Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17855

All 17855 CVE vulnerabilities found in Linux, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumeration (CWE) vulnerabilities affecting the Linux operating system product. It aggregates security data related to weaknesses within the kernel, distributions, and associated utilities provided by various Linux vendors and maintainers. The collection encompasses a wide range of vulnerability types, including memory corruption issues, privilege escalation flaws, information leaks, and denial-of-service conditions. The database covers historical records spanning several decades, reflecting the evolution of the Linux ecosystem from its early releases to modern stable and development branches. This extensive time range allows for the analysis of long-term security trends and the remediation status of legacy systems that remain in production environments. Visitors to this resource can track vendor-specific advisories to stay informed about patches and updates released by major Linux distribution maintainers. You can also use the page to understand the characteristics and impact of specific weakness classes as they manifest in the Linux environment. Additionally, the interface supports looking up a specific product’s vulnerability history, enabling security professionals to assess risk exposure and prioritize mitigation efforts for critical infrastructure components. The data is organized to facilitate efficient searching and correlation between weakness identifiers and affected software versions, ensuring that administrators and developers have access to comprehensive security insights necessary for maintaining system integrity and compliance.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2026-74595 fscrypt: use the mount idmap for the owner check in fscrypt_ioctl_set_policy() 7.8 High 2026-08-22
CVE-2026-74596 fs,fsverity: remove check for fsverity being enabled in setattr_prepare() - - 2026-08-22
CVE-2026-74594 sched/psi: Shut down rtpoll_timer in psi_cgroup_free() 7.8 High 2026-08-22
CVE-2026-74593 sched_ext: Take cgroup_lock() first in scx_cgroup_lock() - - 2026-08-22
CVE-2026-74591 mm/filemap: __filemap_add_folio() restore index before retrying 9.8 Critical 2026-08-22
CVE-2026-74592 ima: Instantiate file_truncate and path_truncate hooks 8.1 High 2026-08-22
CVE-2026-74590 fsverity: Fix bpf_get_fsverity_digest() dynptr assumptions 7.8 High 2026-08-22
CVE-2026-74589 bpf, sockmap: Fix sk_redir use-after-free in send verdict 8.4 High 2026-08-22
CVE-2026-74587 sctp: fix use-after-free of cached ASCONF chunk 9.8 Critical 2026-08-22
CVE-2026-74588 sctp: keep chunk->transport in step with the list it is queued on 9.8 Critical 2026-08-22
CVE-2026-74586 sctp: clear new_transport when removing a peer 9.8 Critical 2026-08-22
CVE-2026-74585 thunderbolt: Bound the DROM dual link port number before indexing sw->ports - - 2026-08-22
CVE-2026-74584 RDMA/bnxt_re: zero shared page before exposing to userspace 7.1 High 2026-08-22
CVE-2026-74583 net/sched: cls_route: fix fastmap use-after-free on filter 7.8 High 2026-08-21
CVE-2026-74581 net: ipv6: clear suppressed fib6 rule result 9.8 Critical 2026-08-21
CVE-2026-74582 packet: use consistent hard_header_len in non-ring send paths 7.8 High 2026-08-21
CVE-2026-74580 vhost: reset the vring metadata cache on vring reconfiguration 8.8 High 2026-08-21
CVE-2026-74579 netfilter: nft_payload: fix mask build for partial field offload 7.1 High 2026-08-17
CVE-2026-74578 crypto: algif_skcipher - force synchronous processing on trees without ctx->state 7.1 High 2026-08-16
CVE-2026-74577 net: mpls: initialize rtm_tos in mpls_getroute() - - 2026-08-15
CVE-2026-74576 mm/slab: prevent unbounded recursion in free path with new kmalloc type 7.5 High 2026-08-15
CVE-2026-74574 dmaengine: idxd: fix fdev setup failure cleanup in idxd_cdev_open() 7.8 High 2026-08-15
CVE-2026-74575 thunderbolt: Prevent XDomain delayed work use-after-free on disconnect 8.8 High 2026-08-15
CVE-2026-74573 iommu/arm-smmu-v3-iommufd: Require exactly one Stream ID for a vDEVICE 9.3 Critical 2026-08-15
CVE-2026-74571 btrfs: skip global block reserve accounting for rescue mounts - - 2026-08-15
CVE-2026-74572 btrfs: zoned: fix deadlock between metadata writeback and transaction commit 7.5 High 2026-08-15
CVE-2026-74570 ntfs: harden runlist realloc size calculations 9.8 Critical 2026-08-15
CVE-2026-74569 netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() 9.8 Critical 2026-08-15
CVE-2026-74568 KVM: arm64: vgic: Fix race between LPI release and re-registration 9.3 Critical 2026-08-15
CVE-2026-74567 keys: fix out-of-bounds read in keyring_get_key_chunk() 7.1 High 2026-08-15

All 17855 known CVE vulnerabilities affecting Linux with full Chinese analysis, references, and POCs where available.