Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17855

All 17855 CVE vulnerabilities found in Linux, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumeration (CWE) vulnerabilities affecting the Linux operating system product. It aggregates security data related to weaknesses within the kernel, distributions, and associated utilities provided by various Linux vendors and maintainers. The collection encompasses a wide range of vulnerability types, including memory corruption issues, privilege escalation flaws, information leaks, and denial-of-service conditions. The database covers historical records spanning several decades, reflecting the evolution of the Linux ecosystem from its early releases to modern stable and development branches. This extensive time range allows for the analysis of long-term security trends and the remediation status of legacy systems that remain in production environments. Visitors to this resource can track vendor-specific advisories to stay informed about patches and updates released by major Linux distribution maintainers. You can also use the page to understand the characteristics and impact of specific weakness classes as they manifest in the Linux environment. Additionally, the interface supports looking up a specific product’s vulnerability history, enabling security professionals to assess risk exposure and prioritize mitigation efforts for critical infrastructure components. The data is organized to facilitate efficient searching and correlation between weakness identifiers and affected software versions, ensuring that administrators and developers have access to comprehensive security insights necessary for maintaining system integrity and compliance.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2026-68387 can: raw: add locking for raw flags bitfield 7.8 High 2026-08-10
CVE-2026-68386 bpf, sockmap: Reject unhashed UDP sockets on sockmap update - - 2026-08-10
CVE-2026-68385 s390/checksum: Fix csum_partial() without vector facility 9.8 Critical 2026-08-10
CVE-2026-68384 drm/xe/vf: Fix VF CCS attach/detach race with in-flight BO moves 7.8 High 2026-08-10
CVE-2026-68383 drm/xe/guc: Keep scheduler timeline name alive 7.8 High 2026-08-10
CVE-2026-68382 drm/xe/guc: Hold device ref until queue teardown completes 7.8 High 2026-08-10
CVE-2026-68381 ksmbd: pin conn during async oplock break notification 9.8 Critical 2026-08-10
CVE-2026-68380 accel/amdxdna: Fix use-after-free of mm_struct in job scheduler 7.8 High 2026-08-10
CVE-2026-68379 tcp: fix TIME_WAIT socket reference leak on PSP policy failure 7.5 High 2026-08-10
CVE-2026-68378 dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() - - 2026-08-10
CVE-2026-68377 net/sched: act_tunnel_key: Defer dst_release to RCU callback 7.8 High 2026-08-10
CVE-2026-68376 sctp: fix auth_hmacs array size in struct sctp_cookie 8.1 High 2026-08-10
CVE-2026-68375 bnxt_en: Handle partially initialized auxiliary devices - - 2026-08-10
CVE-2026-68374 usb: core: sysfs: add lock to bos_descriptors_read() 7.8 High 2026-08-10
CVE-2026-68373 wifi: at76c50x-usb: avoid length underflow in at76_guess_freq() 8.1 High 2026-08-10
CVE-2026-68372 usb: core: port: Deattach Type-C connector on component unbind - - 2026-08-10
CVE-2026-68371 usb: musb: omap2430: Do not put borrowed of_node in probe 8.4 High 2026-08-10
CVE-2026-68370 usb: gadget: dummy_hcd: prevent fifo_req reuse during giveback 7.8 High 2026-08-10
CVE-2026-68369 usb: gadget: printer: fix infinite loop in printer_read() - - 2026-08-10
CVE-2026-68368 usb: gadget: f_ncm: validate datagram bounds in ncm_unwrap_ntb() - - 2026-08-10
CVE-2026-68367 usb: gadget: f_tcm: synchronize delayed set_alt with teardown - - 2026-08-10
CVE-2026-68366 usb: gadget: uvc: clamp SEND_RESPONSE length to the response buffer - - 2026-08-10
CVE-2026-68365 USB: serial: io_edgeport: cap received transmit credits - - 2026-08-10
CVE-2026-68364 drm/amd/display: Fix ISM dc_lock deadlock during suspend - - 2026-08-10
CVE-2026-68363 wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request - - 2026-08-10
CVE-2026-68362 wifi: ath11k: fix NULL pointer dereference in ath11k_hal_srng_access_begin - - 2026-08-10
CVE-2026-68361 hwmon: (corsair-psu) Stop device IO before calling hid_hw_stop - - 2026-08-10
CVE-2026-68360 hwmon: (corsair-cpro) Stop device IO before calling hid_hw_stop - - 2026-08-10
CVE-2026-68359 hwmon: (nzxt-smart2) Stop device IO before calling hid_hw_stop - - 2026-08-10
CVE-2026-68358 hwmon: (nzxt-kraken3) Stop device IO before calling hid_hw_stop - - 2026-08-10

All 17855 known CVE vulnerabilities affecting Linux with full Chinese analysis, references, and POCs where available.