Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17547

Browse all 17547 CVE security advisories affecting Linux. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Linux serves as the foundational operating system for the majority of internet servers, cloud infrastructure, and embedded devices, powering critical global digital services. Its open-source nature and widespread deployment have historically exposed it to diverse vulnerability classes, including remote code execution, buffer overflows, and privilege escalation flaws within kernel modules and system utilities. While the project maintains rigorous security practices, the sheer volume of code contributes to a high cumulative count of recorded Common Vulnerabilities and Exposures, currently exceeding eleven thousand. Notable incidents often stem from misconfigurations or unpatched legacy components rather than fundamental architectural failures. The community responds rapidly to disclosed threats, yet the extensive attack surface necessitates continuous vigilance. Administrators must prioritize regular updates and strict access controls to mitigate risks associated with this ubiquitous platform, ensuring stability across both enterprise and consumer environments.

CVE ID Title CVSS Severity Published
CVE-2026-72499 RDMA/bnxt_re: Free CQ toggle page after firmware teardown — Linux 8.8 High 2026-08-15
CVE-2026-72498 RDMA/bnxt_re: Avoid displaying the kernel pointer — Linux - - 2026-08-15
CVE-2026-72496 RDMA/bnxt_re: Proper rollback if the ioremap fails — Linux 9.2 Critical 2026-08-15
CVE-2026-72497 RDMA/bnxt_re: Add a max slot check for SQ — Linux 8.8 High 2026-08-15
CVE-2026-72495 RDMA/bnxt_re: Avoid repeated requests to allocate WC pages — Linux 9.3 Critical 2026-08-15
CVE-2026-72493 net: serialize netif_running() check in enqueue_to_backlog() — Linux 9.9 Critical 2026-08-15
CVE-2026-72494 RDMA/irdma: Replace waitqueue and flag with completion — Linux 9.8 Critical 2026-08-15
CVE-2026-72492 ksmbd: fix use-after-free in same_client_has_lease() — Linux 8.8 High 2026-08-15
CVE-2026-72490 staging: rtl8723bs: fix stainfo check in rtw_aes_decrypt — Linux - - 2026-08-15
CVE-2026-72491 net/9p: fix race condition on rdma->state in trans_rdma.c — Linux 9.8 Critical 2026-08-15
CVE-2026-72489 staging: nvec: fix use-after-free in nvec_rx_completed() — Linux 8.4 High 2026-08-15
CVE-2026-72488 soundwire: fix bug in sdw_add_element_group_count found by syzkaller — Linux 7.8 High 2026-08-15
CVE-2026-72486 mailbox: mtk-adsp: fix UAF during device teardown — Linux - - 2026-08-15
CVE-2026-72487 PCI: Check ROM header and data structure addr before accessing — Linux 7.7 High 2026-08-15
CVE-2026-72485 coresight: platform: defer connection counter increment until alloc succeeds — Linux 7.8 High 2026-08-15
CVE-2026-72484 staging: most: video: avoid double free on video register failure — Linux - - 2026-08-15
CVE-2026-72483 usb: host: max3421: Fix shift-out-of-bounds in max3421_hub_control() — Linux 7.8 High 2026-08-15
CVE-2026-72481 iio: magnetometer: ak8975: fix potential kernel stack memory leak — Linux - - 2026-08-15
CVE-2026-72482 gpib: fix double decrement of descriptor_busy in command_ioctl() — Linux 7.8 High 2026-08-15
CVE-2026-72480 iio: adc: xilinx-ams: fix out-of-bounds channel lookup in event handling — Linux 7.8 High 2026-08-15
CVE-2026-72478 fs/ntfs3: add bounds check to run_get_highest_vcn() — Linux 8.4 High 2026-08-15
CVE-2026-72479 iio: accel: mma8452: handle I2C read error(s) in mma8452_read() — Linux - - 2026-08-15
CVE-2026-72477 fs/ntfs3: call _ntfs_bad_inode() when failing to rename — Linux 9.8 Critical 2026-08-15
CVE-2026-72475 dmaengine: dma-axi-dmac: Properly free struct axi_dmac_desc — Linux - - 2026-08-15
CVE-2026-72476 dmaengine: Fix possible use after free — Linux 7.8 High 2026-08-15
CVE-2026-72474 dmaengine: dma-axi-dmac: use DMA pool to manange DMA descriptor — Linux - - 2026-08-15
CVE-2026-72472 nfs: use nfsi->rwsem to protect traversal of the file lock list — Linux 9.8 Critical 2026-08-15
CVE-2026-72473 xprtrdma: Decouple req recycling from RPC completion — Linux 9.8 Critical 2026-08-15
CVE-2026-72471 fs/ntfs3: prevent potential lcn remains uninitialized — Linux 7.1 High 2026-08-15
CVE-2026-72469 xprtrdma: Fix ep kref imbalance on ADDR_CHANGE — Linux 8.8 High 2026-08-15

This page lists every published CVE security advisory associated with Linux. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.