Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17854

All 17854 CVE vulnerabilities found in Linux, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumeration (CWE) vulnerabilities affecting the Linux operating system product. It aggregates security data related to weaknesses within the kernel, distributions, and associated utilities provided by various Linux vendors and maintainers. The collection encompasses a wide range of vulnerability types, including memory corruption issues, privilege escalation flaws, information leaks, and denial-of-service conditions. The database covers historical records spanning several decades, reflecting the evolution of the Linux ecosystem from its early releases to modern stable and development branches. This extensive time range allows for the analysis of long-term security trends and the remediation status of legacy systems that remain in production environments. Visitors to this resource can track vendor-specific advisories to stay informed about patches and updates released by major Linux distribution maintainers. You can also use the page to understand the characteristics and impact of specific weakness classes as they manifest in the Linux environment. Additionally, the interface supports looking up a specific product’s vulnerability history, enabling security professionals to assess risk exposure and prioritize mitigation efforts for critical infrastructure components. The data is organized to facilitate efficient searching and correlation between weakness identifiers and affected software versions, ensuring that administrators and developers have access to comprehensive security insights necessary for maintaining system integrity and compliance.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2026-93105 esp: do not unref managed frag pages in esp_ssg_unref() 7.8 High 2026-09-17
CVE-2026-93104 RDMA/rvt: Return NULL after port allocation failure - - 2026-09-17
CVE-2026-93103 RDMA/hfi1: Preserve unit 0 on allocation failure - - 2026-09-17
CVE-2026-93102 RDMA/hfi1: Free RX data on late probe failure - - 2026-09-17
CVE-2026-93101 media: v4l2-async: Unregister sub-device if asc_list is empty - - 2026-09-17
CVE-2026-93100 fs/resctrl: Prevent use-after-free in rdtgroup_kn_put() - - 2026-09-17
CVE-2026-93098 rpmsg: glink: fix deadlock in endpoint destroy during driver detach - - 2026-09-17
CVE-2026-93099 fs/resctrl: Fix UAF from worker threads when domains are removed - - 2026-09-17
CVE-2026-93097 cxl/mbox: Break poison list loop on an empty payload - - 2026-09-17
CVE-2026-93096 cxl/features: Serialize multi-part Get/Set Feature transfers - - 2026-09-17
CVE-2026-93095 hfsplus: validate thread record before delete key rebuild 7.8 High 2026-09-17
CVE-2026-93094 wifi: ath12k: fix dp_link_peer dangling references on AP vdev rollback - - 2026-09-17
CVE-2026-93093 firmware: arm_scmi: Publish channel state before callbacks - - 2026-09-17
CVE-2026-93092 firmware: arm_scmi: Unregister device notifier before IDR teardown - - 2026-09-17
CVE-2026-93091 firmware: arm_scmi: Quiesce notifications before teardown - - 2026-09-17
CVE-2026-93089 firmware: arm_scmi: Free transport channel on IDR failure - - 2026-09-17
CVE-2026-93090 firmware: arm_scmi: Clean up channels on setup failure - - 2026-09-17
CVE-2026-93086 firmware: arm_scmi: Avoid IDR updates while cleaning channels - - 2026-09-17
CVE-2026-93085 firmware: arm_scmi: Reject out of range DT protocol IDs - - 2026-09-17
CVE-2026-93084 firmware: arm_scmi: Drop handle on protocol bind failures - - 2026-09-17
CVE-2026-93083 firmware: arm_scmi: Unwind TX receiver mailbox setup failure - - 2026-09-17
CVE-2026-93081 firmware: arm_scmi: Fix SCMI device destroy lifetimes - - 2026-09-17
CVE-2026-93082 firmware: arm_scmi: Unwind P2A receiver mailbox setup failure - - 2026-09-17
CVE-2026-93080 firmware: arm_scmi: Fix transport device teardown lookup - - 2026-09-17
CVE-2026-93078 cxl/features: Reject Set Features output buffer smaller than the header - - 2026-09-17
CVE-2026-93079 cxl/features: Reject Get Feature count larger than the output buffer 7.8 High 2026-09-17
CVE-2026-93077 cxl/features: Clamp Get Feature output size to the remaining buffer - - 2026-09-17
CVE-2026-93075 dax/fsdev: clear pgmap ops and owner on unbind - - 2026-09-17
CVE-2026-93076 dax/fsdev: clear vmemmap_shift when binding static pgmap - - 2026-09-17
CVE-2026-93074 dax/fsdev: use __va(phys) for kaddr in direct_access 7.8 High 2026-09-17

All 17854 known CVE vulnerabilities affecting Linux with full Chinese analysis, references, and POCs where available.