Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17855

All 17855 CVE vulnerabilities found in Linux, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumeration (CWE) vulnerabilities affecting the Linux operating system product. It aggregates security data related to weaknesses within the kernel, distributions, and associated utilities provided by various Linux vendors and maintainers. The collection encompasses a wide range of vulnerability types, including memory corruption issues, privilege escalation flaws, information leaks, and denial-of-service conditions. The database covers historical records spanning several decades, reflecting the evolution of the Linux ecosystem from its early releases to modern stable and development branches. This extensive time range allows for the analysis of long-term security trends and the remediation status of legacy systems that remain in production environments. Visitors to this resource can track vendor-specific advisories to stay informed about patches and updates released by major Linux distribution maintainers. You can also use the page to understand the characteristics and impact of specific weakness classes as they manifest in the Linux environment. Additionally, the interface supports looking up a specific product’s vulnerability history, enabling security professionals to assess risk exposure and prioritize mitigation efforts for critical infrastructure components. The data is organized to facilitate efficient searching and correlation between weakness identifiers and affected software versions, ensuring that administrators and developers have access to comprehensive security insights necessary for maintaining system integrity and compliance.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2026-74414 hfsplus: Remove the duplicate attr inode dirty marking action - - 2026-08-15
CVE-2026-74415 spi: atcspi200: fix use-after-free when driver unbind - - 2026-08-15
CVE-2026-74413 wifi: rtw89: fix wrong pci_get_drvdata type in AER handlers 8.8 High 2026-08-15
CVE-2026-74412 wifi: rtw88: fix wrong pci_get_drvdata type in AER handlers 8.8 High 2026-08-15
CVE-2026-74411 wifi: rtw89: Correct data type for scan index to avoid infinite loop 8.8 High 2026-08-15
CVE-2026-74410 wifi: rtw88: fix OOB read from firmware RX descriptor exceeding DMA buffer 8.1 High 2026-08-15
CVE-2026-74409 wifi: rtw89: add bounds check on firmware mac_id in link lookup 8.8 High 2026-08-15
CVE-2026-74408 wifi: ath9k: fix OOB access from firmware tx status queue ID 8.8 High 2026-08-15
CVE-2026-74407 wifi: ath11k: cancel SSR work items during PCI shutdown 8.8 High 2026-08-15
CVE-2026-74406 vxlan: Fix potential null-ptr-deref in vxlan_gro_prepare_receive(). 9.8 Critical 2026-08-15
CVE-2026-74405 OPP: Fix race between OPP addition and lookup 7.8 High 2026-08-15
CVE-2026-74404 crypto: ccp - Fix snp_filter_reserved_mem_regions() off-by-one 7.8 High 2026-08-15
CVE-2026-74403 crypto: ccp - Check for page allocation failure correctly in TIO 7.8 High 2026-08-15
CVE-2026-74402 crypto: atmel-sha204a - fix blocking and non-blocking rng logic - - 2026-08-15
CVE-2026-74401 dlm: fix add msg handle in send_queue ordered 9.8 Critical 2026-08-15
CVE-2026-74400 bpf: fix crash in bpf_[set|remove]_dentry_xattr for negative dentries - - 2026-08-15
CVE-2026-74399 evm: terminate and bound the evm_xattrs read buffer - - 2026-08-15
CVE-2026-74398 ipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD 9.8 Critical 2026-08-15
CVE-2026-74397 IB/mlx5: Fix transport-domain rollback and initialize lb mutex earlier 7.8 High 2026-08-15
CVE-2026-74396 RDMA/mlx5: Fix UMR XLT cleanup on ODP populate failure 7.5 High 2026-08-15
CVE-2026-74395 RDMA/mlx5: Fix devx subscribe-event unwind NULL dereference - - 2026-08-15
CVE-2026-74394 RDMA/srpt: fix integer overflow in immediate data length check 9.8 Critical 2026-08-15
CVE-2026-74393 drm/syncobj: Fix memory leak in drm_syncobj_find_fence() - - 2026-08-15
CVE-2026-74392 dm: limit target bio polling to one shot - - 2026-08-15
CVE-2026-74391 tracing: Bound synthetic-field strings with seq_buf - - 2026-08-15
CVE-2026-74389 RDMA/hns: Fix log flood after cmd_mbox failure - - 2026-08-15
CVE-2026-74390 RDMA/irdma: Fix out-of-bounds write in irdma_copy_user_pgaddrs 7.8 High 2026-08-15
CVE-2026-74388 ALSA: seq: oss: Fix UAF at handling events with embedded SysEx data 7.8 High 2026-08-15
CVE-2026-74386 nvmet-tcp: fix page fragment cache leak in error path - - 2026-08-15
CVE-2026-74387 ALSA: seq: midi: Serialize output teardown with event_input 7.8 High 2026-08-15

All 17855 known CVE vulnerabilities affecting Linux with full Chinese analysis, references, and POCs where available.