Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17979

Browse all 17979 CVE security advisories affecting Linux. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Linux serves as the foundational operating system for the majority of internet servers, cloud infrastructure, and embedded devices, powering critical global digital services. Its open-source nature and widespread deployment have historically exposed it to diverse vulnerability classes, including remote code execution, buffer overflows, and privilege escalation flaws within kernel modules and system utilities. While the project maintains rigorous security practices, the sheer volume of code contributes to a high cumulative count of recorded Common Vulnerabilities and Exposures, currently exceeding eleven thousand. Notable incidents often stem from misconfigurations or unpatched legacy components rather than fundamental architectural failures. The community responds rapidly to disclosed threats, yet the extensive attack surface necessitates continuous vigilance. Administrators must prioritize regular updates and strict access controls to mitigate risks associated with this ubiquitous platform, ensuring stability across both enterprise and consumer environments.

CVE ID Title CVSS Severity Published
CVE-2026-74474 vxlan: use pskb_network_may_pull() for transmit path header pulls — Linux 9.8 Critical 2026-08-15
CVE-2026-74473 vxlan: use pskb_network_may_pull() in route_shortcircuit() — Linux 9.8 Critical 2026-08-15
CVE-2026-74472 ublk: reset kernel-owned dev_info fields in ublk_ctrl_add_dev() — Linux - - 2026-08-15
CVE-2026-74471 tracing: Check return value of __register_event() in trace_module_add_events() — Linux 7.8 High 2026-08-15
CVE-2026-74470 scsi: scsi_debug: Fix REPORT ZONES alloc_len underflow OOB write — Linux 7.8 High 2026-08-15
CVE-2026-74469 sctp: prevent peer transport count overflow — Linux 8.8 High 2026-08-15
CVE-2026-74468 gpio: pch: use raw_spinlock_t for the register lock — Linux - - 2026-08-15
CVE-2026-74467 s390/qeth: Check CAP_NET_ADMIN for private ioctls — Linux 7.8 High 2026-08-15
CVE-2026-74466 s390/zcrypt: Close speculative mem read possibility — Linux - - 2026-08-15
CVE-2026-74464 net: openvswitch: fix skb leak on flow key update failure during ct — Linux - - 2026-08-15
CVE-2026-74465 net: openvswitch: fix potential UAF on meter attach failure — Linux 7.8 High 2026-08-15
CVE-2026-74463 i2c: jz4780: Cache host clock rate at probe to prevent CCF prepare_lock deadlock — Linux - - 2026-08-15
CVE-2026-74462 i2c: imx: mark I2C adapter when hardware is powered down — Linux - - 2026-08-15
CVE-2026-74461 i2c: imx: Cancel hrtimer before clearing slave pointer — Linux 8.4 High 2026-08-15
CVE-2026-74459 can: etas_es58x: es58x_read_bulk_callback(): fix RX buffer leak on URB resubmit failure — Linux - - 2026-08-15
CVE-2026-74460 can: ems_usb: validate CPC message lengths — Linux - - 2026-08-15
CVE-2026-74458 can: kvaser_usb_leaf: kvaser_usb_leaf_wait_cmd(): validate received command extents — Linux - - 2026-08-15
CVE-2026-74456 can: peak_usb: peak_usb_start(): fix double free of transfer buffer on URB submit error — Linux 7.8 High 2026-08-15
CVE-2026-74457 can: peak_usb: add bounds check for USB channel index — Linux - - 2026-08-15
CVE-2026-74454 drm/vc4: Supply the overflow slot size in BPOS, not the whole bin BO size — Linux 7.8 High 2026-08-15
CVE-2026-74455 can: peak_usb: validate uCAN receive record lengths — Linux - - 2026-08-15
CVE-2026-74453 drm/vc4: Zero the tile state data array before each BIN job — Linux 7.8 High 2026-08-15
CVE-2026-74451 drm/panthor: validate firmware interface structure sizes — Linux 7.8 High 2026-08-15
CVE-2026-74452 drm/panthor: reject firmware sections with oversized data — Linux 7.8 High 2026-08-15
CVE-2026-74450 drm/amd/pm: fix pptable use-after-free — Linux 7.8 High 2026-08-15
CVE-2026-74449 drm/amd/display: Fix divide-by-zero in calculate_mcache_setting on zero viewport — Linux 7.8 High 2026-08-15
CVE-2026-74448 drm/amdkfd: fix QID bit leak in pqm_create_queue() — Linux - - 2026-08-15
CVE-2026-74447 drm/amdkfd: fix uint32_t overflow in EOP ring buffer size alignment — Linux 7.8 High 2026-08-15
CVE-2026-74446 drm/amdkfd: hold event_mutex while checkpointing CRIU events — Linux 7.8 High 2026-08-15
CVE-2026-74445 drm/vmwgfx: reject DX_BIND_QUERY without a DX context — Linux - - 2026-08-15

This page lists every published CVE security advisory associated with Linux. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.