Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1310 CNY

100%

Linux — Vulnerabilities & Security Advisories 12059

All 12059 CVE vulnerabilities found in Linux, with AI-generated Chinese analysis, references, and POCs.

This page provides a comprehensive aggregation of vulnerability data for the Linux operating system, focusing on common weakness classifications such as memory corruption, privilege escalation, and input validation errors. It collects security issues affecting kernel modules, core utilities, and subsystem components across various distributions and upstream sources. The database covers reports from early 2010 to the present, ensuring historical context for long-term support and maintenance cycles. Users can track vendor-specific advisories from major distributions like Debian, Red Hat, and Canonical to understand patching timelines and severity assessments. The resource also allows for a deeper understanding of specific weakness classes by analyzing how they manifest in Linux environments, including technical details and mitigation strategies. Additionally, visitors can look up a product's vulnerability history by examining trends and recurrence patterns for specific components or subsystems. This aggregated view simplifies the process of monitoring security posture by consolidating disparate sources into a single, searchable interface. The information is structured to help security professionals, developers, and system administrators assess risk more effectively. By providing a centralized access point, this page reduces the effort required to cross-reference multiple vendor bulletins and security advisories. The goal is to enhance situational awareness and facilitate informed decision-making regarding system updates and configuration hardening.

Vendor: n/a

CVE IDTitleCVSSSeverityPublished
CVE-2025-40083 net/sched: sch_qfq: Fix null-deref in agg_dequeue 5.5AIMediumAI2025-10-29
CVE-2025-40082 hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc() 7.1AIHighAI2025-10-28
CVE-2025-40081 perf: arm_spe: Prevent overflow in PERF_IDX2OFF() 7.8AIHighAI2025-10-28
CVE-2025-40080 nbd: restrict sockets to TCP and UDP 9.8AICriticalAI2025-10-28
CVE-2025-40079 riscv, bpf: Sign extend struct ops return values properly 5.5AIMediumAI2025-10-28
CVE-2025-40078 bpf: Explicitly check accesses to bpf_sock_addr 5.5AIMediumAI2025-10-28
CVE-2025-40077 f2fs: fix to avoid overflow while left shift operation 7.8AIHighAI2025-10-28
CVE-2025-40076 PCI: rcar-host: Pass proper IRQ domain to generic_handle_domain_irq() 5.5AIMediumAI2025-10-28
CVE-2025-40075 tcp_metrics: use dst_dev_net_rcu() 8.8AIHighAI2025-10-28
CVE-2025-40073 drm/msm: Do not validate SSPP when it is not ready 5.5AIMediumAI2025-10-28
CVE-2025-40074 ipv4: start using dst_dev_rcu() 7.1AIHighAI2025-10-28
CVE-2025-40072 fanotify: Validate the return value of mnt_ns_from_dentry() before dereferencing 5.5AIMediumAI2025-10-28
CVE-2025-40071 tty: n_gsm: Don't block input queue by waiting MSC 9.1AICriticalAI2025-10-28
CVE-2025-40070 pps: fix warning in pps_register_cdev when register device fail 5.5AIMediumAI2025-10-28
CVE-2025-40068 fs: ntfs3: Fix integer overflow in run_unpack() 5.5AIMediumAI2025-10-28
CVE-2025-40069 drm/msm: Fix obj leak in VM_BIND error path 5.5AIMediumAI2025-10-28
CVE-2025-40067 fs/ntfs3: reject index allocation if $BITMAP is empty but blocks exist 7.8AIHighAI2025-10-28
CVE-2025-40065 RISC-V: KVM: Write hgatp register with valid mode bits 6.1AIMediumAI2025-10-28
CVE-2025-40066 wifi: mt76: mt7996: Check phy before init msta_link in mt7996_mac_sta_add_links() 5.7AIMediumAI2025-10-28
CVE-2025-40063 crypto: comp - Use same definition of context alloc and free ops 7.8AIHighAI2025-10-28
CVE-2025-40064 smc: Fix use-after-free in __pnet_find_base_ndev(). 7.1AIHighAI2025-10-28
CVE-2025-40062 crypto: hisilicon/qm - set NULL to qm->debug.qm_diff_regs 8.1AIHighAI2025-10-28
CVE-2025-40060 coresight: trbe: Return NULL pointer for allocation failures 5.5AIMediumAI2025-10-28
CVE-2025-40061 RDMA/rxe: Fix race in do_task() when draining 6.3AIMediumAI2025-10-28
CVE-2025-40059 coresight: Fix incorrect handling for return value of devm_kzalloc 5.5AIMediumAI2025-10-28
CVE-2025-40058 iommu/vt-d: Disallow dirty tracking if incoherent page walk 5.5AIMediumAI2025-10-28
CVE-2025-40057 ptp: Add a upper bound on max_vclocks 7.1AIHighAI2025-10-28
CVE-2025-40055 ocfs2: fix double free in user_cluster_connect() 7.1AIHighAI2025-10-28
CVE-2025-40056 vhost: vringh: Fix copy_to_iter return value check 7.1AIHighAI2025-10-28
CVE-2025-40054 f2fs: fix UAF issue in f2fs_merge_page_bio() 5.5AIMediumAI2025-10-28

All 12059 known CVE vulnerabilities affecting Linux with full Chinese analysis, references, and POCs where available.