Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17979

Browse all 17979 CVE security advisories affecting Linux. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Linux serves as the foundational operating system for the majority of internet servers, cloud infrastructure, and embedded devices, powering critical global digital services. Its open-source nature and widespread deployment have historically exposed it to diverse vulnerability classes, including remote code execution, buffer overflows, and privilege escalation flaws within kernel modules and system utilities. While the project maintains rigorous security practices, the sheer volume of code contributes to a high cumulative count of recorded Common Vulnerabilities and Exposures, currently exceeding eleven thousand. Notable incidents often stem from misconfigurations or unpatched legacy components rather than fundamental architectural failures. The community responds rapidly to disclosed threats, yet the extensive attack surface necessitates continuous vigilance. Administrators must prioritize regular updates and strict access controls to mitigate risks associated with this ubiquitous platform, ensuring stability across both enterprise and consumer environments.

CVE ID Title CVSS Severity Published
CVE-2026-68176 tracing: Fix mmiotrace possible NULL dereferencing of hiter->dev — Linux - - 2026-08-10
CVE-2026-68175 tracing: Fix resource leak on mmiotrace trace_pipe close — Linux - - 2026-08-10
CVE-2026-68174 tracing: Fix union collision of module and refcnt for dynamic events — Linux - - 2026-08-10
CVE-2026-68173 ublk: wait on ublk_dev_ready() instead of ub->completion — Linux 7.1 High 2026-08-10
CVE-2026-68172 arm64: make huge_ptep_get handled unaligned addresses — Linux 7.1 High 2026-08-10
CVE-2026-68170 mptcp: fix stale skb->sk reference on subflow close — Linux 9.8 Critical 2026-08-10
CVE-2026-68169 mptcp: pm: userspace: fix use-after-free in get_local_id — Linux - - 2026-08-10
CVE-2026-68168 afs: Fix afs_edit_dir_remove() to get, not find, block 0 — Linux - - 2026-08-10
CVE-2026-68167 btrfs: do not try compression for data reloc inodes — Linux - - 2026-08-10
CVE-2026-68166 userfaultfd: prevent registration of special VMAs — Linux - - 2026-08-10
CVE-2026-68165 mm/damon/core: validate ranges in damon_set_regions() — Linux - - 2026-08-10
CVE-2026-68164 mm/damon/core: disallow overlapping input ranges for damon_set_regions() — Linux - - 2026-08-10
CVE-2026-68163 mm/page_vma_mapped: fix device-private PMD handling — Linux 7.8 High 2026-08-10
CVE-2026-68162 sctp: avoid auth_enable sysctl UAF during netns teardown — Linux 7.8 High 2026-08-10
CVE-2026-68161 sctp: close UDP tunnel sockets during netns teardown — Linux 9.8 Critical 2026-08-10
CVE-2026-68160 ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps() — Linux 9.8 Critical 2026-08-10
CVE-2026-68159 libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE — Linux 9.8 Critical 2026-08-10
CVE-2026-68158 libceph: Fix multiplication overflow in decode_new_up_state_weight() — Linux 9.8 Critical 2026-08-10
CVE-2026-68157 libceph: guard missing CRUSH type name lookup — Linux 7.5 High 2026-08-10
CVE-2026-68156 libceph: refresh auth->authorizer_buf{,_len} after authorizer update — Linux 9.8 Critical 2026-08-10
CVE-2026-68155 libceph: Reject monmaps advertising zero monitors — Linux 7.5 High 2026-08-10
CVE-2026-68154 libceph: reject zero bucket types in crush_decode — Linux 9.8 Critical 2026-08-10
CVE-2026-68153 libceph: remove debugfs files before client teardown — Linux 7.8 High 2026-08-10
CVE-2026-68152 amt: fix use-after-free in AMT delayed works — Linux 7.8 High 2026-08-10
CVE-2026-68151 binfmt_elf_fdpic: only honour the first PT_INTERP — Linux - - 2026-08-10
CVE-2026-68150 fs/super: fix emergency thaw double-unlock of s_umount — Linux - - 2026-08-10
CVE-2026-68149 fs: preserve ACL_DONT_CACHE state in forget_cached_acl() — Linux 8.4 High 2026-08-10
CVE-2026-68148 fscrypt: Add missing superblock check in find_or_insert_direct_key() — Linux 7.8 High 2026-08-10
CVE-2026-68147 fscrypt: Avoid dynamic allocation in fscrypt_get_devices() — Linux 7.8 High 2026-08-10
CVE-2026-68146 ftrace: Add global mutex to serialize trace_parser access — Linux - - 2026-08-10

This page lists every published CVE security advisory associated with Linux. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.