Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17855

All 17855 CVE vulnerabilities found in Linux, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumeration (CWE) vulnerabilities affecting the Linux operating system product. It aggregates security data related to weaknesses within the kernel, distributions, and associated utilities provided by various Linux vendors and maintainers. The collection encompasses a wide range of vulnerability types, including memory corruption issues, privilege escalation flaws, information leaks, and denial-of-service conditions. The database covers historical records spanning several decades, reflecting the evolution of the Linux ecosystem from its early releases to modern stable and development branches. This extensive time range allows for the analysis of long-term security trends and the remediation status of legacy systems that remain in production environments. Visitors to this resource can track vendor-specific advisories to stay informed about patches and updates released by major Linux distribution maintainers. You can also use the page to understand the characteristics and impact of specific weakness classes as they manifest in the Linux environment. Additionally, the interface supports looking up a specific product’s vulnerability history, enabling security professionals to assess risk exposure and prioritize mitigation efforts for critical infrastructure components. The data is organized to facilitate efficient searching and correlation between weakness identifiers and affected software versions, ensuring that administrators and developers have access to comprehensive security insights necessary for maintaining system integrity and compliance.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2026-72452 drm/i915: clear CRTC color blob pointers after dropping refs 7.8 High 2026-08-15
CVE-2026-72451 xfrm: Fix xfrm state cache insertion race 9.8 Critical 2026-08-15
CVE-2026-72450 xfrm: validate selector family and prefixlen during match 7.8 High 2026-08-15
CVE-2026-72448 octeontx2-pf: Fix leak of SQ timestamp buffer on teardown - - 2026-08-15
CVE-2026-72449 drm/amdkfd: fix list_del corruption in kfd_criu_resume_svm 7.8 High 2026-08-15
CVE-2026-72447 sctp: hold socket lock when dumping endpoints in sctp_diag - - 2026-08-15
CVE-2026-72446 ALSA: usb-audio: qcom: reject stream disable with no active interface 7.8 High 2026-08-15
CVE-2026-72445 ALSA: usb-audio: qcom: clear opened when stream enable fails - - 2026-08-15
CVE-2026-72443 ALSA: usb-audio: Kill MIDI 2.0 URBs before freeing endpoints - - 2026-08-15
CVE-2026-72444 flow_dissector: check device type before reading ETH_ADDRS 7.8 High 2026-08-15
CVE-2026-72442 netfilter: flowtable: fix and simplify IP6IP6 tunnel handling 9.8 Critical 2026-08-15
CVE-2026-72440 md/raid1: fix writes_pending and barrier reference leaks on write failures 7.1 High 2026-08-15
CVE-2026-72441 ieee802154: fix kernel-infoleak in dgram_recvmsg() - - 2026-08-15
CVE-2026-72439 md/raid10: fix writes_pending leak on write request failures - - 2026-08-15
CVE-2026-72437 md/raid1: free r1_bio when REQ_NOWAIT is set and read would block on retry - - 2026-08-15
CVE-2026-72438 md/raid10: fix writes_pending and barrier reference leaks on discard failures 7.5 High 2026-08-15
CVE-2026-72436 netfilter: ipset: Don't use test_bit() in lockless RCU readers in hash types 9.8 Critical 2026-08-15
CVE-2026-72435 netfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer() 7.8 High 2026-08-15
CVE-2026-72434 netfilter: ipset: make sure gc is properly stopped 7.8 High 2026-08-15
CVE-2026-72433 netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak - - 2026-08-15
CVE-2026-72432 tpm_crb: Check ACPI_COMPANION() against NULL during probe - - 2026-08-15
CVE-2026-72431 alloc_tag: fix use-after-free in /proc/allocinfo after module unload - - 2026-08-15
CVE-2026-72429 ipv6: ioam: fix type confusion of dst_entry 9.8 Critical 2026-08-15
CVE-2026-72430 net/sched: act_ct: fix nf_connlabels leak on two error paths - - 2026-08-15
CVE-2026-72428 bpf: Fix stack slot index in nospec checks - - 2026-08-15
CVE-2026-72426 bpf: Preserve pointer spill metadata during half-slot cleanup 8.4 High 2026-08-15
CVE-2026-72427 bpf: Fix effective prog array index with BPF_F_PREORDER 7.8 High 2026-08-15
CVE-2026-72425 ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() 7.1 High 2026-08-15
CVE-2026-72424 rtc: msc313: fix NULL deref in shared IRQ handler at probe - - 2026-08-15
CVE-2026-72423 bpf: Guard conntrack opts error writes 8.8 High 2026-08-15

All 17855 known CVE vulnerabilities affecting Linux with full Chinese analysis, references, and POCs where available.