Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17548

Browse all 17548 CVE security advisories affecting Linux. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Linux serves as the foundational operating system for the majority of internet servers, cloud infrastructure, and embedded devices, powering critical global digital services. Its open-source nature and widespread deployment have historically exposed it to diverse vulnerability classes, including remote code execution, buffer overflows, and privilege escalation flaws within kernel modules and system utilities. While the project maintains rigorous security practices, the sheer volume of code contributes to a high cumulative count of recorded Common Vulnerabilities and Exposures, currently exceeding eleven thousand. Notable incidents often stem from misconfigurations or unpatched legacy components rather than fundamental architectural failures. The community responds rapidly to disclosed threats, yet the extensive attack surface necessitates continuous vigilance. Administrators must prioritize regular updates and strict access controls to mitigate risks associated with this ubiquitous platform, ensuring stability across both enterprise and consumer environments.

CVE ID Title CVSS Severity Published
CVE-2026-80859 fuse: fix missing barrier when checking io-uring readiness — Linux - - 2026-09-04
CVE-2026-80858 fuse: publish io-uring queues with release semantics — Linux - - 2026-09-04
CVE-2026-80857 fuse: wait for FR_FINISHED on abort_on_kill to prevent use-after-free — Linux - - 2026-09-04
CVE-2026-80856 fuse: fix invalidate lock leak on setattr writeback failure — Linux - - 2026-09-04
CVE-2026-80855 fuse: fix invalidate lock leak on open O_TRUNC DAX failure — Linux - - 2026-09-04
CVE-2026-80854 usb: gadget: f_tcm: keep port count until LUN teardown completes — Linux - - 2026-09-04
CVE-2026-80853 KVM: SEV: Allocate full pages for {DE,EN}CRYPT ops on SNP-enabled hosts — Linux - - 2026-09-04
CVE-2026-80852 tls: device: fix out-of-bounds write in tls_append_frag() — Linux - - 2026-09-04
CVE-2026-80851 gtp: serialize PDP context updates — Linux - - 2026-09-04
CVE-2026-80850 tcp: fix AO info use-after-free in tcp_ao_connect_init() — Linux - - 2026-09-04
CVE-2026-80849 net/tcp-ao: fix use-after-free of current_key on reconnect to another peer — Linux - - 2026-09-04
CVE-2026-80848 xfrm: espintcp: fix UAF during close — Linux - - 2026-09-04
CVE-2026-80847 tcp: clamp route advmss to TCP_MIN_MSS — Linux - - 2026-09-04
CVE-2026-80846 xfrm: drop ESP-in-TCP packets with no ingress device — Linux - - 2026-09-04
CVE-2026-80845 xfrm: avoid lock inversion in nat keepalive work — Linux - - 2026-09-04
CVE-2026-80844 xfrm: ah6: validate routing header segments_left — Linux - - 2026-09-04
CVE-2026-80843 xfrm: fix xfrm_state_construct() auth-trunc leak — Linux - - 2026-09-04
CVE-2026-80842 net: bridge: mcast: fix use-after-free of a master VLAN's multicast context — Linux - - 2026-09-04
CVE-2026-80841 net/packet: defer vmalloc TX_RING free until skbs finish — Linux - - 2026-09-04
CVE-2026-80840 ipv6: seg6: clear IPv4 control block on IPIP decapsulation — Linux - - 2026-09-04
CVE-2026-80839 batman-adv: reject unrepresentable multicast TVLV offsets — Linux - - 2026-09-04
CVE-2026-80838 vxlan: keep the last remote linked during FDB flush — Linux - - 2026-09-04
CVE-2026-80837 netfilter: nf_tables: don't queue packet path object notifications — Linux - - 2026-09-04
CVE-2026-80836 crypto: virtio - bound the akcipher result length — Linux - - 2026-09-04
CVE-2026-80835 crypto: qcom-rng - Remove crypto_rng interface — Linux - - 2026-09-04
CVE-2026-80834 crypto: sun8i-ce - Remove crypto_rng interface — Linux - - 2026-09-04
CVE-2026-80833 crypto: sun8i-ss - Remove crypto_rng interface — Linux - - 2026-09-04
CVE-2026-80832 crypto: qce - fix CCM AAD buffer underallocation — Linux - - 2026-09-04
CVE-2026-80831 crypto: mxs-dcp - fix source scatterlist length access — Linux - - 2026-09-04
CVE-2026-80830 usb: core: Add lock to usb_wakeup_notification() — Linux - - 2026-09-04

This page lists every published CVE security advisory associated with Linux. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.