Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17854

All 17854 CVE vulnerabilities found in Linux, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumeration (CWE) vulnerabilities affecting the Linux operating system product. It aggregates security data related to weaknesses within the kernel, distributions, and associated utilities provided by various Linux vendors and maintainers. The collection encompasses a wide range of vulnerability types, including memory corruption issues, privilege escalation flaws, information leaks, and denial-of-service conditions. The database covers historical records spanning several decades, reflecting the evolution of the Linux ecosystem from its early releases to modern stable and development branches. This extensive time range allows for the analysis of long-term security trends and the remediation status of legacy systems that remain in production environments. Visitors to this resource can track vendor-specific advisories to stay informed about patches and updates released by major Linux distribution maintainers. You can also use the page to understand the characteristics and impact of specific weakness classes as they manifest in the Linux environment. Additionally, the interface supports looking up a specific product’s vulnerability history, enabling security professionals to assess risk exposure and prioritize mitigation efforts for critical infrastructure components. The data is organized to facilitate efficient searching and correlation between weakness identifiers and affected software versions, ensuring that administrators and developers have access to comprehensive security insights necessary for maintaining system integrity and compliance.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2026-97443 perf/ftrace: Fix WARNING in __unregister_ftrace_function - - 2026-09-24
CVE-2026-97442 wifi: ath11k: fix invalid data access in ath11k_dp_rx_h_undecap_nwifi 8.8 High 2026-09-24
CVE-2026-97441 ata: ahci: fail probe if BAR too small for claimed ports - - 2026-09-24
CVE-2026-97440 net: qrtr: fix node refcount leak on ctrl packet alloc failure - - 2026-09-24
CVE-2026-97439 fs/ntfs3: preserve non-DOS attribute bits in system.dos_attrib - - 2026-09-24
CVE-2026-97438 fs/ntfs3: validate index entry key bounds 7.1 High 2026-09-24
CVE-2026-97437 ntfs3: fix out-of-bounds read in ntfs_dir_emit() and hdr_find_e() 7.1 High 2026-09-24
CVE-2026-97436 dpaa2-switch: rework FDB management on the bridge leave path - - 2026-09-24
CVE-2026-97435 net: dsa: sja1105: flower: reject cross-chip redirect - - 2026-09-24
CVE-2026-97434 dpaa2-switch: fix handling of NAPI on the remove path - - 2026-09-24
CVE-2026-97433 nvme: validate FDP configuration descriptor sizes 8.2 High 2026-09-24
CVE-2026-97432 wifi: iwlwifi: mvm: fix P2P-Device binding handling - - 2026-09-24
CVE-2026-97431 drm/amd/display: Avoid DPMS-on for phantom stream - - 2026-09-24
CVE-2026-97430 xhci: Prevent queuing new commands if xhci is inaccessible - - 2026-09-24
CVE-2026-97429 drm/amdkfd: fix UAF race in destroy_queue_cpsch 7.8 High 2026-09-24
CVE-2026-97428 drm/amdgpu: harden FRU PIA parsing with bounded helpers 7.7 High 2026-09-24
CVE-2026-97427 drm/amd/pm: bound pp_dpm_set_pp_table() memcpy - - 2026-09-24
CVE-2026-97426 drm/amdgpu/pm: fix SmartShift bias sysfs store PM refcount on parse error - - 2026-09-24
CVE-2026-97425 drm/amdgpu: fix buffer overflow during vBIOS update - - 2026-09-24
CVE-2026-97424 drm/amdgpu/ras: add ras_suspend callback and use it for cp_ecc_error_irq - - 2026-09-24
CVE-2026-97423 cxl/region: Validate partition index before array access - - 2026-09-24
CVE-2026-97422 drm/amdkfd: fix SMI event cross-process information leak - - 2026-09-24
CVE-2026-97421 RDMA/umem: Be careful about boundary conditions in ib_umem_find_best_pgsz() 7.8 High 2026-09-24
CVE-2026-97420 bpf: NUL-terminate replaced sysctl value - - 2026-09-24
CVE-2026-97419 hsr: broadcast netlink notifications in the device's net namespace - - 2026-09-24
CVE-2026-97418 ALSA: es18xx: check control allocation before private data setup - - 2026-09-24
CVE-2026-97417 netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() 7.5 High 2026-09-24
CVE-2026-97416 btrfs: balance: fix potential bg lookup failure in btrfs_may_alloc_data_chunk() - - 2026-09-24
CVE-2026-97415 btrfs: tree-checker: validate names in ROOT_REF and ROOT_BACKREF 7.8 High 2026-09-24
CVE-2026-97414 ASoC: mediatek: mt8365-afe-pcm: fix possible NULL-pointer dereferences in mt8365_afe_suspend() - - 2026-09-24

All 17854 known CVE vulnerabilities affecting Linux with full Chinese analysis, references, and POCs where available.