Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17855

All 17855 CVE vulnerabilities found in Linux, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumeration (CWE) vulnerabilities affecting the Linux operating system product. It aggregates security data related to weaknesses within the kernel, distributions, and associated utilities provided by various Linux vendors and maintainers. The collection encompasses a wide range of vulnerability types, including memory corruption issues, privilege escalation flaws, information leaks, and denial-of-service conditions. The database covers historical records spanning several decades, reflecting the evolution of the Linux ecosystem from its early releases to modern stable and development branches. This extensive time range allows for the analysis of long-term security trends and the remediation status of legacy systems that remain in production environments. Visitors to this resource can track vendor-specific advisories to stay informed about patches and updates released by major Linux distribution maintainers. You can also use the page to understand the characteristics and impact of specific weakness classes as they manifest in the Linux environment. Additionally, the interface supports looking up a specific product’s vulnerability history, enabling security professionals to assess risk exposure and prioritize mitigation efforts for critical infrastructure components. The data is organized to facilitate efficient searching and correlation between weakness identifiers and affected software versions, ensuring that administrators and developers have access to comprehensive security insights necessary for maintaining system integrity and compliance.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2026-74294 ASoC: meson: aiu: Validate written enum values 7.3 High 2026-08-15
CVE-2026-74295 ASoC: codecs: hdac_hdmi: Validate written enum value 7.1 High 2026-08-15
CVE-2026-74293 ASoC: fsl: fsl_audmix: Validate written enum values 7.8 High 2026-08-15
CVE-2026-74292 ASoC: tegra: tegra210_ahub: Validate written enum value 7.1 High 2026-08-15
CVE-2026-74291 ASoC: topology: Check PCM and DAI name strings before use - - 2026-08-15
CVE-2026-74290 net/sched: cls_flow: Dont expose folded kernel pointers - - 2026-08-15
CVE-2026-74289 ipv4: fib: Don't dump dying fib_info in fib_leaf_notify(). 7.8 High 2026-08-15
CVE-2026-74288 net: fib_rules: Don't dump dying fib_rule in fib_rules_dump(). 7.8 High 2026-08-15
CVE-2026-74287 sctp: validate embedded address parameter length 9.1 Critical 2026-08-15
CVE-2026-74286 net: pfcp: allocate per-cpu tstats for PFCP netdevs - - 2026-08-15
CVE-2026-74285 net: Stop leased rxq before uninstalling its memory provider 8.8 High 2026-08-15
CVE-2026-74284 net/sched: sch_hfsc: Don't make class passive twice - - 2026-08-15
CVE-2026-74283 tipc: require net admin for TIPCv2 netlink mutators 7.8 High 2026-08-15
CVE-2026-74282 tipc: prevent snt_unacked underflow on CONN_ACK 7.5 High 2026-08-15
CVE-2026-74280 crypto: marvell/octeontx - fix DMA cleanup using wrong loop index 10.0 Critical 2026-08-15
CVE-2026-74281 tipc: reject inverted service ranges from peer bindings 7.5 High 2026-08-15
CVE-2026-74279 crypto: cavium/cpt - fix DMA cleanup using wrong loop index 10.0 Critical 2026-08-15
CVE-2026-74278 ALSA: seq: Fix kernel heap address leak in bounce_error_event() - - 2026-08-15
CVE-2026-74277 iommu/dma-iommu: Fix wrong scatterlist length assignment in P2PDMA path 8.8 High 2026-08-15
CVE-2026-74276 spi: xilinx: use FIFO occupancy register to determine buffer size - - 2026-08-15
CVE-2026-74274 cxl/region: Fill first free targets[] slot during auto-discovery - - 2026-08-15
CVE-2026-74275 cxl/region: Fix out-of-bounds access in cxl_cancel_auto_attach() 8.4 High 2026-08-15
CVE-2026-74273 cxl/region: Block region delete during region creation - - 2026-08-15
CVE-2026-74271 power: supply: core: fix supplied_from allocations - - 2026-08-15
CVE-2026-74272 cxl/region: Resolve region deletion races - - 2026-08-15
CVE-2026-74269 bnxt: fix head underflow on XDP head-grow 9.8 Critical 2026-08-15
CVE-2026-74270 handshake: Require admin permission for DONE command 7.8 High 2026-08-15
CVE-2026-74268 tcp: clear sock_ops cb flags before force-closing a child socket 9.8 Critical 2026-08-15
CVE-2026-74267 net/sched: sch_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen 9.8 Critical 2026-08-15
CVE-2026-74266 net/sched: sch_dualpi2: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen - - 2026-08-15

All 17855 known CVE vulnerabilities affecting Linux with full Chinese analysis, references, and POCs where available.