Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17855

All 17855 CVE vulnerabilities found in Linux, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumeration (CWE) vulnerabilities affecting the Linux operating system product. It aggregates security data related to weaknesses within the kernel, distributions, and associated utilities provided by various Linux vendors and maintainers. The collection encompasses a wide range of vulnerability types, including memory corruption issues, privilege escalation flaws, information leaks, and denial-of-service conditions. The database covers historical records spanning several decades, reflecting the evolution of the Linux ecosystem from its early releases to modern stable and development branches. This extensive time range allows for the analysis of long-term security trends and the remediation status of legacy systems that remain in production environments. Visitors to this resource can track vendor-specific advisories to stay informed about patches and updates released by major Linux distribution maintainers. You can also use the page to understand the characteristics and impact of specific weakness classes as they manifest in the Linux environment. Additionally, the interface supports looking up a specific product’s vulnerability history, enabling security professionals to assess risk exposure and prioritize mitigation efforts for critical infrastructure components. The data is organized to facilitate efficient searching and correlation between weakness identifiers and affected software versions, ensuring that administrators and developers have access to comprehensive security insights necessary for maintaining system integrity and compliance.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2024-47743 KEYS: prevent NULL pointer dereference in find_asymmetric_key() 5.5 - 2024-10-21
CVE-2024-47742 firmware_loader: Block path traversal 7.8 High 2024-10-21
CVE-2024-47741 btrfs: fix race setting file private on concurrent lseek using same fd 7.8 High 2024-10-21
CVE-2024-47740 f2fs: Require FMODE_WRITE for atomic write ioctls 7.1 High 2024-10-21
CVE-2024-47738 wifi: mac80211: don't use rate mask for offchannel TX either - - 2024-10-21
CVE-2024-47739 padata: use integer wrap around to prevent deadlock on seq_nr overflow 7.5 High 2024-10-21
CVE-2024-47736 erofs: handle overlapped pclusters out of crafted images properly 5.5 - 2024-10-21
CVE-2024-47737 nfsd: call cache_put if xdr_reserve_space returns NULL 7.1 - 2024-10-21
CVE-2024-47735 RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled 7.1AI High AI 2024-10-21
CVE-2024-47734 bonding: Fix unnecessary warnings and logs from bond_xdp_get_xmit_slave() - - 2024-10-21
CVE-2024-47733 netfs: Delete subtree of 'fs/netfs' when netfs module exits 3.3 - 2024-10-21
CVE-2024-47732 crypto: iaa - Fix potential use after free bug 7.0 High 2024-10-21
CVE-2024-47731 drivers/perf: Fix ali_drw_pmu driver interrupt status clearing 5.5 - 2024-10-21
CVE-2024-47730 crypto: hisilicon/qm - inject error before stopping queue 7.0 High 2024-10-21
CVE-2024-47729 drm/xe: Use reserved copy engine for user binds on faulting devices 5.5 - 2024-10-21
CVE-2024-47728 bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error 5.5 - 2024-10-21
CVE-2024-47726 f2fs: fix to wait dio completion 7.8 High 2024-10-21
CVE-2024-47727 x86/tdx: Fix "in-kernel MMIO" check 7.8 High 2024-10-21
CVE-2024-47723 jfs: fix out-of-bounds in dbNextAG() and diAlloc() 7.8 High 2024-10-21
CVE-2024-47724 wifi: ath11k: use work queue to process beacon tx event 8.8 High 2024-10-21
CVE-2024-47721 wifi: rtw89: remove unused C2H event ID RTW89_MAC_C2H_FUNC_READ_WOW_CAM to prevent out-of-bounds reading 8.8 High 2024-10-21
CVE-2024-47719 iommufd: Protect against overflow of ALIGN() during iova allocation 7.1AI High AI 2024-10-21
CVE-2024-47720 drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func 5.5AI Medium AI 2024-10-21
CVE-2024-47718 wifi: rtw88: always wait for both firmware loading attempts 6.5 - 2024-10-21
CVE-2024-47717 RISC-V: KVM: Don't zero-out PMU snapshot area before freeing data 5.5 - 2024-10-21
CVE-2024-47716 ARM: 9410/1: vfp: Use asm volatile in fmrx/fmxr macros 5.5AI Medium AI 2024-10-21
CVE-2024-47715 wifi: mt76: mt7915: fix oops on non-dbdc mt7986 4.8AI Medium AI 2024-10-21
CVE-2024-47714 wifi: mt76: mt7996: use hweight16 to get correct tx antenna 7.6 High 2024-10-21
CVE-2024-47713 wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop() 6.2 - 2024-10-21
CVE-2024-47712 wifi: wilc1000: fix potential RCU dereference issue in wilc_parse_join_bss_param 8.3 High 2024-10-21

All 17855 known CVE vulnerabilities affecting Linux with full Chinese analysis, references, and POCs where available.