Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17547

Browse all 17547 CVE security advisories affecting Linux. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Linux serves as the foundational operating system for the majority of internet servers, cloud infrastructure, and embedded devices, powering critical global digital services. Its open-source nature and widespread deployment have historically exposed it to diverse vulnerability classes, including remote code execution, buffer overflows, and privilege escalation flaws within kernel modules and system utilities. While the project maintains rigorous security practices, the sheer volume of code contributes to a high cumulative count of recorded Common Vulnerabilities and Exposures, currently exceeding eleven thousand. Notable incidents often stem from misconfigurations or unpatched legacy components rather than fundamental architectural failures. The community responds rapidly to disclosed threats, yet the extensive attack surface necessitates continuous vigilance. Administrators must prioritize regular updates and strict access controls to mitigate risks associated with this ubiquitous platform, ensuring stability across both enterprise and consumer environments.

CVE ID Title CVSS Severity Published
CVE-2026-74613 vsock/virtio: avoid refilling the RX queue after teardown — Linux 7.8 High 2026-08-22
CVE-2026-74611 tls: rx: restore msg_iter before TLS 1.3 optimistic retry — Linux 9.8 Critical 2026-08-22
CVE-2026-74612 veth: fix skb length accounting after XDP frag adjustment — Linux 10.0 Critical 2026-08-22
CVE-2026-74610 tls: don't leave a full plaintext sk_msg ring unpushed — Linux 7.8 High 2026-08-22
CVE-2026-74609 tipc: read le->link under the node lock in tipc_node_link_down() — Linux 7.8 High 2026-08-22
CVE-2026-74608 smb: client: Fix use-after-free in cifs_try_adding_channels() — Linux 9.8 Critical 2026-08-22
CVE-2026-74607 KVM: SVM: Serialize accesses to the owner and mirror list with separate lock — Linux 8.8 High 2026-08-22
CVE-2026-74606 eventfs: Fix use-after-free in eventfs_remove_rec() — Linux 7.8 High 2026-08-22
CVE-2026-74605 eventfs: Use children field for rcu head and add memory barriers — Linux 7.8 High 2026-08-22
CVE-2026-74603 ptp: ocp: Fix board ID over-read — Linux 7.1 High 2026-08-22
CVE-2026-74604 Revert "thermal/drivers/hwmon: Cleanup coding style a bit" — Linux 8.4 High 2026-08-22
CVE-2026-74602 ring-buffer: Initialise reader page order in rb_allocate_cpu_buffer() — Linux - - 2026-08-22
CVE-2026-74601 ring-buffer: Use current_context for safe per-CPU buffer swap — Linux 7.8 High 2026-08-22
CVE-2026-74600 mm/page_table_check: skip special zero mappings — Linux - - 2026-08-22
CVE-2026-74599 mm/ptdump: always stabilise against page table freeing using init_mm — Linux - - 2026-08-22
CVE-2026-74598 ipv6: fix Route Information option length validation — Linux 7.5 High 2026-08-22
CVE-2026-74597 ip6_tunnel: clear skb2->cb[] in ip6ip6_err() — Linux 9.8 Critical 2026-08-22
CVE-2026-74595 fscrypt: use the mount idmap for the owner check in fscrypt_ioctl_set_policy() — Linux 7.8 High 2026-08-22
CVE-2026-74596 fs,fsverity: remove check for fsverity being enabled in setattr_prepare() — Linux - - 2026-08-22
CVE-2026-74594 sched/psi: Shut down rtpoll_timer in psi_cgroup_free() — Linux 7.8 High 2026-08-22
CVE-2026-74593 sched_ext: Take cgroup_lock() first in scx_cgroup_lock() — Linux - - 2026-08-22
CVE-2026-74591 mm/filemap: __filemap_add_folio() restore index before retrying — Linux 9.8 Critical 2026-08-22
CVE-2026-74592 ima: Instantiate file_truncate and path_truncate hooks — Linux 8.1 High 2026-08-22
CVE-2026-74590 fsverity: Fix bpf_get_fsverity_digest() dynptr assumptions — Linux 7.8 High 2026-08-22
CVE-2026-74589 bpf, sockmap: Fix sk_redir use-after-free in send verdict — Linux 8.4 High 2026-08-22
CVE-2026-74587 sctp: fix use-after-free of cached ASCONF chunk — Linux 9.8 Critical 2026-08-22
CVE-2026-74588 sctp: keep chunk->transport in step with the list it is queued on — Linux 9.8 Critical 2026-08-22
CVE-2026-74586 sctp: clear new_transport when removing a peer — Linux 9.8 Critical 2026-08-22
CVE-2026-74585 thunderbolt: Bound the DROM dual link port number before indexing sw->ports — Linux - - 2026-08-22
CVE-2026-74584 RDMA/bnxt_re: zero shared page before exposing to userspace — Linux 7.1 High 2026-08-22

This page lists every published CVE security advisory associated with Linux. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.