Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17858

All 17858 CVE vulnerabilities found in Linux, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumeration (CWE) vulnerabilities affecting the Linux operating system product. It aggregates security data related to weaknesses within the kernel, distributions, and associated utilities provided by various Linux vendors and maintainers. The collection encompasses a wide range of vulnerability types, including memory corruption issues, privilege escalation flaws, information leaks, and denial-of-service conditions. The database covers historical records spanning several decades, reflecting the evolution of the Linux ecosystem from its early releases to modern stable and development branches. This extensive time range allows for the analysis of long-term security trends and the remediation status of legacy systems that remain in production environments. Visitors to this resource can track vendor-specific advisories to stay informed about patches and updates released by major Linux distribution maintainers. You can also use the page to understand the characteristics and impact of specific weakness classes as they manifest in the Linux environment. Additionally, the interface supports looking up a specific product’s vulnerability history, enabling security professionals to assess risk exposure and prioritize mitigation efforts for critical infrastructure components. The data is organized to facilitate efficient searching and correlation between weakness identifiers and affected software versions, ensuring that administrators and developers have access to comprehensive security insights necessary for maintaining system integrity and compliance.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2026-97946 x86/amd_node: Fix PCI device reference counting in amd_smn_init() - - 2026-09-25
CVE-2026-97947 x86/amd_node: Fix potential NULL pointer dereference - - 2026-09-25
CVE-2026-97945 x86/mm: Fix user-space data loss with MADV_FREE and THP - - 2026-09-25
CVE-2026-97944 x86/cfi: Fix FineIBT hash offset in cfi_get_func_hash() - - 2026-09-25
CVE-2026-97943 x86/mm/pat: Acquire init_mm write lock on collapse to avoid UAF - - 2026-09-25
CVE-2026-97942 x86/alternatives: Exclude text poking against change_page_attr() - - 2026-09-25
CVE-2026-97941 mm/slab: take n->list_lock in __slab_try_return_freelist() to avoid race 7.8 High 2026-09-25
CVE-2026-97940 ipv6: fix fib6 walker UAF on seq stop 7.8 High 2026-09-25
CVE-2026-97938 reboot: fix cad_pid use-after-free race - - 2026-09-25
CVE-2026-97939 ipmr: account multicast table and route memory - - 2026-09-25
CVE-2026-97937 ftrace: fork: Initialize function graph state before copy_exec_state() 7.8 High 2026-09-25
CVE-2026-97935 tracing: Set the trace clock before registering the histogram trigger - - 2026-09-25
CVE-2026-97936 tracing: Fix memory corruption from the histogram stacktrace modifier - - 2026-09-25
CVE-2026-97933 tracing: Take trace_array reference when opening a tracer options file - - 2026-09-25
CVE-2026-97934 tracing: Fix memory corruption from a "STACKTRACE" histogram key - - 2026-09-25
CVE-2026-97932 tracing: Don't dereference trace_event_file in deferred trigger free - - 2026-09-25
CVE-2026-97930 ALSA: usbusx2y: fix in04_last array size mismatch with in04_buf - - 2026-09-25
CVE-2026-97931 ALSA: us122l: Prevent write upgrades for read mappings 7.0 High 2026-09-25
CVE-2026-97929 ALSA: usbusx2y: validate URB actual_length in interrupt callback - - 2026-09-25
CVE-2026-97927 ufs: create the root dentry after loading cylinder metadata - - 2026-09-25
CVE-2026-97928 drm/amdgpu: skip the VMID 0 flush for VRAM - - 2026-09-25
CVE-2026-97925 tick/broadcast: Plug clockevents replacement race - - 2026-09-25
CVE-2026-97926 ufs: validate cylinder group metadata before caching it 7.0 High 2026-09-25
CVE-2026-97924 tracing/user_events: Don't destroy fields when event removal fails - - 2026-09-25
CVE-2026-97922 tracing: Free histogram var refs regardless of how often they are referenced - - 2026-09-25
CVE-2026-97923 tracing: Free histogram the var ref when its initialization fails - - 2026-09-25
CVE-2026-97921 tracing: Free histogram the field rejected for a bad modifier - - 2026-09-25
CVE-2026-97920 tracing: Keep the entry count when the histogram stats allocation fails - - 2026-09-25
CVE-2026-97919 tracing: Take the reference before publishing the named histogram trigger - - 2026-09-25
CVE-2026-97918 tracing: Undo the registration when enabling the histogram trigger fails - - 2026-09-25

All 17858 known CVE vulnerabilities affecting Linux with full Chinese analysis, references, and POCs where available.