Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17853

All 17853 CVE vulnerabilities found in Linux, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumeration (CWE) vulnerabilities affecting the Linux operating system product. It aggregates security data related to weaknesses within the kernel, distributions, and associated utilities provided by various Linux vendors and maintainers. The collection encompasses a wide range of vulnerability types, including memory corruption issues, privilege escalation flaws, information leaks, and denial-of-service conditions. The database covers historical records spanning several decades, reflecting the evolution of the Linux ecosystem from its early releases to modern stable and development branches. This extensive time range allows for the analysis of long-term security trends and the remediation status of legacy systems that remain in production environments. Visitors to this resource can track vendor-specific advisories to stay informed about patches and updates released by major Linux distribution maintainers. You can also use the page to understand the characteristics and impact of specific weakness classes as they manifest in the Linux environment. Additionally, the interface supports looking up a specific product’s vulnerability history, enabling security professionals to assess risk exposure and prioritize mitigation efforts for critical infrastructure components. The data is organized to facilitate efficient searching and correlation between weakness identifiers and affected software versions, ensuring that administrators and developers have access to comprehensive security insights necessary for maintaining system integrity and compliance.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2026-80840 ipv6: seg6: clear IPv4 control block on IPIP decapsulation - - 2026-09-04
CVE-2026-80839 batman-adv: reject unrepresentable multicast TVLV offsets - - 2026-09-04
CVE-2026-80838 vxlan: keep the last remote linked during FDB flush - - 2026-09-04
CVE-2026-80837 netfilter: nf_tables: don't queue packet path object notifications - - 2026-09-04
CVE-2026-80836 crypto: virtio - bound the akcipher result length - - 2026-09-04
CVE-2026-80835 crypto: qcom-rng - Remove crypto_rng interface - - 2026-09-04
CVE-2026-80834 crypto: sun8i-ce - Remove crypto_rng interface - - 2026-09-04
CVE-2026-80833 crypto: sun8i-ss - Remove crypto_rng interface - - 2026-09-04
CVE-2026-80832 crypto: qce - fix CCM AAD buffer underallocation - - 2026-09-04
CVE-2026-80831 crypto: mxs-dcp - fix source scatterlist length access - - 2026-09-04
CVE-2026-80830 usb: core: Add lock to usb_wakeup_notification() - - 2026-09-04
CVE-2026-80829 ALSA: usb-audio: fix OOB write in snd_usbmidi_novation_output() - - 2026-09-04
CVE-2026-80828 ALSA: usb-audio: Complete cleanup after system-resume errors - - 2026-09-04
CVE-2026-80827 USB: serial: option: fix slab OOB read in interrupt URB callback - - 2026-09-04
CVE-2026-80826 USB: c67x00: fix use-after-free in c67x00_add_iso_urb() - - 2026-09-04
CVE-2026-80825 wifi: mt76: mt7925: ensure tx headroom in usb_sdio_tx_prepare_skb - - 2026-09-04
CVE-2026-80824 usb: usbfs: fix use-after-free of usb_device in usbdev_release() - - 2026-09-04
CVE-2026-80823 nfc: st21nfca: validate ATR_REQ length against the received frame - - 2026-09-04
CVE-2026-80822 mailbox: mchp-ipc-sbi: Add null check for devm_kasprintf() - - 2026-09-04
CVE-2026-80821 nvmet: pci-epf: put CQ ref on create_cq mapping failure - - 2026-09-04
CVE-2026-80820 xfs: don't livelock in scrub on a circular unlinked list - - 2026-09-04
CVE-2026-80819 Bluetooth: RFCOMM: take rfcomm_mutex for the deferred setup accept - - 2026-09-04
CVE-2026-80818 iommu/tegra241-cmdqv: Fix CMD_SYNC use-after-free on teardown - - 2026-09-04
CVE-2026-80817 iommu/iommufd: Fix NULL pointer deref in iommufd_ioas_change_process when racing with iopt_map_file_pages - - 2026-09-04
CVE-2026-80816 ALSA: FCP: Use a private URB for the notification endpoint - - 2026-09-04
CVE-2026-80815 ALSA: scarlett2: Use a private URB for the notification endpoint - - 2026-09-04
CVE-2026-80814 rndis_host: add overflow check in rndis_rx_fixup() - - 2026-09-04
CVE-2026-80813 nvmet: fix NULL pointer dereference in nvmet_execute_identify_nslist() - - 2026-09-04
CVE-2026-80812 ALSA: dummy: Check card index validity at probe - - 2026-09-04
CVE-2026-80811 io_uring/cmd: fix iovec leak when the async cmd is not recycled - - 2026-09-04

All 17853 known CVE vulnerabilities affecting Linux with full Chinese analysis, references, and POCs where available.