Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17979

Browse all 17979 CVE security advisories affecting Linux. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Linux serves as the foundational operating system for the majority of internet servers, cloud infrastructure, and embedded devices, powering critical global digital services. Its open-source nature and widespread deployment have historically exposed it to diverse vulnerability classes, including remote code execution, buffer overflows, and privilege escalation flaws within kernel modules and system utilities. While the project maintains rigorous security practices, the sheer volume of code contributes to a high cumulative count of recorded Common Vulnerabilities and Exposures, currently exceeding eleven thousand. Notable incidents often stem from misconfigurations or unpatched legacy components rather than fundamental architectural failures. The community responds rapidly to disclosed threats, yet the extensive attack surface necessitates continuous vigilance. Administrators must prioritize regular updates and strict access controls to mitigate risks associated with this ubiquitous platform, ensuring stability across both enterprise and consumer environments.

CVE ID Title CVSS Severity Published
CVE-2026-72029 net: wwan: iosm: bound device offsets in the MUX downlink decoder — Linux 8.8 High 2026-08-15
CVE-2026-72028 riscv: probes: save original sp in rethook trampoline — Linux - - 2026-08-15
CVE-2026-72026 irqchip/irq-riscv-imsic-early: Fix fwnode leak on state setup failure — Linux - - 2026-08-15
CVE-2026-72027 mm/compaction: handle free_pages_prepare() properly in compaction_free() — Linux 7.8 High 2026-08-15
CVE-2026-72025 s390/monwriter: Reject buffer reuse with different data length — Linux - - 2026-08-15
CVE-2026-72023 octeontx2-pf: fix SQB pointer leak on init failure — Linux - - 2026-08-15
CVE-2026-72024 mac802154: remove interfaces with RCU list deletion — Linux 7.8 High 2026-08-15
CVE-2026-72022 llc: fix SAP refcount leak in llc_ui_autobind() — Linux - - 2026-08-15
CVE-2026-72020 ipvs: reset full ip_vs_seq structs in ip_vs_conn_new — Linux 9.8 Critical 2026-08-15
CVE-2026-72021 ipvs: use parsed transport offset in SCTP state lookup — Linux 8.2 High 2026-08-15
CVE-2026-72019 macsec: don't read an unset MAC header in macsec_encrypt() — Linux 7.3 High 2026-08-15
CVE-2026-72018 dibs: loopback: validate offset and size in move_data() — Linux 7.8 High 2026-08-15
CVE-2026-72017 net: macb: drop in-flight Tx SKBs on close — Linux - - 2026-08-15
CVE-2026-72016 cpu/hotplug: Fix NULL kobject warning in cpuhp_smt_enable() — Linux - - 2026-08-15
CVE-2026-72015 fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list — Linux - - 2026-08-15
CVE-2026-72014 drbd: reject data replies with an out-of-range payload size — Linux 9.8 Critical 2026-08-15
CVE-2026-72013 riscv: Prevent NULL pointer dereference in machine_kexec_prepare() — Linux - - 2026-08-15
CVE-2026-72012 tracing/osnoise: Call synchronize_rcu() when unregistering — Linux 7.8 High 2026-08-15
CVE-2026-72011 s390/diag: Add missing array_index_nospec() call to memtop_get_page_count() — Linux - - 2026-08-15
CVE-2026-72010 cgroup/cpuset: rebind mm mempolicy to effective_mems, not mems_allowed — Linux - - 2026-08-15
CVE-2026-72009 pmdomain: imx93-blk-ctrl: Extract PHY as shared domain for DSI/CSI — Linux 7.8 High 2026-08-15
CVE-2026-72008 pmdomain: mediatek: Fix possible nullptr KP in HWV cleanup/on-check — Linux - - 2026-08-15
CVE-2026-72007 pmdomain: imx: Fix i.MX8MP VC8000E power up sequence — Linux - - 2026-08-15
CVE-2026-72006 net/mlx5: free mlx5_st_idx_data on final dealloc — Linux - - 2026-08-15
CVE-2026-72005 wifi: rt2x00: avoid full teardown before work setup in probe — Linux 7.8 High 2026-08-15
CVE-2026-72004 wifi: mac80211: fix memory leak in ieee80211_register_hw() — Linux - - 2026-08-15
CVE-2026-72003 wifi: brcmfmac: cyw: fix heap overflow on a short auth frame — Linux 8.8 High 2026-08-15
CVE-2026-68479 Bluetooth: btrtl: validate firmware patch bounds — Linux 7.8 High 2026-08-15
CVE-2026-68478 memstick: ms_block: reject a card that reports too many blocks — Linux - - 2026-08-15
CVE-2026-68477 ipvs: fix more places with wrong ipv6 transport offsets — Linux 9.8 Critical 2026-08-15

This page lists every published CVE security advisory associated with Linux. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.