Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17980

Browse all 17980 CVE security advisories affecting Linux. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Linux serves as the foundational operating system for the majority of internet servers, cloud infrastructure, and embedded devices, powering critical global digital services. Its open-source nature and widespread deployment have historically exposed it to diverse vulnerability classes, including remote code execution, buffer overflows, and privilege escalation flaws within kernel modules and system utilities. While the project maintains rigorous security practices, the sheer volume of code contributes to a high cumulative count of recorded Common Vulnerabilities and Exposures, currently exceeding eleven thousand. Notable incidents often stem from misconfigurations or unpatched legacy components rather than fundamental architectural failures. The community responds rapidly to disclosed threats, yet the extensive attack surface necessitates continuous vigilance. Administrators must prioritize regular updates and strict access controls to mitigate risks associated with this ubiquitous platform, ensuring stability across both enterprise and consumer environments.

CVE ID Title CVSS Severity Published
CVE-2026-43026 netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent — Linux 5.5 - 2026-05-01
CVE-2026-43025 netfilter: ctnetlink: ignore explicit helper on new expectations — Linux 7.3 High 2026-05-01
CVE-2026-43023 Bluetooth: SCO: fix race conditions in sco_sock_connect() — Linux 7.8 High 2026-05-01
CVE-2026-43024 netfilter: nf_tables: reject immediate NF_QUEUE verdict — Linux 5.5 - 2026-05-01
CVE-2026-43022 Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists — Linux 6.5 - 2026-05-01
CVE-2026-43020 Bluetooth: MGMT: validate LTK enc_size on load — Linux 8.1 - 2026-05-01
CVE-2026-43021 Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails — Linux 6.5 - 2026-05-01
CVE-2026-43019 Bluetooth: hci_conn: fix potential UAF in set_cig_params_sync — Linux 7.8 High 2026-05-01
CVE-2026-43017 Bluetooth: MGMT: validate mesh send advertising payload length — Linux 8.3 - 2026-05-01
CVE-2026-43018 Bluetooth: hci_event: fix potential UAF in hci_le_remote_conn_param_req_evt — Linux 8.8 High 2026-05-01
CVE-2026-43016 bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready(). — Linux 7.8 High 2026-05-01
CVE-2026-43014 net: macb: properly unregister fixed rate clocks — Linux 6.5 - 2026-05-01
CVE-2026-43015 net: macb: fix clk handling on PCI glue driver removal — Linux 7.8 - 2026-05-01
CVE-2026-43013 net/mlx5: lag: Check for LAG device before creating debugfs — Linux 5.5 - 2026-05-01
CVE-2026-43011 net/x25: Fix potential double free of skb — Linux 9.8 Critical 2026-05-01
CVE-2026-43012 net/mlx5: Fix switchdev mode rollback in case of failure — Linux 7.1 - 2026-05-01
CVE-2026-43010 bpf: Reject sleepable kprobe_multi programs at attach time — Linux 5.5 - 2026-05-01
CVE-2026-43009 bpf: Fix incorrect pruning due to atomic fetch precision tracking — Linux 7.8 High 2026-05-01
CVE-2026-43008 gpio: qixis-fpga: Fix error handling for devm_regmap_init_mmio() — Linux 5.5 - 2026-05-01
CVE-2026-43007 accel/qaic: Handle DBC deactivation if the owner went away — Linux 7.1 - 2026-05-01
CVE-2026-43006 io_uring/rsrc: reject zero-length fixed buffer import — Linux 7.1 High 2026-05-01
CVE-2026-43005 hwmon: (tps53679) Fix array access with zero-length block read — Linux 7.1 - 2026-05-01
CVE-2026-43004 spi: stm32-ospi: Fix resource leak in remove() callback — Linux 5.5 - 2026-05-01
CVE-2026-31785 drm/xe/xe_pagefault: Disallow writes to read-only VMAs — Linux 5.5 - 2026-05-01
CVE-2026-31784 drm/xe/pxp: Clear restart flag in pxp_start after jumping back — Linux 7.1 - 2026-05-01
CVE-2026-31783 spi: amlogic: spifc-a4: unregister ECC engine on probe failure and remove() callback — Linux 7.8 - 2026-05-01
CVE-2026-31782 perf/x86: Fix potential bad container_of in intel_pmu_hw_config — Linux 7.8 High 2026-05-01
CVE-2026-31781 drm/ioc32: stop speculation on the drm_compat_ioctl path — Linux 5.5 - 2026-05-01
CVE-2026-31779 wifi: iwlwifi: mvm: fix potential out-of-bounds read in iwl_mvm_nd_match_info_handler() — Linux 8.1 High 2026-05-01
CVE-2026-31780 wifi: wilc1000: fix u8 overflow in SSID scan buffer size calculation — Linux 7.8 High 2026-05-01

This page lists every published CVE security advisory associated with Linux. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.