Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17854

All 17854 CVE vulnerabilities found in Linux, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumeration (CWE) vulnerabilities affecting the Linux operating system product. It aggregates security data related to weaknesses within the kernel, distributions, and associated utilities provided by various Linux vendors and maintainers. The collection encompasses a wide range of vulnerability types, including memory corruption issues, privilege escalation flaws, information leaks, and denial-of-service conditions. The database covers historical records spanning several decades, reflecting the evolution of the Linux ecosystem from its early releases to modern stable and development branches. This extensive time range allows for the analysis of long-term security trends and the remediation status of legacy systems that remain in production environments. Visitors to this resource can track vendor-specific advisories to stay informed about patches and updates released by major Linux distribution maintainers. You can also use the page to understand the characteristics and impact of specific weakness classes as they manifest in the Linux environment. Additionally, the interface supports looking up a specific product’s vulnerability history, enabling security professionals to assess risk exposure and prioritize mitigation efforts for critical infrastructure components. The data is organized to facilitate efficient searching and correlation between weakness identifiers and affected software versions, ensuring that administrators and developers have access to comprehensive security insights necessary for maintaining system integrity and compliance.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2026-93135 bpf: Reject programs with inlined helpers if JIT is not available - - 2026-09-17
CVE-2026-93134 printk: Fix possible console use-after-free - - 2026-09-17
CVE-2026-93133 ACPI: RISC-V: Check acpi_get_handle() status in riscv_acpi_add_prt_dep() - - 2026-09-17
CVE-2026-93132 ACPI: RISC-V: Fix riscv_acpi_add_prt_dep() loop handling - - 2026-09-17
CVE-2026-93131 platform/x86: dell-privacy: Fix race condition - - 2026-09-17
CVE-2026-93129 platform/x86: dell-wmi-base: Fix handling of ultra performance key - - 2026-09-17
CVE-2026-93130 platform/x86: dell-wmi-base: Fix resource leak on module load failure - - 2026-09-17
CVE-2026-93128 platform/x86: lg-laptop: Fix LED resource handling - - 2026-09-17
CVE-2026-93127 bpf: Drop scalar id on sign-extending narrowing stack fills 7.8 High 2026-09-17
CVE-2026-93126 remoteproc: qcom_q6v5_adsp: Fix reference leak for device node - - 2026-09-17
CVE-2026-93125 bpf: Reject rdonly/rdwr_buf_size kfunc arguments that exceed u32 max 7.8 High 2026-09-17
CVE-2026-93123 serial: qcom-geni: do not advance stale DMA completions - - 2026-09-17
CVE-2026-93124 platform/x86: asus-wireless: Fail probe when there is no ACPI match - - 2026-09-17
CVE-2026-93122 usb: gadget: uac: validate rate list length before storing 7.8 High 2026-09-17
CVE-2026-93121 usb: gadget: f_fs: Fix fence cleanup in ffs_dmabuf_transfer() error paths 7.0 High 2026-09-17
CVE-2026-93120 usb: gadget: configfs: fix out-of-bounds read of qw_sign - - 2026-09-17
CVE-2026-93119 usb: ljca: bound bank_num in ljca_enumerate_gpio() - - 2026-09-17
CVE-2026-93117 usb: fix UAF when probe runs concurrent to dyn ID removal - - 2026-09-17
CVE-2026-93118 usb: gadget: aspeed_udc: check endpoint DMA allocation - - 2026-09-17
CVE-2026-93116 platform/x86: asus-wmi: fix resource leaks on probe failure 7.0 High 2026-09-17
CVE-2026-93115 platform/mellanox: mlxbf-pmc: Check ACPI_COMPANION() against NULL - - 2026-09-17
CVE-2026-93114 platform/surface: acpi-notify: Check ACPI companion before use - - 2026-09-17
CVE-2026-93113 clk: qcom: camcc-sc8280xp: unregister CAMCC_GDSC_CLK - - 2026-09-17
CVE-2026-93112 bpf: Require a BPF cpumask for bpf_cpumask_populate() 7.1 High 2026-09-17
CVE-2026-93111 bpf: Mark tracing_multi trampolines as ftrace managed 7.8 High 2026-09-17
CVE-2026-93110 RDMA/core: Wait for RCU callbacks before unloading ib_core - - 2026-09-17
CVE-2026-93109 RDMA/mlx5: Drain RCU callbacks during module teardown - - 2026-09-17
CVE-2026-93107 RDMA/rxe: Avoid reprocessing the current packet after the QP enters the error state 8.2 High 2026-09-17
CVE-2026-93108 RDMA/ipoib: Drain RCU callbacks during module teardown - - 2026-09-17
CVE-2026-93106 crash_dump: release keyring reference at the correct time - - 2026-09-17

All 17854 known CVE vulnerabilities affecting Linux with full Chinese analysis, references, and POCs where available.