Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17979

Browse all 17979 CVE security advisories affecting Linux. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Linux serves as the foundational operating system for the majority of internet servers, cloud infrastructure, and embedded devices, powering critical global digital services. Its open-source nature and widespread deployment have historically exposed it to diverse vulnerability classes, including remote code execution, buffer overflows, and privilege escalation flaws within kernel modules and system utilities. While the project maintains rigorous security practices, the sheer volume of code contributes to a high cumulative count of recorded Common Vulnerabilities and Exposures, currently exceeding eleven thousand. Notable incidents often stem from misconfigurations or unpatched legacy components rather than fundamental architectural failures. The community responds rapidly to disclosed threats, yet the extensive attack surface necessitates continuous vigilance. Administrators must prioritize regular updates and strict access controls to mitigate risks associated with this ubiquitous platform, ensuring stability across both enterprise and consumer environments.

CVE ID Title CVSS Severity Published
CVE-2026-68206 media: v4l2-ctrls: validate HEVC active reference counts — Linux 7.8 High 2026-08-10
CVE-2026-68205 media: v4l2-fwnode: Fix subdev owner overwritten in v4l2_async_register_subdev_sensor() — Linux - - 2026-08-10
CVE-2026-68204 media: vivid: check for vb2_is_busy() when toggling caps — Linux 7.8 High 2026-08-10
CVE-2026-68203 media: vivid: fix cleanup bugs in vivid_init() — Linux - - 2026-08-10
CVE-2026-68202 ALSA: seq: close a re-opened queue timer in the destructor — Linux 7.8 High 2026-08-10
CVE-2026-68201 ALSA: timer: drain a slave's callback before its master detaches it — Linux 7.8 High 2026-08-10
CVE-2026-68200 ALSA: timer: don't re-enter an instance callback that is still running — Linux 7.8 High 2026-08-10
CVE-2026-68199 wifi: ath6kl: fix OOB access from firmware ADDBA window size — Linux 8.8 High 2026-08-10
CVE-2026-68198 wifi: ath6kl: fix use-after-free in aggr_reset_state() — Linux 8.8 High 2026-08-10
CVE-2026-68197 wifi: mwifiex: fix NULL dereference when the AP has HT-cap but no HT-oper — Linux - - 2026-08-10
CVE-2026-68196 wifi: wilc1000: validate assoc response length before subtracting header — Linux 8.3 High 2026-08-10
CVE-2026-68195 wifi: mt76: mt7615: drop TXRX_NOTIFY on non-mmio buses — Linux - - 2026-08-10
CVE-2026-68194 wifi: mt76: mt7921: drop TXRX_NOTIFY on non-mmio buses — Linux - - 2026-08-10
CVE-2026-68193 wifi: mt76: mt7925: drop TXRX_NOTIFY on non-mmio buses — Linux - - 2026-08-10
CVE-2026-68192 wifi: brcmfmac: make release_scratchbuffers idempotent — Linux 8.8 High 2026-08-10
CVE-2026-68191 wifi: ath12k: fix NULL pointer dereference in rhash table destroy — Linux - - 2026-08-10
CVE-2026-68190 staging: rtl8723bs: fix OOB reads in rtw_get_wps_ie() — Linux - - 2026-08-10
CVE-2026-68189 Bluetooth: hci_sync: Protect UUID list traversal — Linux 7.8 High 2026-08-10
CVE-2026-68188 Bluetooth: RFCOMM: Fix session UAF in set_termios — Linux - - 2026-08-10
CVE-2026-68187 exec: fix unsigned loop counter wrap in transfer_args_to_stack() — Linux - - 2026-08-10
CVE-2026-68186 binfmt_misc: set have_execfd only once the interpreter is opened — Linux - - 2026-08-10
CVE-2026-68185 LoongArch: Move jump_label_init() before parse_early_param() — Linux - - 2026-08-10
CVE-2026-68184 cdrom: fix stack out-of-bounds read in CDROMVOLCTRL — Linux - - 2026-08-10
CVE-2026-68183 firmware: stratix10-svc: fix memory leaks and list corruption bugs — Linux - - 2026-08-10
CVE-2026-68182 comedi: comedi_parport: deal with premature interrupt — Linux - - 2026-08-10
CVE-2026-68181 mei: bus: access mei_device under device_lock on cleanup — Linux - - 2026-08-10
CVE-2026-68180 intel_th: fix MSC output device reference leak — Linux - - 2026-08-10
CVE-2026-68179 misc: nsm: only unlock nsm_dev on post-lock error paths — Linux 8.4 High 2026-08-10
CVE-2026-68178 misc: nsm: pin the module while the device is open — Linux 7.8 High 2026-08-10
CVE-2026-68177 tracing: Delay module ref count for "enable_event" trigger — Linux 7.8 High 2026-08-10

This page lists every published CVE security advisory associated with Linux. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.