Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17980

Browse all 17980 CVE security advisories affecting Linux. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Linux serves as the foundational operating system for the majority of internet servers, cloud infrastructure, and embedded devices, powering critical global digital services. Its open-source nature and widespread deployment have historically exposed it to diverse vulnerability classes, including remote code execution, buffer overflows, and privilege escalation flaws within kernel modules and system utilities. While the project maintains rigorous security practices, the sheer volume of code contributes to a high cumulative count of recorded Common Vulnerabilities and Exposures, currently exceeding eleven thousand. Notable incidents often stem from misconfigurations or unpatched legacy components rather than fundamental architectural failures. The community responds rapidly to disclosed threats, yet the extensive attack surface necessitates continuous vigilance. Administrators must prioritize regular updates and strict access controls to mitigate risks associated with this ubiquitous platform, ensuring stability across both enterprise and consumer environments.

CVE ID Title CVSS Severity Published
CVE-2026-46137 mptcp: pm: ADD_ADDR rtx: fix potential data-race — Linux 9.8 Critical 2026-05-28
CVE-2026-46136 wifi: mt76: mt7921: fix a potential clc buffer length underflow — Linux - - 2026-05-28
CVE-2026-46135 nvmet-tcp: fix race between ICReq handling and queue teardown — Linux 9.8 Critical 2026-05-28
CVE-2026-46134 platform/chrome: cros_ec_typec: Init mutex in Thunderbolt registration — Linux - - 2026-05-28
CVE-2026-46133 RDMA/rxe: Reject unknown opcodes before ICRC processing — Linux 7.5 High 2026-05-28
CVE-2026-46132 net: rtnetlink: zero ifla_vf_broadcast to avoid stack infoleak in rtnl_fill_vfinfo — Linux - - 2026-05-28
CVE-2026-46131 KVM: x86: check for nEPT/nNPT in slow flush hypercalls — Linux - - 2026-05-28
CVE-2026-46130 dm-verity-fec: fix reading parity bytes split across blocks (take 3) — Linux - - 2026-05-28
CVE-2026-46129 btrfs: fix double free in create_space_info() error path — Linux 7.8 High 2026-05-28
CVE-2026-46128 ipmi: Check event message buffer response for bad data — Linux - - 2026-05-28
CVE-2026-46127 RDMA/ocrdma: Don't NULL deref uctx on errors in ocrdma_copy_pd_uresp() — Linux - - 2026-05-28
CVE-2026-46126 RDMA/mana: Fix mana_destroy_wq_obj() cleanup in mana_ib_create_qp_rss() — Linux - - 2026-05-28
CVE-2026-46125 wifi: mac80211: remove station if connection prep fails — Linux 8.8 High 2026-05-28
CVE-2026-46124 isofs: validate block number from NFS file handle in isofs_export_iget — Linux 7.5 High 2026-05-28
CVE-2026-46123 Bluetooth: virtio_bt: clamp rx length before skb_put — Linux 7.7 High 2026-05-28
CVE-2026-46122 wifi: b43: enforce bounds check on firmware key index in b43_rx() — Linux - - 2026-05-28
CVE-2026-46121 mm/damon/sysfs-schemes: protect memcg_path kfree() with damon_sysfs_lock — Linux - - 2026-05-28
CVE-2026-46120 ip6_gre: Use cached t->net in ip6erspan_changelink(). — Linux 7.8 High 2026-05-28
CVE-2026-46119 libceph: Fix slab-out-of-bounds access in auth message processing — Linux 9.1 Critical 2026-05-28
CVE-2026-46118 pseries/papr-hvpipe: Fix null ptr deref in papr_hvpipe_dev_create_handle() — Linux - - 2026-05-28
CVE-2026-46117 RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() — Linux 7.8 High 2026-05-28
CVE-2026-46116 xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete — Linux 7.8 High 2026-05-28
CVE-2026-46115 block: add pgmap check to biovec_phys_mergeable — Linux 9.8 Critical 2026-05-28
CVE-2026-46114 RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads — Linux 7.5 High 2026-05-28
CVE-2026-46113 KVM: x86: Fix shadow paging use-after-free due to unexpected GFN — Linux 8.8 High 2026-05-28
CVE-2026-46112 RDMA/hns: Fix unlocked call to hns_roce_qp_remove() — Linux 7.8 High 2026-05-28
CVE-2026-46111 Bluetooth: hci_conn: fix potential UAF in create_big_sync — Linux 7.8 High 2026-05-28
CVE-2026-46110 net: stmmac: Prevent NULL deref when RX memory exhausted — Linux 7.5 High 2026-05-28
CVE-2026-46109 usb: ulpi: fix memory leak on ulpi_register() error paths — Linux - - 2026-05-28
CVE-2026-46108 ipmi:si: Return state to normal if message allocation fails — Linux - - 2026-05-28

This page lists every published CVE security advisory associated with Linux. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.