Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

Linux — Vulnerabilities & Security Advisories 11726

Browse all 11726 CVE security advisories affecting Linux. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Linux serves as the foundational operating system for the majority of internet servers, cloud infrastructure, and embedded devices, powering critical global digital services. Its open-source nature and widespread deployment have historically exposed it to diverse vulnerability classes, including remote code execution, buffer overflows, and privilege escalation flaws within kernel modules and system utilities. While the project maintains rigorous security practices, the sheer volume of code contributes to a high cumulative count of recorded Common Vulnerabilities and Exposures, currently exceeding eleven thousand. Notable incidents often stem from misconfigurations or unpatched legacy components rather than fundamental architectural failures. The community responds rapidly to disclosed threats, yet the extensive attack surface necessitates continuous vigilance. Administrators must prioritize regular updates and strict access controls to mitigate risks associated with this ubiquitous platform, ensuring stability across both enterprise and consumer environments.

CVE IDTitleCVSSSeverityPublished
CVE-2026-43475 scsi: storvsc: Fix scheduling while atomic on PREEMPT_RT — Linux--2026-05-08
CVE-2026-43474 fs: init flags_valid before calling vfs_fileattr_get — Linux--2026-05-08
CVE-2026-43473 scsi: mpi3mr: Add NULL checks when resetting request and reply queues — Linux--2026-05-08
CVE-2026-43472 unshare: fix unshare_fs() handling — Linux--2026-05-08
CVE-2026-43471 scsi: ufs: core: Fix possible NULL pointer dereference in ufshcd_add_command_trace() — Linux--2026-05-08
CVE-2026-43470 nfs: return EISDIR on nfs3_proc_create if d_alias is a dir — Linux--2026-05-08
CVE-2026-43469 xprtrdma: Decrement re_receiving on the early exit paths — Linux--2026-05-08
CVE-2026-43468 net/mlx5: Fix deadlock between devlink lock and esw->wq — Linux--2026-05-08
CVE-2026-43466 net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery — Linux--2026-05-08
CVE-2026-43467 net/mlx5: Fix crash when moving to switchdev mode — Linux--2026-05-08
CVE-2026-43465 net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ — Linux--2026-05-08
CVE-2026-43464 net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ — Linux--2026-05-08
CVE-2026-43462 net: spacemit: Fix error handling in emac_tx_mem_map() — Linux--2026-05-08
CVE-2026-43463 rxrpc, afs: Fix missing error pointer check after rxrpc_kernel_lookup_peer() — Linux--2026-05-08
CVE-2026-43461 spi: amlogic: spifc-a4: Fix DMA mapping error handling — Linux--2026-05-08
CVE-2026-43460 spi: rockchip-sfc: Fix double-free in remove() callback — Linux--2026-05-08
CVE-2026-43459 ASoC: soc-core: flush delayed work before removing DAIs and widgets — Linux--2026-05-08
CVE-2026-43458 serial: caif: hold tty->link reference in ldisc_open and ser_release — Linux--2026-05-08
CVE-2026-43457 mctp: i2c: fix skb memory leak in receive path — Linux--2026-05-08
CVE-2026-43456 bonding: fix type confusion in bond_setup_by_slave() — Linux--2026-05-08
CVE-2026-43454 netfilter: nf_tables: Fix for duplicate device in netdev hooks — Linux--2026-05-08
CVE-2026-43455 mctp: route: hold key->lock in mctp_flow_prepare_output() — Linux--2026-05-08
CVE-2026-43453 netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() — Linux--2026-05-08
CVE-2026-43452 netfilter: x_tables: guard option walkers against 1-byte tail reads — Linux--2026-05-08
CVE-2026-43451 netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path — Linux--2026-05-08
CVE-2026-43450 netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() — Linux--2026-05-08
CVE-2026-43448 nvme-pci: Fix race bug in nvme_poll_irqdisable() — Linux--2026-05-08
CVE-2026-43449 nvme-pci: Fix slab-out-of-bounds in nvme_dbbuf_set — Linux--2026-05-08
CVE-2026-43447 iavf: fix PTP use-after-free during reset — Linux--2026-05-08
CVE-2026-43445 e1000/e1000e: Fix leak in DMA error cleanup — Linux--2026-05-08

This page lists every published CVE security advisory associated with Linux. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.