Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17858

All 17858 CVE vulnerabilities found in Linux, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumeration (CWE) vulnerabilities affecting the Linux operating system product. It aggregates security data related to weaknesses within the kernel, distributions, and associated utilities provided by various Linux vendors and maintainers. The collection encompasses a wide range of vulnerability types, including memory corruption issues, privilege escalation flaws, information leaks, and denial-of-service conditions. The database covers historical records spanning several decades, reflecting the evolution of the Linux ecosystem from its early releases to modern stable and development branches. This extensive time range allows for the analysis of long-term security trends and the remediation status of legacy systems that remain in production environments. Visitors to this resource can track vendor-specific advisories to stay informed about patches and updates released by major Linux distribution maintainers. You can also use the page to understand the characteristics and impact of specific weakness classes as they manifest in the Linux environment. Additionally, the interface supports looking up a specific product’s vulnerability history, enabling security professionals to assess risk exposure and prioritize mitigation efforts for critical infrastructure components. The data is organized to facilitate efficient searching and correlation between weakness identifiers and affected software versions, ensuring that administrators and developers have access to comprehensive security insights necessary for maintaining system integrity and compliance.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2026-97609 netfilter: cttimeout: prevent UAF during module unload 7.0 High 2026-09-25
CVE-2026-97610 netfs: Fix uninitialized return value in netfs_unbuffered_write() - - 2026-09-25
CVE-2026-97608 netfilter: nf_log: unregister loggers before per-net teardown 7.0 High 2026-09-25
CVE-2026-97607 vdpa: ifcvf: Put device on unsupported feature error - - 2026-09-25
CVE-2026-97606 fs: autofs: fix memory leak in autofs_fill_super() - - 2026-09-25
CVE-2026-97605 erofs: preserve LZMA decoders on resize failure - - 2026-09-25
CVE-2026-97604 fbdev: vfb: defer cleanup until the last reference - - 2026-09-25
CVE-2026-97603 idpf: disable DIM work before freeing q_vectors - - 2026-09-25
CVE-2026-97602 inet: frags: invalidate queues before flushing them 7.8 High 2026-09-25
CVE-2026-97601 ieee802154: 6lowpan: fix NULL dereference in lowpan_newlink - - 2026-09-25
CVE-2026-97600 ieee802154: cc2520: fix FIFOP work use-after-free - - 2026-09-25
CVE-2026-97599 ieee802154: hwsim: serialize pib updates to fix double-free - - 2026-09-25
CVE-2026-97598 ipv4: fib: bound automatic table ID allocation - - 2026-09-25
CVE-2026-97596 ipvs: reject invalid states in connection template sync records - - 2026-09-25
CVE-2026-97597 ipv6: flowlabel: cap duplicate leases per socket - - 2026-09-25
CVE-2026-97594 landlock: Fix use-after-free of the source's parent directory 7.8 High 2026-09-25
CVE-2026-97595 mac802154: fix use-after-free of sdata via queued RX frames 7.5 High 2026-09-25
CVE-2026-97593 iommu/s390: Fix NULL dereference in iova_to_phys() with ZPCI_TABLE_TYPE_RFX - - 2026-09-25
CVE-2026-97592 s390/crypto: Fix missing scrub of temp buffers with AES ctr and gcm algorithm - - 2026-09-25
CVE-2026-97591 s390/crypto: Fix handling of EBUSY in PHMAC when req is pushed to crypto engine - - 2026-09-25
CVE-2026-97590 s390/crypto: Fix missing scrub of temp buffers with PAES algorithm - - 2026-09-25
CVE-2026-97588 s390/crypto: Map EBUSY to EIO when key conversion fails repeatedly - - 2026-09-25
CVE-2026-97589 s390/crypto: Fix wrong return code to engine in asynch callbacks 7.0 High 2026-09-25
CVE-2026-97587 perf: RISC-V: store available counter mask as bitmap - - 2026-09-25
CVE-2026-97586 afs: Fix missing kunmap in afs_dir_search_bucket() - - 2026-09-25
CVE-2026-97585 afs: Fix double-unmap of directory block - - 2026-09-25
CVE-2026-97584 afs: Fix incorrect free in candidate cleanup in afs_lookup_server() 7.8 High 2026-09-25
CVE-2026-97583 afs: Clear stale peer app data after address list changes 7.5 High 2026-09-25
CVE-2026-97582 hwmon: (gpio-fan) Fix use-after-free in alarm work - - 2026-09-25
CVE-2026-97580 media: rkvdec: bound HEVC tile loops and PPS id to the array capacity 7.8 High 2026-09-25

All 17858 known CVE vulnerabilities affecting Linux with full Chinese analysis, references, and POCs where available.