Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17854

All 17854 CVE vulnerabilities found in Linux, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumeration (CWE) vulnerabilities affecting the Linux operating system product. It aggregates security data related to weaknesses within the kernel, distributions, and associated utilities provided by various Linux vendors and maintainers. The collection encompasses a wide range of vulnerability types, including memory corruption issues, privilege escalation flaws, information leaks, and denial-of-service conditions. The database covers historical records spanning several decades, reflecting the evolution of the Linux ecosystem from its early releases to modern stable and development branches. This extensive time range allows for the analysis of long-term security trends and the remediation status of legacy systems that remain in production environments. Visitors to this resource can track vendor-specific advisories to stay informed about patches and updates released by major Linux distribution maintainers. You can also use the page to understand the characteristics and impact of specific weakness classes as they manifest in the Linux environment. Additionally, the interface supports looking up a specific product’s vulnerability history, enabling security professionals to assess risk exposure and prioritize mitigation efforts for critical infrastructure components. The data is organized to facilitate efficient searching and correlation between weakness identifiers and affected software versions, ensuring that administrators and developers have access to comprehensive security insights necessary for maintaining system integrity and compliance.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2026-93225 phy: fsl-imx8mq-usb: fix typec switch leak on probe error path 7.4 High 2026-09-24
CVE-2026-93224 svcrdma: Fix unmatched rn_unregister on failed accept 8.1 High 2026-09-24
CVE-2026-93223 staging: media: tegra-video: fix of_node_put() on VIP parse errors - - 2026-09-24
CVE-2026-93222 signal: avoid shared siginfo namespace rewrites - - 2026-09-24
CVE-2026-93221 nfsd: convert nfsd_net boolean flags to unsigned long flags word 8.1 High 2026-09-24
CVE-2026-93220 sched_ext: Keep kick_sync waiting on the rq's own CPU - - 2026-09-24
CVE-2026-93219 clocksource/drivers/timer-sun4i: Advertise a real minimum delta - - 2026-09-24
CVE-2026-93218 mm/huge_memory: skip device-private PMDs in madvise_free_huge_pmd - - 2026-09-24
CVE-2026-93217 mm/madvise: skip device-private PMDs in cold and pageout walks - - 2026-09-24
CVE-2026-93216 mm/page_owner: use memcg_data snapshot to avoid TOCTOU in print_page_owner_memcg() - - 2026-09-24
CVE-2026-93215 cdx: Fix double free when sysfs file creation fails - - 2026-09-24
CVE-2026-93214 usb: gadget: f_tcm: fix deadlock in usbg_make_tpg() - - 2026-09-24
CVE-2026-93213 of: fix out-of-bounds read in of_alias_scan() stem parser - - 2026-09-24
CVE-2026-93212 nfsd: guard nfsd_serv deref in nfsd_file_net_dispose - - 2026-09-24
CVE-2026-93211 nfsd: initialize DRC hash table before registering shrinker - - 2026-09-24
CVE-2026-93210 smb: client: harden DFS cache against invalid target hints - - 2026-09-24
CVE-2026-93209 Bluetooth: hci_core: use skb_get() instead of skb_clone() for req_skb - - 2026-09-24
CVE-2026-93208 kasan: fix cache shrink race with CPU hotplug - - 2026-09-24
CVE-2026-93207 SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry 9.8 Critical 2026-09-24
CVE-2026-93206 PCI/proc: Use file_ns_capable() when checking config space read access - - 2026-09-24
CVE-2026-93205 iommu/arm-smmu-v3: Manage teardown with devm - - 2026-09-24
CVE-2026-93203 batman-adv: bla: avoid CRC corruption due to parallel claim add 7.1 High 2026-09-17
CVE-2026-93204 batman-adv: dat: atomically update mac addresses - - 2026-09-17
CVE-2026-93202 i3c: master: Fix recursive locking during device registration - - 2026-09-17
CVE-2026-93200 i3c: master: Fix use-after-free of master->this - - 2026-09-17
CVE-2026-93201 dm-pcache: validate seg_id fields from persistent memory 7.8 High 2026-09-17
CVE-2026-93199 i3c: master: Do not treat master device as a duplicate target - - 2026-09-17
CVE-2026-93197 memcg: move LRU size accounting on reparenting instead of copying it - - 2026-09-17
CVE-2026-93198 dm-pcache: validate the persisted dirty_tail chain at load - - 2026-09-17
CVE-2026-93196 nvdimm: virtio_pmem: refcount requests for token lifetime 8.4 High 2026-09-17

All 17854 known CVE vulnerabilities affecting Linux with full Chinese analysis, references, and POCs where available.