Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

Linux — Vulnerabilities & Security Advisories 11017

All 11017 CVE vulnerabilities found in Linux, with AI-generated Chinese analysis, references, and POCs.

Vendor: n/a

CVE IDTitleCVSSSeverityPublished
CVE-2026-31624 HID: core: clamp report_size in s32ton() to avoid undefined shift 7.7AIHighAI2026-04-24
CVE-2026-31625 HID: alps: fix NULL pointer dereference in alps_raw_event() 5.5AIMediumAI2026-04-24
CVE-2026-31623 net: usb: cdc-phonet: fix skb frags[] overflow in rx_complete() 6.8AIMediumAI2026-04-24
CVE-2026-31622 NFC: digital: Bounds check NFC-A cascade depth in SDD response handler 6.5AIMediumAI2026-04-24
CVE-2026-31621 bnge: return after auxiliary_device_uninit() in error path 5.5AIMediumAI2026-04-24
CVE-2026-31620 ALSA: usx2y: us144mkii: fix NULL deref on missing interface 0 4.6AIMediumAI2026-04-24
CVE-2026-31619 ALSA: fireworks: bound device-supplied status before string array lookup 7.5AIHighAI2026-04-24
CVE-2026-31618 fbdev: tdfxfb: avoid divide-by-zero on FBIOPUT_VSCREENINFO 5.5AIMediumAI2026-04-24
CVE-2026-31617 usb: gadget: f_ncm: validate minimum block_len in ncm_unwrap_ntb() 7.3AIHighAI2026-04-24
CVE-2026-31615 usb: gadget: renesas_usb3: validate endpoint index in standard request handlers 7.1AIHighAI2026-04-24
CVE-2026-31616 usb: gadget: f_phonet: fix skb frags[] overflow in pn_rx_complete() 6.1AIMediumAI2026-04-24
CVE-2026-31614 smb: client: fix off-by-8 bounds check in check_wsl_eas() 7.1AIHighAI2026-04-24
CVE-2026-31612 ksmbd: validate EaNameLength in smb2_get_ea() 5.5AIMediumAI2026-04-24
CVE-2026-31613 smb: client: fix OOB reads parsing symlink error response 6.5AIMediumAI2026-04-24
CVE-2026-31611 ksmbd: require 3 sub-authorities before reading sub_auth[2] 8.1AIHighAI2026-04-24
CVE-2026-31610 ksmbd: fix mechToken leak when SPNEGO decode fails after token alloc 3.3AILowAI2026-04-24
CVE-2026-31609 smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() 7.8AIHighAI2026-04-24
CVE-2026-31608 smb: server: avoid double-free in smb_direct_free_sendmsg after smb_direct_flush_send_list() 7.1AIHighAI2026-04-24
CVE-2026-31606 usb: gadget: f_hid: don't call cdev_init while cdev in use 7.8AIHighAI2026-04-24
CVE-2026-31607 usbip: validate number_of_packets in usbip_pack_ret_submit() 7.4AIHighAI2026-04-24
CVE-2026-31605 fbdev: udlfb: avoid divide-by-zero on FBIOPUT_VSCREENINFO 5.5AIMediumAI2026-04-24
CVE-2026-31603 staging: sm750fb: fix division by zero in ps_to_hz() 5.5AIMediumAI2026-04-24
CVE-2026-31604 wifi: rtw88: fix device leak on probe failure 6.8AIMediumAI2026-04-24
CVE-2026-31602 ALSA: ctxfi: Limit PTP to a single page 6.5AIMediumAI2026-04-24
CVE-2026-31600 arm64: mm: Handle invalid large leaf mappings correctly 7.1AIHighAI2026-04-24
CVE-2026-31601 vfio/xe: Reorganize the init to decouple migration from reset 7.1AIHighAI2026-04-24
CVE-2026-31599 media: vidtv: fix NULL pointer dereference in vidtv_channel_pmt_match_sections 5.0AIMediumAI2026-04-24
CVE-2026-31598 ocfs2: fix possible deadlock between unlink and dio_end_io_write 7.1AIHighAI2026-04-24
CVE-2026-31597 ocfs2: fix use-after-free in ocfs2_fault() when VM_FAULT_RETRY 7.1AIHighAI2026-04-24
CVE-2026-31596 ocfs2: handle invalid dinode in ocfs2_group_extend 7.1AIHighAI2026-04-24

All 11017 known CVE vulnerabilities affecting Linux with full Chinese analysis, references, and POCs where available.