Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17422

All 17422 CVE vulnerabilities found in Linux, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumeration (CWE) vulnerabilities affecting the Linux operating system product. It aggregates security data related to weaknesses within the kernel, distributions, and associated utilities provided by various Linux vendors and maintainers. The collection encompasses a wide range of vulnerability types, including memory corruption issues, privilege escalation flaws, information leaks, and denial-of-service conditions. The database covers historical records spanning several decades, reflecting the evolution of the Linux ecosystem from its early releases to modern stable and development branches. This extensive time range allows for the analysis of long-term security trends and the remediation status of legacy systems that remain in production environments. Visitors to this resource can track vendor-specific advisories to stay informed about patches and updates released by major Linux distribution maintainers. You can also use the page to understand the characteristics and impact of specific weakness classes as they manifest in the Linux environment. Additionally, the interface supports looking up a specific product’s vulnerability history, enabling security professionals to assess risk exposure and prioritize mitigation efforts for critical infrastructure components. The data is organized to facilitate efficient searching and correlation between weakness identifiers and affected software versions, ensuring that administrators and developers have access to comprehensive security insights necessary for maintaining system integrity and compliance.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2026-99999 ipv4: validate checksum_start before completing checksum 9.3 Critical 2026-10-15
CVE-2026-98432 ipv4: free inet_opt and ireq_opt after an RCU grace period - - 2026-10-15
CVE-2026-98431 RDMA/uverbs: Fix mmap_lock/disassociation_lock circular dependency - - 2026-10-14
CVE-2026-98430 RDMA/efa: Keep admin queues alive while IRQ is registered - - 2026-10-14
CVE-2026-98429 RDMA/efa: Keep EQ resources alive while IRQ is registered - - 2026-10-14
CVE-2026-98427 net/sched: codel: bound the dropping loop per dequeue call - - 2026-10-14
CVE-2026-98428 ALSA: usb: 6fire: Avoid embedded URBs - - 2026-10-14
CVE-2026-98425 wifi: mac80211: don't warn when an IBSS has no channel to scan - - 2026-10-14
CVE-2026-98426 wifi: mwifiex: fix IRQ leak using wrong index in MSI-X error path - - 2026-10-14
CVE-2026-98424 wifi: cfg80211: undo netns switch if renaming the wiphy fails - - 2026-10-14
CVE-2026-98423 wifi: mac80211_hwsim: don't hand frames to mac80211 while stopping - - 2026-10-14
CVE-2026-98422 wifi: mac80211: reset the AP_VLAN tailroom counter on ifdown - - 2026-10-14
CVE-2026-98421 wifi: mac80211: require a peer station for TDLS setup confirm - - 2026-10-14
CVE-2026-98420 ksmbd: follow SMB2 session expiration semantics - - 2026-10-14
CVE-2026-98419 drop_monitor: fix out-of-bounds write in reset_per_cpu_data() - - 2026-10-14
CVE-2026-98417 net: xfrm: reject unrepresentable espintcp transport headers - - 2026-10-14
CVE-2026-98418 sched/core: Avoid false migration warning for proxy donors - - 2026-10-14
CVE-2026-98416 dmaengine: ti: k3-udma-glue: fix NULL dereference in k3_udma_glue_release_rx_chn() - - 2026-10-14
CVE-2026-98415 soc: samsung: exynos-pmu: fix use-after-free of interrupt generator node - - 2026-10-14
CVE-2026-98414 memcg: avoid charging the root memcg from obj_cgroup_charge_pages() - - 2026-10-14
CVE-2026-98412 power: sequencing: fix NULL-pointer dereference in pwrseq_unit_new() - - 2026-10-14
CVE-2026-98413 selinux: always fill AVC decision in avc_has_perm_noaudit() - - 2026-10-14
CVE-2026-98410 watchdog: da9063: fix suspend/resume handling of HW_RUNNING watchdog - - 2026-10-14
CVE-2026-98411 power: sequencing: fix NULL-pointer dereference in pwrseq_device_register() - - 2026-10-14
CVE-2026-98409 watchdog: rtd119x: Avoid division by zero - - 2026-10-14
CVE-2026-98407 wifi: rsi: fix heap OOB write on key removal - - 2026-10-14
CVE-2026-98408 watchdog: rzv2h: Avoid division by zero - - 2026-10-14
CVE-2026-98406 wifi: mac80211: avoid WARN in set_bitrate_mask when sdata not in driver - - 2026-10-14
CVE-2026-98405 smb: client: fix missing iov bounds check in parse_posix_sids() - - 2026-10-14
CVE-2026-98404 drm/virtio: Fix a NULL vs ERR_PTR() bug in virtio_gpu_user_framebuffer_create() - - 2026-10-14

All 17422 known CVE vulnerabilities affecting Linux with full Chinese analysis, references, and POCs where available.