Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17855

All 17855 CVE vulnerabilities found in Linux, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumeration (CWE) vulnerabilities affecting the Linux operating system product. It aggregates security data related to weaknesses within the kernel, distributions, and associated utilities provided by various Linux vendors and maintainers. The collection encompasses a wide range of vulnerability types, including memory corruption issues, privilege escalation flaws, information leaks, and denial-of-service conditions. The database covers historical records spanning several decades, reflecting the evolution of the Linux ecosystem from its early releases to modern stable and development branches. This extensive time range allows for the analysis of long-term security trends and the remediation status of legacy systems that remain in production environments. Visitors to this resource can track vendor-specific advisories to stay informed about patches and updates released by major Linux distribution maintainers. You can also use the page to understand the characteristics and impact of specific weakness classes as they manifest in the Linux environment. Additionally, the interface supports looking up a specific product’s vulnerability history, enabling security professionals to assess risk exposure and prioritize mitigation efforts for critical infrastructure components. The data is organized to facilitate efficient searching and correlation between weakness identifiers and affected software versions, ensuring that administrators and developers have access to comprehensive security insights necessary for maintaining system integrity and compliance.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2026-72091 accel/amdxdna: reject user command submission without a command BO - - 2026-08-15
CVE-2026-72090 accel/amdxdna: Use caller client for debug BO sync 7.8 High 2026-08-15
CVE-2026-72089 accel/ivpu: Reject firmware log with size smaller than header 7.1 High 2026-08-15
CVE-2026-72087 scsi: lpfc: Fix memory leak in lpfc_sli4_driver_resource_setup() - - 2026-08-15
CVE-2026-72088 scsi: hpsa: Fix DMA mapping leak on IOACCEL2 reset path - - 2026-08-15
CVE-2026-72086 scsi: xen: scsiback: Free the command tag on the TMR submit-failure path - - 2026-08-15
CVE-2026-72085 scsi: xen: scsiback: Free unsubmitted command instead of double-putting it 9.3 Critical 2026-08-15
CVE-2026-72084 scsi: target: Bound PR-OUT TransportID parsing to the received buffer 9.8 Critical 2026-08-15
CVE-2026-72083 scsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVE 9.8 Critical 2026-08-15
CVE-2026-72082 scsi: elx: efct: Fix refcount leak in efct_hw_io_abort() - - 2026-08-15
CVE-2026-72081 scsi: elx: efct: Fix I/O leak on unsupported additional CDB - - 2026-08-15
CVE-2026-72080 fs/resctrl: Fix use-after-free during unmount 7.8 High 2026-08-15
CVE-2026-72079 Input: ims-pcu - fix use-after-free and double-free in disconnect - - 2026-08-15
CVE-2026-72077 Input: ims-pcu - fix firmware leak in async update - - 2026-08-15
CVE-2026-72078 Input: ims-pcu - validate control endpoint type - - 2026-08-15
CVE-2026-72076 Input: ims-pcu - fix out-of-bounds read in ims_pcu_irq() debug logging - - 2026-08-15
CVE-2026-72075 Input: ims-pcu - fix race condition in reset_device sysfs callback - - 2026-08-15
CVE-2026-72073 mmc: vub300: fix use-after-free on probe failure - - 2026-08-15
CVE-2026-72074 Input: ims-pcu - fix type confusion in CDC union descriptor parsing - - 2026-08-15
CVE-2026-72072 net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete 7.8 High 2026-08-15
CVE-2026-72071 tracing/user_events: Fix use-after-free in user_event_mm_dup() 7.8 High 2026-08-15
CVE-2026-72069 locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() 9.8 Critical 2026-08-15
CVE-2026-72070 wifi: libertas_tf: fix use-after-free in lbtf_free_adapter() - - 2026-08-15
CVE-2026-72068 posix-cpu-timers: Use u64 multiplication in update_rlimit_cpu() - - 2026-08-15
CVE-2026-72067 cpu: hotplug: Preserve per instance callback errors 7.8 High 2026-08-15
CVE-2026-72066 cpu: hotplug: Bound hotplug states sysfs output 7.8 High 2026-08-15
CVE-2026-72065 net: mana: Validate the packet length reported by the NIC 9.8 Critical 2026-08-15
CVE-2026-72064 net: mana: Sync page pool RX frags for CPU 9.8 Critical 2026-08-15
CVE-2026-72063 gpio: tegra: do not call pinctrl for GPIO direction - - 2026-08-15
CVE-2026-72062 gpio: mt7621: avoid corruption of shared interrupt trigger state - - 2026-08-15

All 17855 known CVE vulnerabilities affecting Linux with full Chinese analysis, references, and POCs where available.