Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17422

All 17422 CVE vulnerabilities found in Linux, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumeration (CWE) vulnerabilities affecting the Linux operating system product. It aggregates security data related to weaknesses within the kernel, distributions, and associated utilities provided by various Linux vendors and maintainers. The collection encompasses a wide range of vulnerability types, including memory corruption issues, privilege escalation flaws, information leaks, and denial-of-service conditions. The database covers historical records spanning several decades, reflecting the evolution of the Linux ecosystem from its early releases to modern stable and development branches. This extensive time range allows for the analysis of long-term security trends and the remediation status of legacy systems that remain in production environments. Visitors to this resource can track vendor-specific advisories to stay informed about patches and updates released by major Linux distribution maintainers. You can also use the page to understand the characteristics and impact of specific weakness classes as they manifest in the Linux environment. Additionally, the interface supports looking up a specific product’s vulnerability history, enabling security professionals to assess risk exposure and prioritize mitigation efforts for critical infrastructure components. The data is organized to facilitate efficient searching and correlation between weakness identifiers and affected software versions, ensuring that administrators and developers have access to comprehensive security insights necessary for maintaining system integrity and compliance.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2026-98113 ksmbd: rate limit unmapped SID errors - - 2026-09-25
CVE-2026-98112 ksmbd: fix listener task lifetime on netdev events 7.8 High 2026-09-25
CVE-2026-98111 Bluetooth: btintel: validate version TLV value lengths - - 2026-09-25
CVE-2026-98109 Bluetooth: hci_core: Fix race condition during device registration - - 2026-09-25
CVE-2026-98110 Bluetooth: btintel: bound firmware ID by TLV length - - 2026-09-25
CVE-2026-98108 Bluetooth: L2CAP: fix chan mode for LE_CONN_REQ + EXT_FLOWCTL pchan 7.5 High 2026-09-25
CVE-2026-98106 drm/pagemap: Prevent double migration of device pages - - 2026-09-25
CVE-2026-98107 Bluetooth: L2CAP: fix out-of-bounds write in l2cap_ecred_connect - - 2026-09-25
CVE-2026-98104 net/sched: cls_u32: fix duplicate handle when node ID pool is exhausted - - 2026-09-25
CVE-2026-98105 net: ethernet: oa_tc6: Improve the error recovery - - 2026-09-25
CVE-2026-98103 igmp: convert struct ip_sf_list to RCU - - 2026-09-25
CVE-2026-98102 ipv6: mcast: fix RCU list diversion in ip6_mc_del1_src() - - 2026-09-25
CVE-2026-98101 ipv6: mcast: use copy-on-write RCU updates in ip6_mc_source() - - 2026-09-25
CVE-2026-98099 ipv6: mcast: use rcu_assign_pointer() for __rcu list updates - - 2026-09-25
CVE-2026-98097 tipc: Dont send random pad bytes in RESET/ACTIVATE messages - - 2026-09-25
CVE-2026-98098 tipc: fix NULL deref in tipc_named_node_up() on empty publication list - - 2026-09-25
CVE-2026-98096 ipv6: sr: restore network header before routing and forwarding 7.4 High 2026-09-25
CVE-2026-98095 af_packet: Don't cast tpacket_hdr.tp_len to int in tpacket_parse_header(). - - 2026-09-25
CVE-2026-98094 staging: fbtft: make dirty_lock IRQ-safe - - 2026-09-25
CVE-2026-98093 ASoC: fsl_micfil: balance mclk enable/disable - - 2026-09-25
CVE-2026-98092 ASoC: amd: yc: fix memory leak in acp6x_pdm_dma_close() - - 2026-09-25
CVE-2026-98091 btrfs: detach failed sprout device from transaction update list - - 2026-09-25
CVE-2026-98090 btrfs: restore active device pointers after failed sprout - - 2026-09-25
CVE-2026-98089 bonding: alb: fix uninitialized transport header access in alb_determine_nd() - - 2026-09-25
CVE-2026-98088 scsi: mpt3sas: Avoid out-of-bounds cpumask_of_node() call in _base_assign_reply_queues() - - 2026-09-25
CVE-2026-98087 sched/rt,dl: Skip migrate-disabled tasks when picking a push candidate - - 2026-09-25
CVE-2026-98086 ALSA: ump: do not touch legacy_rmidi before it exists - - 2026-09-25
CVE-2026-98085 bpf: backtrack_insn(): Handle ld_{abs,ind} subprog exit edge - - 2026-09-25
CVE-2026-98084 bpf: backtracking shouldn't clear outer frame R1-R5 for callbacks - - 2026-09-25
CVE-2026-98082 btrfs: fix the possible bioc_list memory leak during error - - 2026-09-25

All 17422 known CVE vulnerabilities affecting Linux with full Chinese analysis, references, and POCs where available.