Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17422

All 17422 CVE vulnerabilities found in Linux, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumeration (CWE) vulnerabilities affecting the Linux operating system product. It aggregates security data related to weaknesses within the kernel, distributions, and associated utilities provided by various Linux vendors and maintainers. The collection encompasses a wide range of vulnerability types, including memory corruption issues, privilege escalation flaws, information leaks, and denial-of-service conditions. The database covers historical records spanning several decades, reflecting the evolution of the Linux ecosystem from its early releases to modern stable and development branches. This extensive time range allows for the analysis of long-term security trends and the remediation status of legacy systems that remain in production environments. Visitors to this resource can track vendor-specific advisories to stay informed about patches and updates released by major Linux distribution maintainers. You can also use the page to understand the characteristics and impact of specific weakness classes as they manifest in the Linux environment. Additionally, the interface supports looking up a specific product’s vulnerability history, enabling security professionals to assess risk exposure and prioritize mitigation efforts for critical infrastructure components. The data is organized to facilitate efficient searching and correlation between weakness identifiers and affected software versions, ensuring that administrators and developers have access to comprehensive security insights necessary for maintaining system integrity and compliance.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2026-98051 net: bcmasp: fix tx_spb_ring_full() checking same slot cnt times - - 2026-09-25
CVE-2026-98052 net: bcmasp: clear txcb->last before writing each descriptor 7.8 High 2026-09-25
CVE-2026-98049 bpf: zero extend the result of an arena 32-bit cmpxchg - - 2026-09-25
CVE-2026-98050 mlxsw: spectrum_ptp: Fix napi_gro_receive() call from GC workqueue context 7.5 High 2026-09-25
CVE-2026-98048 bpf: don't rewrite bpf_fastcall patterns entered by a jump - - 2026-09-25
CVE-2026-98047 bpf: Check ancestor frames for rbtree callbacks - - 2026-09-25
CVE-2026-98046 bpf: Mark bpf_btf_find_by_name_kind() as sleepable - - 2026-09-25
CVE-2026-98045 bpf: Mark faultable stack helpers as sleepable - - 2026-09-25
CVE-2026-98044 bpf: Reject legacy packet loads from callbacks - - 2026-09-25
CVE-2026-98043 bpf: Don't infer non-NULL from a pointer with an unbounded offset - - 2026-09-25
CVE-2026-98041 bpf: Don't predict JMP32 pointer vs zero comparisons 7.0 High 2026-09-25
CVE-2026-98042 bpf: Don't resurrect a scalar id dropped by collect_linked_regs() - - 2026-09-25
CVE-2026-98040 bpf: Mark the zero register precise for a register-form NULL check - - 2026-09-25
CVE-2026-98038 bpf: Keep refcount_acquire nullable for borrowed RCU kptrs - - 2026-09-25
CVE-2026-98039 bpf: Require MEM_PERCPU for percpu kptr stores - - 2026-09-25
CVE-2026-98036 bpf: Preserve special fields in recycled rhtab elements - - 2026-09-25
CVE-2026-98037 bpf: Reject untrusted allocated-object pointers - - 2026-09-25
CVE-2026-98035 bpf: Cancel special fields when recycling rhtab elements - - 2026-09-25
CVE-2026-98034 bpf: Mark NULL kptr stores precise - - 2026-09-25
CVE-2026-98033 bpf: Preserve inner map identity in callback frames - - 2026-09-25
CVE-2026-98031 nexthop: Initialize extack in remove_nh_grp_entry() - - 2026-09-25
CVE-2026-98032 tracing: Fix subbuf resize races with trace_pipe_raw readers - - 2026-09-25
CVE-2026-98030 net: dsa: bcm_sf2: bound the CFP rule dump by the caller's buffer size 7.0 High 2026-09-25
CVE-2026-98029 eth: nfp: bound the ntuple rule dump by the caller's buffer size 7.0 High 2026-09-25
CVE-2026-98028 eth: nfp: drop the replaced rule from the list when reprogramming fails - - 2026-09-25
CVE-2026-98026 net: bridge: mcast: properly convert mglist to rcu - - 2026-09-25
CVE-2026-98027 net: dsa: mv88e6xxx: bound the policy rule dump by the caller's buffer size 7.0 High 2026-09-25
CVE-2026-98025 net: usb: cx82310_eth: drop URB after 0xffff reboot sentinel to prevent partial_data heap overflow - - 2026-09-25
CVE-2026-98023 vxlan: reject dynamic fdb entries that reference a nexthop id 7.8 High 2026-09-25
CVE-2026-98024 s390/ism: folio_put() after error - - 2026-09-25

All 17422 known CVE vulnerabilities affecting Linux with full Chinese analysis, references, and POCs where available.