Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 18073

All 18073 CVE vulnerabilities found in Linux, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumeration (CWE) vulnerabilities affecting the Linux operating system product. It aggregates security data related to weaknesses within the kernel, distributions, and associated utilities provided by various Linux vendors and maintainers. The collection encompasses a wide range of vulnerability types, including memory corruption issues, privilege escalation flaws, information leaks, and denial-of-service conditions. The database covers historical records spanning several decades, reflecting the evolution of the Linux ecosystem from its early releases to modern stable and development branches. This extensive time range allows for the analysis of long-term security trends and the remediation status of legacy systems that remain in production environments. Visitors to this resource can track vendor-specific advisories to stay informed about patches and updates released by major Linux distribution maintainers. You can also use the page to understand the characteristics and impact of specific weakness classes as they manifest in the Linux environment. Additionally, the interface supports looking up a specific product’s vulnerability history, enabling security professionals to assess risk exposure and prioritize mitigation efforts for critical infrastructure components. The data is organized to facilitate efficient searching and correlation between weakness identifiers and affected software versions, ensuring that administrators and developers have access to comprehensive security insights necessary for maintaining system integrity and compliance.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2025-21681 openvswitch: fix lockup on tx to unregistering netdev with carrier 5.5 - 2025-01-31
CVE-2025-21678 gtp: Destroy device along with udp socket's netns dismantle. 7.8 High 2025-01-31
CVE-2025-21679 btrfs: add the missing error handling inside get_canonical_dev_path 7.3 - 2025-01-31
CVE-2025-21677 pfcp: Destroy device along with udp socket's netns dismantle. 7.8 High 2025-01-31
CVE-2025-21676 net: fec: handle page_pool_dev_alloc_pages error 7.5 High 2025-01-31
CVE-2025-21675 net/mlx5: Clear port select structure when fail to create 5.5 - 2025-01-31
CVE-2025-21674 net/mlx5e: Fix inversion dependency warning while enabling IPsec tunnel 5.5 - 2025-01-31
CVE-2025-21673 smb: client: fix double free of TCP_Server_Info::hostname 9.8 Critical 2025-01-31
CVE-2025-21672 afs: Fix merge preference rule failure condition - - 2025-01-31
CVE-2025-21671 zram: fix potential UAF of zram table 7.1 - 2025-01-31
CVE-2025-21670 vsock/bpf: return early if transport is not assigned 5.5 - 2025-01-31
CVE-2025-21669 vsock/virtio: discard packets if the transport changes 7.8 High 2025-01-31
CVE-2025-21668 pmdomain: imx8mp-blk-ctrl: add missing loop break condition 5.5 - 2025-01-31
CVE-2025-21667 iomap: avoid avoid truncating 64-bit offset to 32 bits 5.5 - 2025-01-31
CVE-2025-21666 vsock: prevent null-ptr-deref in vsock_*[has_data|has_space] 5.5 - 2025-01-31
CVE-2025-21665 filemap: avoid truncating 64-bit offset to 32 bits 5.5 - 2025-01-31
CVE-2024-57948 mac802154: check local interfaces before deleting sdata list 7.1 - 2025-01-31
CVE-2024-57947 netfilter: nf_set_pipapo: fix initial map fill 9.8 Critical 2025-01-23
CVE-2024-57946 virtio-blk: don't keep queue frozen during system suspend 5.5 - 2025-01-21
CVE-2025-21664 dm thin: make get_first_thin use rcu-safe list first function 7.8 High 2025-01-21
CVE-2025-21662 net/mlx5: Fix variable not being completed when function returns 5.5 - 2025-01-21
CVE-2025-21663 net: stmmac: dwmac-tegra: Read iommu stream id from device tree 10.0 Critical 2025-01-21
CVE-2025-21661 gpio: virtuser: fix missing lookup table cleanups 7.8 High 2025-01-21
CVE-2025-21660 ksmbd: fix unexpectedly changed path in ksmbd_vfs_kern_path_locked 5.5 - 2025-01-21
CVE-2025-21658 btrfs: avoid NULL pointer dereference if no valid extent tree 5.5 - 2025-01-21
CVE-2025-21659 netdev: prevent accessing NAPI instances from another namespace 8.1 High 2025-01-21
CVE-2025-21657 sched_ext: Replace rq_lock() to raw_spin_rq_lock() in scx_ops_bypass() - - 2025-01-21
CVE-2025-21656 hwmon: (drivetemp) Fix driver producing garbage data when SCSI errors occur 3.8 - 2025-01-21
CVE-2024-57945 riscv: mm: Fix the out of bound issue of vmemmap address 7.8 High 2025-01-21
CVE-2024-57944 iio: adc: ti-ads1298: Add NULL check in ads1298_init 5.5 - 2025-01-21

All 18073 known CVE vulnerabilities affecting Linux with full Chinese analysis, references, and POCs where available.