目標達成 すべての支援者に感謝 — 100%達成しました！

目標: 1000 CNY · 調達済み: 1336 CNY

100%
コーヒーを一杯おごる

linux 厂商漏洞列表 / CVE 中文分析 13161

linux 厂商相关 13161 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。

Linux 作为广泛使用的开源操作系统内核，支撑着从嵌入式设备到超级计算机的众多基础设施。其历史漏洞多集中于内核提权、内存破坏及本地权限提升，远程代码执行相对较少。值得关注的是，Linux 拥有活跃的社区安全响应机制及 SELinux 等强制访问控制特性，有效缓解部分风险。尽管 CVE 数量庞大，但多数为配置不当或旧版遗留问题，整体生态通过持续补丁更新维持较高安全性。

上位製品 linux: Linux kernel Linux Kernel linux_kernel util-linux kernel: Linux Kernal
CVE IDタイトルCVSS深刻度公開日
CVE-2024-26589 bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS — Linux 7.8 -2024-02-22
CVE-2024-26590 erofs: fix inconsistent per-file compression format — Linux 6.2 -2024-02-22
CVE-2024-26588 LoongArch: BPF: Prevent out-of-bounds memory access — Linux 5.5 -2024-02-22
CVE-2024-26586 mlxsw: spectrum_acl_tcam: Fix stack corruption — Linux 7.8 -2024-02-22
CVE-2024-26587 net: netdevsim: don't try to destroy PHC on VFs — Linux 5.5 -2024-02-22
CVE-2023-52443 apparmor: avoid crash when parsed profile name is empty — Linux 5.5 -2024-02-22
CVE-2024-26585 tls: fix race between tx work scheduling and socket close — Linux 4.7AIMediumAI2024-02-21
CVE-2024-26583 tls: fix race between async notify and socket close — Linux 6.3AIMediumAI2024-02-21
CVE-2024-26584 net: tls: handle backlogging of crypto requests — Linux 5.5AIMediumAI2024-02-21
CVE-2024-26582 net: tls: fix use-after-free with partial reads and async decrypt — Linux 7.8AIHighAI2024-02-21
CVE-2023-52442 ksmbd: validate session id and tree id in compound request — Linux--AI2024-02-21
CVE-2023-52441 ksmbd: fix out of bounds in init_smb2_rsp_hdr() — Linux 5.5AIMediumAI2024-02-21
CVE-2023-52440 ksmbd: fix slub overflow in ksmbd_decode_ntlmssp_auth_blob() — Linux 7.8AIHighAI2024-02-21
CVE-2023-52438 binder: fix use-after-free in shinker's callback — Linux 7.8 -2024-02-20
CVE-2023-52439 uio: Fix use-after-free in uio_open — Linux 7.8 -2024-02-20
CVE-2023-52436 f2fs: explicitly null-terminate the xattr list — Linux 7.1 -2024-02-20
CVE-2023-52435 net: prevent mss overflow in skb_segment() — Linux 5.5AIMediumAI2024-02-20
CVE-2023-52434 smb: client: fix potential OOBs in smb2_parse_contexts() — Linux 5.5AIMediumAI2024-02-20
CVE-2023-52433 netfilter: nft_set_rbtree: skip sync GC for new elements in this transaction — Linux 8.2AIHighAI2024-02-20
CVE-2024-26581 netfilter: nft_set_rbtree: skip end interval element from gc — Linux 6.5AIMediumAI2024-02-20
CVE-2024-24864 Race condition vulnerability in Linux kernel media/dvb-core in dvbdmx_write() — Linux kernelCWE-362 5.3 Medium2024-02-05
CVE-2024-24857 Race condition vulnerability in Linux kernel bluetooth in conn_info_{min,max}_age_set() — Linux kernelCWE-362 4.6 Medium2024-02-05
CVE-2024-24858 Race condition vulnerability in Linux kernel net/bluetooth in {conn,adv}_{min,max}_interval_set() — Linux kernelCWE-362 4.6 Medium2024-02-05
CVE-2024-24859 Race condition vulnerability in Linux kernel bluetooth sniff_{min,max}_interval_set() — Linux kernelCWE-362 4.6 Medium2024-02-05
CVE-2024-24860 Race condition vulnerability in Linux kernel bluetooth driver in {min,max}_key_size_set() — Linux kernelCWE-362 4.6 Medium2024-02-05
CVE-2024-24861 Race condition vulnerability in Linux kernel media/xc4000 xc4000_get_frequency() — Linux kernelCWE-362 3.3 Low2024-02-05
CVE-2024-24855 Race condition vulnerability in Linux kernel scsi device driver lpfc_unregister_fcf_rescan() — Linux kernelCWE-362 5.0 Medium2024-02-05
CVE-2024-23196 Race condition vulnerability in Linux kernel sound/hda snd_hdac_regmap_sync — Linux kernelCWE-362 5.3 Medium2024-02-05
CVE-2024-22386 Race condition vulnerability in Linux kernel drm/exynos exynos_drm_crtc_atomic_disable — Linux kernelCWE-362 5.3 Medium2024-02-05
CVE-2024-1086 Use-after-free in Linux kernel's netfilter: nf_tables component — KernelCWE-416 7.8 High2024-01-31

本页汇总了 linux 厂商截至目前公开的全部 13161 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。