Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17855

All 17855 CVE vulnerabilities found in Linux, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumeration (CWE) vulnerabilities affecting the Linux operating system product. It aggregates security data related to weaknesses within the kernel, distributions, and associated utilities provided by various Linux vendors and maintainers. The collection encompasses a wide range of vulnerability types, including memory corruption issues, privilege escalation flaws, information leaks, and denial-of-service conditions. The database covers historical records spanning several decades, reflecting the evolution of the Linux ecosystem from its early releases to modern stable and development branches. This extensive time range allows for the analysis of long-term security trends and the remediation status of legacy systems that remain in production environments. Visitors to this resource can track vendor-specific advisories to stay informed about patches and updates released by major Linux distribution maintainers. You can also use the page to understand the characteristics and impact of specific weakness classes as they manifest in the Linux environment. Additionally, the interface supports looking up a specific product’s vulnerability history, enabling security professionals to assess risk exposure and prioritize mitigation efforts for critical infrastructure components. The data is organized to facilitate efficient searching and correlation between weakness identifiers and affected software versions, ensuring that administrators and developers have access to comprehensive security insights necessary for maintaining system integrity and compliance.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2026-74536 Bluetooth: ISO: fix leaking sk after socket release - - 2026-08-15
CVE-2026-74535 Bluetooth: ISO: avoid deadlocks in iso_sock_timeout 8.8 High 2026-08-15
CVE-2026-74534 Bluetooth: ISO: fix refcounting of iso_conn 8.8 High 2026-08-15
CVE-2026-74533 Bluetooth: ISO: fix race of kfree vs kref_get_unless_zero 8.8 High 2026-08-15
CVE-2026-74532 Bluetooth: btintel: Validate length before parsing diagnostics TLV - - 2026-08-15
CVE-2026-74531 Bluetooth: hci_conn: hold conn reference in abort_conn_sync() 8.8 High 2026-08-15
CVE-2026-74530 Bluetooth: hci_sync: hold conn in hci_connect_big_sync() callback 8.8 High 2026-08-15
CVE-2026-74529 Bluetooth: hci_sync: hold conn in hci_connect_pa_sync() callback 7.8 High 2026-08-15
CVE-2026-74528 Bluetooth: hci_sync: hold conn in hci_past_sync() callback 8.0 High 2026-08-15
CVE-2026-74527 octeontx2-af: Block VFs from clobbering special CGX PKIND state 8.8 High 2026-08-15
CVE-2026-74526 scsi: mpi3mr: Fix potential deadlock in mpi3mr_fault_uevent_emit - - 2026-08-15
CVE-2026-74524 riscv: mm: Fix out-of-bounds page-table walk during memory hot-remove - - 2026-08-15
CVE-2026-74525 net: sxgbe: free TX rings on RX allocation failure - - 2026-08-15
CVE-2026-74523 qede: sync udp_tunnel ports outside qede_lock in the recovery path 7.5 High 2026-08-15
CVE-2026-74522 ksmbd: fix use-after-free in __close_file_table_ids() 8.8 High 2026-08-15
CVE-2026-74520 iommu/iommufd: Fix IOPF group ownership UAF 8.8 High 2026-08-15
CVE-2026-74521 ksmbd: use memcmp() to compare ClientGUIDs 9.1 Critical 2026-08-15
CVE-2026-74519 pinctrl: devicetree: don't free uninitialized dev_name on error path 7.8 High 2026-08-15
CVE-2026-74517 KVM: x86: Cancel delayed I/O APIC EOI handling before destroying vCPUs 9.3 Critical 2026-08-15
CVE-2026-74518 mm/hugetlb: fix list corruption in allocate_file_region_entries() 7.8 High 2026-08-15
CVE-2026-74516 KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active 8.2 High 2026-08-15
CVE-2026-74515 KVM: s390: pci: Reject adapter interrupt forwarding if already enabled 8.8 High 2026-08-15
CVE-2026-74514 KVM: s390: pci: Fix memory accounting for pinned/unpinned pages - - 2026-08-15
CVE-2026-74513 dibs: fix use-after-free of dmb_node in loopback attach/detach/unregister 7.8 High 2026-08-15
CVE-2026-74512 audit: fix potential use-after-free in audit_del_rule() 7.8 High 2026-08-15
CVE-2026-74510 Bluetooth: mgmt: fix UAF in pair command cancellation 7.8 High 2026-08-15
CVE-2026-74509 Bluetooth: hci_sync: Fix advertising data UAFs 8.8 High 2026-08-15
CVE-2026-74507 Bluetooth: HIDP: validate numbered report payloads 7.1 High 2026-08-15
CVE-2026-74508 Bluetooth: HIDP: reject frames without a transaction header 8.8 High 2026-08-15
CVE-2026-74506 afs: Fix UAF when sending a message 7.8 High 2026-08-15

All 17855 known CVE vulnerabilities affecting Linux with full Chinese analysis, references, and POCs where available.