Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17855

All 17855 CVE vulnerabilities found in Linux, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumeration (CWE) vulnerabilities affecting the Linux operating system product. It aggregates security data related to weaknesses within the kernel, distributions, and associated utilities provided by various Linux vendors and maintainers. The collection encompasses a wide range of vulnerability types, including memory corruption issues, privilege escalation flaws, information leaks, and denial-of-service conditions. The database covers historical records spanning several decades, reflecting the evolution of the Linux ecosystem from its early releases to modern stable and development branches. This extensive time range allows for the analysis of long-term security trends and the remediation status of legacy systems that remain in production environments. Visitors to this resource can track vendor-specific advisories to stay informed about patches and updates released by major Linux distribution maintainers. You can also use the page to understand the characteristics and impact of specific weakness classes as they manifest in the Linux environment. Additionally, the interface supports looking up a specific product’s vulnerability history, enabling security professionals to assess risk exposure and prioritize mitigation efforts for critical infrastructure components. The data is organized to facilitate efficient searching and correlation between weakness identifiers and affected software versions, ensuring that administrators and developers have access to comprehensive security insights necessary for maintaining system integrity and compliance.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2026-68477 ipvs: fix more places with wrong ipv6 transport offsets 9.8 Critical 2026-08-15
CVE-2026-68476 ipvs: reload ip header after head reallocation 9.8 Critical 2026-08-15
CVE-2026-68475 reset: sunxi: fix memory region leak on ioremap failure - - 2026-08-15
CVE-2026-68474 powerpc/spufs: fix out-of-bounds access in spufs_mem_mmap_access() 7.8 High 2026-08-15
CVE-2026-68472 wifi: cfg80211: validate EHT MLE before MLD ID read 8.1 High 2026-08-15
CVE-2026-68473 powerpc/uaccess: correct check for CONFIG_PPC_E500 in mask_user_address() 7.8 High 2026-08-15
CVE-2026-68471 wifi: ieee80211: validate MLE common info length 8.8 High 2026-08-15
CVE-2026-68470 wifi: mac80211: validate extension-frame layout before RX 8.8 High 2026-08-15
CVE-2026-68469 wifi: mwifiex: fix permanently busy scans after multiple roam iterations - - 2026-08-15
CVE-2026-68468 mtd: virt-concat: free duplicate generated name - - 2026-08-15
CVE-2026-68467 mtd: mchp23k256: use SPI match data for chip caps 7.8 High 2026-08-15
CVE-2026-68466 mtd: rawnand: lpc32xx_slc: fail DMA transfer on completion timeout 8.8 High 2026-08-15
CVE-2026-68465 mmc: sdhci-esdhc-imx: fix esdhc_change_pinstate() to allow default state restore - - 2026-08-15
CVE-2026-68464 mmc: sdhci-esdhc-imx: disable irq during suspend to fix unhandled interrupt - - 2026-08-15
CVE-2026-68463 mmc: sdhci-esdhc-imx: use pm_runtime_resume_and_get() in suspend - - 2026-08-15
CVE-2026-68462 bpf: Reject negative const offsets for buffer pointers 7.8 High 2026-08-15
CVE-2026-68461 device property: initialize the remaining fields of fwnode_handle in fwnode_init() 7.8 High 2026-08-15
CVE-2026-68459 f2fs: fix potential deadlock in gc_merge path of f2fs_balance_fs() - - 2026-08-15
CVE-2026-68460 f2fs: fix potential deadlock in f2fs_balance_fs() - - 2026-08-15
CVE-2026-68458 binder: cache secctx size before release zeroes it 7.8 High 2026-08-15
CVE-2026-68457 ksmbd: use opener credentials for FSCTL mutations 9.1 Critical 2026-08-15
CVE-2026-68455 liveupdate: validate session type before performing operation - - 2026-08-15
CVE-2026-68456 usb: atm: ueagle-atm: wait for pre-firmware load in .disconnect() - - 2026-08-15
CVE-2026-68454 KVM: s390: pci: Fix handling of AIF enable without AISB 8.8 High 2026-08-13
CVE-2026-68453 s390/zcrypt: Fix buffer over-read in cca_cipher2protkey 7.1 High 2026-08-13
CVE-2026-68452 s390/zcrypt: Validate length for CCA AES cipher key requests 7.8 High 2026-08-13
CVE-2026-68451 s390/zcrypt: Validate length for CCA ECC private key requests 7.8 High 2026-08-13
CVE-2026-68450 btrfs: free mapping node on duplicate reloc root insert - - 2026-08-12
CVE-2026-68449 ata: sata_dwc_460ex: fix infinite loop in NCQ tag completion bit-scanning - - 2026-08-12
CVE-2026-68448 ovl: check access to copy_file_range source with src mounter creds - - 2026-08-12

All 17855 known CVE vulnerabilities affecting Linux with full Chinese analysis, references, and POCs where available.