Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17422

All 17422 CVE vulnerabilities found in Linux, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumeration (CWE) vulnerabilities affecting the Linux operating system product. It aggregates security data related to weaknesses within the kernel, distributions, and associated utilities provided by various Linux vendors and maintainers. The collection encompasses a wide range of vulnerability types, including memory corruption issues, privilege escalation flaws, information leaks, and denial-of-service conditions. The database covers historical records spanning several decades, reflecting the evolution of the Linux ecosystem from its early releases to modern stable and development branches. This extensive time range allows for the analysis of long-term security trends and the remediation status of legacy systems that remain in production environments. Visitors to this resource can track vendor-specific advisories to stay informed about patches and updates released by major Linux distribution maintainers. You can also use the page to understand the characteristics and impact of specific weakness classes as they manifest in the Linux environment. Additionally, the interface supports looking up a specific product’s vulnerability history, enabling security professionals to assess risk exposure and prioritize mitigation efforts for critical infrastructure components. The data is organized to facilitate efficient searching and correlation between weakness identifiers and affected software versions, ensuring that administrators and developers have access to comprehensive security insights necessary for maintaining system integrity and compliance.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2026-98021 net: reject oversized tx_queue_len at netlink parse time - - 2026-09-25
CVE-2026-98022 net: cap tx_queue_len at S16_MAX to prevent oversized ring allocations - - 2026-09-25
CVE-2026-98020 pds_core: fix cmd_regs access racing BAR unmap on reset - - 2026-09-25
CVE-2026-98018 net: mctp: i3c: serialize probe with bus removal - - 2026-09-25
CVE-2026-98019 bpf: mark a NULL call argument precise - - 2026-09-25
CVE-2026-98017 net/sched: defer qdisc freeing after failed creation 7.8 High 2026-09-25
CVE-2026-98016 net/mlx5e: Fix use-after-free race in sample_restore_put() - - 2026-09-25
CVE-2026-98015 net/mlx5: E-Switch: fix use-after-free in mlx5_eswitch_termtbl_put - - 2026-09-25
CVE-2026-98013 net/sched: fq_pie: clamp quantum in change path - - 2026-09-25
CVE-2026-98014 net/mlx5: E-Switch, prevent mc_list repopulation during vport disable - - 2026-09-25
CVE-2026-98012 net/sched: sfq: clamp quantum in change path - - 2026-09-25
CVE-2026-98010 net/sched: drr: clamp quantum in change class - - 2026-09-25
CVE-2026-98011 net/sched: hhf: clamp quantum in change and init paths - - 2026-09-25
CVE-2026-98008 net: macb: fix NULL pointer dereference on unbind with fixed-link - - 2026-09-25
CVE-2026-98009 net/sched: ets: clamp quantum in parse and fallback paths - - 2026-09-25
CVE-2026-98007 bpf: Reject non-scalar bpf_loop iteration counts - - 2026-09-25
CVE-2026-98006 ALSA: caiaq: Decoupling ep1_in_urb in caiaq dev - - 2026-09-25
CVE-2026-98005 erofs: delimit inode_share cache key components - - 2026-09-25
CVE-2026-98004 iommu/riscv: Serialize command queue publishing - - 2026-09-25
CVE-2026-98003 iommu/amd: Do not reallocate GA log buffers on resume - - 2026-09-25
CVE-2026-98002 iommu/amd: Fix ineffective error check in nested domain allocation 7.8 High 2026-09-25
CVE-2026-98000 hwmon: Fix potential UAF in pec_store - - 2026-09-25
CVE-2026-98001 hwmon: (ltc4282) Make sure clk_init_data is fully initialized - - 2026-09-25
CVE-2026-97998 netfilter: nfnetlink_log: cope with concurrent instance destruction - - 2026-09-25
CVE-2026-97996 virtio: fix use-after-free in unregister_virtio_device() - - 2026-09-25
CVE-2026-97997 virtio_ring: fix stale descriptor flags after a failed packed add - - 2026-09-25
CVE-2026-97994 vhost/vdpa: reject VRING_NUM larger than device max - - 2026-09-25
CVE-2026-97995 virtio_console: do not free control-out buffers on remove - - 2026-09-25
CVE-2026-97993 vhost-vdpa: don't install the eventfd_ctx_fdget() error in config_ctx - - 2026-09-25
CVE-2026-97992 vhost-vdpa: protect config_ctx from being freed under the config callback - - 2026-09-25

All 17422 known CVE vulnerabilities affecting Linux with full Chinese analysis, references, and POCs where available.