Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17547

Browse all 17547 CVE security advisories affecting Linux. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Linux serves as the foundational operating system for the majority of internet servers, cloud infrastructure, and embedded devices, powering critical global digital services. Its open-source nature and widespread deployment have historically exposed it to diverse vulnerability classes, including remote code execution, buffer overflows, and privilege escalation flaws within kernel modules and system utilities. While the project maintains rigorous security practices, the sheer volume of code contributes to a high cumulative count of recorded Common Vulnerabilities and Exposures, currently exceeding eleven thousand. Notable incidents often stem from misconfigurations or unpatched legacy components rather than fundamental architectural failures. The community responds rapidly to disclosed threats, yet the extensive attack surface necessitates continuous vigilance. Administrators must prioritize regular updates and strict access controls to mitigate risks associated with this ubiquitous platform, ensuring stability across both enterprise and consumer environments.

CVE ID Title CVSS Severity Published
CVE-2026-80737 serial: amba-pl011: synchronize DMA teardown — Linux 7.8 High 2026-09-03
CVE-2026-80738 bpf: Check sk_state before sk_protocol in bpf_tcp_*_syncookie — Linux 7.3 High 2026-09-03
CVE-2026-80736 thunderbolt: Fix bandwidth group reservation indexing — Linux 7.8 High 2026-09-03
CVE-2026-80735 ovpn: ensure socket is owned by ovpn before deref sk_user_data — Linux 7.3 High 2026-09-03
CVE-2026-80734 btrfs: initialize inode mapping flags for cached inodes — Linux 8.8 High 2026-09-03
CVE-2026-80733 net: remove WARN_ON_ONCE() from sk_mc_loop() — Linux - - 2026-09-03
CVE-2026-80732 ata: pata_sl82c105: fix bridge revision use-after-free — Linux 7.8 High 2026-09-03
CVE-2026-80731 net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header — Linux 7.8 High 2026-09-03
CVE-2026-80730 ring-buffer: Fix crash passing ERR_PTR to kthread_stop() — Linux - - 2026-09-03
CVE-2026-80729 mm/huge_memory: initialise workingset state before folio split — Linux - - 2026-09-03
CVE-2026-80728 Revert "drm/amdgpu: fix aperture mapping leak" — Linux - - 2026-09-03
CVE-2026-80727 x86/mce: Set up the polling timer before CMCI discovery — Linux - - 2026-09-03
CVE-2026-80726 KVM: x86/mmu: WARN and clear role.invalid when creating a child shadow page — Linux 9.3 Critical 2026-09-03
CVE-2026-80725 net: gro: properly validate BIG TCP aggregation criteria — Linux 9.8 Critical 2026-08-29
CVE-2026-80724 ptp: vmclock: prevent read-only mappings from becoming writable — Linux 8.8 High 2026-08-28
CVE-2026-80722 wifi: mac80211: validate individual TWT params before driver setup — Linux 8.8 High 2026-08-28
CVE-2026-80723 of: reserved_mem: prevent OOB when too many dynamic regions are defined — Linux 8.4 High 2026-08-28
CVE-2026-80720 iomap: add a separate bio_set for iomap_split_ioend — Linux 7.5 High 2026-08-28
CVE-2026-80721 Bluetooth: ISO: ensure no dangling hcon references in iso_conn — Linux 8.8 High 2026-08-28
CVE-2026-80719 mm: mglru: fix stale batch updates after memcg reparenting — Linux - - 2026-08-28
CVE-2026-80717 sctp: validate Adaptation Indication parameter length — Linux 7.5 High 2026-08-28
CVE-2026-80718 mm/percpu-km: fix bitmap overflow and accounting in pcpu_create_chunk() — Linux 7.8 High 2026-08-28
CVE-2026-80715 igc: remove napi_synchronize() in igc_down() — Linux - - 2026-08-28
CVE-2026-80716 ALSA: pcm: wake linked drain waiters on unlink — Linux 7.8 High 2026-08-28
CVE-2026-80714 ipvs: do not propagate one-packet flag to synced conns — Linux 9.8 Critical 2026-08-28
CVE-2026-80713 io_uring: preserve task restrictions across exec — Linux 8.4 High 2026-08-28
CVE-2026-80712 spi: spi-qpic-snand: write the feature value before executing SET_FEATURE — Linux 8.4 High 2026-08-28
CVE-2026-80711 power: supply: max17040: handle missing status supplier — Linux - - 2026-08-28
CVE-2026-80710 s390/dasd: Fix undersized format-check buffer — Linux 7.8 High 2026-08-28
CVE-2026-80709 s390/zcrypt: Fix wrong domain value verification with EP11 CPRBs — Linux 7.8 High 2026-08-28

This page lists every published CVE security advisory associated with Linux. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.