Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17855

All 17855 CVE vulnerabilities found in Linux, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumeration (CWE) vulnerabilities affecting the Linux operating system product. It aggregates security data related to weaknesses within the kernel, distributions, and associated utilities provided by various Linux vendors and maintainers. The collection encompasses a wide range of vulnerability types, including memory corruption issues, privilege escalation flaws, information leaks, and denial-of-service conditions. The database covers historical records spanning several decades, reflecting the evolution of the Linux ecosystem from its early releases to modern stable and development branches. This extensive time range allows for the analysis of long-term security trends and the remediation status of legacy systems that remain in production environments. Visitors to this resource can track vendor-specific advisories to stay informed about patches and updates released by major Linux distribution maintainers. You can also use the page to understand the characteristics and impact of specific weakness classes as they manifest in the Linux environment. Additionally, the interface supports looking up a specific product’s vulnerability history, enabling security professionals to assess risk exposure and prioritize mitigation efforts for critical infrastructure components. The data is organized to facilitate efficient searching and correlation between weakness identifiers and affected software versions, ensuring that administrators and developers have access to comprehensive security insights necessary for maintaining system integrity and compliance.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2026-72121 can: bcm: add locking when updating filter and timer values 8.8 High 2026-08-15
CVE-2026-72120 can: bcm: add missing rcu list annotations and operations 7.8 High 2026-08-15
CVE-2026-72119 can: bcm: extend bcm_tx_lock usage for data and timer updates 7.8 High 2026-08-15
CVE-2026-72118 can: bcm: fix CAN frame rx/tx statistics - - 2026-08-15
CVE-2026-72117 can: bcm: fix data race on rx_stamp/rx_ifindex in bcm_rx_handler() - - 2026-08-15
CVE-2026-72115 can: bcm: track a single source interface for ANYDEV timeout/throttle ops 8.1 High 2026-08-15
CVE-2026-72116 can: bcm: fix stale rx/tx ops after device removal 7.1 High 2026-08-15
CVE-2026-72114 can: bcm: validate frame length in bcm_rx_setup() for RTR replies 7.8 High 2026-08-15
CVE-2026-72113 can: bcm: add missing device refcount for CAN filter removal 7.8 High 2026-08-15
CVE-2026-72111 bpf: Reset register bounds before narrowing retval range in check_mem_access() 8.8 High 2026-08-15
CVE-2026-72112 io_uring/bpf-ops: reject re-registration of an already-bound ops 7.8 High 2026-08-15
CVE-2026-72110 bpf,fork: wipe ->bpf_storage before bailouts that access it 7.8 High 2026-08-15
CVE-2026-72109 net: sparx5: unregister blocking notifier on init failure 7.8 High 2026-08-15
CVE-2026-72107 dm era: fix out-of-bounds memory access for non-zero start sector 8.8 High 2026-08-15
CVE-2026-72108 dm thin metadata: fix metadata snapshot consistency on commit failure 7.8 High 2026-08-15
CVE-2026-72106 dm-ioctl: fix a possible overflow in list_version_get_info - - 2026-08-15
CVE-2026-72105 dm-log: fix a bitset_size overflow on 32bit machines 7.8 High 2026-08-15
CVE-2026-72103 dm: avoid leaking the caller's thread keyring via the table device file 7.3 High 2026-08-15
CVE-2026-72104 dm-pcache: reject option groups without values - - 2026-08-15
CVE-2026-72102 dm_early_create: fix freeing used table on dm_resume failure 7.8 High 2026-08-15
CVE-2026-72101 dm-integrity: fix leaking uninitialized kernel memory - - 2026-08-15
CVE-2026-72100 dm-integrity: fix a bug if the bio is out of limits 8.8 High 2026-08-15
CVE-2026-72098 dm-verity: fix buffer overflow in FEC calculation 9.8 Critical 2026-08-15
CVE-2026-72099 dm-integrity: don't increment hash_offset twice 7.1 High 2026-08-15
CVE-2026-72097 dm-verity: fix a possible NULL pointer dereference - - 2026-08-15
CVE-2026-72096 dm-verity: make error counter atomic - - 2026-08-15
CVE-2026-72094 dma-buf: dma-fence: Fix potential NULL pointer dereference - - 2026-08-15
CVE-2026-72095 dma-fence: Make dma_fence_dedup_array() robust against 0-count input 7.8 High 2026-08-15
CVE-2026-72093 accel/amdxdna: Fix use-after-free in amdxdna_gem_dmabuf_mmap() 7.8 High 2026-08-15
CVE-2026-72092 accel/amdxdna: reject command submission on devices without a submit op - - 2026-08-15

All 17855 known CVE vulnerabilities affecting Linux with full Chinese analysis, references, and POCs where available.