Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17548

Browse all 17548 CVE security advisories affecting Linux. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Linux serves as the foundational operating system for the majority of internet servers, cloud infrastructure, and embedded devices, powering critical global digital services. Its open-source nature and widespread deployment have historically exposed it to diverse vulnerability classes, including remote code execution, buffer overflows, and privilege escalation flaws within kernel modules and system utilities. While the project maintains rigorous security practices, the sheer volume of code contributes to a high cumulative count of recorded Common Vulnerabilities and Exposures, currently exceeding eleven thousand. Notable incidents often stem from misconfigurations or unpatched legacy components rather than fundamental architectural failures. The community responds rapidly to disclosed threats, yet the extensive attack surface necessitates continuous vigilance. Administrators must prioritize regular updates and strict access controls to mitigate risks associated with this ubiquitous platform, ensuring stability across both enterprise and consumer environments.

CVE ID Title CVSS Severity Published
CVE-2026-80979 net/smc: unregister the connection before draining the rx tasklet — Linux 7.8 High 2026-09-11
CVE-2026-80978 net: cap advertised IP tunnel headroom — Linux 7.8 High 2026-09-11
CVE-2026-80977 net: skbuff: don't touch shared zerocopy state in skb_tx_error() — Linux 7.8 High 2026-09-11
CVE-2026-80976 seg6: reset IP6CB after IPv6 decapsulation — Linux 9.8 Critical 2026-09-11
CVE-2026-80975 mfd: qnap-mcu: keep the reply buffer alive past a command timeout — Linux 7.8 High 2026-09-11
CVE-2026-80973 ALSA: 6fire: bound the MIDI event length from the device — Linux - - 2026-09-11
CVE-2026-80974 mfd: sm501: Fix potential memory leaks during remove — Linux - - 2026-09-11
CVE-2026-80972 ALSA: aloop: Check card index validity at probe — Linux - - 2026-09-11
CVE-2026-80971 ALSA: bcd2000: clear the URB pointers on disconnect — Linux 7.8 High 2026-09-11
CVE-2026-80970 ALSA: FCP: do not copy out an uninitialised init response — Linux - - 2026-09-11
CVE-2026-80969 ALSA: mpu401: Check card index validity at probe — Linux - - 2026-09-11
CVE-2026-80967 ALSA: pcxhr: initialize mutexes before requesting threaded IRQ — Linux 8.4 High 2026-09-11
CVE-2026-80968 ALSA: mts64: Check card index validity at probe — Linux - - 2026-09-11
CVE-2026-80966 ALSA: portman2x4: Check card index validity at probe — Linux - - 2026-09-11
CVE-2026-80965 ALSA: serial-u16550: Check card index validity at probe — Linux - - 2026-09-11
CVE-2026-80964 ALSA: virmidi: Check card index validity at probe — Linux - - 2026-09-11
CVE-2026-80962 dm-pcache: validate geometry fields from on-disk cache_info — Linux 7.8 High 2026-09-11
CVE-2026-80963 dm-stats: fix a crash if allocation of per-cpu data fails — Linux - - 2026-09-11
CVE-2026-80961 dm-pcache: validate kset key_num and intra-segment bounds — Linux 7.8 High 2026-09-11
CVE-2026-80959 dm-pcache: bound the persisted tail-position offset — Linux 7.8 High 2026-09-11
CVE-2026-80960 dm-pcache: validate on-media seg_num against the cache device size — Linux - - 2026-09-11
CVE-2026-80958 dm-pcache: clamp the tail kset read to the segment data region — Linux 7.1 High 2026-09-11
CVE-2026-80956 dm-pcache: only hand out initialized cache segments — Linux - - 2026-09-11
CVE-2026-80957 dm-pcache: detect a cycle in the last-kset chain during replay — Linux - - 2026-09-11
CVE-2026-80955 dm-pcache: fix use-after-free and invalid seg operations in kset_replay() — Linux 7.8 High 2026-09-11
CVE-2026-80953 i3c: master: adi: initialize the lock before enabling interrupts — Linux 8.4 High 2026-09-11
CVE-2026-80954 i3c: Fix unlocked dereference of dev->desc in i3c_device_get_supported_xfer_mode() — Linux 7.8 High 2026-09-11
CVE-2026-80952 i3c: master: Fix info leak and UAF in device unregister path — Linux 7.8 High 2026-09-11
CVE-2026-80951 i3c: master: svc: bound IBI payload to the requested max_payload_len — Linux - - 2026-09-11
CVE-2026-80949 wifi: brcmfmac: Fix memory leak in brcmf_sdio_read_control() — Linux - - 2026-09-11

This page lists every published CVE security advisory associated with Linux. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.