Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17858

All 17858 CVE vulnerabilities found in Linux, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumeration (CWE) vulnerabilities affecting the Linux operating system product. It aggregates security data related to weaknesses within the kernel, distributions, and associated utilities provided by various Linux vendors and maintainers. The collection encompasses a wide range of vulnerability types, including memory corruption issues, privilege escalation flaws, information leaks, and denial-of-service conditions. The database covers historical records spanning several decades, reflecting the evolution of the Linux ecosystem from its early releases to modern stable and development branches. This extensive time range allows for the analysis of long-term security trends and the remediation status of legacy systems that remain in production environments. Visitors to this resource can track vendor-specific advisories to stay informed about patches and updates released by major Linux distribution maintainers. You can also use the page to understand the characteristics and impact of specific weakness classes as they manifest in the Linux environment. Additionally, the interface supports looking up a specific product’s vulnerability history, enabling security professionals to assess risk exposure and prioritize mitigation efforts for critical infrastructure components. The data is organized to facilitate efficient searching and correlation between weakness identifiers and affected software versions, ensuring that administrators and developers have access to comprehensive security insights necessary for maintaining system integrity and compliance.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2026-98159 wifi: mt76: mt7921: validate CLC firmware records - - 2026-09-25
CVE-2026-98158 ppp_async: drop the errored frame instead of resetting its headroom - - 2026-09-25
CVE-2026-98157 EDAC/device_sysfs: Use kstrtouint() for poll_msec to prevent truncation - - 2026-09-25
CVE-2026-98156 drm/virtio: use the DMA API for resource backing on Xen 7.8 High 2026-09-25
CVE-2026-98155 accel/qaic: Address potential out-of-bounds read in resp_worker() - - 2026-09-25
CVE-2026-98153 nvme: fix racy access to FDP placement id array - - 2026-09-25
CVE-2026-98154 nvme-rdma: fix -EIO cleanup order in queue_rq 7.0 High 2026-09-25
CVE-2026-98152 nvmet-rdma: fix queue leak when connect backlog is exceeded - - 2026-09-25
CVE-2026-98151 bpf: Fix REG INVARIANTS VIOLATION on speculative pointer arithmetic - - 2026-09-25
CVE-2026-98150 bpf: Fix BPF_F_CPU validation for sparse CPU IDs 7.0 High 2026-09-25
CVE-2026-98148 drm/gud: validate GUD_ROTATION_0 is present in supported rotations - - 2026-09-25
CVE-2026-98149 bpf: Fix percpu map update indexing with sparse CPU IDs - - 2026-09-25
CVE-2026-98147 printk: Don't WARN on kthread_run failure. - - 2026-09-25
CVE-2026-98145 accel/amdxdna: reject a command chain that carries no commands - - 2026-09-25
CVE-2026-98146 accel/amdxdna: Remove __counted_by from struct amdxdna_cmd_chain - - 2026-09-25
CVE-2026-98144 accel/amdxdna: put the chained BO when its mapping fails - - 2026-09-25
CVE-2026-98143 accel: ethosu: Don't read the U65 rounding mode as a storage mode 7.8 High 2026-09-25
CVE-2026-98142 drm/cirrus-qemu: Validate BAR0 size during probe - - 2026-09-25
CVE-2026-98140 ntfs: fix kmap_local leak in write_mft_record_nolock() error paths - - 2026-09-25
CVE-2026-98141 ntfs: propagate reparse index insertion failure - - 2026-09-25
CVE-2026-98139 ntfs: only count successfully cleared runs when freeing clusters - - 2026-09-25
CVE-2026-98138 ntfs: do not mark the volume clean in sync_fs when errors were recorded - - 2026-09-25
CVE-2026-98137 ntfs: treat any nonzero dio zero-range return as an error - - 2026-09-25
CVE-2026-98136 ntfs: bound $AttrDef table walk to the loaded table size - - 2026-09-25
CVE-2026-98135 ntfs: reject invalid sectors_per_cluster in the boot sector - - 2026-09-25
CVE-2026-98134 bpf: check_cond_jmp_op(): properly infer if register is null - - 2026-09-25
CVE-2026-98133 ntfs: leave HasEA flag untouched on setxattr failure - - 2026-09-25
CVE-2026-98132 bpf: don't downgrade half-dead scalar zero spills to STACK_ZERO - - 2026-09-25
CVE-2026-98131 net: stmmac: fix dma mapping leak in stmmac_tso_xmit() - - 2026-09-25
CVE-2026-98129 scsi: mpi3mr: Fix NULL pointer dereference in mpi3mr_sas_port_add() - - 2026-09-25

All 17858 known CVE vulnerabilities affecting Linux with full Chinese analysis, references, and POCs where available.