Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17854

All 17854 CVE vulnerabilities found in Linux, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumeration (CWE) vulnerabilities affecting the Linux operating system product. It aggregates security data related to weaknesses within the kernel, distributions, and associated utilities provided by various Linux vendors and maintainers. The collection encompasses a wide range of vulnerability types, including memory corruption issues, privilege escalation flaws, information leaks, and denial-of-service conditions. The database covers historical records spanning several decades, reflecting the evolution of the Linux ecosystem from its early releases to modern stable and development branches. This extensive time range allows for the analysis of long-term security trends and the remediation status of legacy systems that remain in production environments. Visitors to this resource can track vendor-specific advisories to stay informed about patches and updates released by major Linux distribution maintainers. You can also use the page to understand the characteristics and impact of specific weakness classes as they manifest in the Linux environment. Additionally, the interface supports looking up a specific product’s vulnerability history, enabling security professionals to assess risk exposure and prioritize mitigation efforts for critical infrastructure components. The data is organized to facilitate efficient searching and correlation between weakness identifiers and affected software versions, ensuring that administrators and developers have access to comprehensive security insights necessary for maintaining system integrity and compliance.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2026-92501 ext4: drain in-flight DIO before buffered write fallback - - 2026-09-17
CVE-2026-92502 ext4: clear stale xarray tags on folios skipped during writeback - - 2026-09-17
CVE-2026-92500 ext4: use fsdata to track inline data write state and fix race - - 2026-09-17
CVE-2026-92498 wifi: ath6kl: avoid buffer overreads in WMI event handlers - - 2026-09-17
CVE-2026-92499 ext4: validate readdir offset before accessing dirent - - 2026-09-17
CVE-2026-92497 wifi: ath12k: Avoid buffer overread in ath12k_wmi_op_rx() - - 2026-09-17
CVE-2026-92496 wifi: ath11k: Avoid buffer overread in ath11k_wmi_tlv_op_rx() - - 2026-09-17
CVE-2026-92495 RDMA/bnxt_re: Clear VM_MAYWRITE on DBR/toggle page mmap - - 2026-09-17
CVE-2026-92494 ext4: fix buffer_head leak in ext4_init_orphan_info - - 2026-09-17
CVE-2026-92493 cpufreq: amd-pstate-ut: Skip tests when amd-pstate driver is not active - - 2026-09-17
CVE-2026-92492 cpufreq/amd-pstate: handle missing policy in dynamic EPP callbacks - - 2026-09-17
CVE-2026-92491 firmware: arm_scmi: Roll back partial protocol table registration - - 2026-09-17
CVE-2026-92490 firmware: arm_scmi: Unrequest devices if driver registration fails - - 2026-09-17
CVE-2026-92489 xfrm: Fix skb double-free in xfrm_dev_direct_output() 9.8 Critical 2026-09-17
CVE-2026-92488 RDMA/erdma: complete object teardown when the destroy command fails 7.0 High 2026-09-17
CVE-2026-92486 bpf: Fix CFI mismatch in task work callback - - 2026-09-17
CVE-2026-92487 exfat: fix valid_size extension over a shared writable mapping - - 2026-09-17
CVE-2026-92485 bpf: Fix WARNING in bpf_tracing_link_release 7.8 High 2026-09-17
CVE-2026-92484 cxl/region: Fix use-after-free in find_pos_and_ways() error path - - 2026-09-17
CVE-2026-92483 liveupdate: Remember FLB retrieve() status - - 2026-09-17
CVE-2026-92482 pinctrl: mediatek: use devm_gpiochip_add_data() for GPIO chip - - 2026-09-17
CVE-2026-92480 scsi: ufs: core: Validate string descriptors - - 2026-09-17
CVE-2026-92481 pinctrl: mediatek: free EINT resources on unbind - - 2026-09-17
CVE-2026-92479 scsi: ufs: Avoid NULL CQE dereference when reporting invalid tags - - 2026-09-17
CVE-2026-92477 scsi: ufs: debugfs: Reserve space for a string terminator - - 2026-09-17
CVE-2026-92478 scsi: ufs: core: Validate connected lane counts - - 2026-09-17
CVE-2026-92476 crypto: keembay - Initialize completion before requesting IRQ - - 2026-09-17
CVE-2026-90434 isofs: release zisofs block pointer buffer head - - 2026-09-17
CVE-2026-90435 RDMA/mlx5: Fix integer overflow of user QP buffer size 7.8 High 2026-09-17
CVE-2026-90433 spi: oc-tiny: switch to managed controller allocation - - 2026-09-17

All 17854 known CVE vulnerabilities affecting Linux with full Chinese analysis, references, and POCs where available.