Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17548

Browse all 17548 CVE security advisories affecting Linux. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Linux serves as the foundational operating system for the majority of internet servers, cloud infrastructure, and embedded devices, powering critical global digital services. Its open-source nature and widespread deployment have historically exposed it to diverse vulnerability classes, including remote code execution, buffer overflows, and privilege escalation flaws within kernel modules and system utilities. While the project maintains rigorous security practices, the sheer volume of code contributes to a high cumulative count of recorded Common Vulnerabilities and Exposures, currently exceeding eleven thousand. Notable incidents often stem from misconfigurations or unpatched legacy components rather than fundamental architectural failures. The community responds rapidly to disclosed threats, yet the extensive attack surface necessitates continuous vigilance. Administrators must prioritize regular updates and strict access controls to mitigate risks associated with this ubiquitous platform, ensuring stability across both enterprise and consumer environments.

CVE ID Title CVSS Severity Published
CVE-2026-80889 can: isotp: fix timer drain order, wakeup handling and tx_gen ordering — Linux - - 2026-09-04
CVE-2026-80888 drm/vmwgfx: drop dma_buf reference on foreign-fd prime import — Linux - - 2026-09-04
CVE-2026-80887 drm/vmwgfx: use check_add_overflow for shader size+offset bound — Linux - - 2026-09-04
CVE-2026-80886 serial: msm: Disable DMA for kernel console UART — Linux - - 2026-09-04
CVE-2026-80885 afs: Fix uncancelled rxrpc OOB message handler — Linux - - 2026-09-04
CVE-2026-80884 ntb: Store original DMA address for future release — Linux - - 2026-09-04
CVE-2026-80883 drm/tegra: gr2d/gr3d: Initialize address register map before HOST1X client is registered — Linux - - 2026-09-04
CVE-2026-80882 crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm — Linux - - 2026-09-04
CVE-2026-80881 ocfs2: fix buffer head management in ocfs2_read_blocks() — Linux - - 2026-09-04
CVE-2026-80880 IB/mlx5: Properly support implicit ODP rereg_mr — Linux - - 2026-09-04
CVE-2026-80879 ocfs2: fix circular locking dependency in ocfs2_dio_end_io_write — Linux - - 2026-09-04
CVE-2026-80878 afs: Fix leak of ungot volume — Linux - - 2026-09-04
CVE-2026-80877 afs: Fix vllist leak — Linux - - 2026-09-04
CVE-2026-80876 ring-buffer: Fix event length with forced 8-byte alignment — Linux - - 2026-09-04
CVE-2026-80875 ipvs: use parsed transport offset in TCP state lookup — Linux - - 2026-09-04
CVE-2026-80874 arm64: dts: renesas: ironhide: Describe inline ECC carveouts — Linux - - 2026-09-04
CVE-2026-80873 KVM: arm64: nv: Write ESR_EL2 for injected nested SError exceptions — Linux - - 2026-09-04
CVE-2026-80872 ALSA: hda/tas2781: Cancel async firmware request at unbind — Linux - - 2026-09-04
CVE-2026-80871 crypto: xilinx-trng - Remove crypto_rng interface — Linux - - 2026-09-04
CVE-2026-80870 drm/amdkfd: Validate CRIU-restored IDs before idr_alloc — Linux - - 2026-09-04
CVE-2026-80869 ntfs: bound the attribute-list entry in ntfs_read_inode_mount() — Linux - - 2026-09-04
CVE-2026-80868 ntfs3: Allocate iomap inline_data using alloc_page — Linux - - 2026-09-04
CVE-2026-80867 alpha/PCI: Add security_locked_down() check to pci_mmap_resource() — Linux - - 2026-09-04
CVE-2026-80866 tipc: avoid busy looping in tipc_exit_net() — Linux - - 2026-09-04
CVE-2026-80865 bpf: Add missing access_ok call to copy_user_syms — Linux - - 2026-09-04
CVE-2026-80864 RDMA/rxe: Fix responder UAF on IB_QP_MAX_DEST_RD_ATOMIC modify_qp — Linux - - 2026-09-04
CVE-2026-80863 RDMA/rxe: Fix OOB in free_rd_atomic_resources() — Linux - - 2026-09-04
CVE-2026-80862 nvme-tcp: fix usage of page_frag_cache — Linux - - 2026-09-04
CVE-2026-80861 usb: xhci: bail out of setup if the controller is inaccessible — Linux - - 2026-09-04
CVE-2026-80860 fuse: fix race between interrupt and resend — Linux - - 2026-09-04

This page lists every published CVE security advisory associated with Linux. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.