Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17854

All 17854 CVE vulnerabilities found in Linux, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumeration (CWE) vulnerabilities affecting the Linux operating system product. It aggregates security data related to weaknesses within the kernel, distributions, and associated utilities provided by various Linux vendors and maintainers. The collection encompasses a wide range of vulnerability types, including memory corruption issues, privilege escalation flaws, information leaks, and denial-of-service conditions. The database covers historical records spanning several decades, reflecting the evolution of the Linux ecosystem from its early releases to modern stable and development branches. This extensive time range allows for the analysis of long-term security trends and the remediation status of legacy systems that remain in production environments. Visitors to this resource can track vendor-specific advisories to stay informed about patches and updates released by major Linux distribution maintainers. You can also use the page to understand the characteristics and impact of specific weakness classes as they manifest in the Linux environment. Additionally, the interface supports looking up a specific product’s vulnerability history, enabling security professionals to assess risk exposure and prioritize mitigation efforts for critical infrastructure components. The data is organized to facilitate efficient searching and correlation between weakness identifiers and affected software versions, ensuring that administrators and developers have access to comprehensive security insights necessary for maintaining system integrity and compliance.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2026-93284 drm/pagemap: dma-unmap pages before handling migration errors 8.8 High 2026-09-24
CVE-2026-93285 f2fs: embed f2fs_gc_kthread in f2fs_sb_info - - 2026-09-24
CVE-2026-93283 i3c: master: Fix device_register() error path - - 2026-09-24
CVE-2026-93282 ksmbd: fix maximum allowed access checks 8.1 High 2026-09-24
CVE-2026-93281 wifi: rtw89: fix HE extended capability length check - - 2026-09-24
CVE-2026-93280 greybus: audio: bound the topology section sizes against the fetched size 8.8 High 2026-09-24
CVE-2026-93279 staging: octeon: add missing tasklet_kill in cvm_oct_tx_shutdown - - 2026-09-24
CVE-2026-93278 staging: octeon: add missing napi_disable in cvm_oct_rx_shutdown - - 2026-09-24
CVE-2026-93276 phy: renesas: phy-rcar-gen3-usb2: Fix devm action registration for disabled VBUS regulator - - 2026-09-24
CVE-2026-93277 RDMA/bnxt_re: Validate udata before executing commands 7.8 High 2026-09-24
CVE-2026-93275 perf/x86/intel/pt: Fix stop/start with no update - - 2026-09-24
CVE-2026-93274 pinctrl: bcm2835: Don't remove an unregistered GPIO chip - - 2026-09-24
CVE-2026-93273 regulator: tps6594: Fix device node reference leaks in multiphase loop - - 2026-09-24
CVE-2026-93272 remoteproc: qcom_wcnss: Fix handling the lack of PD regulators in v3 - - 2026-09-24
CVE-2026-93271 wifi: ath11k: cap out-of-range rx MCS instead of leaving bogus rate - - 2026-09-24
CVE-2026-93270 bpf: Disallow interpreter fallback for BPF_ADDR_PERCPU insn - - 2026-09-24
CVE-2026-93269 ext4: fix circular lock dependency in ext4_ext_migrate - - 2026-09-24
CVE-2026-93268 ext4: skip extra isize expansion during mount to prevent deadlock - - 2026-09-24
CVE-2026-93267 RDMA/core: Fix potential use after free in uverbs_free_dmah() - - 2026-09-24
CVE-2026-93266 arm64: RSI: fix field-spanning write warning in attestation token init - - 2026-09-24
CVE-2026-93265 PCI/pwrctrl: tc9563: Fix parsing the integrated Ethernet MAC Endpoint node 7.7 High 2026-09-24
CVE-2026-93264 RDMA/efa: Fix PBL chunk length computation - - 2026-09-24
CVE-2026-93263 clk: eswin: Zero-initialize stack-allocated clk_init_data - - 2026-09-24
CVE-2026-93262 md/raid5-ppl: fix use-after-free in ppl_do_flush() 7.8 High 2026-09-24
CVE-2026-93261 locking/lockdep: Fix NULL pointer dereference in __lock_set_class() - - 2026-09-24
CVE-2026-93260 powerpc/xive: propagate IPI init errors to prevent use-after-free 7.4 High 2026-09-24
CVE-2026-93259 powerpc/irq: Fix missing r2 clobber in PCREL inline assembly - - 2026-09-24
CVE-2026-93258 ocfs2: do not use make_bad_inode() in ocfs2_read_inode_block_full() - - 2026-09-24
CVE-2026-93257 block: handle nogenerate/noverify properly in fs-integrity - - 2026-09-24
CVE-2026-93256 arm64: hibernate: mask DAIF before restoring hibernated kernel - - 2026-09-24

All 17854 known CVE vulnerabilities affecting Linux with full Chinese analysis, references, and POCs where available.