Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17855

All 17855 CVE vulnerabilities found in Linux, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumeration (CWE) vulnerabilities affecting the Linux operating system product. It aggregates security data related to weaknesses within the kernel, distributions, and associated utilities provided by various Linux vendors and maintainers. The collection encompasses a wide range of vulnerability types, including memory corruption issues, privilege escalation flaws, information leaks, and denial-of-service conditions. The database covers historical records spanning several decades, reflecting the evolution of the Linux ecosystem from its early releases to modern stable and development branches. This extensive time range allows for the analysis of long-term security trends and the remediation status of legacy systems that remain in production environments. Visitors to this resource can track vendor-specific advisories to stay informed about patches and updates released by major Linux distribution maintainers. You can also use the page to understand the characteristics and impact of specific weakness classes as they manifest in the Linux environment. Additionally, the interface supports looking up a specific product’s vulnerability history, enabling security professionals to assess risk exposure and prioritize mitigation efforts for critical infrastructure components. The data is organized to facilitate efficient searching and correlation between weakness identifiers and affected software versions, ensuring that administrators and developers have access to comprehensive security insights necessary for maintaining system integrity and compliance.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2026-68357 watchdog: pretimeout: Fix UAF in watchdog_unregister_governor() - - 2026-08-10
CVE-2026-68356 watchdog: airoha: Prevent division by zero when clock frequency is zero - - 2026-08-10
CVE-2026-68355 wifi: ath11k: fix potential buffer underflow in ath11k_hal_rx_msdu_list_get() - - 2026-08-10
CVE-2026-68354 firewire: net: Fix fragmented datagram reassembly 8.8 High 2026-08-10
CVE-2026-68353 wifi: ath6kl: fix OOB read from firmware num_msg in TX complete handler 8.1 High 2026-08-10
CVE-2026-68352 wifi: ath6kl: fix OOB read from firmware IE lengths in connect event 8.3 High 2026-08-10
CVE-2026-68351 wifi: carl9170: bound memcpy length in cmd callback to prevent OOB read - - 2026-08-10
CVE-2026-68350 wifi: carl9170: fix OOB read from off-by-two in TX status handler - - 2026-08-10
CVE-2026-68349 wifi: carl9170: fix buffer overflow in rx_stream failover path - - 2026-08-10
CVE-2026-68348 ASoC: tas2781: bound firmware description string parsing 7.1 High 2026-08-10
CVE-2026-68347 iommu/amd: Fix IRQ unsafe locking in gdom allocation - - 2026-08-10
CVE-2026-68346 ALSA: hda: cs35l41: validate and free ACPI mute object - - 2026-08-10
CVE-2026-68345 arm_mpam: guard MBWU state before adding it to garbage - - 2026-08-10
CVE-2026-68344 usb: atm: ueagle-atm: reject descriptors that confuse probe and disconnect - - 2026-08-10
CVE-2026-68343 smb: client: validate DFS referral PathConsumed 9.1 Critical 2026-08-10
CVE-2026-68342 ovpn: avoid putting unrelated P2P peer on socket release - - 2026-08-10
CVE-2026-68341 ovpn: fix use after free in unlock_ovpn() 8.8 High 2026-08-10
CVE-2026-68340 hwmon: occ: validate poll response sensor blocks 7.7 High 2026-08-10
CVE-2026-68339 Bluetooth: btusb: validate Realtek vendor event length - - 2026-08-10
CVE-2026-68338 net/packet: avoid fanout hook re-registration after unregister 7.8 High 2026-08-10
CVE-2026-68337 bpf: Reject redirect helpers without a bpf_net_context - - 2026-08-10
CVE-2026-68336 bonding: fix devconf_all NULL dereference when IPv6 is disabled - - 2026-08-10
CVE-2026-68335 rds: drop incoming messages that cross network namespace boundaries 7.8 High 2026-08-10
CVE-2026-68334 rxrpc: fix io_thread race in rxrpc_wake_up_io_thread() - - 2026-08-10
CVE-2026-68333 dpaa2-switch: put MAC endpoint device on disconnect - - 2026-08-10
CVE-2026-68332 net: airoha: Fix potential use-after-free in airoha_ppe_deinit() - - 2026-08-10
CVE-2026-68331 dpaa2-eth: put MAC endpoint device on disconnect - - 2026-08-10
CVE-2026-68330 net: airoha: Fix DMA direction for NPU mailbox buffer 7.8 High 2026-08-10
CVE-2026-68329 iommu/amd: Wait for completion instead of returning early in iommu_completion_wait() 8.8 High 2026-08-10
CVE-2026-68328 nfp: Check resource mutex allocation - - 2026-08-10

All 17855 known CVE vulnerabilities affecting Linux with full Chinese analysis, references, and POCs where available.