Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17547

Browse all 17547 CVE security advisories affecting Linux. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Linux serves as the foundational operating system for the majority of internet servers, cloud infrastructure, and embedded devices, powering critical global digital services. Its open-source nature and widespread deployment have historically exposed it to diverse vulnerability classes, including remote code execution, buffer overflows, and privilege escalation flaws within kernel modules and system utilities. While the project maintains rigorous security practices, the sheer volume of code contributes to a high cumulative count of recorded Common Vulnerabilities and Exposures, currently exceeding eleven thousand. Notable incidents often stem from misconfigurations or unpatched legacy components rather than fundamental architectural failures. The community responds rapidly to disclosed threats, yet the extensive attack surface necessitates continuous vigilance. Administrators must prioritize regular updates and strict access controls to mitigate risks associated with this ubiquitous platform, ensuring stability across both enterprise and consumer environments.

CVE ID Title CVSS Severity Published
CVE-2026-74643 samples/damon/mtier: error out for zero quota goal target values — Linux - - 2026-08-22
CVE-2026-74641 ALSA: usx2y: bound the hwdep mmap fault offset — Linux 7.8 High 2026-08-22
CVE-2026-74642 ALSA: usb: Fix UAF at delayed release of MIDI2 EPs — Linux - - 2026-08-22
CVE-2026-74640 ALSA: FCP: fix OOB write in fcp_meter_ctl_get() — Linux 7.8 High 2026-08-22
CVE-2026-74638 drm/v3d: Serialize the scheduler timeout handlers — Linux - - 2026-08-22
CVE-2026-74639 ALSA: us144mkii: re-anchor capture URBs on resubmission — Linux - - 2026-08-22
CVE-2026-74637 perf/core: Fix group leader use-after-free after sibling detach — Linux 7.8 High 2026-08-22
CVE-2026-74636 tracing: Fix race between update_event_fields and, event_define_fields — Linux - - 2026-08-22
CVE-2026-74635 fbdev: bitblit: bound-check glyph index in bit_cursor() — Linux 7.8 High 2026-08-22
CVE-2026-74634 ring-buffer: Prevent subbuf order change when resizing is disabled — Linux 7.8 High 2026-08-22
CVE-2026-74633 tracing: Fix NULL pointer dereference in module event cache removal — Linux - - 2026-08-22
CVE-2026-74632 mm/huge_memory: fix huge_zero_pfn race — Linux 7.8 High 2026-08-22
CVE-2026-74630 ipv6: prevent in6_dev_get() from resurrecting inet6_dev — Linux 7.8 High 2026-08-22
CVE-2026-74631 net: smc: fix splice entry lifetime imbalance in smc_rx_splice — Linux 8.4 High 2026-08-22
CVE-2026-74629 net/dibs: Correct freeing of dmb_clientid_arr — Linux 8.8 High 2026-08-22
CVE-2026-74628 net/x25: fix use-after-free of the socket by its timers — Linux 9.8 Critical 2026-08-22
CVE-2026-74626 NTB: ntb_netdev: Preserve RX queue depth on allocation failure — Linux 7.5 High 2026-08-22
CVE-2026-74627 net: devmem: prevent net-iov / page mixing — Linux 7.8 High 2026-08-22
CVE-2026-74625 netfilter: bridge: release template ct on non-IP path — Linux 7.5 High 2026-08-22
CVE-2026-74624 netfilter: nf_conntrack: defer invalid log until after unlock — Linux 7.5 High 2026-08-22
CVE-2026-74623 net: atlantic: free stranded TX buffers on ring deinit — Linux - - 2026-08-22
CVE-2026-74622 net: atlantic: free RX pages of consumed but not refilled buffers — Linux - - 2026-08-22
CVE-2026-74621 net/sched: act_ct: fix sk_buff leak when the header checks reject a packet — Linux 7.5 High 2026-08-22
CVE-2026-74619 ovl: don't warn when the mount is completed from another user namespace — Linux - - 2026-08-22
CVE-2026-74620 net/sched: act_gact, act_police: range check the fallback control action — Linux - - 2026-08-22
CVE-2026-74618 binfmt_misc: don't warn when the mount is completed from another user namespace — Linux - - 2026-08-22
CVE-2026-74617 dibs: initialise dibs->lock in dibs_dev_alloc() — Linux 9.8 Critical 2026-08-22
CVE-2026-74615 vxlan: do not arm the ageing timer on a device that is down — Linux 8.8 High 2026-08-22
CVE-2026-74616 xdp: reject clones that overrun skb_shared_info tailroom — Linux 9.8 Critical 2026-08-22
CVE-2026-74614 vsock/virtio: read virtqueues under worker locks — Linux 8.4 High 2026-08-22

This page lists every published CVE security advisory associated with Linux. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.