Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17853

All 17853 CVE vulnerabilities found in Linux, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumeration (CWE) vulnerabilities affecting the Linux operating system product. It aggregates security data related to weaknesses within the kernel, distributions, and associated utilities provided by various Linux vendors and maintainers. The collection encompasses a wide range of vulnerability types, including memory corruption issues, privilege escalation flaws, information leaks, and denial-of-service conditions. The database covers historical records spanning several decades, reflecting the evolution of the Linux ecosystem from its early releases to modern stable and development branches. This extensive time range allows for the analysis of long-term security trends and the remediation status of legacy systems that remain in production environments. Visitors to this resource can track vendor-specific advisories to stay informed about patches and updates released by major Linux distribution maintainers. You can also use the page to understand the characteristics and impact of specific weakness classes as they manifest in the Linux environment. Additionally, the interface supports looking up a specific product’s vulnerability history, enabling security professionals to assess risk exposure and prioritize mitigation efforts for critical infrastructure components. The data is organized to facilitate efficient searching and correlation between weakness identifiers and affected software versions, ensuring that administrators and developers have access to comprehensive security insights necessary for maintaining system integrity and compliance.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2026-80659 mmc: vub300: defer reset until cmd_mutex is unlocked - - 2026-08-28
CVE-2026-80658 drm/rockchip: dw_dp: Fix null-ptr-deref in dw_dp_remove() - - 2026-08-28
CVE-2026-80656 hfsplus: Add a sanity check for btree node size 7.8 High 2026-08-28
CVE-2026-80657 accel/amdxdna: Guard management mailbox channel cleanup against NULL pointer - - 2026-08-28
CVE-2026-80655 soc: xilinx: Fix race condition in event registration - - 2026-08-28
CVE-2026-80653 scsi: hisi_sas: Add slave_destroy interface for v3 hw 8.4 High 2026-08-28
CVE-2026-80654 soc: xilinx: Shutdown and free rx mailbox channel - - 2026-08-28
CVE-2026-80652 crypto: ccp - Treat zero-length cert chain as query for blob lengths - - 2026-08-28
CVE-2026-80650 media: atomisp: gc2235: fix UAF and memory leak - - 2026-08-28
CVE-2026-80651 crypto: ccp/sev-dev-tsm - bail out early when pdev->bus is NULL - - 2026-08-28
CVE-2026-80649 firmware: arm_scmi: Fix OOB in scmi_power_name_get() 7.8 High 2026-08-28
CVE-2026-80647 RDMA/hns: Fix warning in poll cq direct mode - - 2026-08-28
CVE-2026-80648 pinctrl: spacemit: fix NULL check in spacemit_pin_set_config - - 2026-08-28
CVE-2026-80645 rapidio/tsi721: prevent a bad dereference in tsi721_db_dpc() 8.1 High 2026-08-28
CVE-2026-80646 ipv6: guard against possible NULL deref in __in6_dev_stats_get() 7.5 High 2026-08-28
CVE-2026-80644 ocfs2: don't BUG_ON an invalid journal dinode - - 2026-08-28
CVE-2026-80642 liveupdate: Reference count incoming FLB data - - 2026-08-28
CVE-2026-80643 EDAC/igen6: Fix call trace due to missing release() - - 2026-08-28
CVE-2026-80641 wifi: wlcore: enable the right set of ciphers - - 2026-08-28
CVE-2026-80640 cxl/fwctl: Fix __fortify_panic - - 2026-08-28
CVE-2026-80639 cxl/test: Fix __fortify_panic - - 2026-08-28
CVE-2026-80637 netfilter: synproxy: fix unaligned memory access in timestamp adjustment 7.5 High 2026-08-28
CVE-2026-80638 ocfs2: fix out-of-bounds write in ocfs2_remove_refcount_extent 8.8 High 2026-08-28
CVE-2026-80635 wifi: wcn36xx: fix OOB read from short trigger BA firmware response 8.8 High 2026-08-28
CVE-2026-80636 netfilter: conntrack: revert ct extension genid infrastructure - - 2026-08-28
CVE-2026-80634 netfilter: flowtable: avoid num_encaps underflow on bridge VLAN untag 9.8 Critical 2026-08-28
CVE-2026-80633 iommufd: Take dma_resv lock before dma_buf_unpin() in release path 8.8 High 2026-08-28
CVE-2026-80632 wifi: mt76: mt7996: Fix NULL pointer dereference in mt7996_init_tx_queues() - - 2026-08-28
CVE-2026-80631 btrfs: lzo: reject compressed segment that overflows the compressed input 7.5 High 2026-08-28
CVE-2026-80630 net/sched: sch_fq_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen 9.8 Critical 2026-08-28

All 17853 known CVE vulnerabilities affecting Linux with full Chinese analysis, references, and POCs where available.