Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17422

All 17422 CVE vulnerabilities found in Linux, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumeration (CWE) vulnerabilities affecting the Linux operating system product. It aggregates security data related to weaknesses within the kernel, distributions, and associated utilities provided by various Linux vendors and maintainers. The collection encompasses a wide range of vulnerability types, including memory corruption issues, privilege escalation flaws, information leaks, and denial-of-service conditions. The database covers historical records spanning several decades, reflecting the evolution of the Linux ecosystem from its early releases to modern stable and development branches. This extensive time range allows for the analysis of long-term security trends and the remediation status of legacy systems that remain in production environments. Visitors to this resource can track vendor-specific advisories to stay informed about patches and updates released by major Linux distribution maintainers. You can also use the page to understand the characteristics and impact of specific weakness classes as they manifest in the Linux environment. Additionally, the interface supports looking up a specific product’s vulnerability history, enabling security professionals to assess risk exposure and prioritize mitigation efforts for critical infrastructure components. The data is organized to facilitate efficient searching and correlation between weakness identifiers and affected software versions, ensuring that administrators and developers have access to comprehensive security insights necessary for maintaining system integrity and compliance.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2026-98283 KVM: PPC: Book3S HV: fix use-after-free in kvmhv_emulate_tlbie_all_lpid() 8.8 High 2026-10-06
CVE-2026-98282 powerpc/iommu: Fix the overflow validation in iommu_tce_check_ioba 8.8 High 2026-10-06
CVE-2026-98281 futex: Also allocate private hash on vfork() 7.8 High 2026-10-06
CVE-2026-98280 drm/xe/i2c: Disable IRQ on unbind - - 2026-10-06
CVE-2026-98279 btrfs: handle lack of space when cleaning up verity items - - 2026-10-06
CVE-2026-98278 net: remove WARN_ON_ONCE() from the dev_fill_forward_path() loop check - - 2026-10-06
CVE-2026-98277 eth: fbnic: ring the doorbell if a burst ends in a drop - - 2026-10-06
CVE-2026-98276 net: lock the socket in sock_gettstamp() 7.8 High 2026-10-06
CVE-2026-98275 net: ethernet: cortina: Ack RX overrun interrupt correctly - - 2026-10-06
CVE-2026-98273 x86/kprobes: Fix crash when probing CS CALL instructions - - 2026-10-06
CVE-2026-98274 net: psp: avoid conflicts with skb->decrypted and sk_validate_xmit_skb() - - 2026-10-06
CVE-2026-98272 net: mvpp2: prevent buffer overflow in page_pool allocation - - 2026-10-06
CVE-2026-98270 drm/amdgpu: check ras and obj before dereference - - 2026-10-06
CVE-2026-98271 net: skbuff: do not leave stale header offsets after pskb_carve() - - 2026-10-06
CVE-2026-98269 btrfs: abort transaction on failure to update inode for hole punching and reflinking - - 2026-10-06
CVE-2026-98268 perf: Fix null pointer access in is_include_guest_event() - - 2026-10-06
CVE-2026-98267 9p: Fix v9fs_issue_write() to update i_size and remote_i_size - - 2026-10-06
CVE-2026-98266 ALSA: core: Fix potential UAF after asynchronous card release - - 2026-10-06
CVE-2026-98265 ALSA: usb-audio: Clamp implicit feedback packet count to URB capacity - - 2026-10-06
CVE-2026-98264 ALSA: virtio: reset device before deleting virtqueues - - 2026-10-06
CVE-2026-98263 ASoC: codecs: rt712-sdca-dmic: fix uninitialized stream_config->type - - 2026-10-06
CVE-2026-98262 ata: libahci: clear PxCLBU and PxFBU for AHCI_HFLAG_32BIT_ONLY - - 2026-10-06
CVE-2026-98260 exec: Cleanup POSIX timers right after de_thread() 7.8 High 2026-10-06
CVE-2026-98261 cifs: Fix server use-after-free in cifs_chan_skip_or_disable() 8.1 High 2026-10-06
CVE-2026-98259 fs/dax: check zero or empty entry before converting xarray entry - - 2026-10-06
CVE-2026-98258 posix-cpu-timers: Prevent freeing a timer which is queued on the expiry list 7.8 High 2026-10-06
CVE-2026-98257 rds: ib: use rds_conn_drop() on protocol version mismatch 7.5 High 2026-10-06
CVE-2026-98256 signal: Prevent exec() race 7.8 High 2026-10-06
CVE-2026-98254 swiotlb: use the adjusted address for the highmem page lookup 7.8 High 2026-10-06
CVE-2026-98255 tcp: exclude old ACKs from tcp fast path - - 2026-10-06

All 17422 known CVE vulnerabilities affecting Linux with full Chinese analysis, references, and POCs where available.