Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17854

All 17854 CVE vulnerabilities found in Linux, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumeration (CWE) vulnerabilities affecting the Linux operating system product. It aggregates security data related to weaknesses within the kernel, distributions, and associated utilities provided by various Linux vendors and maintainers. The collection encompasses a wide range of vulnerability types, including memory corruption issues, privilege escalation flaws, information leaks, and denial-of-service conditions. The database covers historical records spanning several decades, reflecting the evolution of the Linux ecosystem from its early releases to modern stable and development branches. This extensive time range allows for the analysis of long-term security trends and the remediation status of legacy systems that remain in production environments. Visitors to this resource can track vendor-specific advisories to stay informed about patches and updates released by major Linux distribution maintainers. You can also use the page to understand the characteristics and impact of specific weakness classes as they manifest in the Linux environment. Additionally, the interface supports looking up a specific product’s vulnerability history, enabling security professionals to assess risk exposure and prioritize mitigation efforts for critical infrastructure components. The data is organized to facilitate efficient searching and correlation between weakness identifiers and affected software versions, ensuring that administrators and developers have access to comprehensive security insights necessary for maintaining system integrity and compliance.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2024-35888 erspan: make sure erspan_base_hdr is present in skb->head 7.3 High 2024-05-19
CVE-2024-35886 ipv6: Fix infinite recursion in fib6_dump_done(). 5.5 - 2024-05-19
CVE-2024-35885 mlxbf_gige: stop interface during shutdown 5.5 - 2024-05-19
CVE-2024-35884 udp: do not accept non-tunnel GSO skbs landing in a tunnel 9.8 Critical 2024-05-19
CVE-2024-35883 spi: mchp-pci1xxx: Fix a possible null pointer dereference in pci1xxx_spi_probe 5.5 - 2024-05-19
CVE-2024-35882 SUNRPC: Fix a slow server-side memory leak with RPC-over-TCP 7.5 High 2024-05-19
CVE-2024-35880 io_uring/kbuf: hold io_buffer_list reference over mmap 7.8 High 2024-05-19
CVE-2024-35879 of: dynamic: Synchronize of_changeset_destroy() with the devlink removals 7.8 High 2024-05-19
CVE-2024-35878 of: module: prevent NULL pointer dereference in vsnprintf() 5.5 - 2024-05-19
CVE-2024-35877 x86/mm/pat: fix VM_PAT handling in COW mappings 7.8 - 2024-05-19
CVE-2024-35875 x86/coco: Require seeding RNG with RDRAND on CoCo systems 8.4 High 2024-05-19
CVE-2024-35874 aio: Fix null ptr deref in aio_complete() wakeup 7.8 High 2024-05-19
CVE-2024-35873 riscv: Fix vector state restore in rt_sigreturn() 7.1 - 2024-05-19
CVE-2024-35872 mm/secretmem: fix GUP-fast succeeding on secretmem folios 7.8 High 2024-05-19
CVE-2024-35871 riscv: process: Fix kernel gp leakage 7.1 - 2024-05-19
CVE-2024-35869 smb: client: guarantee refcounted children from parent session 9.8 Critical 2024-05-19
CVE-2024-35870 smb: client: fix UAF in smb2_reconnect_server() 9.8 Critical 2024-05-19
CVE-2024-35868 smb: client: fix potential UAF in cifs_stats_proc_write() 8.8 - 2024-05-19
CVE-2024-35867 smb: client: fix potential UAF in cifs_stats_proc_show() 7.8 High 2024-05-19
CVE-2024-35866 smb: client: fix potential UAF in cifs_dump_full_key() 8.8 - 2024-05-19
CVE-2024-35865 smb: client: fix potential UAF in smb2_is_valid_oplock_break() 9.8 Critical 2024-05-19
CVE-2024-35864 smb: client: fix potential UAF in smb2_is_valid_lease_break() 9.8 Critical 2024-05-19
CVE-2024-35863 smb: client: fix potential UAF in is_valid_oplock_break() 9.8 Critical 2024-05-19
CVE-2024-35862 smb: client: fix potential UAF in smb2_is_network_name_deleted() 9.8 Critical 2024-05-19
CVE-2024-35861 smb: client: fix potential UAF in cifs_signal_cifsd_for_reconnect() 9.8 Critical 2024-05-19
CVE-2024-35860 bpf: support deferring bpf_link dealloc to after RCU grace period 7.8 High 2024-05-19
CVE-2024-35859 block: fix module reference leakage from bdev_open_by_dev error path 5.5 - 2024-05-17
CVE-2024-35857 icmp: prevent possible NULL dereferences from icmp_build_probe() 7.5 High 2024-05-17
CVE-2024-35858 net: bcmasp: fix memory leak when bringing down interface 7.8 High 2024-05-17
CVE-2024-35856 Bluetooth: btusb: mediatek: Fix double free of skb in coredump 8.8 High 2024-05-17

All 17854 known CVE vulnerabilities affecting Linux with full Chinese analysis, references, and POCs where available.