Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17858

All 17858 CVE vulnerabilities found in Linux, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumeration (CWE) vulnerabilities affecting the Linux operating system product. It aggregates security data related to weaknesses within the kernel, distributions, and associated utilities provided by various Linux vendors and maintainers. The collection encompasses a wide range of vulnerability types, including memory corruption issues, privilege escalation flaws, information leaks, and denial-of-service conditions. The database covers historical records spanning several decades, reflecting the evolution of the Linux ecosystem from its early releases to modern stable and development branches. This extensive time range allows for the analysis of long-term security trends and the remediation status of legacy systems that remain in production environments. Visitors to this resource can track vendor-specific advisories to stay informed about patches and updates released by major Linux distribution maintainers. You can also use the page to understand the characteristics and impact of specific weakness classes as they manifest in the Linux environment. Additionally, the interface supports looking up a specific product’s vulnerability history, enabling security professionals to assess risk exposure and prioritize mitigation efforts for critical infrastructure components. The data is organized to facilitate efficient searching and correlation between weakness identifiers and affected software versions, ensuring that administrators and developers have access to comprehensive security insights necessary for maintaining system integrity and compliance.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2026-97581 media: verisilicon: hantro: bound G2 HEVC tile loop to the buffer capacity - - 2026-09-25
CVE-2026-97578 media: verisilicon: rockchip: guard VPU981 AV1 divisor and tile buffer 7.8 High 2026-09-25
CVE-2026-97579 media: mediatek: vcodec: bound AV1 tile-start copy to the array capacity 7.8 High 2026-09-25
CVE-2026-97577 media: verisilicon: rockchip: reject AV1 frames exceeding the tile capacity 7.8 High 2026-09-25
CVE-2026-97575 media: v4l2-ctrls: validate AV1 tile counts 7.8 High 2026-09-25
CVE-2026-97576 media: v4l2-ctrls: validate HEVC tile counts 7.8 High 2026-09-25
CVE-2026-97574 bnxt_en: Don't free the live ring's TPA state on queue restart failure - - 2026-09-25
CVE-2026-97573 bnxt_en: Handle buffer allocation failure in bnxt_rx_ring_reset() 8.1 High 2026-09-25
CVE-2026-97572 bnxt_en: Propagate RX ring init failures in bnxt_init_nic() - - 2026-09-25
CVE-2026-97571 bnxt_en: Propagate TPA buffer allocation failures in bnxt_queue_mem_alloc() - - 2026-09-25
CVE-2026-97570 bnxt_en: Bound SW TPA IDs to prevent crashes 8.1 High 2026-09-25
CVE-2026-97569 bnxt_en: Prevent queue stop with deferred completions - - 2026-09-25
CVE-2026-97568 mptcp: syncookies: remember the request backup flag - - 2026-09-25
CVE-2026-97567 mptcp: prevent race between disconnect() and rtx - - 2026-09-25
CVE-2026-97566 mptcp: pm: kernel: drop pending ADD_ADDR when removing ID0 - - 2026-09-25
CVE-2026-97565 smb: client: reject short READ responses in CIFSSMBRead() - - 2026-09-25
CVE-2026-97564 smb: client: reject userspace cifs.idmap descriptions - - 2026-09-25
CVE-2026-97562 smb: client: pin DFS superblock in iterator callback 7.5 High 2026-09-25
CVE-2026-97563 smb: client: reject out-of-bounds DataOffset in CIFSSMBRead() - - 2026-09-25
CVE-2026-97561 smb: client: honor forceuid/forcegid when mapping SIDs to uid/gid - - 2026-09-25
CVE-2026-97559 smb: client: fail DACL rewrite when the new DACL exceeds 64K - - 2026-09-25
CVE-2026-97560 smb: client: fix one-byte OOB read in smb2_parse_native_symlink() - - 2026-09-25
CVE-2026-97557 smb: client: avoid leaking refcount in cifs_queue_oplock_break() 7.5 High 2026-09-25
CVE-2026-97558 smb: client: fix cifsFileInfo reference leak in deferred close - - 2026-09-25
CVE-2026-97556 smb: client: avoid leaking refcount when cifs_sb_tlink() fails - - 2026-09-25
CVE-2026-97554 smb: client: avoid using uninitialized SIDs in cifs_posix_to_fattr() - - 2026-09-25
CVE-2026-97555 smb: client: fix heap overflow in DACL owner/group rewrite 8.8 High 2026-09-25
CVE-2026-97553 xfs: lock the healthmon when inserting unmount event - - 2026-09-25
CVE-2026-97552 xfs: initialise error in xfs_defer_finish_one() - - 2026-09-25
CVE-2026-97551 xfs: initialise args->total for parent pointer updates - - 2026-09-25

All 17858 known CVE vulnerabilities affecting Linux with full Chinese analysis, references, and POCs where available.