Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17547

Browse all 17547 CVE security advisories affecting Linux. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Linux serves as the foundational operating system for the majority of internet servers, cloud infrastructure, and embedded devices, powering critical global digital services. Its open-source nature and widespread deployment have historically exposed it to diverse vulnerability classes, including remote code execution, buffer overflows, and privilege escalation flaws within kernel modules and system utilities. While the project maintains rigorous security practices, the sheer volume of code contributes to a high cumulative count of recorded Common Vulnerabilities and Exposures, currently exceeding eleven thousand. Notable incidents often stem from misconfigurations or unpatched legacy components rather than fundamental architectural failures. The community responds rapidly to disclosed threats, yet the extensive attack surface necessitates continuous vigilance. Administrators must prioritize regular updates and strict access controls to mitigate risks associated with this ubiquitous platform, ensuring stability across both enterprise and consumer environments.

CVE ID Title CVSS Severity Published
CVE-2026-80528 ceph: avoid fs reclaim while using current->journal_info — Linux 9.8 Critical 2026-08-26
CVE-2026-80527 ceph: fix hanging __ceph_get_caps() with stale mds_wanted — Linux 7.5 High 2026-08-26
CVE-2026-80526 ASoC: tas2562: Validate values for volume writes — Linux 7.8 High 2026-08-26
CVE-2026-80525 ASoC: SOF: ipc4-topology: Refresh copier IPC payload before widget setup — Linux - - 2026-08-26
CVE-2026-80523 clk: spacemit: k3: set hdma clock as critical — Linux 7.1 High 2026-08-26
CVE-2026-80524 optee: ffa: Add NULL check in optee_ffa_lend_protmem — Linux - - 2026-08-26
CVE-2026-80522 crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() — Linux 7.8 High 2026-08-26
CVE-2026-80521 af_unix: Unlink scc_entry in unix_del_edge(). — Linux 7.8 High 2026-08-26
CVE-2026-80520 ovpn: fix NULL dereference when killing missing key — Linux 7.5 High 2026-08-26
CVE-2026-74754 scsi: core: pair EH runtime PM get and put — Linux - - 2026-08-26
CVE-2026-80519 ovpn: finish crypto callback cleanup before peer release — Linux 9.8 Critical 2026-08-26
CVE-2026-74753 perf: Reject exited events as group leaders — Linux 7.8 High 2026-08-26
CVE-2026-74752 sctp: validate cookie AUTH state before use — Linux 9.8 Critical 2026-08-26
CVE-2026-74751 riscv: lib: Fix ZBB strnlen reading past count boundary — Linux 9.4 Critical 2026-08-26
CVE-2026-74750 ovpn: defer key slot crypto freeing to workqueue — Linux 7.5 High 2026-08-26
CVE-2026-74749 rseq: Prevent hard lockup on granted time slice extension — Linux - - 2026-08-26
CVE-2026-74748 netfilter: ipset: fix refcount race between list:set GC and swap — Linux 7.8 High 2026-08-26
CVE-2026-74747 ipvs: revalidate ihl to prevent out-of-bounds access — Linux 7.8 High 2026-08-26
CVE-2026-74746 netfilter: flowtable: publish GC-visible tuple last — Linux 9.8 Critical 2026-08-26
CVE-2026-74744 ipvlan: inherit needed_headroom and needed_tailroom from phy_dev — Linux 9.8 Critical 2026-08-26
CVE-2026-74745 eth: bnxt: avoid deadlock when canceling IRQ affinity notifier — Linux 7.5 High 2026-08-26
CVE-2026-74742 veth: fix queue index used to wake the peer txq in veth_poll — Linux 7.5 High 2026-08-26
CVE-2026-74743 macvlan: inherit needed_headroom and needed_tailroom from lowerdev — Linux 9.8 Critical 2026-08-26
CVE-2026-74741 net: ngbe: fix NULL pointer dereference in non-MSI-X interrupt enabling — Linux 7.5 High 2026-08-26
CVE-2026-74739 net/sched: cls_u32: skip hash tables in u32_bind_class() — Linux 7.8 High 2026-08-26
CVE-2026-74740 net/sched: act_api: fix TOCTOU NULL deref on a->goto_chain — Linux - - 2026-08-26
CVE-2026-74738 regmap: sdw-mbq: don't call an unset readable_reg callback — Linux - - 2026-08-26
CVE-2026-74737 net: ethernet: ti: am65-cpsw-nuss: Fix port_id extraction from SRC TAG — Linux 9.8 Critical 2026-08-26
CVE-2026-74736 net/sched: cls_bpf: reject dev-bound programs bound to a different device — Linux 7.8 High 2026-08-26
CVE-2026-74734 firewire: ohci: fix NULL pointer dereference in ar_context_release — Linux - - 2026-08-26

This page lists every published CVE security advisory associated with Linux. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.