Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17978

Browse all 17978 CVE security advisories affecting Linux. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Linux serves as the foundational operating system for the majority of internet servers, cloud infrastructure, and embedded devices, powering critical global digital services. Its open-source nature and widespread deployment have historically exposed it to diverse vulnerability classes, including remote code execution, buffer overflows, and privilege escalation flaws within kernel modules and system utilities. While the project maintains rigorous security practices, the sheer volume of code contributes to a high cumulative count of recorded Common Vulnerabilities and Exposures, currently exceeding eleven thousand. Notable incidents often stem from misconfigurations or unpatched legacy components rather than fundamental architectural failures. The community responds rapidly to disclosed threats, yet the extensive attack surface necessitates continuous vigilance. Administrators must prioritize regular updates and strict access controls to mitigate risks associated with this ubiquitous platform, ensuring stability across both enterprise and consumer environments.

CVE ID Title CVSS Severity Published
CVE-2026-46285 mtd: docg3: fix use-after-free in docg3_release() — Linux - - 2026-06-08
CVE-2026-46284 mm/hugetlb: fix early boot crash on parameters without '=' separator — Linux - - 2026-06-08
CVE-2026-46283 tpm: Use kfree_sensitive() to free auth session in tpm_dev_release() — Linux - - 2026-06-08
CVE-2026-46282 iio: frequency: admv1013: fix NULL pointer dereference on str — Linux - - 2026-06-08
CVE-2026-46281 vmalloc: fix buffer overflow in vrealloc_node_align() — Linux - - 2026-06-08
CVE-2026-46280 lib: test_hmm: evict device pages on file close to avoid use-after-free — Linux 7.8 High 2026-06-08
CVE-2026-46279 mm/alloc_tag: clear codetag for pages allocated before page_ext initialization — Linux - - 2026-06-08
CVE-2026-46278 drm/imagination: Fix segfault when updating ftrace mask — Linux - - 2026-06-08
CVE-2026-46277 mm/zone_device: do not touch device folio after calling ->folio_free() — Linux 7.8 High 2026-06-08
CVE-2026-46276 drm/amdgpu: fix zero-size GDS range init on RDNA4 — Linux - - 2026-06-08
CVE-2026-46275 Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths — Linux 7.8 High 2026-06-08
CVE-2026-46274 io-wq: check that the predecessor is hashed in io_wq_remove_pending() — Linux 7.8 High 2026-06-08
CVE-2025-71315 drm/vkms: Convert to DRM's vblank timer — Linux - - 2026-06-08
CVE-2026-46273 ibmveth: Disable GSO for packets with small MSS — Linux 8.6 High 2026-06-03
CVE-2026-46272 coresight: tmc-etr: Fix race condition between sysfs and perf mode — Linux - - 2026-06-03
CVE-2026-46271 wifi: ath12k: do WoW offloads only on primary link — Linux 7.8 High 2026-06-03
CVE-2026-46270 power: supply: rt9455: Fix use-after-free in power_supply_changed() — Linux 8.4 High 2026-06-03
CVE-2026-46269 pinctrl: canaan: k230: Fix NULL pointer dereference when parsing devicetree — Linux - - 2026-06-03
CVE-2026-46268 PCI/P2PDMA: Fix p2pmem_alloc_mmap() warning condition — Linux - - 2026-06-03
CVE-2026-46267 nfc: hci: shdlc: Stop timers and work before freeing context — Linux - - 2026-06-03
CVE-2026-46266 inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP — Linux 9.1 Critical 2026-06-03
CVE-2026-46265 RDMA/hns: Fix WQ_MEM_RECLAIM warning — Linux 7.5 High 2026-06-03
CVE-2026-46264 drm/xe/pf: Fix sysfs initialization — Linux 8.8 High 2026-06-03
CVE-2026-46263 drm/amd/display: Fix out-of-bounds stream encoder index v3 — Linux 7.8 High 2026-06-03
CVE-2026-46262 ASoC: fsl_xcvr: Revert fix missing lock in fsl_xcvr_mode_put() — Linux - - 2026-06-03
CVE-2026-46261 spi: wpcm-fiu: Fix potential NULL pointer dereference in wpcm_fiu_probe() — Linux - - 2026-06-03
CVE-2026-46260 ipv6: Fix out-of-bound access in fib6_add_rt2node(). — Linux 7.8 High 2026-06-03
CVE-2026-46259 procfs: fix missing RCU protection when reading real_parent in do_task_stat() — Linux 7.8 High 2026-06-03
CVE-2026-46258 gpio: cdev: Avoid NULL dereference in linehandle_create() — Linux - - 2026-06-03
CVE-2026-46257 clocksource/drivers/timer-sp804: Fix an Oops when read_current_timer is called on ARM32 platforms where the SP804 is not registered as the sched_clock. — Linux - - 2026-06-03

This page lists every published CVE security advisory associated with Linux. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.