Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17855

All 17855 CVE vulnerabilities found in Linux, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumeration (CWE) vulnerabilities affecting the Linux operating system product. It aggregates security data related to weaknesses within the kernel, distributions, and associated utilities provided by various Linux vendors and maintainers. The collection encompasses a wide range of vulnerability types, including memory corruption issues, privilege escalation flaws, information leaks, and denial-of-service conditions. The database covers historical records spanning several decades, reflecting the evolution of the Linux ecosystem from its early releases to modern stable and development branches. This extensive time range allows for the analysis of long-term security trends and the remediation status of legacy systems that remain in production environments. Visitors to this resource can track vendor-specific advisories to stay informed about patches and updates released by major Linux distribution maintainers. You can also use the page to understand the characteristics and impact of specific weakness classes as they manifest in the Linux environment. Additionally, the interface supports looking up a specific product’s vulnerability history, enabling security professionals to assess risk exposure and prioritize mitigation efforts for critical infrastructure components. The data is organized to facilitate efficient searching and correlation between weakness identifiers and affected software versions, ensuring that administrators and developers have access to comprehensive security insights necessary for maintaining system integrity and compliance.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2026-74627 net: devmem: prevent net-iov / page mixing 7.8 High 2026-08-22
CVE-2026-74625 netfilter: bridge: release template ct on non-IP path 7.5 High 2026-08-22
CVE-2026-74624 netfilter: nf_conntrack: defer invalid log until after unlock 7.5 High 2026-08-22
CVE-2026-74623 net: atlantic: free stranded TX buffers on ring deinit - - 2026-08-22
CVE-2026-74622 net: atlantic: free RX pages of consumed but not refilled buffers - - 2026-08-22
CVE-2026-74621 net/sched: act_ct: fix sk_buff leak when the header checks reject a packet 7.5 High 2026-08-22
CVE-2026-74619 ovl: don't warn when the mount is completed from another user namespace - - 2026-08-22
CVE-2026-74620 net/sched: act_gact, act_police: range check the fallback control action - - 2026-08-22
CVE-2026-74618 binfmt_misc: don't warn when the mount is completed from another user namespace - - 2026-08-22
CVE-2026-74617 dibs: initialise dibs->lock in dibs_dev_alloc() 9.8 Critical 2026-08-22
CVE-2026-74615 vxlan: do not arm the ageing timer on a device that is down 8.8 High 2026-08-22
CVE-2026-74616 xdp: reject clones that overrun skb_shared_info tailroom 9.8 Critical 2026-08-22
CVE-2026-74614 vsock/virtio: read virtqueues under worker locks 8.4 High 2026-08-22
CVE-2026-74613 vsock/virtio: avoid refilling the RX queue after teardown 7.8 High 2026-08-22
CVE-2026-74611 tls: rx: restore msg_iter before TLS 1.3 optimistic retry 9.8 Critical 2026-08-22
CVE-2026-74612 veth: fix skb length accounting after XDP frag adjustment 10.0 Critical 2026-08-22
CVE-2026-74610 tls: don't leave a full plaintext sk_msg ring unpushed 7.8 High 2026-08-22
CVE-2026-74609 tipc: read le->link under the node lock in tipc_node_link_down() 7.8 High 2026-08-22
CVE-2026-74608 smb: client: Fix use-after-free in cifs_try_adding_channels() 9.8 Critical 2026-08-22
CVE-2026-74607 KVM: SVM: Serialize accesses to the owner and mirror list with separate lock 8.8 High 2026-08-22
CVE-2026-74606 eventfs: Fix use-after-free in eventfs_remove_rec() 7.8 High 2026-08-22
CVE-2026-74605 eventfs: Use children field for rcu head and add memory barriers 7.8 High 2026-08-22
CVE-2026-74603 ptp: ocp: Fix board ID over-read 7.1 High 2026-08-22
CVE-2026-74604 Revert "thermal/drivers/hwmon: Cleanup coding style a bit" 8.4 High 2026-08-22
CVE-2026-74602 ring-buffer: Initialise reader page order in rb_allocate_cpu_buffer() - - 2026-08-22
CVE-2026-74601 ring-buffer: Use current_context for safe per-CPU buffer swap 7.8 High 2026-08-22
CVE-2026-74600 mm/page_table_check: skip special zero mappings - - 2026-08-22
CVE-2026-74599 mm/ptdump: always stabilise against page table freeing using init_mm - - 2026-08-22
CVE-2026-74598 ipv6: fix Route Information option length validation 7.5 High 2026-08-22
CVE-2026-74597 ip6_tunnel: clear skb2->cb[] in ip6ip6_err() 9.8 Critical 2026-08-22

All 17855 known CVE vulnerabilities affecting Linux with full Chinese analysis, references, and POCs where available.