Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

linux — Vulnerabilities & Security Advisories 12632

Browse all 12632 CVE security advisories affecting linux. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Linux serves as the foundational operating system for the majority of internet servers, cloud infrastructure, and embedded devices, powering critical global digital services. Its open-source nature and widespread deployment have historically exposed it to diverse vulnerability classes, including remote code execution, buffer overflows, and privilege escalation flaws within kernel modules and system utilities. While the project maintains rigorous security practices, the sheer volume of code contributes to a high cumulative count of recorded Common Vulnerabilities and Exposures, currently exceeding eleven thousand. Notable incidents often stem from misconfigurations or unpatched legacy components rather than fundamental architectural failures. The community responds rapidly to disclosed threats, yet the extensive attack surface necessitates continuous vigilance. Administrators must prioritize regular updates and strict access controls to mitigate risks associated with this ubiquitous platform, ensuring stability across both enterprise and consumer environments.

CVE IDTitleCVSSSeverityPublished
CVE-2026-53186 RDMA/srp: bound SRP_RSP sense copy by the received length — Linux--2026-06-25
CVE-2026-53187 RDMA/core: Validate cpu_id against nr_cpu_ids in DMAH alloc — Linux--2026-06-25
CVE-2026-53185 zram: fix use-after-free in zram_bvec_write_partial() — Linux--2026-06-25
CVE-2026-53184 udp: clear skb->dev before running a sockmap verdict — Linux--2026-06-25
CVE-2026-53183 mptcp: allow subflow rcv wnd to shrink — Linux--2026-06-25
CVE-2026-53182 wifi: nl80211: reject oversized EMA RNR lists — Linux--2026-06-25
CVE-2026-53181 vsock/vmci: fix sk_ack_backlog leak on failed handshake — Linux--2026-06-25
CVE-2026-53179 staging: rtl8723bs: fix buffer over-read in rtw_update_protection — Linux--2026-06-25
CVE-2026-53180 timers/migration: Fix livelock in tmigr_handle_remote_up() — Linux--2026-06-25
CVE-2026-53178 staging: rtl8723bs: rtw_mlme: add bounds checks before ie_length subtraction — Linux--2026-06-25
CVE-2026-53176 IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN — Linux--2026-06-25
CVE-2026-53177 bnxt_en: Fix NULL pointer dereference — Linux--2026-06-25
CVE-2026-53175 inet: frags: fix use-after-free caused by the fqdir_pre_exit() flush — Linux--2026-06-25
CVE-2026-53173 accel/ethosu: fix OOB write in ethosu_gem_cmdstream_copy_and_validate() — Linux--2026-06-25
CVE-2026-53174 ovl: keep err zero after successful ovl_cache_get() — Linux--2026-06-25
CVE-2026-53172 accel/ethosu: fix IFM region index out-of-bounds in command stream parser — Linux--2026-06-25
CVE-2026-53170 accel/ethosu: reject DMA commands with uninitialized length — Linux--2026-06-25
CVE-2026-53171 accel/ethosu: fix arithmetic issues in dma_length() — Linux--2026-06-25
CVE-2026-53169 accel/ethosu: reject NPU_OP_RESIZE commands from userspace — Linux--2026-06-25
CVE-2026-53168 fuse: reject fuse_notify() pagecache ops on directories — Linux--2026-06-25
CVE-2026-53167 fuse: limit FUSE_NOTIFY_RETRIEVE to uptodate folios — Linux--2026-06-25
CVE-2026-53166 futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock — Linux--2026-06-25
CVE-2026-53165 iomap: avoid potential null folio->mapping deref during error reporting — Linux--2026-06-25
CVE-2026-53164 iommu/dma: Do not try to iommu_map a 0 length region in swiotlb — Linux--2026-06-25
CVE-2026-53163 locking/rtmutex: Skip remove_waiter() when waiter is not enqueued — Linux--2026-06-25
CVE-2026-53161 misc: fastrpc: fix use-after-free of fastrpc_user in workqueue context — Linux--2026-06-25
CVE-2026-53162 memcg: use round-robin victim selection in refill_stock — Linux--2026-06-25
CVE-2026-53160 misc: fastrpc: fix use-after-free race in fastrpc_map_create — Linux--2026-06-25
CVE-2026-53159 misc: fastrpc: fix DMA address corruption due to find_vma misuse — Linux--2026-06-25
CVE-2026-53158 misc: fastrpc: Fix NULL pointer dereference in rpmsg callback — Linux--2026-06-25

This page lists every published CVE security advisory associated with linux. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.