Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17547

Browse all 17547 CVE security advisories affecting Linux. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Linux serves as the foundational operating system for the majority of internet servers, cloud infrastructure, and embedded devices, powering critical global digital services. Its open-source nature and widespread deployment have historically exposed it to diverse vulnerability classes, including remote code execution, buffer overflows, and privilege escalation flaws within kernel modules and system utilities. While the project maintains rigorous security practices, the sheer volume of code contributes to a high cumulative count of recorded Common Vulnerabilities and Exposures, currently exceeding eleven thousand. Notable incidents often stem from misconfigurations or unpatched legacy components rather than fundamental architectural failures. The community responds rapidly to disclosed threats, yet the extensive attack surface necessitates continuous vigilance. Administrators must prioritize regular updates and strict access controls to mitigate risks associated with this ubiquitous platform, ensuring stability across both enterprise and consumer environments.

CVE ID Title CVSS Severity Published
CVE-2026-74312 vhost/vdpa: validate virtqueue index in mmap and fault paths — Linux 7.8 High 2026-08-15
CVE-2026-74311 virtio: rtc: tear down old virtqueues before restore — Linux 7.8 High 2026-08-15
CVE-2026-74310 vhost/net: complete zerocopy ubufs only once — Linux 9.3 Critical 2026-08-15
CVE-2026-74309 vdpa/octeon_ep: fix IRQ-to-ring mapping in interrupt handler — Linux 10.0 Critical 2026-08-15
CVE-2026-74308 ext4: fix kernel BUG in ext4_write_inline_data_end — Linux - - 2026-08-15
CVE-2026-74307 ext4: validate donor file superblock early in EXT4_IOC_MOVE_EXT — Linux - - 2026-08-15
CVE-2026-74306 vfio/qat: fix f_pos race in qat_vf_resume_write() — Linux 7.8 High 2026-08-15
CVE-2026-74305 bpf: Tighten cgroup storage cookie checks for prog arrays — Linux 7.8 High 2026-08-15
CVE-2026-74304 Bluetooth: hci_qca: fix NULL pointer dereference in qca_setup() for non-serdev device — Linux - - 2026-08-15
CVE-2026-74302 Bluetooth: hci_core: Fix UAF in hci_unregister_dev() — Linux 7.8 High 2026-08-15
CVE-2026-74303 Bluetooth: hci_qca: fix NULL pointer dereference in qca_dmp_hdr() for non-serdev device — Linux - - 2026-08-15
CVE-2026-74301 Bluetooth: btmtk: fix URB leak in alloc_mtk_intr_urb error path — Linux - - 2026-08-15
CVE-2026-74300 Bluetooth: hci: validate codec capability element length — Linux 8.8 High 2026-08-15
CVE-2026-74299 RDMA/core: Fix FRMR aging push to queue error flow — Linux - - 2026-08-15
CVE-2026-74298 RDMA/core: Fix FRMR set pinned push error path — Linux - - 2026-08-15
CVE-2026-74296 RDMA/mlx5: Release the HW‑provided UAR index rather than the SW one — Linux 7.8 High 2026-08-15
CVE-2026-74297 RDMA/mlx5: Fix undefined shift of user RQ WQE size — Linux 7.8 High 2026-08-15
CVE-2026-74294 ASoC: meson: aiu: Validate written enum values — Linux 7.3 High 2026-08-15
CVE-2026-74295 ASoC: codecs: hdac_hdmi: Validate written enum value — Linux 7.1 High 2026-08-15
CVE-2026-74293 ASoC: fsl: fsl_audmix: Validate written enum values — Linux 7.8 High 2026-08-15
CVE-2026-74292 ASoC: tegra: tegra210_ahub: Validate written enum value — Linux 7.1 High 2026-08-15
CVE-2026-74291 ASoC: topology: Check PCM and DAI name strings before use — Linux - - 2026-08-15
CVE-2026-74290 net/sched: cls_flow: Dont expose folded kernel pointers — Linux - - 2026-08-15
CVE-2026-74289 ipv4: fib: Don't dump dying fib_info in fib_leaf_notify(). — Linux 7.8 High 2026-08-15
CVE-2026-74288 net: fib_rules: Don't dump dying fib_rule in fib_rules_dump(). — Linux 7.8 High 2026-08-15
CVE-2026-74287 sctp: validate embedded address parameter length — Linux 9.1 Critical 2026-08-15
CVE-2026-74286 net: pfcp: allocate per-cpu tstats for PFCP netdevs — Linux - - 2026-08-15
CVE-2026-74285 net: Stop leased rxq before uninstalling its memory provider — Linux 8.8 High 2026-08-15
CVE-2026-74284 net/sched: sch_hfsc: Don't make class passive twice — Linux - - 2026-08-15
CVE-2026-74283 tipc: require net admin for TIPCv2 netlink mutators — Linux 7.8 High 2026-08-15

This page lists every published CVE security advisory associated with Linux. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.