Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17854

All 17854 CVE vulnerabilities found in Linux, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumeration (CWE) vulnerabilities affecting the Linux operating system product. It aggregates security data related to weaknesses within the kernel, distributions, and associated utilities provided by various Linux vendors and maintainers. The collection encompasses a wide range of vulnerability types, including memory corruption issues, privilege escalation flaws, information leaks, and denial-of-service conditions. The database covers historical records spanning several decades, reflecting the evolution of the Linux ecosystem from its early releases to modern stable and development branches. This extensive time range allows for the analysis of long-term security trends and the remediation status of legacy systems that remain in production environments. Visitors to this resource can track vendor-specific advisories to stay informed about patches and updates released by major Linux distribution maintainers. You can also use the page to understand the characteristics and impact of specific weakness classes as they manifest in the Linux environment. Additionally, the interface supports looking up a specific product’s vulnerability history, enabling security professionals to assess risk exposure and prioritize mitigation efforts for critical infrastructure components. The data is organized to facilitate efficient searching and correlation between weakness identifiers and affected software versions, ensuring that administrators and developers have access to comprehensive security insights necessary for maintaining system integrity and compliance.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2026-90402 bus: mhi: host: Fix controller cleanup on EDL sysfs failure 7.0 High 2026-09-17
CVE-2026-90401 md: remove REQ_NOWAIT support from raid1/10/456 7.1 High 2026-09-17
CVE-2026-90400 md: recheck spare changes before starting sync - - 2026-09-17
CVE-2026-90399 wifi: ath12k: fix stride mismatch in mac_phy_caps_parse() 8.4 High 2026-09-17
CVE-2026-90398 wifi: ath11k: fix stride mismatch in mac_phy_caps_parse() 8.4 High 2026-09-17
CVE-2026-90397 firmware: qcom: scm: Fix NULL dereference in IRQ handler before __scm is published - - 2026-09-17
CVE-2026-90395 power: supply: isp1704_charger: cancel work on remove - - 2026-09-17
CVE-2026-90396 block: fix dio leak on metadata mapping error - - 2026-09-17
CVE-2026-90394 power: supply: sc2731_charger: cancel work on remove - - 2026-09-17
CVE-2026-90392 bpf: Fix potential UAF when reading bpf link info 7.8 High 2026-09-17
CVE-2026-90393 bpf: Fix potential UAF in bpf_netns_link_update_prog - - 2026-09-17
CVE-2026-90391 lib/test_hmm: fail dmirror_fault() when the mirrored mm is gone - - 2026-09-17
CVE-2026-90389 md: scope memalloc_noio to allocation critical sections - - 2026-09-17
CVE-2026-90390 md/bitmap: resume array on backlog_store() error path - - 2026-09-17
CVE-2026-90388 iommu/dma: Check atomic pool allocation result directly 7.8 High 2026-09-17
CVE-2026-90386 i3c: dw: avoid shift-out-of-bounds when DAA assigns no devices - - 2026-09-17
CVE-2026-90387 swiotlb: Preserve allocation virtual address for dynamic pools 7.8 High 2026-09-17
CVE-2026-90384 iomap: release the folio batch on iomap callback failures - - 2026-09-17
CVE-2026-90385 md/raid1: create serial pool adding rdev to array with serialize_policy=1 - - 2026-09-17
CVE-2026-90383 misc: sgi-gru: remove interrupt-context page-table walks 7.8 High 2026-09-17
CVE-2026-90381 wifi: mt76: fix handling channel context with different bands in mt76_switch_vif_chanctx() 8.8 High 2026-09-17
CVE-2026-90382 wifi: mt76: mt76x02: do not WARN on invalid rx descriptor length - - 2026-09-17
CVE-2026-90380 wifi: mt76: mt792x: fix use-after-free in mt76_rx_poll_complete 8.8 High 2026-09-17
CVE-2026-90378 wifi: mt76: mt792x: Fix memory leak in SDIO TX path - - 2026-09-17
CVE-2026-90379 wifi: mt76: mt7921: Add PCIe AER handler support to prevent system crash 8.8 High 2026-09-17
CVE-2026-90377 wifi: mt76: fix RX data queuing of RRO 3.0 - - 2026-09-17
CVE-2026-90376 wifi: mt76: mt7996: fix MLD ID in MAC TXD and HIF TXP - - 2026-09-17
CVE-2026-90375 wifi: mt76: fix non-AQL packet accounting for MLO stations - - 2026-09-17
CVE-2026-90374 wifi: mt76: mt7996: validate RX band_idx before dereferencing phys[] - - 2026-09-17
CVE-2026-90373 wifi: mt76: mt7915: clear wcid mask under mutex after RCU pointer clear - - 2026-09-17

All 17854 known CVE vulnerabilities affecting Linux with full Chinese analysis, references, and POCs where available.