Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17853

All 17853 CVE vulnerabilities found in Linux, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumeration (CWE) vulnerabilities affecting the Linux operating system product. It aggregates security data related to weaknesses within the kernel, distributions, and associated utilities provided by various Linux vendors and maintainers. The collection encompasses a wide range of vulnerability types, including memory corruption issues, privilege escalation flaws, information leaks, and denial-of-service conditions. The database covers historical records spanning several decades, reflecting the evolution of the Linux ecosystem from its early releases to modern stable and development branches. This extensive time range allows for the analysis of long-term security trends and the remediation status of legacy systems that remain in production environments. Visitors to this resource can track vendor-specific advisories to stay informed about patches and updates released by major Linux distribution maintainers. You can also use the page to understand the characteristics and impact of specific weakness classes as they manifest in the Linux environment. Additionally, the interface supports looking up a specific product’s vulnerability history, enabling security professionals to assess risk exposure and prioritize mitigation efforts for critical infrastructure components. The data is organized to facilitate efficient searching and correlation between weakness identifiers and affected software versions, ensuring that administrators and developers have access to comprehensive security insights necessary for maintaining system integrity and compliance.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2026-80870 drm/amdkfd: Validate CRIU-restored IDs before idr_alloc - - 2026-09-04
CVE-2026-80869 ntfs: bound the attribute-list entry in ntfs_read_inode_mount() - - 2026-09-04
CVE-2026-80868 ntfs3: Allocate iomap inline_data using alloc_page - - 2026-09-04
CVE-2026-80867 alpha/PCI: Add security_locked_down() check to pci_mmap_resource() - - 2026-09-04
CVE-2026-80866 tipc: avoid busy looping in tipc_exit_net() - - 2026-09-04
CVE-2026-80865 bpf: Add missing access_ok call to copy_user_syms - - 2026-09-04
CVE-2026-80864 RDMA/rxe: Fix responder UAF on IB_QP_MAX_DEST_RD_ATOMIC modify_qp - - 2026-09-04
CVE-2026-80863 RDMA/rxe: Fix OOB in free_rd_atomic_resources() - - 2026-09-04
CVE-2026-80862 nvme-tcp: fix usage of page_frag_cache - - 2026-09-04
CVE-2026-80861 usb: xhci: bail out of setup if the controller is inaccessible - - 2026-09-04
CVE-2026-80860 fuse: fix race between interrupt and resend - - 2026-09-04
CVE-2026-80859 fuse: fix missing barrier when checking io-uring readiness - - 2026-09-04
CVE-2026-80858 fuse: publish io-uring queues with release semantics - - 2026-09-04
CVE-2026-80857 fuse: wait for FR_FINISHED on abort_on_kill to prevent use-after-free - - 2026-09-04
CVE-2026-80856 fuse: fix invalidate lock leak on setattr writeback failure - - 2026-09-04
CVE-2026-80855 fuse: fix invalidate lock leak on open O_TRUNC DAX failure - - 2026-09-04
CVE-2026-80854 usb: gadget: f_tcm: keep port count until LUN teardown completes - - 2026-09-04
CVE-2026-80853 KVM: SEV: Allocate full pages for {DE,EN}CRYPT ops on SNP-enabled hosts - - 2026-09-04
CVE-2026-80852 tls: device: fix out-of-bounds write in tls_append_frag() - - 2026-09-04
CVE-2026-80851 gtp: serialize PDP context updates - - 2026-09-04
CVE-2026-80850 tcp: fix AO info use-after-free in tcp_ao_connect_init() - - 2026-09-04
CVE-2026-80849 net/tcp-ao: fix use-after-free of current_key on reconnect to another peer - - 2026-09-04
CVE-2026-80848 xfrm: espintcp: fix UAF during close - - 2026-09-04
CVE-2026-80847 tcp: clamp route advmss to TCP_MIN_MSS - - 2026-09-04
CVE-2026-80846 xfrm: drop ESP-in-TCP packets with no ingress device - - 2026-09-04
CVE-2026-80845 xfrm: avoid lock inversion in nat keepalive work - - 2026-09-04
CVE-2026-80844 xfrm: ah6: validate routing header segments_left - - 2026-09-04
CVE-2026-80843 xfrm: fix xfrm_state_construct() auth-trunc leak - - 2026-09-04
CVE-2026-80842 net: bridge: mcast: fix use-after-free of a master VLAN's multicast context - - 2026-09-04
CVE-2026-80841 net/packet: defer vmalloc TX_RING free until skbs finish - - 2026-09-04

All 17853 known CVE vulnerabilities affecting Linux with full Chinese analysis, references, and POCs where available.