Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17854

All 17854 CVE vulnerabilities found in Linux, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumeration (CWE) vulnerabilities affecting the Linux operating system product. It aggregates security data related to weaknesses within the kernel, distributions, and associated utilities provided by various Linux vendors and maintainers. The collection encompasses a wide range of vulnerability types, including memory corruption issues, privilege escalation flaws, information leaks, and denial-of-service conditions. The database covers historical records spanning several decades, reflecting the evolution of the Linux ecosystem from its early releases to modern stable and development branches. This extensive time range allows for the analysis of long-term security trends and the remediation status of legacy systems that remain in production environments. Visitors to this resource can track vendor-specific advisories to stay informed about patches and updates released by major Linux distribution maintainers. You can also use the page to understand the characteristics and impact of specific weakness classes as they manifest in the Linux environment. Additionally, the interface supports looking up a specific product’s vulnerability history, enabling security professionals to assess risk exposure and prioritize mitigation efforts for critical infrastructure components. The data is organized to facilitate efficient searching and correlation between weakness identifiers and affected software versions, ensuring that administrators and developers have access to comprehensive security insights necessary for maintaining system integrity and compliance.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2026-90070 tpm: st33zp24: Return zero on status read failure - - 2026-09-17
CVE-2026-90069 crypto: acomp - allocate async request context when cloning 7.8 High 2026-09-17
CVE-2026-90067 libceph: validate banner payload length 7.5 High 2026-09-17
CVE-2026-90068 ASoC: dapm: Fix off-by-one check on the second enum channel - - 2026-09-17
CVE-2026-90066 samples/ftrace: Fix kthread_stop() on ERR_PTR in ftrace-direct-multi-modify - - 2026-09-17
CVE-2026-90064 drm/xe: Reject page faults from non-fault-mode scratch VMs - - 2026-09-17
CVE-2026-90065 net/smc: release the internal TCP sock on IPPROTO_SMC socket creation failure - - 2026-09-17
CVE-2026-90063 virtio-net: Ensure that TCP packets don't overflow gso_segs - - 2026-09-17
CVE-2026-90062 netfilter: nf_tables: move hardware offload step after building the chain blob 7.1 High 2026-09-17
CVE-2026-90061 netfilter: nf_tables: skip double clone set expressions on element insert - - 2026-09-17
CVE-2026-90060 ALSA: control: Don't add invalid kcontrols to LED layer - - 2026-09-17
CVE-2026-90059 net: stmmac: restore NET_IP_ALIGN in the RX DMA offset 7.5 High 2026-09-17
CVE-2026-90058 net/sched: bound qdisc_pkt_len to prevent qdisc soft lockup - - 2026-09-17
CVE-2026-90057 slip: remove slip_hangup() to fix use-after-free in slip_receive_buf() 7.8 High 2026-09-17
CVE-2026-90056 net: fec: only stop PTP if it was initialized - - 2026-09-17
CVE-2026-90054 tcp: fix corruption of urgent data on multi-segment retransmit - - 2026-09-17
CVE-2026-90055 usb: atm: usbatm: fix invalid ci_range initialization - - 2026-09-17
CVE-2026-90053 net/sched: sch_htb: limit htb_classify inner-class filter hops - - 2026-09-17
CVE-2026-90051 tcp: reject non zerocopy devmem tx 7.8 High 2026-09-17
CVE-2026-90049 net: skbuff: don't skb_tx_error() the source skb in skb_zerocopy() 9.3 Critical 2026-09-16
CVE-2026-90048 fs/ntfs3: fix slab-out-of-bounds write in ni_create_attr_list() 9.8 Critical 2026-09-16
CVE-2026-90047 drm/xe: Don't hand out the flat CCS storage as usable VRAM 7.8 High 2026-09-16
CVE-2026-90046 mm/page_alloc: don't spin_trylock() in NMI on UP 7.8 High 2026-09-16
CVE-2026-90044 usb: gadget: f_fs: Fix Use-After-Free in AIO error path 7.8 High 2026-09-16
CVE-2026-90045 USB: gadget: ffs: fix mm lifetime handling 7.8 High 2026-09-16
CVE-2026-90043 zram: fix slot lock bit position on big-endian 64-bit 7.8 High 2026-09-16
CVE-2026-90042 ceph: properly decrypt filenames in vmalloc() buffers 9.8 Critical 2026-09-16
CVE-2026-90040 KVM: SEV: Forcefully invalidate SNP VMSA if its backing gmem page is zapped - - 2026-09-16
CVE-2026-90041 HID: sony: clean up device list on probe failure 8.8 High 2026-09-16
CVE-2026-90039 NFSD: Guard admin state-revocation walks with NFSD_NET_UP - - 2026-09-16

All 17854 known CVE vulnerabilities affecting Linux with full Chinese analysis, references, and POCs where available.