Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17858

All 17858 CVE vulnerabilities found in Linux, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumeration (CWE) vulnerabilities affecting the Linux operating system product. It aggregates security data related to weaknesses within the kernel, distributions, and associated utilities provided by various Linux vendors and maintainers. The collection encompasses a wide range of vulnerability types, including memory corruption issues, privilege escalation flaws, information leaks, and denial-of-service conditions. The database covers historical records spanning several decades, reflecting the evolution of the Linux ecosystem from its early releases to modern stable and development branches. This extensive time range allows for the analysis of long-term security trends and the remediation status of legacy systems that remain in production environments. Visitors to this resource can track vendor-specific advisories to stay informed about patches and updates released by major Linux distribution maintainers. You can also use the page to understand the characteristics and impact of specific weakness classes as they manifest in the Linux environment. Additionally, the interface supports looking up a specific product’s vulnerability history, enabling security professionals to assess risk exposure and prioritize mitigation efforts for critical infrastructure components. The data is organized to facilitate efficient searching and correlation between weakness identifiers and affected software versions, ensuring that administrators and developers have access to comprehensive security insights necessary for maintaining system integrity and compliance.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2024-26593 i2c: i801: Fix block process call transactions 5.5 - 2024-02-23
CVE-2024-26592 ksmbd: fix UAF issue in ksmbd_tcp_new_connection() 9.8 Critical 2024-02-22
CVE-2024-26591 bpf: Fix re-attachment branch in bpf_tracing_prog_attach 5.5 - 2024-02-22
CVE-2023-52452 bpf: Fix accesses to uninit stack slots 3.3 - 2024-02-22
CVE-2023-52451 powerpc/pseries/memhp: Fix access beyond end of drmem array 7.8 - 2024-02-22
CVE-2023-52450 perf/x86/intel/uncore: Fix NULL pointer dereference issue in upi_fill_topology() 5.5 - 2024-02-22
CVE-2023-52449 mtd: Fix gluebi NULL pointer dereference caused by ftl notifier 5.5 - 2024-02-22
CVE-2023-52448 gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump 5.5 - 2024-02-22
CVE-2023-52447 bpf: Defer the free of inner map when necessary 7.8 High 2024-02-22
CVE-2023-52446 bpf: Fix a race condition between btf_put() and map_free() 6.3 - 2024-02-22
CVE-2023-52445 media: pvrusb2: fix use after free on context disconnection 7.8 - 2024-02-22
CVE-2023-52444 f2fs: fix to avoid dirent corruption 7.8 High 2024-02-22
CVE-2024-26589 bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS 7.8 High 2024-02-22
CVE-2024-26590 erofs: fix inconsistent per-file compression format 6.2 - 2024-02-22
CVE-2024-26588 LoongArch: BPF: Prevent out-of-bounds memory access 5.5 - 2024-02-22
CVE-2024-26586 mlxsw: spectrum_acl_tcam: Fix stack corruption 7.8 High 2024-02-22
CVE-2024-26587 net: netdevsim: don't try to destroy PHC on VFs 5.5 - 2024-02-22
CVE-2023-52443 apparmor: avoid crash when parsed profile name is empty 5.5 - 2024-02-22
CVE-2024-26585 tls: fix race between tx work scheduling and socket close 9.8 Critical 2024-02-21
CVE-2024-26583 tls: fix race between async notify and socket close 9.8 Critical 2024-02-21
CVE-2024-26584 net: tls: handle backlogging of crypto requests 9.8 Critical 2024-02-21
CVE-2024-26582 net: tls: fix use-after-free with partial reads and async decrypt 9.8 Critical 2024-02-21
CVE-2023-52442 ksmbd: validate session id and tree id in compound request 9.1 Critical 2024-02-21
CVE-2023-52441 ksmbd: fix out of bounds in init_smb2_rsp_hdr() 9.1 Critical 2024-02-21
CVE-2023-52440 ksmbd: fix slub overflow in ksmbd_decode_ntlmssp_auth_blob() 9.8 Critical 2024-02-21
CVE-2023-52438 binder: fix use-after-free in shinker's callback 7.8 High 2024-02-20
CVE-2023-52439 uio: Fix use-after-free in uio_open 7.8 High 2024-02-20
CVE-2023-52436 f2fs: explicitly null-terminate the xattr list 7.8 High 2024-02-20
CVE-2023-52435 net: prevent mss overflow in skb_segment() 5.5AI Medium AI 2024-02-20
CVE-2023-52434 smb: client: fix potential OOBs in smb2_parse_contexts() 8.1 High 2024-02-20

All 17858 known CVE vulnerabilities affecting Linux with full Chinese analysis, references, and POCs where available.