Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17854

All 17854 CVE vulnerabilities found in Linux, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumeration (CWE) vulnerabilities affecting the Linux operating system product. It aggregates security data related to weaknesses within the kernel, distributions, and associated utilities provided by various Linux vendors and maintainers. The collection encompasses a wide range of vulnerability types, including memory corruption issues, privilege escalation flaws, information leaks, and denial-of-service conditions. The database covers historical records spanning several decades, reflecting the evolution of the Linux ecosystem from its early releases to modern stable and development branches. This extensive time range allows for the analysis of long-term security trends and the remediation status of legacy systems that remain in production environments. Visitors to this resource can track vendor-specific advisories to stay informed about patches and updates released by major Linux distribution maintainers. You can also use the page to understand the characteristics and impact of specific weakness classes as they manifest in the Linux environment. Additionally, the interface supports looking up a specific product’s vulnerability history, enabling security professionals to assess risk exposure and prioritize mitigation efforts for critical infrastructure components. The data is organized to facilitate efficient searching and correlation between weakness identifiers and affected software versions, ensuring that administrators and developers have access to comprehensive security insights necessary for maintaining system integrity and compliance.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2026-90432 sched_ext: Abort directly from the hardlockup handler - - 2026-09-17
CVE-2026-90431 remoteproc: Prevent crash handling to race with rproc_del() - - 2026-09-17
CVE-2026-90430 iommu/tegra241-cmdqv: Publish an LVCMDQ only after it is fully initialized - - 2026-09-17
CVE-2026-90428 iommu/tegra241-cmdqv: Don't run the error ISR before probe sets up vintfs - - 2026-09-17
CVE-2026-90429 iommu/tegra241-cmdqv: Synchronize the error ISR against VINTF (de)init 7.8 High 2026-09-17
CVE-2026-90427 iommu/tegra241-cmdqv: Don't fall back to a freed smmu after devm_krealloc() 7.4 High 2026-09-17
CVE-2026-90425 iommu/tegra241-cmdqv: Require exactly one Stream ID for a vSID 8.8 High 2026-09-17
CVE-2026-90426 iommu/tegra241-cmdqv: Free the error IRQ before tearing down VINTFs - - 2026-09-17
CVE-2026-90424 iommu/tegra241-cmdqv: Fix VINTF0 leak on the init-failure path - - 2026-09-17
CVE-2026-90423 RDMA/rxe: Fix UAF in ODP init error-handling path 7.8 High 2026-09-17
CVE-2026-90422 clk: mediatek: pllfh: Fix IO remapping leak in register_pllfhs error path - - 2026-09-17
CVE-2026-90420 nilfs2: fix infinite loop in nilfs_clean_segments() - - 2026-09-17
CVE-2026-90421 PCI: Fix UAF when probe runs concurrent to dyn ID removal - - 2026-09-17
CVE-2026-90419 nilfs2: prevent out-of-bounds read in super root block parsing 7.1 High 2026-09-17
CVE-2026-90418 nilfs2: fix BUG in nilfs_copy_dirty_pages() on dirty state mismatch - - 2026-09-17
CVE-2026-90417 RDMA/cxgb4: Fix dereg_skb leak and double free in write_tpt_entry() - - 2026-09-17
CVE-2026-90416 RDMA/mlx5: Fix stack out-of-bounds read in cc_params debugfs - - 2026-09-17
CVE-2026-90415 RDMA/cxgb4: free STAG index when TPT entry write fails - - 2026-09-17
CVE-2026-90414 IB/isert: reject PDUs declaring more data than was received 9.1 Critical 2026-09-17
CVE-2026-90412 nvmet: fix return status of RMI log page on allocation failure - - 2026-09-17
CVE-2026-90413 IB/isert: reject login PDUs declaring more data than was received 9.1 Critical 2026-09-17
CVE-2026-90411 nvme-fc: unmap cmd_iu DMA on rsp_iu mapping failure in init_request - - 2026-09-17
CVE-2026-90409 drm/panthor: Add vm_bind region with kbo range overlap check - - 2026-09-17
CVE-2026-90410 spi: davinci: switch to managed controller allocation - - 2026-09-17
CVE-2026-90408 wifi: ath12k: fix overreads in ath12k_wmi_process_csa_switch_count_event() 7.7 High 2026-09-17
CVE-2026-90407 wifi: ath11k: fix overreads in ath11k_wmi_process_csa_switch_count_event() 7.7 High 2026-09-17
CVE-2026-90406 media: qcom: iris: handle runtime PM resume failure in core deinit - - 2026-09-17
CVE-2026-90405 media: stm32: dcmi: fix some error handling bugs in probe() - - 2026-09-17
CVE-2026-90404 platform/chrome: cros_ec_debugfs: Unregister panic notifier - - 2026-09-17
CVE-2026-90403 wifi: rtlwifi: pci: fix error path in rtl_pci_probe() 7.0 High 2026-09-17

All 17854 known CVE vulnerabilities affecting Linux with full Chinese analysis, references, and POCs where available.