Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17853

All 17853 CVE vulnerabilities found in Linux, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumeration (CWE) vulnerabilities affecting the Linux operating system product. It aggregates security data related to weaknesses within the kernel, distributions, and associated utilities provided by various Linux vendors and maintainers. The collection encompasses a wide range of vulnerability types, including memory corruption issues, privilege escalation flaws, information leaks, and denial-of-service conditions. The database covers historical records spanning several decades, reflecting the evolution of the Linux ecosystem from its early releases to modern stable and development branches. This extensive time range allows for the analysis of long-term security trends and the remediation status of legacy systems that remain in production environments. Visitors to this resource can track vendor-specific advisories to stay informed about patches and updates released by major Linux distribution maintainers. You can also use the page to understand the characteristics and impact of specific weakness classes as they manifest in the Linux environment. Additionally, the interface supports looking up a specific product’s vulnerability history, enabling security professionals to assess risk exposure and prioritize mitigation efforts for critical infrastructure components. The data is organized to facilitate efficient searching and correlation between weakness identifiers and affected software versions, ensuring that administrators and developers have access to comprehensive security insights necessary for maintaining system integrity and compliance.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2026-80930 tpm: tpm_i2c_nuvoton: disable IRQ on wait timeout - - 2026-09-11
CVE-2026-80929 sysctl: move the "cad_pid" entry from pid_table[] to kern_reboot_table[] 7.8 High 2026-09-11
CVE-2026-80928 smack: fix cred UAF in smack_file_send_sigiotask() 7.8 High 2026-09-11
CVE-2026-80927 timekeeping: Check the return value of tk_get_aux_ts64 in __do_adjtimex() - - 2026-09-11
CVE-2026-80926 ksmbd: fix use-after-free in oplock break notification 9.8 Critical 2026-09-11
CVE-2026-80925 vlan: fix skb_under_panic and races when toggling HW VLAN offload - - 2026-09-09
CVE-2026-80924 crypto: krb5 - use kfree_sensitive() for derived key buffers 7.5 High 2026-09-09
CVE-2026-80923 xhci: dbgtty: Fix unregister on tty_register_driver() failure - - 2026-09-09
CVE-2026-80922 crypto: qcom-rng - Allow zero as a random number - - 2026-09-09
CVE-2026-80921 KVM: s390: vsie: zero stale crypto bits 8.8 High 2026-09-09
CVE-2026-80920 io_uring: defer eventfd signaling when queued from a wakeup handler - - 2026-09-09
CVE-2026-80919 drm/amdgpu: fix recursive ww_mutex acquire in amdgpu_devcoredump_format - - 2026-09-09
CVE-2026-80918 HID: core: fix number/pointer type confusion on long items - - 2026-09-09
CVE-2026-80917 PCI: host-generic: Fix NULL pointer dereference on 32-bit CAM systems - - 2026-09-09
CVE-2026-80916 kcov: fix data corruption and race conditions on PREEMPT_RT - - 2026-09-09
CVE-2026-80915 drm/xe: Fix DPT allocation paths. - - 2026-09-09
CVE-2026-80914 Bluetooth: ISO: fix use-after-free of listener socket in iso_conn_ready 8.8 High 2026-09-09
CVE-2026-80913 selinux: require every boolean value to be defined - - 2026-09-04
CVE-2026-80912 selinux: reject an unclaimed class value in security_get_classes() - - 2026-09-04
CVE-2026-80911 ASoC: SOF: sof-audio: Fix error path in sof_widget_setup_unlocked() - - 2026-09-04
CVE-2026-80910 ASoC: codecs: lpass-wsa-macro: Fix enum kcontrol accesses - - 2026-09-04
CVE-2026-80909 drm/amdgpu: Reject UVD message with invalid number of h265 refs - - 2026-09-04
CVE-2026-80908 drm/amdgpu: Reject UVD message with dimensions above 4096 - - 2026-09-04
CVE-2026-80907 drm/amdgpu: Fix UVD dpb min size calculation for H264 - - 2026-09-04
CVE-2026-80906 net: packet: fix wrong transport_header when sending VLAN-tagged frame - - 2026-09-04
CVE-2026-80905 net: tap: fix wrong transport_header when sending VLAN-tagged frame - - 2026-09-04
CVE-2026-80904 net/tls: Fail tls_sw_splice_read() after a failed async decrypt - - 2026-09-04
CVE-2026-80903 drm/xe/oa: Fix sync entry leak on OA config emit failure - - 2026-09-04
CVE-2026-80902 dmaengine: sun6i-dma: Fix reclaim descriptors while terminating DMA - - 2026-09-04
CVE-2026-80901 ipvs: fix the checksum validations - - 2026-09-04

All 17853 known CVE vulnerabilities affecting Linux with full Chinese analysis, references, and POCs where available.