Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17979

Browse all 17979 CVE security advisories affecting Linux. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Linux serves as the foundational operating system for the majority of internet servers, cloud infrastructure, and embedded devices, powering critical global digital services. Its open-source nature and widespread deployment have historically exposed it to diverse vulnerability classes, including remote code execution, buffer overflows, and privilege escalation flaws within kernel modules and system utilities. While the project maintains rigorous security practices, the sheer volume of code contributes to a high cumulative count of recorded Common Vulnerabilities and Exposures, currently exceeding eleven thousand. Notable incidents often stem from misconfigurations or unpatched legacy components rather than fundamental architectural failures. The community responds rapidly to disclosed threats, yet the extensive attack surface necessitates continuous vigilance. Administrators must prioritize regular updates and strict access controls to mitigate risks associated with this ubiquitous platform, ensuring stability across both enterprise and consumer environments.

CVE ID Title CVSS Severity Published
CVE-2026-68145 iomap: fix out-of-bounds bitmap_set() with zero-length range — Linux 7.8 High 2026-08-10
CVE-2026-68144 phonet: pep: fix use-after-free in pep_get_sb() — Linux 9.8 Critical 2026-08-10
CVE-2026-68143 net: slip: serialize receive against buffer reallocation — Linux 7.8 High 2026-08-10
CVE-2026-68142 geneve: require CAP_NET_ADMIN in the device netns for changelink — Linux 8.8 High 2026-08-10
CVE-2026-68141 net/af_iucv: fix NULL deref in afiucv_hs_callback_syn() — Linux 7.5 High 2026-08-10
CVE-2026-68140 net/iucv: fix use-after-free of a severed iucv_path — Linux 8.8 High 2026-08-10
CVE-2026-68139 net/mlx5e: Use sender devcom for MPV master-up — Linux - - 2026-08-10
CVE-2026-68138 net/sched: serialize qdisc_rtab_list against concurrent get/put — Linux 7.8 High 2026-08-10
CVE-2026-68137 net/x25: fix use-after-free in x25_kill_by_neigh() — Linux 9.8 Critical 2026-08-10
CVE-2026-68136 net: gro: fix double aggregation of flush-marked skbs — Linux 9.8 Critical 2026-08-10
CVE-2026-68135 net: hip04: fix RX buffer leak on build_skb failure — Linux - - 2026-08-10
CVE-2026-68134 ptp: ptp_s390: Add missing facility check — Linux 7.3 High 2026-08-10
CVE-2026-68133 ice: fix PTP Call Trace during PTP release — Linux - - 2026-08-10
CVE-2026-68132 super: fix emergency thaw deadlock on frozen block devices — Linux - - 2026-08-10
CVE-2026-68131 rbd: Reset positive result codes to zero in object map update path — Linux 7.5 High 2026-08-10
CVE-2026-68130 ksmbd: defer destroy_previous_session() until after NTLM authentication — Linux - - 2026-08-10
CVE-2026-68129 gve: fix Rx queue stall on alloc failure — Linux 7.5 High 2026-08-10
CVE-2026-68128 ice: reject out-of-range ptype in ice_parser_profile_init — Linux 8.8 High 2026-08-10
CVE-2026-68127 ila: reload IPv6 header after pskb_may_pull in checksum adjust — Linux 9.8 Critical 2026-08-10
CVE-2026-68126 mac802154: hold an interface reference across the scan worker — Linux - - 2026-08-10
CVE-2026-68125 mac802154: llsec: reject frames shorter than the authentication tag — Linux 8.8 High 2026-08-10
CVE-2026-68124 mctp: serial: handle zero-length frames to prevent rx buffer overflow — Linux 9.6 Critical 2026-08-10
CVE-2026-68123 openvswitch: fix GSO userspace truncation underflow — Linux 9.8 Critical 2026-08-10
CVE-2026-68122 ovpn: fix peer refcount leak in TCP error paths — Linux - - 2026-08-10
CVE-2026-68121 pppoe: reload header pointer after dev_hard_header() — Linux 7.8 High 2026-08-10
CVE-2026-68120 rtase: Workaround for TX hang caused by hardware packet parsing — Linux 7.5 High 2026-08-10
CVE-2026-68119 tcp: initialize standalone TCP-AO response padding — Linux 7.5 High 2026-08-10
CVE-2026-68118 tcp: challenge ACK for non-exact RST in SYN-RECEIVED — Linux 8.2 High 2026-08-10
CVE-2026-68117 tipc: clear sock->sk on the failed-insert path in tipc_sk_create() — Linux 9.8 Critical 2026-08-10
CVE-2026-68116 vxlan: mdb: Fix source list corruption on a failed replace — Linux 7.9 High 2026-08-10

This page lists every published CVE security advisory associated with Linux. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.