Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17855

All 17855 CVE vulnerabilities found in Linux, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumeration (CWE) vulnerabilities affecting the Linux operating system product. It aggregates security data related to weaknesses within the kernel, distributions, and associated utilities provided by various Linux vendors and maintainers. The collection encompasses a wide range of vulnerability types, including memory corruption issues, privilege escalation flaws, information leaks, and denial-of-service conditions. The database covers historical records spanning several decades, reflecting the evolution of the Linux ecosystem from its early releases to modern stable and development branches. This extensive time range allows for the analysis of long-term security trends and the remediation status of legacy systems that remain in production environments. Visitors to this resource can track vendor-specific advisories to stay informed about patches and updates released by major Linux distribution maintainers. You can also use the page to understand the characteristics and impact of specific weakness classes as they manifest in the Linux environment. Additionally, the interface supports looking up a specific product’s vulnerability history, enabling security professionals to assess risk exposure and prioritize mitigation efforts for critical infrastructure components. The data is organized to facilitate efficient searching and correlation between weakness identifiers and affected software versions, ensuring that administrators and developers have access to comprehensive security insights necessary for maintaining system integrity and compliance.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2026-74716 accel/amdxdna: Fix locally exploitable BUG_ON in amdxdna_insert_pages() - - 2026-08-22
CVE-2026-74714 bpf: tcp: Fix use-after-free in bpf_iter_tcp_established_batch() 7.8 High 2026-08-22
CVE-2026-74715 bpf: Fix netns reference imbalance in conntrack kfuncs 7.8 High 2026-08-22
CVE-2026-74713 vhost_iotlb: bound map allocation in add_range 7.1 High 2026-08-22
CVE-2026-74711 hwmon: (pmbus) Fix type confusion in notification logic 8.4 High 2026-08-22
CVE-2026-74712 vdpa/mlx5: Fix buffer length in create_direct_keys() 9.3 Critical 2026-08-22
CVE-2026-74709 xsk: clear metadata pointer when no timestamp is requested - - 2026-08-22
CVE-2026-74710 xsk: require at least 16 bytes of TX metadata 7.8 High 2026-08-22
CVE-2026-74708 xsk: validate launch-time metadata size 7.8 High 2026-08-22
CVE-2026-74706 bnge: Fix NULL pointer dereference in aux device release - - 2026-08-22
CVE-2026-74707 xsk: validate metadata when processing requests 7.8 High 2026-08-22
CVE-2026-74705 udp: fix potential use-after-free in tunnel segmentation 10.0 Critical 2026-08-22
CVE-2026-74703 vhost-scsi: Validate T10 PI scatterlist counts 7.1 High 2026-08-22
CVE-2026-74704 net/sched: sch_cake: drop WARN_ON(1) for malformed packets in ACK filter 8.2 High 2026-08-22
CVE-2026-74702 vhost-scsi: reject feature changes after endpoint 8.8 High 2026-08-22
CVE-2026-74701 net/openvswitch: check Ethernet header length in key_extract() 7.8 High 2026-08-22
CVE-2026-74700 net/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiers 7.8 High 2026-08-22
CVE-2026-74698 net/mlx5e: fix BQL reset on SQ re-activation - - 2026-08-22
CVE-2026-74699 drm/xe: Fix memory leak in exec_queue_set_hang_replay_state() - - 2026-08-22
CVE-2026-74697 bnxt_en: Disable EOP for TPA on all chips to prevent data corruption 8.2 High 2026-08-22
CVE-2026-74695 netfilter: nf_flow_table: drop existing skb dst before skb_dst_set_noref() 7.5 High 2026-08-22
CVE-2026-74696 tcp: fix TFO max_qlen accounting across reuseport migration 7.5 High 2026-08-22
CVE-2026-74694 net/ncsi: fix heap OOB read in NCSI_CMD_SEND_CMD payload length - - 2026-08-22
CVE-2026-74692 net/smc: fix TOCTOU race between smc_listen_out() and listener close 7.5 High 2026-08-22
CVE-2026-74693 net: prestera: validate firmware header length - - 2026-08-22
CVE-2026-74691 net: thunderbolt: Tear down DMA paths before stopping the rings 8.8 High 2026-08-22
CVE-2026-74690 s390/ism: Fix UAF of sba and ieq during ism_dev_exit() 8.4 High 2026-08-22
CVE-2026-74689 net/atm: fix slab-out-of-bounds read in vcc_setsockopt() 7.1 High 2026-08-22
CVE-2026-74688 sctp: clear control chunk transport if it is being removed 9.8 Critical 2026-08-22
CVE-2026-74687 watchdog: at91sam9_wdt: prevent timer rearm during teardown 7.8 High 2026-08-22

All 17855 known CVE vulnerabilities affecting Linux with full Chinese analysis, references, and POCs where available.