Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17853

All 17853 CVE vulnerabilities found in Linux, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumeration (CWE) vulnerabilities affecting the Linux operating system product. It aggregates security data related to weaknesses within the kernel, distributions, and associated utilities provided by various Linux vendors and maintainers. The collection encompasses a wide range of vulnerability types, including memory corruption issues, privilege escalation flaws, information leaks, and denial-of-service conditions. The database covers historical records spanning several decades, reflecting the evolution of the Linux ecosystem from its early releases to modern stable and development branches. This extensive time range allows for the analysis of long-term security trends and the remediation status of legacy systems that remain in production environments. Visitors to this resource can track vendor-specific advisories to stay informed about patches and updates released by major Linux distribution maintainers. You can also use the page to understand the characteristics and impact of specific weakness classes as they manifest in the Linux environment. Additionally, the interface supports looking up a specific product’s vulnerability history, enabling security professionals to assess risk exposure and prioritize mitigation efforts for critical infrastructure components. The data is organized to facilitate efficient searching and correlation between weakness identifiers and affected software versions, ensuring that administrators and developers have access to comprehensive security insights necessary for maintaining system integrity and compliance.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2024-39461 clk: bcm: rpi: Assign ->num before accessing ->hws 5.5AI Medium AI 2024-06-25
CVE-2024-39371 io_uring: check for non-NULL file pointer in io_file_can_poll() 5.5AI Medium AI 2024-06-25
CVE-2024-39301 net/9p: fix uninit-value in p9_client_rpc() 6.5AI Medium AI 2024-06-25
CVE-2024-39298 mm/memory-failure: fix handling of dissolved but not taken off from buddy pages 5.5AI Medium AI 2024-06-25
CVE-2024-39293 Revert "xsk: Support redirect to any socket bound to the same umem" 9.8 Critical 2024-06-25
CVE-2024-39296 bonding: fix oops during rmmod 5.5AI Medium AI 2024-06-25
CVE-2024-39276 ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find() 8.1AI High AI 2024-06-25
CVE-2024-38385 genirq/irqdesc: Prevent use-after-free in irq_find_at_or_after() 7.8 High 2024-06-25
CVE-2024-38661 s390/ap: Fix crash in AP internal function modify_bitmap() 5.5AI Medium AI 2024-06-25
CVE-2024-38306 btrfs: protect folio::private when attaching extent buffer folios 7.8 High 2024-06-25
CVE-2024-37354 btrfs: fix crash on racing fsync and size-extending write into prealloc 7.8 High 2024-06-25
CVE-2024-37078 nilfs2: fix potential kernel bug due to lack of writeback flag waiting 7.8 High 2024-06-25
CVE-2022-48772 media: lgdt3306a: Add a check against null-pointer-def 5.5AI Medium AI 2024-06-25
CVE-2021-4440 x86/xen: Drop USERGS_SYSRET64 paravirt call 8.4AI High AI 2024-06-25
CVE-2024-37026 drm/xe: Only use reserved BCS instances for usm migrate exec queue 5.5AI Medium AI 2024-06-24
CVE-2024-37021 fpga: manager: add owner module and take its refcount 5.5AI Medium AI 2024-06-24
CVE-2024-35247 fpga: region: add owner module and take its refcount 5.5AI Medium AI 2024-06-24
CVE-2024-36479 fpga: bridge: add owner module and take its refcount 5.5AI Medium AI 2024-06-24
CVE-2024-34030 PCI: of_property: Return error for int_map allocation failure 5.5AI Medium AI 2024-06-24
CVE-2024-33847 f2fs: compress: don't allow unaligned truncation on released compress inode 7.1 High 2024-06-24
CVE-2024-34027 f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock 7.8 High 2024-06-24
CVE-2024-32936 media: ti: j721e-csi2rx: Fix races while restarting DMA 7.8 High 2024-06-24
CVE-2024-39292 um: Add winch to winch_handlers before registering winch IRQ 7.8 High 2024-06-24
CVE-2024-39291 drm/amdgpu: Fix buffer size in gfx_v9_4_3_init_ cp_compute_microcode() and rlc_microcode() 3.3AI Low AI 2024-06-24
CVE-2024-38667 riscv: prevent pt_regs corruption for secondary idle threads 7.8AI High AI 2024-06-24
CVE-2024-38664 drm: zynqmp_dpsub: Always register bridge 7.8AI High AI 2024-06-24
CVE-2024-38663 blk-cgroup: fix list corruption from resetting io stat 7.8 High 2024-06-24
CVE-2024-38384 blk-cgroup: fix list corruption from reorder of WRITE ->lqueued 7.8 High 2024-06-24
CVE-2024-36477 tpm_tis_spi: Account for SPI header when allocating TPM SPI xfer buffer 7.8 High 2024-06-21
CVE-2024-36481 tracing/probes: fix error check in parse_btf_field() 5.5 - 2024-06-21

All 17853 known CVE vulnerabilities affecting Linux with full Chinese analysis, references, and POCs where available.