Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17853

All 17853 CVE vulnerabilities found in Linux, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumeration (CWE) vulnerabilities affecting the Linux operating system product. It aggregates security data related to weaknesses within the kernel, distributions, and associated utilities provided by various Linux vendors and maintainers. The collection encompasses a wide range of vulnerability types, including memory corruption issues, privilege escalation flaws, information leaks, and denial-of-service conditions. The database covers historical records spanning several decades, reflecting the evolution of the Linux ecosystem from its early releases to modern stable and development branches. This extensive time range allows for the analysis of long-term security trends and the remediation status of legacy systems that remain in production environments. Visitors to this resource can track vendor-specific advisories to stay informed about patches and updates released by major Linux distribution maintainers. You can also use the page to understand the characteristics and impact of specific weakness classes as they manifest in the Linux environment. Additionally, the interface supports looking up a specific product’s vulnerability history, enabling security professionals to assess risk exposure and prioritize mitigation efforts for critical infrastructure components. The data is organized to facilitate efficient searching and correlation between weakness identifiers and affected software versions, ensuring that administrators and developers have access to comprehensive security insights necessary for maintaining system integrity and compliance.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2026-89437 platform/x86: int1092: Fix potential memory leak in sar_probe() - - 2026-09-11
CVE-2026-89436 platform/x86: panasonic-laptop: Fix sentinel write past pcc->sinf[] 7.8 High 2026-09-11
CVE-2026-81018 platform/x86: think-lmi: Free system certificate signatures - - 2026-09-11
CVE-2026-81016 platform/x86/amd/pmc: Propagate SMU errors and validate S2D address 7.7 High 2026-09-11
CVE-2026-81017 platform/chrome: sensorhub: Bound the EC-reported sensor number 8.4 High 2026-09-11
CVE-2026-81015 platform/x86/amd/pmc: Fix LPS0 and debugfs leaks when STB init fails 7.8 High 2026-09-11
CVE-2026-81014 platform/x86: hp-bioscfg: fix heap OOB read in sk_store() and kek_store() - - 2026-09-11
CVE-2026-81013 platform/x86: hp-bioscfg: fix heap OOB read on empty password write - - 2026-09-11
CVE-2026-81012 platform/x86: hp-bioscfg: fix off-by-one write in hp_get_string_from_buffer() 8.4 High 2026-09-11
CVE-2026-81011 platform/x86: hp-bioscfg: pass validated element count to package parsers 7.1 High 2026-09-11
CVE-2026-81010 io_uring/waitid: honor task_work cancellation 7.8 High 2026-09-11
CVE-2026-81009 io_uring/query: cap user size passed to copy_struct_to_user - - 2026-09-11
CVE-2026-81007 ipmi: ipmb: validate write message length 7.1 High 2026-09-11
CVE-2026-81008 interconnect: Fix use after free in icc_get() and of_icc_get_by_index() 7.8 High 2026-09-11
CVE-2026-81006 ipmi: Remove all sysfs files on registration failure 7.8 High 2026-09-11
CVE-2026-81004 ipmi:msghandler: Cancel work cleanly on an error 8.4 High 2026-09-11
CVE-2026-81005 ipmi: si: Fix NULL pointer dereference after failed registration - - 2026-09-11
CVE-2026-81003 net/iucv: filter frames in afiucv_hs_rcv() by ingress device 8.1 High 2026-09-11
CVE-2026-81002 xdp: fix zero-copy frame layout 9.8 Critical 2026-09-11
CVE-2026-81001 slip: fix use-after-free in sl_sync() 7.8 High 2026-09-11
CVE-2026-81000 net: tun: bound receive headroom 7.8 High 2026-09-11
CVE-2026-80999 net: dsa: realtek: use gpiod_set_value_cansleep for reset GPIO - - 2026-09-11
CVE-2026-80998 net: bnxt: ring the doorbell when SW USO exits early 7.5 High 2026-09-11
CVE-2026-80996 net: l2tp: do not propagate multicast notification errors - - 2026-09-11
CVE-2026-80997 net: ipa: fix stalled modem TX queue after runtime resume 7.5 High 2026-09-11
CVE-2026-80995 net: mctp: hold a reference to the route device in mctp_route_lookup() 7.8 High 2026-09-11
CVE-2026-80994 net: openvswitch: fix flow mask use-after-free on flow deletion 7.8 High 2026-09-11
CVE-2026-80993 net: phylink: correctly validate returned PCS in phylink_inband_caps - - 2026-09-11
CVE-2026-80992 net: ravb: avoid dereferencing an invalid PTP clock 7.8 High 2026-09-11
CVE-2026-80991 net: ravb: serialize PTP clock teardown 7.8 High 2026-09-11

All 17853 known CVE vulnerabilities affecting Linux with full Chinese analysis, references, and POCs where available.