Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17858

All 17858 CVE vulnerabilities found in Linux, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumeration (CWE) vulnerabilities affecting the Linux operating system product. It aggregates security data related to weaknesses within the kernel, distributions, and associated utilities provided by various Linux vendors and maintainers. The collection encompasses a wide range of vulnerability types, including memory corruption issues, privilege escalation flaws, information leaks, and denial-of-service conditions. The database covers historical records spanning several decades, reflecting the evolution of the Linux ecosystem from its early releases to modern stable and development branches. This extensive time range allows for the analysis of long-term security trends and the remediation status of legacy systems that remain in production environments. Visitors to this resource can track vendor-specific advisories to stay informed about patches and updates released by major Linux distribution maintainers. You can also use the page to understand the characteristics and impact of specific weakness classes as they manifest in the Linux environment. Additionally, the interface supports looking up a specific product’s vulnerability history, enabling security professionals to assess risk exposure and prioritize mitigation efforts for critical infrastructure components. The data is organized to facilitate efficient searching and correlation between weakness identifiers and affected software versions, ensuring that administrators and developers have access to comprehensive security insights necessary for maintaining system integrity and compliance.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2026-98569 ip_gre: Reject enabling collect metadata through changelink - - 2026-10-18
CVE-2026-98567 net: xps: reject an out of range traffic class - - 2026-10-18
CVE-2026-98566 drm/imagination: clamp freelist reconstruction requests - - 2026-10-18
CVE-2026-98565 net: dsa: mt7530: fix NULL dereference on unbind of MT7531 and MT7621 - - 2026-10-18
CVE-2026-98564 net: dsa: mt7530: leave the MDIO IRQ mappings to regmap-irq - - 2026-10-18
CVE-2026-98563 net: phylink: record the PHY only once bringup cannot fail - - 2026-10-18
CVE-2026-98562 net: libwx: fix races in Tx timestamp handling - - 2026-10-18
CVE-2026-98561 nfp: hold IPsec RX state under the XArray lock - - 2026-10-18
CVE-2026-98560 net/rds: size a connection's path set by the transport it ends up with - - 2026-10-18
CVE-2026-98559 net/smc: fix UAF on lgr list traversal in smcr_port_err() - - 2026-10-18
CVE-2026-98558 net: flush skb_defer_nodes in dev_cpu_dead() - - 2026-10-18
CVE-2026-98557 gve: DQO: fix header length used by gve_can_send_tso() for UDP GSO - - 2026-10-18
CVE-2026-98556 gve: DQO: reject TSO packets with an out of range MSS - - 2026-10-18
CVE-2026-98555 llc: fix skb UAF and leaks on llc_mac_hdr_init() failure - - 2026-10-18
CVE-2026-98554 vlan: ensure sufficient headroom in vlan_dev_hard_header() - - 2026-10-18
CVE-2026-98553 autofs: fix sbi->pipe file reference leak in autofs_kill_sb() - - 2026-10-18
CVE-2026-98552 perf/core: Fix a refcount leak in attach_perf_ctx_data() - - 2026-10-18
CVE-2026-98551 perf/core: Fill branch entries with a single assignment - - 2026-10-18
CVE-2026-98550 tipc: reject invalid and unexpected GRP_ACK_MSG to prevent bc_ackers underflow - - 2026-10-18
CVE-2026-98548 sctp: discard the rest of the packet on a stale-cookie error - - 2026-10-18
CVE-2026-98549 tcp: prevent collapsing skbs across boundary in rtx queue - - 2026-10-18
CVE-2026-98547 af_packet: fix integer overflow in prb_calc_retire_blk_tmo() - - 2026-10-18
CVE-2026-98546 arm64/boot: Disable trapping of PMZR_EL0 writes to EL2 - - 2026-10-18
CVE-2026-98545 ata: libata-scsi: bound the ATA passthru sense descriptor writes - - 2026-10-18
CVE-2026-98544 bna: prevent IOC timer rearm during teardown - - 2026-10-18
CVE-2026-98543 bpf: fs/xattr: don't assume the inode is locked in path_unlink/path_rmdir - - 2026-10-18
CVE-2026-98542 cgroup/cpuset: Return PERR_NOCPUS in remote_partition_enable() on subpartitions_cpus conflict - - 2026-10-18
CVE-2026-98541 fou: reject omitted FOU_ATTR_IPPROTO on FOU_ENCAP_DIRECT - - 2026-10-18
CVE-2026-98540 fprobe: Terminate the fgraph_data list when the reservation is not filled - - 2026-10-18
CVE-2026-98539 fs/ntfs3: use d_instantiate_new() in ntfs_create_inode() and murder syzbot's "WARNING in do_new_mount" saga - - 2026-10-18

All 17858 known CVE vulnerabilities affecting Linux with full Chinese analysis, references, and POCs where available.