Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17855

All 17855 CVE vulnerabilities found in Linux, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumeration (CWE) vulnerabilities affecting the Linux operating system product. It aggregates security data related to weaknesses within the kernel, distributions, and associated utilities provided by various Linux vendors and maintainers. The collection encompasses a wide range of vulnerability types, including memory corruption issues, privilege escalation flaws, information leaks, and denial-of-service conditions. The database covers historical records spanning several decades, reflecting the evolution of the Linux ecosystem from its early releases to modern stable and development branches. This extensive time range allows for the analysis of long-term security trends and the remediation status of legacy systems that remain in production environments. Visitors to this resource can track vendor-specific advisories to stay informed about patches and updates released by major Linux distribution maintainers. You can also use the page to understand the characteristics and impact of specific weakness classes as they manifest in the Linux environment. Additionally, the interface supports looking up a specific product’s vulnerability history, enabling security professionals to assess risk exposure and prioritize mitigation efforts for critical infrastructure components. The data is organized to facilitate efficient searching and correlation between weakness identifiers and affected software versions, ensuring that administrators and developers have access to comprehensive security insights necessary for maintaining system integrity and compliance.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2026-74686 rqspinlock: Reset tail when preserving queue on deadlock - - 2026-08-22
CVE-2026-74684 net: tap: set skb->dev before parsing virtio net header in tap_get_user_xdp() 7.1 High 2026-08-22
CVE-2026-74685 hwmon: (ltc4282) Clamp negative current limits - - 2026-08-22
CVE-2026-74683 Input: evdev - sanitize event type index when fetching event masks - - 2026-08-22
CVE-2026-74682 ALSA: usb-audio: fix OOB write on Type II inbound URBs - - 2026-08-22
CVE-2026-74681 usb: misc: usbio: check ibuf_len against rxbuf_len in bulk msg - - 2026-08-22
CVE-2026-74680 usb: atm: cxacru: properly kill rcv_urb on error in cxacru_cm() - - 2026-08-22
CVE-2026-74679 usb: gadget: f_ncm: Use unsigned int for ndp_index - - 2026-08-22
CVE-2026-74678 net: usb: ax88179_178a: fix skb leak in ax88179_tx_fixup() 7.5 High 2026-08-22
CVE-2026-74677 net: usb: ipheth: fix carrier_work UAF on disconnect - - 2026-08-22
CVE-2026-74676 vt: add permission check for KDSKBMETA ioctl - - 2026-08-22
CVE-2026-74675 vt: stabilize tty reference in kbd_keycode with tty_port_tty_get 7.8 High 2026-08-22
CVE-2026-74674 mm: fix incorrect flush address in direct page table reclaim 7.8 High 2026-08-22
CVE-2026-74673 Input: evdev - fix information leak in evdev_pass_values() - - 2026-08-22
CVE-2026-74672 mm/vmalloc: acquire init_mm lock on huge vmap to avoid ptdump UAF - - 2026-08-22
CVE-2026-74671 ima: fix out-of-bounds read in xattr_verify() - - 2026-08-22
CVE-2026-74670 ipvs: stop estimator after disabled calc phase 7.8 High 2026-08-22
CVE-2026-74669 ipvs: clear IPv4 options after rebasing tunnel ICMP errors 9.8 Critical 2026-08-22
CVE-2026-74668 packet: use consistent hard_header_len in TX_RING send path 7.8 High 2026-08-22
CVE-2026-74667 net/packet: reset the MAC header on the packet-socket transmit path 7.8 High 2026-08-22
CVE-2026-74666 packet: synchronize pressure clearing with ring reconfiguration 7.8 High 2026-08-22
CVE-2026-74665 net: fix skb length accounting after generic XDP frag adjustment 9.1 Critical 2026-08-22
CVE-2026-74664 net: openvswitch: reallocate update replies for mismatched IDs - - 2026-08-22
CVE-2026-74663 net/sched: reject overly deep qdisc hierarchies 7.8 High 2026-08-22
CVE-2026-74662 inet: frags: publish queues before arming timer 9.8 Critical 2026-08-22
CVE-2026-74660 netfilter: ebt_nflog: pin the NFLOG backend 7.8 High 2026-08-22
CVE-2026-74661 mac802154: fix netdev use-after-free in beacon worker 7.8 High 2026-08-22
CVE-2026-74659 net: bridge: mrp: fix uninitialised bytes on the wire - - 2026-08-22
CVE-2026-74658 futex: Prevent robust futex exit race some more - - 2026-08-22
CVE-2026-74656 ipv4: fix use-after-free in fib_nhc_update_mtu() 7.8 High 2026-08-22

All 17855 known CVE vulnerabilities affecting Linux with full Chinese analysis, references, and POCs where available.