Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17978

Browse all 17978 CVE security advisories affecting Linux. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Linux serves as the foundational operating system for the majority of internet servers, cloud infrastructure, and embedded devices, powering critical global digital services. Its open-source nature and widespread deployment have historically exposed it to diverse vulnerability classes, including remote code execution, buffer overflows, and privilege escalation flaws within kernel modules and system utilities. While the project maintains rigorous security practices, the sheer volume of code contributes to a high cumulative count of recorded Common Vulnerabilities and Exposures, currently exceeding eleven thousand. Notable incidents often stem from misconfigurations or unpatched legacy components rather than fundamental architectural failures. The community responds rapidly to disclosed threats, yet the extensive attack surface necessitates continuous vigilance. Administrators must prioritize regular updates and strict access controls to mitigate risks associated with this ubiquitous platform, ensuring stability across both enterprise and consumer environments.

CVE ID Title CVSS Severity Published
CVE-2026-46105 scsi: mpt3sas: Limit NVMe request size to 2 MiB — Linux 7.8 High 2026-05-28
CVE-2026-46104 selinux: use sk blob accessor in socket permission helpers — Linux - - 2026-05-28
CVE-2026-46103 can: ucan: fix devres lifetime — Linux - - 2026-05-27
CVE-2026-46102 net: strparser: fix skb_head leak in strp_abort_strp() — Linux 7.5 High 2026-05-27
CVE-2026-46101 netfilter: reject zero shift in nft_bitwise — Linux - - 2026-05-27
CVE-2026-46100 fs: afs: revert mmap_prepare() change — Linux 7.8 High 2026-05-27
CVE-2026-46099 net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels — Linux 8.1 High 2026-05-27
CVE-2026-46098 net: caif: clear client service pointer on teardown — Linux - - 2026-05-27
CVE-2026-46097 Input: edt-ft5x06 - fix use-after-free in debugfs teardown — Linux - - 2026-05-27
CVE-2026-46096 tpm2-sessions: Fix missing tpm_buf_destroy() in tpm2_read_public() — Linux - - 2026-05-27
CVE-2026-46095 md/md-llbitmap: raise barrier before state machine transition — Linux - - 2026-05-27
CVE-2026-46094 ext4: fix bounds check in check_xattrs() to prevent out-of-bounds access — Linux - - 2026-05-27
CVE-2026-46093 mm/vmalloc: take vmap_purge_lock in shrinker — Linux 7.8 High 2026-05-27
CVE-2026-46092 wifi: rtw88: check for PCI upstream bridge existence — Linux - - 2026-05-27
CVE-2026-46091 media: rc: igorplugusb: heed coherency rules — Linux - - 2026-05-27
CVE-2026-46090 ALSA: aloop: Fix peer runtime UAF during format-change stop — Linux 7.8 High 2026-05-27
CVE-2026-46089 zram: do not forget to endio for partial discard requests — Linux - - 2026-05-27
CVE-2026-46088 ALSA: control: Validate buf_len before strnlen() in snd_ctl_elem_init_enum_names() — Linux - - 2026-05-27
CVE-2026-46087 mm/damon/stat: fix memory leak on damon_start() failure in damon_stat_start() — Linux - - 2026-05-27
CVE-2026-46086 net: bridge: use a stable FDB dst snapshot in RCU readers — Linux - - 2026-05-27
CVE-2026-46085 rxrpc: Fix rxkad crypto unalignment handling — Linux 7.5 High 2026-05-27
CVE-2026-46084 RDMA/mana_ib: Disable RX steering on RSS QP destroy — Linux - - 2026-05-27
CVE-2026-46083 spi: fix resource leaks on device setup failure — Linux - - 2026-05-27
CVE-2026-46082 KVM: SVM: Inject #UD for INVLPGA if EFER.SVME=0 — Linux - - 2026-05-27
CVE-2026-46081 crypto: acomp - fix wrong pointer stored by acomp_save_req() — Linux 7.8 High 2026-05-27
CVE-2026-46080 ocfs2: split transactions in dio completion to avoid credit exhaustion — Linux - - 2026-05-27
CVE-2026-46079 rbd: fix null-ptr-deref when device_add_disk() fails — Linux - - 2026-05-27
CVE-2026-46078 erofs: fix the out-of-bounds nameoff handling for trailing dirents — Linux 7.1 High 2026-05-27
CVE-2026-46077 crypto: atmel-tdes - fix DMA sync direction — Linux - - 2026-05-27
CVE-2026-46076 KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 — Linux 7.9 High 2026-05-27

This page lists every published CVE security advisory associated with Linux. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.