Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17978

Browse all 17978 CVE security advisories affecting Linux. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Linux serves as the foundational operating system for the majority of internet servers, cloud infrastructure, and embedded devices, powering critical global digital services. Its open-source nature and widespread deployment have historically exposed it to diverse vulnerability classes, including remote code execution, buffer overflows, and privilege escalation flaws within kernel modules and system utilities. While the project maintains rigorous security practices, the sheer volume of code contributes to a high cumulative count of recorded Common Vulnerabilities and Exposures, currently exceeding eleven thousand. Notable incidents often stem from misconfigurations or unpatched legacy components rather than fundamental architectural failures. The community responds rapidly to disclosed threats, yet the extensive attack surface necessitates continuous vigilance. Administrators must prioritize regular updates and strict access controls to mitigate risks associated with this ubiquitous platform, ensuring stability across both enterprise and consumer environments.

CVE ID Title CVSS Severity Published
CVE-2026-53007 ice: fix potential NULL pointer deref in error path of ice_set_ringparam() — Linux - - 2026-06-24
CVE-2026-53006 ipv6: fix possible UAF in icmpv6_rcv() — Linux 9.8 Critical 2026-06-24
CVE-2026-53005 af_unix: Drop all SCM attributes for SOCKMAP. — Linux 7.8 High 2026-06-24
CVE-2026-53004 sctp: fix OOB write to userspace in sctp_getsockopt_peer_auth_chunks — Linux - - 2026-06-24
CVE-2026-53003 pppoe: drop PFC frames — Linux 7.5 High 2026-06-24
CVE-2026-53001 netfilter: xtables: restrict several matches to inet family — Linux - - 2026-06-24
CVE-2026-53002 netfilter: conntrack: remove sprintf usage — Linux 9.8 Critical 2026-06-24
CVE-2026-53000 netfilter: nat: use kfree_rcu to release ops — Linux 7.8 High 2026-06-24
CVE-2026-52999 netfilter: nfnetlink_osf: fix out-of-bounds read on option matching — Linux 9.1 Critical 2026-06-24
CVE-2026-52998 netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check — Linux 7.5 High 2026-06-24
CVE-2026-52997 net/sched: sch_dualpi2: drain both C-queue and L-queue in dualpi2_change() — Linux - - 2026-06-24
CVE-2026-52996 ksmbd: fix durable fd leak on ClientGUID mismatch in durable v2 open — Linux - - 2026-06-24
CVE-2026-52995 net/rds: zero per-item info buffer before handing it to visitors — Linux - - 2026-06-24
CVE-2026-52994 vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting — Linux - - 2026-06-24
CVE-2026-52992 fs/adfs: validate nzones in adfs_validate_bblk() — Linux - - 2026-06-24
CVE-2026-52993 tipc: fix double-free in tipc_buf_append() — Linux 9.8 Critical 2026-06-24
CVE-2026-52991 sched/psi: fix race between file release and pressure write — Linux 7.8 High 2026-06-24
CVE-2026-52990 fsnotify: fix inode reference leak in fsnotify_recalc_mask() — Linux - - 2026-06-24
CVE-2026-52988 netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase — Linux 7.1 High 2026-06-24
CVE-2026-52989 nvmet-tcp: propagate nvmet_tcp_build_pdu_iovec() errors to its callers — Linux 9.8 Critical 2026-06-24
CVE-2026-52987 drm/amdgpu: avoid double drm_exec_fini() in userq validate — Linux 7.8 High 2026-06-24
CVE-2026-52986 netfilter: nf_conntrack_sip: don't use simple_strtoul — Linux 9.8 Critical 2026-06-24
CVE-2026-52985 netdevsim: zero initialize struct iphdr in dummy sk_buff — Linux - - 2026-06-24
CVE-2026-52984 net/sched: netem: fix queue limit check to include reordered packets — Linux - - 2026-06-24
CVE-2026-52982 net: usb: rtl8150: fix use-after-free in rtl8150_start_xmit() — Linux 9.8 Critical 2026-06-24
CVE-2026-52983 net: airoha: fix BQL imbalance in TX path — Linux 7.5 High 2026-06-24
CVE-2026-52981 neigh: let neigh_xmit take skb ownership — Linux 7.5 High 2026-06-24
CVE-2026-52979 net: psp: check for device unregister when creating assoc — Linux - - 2026-06-24
CVE-2026-52980 sched/fair: Clear rel_deadline when initializing forked entities — Linux - - 2026-06-24
CVE-2026-52978 net: psp: require admin permission for dev-set and key-rotate — Linux - - 2026-06-24

This page lists every published CVE security advisory associated with Linux. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.