Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17854

All 17854 CVE vulnerabilities found in Linux, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumeration (CWE) vulnerabilities affecting the Linux operating system product. It aggregates security data related to weaknesses within the kernel, distributions, and associated utilities provided by various Linux vendors and maintainers. The collection encompasses a wide range of vulnerability types, including memory corruption issues, privilege escalation flaws, information leaks, and denial-of-service conditions. The database covers historical records spanning several decades, reflecting the evolution of the Linux ecosystem from its early releases to modern stable and development branches. This extensive time range allows for the analysis of long-term security trends and the remediation status of legacy systems that remain in production environments. Visitors to this resource can track vendor-specific advisories to stay informed about patches and updates released by major Linux distribution maintainers. You can also use the page to understand the characteristics and impact of specific weakness classes as they manifest in the Linux environment. Additionally, the interface supports looking up a specific product’s vulnerability history, enabling security professionals to assess risk exposure and prioritize mitigation efforts for critical infrastructure components. The data is organized to facilitate efficient searching and correlation between weakness identifiers and affected software versions, ensuring that administrators and developers have access to comprehensive security insights necessary for maintaining system integrity and compliance.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2026-97518 wifi: cfg80211: reject duplicate wiphy cipher suite entries - - 2026-09-24
CVE-2026-97517 wifi: nl80211: reject beacons with bad HE operation - - 2026-09-24
CVE-2026-97516 wifi: rtw88: Add NULL check for chip->edcca_th in rtw_fw_adaptivity_result() - - 2026-09-24
CVE-2026-97515 i3c: master: svc: Prevent IRQ storm from false SLVSTART on NPCM845 - - 2026-09-24
CVE-2026-97514 media: chips-media: wave5: Fix Reports from Kernel Lock Validator - - 2026-09-24
CVE-2026-97513 media: chips-media: wave5: Release m2m_ctx after Instance Removed from List 7.8 High 2026-09-24
CVE-2026-97512 spi: spi-qcom-qspi: Fix incomplete error handling in runtime PM - - 2026-09-24
CVE-2026-97511 wifi: mac80211: avoid out-of-bounds access in monitor - - 2026-09-24
CVE-2026-97510 thunderbolt: Release request if tb_cfg_request() fails in __tb_xdomain_response() - - 2026-09-24
CVE-2026-97509 thunderbolt: Keep XDomain reference during the lifetime of a service 8.8 High 2026-09-24
CVE-2026-97508 thunderbolt: Set tb->root_switch to NULL when domain is stopped 7.5 High 2026-09-24
CVE-2026-97507 media: dm1105: fix missing error check for dma_alloc_coherent - - 2026-09-24
CVE-2026-97506 crypto: ixp4xx - fix buffer chain unwind on allocation failure - - 2026-09-24
CVE-2026-97505 PCI/sysfs: Add CAP_SYS_ADMIN check to __resource_resize_store() - - 2026-09-24
CVE-2026-97504 watchdog: lenovo_se10_wdt: Fix use-after-free and resource leak risk - - 2026-09-24
CVE-2026-97503 genirq/proc: Size interrupt directory names for 10-digit interrupt numbers - - 2026-09-24
CVE-2026-97502 mmc: davinci: avoid NULL deref of host->data in IRQ handler - - 2026-09-24
CVE-2026-97501 pinctrl: mediatek: paris: bypass pinctrl GPIO layer in set GPIO direction - - 2026-09-24
CVE-2026-97500 wifi: rtw89: phy: check length before parsing PHY status IE - - 2026-09-24
CVE-2026-97499 coresight: perf: Retrieve path and source from event data - - 2026-09-24
CVE-2026-97497 drm/amdkfd: Check bounds for allocate_sdma_queue restore_sdma_id 7.8 High 2026-09-24
CVE-2026-97498 drm/amdgpu/userq: pin mqd and fw object bo to avoid eviction - - 2026-09-24
CVE-2026-97496 drm/amdkfd: Fix OOB memory exposure in get_wave_state() 7.1 High 2026-09-24
CVE-2026-97495 drm/amdkfd: Check bounds on allocate_doorbell - - 2026-09-24
CVE-2026-97494 drm/amdgpu: validate and share PSP fw_pri_buf copies via psp_copy_fw - - 2026-09-24
CVE-2026-97493 drm/amdgpu: Bound GPIO I2C table entry count from VBIOS - - 2026-09-24
CVE-2026-97492 wifi: mac80211: don't call ieee80211_handle_reconfig_failure when not needed - - 2026-09-24
CVE-2026-97491 net/rds: Don't sleep inside rds_ib_conn_path_shutdown - - 2026-09-24
CVE-2026-97490 affs: handle set_blocksize failures - - 2026-09-24
CVE-2026-97489 bfs: handle set_blocksize failures - - 2026-09-24

All 17854 known CVE vulnerabilities affecting Linux with full Chinese analysis, references, and POCs where available.