Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17853

All 17853 CVE vulnerabilities found in Linux, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumeration (CWE) vulnerabilities affecting the Linux operating system product. It aggregates security data related to weaknesses within the kernel, distributions, and associated utilities provided by various Linux vendors and maintainers. The collection encompasses a wide range of vulnerability types, including memory corruption issues, privilege escalation flaws, information leaks, and denial-of-service conditions. The database covers historical records spanning several decades, reflecting the evolution of the Linux ecosystem from its early releases to modern stable and development branches. This extensive time range allows for the analysis of long-term security trends and the remediation status of legacy systems that remain in production environments. Visitors to this resource can track vendor-specific advisories to stay informed about patches and updates released by major Linux distribution maintainers. You can also use the page to understand the characteristics and impact of specific weakness classes as they manifest in the Linux environment. Additionally, the interface supports looking up a specific product’s vulnerability history, enabling security professionals to assess risk exposure and prioritize mitigation efforts for critical infrastructure components. The data is organized to facilitate efficient searching and correlation between weakness identifiers and affected software versions, ensuring that administrators and developers have access to comprehensive security insights necessary for maintaining system integrity and compliance.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2026-80600 batman-adv: dat: acquire ARP hw source only after skb realloc 9.8 Critical 2026-08-28
CVE-2026-80598 ntfs3: fix out-of-bounds read in decompress_lznt 7.8 High 2026-08-28
CVE-2026-80596 Input: ims-pcu - only expose sysfs attributes on control interface 8.4 High 2026-08-28
CVE-2026-80597 mtd: maps: vmu-flash: fix NULL pointer dereference in initialization - - 2026-08-28
CVE-2026-80595 Input: ims-pcu - add response length checks - - 2026-08-28
CVE-2026-80594 Input: ims-pcu - fix potential infinite loop in CDC union descriptor parsing - - 2026-08-28
CVE-2026-80593 hwmon: (asus_atk0110) Check package count before accessing element 8.4 High 2026-08-28
CVE-2026-80592 samples/damon/mtier: fail early if address range parameters are invalid - - 2026-08-28
CVE-2026-80591 f2fs: fix listxattr handling of corrupted xattr entries 7.8 High 2026-08-28
CVE-2026-80590 inet: frags: strip GSO state from fragments before reassembly 8.6 High 2026-08-28
CVE-2026-80589 block: stop the timeout timer when releasing a never added disk 9.8 Critical 2026-08-26
CVE-2026-80588 mptcp: reclaim forward-allocated memory on RX path errors 7.5 High 2026-08-26
CVE-2026-80587 mptcp: avoid combining some incoming suboptions 9.8 Critical 2026-08-26
CVE-2026-80586 mptcp: options: reset DSS fields in case of unexpected size 9.8 Critical 2026-08-26
CVE-2026-80585 mptcp: fastopen: only mark MPTFO subflows with SYN data 9.4 Critical 2026-08-26
CVE-2026-80584 s390/qeth: validate user buffer length in SNMP and ARP query ioctls 8.4 High 2026-08-26
CVE-2026-80583 ASoC: codecs: lpass-tx-macro: Fix enum kcontrol accesses 7.8 High 2026-08-26
CVE-2026-80581 ASoC: SOF: ipc4-pcm: Continue the pipeline trigger in case of IPC timeout - - 2026-08-26
CVE-2026-80582 drm/shmem_helper: Check VMA boundaries for PMD mappings 7.8 High 2026-08-26
CVE-2026-80580 fbdev: bound mode sysfs output to the sysfs buffer 7.8 High 2026-08-26
CVE-2026-80579 fbdev: clear fb_info->mode before deleting a videomode 7.8 High 2026-08-26
CVE-2026-80578 fbdev: core: Fix pointer desynchronization in fb_io_read() 7.3 High 2026-08-26
CVE-2026-80576 drm/amdgpu: reject oversized IBs with per-ring packet limits 8.8 High 2026-08-26
CVE-2026-80577 drm/panthor: skip zero-sized firmware sections - - 2026-08-26
CVE-2026-80575 Input: cs40l50-vibra - validate custom data from user space 7.8 High 2026-08-26
CVE-2026-80574 Input: focaltech - fix array out-of-bounds in focaltech_process_rel_packet 8.4 High 2026-08-26
CVE-2026-80573 Input: iforce - validate input packet lengths - - 2026-08-26
CVE-2026-80572 Input: byd - synchronize timer deletion before freeing private data 7.8 High 2026-08-26
CVE-2026-80571 powerpc/pseries: papr-phy-attest - validate cmd.length, plug mem leak - - 2026-08-26
CVE-2026-80570 Input: synaptics-rmi4 - zero report size on F54 work error 7.8 High 2026-08-26

All 17853 known CVE vulnerabilities affecting Linux with full Chinese analysis, references, and POCs where available.