Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17422

All 17422 CVE vulnerabilities found in Linux, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumeration (CWE) vulnerabilities affecting the Linux operating system product. It aggregates security data related to weaknesses within the kernel, distributions, and associated utilities provided by various Linux vendors and maintainers. The collection encompasses a wide range of vulnerability types, including memory corruption issues, privilege escalation flaws, information leaks, and denial-of-service conditions. The database covers historical records spanning several decades, reflecting the evolution of the Linux ecosystem from its early releases to modern stable and development branches. This extensive time range allows for the analysis of long-term security trends and the remediation status of legacy systems that remain in production environments. Visitors to this resource can track vendor-specific advisories to stay informed about patches and updates released by major Linux distribution maintainers. You can also use the page to understand the characteristics and impact of specific weakness classes as they manifest in the Linux environment. Additionally, the interface supports looking up a specific product’s vulnerability history, enabling security professionals to assess risk exposure and prioritize mitigation efforts for critical infrastructure components. The data is organized to facilitate efficient searching and correlation between weakness identifiers and affected software versions, ensuring that administrators and developers have access to comprehensive security insights necessary for maintaining system integrity and compliance.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2026-98083 btrfs: fix transaction use-after-free in raid stripe insertion 7.0 High 2026-09-25
CVE-2026-98081 btrfs: zoned: finish active block group cleanup if call_zone_finish() fails - - 2026-09-25
CVE-2026-98080 btrfs: do not force reloc root creation during qgroup_account_snapshot() - - 2026-09-25
CVE-2026-98079 btrfs: zstd: fix lost wakeup when waiting for a workspace - - 2026-09-25
CVE-2026-98078 ipvs: fix reversed sequence option serialization - - 2026-09-25
CVE-2026-98077 netfilter: nf_conntrack_sip: fix OOB read in sip_skip_whitespace() - - 2026-09-25
CVE-2026-98076 tracing/probes: Fix use-after-free on field name/type of events with multiple probes - - 2026-09-25
CVE-2026-98075 bpf: reject BPF_PSEUDO_FUNC reference to the main program - - 2026-09-25
CVE-2026-98074 bonding: do not clear curr_active_slave prematurely when releasing all slaves - - 2026-09-25
CVE-2026-98072 net/rds: use wq_has_sleeper() in release_in_xmit() - - 2026-09-25
CVE-2026-98073 net: Remove conflicting altnames for dying netns in __dev_change_net_namespace(). 7.8 High 2026-09-25
CVE-2026-98071 net/rds: clear cp_flags bits individually in rds_conn_path_reset() - - 2026-09-25
CVE-2026-98069 net/rds: acquire the fastpath locks in rds_conn_shutdown() 8.1 High 2026-09-25
CVE-2026-98070 net/rds: acquire RDS_IN_XMIT in rds_tcp_reset_callbacks() 8.1 High 2026-09-25
CVE-2026-98068 net/rds: don't let rds_conn_shutdown() consume a concurrent drop - - 2026-09-25
CVE-2026-98067 erofs: disable LZ4 rolling decompression for now - - 2026-09-25
CVE-2026-98066 ALSA: caiaq: Fix potential double-free at error path - - 2026-09-25
CVE-2026-98065 bpf: Reject key-less BTF for hash maps - - 2026-09-25
CVE-2026-98064 bpf: Fix NULL-ptr-deref when showing a void BTF type - - 2026-09-25
CVE-2026-98063 bpf: Fix NULL-ptr-deref in btf_var_show() - - 2026-09-25
CVE-2026-98062 bpf: Mark signal tracepoint siginfo arguments as scalar - - 2026-09-25
CVE-2026-98061 bpf: Reject tail calls directly from callback frames - - 2026-09-25
CVE-2026-98060 bpf: Reject resilient lock operations in rbtree callbacks - - 2026-09-25
CVE-2026-98059 bpf: Mark sched_process_wait argument as nullable - - 2026-09-25
CVE-2026-98057 ring-buffer: Add checking nr_subbufs to persistent ring buffer validation - - 2026-09-25
CVE-2026-98058 bpf: Mark syscall helpers as sleepable - - 2026-09-25
CVE-2026-98056 nvme: remove stale namespaces by NSID range during scan 7.5 High 2026-09-25
CVE-2026-98055 ASoC: Intel: avs: Clean up the bus when fetching ML caps fails - - 2026-09-25
CVE-2026-98054 ASoC: Intel: avs: Fix unbalanced module reference count - - 2026-09-25
CVE-2026-98053 ASoC: Intel: avs: Refactor and fix init_config access - - 2026-09-25

All 17422 known CVE vulnerabilities affecting Linux with full Chinese analysis, references, and POCs where available.