Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17855

All 17855 CVE vulnerabilities found in Linux, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumeration (CWE) vulnerabilities affecting the Linux operating system product. It aggregates security data related to weaknesses within the kernel, distributions, and associated utilities provided by various Linux vendors and maintainers. The collection encompasses a wide range of vulnerability types, including memory corruption issues, privilege escalation flaws, information leaks, and denial-of-service conditions. The database covers historical records spanning several decades, reflecting the evolution of the Linux ecosystem from its early releases to modern stable and development branches. This extensive time range allows for the analysis of long-term security trends and the remediation status of legacy systems that remain in production environments. Visitors to this resource can track vendor-specific advisories to stay informed about patches and updates released by major Linux distribution maintainers. You can also use the page to understand the characteristics and impact of specific weakness classes as they manifest in the Linux environment. Additionally, the interface supports looking up a specific product’s vulnerability history, enabling security professionals to assess risk exposure and prioritize mitigation efforts for critical infrastructure components. The data is organized to facilitate efficient searching and correlation between weakness identifiers and affected software versions, ensuring that administrators and developers have access to comprehensive security insights necessary for maintaining system integrity and compliance.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2026-72242 selinux: avoid sk_socket dereference in selinux_sctp_bind_connect() 7.5 High 2026-08-15
CVE-2026-72240 mfd: sm501: Fix reference leak on failed device registration - - 2026-08-15
CVE-2026-72239 x86/virt/sev: Revert "Drop WBINVD before setting MSR_AMD64_SYSCFG_SNP_EN" 9.3 Critical 2026-08-15
CVE-2026-72238 x86/boot: Validate console=uart8250 baud rate to fix early boot hang - - 2026-08-15
CVE-2026-72237 perf/x86/amd/brs: Fix kernel address leakage - - 2026-08-15
CVE-2026-72236 s390/perf_cpum_cf: Add missing array_index_nospec() to __hw_perf_event_init() - - 2026-08-15
CVE-2026-72235 batman-adv: retrieve ethhdr after potential skb realloc on RX 8.8 High 2026-08-15
CVE-2026-72234 batman-adv: access unicast_ttvn skb->data only after skb realloc 9.8 Critical 2026-08-15
CVE-2026-72233 batman-adv: bla: reacquire gw address after skb realloc 8.8 High 2026-08-15
CVE-2026-72232 batman-adv: ensure minimal ethernet header on TX 7.8 High 2026-08-15
CVE-2026-72231 batman-adv: tt: avoid request storms during pending request 7.5 High 2026-08-15
CVE-2026-72229 batman-adv: clean untagged VLAN on netdev registration failure - - 2026-08-15
CVE-2026-72230 batman-adv: frag: free unfragmentable packet - - 2026-08-15
CVE-2026-72228 batman-adv: frag: fix primary_if leak on failed linearization - - 2026-08-15
CVE-2026-72227 batman-adv: mcast: avoid OOB read of num_dests header 8.1 High 2026-08-15
CVE-2026-72226 batman-adv: tt: prevent TVLV OOB check overflow 9.8 Critical 2026-08-15
CVE-2026-72225 jbd2: fix integer underflow in jbd2_journal_initialize_fast_commit() 7.8 High 2026-08-15
CVE-2026-72224 nvdimm/btt: Free arenas on btt_init() error paths - - 2026-08-15
CVE-2026-72223 nvdimm/btt: Free arena sub-allocations on discover_arenas() error path - - 2026-08-15
CVE-2026-72222 sunrpc: pin svc_xprt across the asynchronous TLS handshake callback 9.8 Critical 2026-08-15
CVE-2026-72221 sunrpc: wait for in-flight TLS handshake callback when cancel loses race 9.8 Critical 2026-08-15
CVE-2026-72220 sunrpc: harden rq_procinfo lifecycle to prevent double-free 9.8 Critical 2026-08-15
CVE-2026-72219 lockd: Plug nlm_file leak when nlm_do_fopen() fails - - 2026-08-15
CVE-2026-72218 lockd: Plug nlm_file refcount leak on cached nlm_do_fopen() failure - - 2026-08-15
CVE-2026-72217 SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing 9.8 Critical 2026-08-15
CVE-2026-72216 remoteproc: qcom: Fix leak when custom dump_segments addition fails - - 2026-08-15
CVE-2026-72215 MIPS: DEC: Ensure 32-bit stack location for o32 prom_printf() - - 2026-08-15
CVE-2026-72214 power: supply: cpcap-battery: Fix missing nvmem_device_put() causing reference leak - - 2026-08-15
CVE-2026-72213 mm/hugetlb: fix hugetlb cgroup rsvd charge/uncharge mismatch 7.1 High 2026-08-15
CVE-2026-72212 mm/memory_hotplug: fix incorrect altmap passing in error path - - 2026-08-15

All 17855 known CVE vulnerabilities affecting Linux with full Chinese analysis, references, and POCs where available.