Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17854

All 17854 CVE vulnerabilities found in Linux, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumeration (CWE) vulnerabilities affecting the Linux operating system product. It aggregates security data related to weaknesses within the kernel, distributions, and associated utilities provided by various Linux vendors and maintainers. The collection encompasses a wide range of vulnerability types, including memory corruption issues, privilege escalation flaws, information leaks, and denial-of-service conditions. The database covers historical records spanning several decades, reflecting the evolution of the Linux ecosystem from its early releases to modern stable and development branches. This extensive time range allows for the analysis of long-term security trends and the remediation status of legacy systems that remain in production environments. Visitors to this resource can track vendor-specific advisories to stay informed about patches and updates released by major Linux distribution maintainers. You can also use the page to understand the characteristics and impact of specific weakness classes as they manifest in the Linux environment. Additionally, the interface supports looking up a specific product’s vulnerability history, enabling security professionals to assess risk exposure and prioritize mitigation efforts for critical infrastructure components. The data is organized to facilitate efficient searching and correlation between weakness identifiers and affected software versions, ensuring that administrators and developers have access to comprehensive security insights necessary for maintaining system integrity and compliance.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2026-93807 wifi: rsi: avoid reading TKIP MIC keys for non-TKIP ciphers - - 2026-09-24
CVE-2026-93806 wifi: cfg80211: validate assoc response length before status and IE access 8.8 High 2026-09-24
CVE-2026-93805 wifi: cfg80211: validate rx/tx MLME callback frame lengths before access - - 2026-09-24
CVE-2026-93804 wifi: mac80211: ibss: wait for in-flight TX on disconnect - - 2026-09-24
CVE-2026-93803 wifi: libipw: fix key index receive bound checks - - 2026-09-24
CVE-2026-93802 wifi: rsi: validate beacon length before fixed buffer copy - - 2026-09-24
CVE-2026-93801 smb/client: zero-initialize stack-allocated cifs_open_info_data 7.0 High 2026-09-24
CVE-2026-93800 btrfs: fix use-after-free on reloc root after error in insert_dirty_subvol() - - 2026-09-24
CVE-2026-93799 wifi: iwlwifi: mvm: validate sta_id in BA window status notif 8.8 High 2026-09-24
CVE-2026-93798 btrfs: fix reloc root cleanup in merge_reloc_roots() 7.8 High 2026-09-24
CVE-2026-93797 wifi: iwlwifi: mvm: fix an off-by-1 boundary check - - 2026-09-24
CVE-2026-93796 wifi: iwlwifi: pcie: null RX pointers after free 7.0 High 2026-09-24
CVE-2026-93795 blk-cgroup: fix leaks and online flag on radix_tree_insert failure - - 2026-09-24
CVE-2026-93794 smb/client: flush dirty data before punching a hole - - 2026-09-24
CVE-2026-93793 wifi: iwlwifi: mvm: validate TX_CMD response layout 8.8 High 2026-09-24
CVE-2026-93792 wifi: iwlwifi: mvm: fix a possible underflow - - 2026-09-24
CVE-2026-93791 wifi: iwlwifi: mvm: add a check on the tid coming from the firmware - - 2026-09-24
CVE-2026-93790 wifi: iwlwifi: mvm: fix out-of-bounds tid_data access in BA notif 8.8 High 2026-09-24
CVE-2026-93789 wifi: iwlwifi: bound aligned TLV advance in FW parser - - 2026-09-24
CVE-2026-93788 wifi: iwlwifi: acpi: validate WGDS table revision index - - 2026-09-24
CVE-2026-93787 smb: client: bound dirent name against end of SMB response in cifs_filldir 8.1 High 2026-09-24
CVE-2026-93786 ksmbd: preserve VFS inherited POSIX ACL mask 8.1 High 2026-09-24
CVE-2026-93785 cifs: validate idmap key payload length - - 2026-09-24
CVE-2026-93784 wifi: cfg80211: validate IEs in cfg80211_wext_siwgenie() - - 2026-09-24
CVE-2026-93783 Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame - - 2026-09-24
CVE-2026-93781 scsi: core: Do not block on tag allocation in scsi_eh_lock_door() - - 2026-09-24
CVE-2026-93782 vhost-scsi: flush backend after device ioctls 7.8 High 2026-09-24
CVE-2026-93288 netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state 7.8 High 2026-09-24
CVE-2026-93287 i2c: smbus: reject oversized block transfers in the common path 7.8 High 2026-09-24
CVE-2026-93286 net: appletalk: fix NULL pointer dereference in aarp_send_ddp() - - 2026-09-24

All 17854 known CVE vulnerabilities affecting Linux with full Chinese analysis, references, and POCs where available.