Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17422

All 17422 CVE vulnerabilities found in Linux, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumeration (CWE) vulnerabilities affecting the Linux operating system product. It aggregates security data related to weaknesses within the kernel, distributions, and associated utilities provided by various Linux vendors and maintainers. The collection encompasses a wide range of vulnerability types, including memory corruption issues, privilege escalation flaws, information leaks, and denial-of-service conditions. The database covers historical records spanning several decades, reflecting the evolution of the Linux ecosystem from its early releases to modern stable and development branches. This extensive time range allows for the analysis of long-term security trends and the remediation status of legacy systems that remain in production environments. Visitors to this resource can track vendor-specific advisories to stay informed about patches and updates released by major Linux distribution maintainers. You can also use the page to understand the characteristics and impact of specific weakness classes as they manifest in the Linux environment. Additionally, the interface supports looking up a specific product’s vulnerability history, enabling security professionals to assess risk exposure and prioritize mitigation efforts for critical infrastructure components. The data is organized to facilitate efficient searching and correlation between weakness identifiers and affected software versions, ensuring that administrators and developers have access to comprehensive security insights necessary for maintaining system integrity and compliance.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2026-98253 RDMA/ucma: Serialize join and leave on copy_to_user failure 7.8 High 2026-10-06
CVE-2026-98252 RDMA/core: fix refcount bug in iwpm_get_nlmsg_request() 7.0 High 2026-10-06
CVE-2026-98251 openvswitch: avoid reallocating confirmed conntrack labels 7.8 High 2026-10-06
CVE-2026-98250 nfsd: fix handling of NFSEXP_PNFS in the netlink codepath - - 2026-10-06
CVE-2026-98248 arm64: percpu: Fix LSE operations on {8,16}-bit types - - 2026-10-06
CVE-2026-98249 arm64: hibernate: pass HVC_SET_VECTORS args to the resume hvc - - 2026-10-06
CVE-2026-98247 Bluetooth: hci_codec: validate vendor codec count length - - 2026-10-06
CVE-2026-98245 btrfs: take commit root semaphore when iterating in mark_block_group_to_copy() - - 2026-10-06
CVE-2026-98246 Bluetooth: hci_sync: Serialize local codec list cleanup - - 2026-10-06
CVE-2026-98244 btrfs: clear free space tree creation state on rebuild failure - - 2026-10-06
CVE-2026-98242 dma-buf: Fix silent overflow for phys vec to sgt - - 2026-10-06
CVE-2026-98243 dma-buf/dma-fence: fix checking signaling bit for timeline and driver name v3 7.1 High 2026-10-06
CVE-2026-98241 ipv6: xfrm: use full sockets in local error paths 7.8 High 2026-10-06
CVE-2026-98239 net: lan743x: fix RX checksum use-after-free 8.1 High 2026-10-06
CVE-2026-98240 net: ip_tunnel: initialize `options_len` before referencing options - - 2026-10-06
CVE-2026-98238 net: wwan: t7xx: validate the netif index in t7xx_ccmni_recv_skb() - - 2026-10-06
CVE-2026-98237 net: wwan: mhi_wwan_mbim: guard against a cyclic NDP chain - - 2026-10-06
CVE-2026-98236 net: wwan: mhi_wwan_mbim: check skb_copy_bits() return value - - 2026-10-06
CVE-2026-98235 net/sched: act_api: release tail references on DELACTION failure - - 2026-10-06
CVE-2026-98233 net/packet: clear RX owner on VNET header error - - 2026-10-06
CVE-2026-98234 net/sched: hhf: cap hh_flows_limit at change time - - 2026-10-06
CVE-2026-98232 scsi: core: Validate MODE SENSE lengths in scsi_cdl_enable() - - 2026-10-06
CVE-2026-98231 xfrm: serialize state GC with device state flush - - 2026-10-06
CVE-2026-98230 xfrm: use hlist_del_init_rcu for state_cache and state_cache_input 7.0 High 2026-10-06
CVE-2026-98229 xfrm: save input state data before secpath resets 7.8 High 2026-10-06
CVE-2026-98228 mips: select CONFIG_WEAK_REORDERING_BEYOND_LLSC from CONFIG_EYEQ 7.8 High 2026-10-06
CVE-2026-98227 memstick: ms_block: destroy io_queue workqueue on removal - - 2026-10-06
CVE-2026-98226 mm, swap: fix SWAP_USAGE_OFFLIST_BIT collision with real usage count - - 2026-10-06
CVE-2026-98225 mm/shrinker: fix bogus set_shrinker_bit() with cgroup.memory=nokmem - - 2026-10-06
CVE-2026-98224 mm/vma: correctly unaccount on mmap_prepare() failure - - 2026-10-06

All 17422 known CVE vulnerabilities affecting Linux with full Chinese analysis, references, and POCs where available.