Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17980

Browse all 17980 CVE security advisories affecting Linux. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Linux serves as the foundational operating system for the majority of internet servers, cloud infrastructure, and embedded devices, powering critical global digital services. Its open-source nature and widespread deployment have historically exposed it to diverse vulnerability classes, including remote code execution, buffer overflows, and privilege escalation flaws within kernel modules and system utilities. While the project maintains rigorous security practices, the sheer volume of code contributes to a high cumulative count of recorded Common Vulnerabilities and Exposures, currently exceeding eleven thousand. Notable incidents often stem from misconfigurations or unpatched legacy components rather than fundamental architectural failures. The community responds rapidly to disclosed threats, yet the extensive attack surface necessitates continuous vigilance. Administrators must prioritize regular updates and strict access controls to mitigate risks associated with this ubiquitous platform, ensuring stability across both enterprise and consumer environments.

CVE ID Title CVSS Severity Published
CVE-2026-31778 ALSA: caiaq: fix stack out-of-bounds read in init_card — Linux 5.5 - 2026-05-01
CVE-2026-31777 ALSA: ctxfi: Check the error for index mapping — Linux 7.8 - 2026-05-01
CVE-2026-31776 ALSA: ctxfi: Fix missing SPDIFI1 index handling — Linux 7.8 - 2026-05-01
CVE-2026-31775 ALSA: ctxfi: Don't enumerate SPDIF1 at DAIO initialization — Linux 5.5 - 2026-05-01
CVE-2026-31774 io_uring/net: fix slab-out-of-bounds read in io_bundle_nbufs() — Linux 7.1 High 2026-05-01
CVE-2026-31773 Bluetooth: SMP: derive legacy responder STK authentication from MITM state — Linux 8.8 High 2026-05-01
CVE-2026-31772 Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync — Linux 7.8 High 2026-05-01
CVE-2026-31771 Bluetooth: hci_event: move wake reason storage into validated event handlers — Linux 8.1 High 2026-05-01
CVE-2026-31770 hwmon: (occ) Fix division by zero in occ_show_power_1() — Linux 5.5 - 2026-05-01
CVE-2026-31769 gpib: fix use-after-free in IO ioctl handlers — Linux 7.8 High 2026-05-01
CVE-2026-31768 iio: adc: ti-adc161s626: use DMA-safe memory for spi_read() — Linux 7.8 High 2026-05-01
CVE-2026-31766 drm/amdgpu: validate doorbell_offset in user queue creation — Linux 7.1 High 2026-05-01
CVE-2026-31767 drm/i915/dsi: Don't do DSC horizontal timing adjustments in command mode — Linux 5.5 - 2026-05-01
CVE-2026-31765 drm/amdgpu: Change AMDGPU_VA_RESERVED_TRAP_SIZE to 64KB — Linux 7.1 - 2026-05-01
CVE-2026-31764 iio: imu: st_lsm6dsx: Set buffer sampling frequency for accelerometer only — Linux 5.5 - 2026-05-01
CVE-2026-31763 iio: gyro: mpu3050: Fix incorrect free_irq() variable — Linux 7.8 - 2026-05-01
CVE-2026-31762 iio: gyro: mpu3050: Fix irq resource leak — Linux 5.5 - 2026-05-01
CVE-2026-31761 iio: gyro: mpu3050: Move iio_device_register() to correct location — Linux 7.8 High 2026-05-01
CVE-2026-31760 gpib: lpvo_usb: fix memory leak on disconnect — Linux 5.5 - 2026-05-01
CVE-2026-31759 usb: ulpi: fix double free in ulpi_register_interface() error path — Linux 7.1 - 2026-05-01
CVE-2026-31757 usb: misc: usbio: Fix URB memory leak on submit failure — Linux 5.5 - 2026-05-01
CVE-2026-31758 usb: usbtmc: Flush anchored URBs in usbtmc_release — Linux 7.8 High 2026-05-01
CVE-2026-31756 usb: dwc2: gadget: Fix spin_lock/unlock mismatch in dwc2_hsotg_udc_stop() — Linux 7.1 - 2026-05-01
CVE-2026-31754 usb: cdns3: gadget: fix state inconsistency on gadget init failure — Linux 7.1 - 2026-05-01
CVE-2026-31755 usb: cdns3: gadget: fix NULL pointer dereference in ep_queue — Linux 5.5 - 2026-05-01
CVE-2026-31753 auxdisplay: line-display: fix NULL dereference in linedisp_release — Linux 5.0 - 2026-05-01
CVE-2026-31751 comedi: dt2815: add hardware detection to prevent crash — Linux 6.3 - 2026-05-01
CVE-2026-31752 bridge: br_nd_send: validate ND option lengths — Linux 9.1 - 2026-05-01
CVE-2026-31750 comedi: runflags cannot determine whether to reclaim chanlist — Linux 7.1 - 2026-05-01
CVE-2026-31749 comedi: ni_atmio16d: Fix invalid clean-up after failed attach — Linux 5.5 - 2026-05-01

This page lists every published CVE security advisory associated with Linux. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.