目標達成 すべての支援者に感謝 — 100%達成しました！

目標: 1000 CNY · 調達済み: 1000 CNY

100.0%
コーヒーを一杯おごる

Linux 厂商漏洞列表 / CVE 中文分析 11726

Linux 厂商相关 11726 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。

Linux 作为广泛使用的开源操作系统内核，支撑着从嵌入式设备到超级计算机的众多基础设施。其历史漏洞多集中于内核提权、内存破坏及本地权限提升，远程代码执行相对较少。值得关注的是，Linux 拥有活跃的社区安全响应机制及 SELinux 等强制访问控制特性，有效缓解部分风险。尽管 CVE 数量庞大，但多数为配置不当或旧版遗留问题，整体生态通过持续补丁更新维持较高安全性。

上位製品 Linux: Linux kernel Linux Kernel linux_kernel util-linux kernel: Linux Kernal
CVE IDタイトルCVSS深刻度公開日
CVE-2026-43048 HID: core: Mitigate potential OOB by removing bogus memset() — Linux 8.8 High2026-05-01
CVE-2026-43046 btrfs: reject root items with drop_progress and zero drop_level — Linux 6.3 -2026-05-01
CVE-2026-43045 mshv: Fix error handling in mshv_region_pin — Linux 7.8 -2026-05-01
CVE-2026-43043 crypto: af-alg - fix NULL pointer dereference in scatterwalk — Linux 8.1 -2026-05-01
CVE-2026-43044 crypto: caam - fix DMA corruption on long hmac keys — Linux 7.8 High2026-05-01
CVE-2026-43042 mpls: add seqcount to protect the platform_label{,s} pair — Linux 7.1 High2026-05-01
CVE-2026-43041 net: qrtr: replace qrtr_tx_flow radix_tree with xarray to fix memory leak — Linux 7.1 -2026-05-01
CVE-2026-43040 net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-leak — Linux 6.5 -2026-05-01
CVE-2026-43039 net: ti: icssg-prueth: fix missing data copy and wrong recycle in ZC RX dispatch — Linux 9.8 Critical2026-05-01
CVE-2026-43038 ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() — Linux 9.8 Critical2026-05-01
CVE-2026-43036 net: use skb_header_pointer() for TCPv4 GSO frag_off check — Linux 7.5 -2026-05-01
CVE-2026-43037 ip6_tunnel: clear skb2->cb[] in ip4ip6_err() — Linux 9.8 Critical2026-05-01
CVE-2026-43035 net: sched: cls_api: fix tc_chain_fill_node to initialize tcm_info to zero to prevent an info-leak — Linux 6.5 -2026-05-01
CVE-2026-43033 crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption — Linux 7.8 High2026-05-01
CVE-2026-43034 bnxt_en: set backing store type from query type — Linux 7.8 -2026-05-01
CVE-2026-43032 NFC: pn533: bound the UART receive buffer — Linux--2026-05-01
CVE-2026-43030 bpf: Fix regsafe() for pointers to packet — Linux 7.8 High2026-05-01
CVE-2026-43031 net: xilinx: axienet: Fix BQL accounting for multi-BD TX packets — Linux 7.5 High2026-05-01
CVE-2026-43029 mptcp: fix soft lockup in mptcp_recvmsg() — Linux 7.5 High2026-05-01
CVE-2026-43028 netfilter: x_tables: ensure names are nul-terminated — Linux 7.1 High2026-05-01
CVE-2026-43027 netfilter: nf_conntrack_helper: pass helper to expect cleanup — Linux 7.1 -2026-05-01
CVE-2026-43026 netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent — Linux 5.5 -2026-05-01
CVE-2026-43025 netfilter: ctnetlink: ignore explicit helper on new expectations — Linux 7.3 High2026-05-01
CVE-2026-43023 Bluetooth: SCO: fix race conditions in sco_sock_connect() — Linux 7.8 High2026-05-01
CVE-2026-43024 netfilter: nf_tables: reject immediate NF_QUEUE verdict — Linux 5.5 -2026-05-01
CVE-2026-43022 Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists — Linux 6.5 -2026-05-01
CVE-2026-43020 Bluetooth: MGMT: validate LTK enc_size on load — Linux 8.1 -2026-05-01
CVE-2026-43021 Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails — Linux 6.5 -2026-05-01
CVE-2026-43019 Bluetooth: hci_conn: fix potential UAF in set_cig_params_sync — Linux 7.8 High2026-05-01
CVE-2026-43017 Bluetooth: MGMT: validate mesh send advertising payload length — Linux 8.3 -2026-05-01

本页汇总了 Linux 厂商截至目前公开的全部 11726 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。