Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17858

All 17858 CVE vulnerabilities found in Linux, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumeration (CWE) vulnerabilities affecting the Linux operating system product. It aggregates security data related to weaknesses within the kernel, distributions, and associated utilities provided by various Linux vendors and maintainers. The collection encompasses a wide range of vulnerability types, including memory corruption issues, privilege escalation flaws, information leaks, and denial-of-service conditions. The database covers historical records spanning several decades, reflecting the evolution of the Linux ecosystem from its early releases to modern stable and development branches. This extensive time range allows for the analysis of long-term security trends and the remediation status of legacy systems that remain in production environments. Visitors to this resource can track vendor-specific advisories to stay informed about patches and updates released by major Linux distribution maintainers. You can also use the page to understand the characteristics and impact of specific weakness classes as they manifest in the Linux environment. Additionally, the interface supports looking up a specific product’s vulnerability history, enabling security professionals to assess risk exposure and prioritize mitigation efforts for critical infrastructure components. The data is organized to facilitate efficient searching and correlation between weakness identifiers and affected software versions, ensuring that administrators and developers have access to comprehensive security insights necessary for maintaining system integrity and compliance.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2026-97917 accel/ivpu: Validate full buffer range in ivpu_to_cpu_addr - - 2026-09-25
CVE-2026-97916 accel/ivpu: Validate firmware log buffer metadata - - 2026-09-25
CVE-2026-97915 accel/ivpu: Limit firmware log name prints to field size - - 2026-09-25
CVE-2026-97914 accel: ethosu: Fix ethosu_job_open() return value - - 2026-09-25
CVE-2026-97913 accel: ethosu: Ensure cmd stream ends with a stop op - - 2026-09-25
CVE-2026-97911 accel: ethosu: Ensure SRAM region size matches job 7.8 High 2026-09-25
CVE-2026-97912 accel: ethosu: Ensure SRAM size is 0 on mapping failure - - 2026-09-25
CVE-2026-97910 ASoC: sprd: validate compress buffer sizes against fixed allocations 7.8 High 2026-09-25
CVE-2026-97909 ASoC: sti: initialize IRQ lock before requesting IRQ - - 2026-09-25
CVE-2026-97908 Bluetooth: btqcomsmd: destroy RPMsg endpoints before freeing hci_dev - - 2026-09-25
CVE-2026-97906 bootconfig: Fix integer overflow in initrd size check - - 2026-09-25
CVE-2026-97907 Bluetooth: btrtl: Don't leak return code when parsing firmware format v2 - - 2026-09-25
CVE-2026-97905 cpufreq: zero-initialize policy cpumask before sysfs publication - - 2026-09-25
CVE-2026-97903 exit: hold a reference to thread_pid across proc_flush_pid 7.8 High 2026-09-25
CVE-2026-97904 cpufreq: initialize policy rwsem before sysfs publication - - 2026-09-25
CVE-2026-97901 genetlink: pin family module during policy dump - - 2026-09-25
CVE-2026-97902 fs: don't return -EINVAL for successful nested thaw - - 2026-09-25
CVE-2026-97900 drm/drm_exec: fix up contended obj when num_objects is 0 - - 2026-09-25
CVE-2026-97899 drm/i915: Fix memory leak in query_perf_config_list() - - 2026-09-25
CVE-2026-97621 drm/rockchip: analogix_dp: fix unchecked bound endpoint name length - - 2026-09-25
CVE-2026-97620 drm/xe: Flush LSC untyped L1 dataport cache after rcs/ccs batches - - 2026-09-25
CVE-2026-97619 io_uring/rw: end write accounting from ->ki_complete - - 2026-09-25
CVE-2026-97618 io_uring/net: don't overconsume buffers when using MSG_TRUNC - - 2026-09-25
CVE-2026-97616 net/sched: act_api: release all action references on NEWACTION failure - - 2026-09-25
CVE-2026-97617 ring-buffer: Check resize_disabled before publishing the new subbuf order - - 2026-09-25
CVE-2026-97615 net: bridge: use option bits for CFM/MRP frame handlers - - 2026-09-25
CVE-2026-97614 net: dsa: tag_brcm: legacy FCS: request needed tailroom - - 2026-09-25
CVE-2026-97613 net: mana: Reserve extra CQ slot for the fence completion CQE - - 2026-09-25
CVE-2026-97611 net: openvswitch: fix use-after-free of the flow table mask array 7.8 High 2026-09-25
CVE-2026-97612 net: mpls: clear inner_protocol when the last label is popped 7.8 High 2026-09-25

All 17858 known CVE vulnerabilities affecting Linux with full Chinese analysis, references, and POCs where available.