Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17547

Browse all 17547 CVE security advisories affecting Linux. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Linux serves as the foundational operating system for the majority of internet servers, cloud infrastructure, and embedded devices, powering critical global digital services. Its open-source nature and widespread deployment have historically exposed it to diverse vulnerability classes, including remote code execution, buffer overflows, and privilege escalation flaws within kernel modules and system utilities. While the project maintains rigorous security practices, the sheer volume of code contributes to a high cumulative count of recorded Common Vulnerabilities and Exposures, currently exceeding eleven thousand. Notable incidents often stem from misconfigurations or unpatched legacy components rather than fundamental architectural failures. The community responds rapidly to disclosed threats, yet the extensive attack surface necessitates continuous vigilance. Administrators must prioritize regular updates and strict access controls to mitigate risks associated with this ubiquitous platform, ensuring stability across both enterprise and consumer environments.

CVE ID Title CVSS Severity Published
CVE-2026-80618 drm/amdkfd: Avoid double-unpin of DOORBELL/MMIO BOs on free — Linux - - 2026-08-28
CVE-2026-80617 net: airoha: fix foe_check_time allocation size — Linux 9.8 Critical 2026-08-28
CVE-2026-80616 ieee802154: Avoid calling WARN_ON() on -ENOMEM in cfg802154_switch_netns() — Linux - - 2026-08-28
CVE-2026-80615 net: dst_metadata: fix false-positive memcpy overflow in tun_dst_unclone — Linux 8.2 High 2026-08-28
CVE-2026-80614 net: emac: Fix NULL pointer dereference in emac_probe — Linux 7.5 High 2026-08-28
CVE-2026-80612 net: lwtunnel: Drop skb metadata before LWT encapsulation — Linux 9.8 Critical 2026-08-28
CVE-2026-80613 veth: fix NAPI leak in XDP enable error path — Linux 7.8 High 2026-08-28
CVE-2026-80611 ACPI: processor_idle: Mark LPI enter functions as __cpuidle — Linux - - 2026-08-28
CVE-2026-80610 net: enetc: fix potential divide-by-zero when num_vsi is zero — Linux - - 2026-08-28
CVE-2026-80609 qede: fix out-of-bounds check for cqe->len_list[] — Linux 9.8 Critical 2026-08-28
CVE-2026-80607 tracing/probes: Remove WARN_ON_ONCE from parse_btf_arg — Linux - - 2026-08-28
CVE-2026-80608 accel/amdxdna: Fix iommu domain lifetime race during device removal — Linux 8.8 High 2026-08-28
CVE-2026-80606 drm/xe/userptr: Hold notifier_lock for write on inject test path — Linux 7.8 High 2026-08-28
CVE-2026-80605 HID: picolcd: prevent NULL pointer dereference in picolcd_send_and_wait() — Linux - - 2026-08-28
CVE-2026-80604 HID: core: Fix OOB read in hid_get_report for numbered reports — Linux 8.8 High 2026-08-28
CVE-2026-80603 netfilter: nf_conntrack_irc: fix parse_dcc() off-by-one OOB read — Linux 9.1 Critical 2026-08-28
CVE-2026-80602 perf/x86/amd/lbr: Fix kernel address leakage — Linux - - 2026-08-28
CVE-2026-80601 batman-adv: gw: acquire ethernet header only after skb realloc — Linux 8.8 High 2026-08-28
CVE-2026-80599 batman-adv: dat: ensure accessible eth_hdr proto field — Linux 8.1 High 2026-08-28
CVE-2026-80600 batman-adv: dat: acquire ARP hw source only after skb realloc — Linux 9.8 Critical 2026-08-28
CVE-2026-80598 ntfs3: fix out-of-bounds read in decompress_lznt — Linux 7.8 High 2026-08-28
CVE-2026-80596 Input: ims-pcu - only expose sysfs attributes on control interface — Linux 8.4 High 2026-08-28
CVE-2026-80597 mtd: maps: vmu-flash: fix NULL pointer dereference in initialization — Linux - - 2026-08-28
CVE-2026-80595 Input: ims-pcu - add response length checks — Linux - - 2026-08-28
CVE-2026-80594 Input: ims-pcu - fix potential infinite loop in CDC union descriptor parsing — Linux - - 2026-08-28
CVE-2026-80593 hwmon: (asus_atk0110) Check package count before accessing element — Linux 8.4 High 2026-08-28
CVE-2026-80592 samples/damon/mtier: fail early if address range parameters are invalid — Linux - - 2026-08-28
CVE-2026-80591 f2fs: fix listxattr handling of corrupted xattr entries — Linux 7.8 High 2026-08-28
CVE-2026-80590 inet: frags: strip GSO state from fragments before reassembly — Linux 8.6 High 2026-08-28
CVE-2026-80589 block: stop the timeout timer when releasing a never added disk — Linux 9.8 Critical 2026-08-26

This page lists every published CVE security advisory associated with Linux. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.