Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17422

All 17422 CVE vulnerabilities found in Linux, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumeration (CWE) vulnerabilities affecting the Linux operating system product. It aggregates security data related to weaknesses within the kernel, distributions, and associated utilities provided by various Linux vendors and maintainers. The collection encompasses a wide range of vulnerability types, including memory corruption issues, privilege escalation flaws, information leaks, and denial-of-service conditions. The database covers historical records spanning several decades, reflecting the evolution of the Linux ecosystem from its early releases to modern stable and development branches. This extensive time range allows for the analysis of long-term security trends and the remediation status of legacy systems that remain in production environments. Visitors to this resource can track vendor-specific advisories to stay informed about patches and updates released by major Linux distribution maintainers. You can also use the page to understand the characteristics and impact of specific weakness classes as they manifest in the Linux environment. Additionally, the interface supports looking up a specific product’s vulnerability history, enabling security professionals to assess risk exposure and prioritize mitigation efforts for critical infrastructure components. The data is organized to facilitate efficient searching and correlation between weakness identifiers and affected software versions, ensuring that administrators and developers have access to comprehensive security insights necessary for maintaining system integrity and compliance.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2026-98343 dmaengine: fix use-after-free in dma_chan_put() and dma_release_channel() - - 2026-10-06
CVE-2026-98342 dmaengine: wait for RCU readers before releasing dma_device - - 2026-10-06
CVE-2026-98341 wifi: cfg80211: don't free driver-owned scan requests 7.8 High 2026-10-06
CVE-2026-98340 wifi: cfg80211: only group hidden BSSes with beacon entries - - 2026-10-06
CVE-2026-98339 wifi: cfg80211: don't filter by BSS type when removing stale entries 8.8 High 2026-10-06
CVE-2026-98338 wifi: cfg80211: ibss: ref BSS entry for joined event - - 2026-10-06
CVE-2026-98337 wifi: mac80211: don't start a ROC while scanning - - 2026-10-06
CVE-2026-98336 wifi: mac80211: don't offload TC setup on AP_VLAN interfaces - - 2026-10-06
CVE-2026-98335 wifi: mac80211: abort chanswitch when leaving a mesh - - 2026-10-06
CVE-2026-98334 wifi: mac80211: reset state when starting AP fails - - 2026-10-06
CVE-2026-98333 wifi: mac80211: reset the LED state when ifup fails - - 2026-10-06
CVE-2026-98332 wifi: mac80211: only operate on TDLS peers in the TDLS code - - 2026-10-06
CVE-2026-98330 wifi: cfg80211: get the wiphy out of a dying network namespace 7.0 High 2026-10-06
CVE-2026-98331 wifi: mac80211: unlist vifs when their netdev is unregistered 7.0 High 2026-10-06
CVE-2026-98329 wifi: mac80211: don't allow injecting frames wider than the chanctx - - 2026-10-06
CVE-2026-98328 wifi: mac80211: add HE 6 GHz capability in the scan elems len - - 2026-10-06
CVE-2026-98326 wifi: mac80211: mesh: release the channel if start fails - - 2026-10-06
CVE-2026-98327 wifi: mac80211: mesh: reset the CSA state when leaving - - 2026-10-06
CVE-2026-98325 wifi: mac80211: set up the TX info early to fix failure paths - - 2026-10-06
CVE-2026-98324 dmaengine: pxa: fix double counting of the hw descriptors 7.8 High 2026-10-06
CVE-2026-98323 RDMA/siw: Bound fragmented header copies by the remaining length 9.8 Critical 2026-10-06
CVE-2026-98322 netfilter: nft_nat: fully initialise new_addr in netmap setup - - 2026-10-06
CVE-2026-98321 netfilter: nf_nat: unregister and release hooks on error - - 2026-10-06
CVE-2026-98320 netfilter: flowtable: hold reference on ct until flow is released 7.8 High 2026-10-06
CVE-2026-98319 drm: Fix drm_pending_vblank_event leak in error path for out_fence_ptr - - 2026-10-06
CVE-2026-98318 smb: client: validate absolute native symlink targets before NT fixups 7.8 High 2026-10-06
CVE-2026-98317 neighbour: Enforce min/max to NDTPA_INTERVAL_PROBE_TIME_MS. - - 2026-10-06
CVE-2026-98316 ALSA: bcd2000: Fix race between rawmidi and disconnect - - 2026-10-06
CVE-2026-98315 ntfs: protect runlist updates with the runlist lock 7.8 High 2026-10-06
CVE-2026-98314 ALSA: pcm: set timer->private_data before registering the PCM timer - - 2026-10-06

All 17422 known CVE vulnerabilities affecting Linux with full Chinese analysis, references, and POCs where available.