Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17855

All 17855 CVE vulnerabilities found in Linux, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumeration (CWE) vulnerabilities affecting the Linux operating system product. It aggregates security data related to weaknesses within the kernel, distributions, and associated utilities provided by various Linux vendors and maintainers. The collection encompasses a wide range of vulnerability types, including memory corruption issues, privilege escalation flaws, information leaks, and denial-of-service conditions. The database covers historical records spanning several decades, reflecting the evolution of the Linux ecosystem from its early releases to modern stable and development branches. This extensive time range allows for the analysis of long-term security trends and the remediation status of legacy systems that remain in production environments. Visitors to this resource can track vendor-specific advisories to stay informed about patches and updates released by major Linux distribution maintainers. You can also use the page to understand the characteristics and impact of specific weakness classes as they manifest in the Linux environment. Additionally, the interface supports looking up a specific product’s vulnerability history, enabling security professionals to assess risk exposure and prioritize mitigation efforts for critical infrastructure components. The data is organized to facilitate efficient searching and correlation between weakness identifiers and affected software versions, ensuring that administrators and developers have access to comprehensive security insights necessary for maintaining system integrity and compliance.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2026-72302 ASoC: SOF: ipc3-control: Use overflow checks in control_update size calc 7.8 High 2026-08-15
CVE-2026-72301 ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get 7.8 High 2026-08-15
CVE-2026-72300 ASoC: SOF: topology: validate vendor array size before parsing - - 2026-08-15
CVE-2026-72299 tipc: restrict socket queue dumps in enqueue tracepoints 9.8 Critical 2026-08-15
CVE-2026-72298 net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() 8.4 High 2026-08-15
CVE-2026-72297 net: atm: reject out-of-range traffic classes in QoS validation 7.1 High 2026-08-15
CVE-2026-72295 LoongArch: KVM: Validate irqchip index in irqfd routing 8.8 High 2026-08-15
CVE-2026-72296 net: ife: require ETH_HLEN to be pullable in ife_decode() 9.1 Critical 2026-08-15
CVE-2026-72294 LoongArch: KVM: Check irq validity in kvm_vcpu_ioctl_interrupt() 8.8 High 2026-08-15
CVE-2026-72293 KVM: s390: vsie: Add missing radix_tree_preload() in _gaccess_shadow_fault() - - 2026-08-15
CVE-2026-72292 KVM: s390: Initialize KVM_S390_GET_CMMA_BITS memory - - 2026-08-15
CVE-2026-72291 KVM: s390: Fix unlikely race in try_get_locked_pte() 9.3 Critical 2026-08-15
CVE-2026-72290 KVM: s390: pci: Fix GISC refcount leak on AIF enable failure - - 2026-08-15
CVE-2026-72289 KVM: arm64: vgic: Check the interrupt is still ours before migrating it 9.3 Critical 2026-08-15
CVE-2026-72287 KVM: nVMX: Move vTPR vs. TPR Threshold consistency check into "normal" checks 7.8 High 2026-08-15
CVE-2026-72288 KVM: arm64: vgic: Handle race between interrupt affinity change and LPI disabling 9.3 Critical 2026-08-15
CVE-2026-72286 KVM: SEV: Do not allow intra-host migration/mirroring of SNP VMs 8.8 High 2026-08-15
CVE-2026-72284 KVM: x86: Ignore pending PV EOI if the vCPU has since disabled PV EOIs 7.1 High 2026-08-15
CVE-2026-72285 KVM: TDX: Reject concurrent change to CPUID entry count 7.8 High 2026-08-15
CVE-2026-72283 KVM: x86: Nullify irqfd->producer if updating IRTE for bypass fails 8.8 High 2026-08-15
CVE-2026-72281 KVM: arm64: account pKVM reclaim against the VM mm - - 2026-08-15
CVE-2026-72282 KVM: Move kvm_io_bus_get_dev() locking responsibilities to callers 7.8 High 2026-08-15
CVE-2026-72280 KVM: arm64: nv: Drop bogus WARN for write to ZCR_EL2 7.1 High 2026-08-15
CVE-2026-72279 KVM: arm64: nv: Respect read-only PFN when mapping L1 VNCR 9.0 Critical 2026-08-15
CVE-2026-72278 KVM: arm64: nv: Re-translate VNCR before injecting abort 9.3 Critical 2026-08-15
CVE-2026-72277 KVM: arm64: nv: Inject SEA if guest VNCR isn't normal memory 9.3 Critical 2026-08-15
CVE-2026-72276 fbdev: metronomefb: fix potential memory leak in metronomefb_probe() - - 2026-08-15
CVE-2026-72275 fbdev: broadsheetfb: fix potential memory leak in broadsheetfb_probe() - - 2026-08-15
CVE-2026-72274 fbdev: hecubafb: fix potential memory leak in hecubafb_probe() - - 2026-08-15
CVE-2026-72273 fbdev: efifb: fix memory leak in efifb_probe() - - 2026-08-15

All 17855 known CVE vulnerabilities affecting Linux with full Chinese analysis, references, and POCs where available.