Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17853

All 17853 CVE vulnerabilities found in Linux, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumeration (CWE) vulnerabilities affecting the Linux operating system product. It aggregates security data related to weaknesses within the kernel, distributions, and associated utilities provided by various Linux vendors and maintainers. The collection encompasses a wide range of vulnerability types, including memory corruption issues, privilege escalation flaws, information leaks, and denial-of-service conditions. The database covers historical records spanning several decades, reflecting the evolution of the Linux ecosystem from its early releases to modern stable and development branches. This extensive time range allows for the analysis of long-term security trends and the remediation status of legacy systems that remain in production environments. Visitors to this resource can track vendor-specific advisories to stay informed about patches and updates released by major Linux distribution maintainers. You can also use the page to understand the characteristics and impact of specific weakness classes as they manifest in the Linux environment. Additionally, the interface supports looking up a specific product’s vulnerability history, enabling security professionals to assess risk exposure and prioritize mitigation efforts for critical infrastructure components. The data is organized to facilitate efficient searching and correlation between weakness identifiers and affected software versions, ensuring that administrators and developers have access to comprehensive security insights necessary for maintaining system integrity and compliance.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2024-42140 riscv: kexec: Avoid deadlock in kexec crash path 5.5AI Medium AI 2024-07-30
CVE-2024-42139 ice: Fix improper extts handling 5.5AI Medium AI 2024-07-30
CVE-2024-42138 mlxsw: core_linecards: Fix double memory deallocation in case of invalid INI file 5.5AI Medium AI 2024-07-30
CVE-2024-42137 Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot 6.2AI Medium AI 2024-07-30
CVE-2024-42136 cdrom: rearrange last_media_change check to avoid unintentional overflow 7.1AI High AI 2024-07-30
CVE-2024-42135 vhost_task: Handle SIGKILL by flushing work and exiting 7.8AI High AI 2024-07-30
CVE-2024-42133 Bluetooth: Ignore too large handle values in BIG 7.6 High 2024-07-30
CVE-2024-42134 virtio-pci: Check if is_avq is NULL 5.5AI Medium AI 2024-07-30
CVE-2024-42132 bluetooth/hci: disallow setting handle bigger than HCI_CONN_HANDLE_MAX 7.6 High 2024-07-30
CVE-2024-42131 mm: avoid overflows in dirty throttling logic 5.5AI Medium AI 2024-07-30
CVE-2024-42129 leds: mlxreg: Use devm_mutex_init() for mutex initialization 5.5AI Medium AI 2024-07-30
CVE-2024-42128 leds: an30259a: Use devm_mutex_init() for mutex initialization 5.5AI Medium AI 2024-07-30
CVE-2024-42127 drm/lima: fix shared irq handling on driver remove 4.7AI Medium AI 2024-07-30
CVE-2024-42126 powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt. 7.1AI High AI 2024-07-30
CVE-2024-42125 wifi: rtw89: fw: scan offload prohibit all 6 GHz channel if no 6 GHz sband 6.2AI Medium AI 2024-07-30
CVE-2024-42124 scsi: qedf: Make qedf_execute_tmf() non-preemptible 7.1AI High AI 2024-07-30
CVE-2024-42123 drm/amdgpu: fix double free err_addr pointer warnings 7.0 High 2024-07-30
CVE-2024-42122 drm/amd/display: Add NULL pointer check for kzalloc 7.1AI High AI 2024-07-30
CVE-2024-42121 drm/amd/display: Check index msg_id before read or write 7.1AI High AI 2024-07-30
CVE-2024-42120 drm/amd/display: Check pipe offset before setting vblank 7.8 High 2024-07-30
CVE-2024-42119 drm/amd/display: Skip finding free audio for unknown engine_id 5.5AI Medium AI 2024-07-30
CVE-2024-42117 drm/amd/display: ASSERT when failing to find index by plane/stream id 7.8 High 2024-07-30
CVE-2024-42118 drm/amd/display: Do not return negative stream id for array 5.5AI Medium AI 2024-07-30
CVE-2024-42115 jffs2: Fix potential illegal address access in jffs2_free_inode 7.8 High 2024-07-30
CVE-2024-42114 wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values 7.3AI High AI 2024-07-30
CVE-2024-42113 net: txgbe: initialize num_q_vectors for MSI/INTx interrupts 5.5AI Medium AI 2024-07-30
CVE-2024-42111 btrfs: always do the basic checks for btrfs_qgroup_inherit structure 7.8 High 2024-07-30
CVE-2024-42112 net: txgbe: free isb resources at the right time 7.8 High 2024-07-30
CVE-2024-42110 net: ntb_netdev: Move ntb_netdev_rx_handler() to call netif_rx() from __netif_rx() 7.5 High 2024-07-30
CVE-2024-42108 net: rswitch: Avoid use-after-free in rswitch_poll() 9.8 Critical 2024-07-30

All 17853 known CVE vulnerabilities affecting Linux with full Chinese analysis, references, and POCs where available.