Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17853

All 17853 CVE vulnerabilities found in Linux, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumeration (CWE) vulnerabilities affecting the Linux operating system product. It aggregates security data related to weaknesses within the kernel, distributions, and associated utilities provided by various Linux vendors and maintainers. The collection encompasses a wide range of vulnerability types, including memory corruption issues, privilege escalation flaws, information leaks, and denial-of-service conditions. The database covers historical records spanning several decades, reflecting the evolution of the Linux ecosystem from its early releases to modern stable and development branches. This extensive time range allows for the analysis of long-term security trends and the remediation status of legacy systems that remain in production environments. Visitors to this resource can track vendor-specific advisories to stay informed about patches and updates released by major Linux distribution maintainers. You can also use the page to understand the characteristics and impact of specific weakness classes as they manifest in the Linux environment. Additionally, the interface supports looking up a specific product’s vulnerability history, enabling security professionals to assess risk exposure and prioritize mitigation efforts for critical infrastructure components. The data is organized to facilitate efficient searching and correlation between weakness identifiers and affected software versions, ensuring that administrators and developers have access to comprehensive security insights necessary for maintaining system integrity and compliance.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2026-80780 HID: pidff: fix OOB write when hid->inputs is empty - - 2026-09-04
CVE-2026-80779 net/ionic: avoid OOB TX partner lookup for hwstamp RXQ - - 2026-09-04
CVE-2026-80778 futex/pi: Reject cross-mm private futex owners - - 2026-09-04
CVE-2026-80777 futex/pi: Plug private futex exec() race - - 2026-09-04
CVE-2026-80776 futex: Fix race in futex_pivot_pending() during private hash resize - - 2026-09-04
CVE-2026-80775 futex: Fix race on the initial mm->futex.phash.ref allocation - - 2026-09-04
CVE-2026-80774 HID: asus: fix missing hid_is_usb() check - - 2026-09-04
CVE-2026-80773 HID: huawei: fix missing hid_is_usb() check - - 2026-09-04
CVE-2026-80772 HID: nintendo: fix out-of-bounds read in joycon_ctlr_read_handler() - - 2026-09-04
CVE-2026-80771 HID: nintendo: register input device after capabilities are set - - 2026-09-04
CVE-2026-80770 HID: nintendo: stop device IO before hid_hw_stop on probe failure - - 2026-09-04
CVE-2026-80769 HID: rapoo: fix missing hid_is_usb() check - - 2026-09-04
CVE-2026-80768 HID: ft260: fix stack-use-after-return write in I2C read race - - 2026-09-04
CVE-2026-80766 HID: uclogic: fix use-after-free of inrange_timer on remove - - 2026-09-04
CVE-2026-80767 HID: sensor: custom: Fix use-after-free in enable_sensor - - 2026-09-04
CVE-2026-80765 HID: hyperv: validate initial device info bounds - - 2026-09-04
CVE-2026-80764 Bluetooth: hci_event: fix LE list UAF on reset - - 2026-09-04
CVE-2026-80763 Bluetooth: hci_event: validate LE Set CIG Parameters response - - 2026-09-04
CVE-2026-80762 Bluetooth: hci_sync: Fix accept list UAF during suspend - - 2026-09-04
CVE-2026-80761 Bluetooth: ISO: zero the sockaddr before returning it in getname - - 2026-09-04
CVE-2026-80760 Bluetooth: MGMT: reject HCI_CMD_SYNC params_len above 255 - - 2026-09-04
CVE-2026-80759 Bluetooth: hci_aml: validate firmware segment lengths - - 2026-09-04
CVE-2026-80758 futex: Avoid private hash use-after-free on final put - - 2026-09-04
CVE-2026-80757 selinux: reject a class permission count below its inherited common - - 2026-09-03
CVE-2026-80755 selinux: reject a permission value exceeding the class permission count - - 2026-09-03
CVE-2026-80756 selinux: do not cancel a policy conversion that never started - - 2026-09-03
CVE-2026-80754 Input: synaptics-rmi4 - fix F55 transmitter electrode count typo 7.8 High 2026-09-03
CVE-2026-80753 ovpn: run deferred work on a module-owned workqueue 8.4 High 2026-09-03
CVE-2026-80752 Input: psxpad-spi - set driver data before use 8.4 High 2026-09-03
CVE-2026-80751 pmdomain: mediatek: mfg: initialize prev_o in mtk_mfg_attach_dev() 7.8 High 2026-09-03

All 17853 known CVE vulnerabilities affecting Linux with full Chinese analysis, references, and POCs where available.