Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17547

Browse all 17547 CVE security advisories affecting Linux. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Linux serves as the foundational operating system for the majority of internet servers, cloud infrastructure, and embedded devices, powering critical global digital services. Its open-source nature and widespread deployment have historically exposed it to diverse vulnerability classes, including remote code execution, buffer overflows, and privilege escalation flaws within kernel modules and system utilities. While the project maintains rigorous security practices, the sheer volume of code contributes to a high cumulative count of recorded Common Vulnerabilities and Exposures, currently exceeding eleven thousand. Notable incidents often stem from misconfigurations or unpatched legacy components rather than fundamental architectural failures. The community responds rapidly to disclosed threats, yet the extensive attack surface necessitates continuous vigilance. Administrators must prioritize regular updates and strict access controls to mitigate risks associated with this ubiquitous platform, ensuring stability across both enterprise and consumer environments.

CVE ID Title CVSS Severity Published
CVE-2026-74704 net/sched: sch_cake: drop WARN_ON(1) for malformed packets in ACK filter — Linux 8.2 High 2026-08-22
CVE-2026-74702 vhost-scsi: reject feature changes after endpoint — Linux 8.8 High 2026-08-22
CVE-2026-74701 net/openvswitch: check Ethernet header length in key_extract() — Linux 7.8 High 2026-08-22
CVE-2026-74700 net/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiers — Linux 7.8 High 2026-08-22
CVE-2026-74698 net/mlx5e: fix BQL reset on SQ re-activation — Linux - - 2026-08-22
CVE-2026-74699 drm/xe: Fix memory leak in exec_queue_set_hang_replay_state() — Linux - - 2026-08-22
CVE-2026-74697 bnxt_en: Disable EOP for TPA on all chips to prevent data corruption — Linux 8.2 High 2026-08-22
CVE-2026-74695 netfilter: nf_flow_table: drop existing skb dst before skb_dst_set_noref() — Linux 7.5 High 2026-08-22
CVE-2026-74696 tcp: fix TFO max_qlen accounting across reuseport migration — Linux 7.5 High 2026-08-22
CVE-2026-74694 net/ncsi: fix heap OOB read in NCSI_CMD_SEND_CMD payload length — Linux - - 2026-08-22
CVE-2026-74692 net/smc: fix TOCTOU race between smc_listen_out() and listener close — Linux 7.5 High 2026-08-22
CVE-2026-74693 net: prestera: validate firmware header length — Linux - - 2026-08-22
CVE-2026-74691 net: thunderbolt: Tear down DMA paths before stopping the rings — Linux 8.8 High 2026-08-22
CVE-2026-74690 s390/ism: Fix UAF of sba and ieq during ism_dev_exit() — Linux 8.4 High 2026-08-22
CVE-2026-74689 net/atm: fix slab-out-of-bounds read in vcc_setsockopt() — Linux 7.1 High 2026-08-22
CVE-2026-74688 sctp: clear control chunk transport if it is being removed — Linux 9.8 Critical 2026-08-22
CVE-2026-74687 watchdog: at91sam9_wdt: prevent timer rearm during teardown — Linux 7.8 High 2026-08-22
CVE-2026-74686 rqspinlock: Reset tail when preserving queue on deadlock — Linux - - 2026-08-22
CVE-2026-74684 net: tap: set skb->dev before parsing virtio net header in tap_get_user_xdp() — Linux 7.1 High 2026-08-22
CVE-2026-74685 hwmon: (ltc4282) Clamp negative current limits — Linux - - 2026-08-22
CVE-2026-74683 Input: evdev - sanitize event type index when fetching event masks — Linux - - 2026-08-22
CVE-2026-74682 ALSA: usb-audio: fix OOB write on Type II inbound URBs — Linux - - 2026-08-22
CVE-2026-74681 usb: misc: usbio: check ibuf_len against rxbuf_len in bulk msg — Linux - - 2026-08-22
CVE-2026-74680 usb: atm: cxacru: properly kill rcv_urb on error in cxacru_cm() — Linux - - 2026-08-22
CVE-2026-74679 usb: gadget: f_ncm: Use unsigned int for ndp_index — Linux - - 2026-08-22
CVE-2026-74678 net: usb: ax88179_178a: fix skb leak in ax88179_tx_fixup() — Linux 7.5 High 2026-08-22
CVE-2026-74677 net: usb: ipheth: fix carrier_work UAF on disconnect — Linux - - 2026-08-22
CVE-2026-74676 vt: add permission check for KDSKBMETA ioctl — Linux - - 2026-08-22
CVE-2026-74675 vt: stabilize tty reference in kbd_keycode with tty_port_tty_get — Linux 7.8 High 2026-08-22
CVE-2026-74674 mm: fix incorrect flush address in direct page table reclaim — Linux 7.8 High 2026-08-22

This page lists every published CVE security advisory associated with Linux. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.