Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17858

All 17858 CVE vulnerabilities found in Linux, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumeration (CWE) vulnerabilities affecting the Linux operating system product. It aggregates security data related to weaknesses within the kernel, distributions, and associated utilities provided by various Linux vendors and maintainers. The collection encompasses a wide range of vulnerability types, including memory corruption issues, privilege escalation flaws, information leaks, and denial-of-service conditions. The database covers historical records spanning several decades, reflecting the evolution of the Linux ecosystem from its early releases to modern stable and development branches. This extensive time range allows for the analysis of long-term security trends and the remediation status of legacy systems that remain in production environments. Visitors to this resource can track vendor-specific advisories to stay informed about patches and updates released by major Linux distribution maintainers. You can also use the page to understand the characteristics and impact of specific weakness classes as they manifest in the Linux environment. Additionally, the interface supports looking up a specific product’s vulnerability history, enabling security professionals to assess risk exposure and prioritize mitigation efforts for critical infrastructure components. The data is organized to facilitate efficient searching and correlation between weakness identifiers and affected software versions, ensuring that administrators and developers have access to comprehensive security insights necessary for maintaining system integrity and compliance.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2026-98130 sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START 8.1 High 2026-09-25
CVE-2026-98128 scsi: mpi3mr: Fix target device refcount leak in mpi3mr_sas_port_add() - - 2026-09-25
CVE-2026-98126 smb/client: validate new EOF for zero range - - 2026-09-25
CVE-2026-98127 smb/client: validate new EOF for insert range - - 2026-09-25
CVE-2026-98124 smb/client: invalidate fscache for fallocate range operations - - 2026-09-25
CVE-2026-98125 smb/client: fix stale page cache in insert/collapse range - - 2026-09-25
CVE-2026-98123 sctp: fix soft lockup from unpadded ASCONF-ACK parameter iteration - - 2026-09-25
CVE-2026-98122 vxlan: mdb: Fix use-after-free in vxlan_mdb_remote_src_del() 7.8 High 2026-09-25
CVE-2026-98121 watchdog: msc313e: Fix NULL pointer dereference in PM callbacks - - 2026-09-25
CVE-2026-98120 netfs: Fix subreq ref leak - - 2026-09-25
CVE-2026-98119 netfs: break unbuffered write when netfs_alloc_subrequest() fails - - 2026-09-25
CVE-2026-98118 netfs: Fix readahead synchronisation issues by loading all folios upfront - - 2026-09-25
CVE-2026-98116 ALSA: pcm: Serialize PCM mmap with buffer reallocation to fix page UAF 7.8 High 2026-09-25
CVE-2026-98117 cachefiles: Fix potential UAF/KASAN warning - - 2026-09-25
CVE-2026-98115 ksmbd: safely drain sessions during logoff 8.8 High 2026-09-25
CVE-2026-98114 ksmbd: propagate DACL parsing errors - - 2026-09-25
CVE-2026-98113 ksmbd: rate limit unmapped SID errors - - 2026-09-25
CVE-2026-98112 ksmbd: fix listener task lifetime on netdev events 7.8 High 2026-09-25
CVE-2026-98111 Bluetooth: btintel: validate version TLV value lengths - - 2026-09-25
CVE-2026-98109 Bluetooth: hci_core: Fix race condition during device registration - - 2026-09-25
CVE-2026-98110 Bluetooth: btintel: bound firmware ID by TLV length - - 2026-09-25
CVE-2026-98108 Bluetooth: L2CAP: fix chan mode for LE_CONN_REQ + EXT_FLOWCTL pchan 7.5 High 2026-09-25
CVE-2026-98106 drm/pagemap: Prevent double migration of device pages - - 2026-09-25
CVE-2026-98107 Bluetooth: L2CAP: fix out-of-bounds write in l2cap_ecred_connect - - 2026-09-25
CVE-2026-98104 net/sched: cls_u32: fix duplicate handle when node ID pool is exhausted - - 2026-09-25
CVE-2026-98105 net: ethernet: oa_tc6: Improve the error recovery - - 2026-09-25
CVE-2026-98103 igmp: convert struct ip_sf_list to RCU - - 2026-09-25
CVE-2026-98102 ipv6: mcast: fix RCU list diversion in ip6_mc_del1_src() - - 2026-09-25
CVE-2026-98101 ipv6: mcast: use copy-on-write RCU updates in ip6_mc_source() - - 2026-09-25
CVE-2026-98099 ipv6: mcast: use rcu_assign_pointer() for __rcu list updates - - 2026-09-25

All 17858 known CVE vulnerabilities affecting Linux with full Chinese analysis, references, and POCs where available.