Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17855

All 17855 CVE vulnerabilities found in Linux, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumeration (CWE) vulnerabilities affecting the Linux operating system product. It aggregates security data related to weaknesses within the kernel, distributions, and associated utilities provided by various Linux vendors and maintainers. The collection encompasses a wide range of vulnerability types, including memory corruption issues, privilege escalation flaws, information leaks, and denial-of-service conditions. The database covers historical records spanning several decades, reflecting the evolution of the Linux ecosystem from its early releases to modern stable and development branches. This extensive time range allows for the analysis of long-term security trends and the remediation status of legacy systems that remain in production environments. Visitors to this resource can track vendor-specific advisories to stay informed about patches and updates released by major Linux distribution maintainers. You can also use the page to understand the characteristics and impact of specific weakness classes as they manifest in the Linux environment. Additionally, the interface supports looking up a specific product’s vulnerability history, enabling security professionals to assess risk exposure and prioritize mitigation efforts for critical infrastructure components. The data is organized to facilitate efficient searching and correlation between weakness identifiers and affected software versions, ensuring that administrators and developers have access to comprehensive security insights necessary for maintaining system integrity and compliance.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2024-49866 tracing/timerlat: Fix a race during cpuhp processing 7.8 High 2024-10-21
CVE-2024-49865 drm/xe/vm: move xa_alloc to prevent UAF 7.8 High 2024-10-21
CVE-2024-49864 rxrpc: Fix a race between socket set up and I/O thread creation 7.5 High 2024-10-21
CVE-2024-49863 vhost/scsi: null-ptr-dereference in vhost_scsi_get_req() 5.5AI Medium AI 2024-10-21
CVE-2024-49862 powercap: intel_rapl: Fix off by one in get_rpi() 7.1 High 2024-10-21
CVE-2024-49860 ACPI: sysfs: validate return type of _STR method 7.3 High 2024-10-21
CVE-2024-49861 bpf: Fix helper writes to read-only maps 7.8 High 2024-10-21
CVE-2024-49859 f2fs: fix to check atomic_file in f2fs ioctl interfaces 7.8 High 2024-10-21
CVE-2024-49858 efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption 7.1 - 2024-10-21
CVE-2024-49857 wifi: iwlwifi: mvm: set the cipher for secured NDP ranging 7.1 High 2024-10-21
CVE-2024-49856 x86/sgx: Fix deadlock in SGX NUMA node search 6.2 - 2024-10-21
CVE-2024-49854 block, bfq: fix uaf for accessing waker_bfqq after splitting 7.8 High 2024-10-21
CVE-2024-49855 nbd: fix race between timeout and normal completion 9.8 Critical 2024-10-21
CVE-2024-49853 firmware: arm_scmi: Fix double free in OPTEE transport 8.8 - 2024-10-21
CVE-2024-49851 tpm: Clean up TPM space after command failure 5.5 - 2024-10-21
CVE-2024-49852 scsi: elx: libefc: Fix potential use after free in efc_nport_vport_del() 7.8AI High AI 2024-10-21
CVE-2024-49850 bpf: correctly handle malformed BPF_CORE_TYPE_ID_LOCAL relos 5.5 - 2024-10-21
CVE-2024-47756 PCI: keystone: Fix if-statement expression in ks_pcie_quirk() 5.5 - 2024-10-21
CVE-2024-47757 nilfs2: fix potential oob read in nilfs_btree_check_delete() 7.8AI High AI 2024-10-21
CVE-2024-47754 media: mediatek: vcodec: Fix H264 multi stateless decoder smatch warning 6.2 - 2024-10-21
CVE-2024-47753 media: mediatek: vcodec: Fix VP8 stateless decoder smatch warning 6.2AI Medium AI 2024-10-21
CVE-2024-47752 media: mediatek: vcodec: Fix H264 stateless decoder smatch warning 6.2 - 2024-10-21
CVE-2024-47750 RDMA/hns: Fix Use-After-Free of rsv_qp on HIP08 7.8 High 2024-10-21
CVE-2024-47751 PCI: kirin: Fix buffer overflow in kirin_pcie_parse_port() 7.8 - 2024-10-21
CVE-2024-47749 RDMA/cxgb4: Added NULL check for lookup_atid 7.5 High 2024-10-21
CVE-2024-47747 net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition 7.8 High 2024-10-21
CVE-2024-47748 vhost_vdpa: assign irq bypass producer token correctly 7.8 High 2024-10-21
CVE-2024-47746 fuse: use exclusive lock when FUSE_I_CACHE_IO_MODE is set - - 2024-10-21
CVE-2024-47745 mm: call the security_mmap_file() LSM hook in remap_file_pages() 7.8 High 2024-10-21
CVE-2024-47744 KVM: Use dedicated mutex to protect kvm_usage_count to avoid deadlock 5.5 - 2024-10-21

All 17855 known CVE vulnerabilities affecting Linux with full Chinese analysis, references, and POCs where available.