Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17853

All 17853 CVE vulnerabilities found in Linux, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumeration (CWE) vulnerabilities affecting the Linux operating system product. It aggregates security data related to weaknesses within the kernel, distributions, and associated utilities provided by various Linux vendors and maintainers. The collection encompasses a wide range of vulnerability types, including memory corruption issues, privilege escalation flaws, information leaks, and denial-of-service conditions. The database covers historical records spanning several decades, reflecting the evolution of the Linux ecosystem from its early releases to modern stable and development branches. This extensive time range allows for the analysis of long-term security trends and the remediation status of legacy systems that remain in production environments. Visitors to this resource can track vendor-specific advisories to stay informed about patches and updates released by major Linux distribution maintainers. You can also use the page to understand the characteristics and impact of specific weakness classes as they manifest in the Linux environment. Additionally, the interface supports looking up a specific product’s vulnerability history, enabling security professionals to assess risk exposure and prioritize mitigation efforts for critical infrastructure components. The data is organized to facilitate efficient searching and correlation between weakness identifiers and affected software versions, ensuring that administrators and developers have access to comprehensive security insights necessary for maintaining system integrity and compliance.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2026-80810 io_uring/rsrc: fix folio size overflow in io_vec_fill_bvec() - - 2026-09-04
CVE-2026-80809 ocfs2: fix missing metadata reservation for large xattrs - - 2026-09-04
CVE-2026-80808 ext4: stop retrying saturated xattr cache entries - - 2026-09-04
CVE-2026-80807 nilfs2: reject invalid block index in GC ioctl - - 2026-09-04
CVE-2026-80806 ext4: don't enable DAX on new encrypted files - - 2026-09-04
CVE-2026-80805 xfs: validate attr entry pointer before field access - - 2026-09-04
CVE-2026-80804 xfs: restore nofs context unconditionally in xfs_trans_roll - - 2026-09-04
CVE-2026-80803 nfc: digital: clamp SENSF_RES length to the destination buffer - - 2026-09-04
CVE-2026-80802 nfc: fdp: bound the device-reported read length and fix an skb leak - - 2026-09-04
CVE-2026-80801 nfc: microread: validate target discovery payload lengths - - 2026-09-04
CVE-2026-80800 nfc: llcp: bound the connect_sn TLV walk to the skb - - 2026-09-04
CVE-2026-80799 nfc: llcp: fix OOB read and u8 offset wrap in TLV parsers - - 2026-09-04
CVE-2026-80798 nfc: llcp: reject PDUs shorter than the LLCP header - - 2026-09-04
CVE-2026-80797 nfc: pn533: purge fragmented skbs during cleanup - - 2026-09-04
CVE-2026-80796 nfc: nci: add data_len bound checks to activation parameter extractors - - 2026-09-04
CVE-2026-80795 nfc: nci: fix out-of-bounds write in nci_target_auto_activated() - - 2026-09-04
CVE-2026-80794 nfc: nci: fix uninit-value in the RF discover/activated NTF handlers - - 2026-09-04
CVE-2026-80793 ipv4: reject undersized MTUs in ip_do_fragment() - - 2026-09-04
CVE-2026-80792 ipv6: fix use-after-free in ip6_finish_output2() - - 2026-09-04
CVE-2026-80791 nvmet-auth: zero the AUTH_RECEIVE response buffer - - 2026-09-04
CVE-2026-80790 nvmet-fc: fix invalid free in LS IOD error path - - 2026-09-04
CVE-2026-80789 nvmet-tcp: bound SGL data length before allocating command buffers - - 2026-09-04
CVE-2026-80788 nvmet-tcp: Do not WARN on remotely-controlled oversized SGL allocations - - 2026-09-04
CVE-2026-80787 nvmet: pci-epf: fix use-after-free in nvmet_pci_epf_exec_iod_work() - - 2026-09-04
CVE-2026-80786 fbdev: Wrap user-invoked calls to fb_set_var() in helper - - 2026-09-04
CVE-2026-80785 fbdev: serialize mode sysfs access with lock_fb_info() - - 2026-09-04
CVE-2026-80784 mptcp: pm: fix memory leak from alloc-during-teardown race - - 2026-09-04
CVE-2026-80783 HID: magicmouse: prevent unbounded recursion in magicmouse_raw_event() - - 2026-09-04
CVE-2026-80782 HID: magicmouse: do not keep a stale msc->input if no input is claimed - - 2026-09-04
CVE-2026-80781 HID: core: fix OOB read of field->usage in hid_set_field() - - 2026-09-04

All 17853 known CVE vulnerabilities affecting Linux with full Chinese analysis, references, and POCs where available.