Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17422

All 17422 CVE vulnerabilities found in Linux, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumeration (CWE) vulnerabilities affecting the Linux operating system product. It aggregates security data related to weaknesses within the kernel, distributions, and associated utilities provided by various Linux vendors and maintainers. The collection encompasses a wide range of vulnerability types, including memory corruption issues, privilege escalation flaws, information leaks, and denial-of-service conditions. The database covers historical records spanning several decades, reflecting the evolution of the Linux ecosystem from its early releases to modern stable and development branches. This extensive time range allows for the analysis of long-term security trends and the remediation status of legacy systems that remain in production environments. Visitors to this resource can track vendor-specific advisories to stay informed about patches and updates released by major Linux distribution maintainers. You can also use the page to understand the characteristics and impact of specific weakness classes as they manifest in the Linux environment. Additionally, the interface supports looking up a specific product’s vulnerability history, enabling security professionals to assess risk exposure and prioritize mitigation efforts for critical infrastructure components. The data is organized to facilitate efficient searching and correlation between weakness identifiers and affected software versions, ensuring that administrators and developers have access to comprehensive security insights necessary for maintaining system integrity and compliance.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2026-98403 s390/boot: Avoid IPL parameter append past command line - - 2026-10-14
CVE-2026-98401 net: iptunnel: fix stale transport header during tunnel decapsulation - - 2026-10-14
CVE-2026-98402 net: icmp: avoid invalid transport header access in icmp_send tracepoint - - 2026-10-14
CVE-2026-98400 s390/ipl: Fix NULL deref in kdump without re-IPL parm block - - 2026-10-14
CVE-2026-98399 s390/ipl: Fix NULL deref in dump_reipl without re-IPL parm block - - 2026-10-14
CVE-2026-98398 locking/lockdep: Invalidate stale class_cache entries for zapped classes - - 2026-10-14
CVE-2026-98397 platform/x86: x86-android-tablets: hold device reference for secondary fwnode teardown - - 2026-10-14
CVE-2026-98395 powerpc/entry: Fix irq_soft_mask corruption on replayed interrupt exit - - 2026-10-14
CVE-2026-98396 powerpc: Do not restore KUAP in arch_exit_to_user_mode_prepare() - - 2026-10-14
CVE-2026-98394 af_unix: Return immediately when manage_oob() returns NULL for 0-length buffer. - - 2026-10-14
CVE-2026-98393 net: ipv4: Fix UDP length overflow with PMTU discover and big MTU - - 2026-10-14
CVE-2026-98392 Bluetooth: btintel_pcie: fix tx_handle bounds off-by-one - - 2026-10-14
CVE-2026-98390 x86/amd_node: Avoid divide by zero on virtualized systems - - 2026-10-14
CVE-2026-98391 drm/xe: Guard page-fault worker with runtime PM check - - 2026-10-14
CVE-2026-98389 drm/amdgpu: skip gfx switch_power_profile during GPU reset - - 2026-10-14
CVE-2026-98388 exec: do_close_on_exec() before taking exec_update_lock - - 2026-10-14
CVE-2026-98387 s390/crypto: Fix skcipher_walk return code handling in aes_s390 - - 2026-10-14
CVE-2026-98386 scsi: qla2xxx: Use memset_io() to clear QLAFX00 request ring slot - - 2026-10-14
CVE-2026-98385 sched/cache: Decouple sched_cache_group from mm to fix UAF - - 2026-10-12
CVE-2026-98384 bpf: Fix out-of-bounds read of sk_protocol in bpf_sock_destroy() - - 2026-10-09
CVE-2026-98383 bpf: Disallow bpf_skb_pull_data() for LWT_SEG6LOCAL - - 2026-10-09
CVE-2026-98382 bpf: Reject dev-bound-only programs on other devices - - 2026-10-09
CVE-2026-98381 veth: manage XDP program pointers during channel resize - - 2026-10-09
CVE-2026-98380 net/sched: reject IDR error pointers when deleting actions - - 2026-10-09
CVE-2026-98378 bpf: Skip unsettled links in link iterator - - 2026-10-09
CVE-2026-98379 netfilter: ip6t_rpfilter: reject routes without inet6_dev - - 2026-10-09
CVE-2026-98377 vlan: require the MAC header to be present in __vlan_insert_inner_tag() - - 2026-10-09
CVE-2026-98376 bpf: Use array_map_meta_equal for percpu array inner map replacement - - 2026-10-09
CVE-2026-98375 xen/netfront: drop RX packets with a short Ethernet header - - 2026-10-09
CVE-2026-98374 tcp: fix use-after-free of retransmit_skb_hint in tcp_send_synack() - - 2026-10-07

All 17422 known CVE vulnerabilities affecting Linux with full Chinese analysis, references, and POCs where available.