Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17855

All 17855 CVE vulnerabilities found in Linux, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumeration (CWE) vulnerabilities affecting the Linux operating system product. It aggregates security data related to weaknesses within the kernel, distributions, and associated utilities provided by various Linux vendors and maintainers. The collection encompasses a wide range of vulnerability types, including memory corruption issues, privilege escalation flaws, information leaks, and denial-of-service conditions. The database covers historical records spanning several decades, reflecting the evolution of the Linux ecosystem from its early releases to modern stable and development branches. This extensive time range allows for the analysis of long-term security trends and the remediation status of legacy systems that remain in production environments. Visitors to this resource can track vendor-specific advisories to stay informed about patches and updates released by major Linux distribution maintainers. You can also use the page to understand the characteristics and impact of specific weakness classes as they manifest in the Linux environment. Additionally, the interface supports looking up a specific product’s vulnerability history, enabling security professionals to assess risk exposure and prioritize mitigation efforts for critical infrastructure components. The data is organized to facilitate efficient searching and correlation between weakness identifiers and affected software versions, ensuring that administrators and developers have access to comprehensive security insights necessary for maintaining system integrity and compliance.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2026-72422 ksmbd: fix use-after-free of conn->preauth_info in concurrent SMB2 NEGOTIATE 9.8 Critical 2026-08-15
CVE-2026-72421 ipv4: fib: Don't ignore error route in local/main tables. 10.0 Critical 2026-08-15
CVE-2026-72420 md/raid5: avoid R5_Overlap races while breaking stripe batches 8.8 High 2026-08-15
CVE-2026-72419 netfilter: nf_nat: avoid invalid nat_net pointer use on failed nf_nat_init() 7.8 High 2026-08-15
CVE-2026-72418 netfilter: nf_conncount: prevent connlimit drops for early confirmed ct 7.5 High 2026-08-15
CVE-2026-72417 netfilter: flowtable: Validate iph->ihl in nf_flow_ip4_tunnel_proto() 9.8 Critical 2026-08-15
CVE-2026-72416 netfilter: nft_compat: ebtables emulation must reject non-bridge targets 7.3 High 2026-08-15
CVE-2026-72414 net: dsa: sja1105: round up PTP perout pin duration - - 2026-08-15
CVE-2026-72415 ASoC: SDCA: Validate written enum value in ge_put_enum_double() 7.1 High 2026-08-15
CVE-2026-72413 sctp: fix err_chunk memory leaks in INIT handling - - 2026-08-15
CVE-2026-72411 net: dsa: mxl862xx: fix use-after-free of DSA ports in crc_err_work 7.8 High 2026-08-15
CVE-2026-72412 s390/mm: Fix handling of _PAGE_UNUSED pte bit 9.3 Critical 2026-08-15
CVE-2026-72410 octeontx2-af: Validate NIX maximum LFs correctly 7.8 High 2026-08-15
CVE-2026-72409 net: mvneta: re-enable percpu interrupt on resume 7.5 High 2026-08-15
CVE-2026-72407 geneve: validate inner network offset in geneve_gro_complete() 10.0 Critical 2026-08-15
CVE-2026-72408 geneve: gate GRO hint in geneve_gro_complete() on gs->gro_hint 10.0 Critical 2026-08-15
CVE-2026-72406 net: sungem: fix probe error cleanup 7.8 High 2026-08-15
CVE-2026-72405 net: udp_tunnel: prevent double queueing in udp_tunnel_nic_device_sync 7.8 High 2026-08-15
CVE-2026-72404 tipc: fix UAF in cleanup_bearer() due to premature dst_cache_destroy() 7.8 High 2026-08-15
CVE-2026-72403 ALSA: FCP: Fix NULL pointer dereference in interface lookup - - 2026-08-15
CVE-2026-72402 bpf: Mask pseudo pointer values in verifier logs - - 2026-08-15
CVE-2026-72401 bpf: Fix insn_aux_data leak on verifier err_free_env path - - 2026-08-15
CVE-2026-72400 seg6: validate SRH length before reading fixed fields 7.8 High 2026-08-15
CVE-2026-72399 net: enetc: check the number of BDs needed for xdp_frame 9.8 Critical 2026-08-15
CVE-2026-72398 sctp: add INIT verification after cookie unpacking 9.8 Critical 2026-08-15
CVE-2026-72397 hwmon: (pmbus/core) honor vrm_version in pmbus_data2reg_vid() 7.1 High 2026-08-15
CVE-2026-72396 hwmon: adm1275: Prevent reading uninitialized stack - - 2026-08-15
CVE-2026-72394 hwmon: (aspeed-g6-pwm-tach) Guard fan RPM calculation against divide-by-zero - - 2026-08-15
CVE-2026-72395 hwmon: (pmbus) Fix passing events to regulator core 7.1 High 2026-08-15
CVE-2026-72393 eth: fbnic: don't cache shinfo across skb realloc 9.8 Critical 2026-08-15

All 17855 known CVE vulnerabilities affecting Linux with full Chinese analysis, references, and POCs where available.