Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17547

Browse all 17547 CVE security advisories affecting Linux. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Linux serves as the foundational operating system for the majority of internet servers, cloud infrastructure, and embedded devices, powering critical global digital services. Its open-source nature and widespread deployment have historically exposed it to diverse vulnerability classes, including remote code execution, buffer overflows, and privilege escalation flaws within kernel modules and system utilities. While the project maintains rigorous security practices, the sheer volume of code contributes to a high cumulative count of recorded Common Vulnerabilities and Exposures, currently exceeding eleven thousand. Notable incidents often stem from misconfigurations or unpatched legacy components rather than fundamental architectural failures. The community responds rapidly to disclosed threats, yet the extensive attack surface necessitates continuous vigilance. Administrators must prioritize regular updates and strict access controls to mitigate risks associated with this ubiquitous platform, ensuring stability across both enterprise and consumer environments.

CVE ID Title CVSS Severity Published
CVE-2026-80708 s390/zcrypt: Fix missing mem scrub at clear key import in cca_clr2cipherkey() — Linux - - 2026-08-28
CVE-2026-80707 can: j1939: transport: j1939_session_fresh_new(): initialize receive buffer — Linux 7.5 High 2026-08-28
CVE-2026-80706 can: softing: fw_parse(): validate firmware record spans — Linux 7.8 High 2026-08-28
CVE-2026-80705 drm/amd/display: check if dml21_add_phantom_plane() is successful — Linux - - 2026-08-28
CVE-2026-80703 drm/amdkfd: Fix missing authorization check in KFD_IOC_DBG_TRAP_DISABLE — Linux - - 2026-08-28
CVE-2026-80704 drm/amd/display: use proper context for logging — Linux - - 2026-08-28
CVE-2026-80701 drm/vmwgfx: enforce cursor size limits for MOB cursors — Linux - - 2026-08-28
CVE-2026-80702 drm/vmwgfx: fix guest_memory_dirty bitfield clobbered as size — Linux 7.8 High 2026-08-28
CVE-2026-80700 drm/vmwgfx: validate external BO copy bounds for both stride paths — Linux 7.8 High 2026-08-28
CVE-2026-80698 dmaengine: idxd: fix double free of wq, engine, and group structs — Linux - - 2026-08-28
CVE-2026-80699 KVM: arm64: vgic: Avoid double-deactivate of IRQs in the nested context — Linux - - 2026-08-28
CVE-2026-80697 erofs: ensure valid f_path for page cache sharing — Linux - - 2026-08-28
CVE-2026-80696 hwmon: (ltc4282) Fix reading the minimum alarm voltage — Linux 7.8 High 2026-08-28
CVE-2026-80695 hwmon: (sht3x) Fix unaligned accesses — Linux - - 2026-08-28
CVE-2026-80694 net: ethernet: mtk_eth_soc: pass eth to mtk_handle_irq_rx in poll_controller — Linux 9.8 Critical 2026-08-28
CVE-2026-80693 idpf: bound interrupt-vector register fill to the allocated array — Linux 9.3 Critical 2026-08-28
CVE-2026-80692 Bluetooth: hci_sync: hold conn in hci_connect_acl/le_sync() callbacks — Linux 8.8 High 2026-08-28
CVE-2026-80691 scsi: target: iblock: Fix wrong PR ops NULL check for PREEMPT/RELEASE — Linux 7.5 High 2026-08-28
CVE-2026-80690 scsi: ufs: core: Initialize hba->rpmbs list in ufshcd — Linux - - 2026-08-28
CVE-2026-80689 tracing/mmiotrace: Add NULL check for mmio_trace_array in logging functions — Linux - - 2026-08-28
CVE-2026-80687 iommufd/viommu: Release the igroup lock on the vdevice_size error path — Linux - - 2026-08-28
CVE-2026-80688 riscv: drop __init from vec_check_unaligned_access_speed_all_cpus — Linux - - 2026-08-28
CVE-2026-80686 mm: migrate_device: fix pte_pfn/pte_dirty called on non-present PTE — Linux - - 2026-08-28
CVE-2026-80685 mm/util: don't read __page_2 for order-1 folios in snapshot_page() — Linux 7.1 High 2026-08-28
CVE-2026-80684 KVM: s390: pci: Fix NULL dereference on AIBV allocation failure — Linux 9.3 Critical 2026-08-28
CVE-2026-80683 Bluetooth: SCO: give the socket its own sco_conn reference — Linux 8.8 High 2026-08-28
CVE-2026-80681 vxlan: re-fetch eth header after route_shortcircuit() — Linux 9.8 Critical 2026-08-28
CVE-2026-80682 riscv/mm: use physical alignment for vmemmap_start_pfn — Linux 7.8 High 2026-08-28
CVE-2026-80680 i2c: amd-mp2: Unregister callback on adapter add failure — Linux 7.8 High 2026-08-28
CVE-2026-80679 s390/dasd: Fix potential NULL pointer dereference — Linux - - 2026-08-28

This page lists every published CVE security advisory associated with Linux. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.