Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17858

All 17858 CVE vulnerabilities found in Linux, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumeration (CWE) vulnerabilities affecting the Linux operating system product. It aggregates security data related to weaknesses within the kernel, distributions, and associated utilities provided by various Linux vendors and maintainers. The collection encompasses a wide range of vulnerability types, including memory corruption issues, privilege escalation flaws, information leaks, and denial-of-service conditions. The database covers historical records spanning several decades, reflecting the evolution of the Linux ecosystem from its early releases to modern stable and development branches. This extensive time range allows for the analysis of long-term security trends and the remediation status of legacy systems that remain in production environments. Visitors to this resource can track vendor-specific advisories to stay informed about patches and updates released by major Linux distribution maintainers. You can also use the page to understand the characteristics and impact of specific weakness classes as they manifest in the Linux environment. Additionally, the interface supports looking up a specific product’s vulnerability history, enabling security professionals to assess risk exposure and prioritize mitigation efforts for critical infrastructure components. The data is organized to facilitate efficient searching and correlation between weakness identifiers and affected software versions, ensuring that administrators and developers have access to comprehensive security insights necessary for maintaining system integrity and compliance.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2026-97976 Bluetooth: btintel_pcie: validate packet_len before skb_put_data - - 2026-09-25
CVE-2026-97977 Bluetooth: btusb: Fix UAF of btusb_data by rx_work - - 2026-09-25
CVE-2026-97975 Bluetooth: hci_sysfs: Fix NULL pointer dereference in device_del() - - 2026-09-25
CVE-2026-97973 net: macb: destroy the phylink instance on the probe error path - - 2026-09-25
CVE-2026-97974 ipv6: null-check fib6_node before accessing in __ip6_del_rt_siblings() - - 2026-09-25
CVE-2026-97972 net: macb: put the "mdio" child node reference on success - - 2026-09-25
CVE-2026-97971 nstree: check listing permission before taking a namespace reference 7.8 High 2026-09-25
CVE-2026-97970 watchdog: msc313e: Avoid division by zero - - 2026-09-25
CVE-2026-97969 watchdog: msc313e: Fix clock leak and spurious timer in settimeout() - - 2026-09-25
CVE-2026-97968 hwmon: (corsair-cpro) Create debugfs entries after hwmon registration - - 2026-09-25
CVE-2026-97967 hwmon: (corsair-cpro) Remove debugfs entries when probe fails - - 2026-09-25
CVE-2026-97966 octeontx2-pf: reset HTB scheduler topology before freeing queues - - 2026-09-25
CVE-2026-97965 vxlan: initialize _md in vxlan_xmit_one() - - 2026-09-25
CVE-2026-97963 net: stmmac: initialize ptp_lock at probe time - - 2026-09-25
CVE-2026-97964 ppp_synctty: ensure a writeable skb header - - 2026-09-25
CVE-2026-97961 perf/core: Allow list_del during perf_event_overflow() - - 2026-09-25
CVE-2026-97962 net/mlx5e: Move representor vnic reporter to eswitch devlink port - - 2026-09-25
CVE-2026-97960 perf/x86/intel: Prevent drain_pebs() reentry - - 2026-09-25
CVE-2026-97958 net/sched: cls_api: Don't replay RTM_GETCHAIN in tc_ctl_chain(). - - 2026-09-25
CVE-2026-97959 net/sched: cls_route: free emptied bucket on filter move - - 2026-09-25
CVE-2026-97956 net: net_failover: Fix the deadlock in net_failover_slave_name_change() - - 2026-09-25
CVE-2026-97957 net: hinic: fix mailbox segment buffer overflow 8.8 High 2026-09-25
CVE-2026-97955 net: mana: restore the XDP program pointer when pre-allocation fails - - 2026-09-25
CVE-2026-97953 net: stmmac: fix TX descriptor availability check for TSO traffic 7.0 High 2026-09-25
CVE-2026-97954 net/rds: fix tcp stream corruption with large pages - - 2026-09-25
CVE-2026-97952 sunvdc: unmap LDC cookies when the descriptor send fails - - 2026-09-25
CVE-2026-97951 scsi: target: iscsi: Fix hang for aborted WRITE_PENDING commands - - 2026-09-25
CVE-2026-97950 configfs: pin the symlink target's dirent instead of chasing ->ci_dentry - - 2026-09-25
CVE-2026-97948 powerpc/eeh: Fix recursive locking on devices without EEH sensitive driver - - 2026-09-25
CVE-2026-97949 configfs: unhash the dentry before dropping the item in rmdir - - 2026-09-25

All 17858 known CVE vulnerabilities affecting Linux with full Chinese analysis, references, and POCs where available.