Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17978

Browse all 17978 CVE security advisories affecting Linux. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Linux serves as the foundational operating system for the majority of internet servers, cloud infrastructure, and embedded devices, powering critical global digital services. Its open-source nature and widespread deployment have historically exposed it to diverse vulnerability classes, including remote code execution, buffer overflows, and privilege escalation flaws within kernel modules and system utilities. While the project maintains rigorous security practices, the sheer volume of code contributes to a high cumulative count of recorded Common Vulnerabilities and Exposures, currently exceeding eleven thousand. Notable incidents often stem from misconfigurations or unpatched legacy components rather than fundamental architectural failures. The community responds rapidly to disclosed threats, yet the extensive attack surface necessitates continuous vigilance. Administrators must prioritize regular updates and strict access controls to mitigate risks associated with this ubiquitous platform, ensuring stability across both enterprise and consumer environments.

CVE ID Title CVSS Severity Published
CVE-2026-53157 net: phonet: free phonet_device after RCU grace period — Linux - - 2026-06-25
CVE-2026-53155 mm/huge_memory: use correct flags for device private PMD entry — Linux - - 2026-06-25
CVE-2026-53156 nvmem: core: fix use-after-free bugs in error paths — Linux - - 2026-06-25
CVE-2026-53153 mm/list_lru: drain before clearing xarray entry on reparent — Linux 7.8 High 2026-06-25
CVE-2026-53154 mm/hugetlb: restore reservation on error in hugetlb folio copy paths — Linux - - 2026-06-25
CVE-2026-53152 mmc: dw_mmc-rockchip: Add missing private data for very old controllers — Linux - - 2026-06-25
CVE-2026-53151 rxrpc: Fix the ACK parser to extract the SACK table for parsing — Linux 9.8 Critical 2026-06-25
CVE-2026-53150 thunderbolt: Reject zero-length property entries in validator — Linux - - 2026-06-25
CVE-2026-53149 thunderbolt: Bound root directory content to block size — Linux - - 2026-06-25
CVE-2026-53147 thunderbolt: Validate XDomain request packet size before type cast — Linux 8.1 High 2026-06-25
CVE-2026-53148 thunderbolt: Clamp XDomain response data copy to allocation size — Linux - - 2026-06-25
CVE-2026-53146 thunderbolt: Limit XDomain response copy to actual frame size — Linux 7.1 High 2026-06-25
CVE-2026-53144 drm/amdkfd: fix NULL dereference in get_queue_ids() — Linux - - 2026-06-25
CVE-2026-53145 drm/gem: Try to fix change_handle ioctl, attempt 4 — Linux 7.8 High 2026-06-25
CVE-2026-53143 drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 — Linux - - 2026-06-25
CVE-2026-53142 drm/xe/display: fix oops in suspend/shutdown without display — Linux - - 2026-06-25
CVE-2026-53141 drm/v3d: Fix global performance monitor reference counting — Linux - - 2026-06-25
CVE-2026-53140 drm/v3d: Fix vaddr leak when indirect CSD has zeroed workgroups — Linux - - 2026-06-25
CVE-2026-53139 drm/v3d: Skip CSD when it has zeroed workgroups — Linux - - 2026-06-25
CVE-2026-53138 drm/amd/display: Bound VBIOS record-chain walk loops — Linux - - 2026-06-25
CVE-2026-53137 drm/amd/display: Clamp HDMI HDCP2 rx_id_list read to buffer size — Linux - - 2026-06-25
CVE-2026-53136 drm/amd/display: Clamp VBIOS HDMI retimer register count to array size — Linux - - 2026-06-25
CVE-2026-53135 drm/amd/display: Fix NULL deref and buffer over-read in SDP debugfs — Linux - - 2026-06-25
CVE-2026-53134 netfilter: nft_fib: fix stale stack leak via the OIFNAME register — Linux - - 2026-06-25
CVE-2026-53132 vsock/virtio: fix potential unbounded skb queue — Linux 7.1 High 2026-06-25
CVE-2026-53133 RDMA/umem: Fix truncation for block sizes >= 4G — Linux 7.8 High 2026-06-25
CVE-2026-53131 netfilter: require Ethernet MAC header before using eth_hdr() — Linux 9.4 Critical 2026-06-25
CVE-2026-53129 fs/mbcache: cancel shrink work before destroying the cache — Linux - - 2026-06-24
CVE-2026-53130 fs/omfs: reject s_sys_blocksize smaller than OMFS_DIR_START — Linux 7.8 High 2026-06-24
CVE-2026-53128 drbd: Balance RCU calls in drbd_adm_dump_devices() — Linux - - 2026-06-24

This page lists every published CVE security advisory associated with Linux. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.