Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17855

All 17855 CVE vulnerabilities found in Linux, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumeration (CWE) vulnerabilities affecting the Linux operating system product. It aggregates security data related to weaknesses within the kernel, distributions, and associated utilities provided by various Linux vendors and maintainers. The collection encompasses a wide range of vulnerability types, including memory corruption issues, privilege escalation flaws, information leaks, and denial-of-service conditions. The database covers historical records spanning several decades, reflecting the evolution of the Linux ecosystem from its early releases to modern stable and development branches. This extensive time range allows for the analysis of long-term security trends and the remediation status of legacy systems that remain in production environments. Visitors to this resource can track vendor-specific advisories to stay informed about patches and updates released by major Linux distribution maintainers. You can also use the page to understand the characteristics and impact of specific weakness classes as they manifest in the Linux environment. Additionally, the interface supports looking up a specific product’s vulnerability history, enabling security professionals to assess risk exposure and prioritize mitigation efforts for critical infrastructure components. The data is organized to facilitate efficient searching and correlation between weakness identifiers and affected software versions, ensuring that administrators and developers have access to comprehensive security insights necessary for maintaining system integrity and compliance.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2026-68417 RDMA/siw: publish QP after initialization 7.8 High 2026-08-10
CVE-2026-68416 mtd: fix double free and WARN_ON in add_mtd_device() error paths - - 2026-08-10
CVE-2026-68415 xfrm: clear mode callbacks after failed mode setup 7.8 High 2026-08-10
CVE-2026-68413 wifi: ipw2100: fix potential memory leak in ipw2100_pci_init_one() - - 2026-08-10
CVE-2026-68414 wifi: cfg80211: cancel sched scan results work on unregister 7.5 High 2026-08-10
CVE-2026-68412 wifi: cfg80211: Fix an error handling path in cfg80211_wext_siwscan() - - 2026-08-10
CVE-2026-68411 wifi: mac80211_hwsim: clamp virtio RX length before skb_put - - 2026-08-10
CVE-2026-68410 wifi: libertas: fix memory leak in helper_firmware_cb() - - 2026-08-10
CVE-2026-68409 wifi: mac80211: defer link RX stats percpu free to RCU 8.8 High 2026-08-10
CVE-2026-68408 wifi: cfg80211: convert pmsr_free_wk to wiphy_work to fix deadlock - - 2026-08-10
CVE-2026-68407 wifi: nl80211: free RNR data on MBSSID mismatch - - 2026-08-10
CVE-2026-68406 wifi: cfg80211: validate PMSR FTM preamble range - - 2026-08-10
CVE-2026-68405 wifi: mac80211: free AP_VLAN bc_buf SKBs outside IRQ lock - - 2026-08-10
CVE-2026-68404 wifi: cfg80211: use wiphy work for socket owner autodisconnect 7.8 High 2026-08-10
CVE-2026-68403 wifi: brcmfmac: initialize SDIO data work before cleanup - - 2026-08-10
CVE-2026-68402 wifi: cfg80211: bound element ID read when checking non-inheritance 7.1 High 2026-08-10
CVE-2026-68401 firmware: arm_ffa: Fix out-of-bound writes in ffa_setup_and_transmit() 7.8 High 2026-08-10
CVE-2026-68400 firmware: arm_ffa: Fix Endpoint Memory Access Descriptor offset calculation 7.8 High 2026-08-10
CVE-2026-68399 bpf: Fix UAF in sock clone early bailouts 7.8 High 2026-08-10
CVE-2026-68398 ppp: defer channel free to an RCU grace period to fix pppol2tp RX UAF 7.8 High 2026-08-10
CVE-2026-68397 net/iucv: take a reference on the socket found in afiucv_hs_rcv() 8.8 High 2026-08-10
CVE-2026-68396 scsi: core: wake eh reliably when using scsi_schedule_eh - - 2026-08-10
CVE-2026-68395 ata: sata_dwc_460ex: enable SATA interrupts only after IRQ handler is registered - - 2026-08-10
CVE-2026-68394 Bluetooth: MGMT: revalidate LOAD_CONN_PARAM queued update 7.8 High 2026-08-10
CVE-2026-68393 Bluetooth: hci_sync: extend conn_hash lookup critical sections 8.8 High 2026-08-10
CVE-2026-68392 Bluetooth: mgmt: fix locking in unpair_device/disconnect_sync 7.8 High 2026-08-10
CVE-2026-68391 Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds 7.8 High 2026-08-10
CVE-2026-68390 Bluetooth: hci_sync: hold hdev->lock for hci_conn_params lookups 8.8 High 2026-08-10
CVE-2026-68389 Bluetooth: hci_qca: Clear memdump state on invalid dump size 8.8 High 2026-08-10
CVE-2026-68388 smb/client: handle overlapping allocated ranges in fallocate 9.8 Critical 2026-08-10

All 17855 known CVE vulnerabilities affecting Linux with full Chinese analysis, references, and POCs where available.