Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17858

All 17858 CVE vulnerabilities found in Linux, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumeration (CWE) vulnerabilities affecting the Linux operating system product. It aggregates security data related to weaknesses within the kernel, distributions, and associated utilities provided by various Linux vendors and maintainers. The collection encompasses a wide range of vulnerability types, including memory corruption issues, privilege escalation flaws, information leaks, and denial-of-service conditions. The database covers historical records spanning several decades, reflecting the evolution of the Linux ecosystem from its early releases to modern stable and development branches. This extensive time range allows for the analysis of long-term security trends and the remediation status of legacy systems that remain in production environments. Visitors to this resource can track vendor-specific advisories to stay informed about patches and updates released by major Linux distribution maintainers. You can also use the page to understand the characteristics and impact of specific weakness classes as they manifest in the Linux environment. Additionally, the interface supports looking up a specific product’s vulnerability history, enabling security professionals to assess risk exposure and prioritize mitigation efforts for critical infrastructure components. The data is organized to facilitate efficient searching and correlation between weakness identifiers and affected software versions, ensuring that administrators and developers have access to comprehensive security insights necessary for maintaining system integrity and compliance.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2026-98868 dm-pcache: reject a kset that overruns its segment - - 2026-10-18
CVE-2026-98867 dm-pcache: bound the logical key offset from persistent memory - - 2026-10-18
CVE-2026-98866 sched/cache: Introduce task_struct->sched_cache_grp to fix UAF - - 2026-10-18
CVE-2026-98865 sched_ext: Don't run ops.dequeue() with a DSQ lock held - - 2026-10-18
CVE-2026-98864 sched_ext: Wait for SCX_OPSS_DISPATCHING before reenqueueing a task - - 2026-10-18
CVE-2026-98863 KVM: x86: Re-pend GET_NESTED_STATE_PAGES if getting said pages fails - - 2026-10-18
CVE-2026-98862 audit: fix exe mark UAF in kill_rules() - - 2026-10-18
CVE-2026-98861 fprobe: Use guard(rcu_sched_notrace) and check rcu_is_watching() - - 2026-10-18
CVE-2026-98860 HID: bpf: cast size to ssize_t when checking hid_bpf_hw_request - - 2026-10-18
CVE-2026-98859 HID: multitouch: stop the release timer from being rearmed on remove - - 2026-10-18
CVE-2026-98858 io_uring: fix task_work add use-after-free with SQPOLL - - 2026-10-18
CVE-2026-98857 ipvs: bound LBLCR and LBLC cache growth - - 2026-10-18
CVE-2026-98856 kprobes: Skip disarmed probes when checking optkprobe overlap - - 2026-10-18
CVE-2026-98855 of/overlay: put property on deadprops only after changeset add succeeds - - 2026-10-18
CVE-2026-98854 of/overlay: only treat a positive changeset id as registered - - 2026-10-18
CVE-2026-98853 net: gso: limit recursive IP-in-IP segmentation - - 2026-10-18
CVE-2026-98852 net: extend IPv6 exthdr detection of tunneled packets - - 2026-10-18
CVE-2026-98851 netfilter: nft_flow_offload: drop flowtable reference on init error path - - 2026-10-18
CVE-2026-98850 net/packet: prevent TX_RING byte count overflow - - 2026-10-18
CVE-2026-98849 pfcp: fix socket lifetime on netdevice registration failure - - 2026-10-18
CVE-2026-98848 rtc: ac100: Assign .num before accessing .hws - - 2026-10-18
CVE-2026-98847 rtc: spear: initialize IRQ state before requesting alarm IRQ - - 2026-10-18
CVE-2026-98846 sctp: check RCV_SHUTDOWN after the sendmsg connect wait - - 2026-10-18
CVE-2026-98845 tpm: Disable TPM on null key name mismatch - - 2026-10-18
CVE-2026-98844 netfs: clear post-EOF pagecache when extending a file via write - - 2026-10-18
CVE-2026-98843 netfs: zero gaps in read-gaps folio to avoid writing back stale data - - 2026-10-18
CVE-2026-98842 module: fix lost error code from codetag_load_module() - - 2026-10-18
CVE-2026-98841 virt: vmgenid: set driver_data before registering notification handlers - - 2026-10-18
CVE-2026-98840 vc_screen: reload vc pointer before if (ret) in vcs_write() to avoid UAF - - 2026-10-18
CVE-2026-98839 vt: selection: Fix unsigned underflow and slab-out-of-bounds read in paste_selection() - - 2026-10-18

All 17858 known CVE vulnerabilities affecting Linux with full Chinese analysis, references, and POCs where available.