Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17548

Browse all 17548 CVE security advisories affecting Linux. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Linux serves as the foundational operating system for the majority of internet servers, cloud infrastructure, and embedded devices, powering critical global digital services. Its open-source nature and widespread deployment have historically exposed it to diverse vulnerability classes, including remote code execution, buffer overflows, and privilege escalation flaws within kernel modules and system utilities. While the project maintains rigorous security practices, the sheer volume of code contributes to a high cumulative count of recorded Common Vulnerabilities and Exposures, currently exceeding eleven thousand. Notable incidents often stem from misconfigurations or unpatched legacy components rather than fundamental architectural failures. The community responds rapidly to disclosed threats, yet the extensive attack surface necessitates continuous vigilance. Administrators must prioritize regular updates and strict access controls to mitigate risks associated with this ubiquitous platform, ensuring stability across both enterprise and consumer environments.

CVE ID Title CVSS Severity Published
CVE-2026-81009 io_uring/query: cap user size passed to copy_struct_to_user — Linux - - 2026-09-11
CVE-2026-81007 ipmi: ipmb: validate write message length — Linux 7.1 High 2026-09-11
CVE-2026-81008 interconnect: Fix use after free in icc_get() and of_icc_get_by_index() — Linux 7.8 High 2026-09-11
CVE-2026-81006 ipmi: Remove all sysfs files on registration failure — Linux 7.8 High 2026-09-11
CVE-2026-81004 ipmi:msghandler: Cancel work cleanly on an error — Linux 8.4 High 2026-09-11
CVE-2026-81005 ipmi: si: Fix NULL pointer dereference after failed registration — Linux - - 2026-09-11
CVE-2026-81003 net/iucv: filter frames in afiucv_hs_rcv() by ingress device — Linux 8.1 High 2026-09-11
CVE-2026-81002 xdp: fix zero-copy frame layout — Linux 9.8 Critical 2026-09-11
CVE-2026-81001 slip: fix use-after-free in sl_sync() — Linux 7.8 High 2026-09-11
CVE-2026-81000 net: tun: bound receive headroom — Linux 7.8 High 2026-09-11
CVE-2026-80999 net: dsa: realtek: use gpiod_set_value_cansleep for reset GPIO — Linux - - 2026-09-11
CVE-2026-80998 net: bnxt: ring the doorbell when SW USO exits early — Linux 7.5 High 2026-09-11
CVE-2026-80996 net: l2tp: do not propagate multicast notification errors — Linux - - 2026-09-11
CVE-2026-80997 net: ipa: fix stalled modem TX queue after runtime resume — Linux 7.5 High 2026-09-11
CVE-2026-80995 net: mctp: hold a reference to the route device in mctp_route_lookup() — Linux 7.8 High 2026-09-11
CVE-2026-80994 net: openvswitch: fix flow mask use-after-free on flow deletion — Linux 7.8 High 2026-09-11
CVE-2026-80993 net: phylink: correctly validate returned PCS in phylink_inband_caps — Linux - - 2026-09-11
CVE-2026-80992 net: ravb: avoid dereferencing an invalid PTP clock — Linux 7.8 High 2026-09-11
CVE-2026-80991 net: ravb: serialize PTP clock teardown — Linux 7.8 High 2026-09-11
CVE-2026-80990 net: thunderbolt: Release the Rx HopID that was handed out on mismatch — Linux - - 2026-09-11
CVE-2026-80989 net: thunderbolt: Mark the connection down when bringing it up fails — Linux 8.8 High 2026-09-11
CVE-2026-80987 NTB: ntb_transport: Reject oversized TX buffers — Linux 7.5 High 2026-09-11
CVE-2026-80988 NTB: ntb_transport: Fail TX enqueue when the QP link is down — Linux - - 2026-09-11
CVE-2026-80986 net/smc: bound the peer rkey counts in SMC-Rv2 LLC messages — Linux 9.8 Critical 2026-09-11
CVE-2026-80985 net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry — Linux 8.2 High 2026-09-11
CVE-2026-80984 net/smc: do not dereference an unset send buffer on the SMC-D teardown path — Linux - - 2026-09-11
CVE-2026-80983 net/smc: fix socket refcount leak in smc_switch_conns() — Linux - - 2026-09-11
CVE-2026-80982 net/smc: fix use-after-free in smc_rx_pipe_buf_release() — Linux 7.8 High 2026-09-11
CVE-2026-80981 net/smc: fix use-after-free of the LLC qentry in smc_llc_srv_add_link() — Linux 9.8 Critical 2026-09-11
CVE-2026-80980 net/smc: stop killed, freed and out_of_sync sharing a byte — Linux 9.8 Critical 2026-09-11

This page lists every published CVE security advisory associated with Linux. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.