE-2026-31726 usb: gadget: uvc: fix NULL pointer dereference during unbind race 4.7 - 2026-05-01
CVE-2026-31725 usb: gadget: f_ecm: Fix net_device lifecycle with device_move 7.3 - 2026-05-01
CVE-2026-31724 usb: gadget: f_eem: Fix net_device lifecycle with device_move 7.1 - 2026-05-01
CVE-2026-31723 usb: gadget: f_subset: Fix net_device lifecycle with device_move 7.3 - 2026-05-01
CVE-2026-31722 usb: gadget: f_rndis: Fix net_device lifecycle with device_move 7.3 - 2026-05-01
CVE-2026-31720 usb: gadget: f_uac1_legacy: validate control request size 6.1 - 2026-05-01
CVE-2026-31721 usb: gadget: f_hid: move list and spinlock inits from bind to alloc 7.8 - 2026-05-01
CVE-2026-31718 ksmbd: fix use-after-free in __ksmbd_close_fd() via durable scavenger 9.8 Critical 2026-05-01
CVE-2026-31719 crypto: krb5enc - fix async decrypt skipping hash verification 7.5 High 2026-05-01
CVE-2026-31717 ksmbd: validate owner of durable handle on reconnect 8.8 High 2026-05-01
CVE-2026-31716 fs/ntfs3: validate rec->used in journal-replay file record check 7.8 High 2026-05-01
CVE-2026-31715 f2fs: fix UAF caused by decrementing sbi->nr_pages[] in f2fs_write_end_io() 5.5 - 2026-05-01
CVE-2026-31714 f2fs: fix to avoid memory leak in f2fs_rename() 5.5 - 2026-05-01
CVE-2026-31713 fuse: abort on fatal signal during sync init 6.5 - 2026-05-01
CVE-2026-31712 ksmbd: require minimum ACE size in smb_check_perm_dacl() 8.3 High 2026-05-01
CVE-2026-31711 smb: server: fix active_num_conn leak on transport allocation failure 7.5 High 2026-05-01
CVE-2026-31710 smb: client: fix dir separator in SMB1 UNIX mounts 5.5 - 2026-05-01
CVE-2026-31709 smb: client: validate the whole DACL before rewriting it in cifsacl 8.8 High 2026-05-01
CVE-2026-31708 smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path 8.1 High 2026-05-01

All 18084 known CVE vulnerabilities affecting Linux with full Chinese analysis, references, and POCs where available.