Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17547

Browse all 17547 CVE security advisories affecting Linux. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Linux serves as the foundational operating system for the majority of internet servers, cloud infrastructure, and embedded devices, powering critical global digital services. Its open-source nature and widespread deployment have historically exposed it to diverse vulnerability classes, including remote code execution, buffer overflows, and privilege escalation flaws within kernel modules and system utilities. While the project maintains rigorous security practices, the sheer volume of code contributes to a high cumulative count of recorded Common Vulnerabilities and Exposures, currently exceeding eleven thousand. Notable incidents often stem from misconfigurations or unpatched legacy components rather than fundamental architectural failures. The community responds rapidly to disclosed threats, yet the extensive attack surface necessitates continuous vigilance. Administrators must prioritize regular updates and strict access controls to mitigate risks associated with this ubiquitous platform, ensuring stability across both enterprise and consumer environments.

CVE ID Title CVSS Severity Published
CVE-2026-80588 mptcp: reclaim forward-allocated memory on RX path errors — Linux 7.5 High 2026-08-26
CVE-2026-80587 mptcp: avoid combining some incoming suboptions — Linux 9.8 Critical 2026-08-26
CVE-2026-80586 mptcp: options: reset DSS fields in case of unexpected size — Linux 9.8 Critical 2026-08-26
CVE-2026-80585 mptcp: fastopen: only mark MPTFO subflows with SYN data — Linux 9.4 Critical 2026-08-26
CVE-2026-80584 s390/qeth: validate user buffer length in SNMP and ARP query ioctls — Linux 8.4 High 2026-08-26
CVE-2026-80583 ASoC: codecs: lpass-tx-macro: Fix enum kcontrol accesses — Linux 7.8 High 2026-08-26
CVE-2026-80581 ASoC: SOF: ipc4-pcm: Continue the pipeline trigger in case of IPC timeout — Linux - - 2026-08-26
CVE-2026-80582 drm/shmem_helper: Check VMA boundaries for PMD mappings — Linux 7.8 High 2026-08-26
CVE-2026-80580 fbdev: bound mode sysfs output to the sysfs buffer — Linux 7.8 High 2026-08-26
CVE-2026-80579 fbdev: clear fb_info->mode before deleting a videomode — Linux 7.8 High 2026-08-26
CVE-2026-80578 fbdev: core: Fix pointer desynchronization in fb_io_read() — Linux 7.3 High 2026-08-26
CVE-2026-80576 drm/amdgpu: reject oversized IBs with per-ring packet limits — Linux 8.8 High 2026-08-26
CVE-2026-80577 drm/panthor: skip zero-sized firmware sections — Linux - - 2026-08-26
CVE-2026-80575 Input: cs40l50-vibra - validate custom data from user space — Linux 7.8 High 2026-08-26
CVE-2026-80574 Input: focaltech - fix array out-of-bounds in focaltech_process_rel_packet — Linux 8.4 High 2026-08-26
CVE-2026-80573 Input: iforce - validate input packet lengths — Linux - - 2026-08-26
CVE-2026-80572 Input: byd - synchronize timer deletion before freeing private data — Linux 7.8 High 2026-08-26
CVE-2026-80571 powerpc/pseries: papr-phy-attest - validate cmd.length, plug mem leak — Linux - - 2026-08-26
CVE-2026-80570 Input: synaptics-rmi4 - zero report size on F54 work error — Linux 7.8 High 2026-08-26
CVE-2026-80568 Input: synaptics-rmi4 - block s_input when F54 queue is busy — Linux 7.8 High 2026-08-26
CVE-2026-80569 Input: synaptics-rmi4 - bound the F54 report size to the allocated buffer — Linux 7.8 High 2026-08-26
CVE-2026-80566 Input: hynitron_cstxxx - validate touch count and finger IDs — Linux - - 2026-08-26
CVE-2026-80567 Input: synaptics-rmi4 - propagate F54 worker errors to V4L2 queue — Linux - - 2026-08-26
CVE-2026-80565 crypto: qce - fix error path in devm_qce_register_algs — Linux 7.8 High 2026-08-26
CVE-2026-80563 gpio: sloppy-logic-analyzer: fix use-after-free via debugfs trigger on unbind — Linux - - 2026-08-26
CVE-2026-80564 gve: fix NULL dereference due to missing ptp adjfine — Linux - - 2026-08-26
CVE-2026-80561 libceph: fix multiple unsafe decodes in decode_locker() — Linux 9.8 Critical 2026-08-26
CVE-2026-80562 gpio: ml-ioh: use raw_spinlock_t for the register lock — Linux - - 2026-08-26
CVE-2026-80560 openrisc: signal: do not restore privileged SR bits on sigreturn — Linux 7.8 High 2026-08-26
CVE-2026-80559 Input: sur40 - fix input device registration ordering — Linux 7.8 High 2026-08-26

This page lists every published CVE security advisory associated with Linux. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.