Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17855

All 17855 CVE vulnerabilities found in Linux, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumeration (CWE) vulnerabilities affecting the Linux operating system product. It aggregates security data related to weaknesses within the kernel, distributions, and associated utilities provided by various Linux vendors and maintainers. The collection encompasses a wide range of vulnerability types, including memory corruption issues, privilege escalation flaws, information leaks, and denial-of-service conditions. The database covers historical records spanning several decades, reflecting the evolution of the Linux ecosystem from its early releases to modern stable and development branches. This extensive time range allows for the analysis of long-term security trends and the remediation status of legacy systems that remain in production environments. Visitors to this resource can track vendor-specific advisories to stay informed about patches and updates released by major Linux distribution maintainers. You can also use the page to understand the characteristics and impact of specific weakness classes as they manifest in the Linux environment. Additionally, the interface supports looking up a specific product’s vulnerability history, enabling security professionals to assess risk exposure and prioritize mitigation efforts for critical infrastructure components. The data is organized to facilitate efficient searching and correlation between weakness identifiers and affected software versions, ensuring that administrators and developers have access to comprehensive security insights necessary for maintaining system integrity and compliance.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2026-74747 ipvs: revalidate ihl to prevent out-of-bounds access 7.8 High 2026-08-26
CVE-2026-74746 netfilter: flowtable: publish GC-visible tuple last 9.8 Critical 2026-08-26
CVE-2026-74744 ipvlan: inherit needed_headroom and needed_tailroom from phy_dev 9.8 Critical 2026-08-26
CVE-2026-74745 eth: bnxt: avoid deadlock when canceling IRQ affinity notifier 7.5 High 2026-08-26
CVE-2026-74742 veth: fix queue index used to wake the peer txq in veth_poll 7.5 High 2026-08-26
CVE-2026-74743 macvlan: inherit needed_headroom and needed_tailroom from lowerdev 9.8 Critical 2026-08-26
CVE-2026-74741 net: ngbe: fix NULL pointer dereference in non-MSI-X interrupt enabling 7.5 High 2026-08-26
CVE-2026-74739 net/sched: cls_u32: skip hash tables in u32_bind_class() 7.8 High 2026-08-26
CVE-2026-74740 net/sched: act_api: fix TOCTOU NULL deref on a->goto_chain - - 2026-08-26
CVE-2026-74738 regmap: sdw-mbq: don't call an unset readable_reg callback - - 2026-08-26
CVE-2026-74737 net: ethernet: ti: am65-cpsw-nuss: Fix port_id extraction from SRC TAG 9.8 Critical 2026-08-26
CVE-2026-74736 net/sched: cls_bpf: reject dev-bound programs bound to a different device 7.8 High 2026-08-26
CVE-2026-74734 firewire: ohci: fix NULL pointer dereference in ar_context_release - - 2026-08-26
CVE-2026-74735 l2tp: fix tunnel and session refcount leak on seq_file release - - 2026-08-26
CVE-2026-74733 gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock 7.8 High 2026-08-22
CVE-2026-74731 sched_ext: Skip sub-disable teardown for never-linked sub-schedulers 7.8 High 2026-08-22
CVE-2026-74730 NFS: Pin the 'struct nfs_server' during a FREE_STATEID call 9.8 Critical 2026-08-22
CVE-2026-74729 soc: aspeed: lpc-snoop: Fix usercopy overflow in snoop_file_read - - 2026-08-22
CVE-2026-74727 ovpn: skip rehash for peers already removed from by_id 9.8 Critical 2026-08-22
CVE-2026-74728 xfs: handle NULL b_addr in xfs_buf_free - - 2026-08-22
CVE-2026-74726 bonding: alb: re-check primary_is_promisc under RTNL in bond_alb_monitor 7.3 High 2026-08-22
CVE-2026-74725 enic: fix tx_hang_reset use-after-free on device removal 7.8 High 2026-08-22
CVE-2026-74724 ipvs: avoid out-of-bounds write in ip_vs_nat_icmp 7.8 High 2026-08-22
CVE-2026-74723 btrfs: lzo: reject inline extents without valid headers 9.8 Critical 2026-08-22
CVE-2026-74722 btrfs: fix memory leak in btrfs_do_encoded_write() - - 2026-08-22
CVE-2026-74721 accel/amxdna: Fix page-insertion errors in amdxdna_insert_pages() 7.8 High 2026-08-22
CVE-2026-74719 net/smc: fix qentry overwrite for CONFIRM_LINK and ADD_LINK_CONT in smc_llc_event_handler() - - 2026-08-22
CVE-2026-74720 bpf: Preserve pointer state for commuted arithmetic 7.8 High 2026-08-22
CVE-2026-74718 devlink: fix net namespace reference leak in reload - - 2026-08-22
CVE-2026-74717 net/mlx5: fw_tracer, return NULL on create error 7.5 High 2026-08-22

All 17855 known CVE vulnerabilities affecting Linux with full Chinese analysis, references, and POCs where available.