Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17853

All 17853 CVE vulnerabilities found in Linux, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumeration (CWE) vulnerabilities affecting the Linux operating system product. It aggregates security data related to weaknesses within the kernel, distributions, and associated utilities provided by various Linux vendors and maintainers. The collection encompasses a wide range of vulnerability types, including memory corruption issues, privilege escalation flaws, information leaks, and denial-of-service conditions. The database covers historical records spanning several decades, reflecting the evolution of the Linux ecosystem from its early releases to modern stable and development branches. This extensive time range allows for the analysis of long-term security trends and the remediation status of legacy systems that remain in production environments. Visitors to this resource can track vendor-specific advisories to stay informed about patches and updates released by major Linux distribution maintainers. You can also use the page to understand the characteristics and impact of specific weakness classes as they manifest in the Linux environment. Additionally, the interface supports looking up a specific product’s vulnerability history, enabling security professionals to assess risk exposure and prioritize mitigation efforts for critical infrastructure components. The data is organized to facilitate efficient searching and correlation between weakness identifiers and affected software versions, ensuring that administrators and developers have access to comprehensive security insights necessary for maintaining system integrity and compliance.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2026-80689 tracing/mmiotrace: Add NULL check for mmio_trace_array in logging functions - - 2026-08-28
CVE-2026-80687 iommufd/viommu: Release the igroup lock on the vdevice_size error path - - 2026-08-28
CVE-2026-80688 riscv: drop __init from vec_check_unaligned_access_speed_all_cpus - - 2026-08-28
CVE-2026-80686 mm: migrate_device: fix pte_pfn/pte_dirty called on non-present PTE - - 2026-08-28
CVE-2026-80685 mm/util: don't read __page_2 for order-1 folios in snapshot_page() 7.1 High 2026-08-28
CVE-2026-80684 KVM: s390: pci: Fix NULL dereference on AIBV allocation failure 9.3 Critical 2026-08-28
CVE-2026-80683 Bluetooth: SCO: give the socket its own sco_conn reference 8.8 High 2026-08-28
CVE-2026-80681 vxlan: re-fetch eth header after route_shortcircuit() 9.8 Critical 2026-08-28
CVE-2026-80682 riscv/mm: use physical alignment for vmemmap_start_pfn 7.8 High 2026-08-28
CVE-2026-80680 i2c: amd-mp2: Unregister callback on adapter add failure 7.8 High 2026-08-28
CVE-2026-80679 s390/dasd: Fix potential NULL pointer dereference - - 2026-08-28
CVE-2026-80678 i2c: imx: Fix slave registration race and error handling 8.4 High 2026-08-28
CVE-2026-80677 driver core: use READ_ONCE() for dev->driver in dev_has_sync_state() 7.8 High 2026-08-28
CVE-2026-80676 Drivers: hv: vmbus: use generic driver_override infrastructure - - 2026-08-28
CVE-2026-80675 libbpf: Reject non-exclusive metadata maps in the signed loader 7.1 High 2026-08-28
CVE-2026-80674 ntfs: validate resident attribute lists and harden the validator 9.8 Critical 2026-08-28
CVE-2026-80673 ntfs: bound the look-ahead attribute-list entry in ntfs_external_attr_find() 9.8 Critical 2026-08-28
CVE-2026-80672 ntfs: fix u16 truncation of restart-area length check 8.8 High 2026-08-28
CVE-2026-80671 perf sched: Fix register_pid() overflow, strcpy, and BUG_ON 9.3 Critical 2026-08-28
CVE-2026-80670 perf tools: Use perf_env__get_cpu_topology() in machine__resolve() 9.1 Critical 2026-08-28
CVE-2026-80669 bpf: Disable xfrm_decode_session hook attachment - - 2026-08-28
CVE-2026-80668 netfilter: nf_conntrack_expect: use conntrack GC to reap expectations 9.8 Critical 2026-08-28
CVE-2026-80667 net/mlx5: LAG, MPESW, Fix missing complete() on devcom error - - 2026-08-28
CVE-2026-80666 Bluetooth: sco: Fix a race condition in sco_sock_timeout() - - 2026-08-28
CVE-2026-80665 KVM: arm64: nv: Inject SEA if kvm_translate_vncr() can't resolve PFN 7.1 High 2026-08-28
CVE-2026-80664 netfilter: xt_nat: reject unsupported target families 7.3 High 2026-08-28
CVE-2026-80663 tools/power/x86/intel-speed-select: Harden daemon pidfile open 7.1 High 2026-08-28
CVE-2026-80662 cxl: Fix CXL_HEADERLOG_SIZE to match RAS Capability size 7.1 High 2026-08-28
CVE-2026-80661 ufs: core: tracing: Do not dereference pointers in TP_printk() 7.8 High 2026-08-28
CVE-2026-80660 hwmon: (occ) unregister sysfs devices outside occ lock - - 2026-08-28

All 17853 known CVE vulnerabilities affecting Linux with full Chinese analysis, references, and POCs where available.