Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17853

All 17853 CVE vulnerabilities found in Linux, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumeration (CWE) vulnerabilities affecting the Linux operating system product. It aggregates security data related to weaknesses within the kernel, distributions, and associated utilities provided by various Linux vendors and maintainers. The collection encompasses a wide range of vulnerability types, including memory corruption issues, privilege escalation flaws, information leaks, and denial-of-service conditions. The database covers historical records spanning several decades, reflecting the evolution of the Linux ecosystem from its early releases to modern stable and development branches. This extensive time range allows for the analysis of long-term security trends and the remediation status of legacy systems that remain in production environments. Visitors to this resource can track vendor-specific advisories to stay informed about patches and updates released by major Linux distribution maintainers. You can also use the page to understand the characteristics and impact of specific weakness classes as they manifest in the Linux environment. Additionally, the interface supports looking up a specific product’s vulnerability history, enabling security professionals to assess risk exposure and prioritize mitigation efforts for critical infrastructure components. The data is organized to facilitate efficient searching and correlation between weakness identifiers and affected software versions, ensuring that administrators and developers have access to comprehensive security insights necessary for maintaining system integrity and compliance.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2024-36288 SUNRPC: Fix loop termination condition in gss_free_in_token_pages() 9.8 Critical 2024-06-21
CVE-2024-34777 dma-mapping: benchmark: fix node id validation 7.8 - 2024-06-21
CVE-2024-39277 dma-mapping: benchmark: handle NUMA_NO_NODE correctly 7.8 - 2024-06-21
CVE-2024-38780 dma-buf/sw-sync: don't enable IRQ from sync_print_obj() 7.8 - 2024-06-21
CVE-2024-38662 bpf: Allow delete from sockmap/sockhash only if update is allowed 7.1 - 2024-06-21
CVE-2024-38659 enic: Validate length of nl attributes in enic_set_vf_port 7.3 High 2024-06-21
CVE-2024-38637 greybus: lights: check return of get_channel_from_mode 5.5 - 2024-06-21
CVE-2024-38636 f2fs: multidev: fix to recognize valid zero block address 5.5 - 2024-06-21
CVE-2024-38634 serial: max3100: Lock port->lock when calling uart_handle_cts_change() 5.5 - 2024-06-21
CVE-2024-38635 soundwire: cadence: fix invalid PDI offset 7.8 High 2024-06-21
CVE-2024-38633 serial: max3100: Update uart_driver_registered on driver removal 4.7 - 2024-06-21
CVE-2024-38631 iio: adc: PAC1934: fix accessing out of bounds array index 6.1 - 2024-06-21
CVE-2024-38632 vfio/pci: fix potential memory leak in vfio_intx_enable() 2.5 - 2024-06-21
CVE-2024-38630 watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger 7.8 - 2024-06-21
CVE-2024-38628 usb: gadget: u_audio: Fix race condition use of controls after free during gadget unbind. 7.8 High 2024-06-21
CVE-2024-38629 dmaengine: idxd: Avoid unnecessary destruction of file_ida 5.5 - 2024-06-21
CVE-2024-38627 stm class: Fix a double free in stm_register_device() 7.8 - 2024-06-21
CVE-2024-38626 fuse: clear FR_SENT when re-adding requests into pending list 7.8 High 2024-06-21
CVE-2024-38625 fs/ntfs3: Check 'folio' pointer for NULL 5.5 - 2024-06-21
CVE-2024-38624 fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow 7.8 - 2024-06-21
CVE-2024-38622 drm/msm/dpu: Add callback function pointer check before its call 7.8 - 2024-06-21
CVE-2024-38623 fs/ntfs3: Use variable length array instead of fixed size 7.8 High 2024-06-21
CVE-2024-38621 media: stk1160: fix bounds checking in stk1160_copy_video() 7.7 - 2024-06-21
CVE-2024-38390 drm/msm/a6xx: Avoid a nullptr dereference when speedbin setting fails 5.5 - 2024-06-21
CVE-2024-38388 ALSA: hda/cs_dsp_ctl: Use private_free for control cleanup 7.8 High 2024-06-21
CVE-2024-38381 nfc: nci: Fix uninit-value in nci_rx_work 8.8 High 2024-06-21
CVE-2024-37356 tcp: Fix shift-out-of-bounds in dctcp_update_alpha(). 8.1 - 2024-06-21
CVE-2024-36484 net: relax socket state check at accept time. 7.1 - 2024-06-21
CVE-2024-36489 tls: fix missing memory barrier in tls_init 5.5 - 2024-06-21
CVE-2024-36478 null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues' 5.5 - 2024-06-21

All 17853 known CVE vulnerabilities affecting Linux with full Chinese analysis, references, and POCs where available.