Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17853

All 17853 CVE vulnerabilities found in Linux, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumeration (CWE) vulnerabilities affecting the Linux operating system product. It aggregates security data related to weaknesses within the kernel, distributions, and associated utilities provided by various Linux vendors and maintainers. The collection encompasses a wide range of vulnerability types, including memory corruption issues, privilege escalation flaws, information leaks, and denial-of-service conditions. The database covers historical records spanning several decades, reflecting the evolution of the Linux ecosystem from its early releases to modern stable and development branches. This extensive time range allows for the analysis of long-term security trends and the remediation status of legacy systems that remain in production environments. Visitors to this resource can track vendor-specific advisories to stay informed about patches and updates released by major Linux distribution maintainers. You can also use the page to understand the characteristics and impact of specific weakness classes as they manifest in the Linux environment. Additionally, the interface supports looking up a specific product’s vulnerability history, enabling security professionals to assess risk exposure and prioritize mitigation efforts for critical infrastructure components. The data is organized to facilitate efficient searching and correlation between weakness identifiers and affected software versions, ensuring that administrators and developers have access to comprehensive security insights necessary for maintaining system integrity and compliance.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2026-80900 ASoC: SDCA: Make UMP message size check more robust - - 2026-09-04
CVE-2026-80899 erofs: remove fscache backend entirely - - 2026-09-04
CVE-2026-80898 netfs: clear PG_private_2 on copy-to-cache append failure - - 2026-09-04
CVE-2026-80896 mshv: Fix race in mshv_irqfd_deassign - - 2026-09-04
CVE-2026-80897 netfs: release readahead folios on iterator preparation failure - - 2026-09-04
CVE-2026-80895 mshv: Order pt_vp_array publish against irqfd assertion path - - 2026-09-04
CVE-2026-80894 iommufd: Fix wrong hwpt passed to iommufd_auto_response_faults on replace - - 2026-09-04
CVE-2026-80893 mm/hugetlb: fix swap entry corruption when clearing uffd-wp at fork() - - 2026-09-04
CVE-2026-80891 KVM: s390: pci: Validate AIBV and AISB before pinning guest pages - - 2026-09-04
CVE-2026-80892 erofs: cap LZMA stream pool size - - 2026-09-04
CVE-2026-80890 sctp: reject stale cookies with mismatched verification tags - - 2026-09-04
CVE-2026-80889 can: isotp: fix timer drain order, wakeup handling and tx_gen ordering - - 2026-09-04
CVE-2026-80888 drm/vmwgfx: drop dma_buf reference on foreign-fd prime import - - 2026-09-04
CVE-2026-80887 drm/vmwgfx: use check_add_overflow for shader size+offset bound - - 2026-09-04
CVE-2026-80886 serial: msm: Disable DMA for kernel console UART - - 2026-09-04
CVE-2026-80885 afs: Fix uncancelled rxrpc OOB message handler - - 2026-09-04
CVE-2026-80884 ntb: Store original DMA address for future release - - 2026-09-04
CVE-2026-80883 drm/tegra: gr2d/gr3d: Initialize address register map before HOST1X client is registered - - 2026-09-04
CVE-2026-80882 crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm - - 2026-09-04
CVE-2026-80881 ocfs2: fix buffer head management in ocfs2_read_blocks() - - 2026-09-04
CVE-2026-80880 IB/mlx5: Properly support implicit ODP rereg_mr - - 2026-09-04
CVE-2026-80879 ocfs2: fix circular locking dependency in ocfs2_dio_end_io_write - - 2026-09-04
CVE-2026-80878 afs: Fix leak of ungot volume - - 2026-09-04
CVE-2026-80877 afs: Fix vllist leak - - 2026-09-04
CVE-2026-80876 ring-buffer: Fix event length with forced 8-byte alignment - - 2026-09-04
CVE-2026-80875 ipvs: use parsed transport offset in TCP state lookup - - 2026-09-04
CVE-2026-80874 arm64: dts: renesas: ironhide: Describe inline ECC carveouts - - 2026-09-04
CVE-2026-80873 KVM: arm64: nv: Write ESR_EL2 for injected nested SError exceptions - - 2026-09-04
CVE-2026-80872 ALSA: hda/tas2781: Cancel async firmware request at unbind - - 2026-09-04
CVE-2026-80871 crypto: xilinx-trng - Remove crypto_rng interface - - 2026-09-04

All 17853 known CVE vulnerabilities affecting Linux with full Chinese analysis, references, and POCs where available.