Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17854

All 17854 CVE vulnerabilities found in Linux, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumeration (CWE) vulnerabilities affecting the Linux operating system product. It aggregates security data related to weaknesses within the kernel, distributions, and associated utilities provided by various Linux vendors and maintainers. The collection encompasses a wide range of vulnerability types, including memory corruption issues, privilege escalation flaws, information leaks, and denial-of-service conditions. The database covers historical records spanning several decades, reflecting the evolution of the Linux ecosystem from its early releases to modern stable and development branches. This extensive time range allows for the analysis of long-term security trends and the remediation status of legacy systems that remain in production environments. Visitors to this resource can track vendor-specific advisories to stay informed about patches and updates released by major Linux distribution maintainers. You can also use the page to understand the characteristics and impact of specific weakness classes as they manifest in the Linux environment. Additionally, the interface supports looking up a specific product’s vulnerability history, enabling security professionals to assess risk exposure and prioritize mitigation efforts for critical infrastructure components. The data is organized to facilitate efficient searching and correlation between weakness identifiers and affected software versions, ensuring that administrators and developers have access to comprehensive security insights necessary for maintaining system integrity and compliance.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2026-90342 bpf: Fix mmap_lock deadlock on arena lock failure - - 2026-09-17
CVE-2026-90340 pinctrl: generic: free maps on pinctrl_generic_to_map() failure - - 2026-09-17
CVE-2026-90341 firmware: coreboot: Validate table bounds 7.7 High 2026-09-17
CVE-2026-90339 powerpc/syscall: Fix syscall skip handling for seccomp and ptrace - - 2026-09-17
CVE-2026-90338 serial: amba-pl011: keep console clock enabled for atomic writes - - 2026-09-17
CVE-2026-90337 serial: core: do fallible allocations before the console can be registered - - 2026-09-17
CVE-2026-90336 serial: core: clear freed pointers on uart_register_driver() failure - - 2026-09-17
CVE-2026-90335 tty: skip cdev_del() when no cdev is registered - - 2026-09-17
CVE-2026-90334 tty: clear cdev pointer after cdev_add() failure - - 2026-09-17
CVE-2026-90333 dm-integrity: replace forgeable discard filler with a keyed sector marker - - 2026-09-17
CVE-2026-90332 PCI: dwc: ep: Flush cached MSI write before unmapping the iATU 8.2 High 2026-09-17
CVE-2026-90331 HID: asus: refactor the two workqueues and init sequence - - 2026-09-17
CVE-2026-90330 HID: logitech-hidpp: Fix FF device cleanup on init failure - - 2026-09-17
CVE-2026-90328 HID: steam: Reject short reads - - 2026-09-17
CVE-2026-90329 HID: synchronize input before cleaning up a failed probe 8.8 High 2026-09-17
CVE-2026-90327 phonet: pep: do not write beyond optlen in getsockopt - - 2026-09-17
CVE-2026-90325 blk-cgroup: skip dying blkg in blkcg_activate_policy() 7.8 High 2026-09-17
CVE-2026-90326 blk-cgroup: fix race between policy activation and blkg destruction 7.8 High 2026-09-17
CVE-2026-90324 ublk: check import_ubuf() return value 7.8 High 2026-09-17
CVE-2026-90323 ublk: validate auto buf reg before taking uring_cmd - - 2026-09-17
CVE-2026-90322 ocfs2/cluster: keep heartbeat local node stable - - 2026-09-17
CVE-2026-90321 ocfs2: validate inline xattrs during inode block validation 7.8 High 2026-09-17
CVE-2026-90320 ocfs2: validate external xattr entries when reading metadata 7.8 High 2026-09-17
CVE-2026-90319 rapidio: clear mport->net when rio_add_net() fails - - 2026-09-17
CVE-2026-90317 bpf: Invalidate RCU pointers after final spin unlock 7.8 High 2026-09-17
CVE-2026-90318 fat: release buffer head after rebuilding parent - - 2026-09-17
CVE-2026-90316 drm/omap: dsi: Do not copy isr table 7.8 High 2026-09-17
CVE-2026-90315 PCI/sysfs: Add lockdown checks to legacy I/O and memory handlers - - 2026-09-17
CVE-2026-90314 remoteproc: fix OOB read via signed offset in rsc_table_for_each_entry() - - 2026-09-17
CVE-2026-90313 bpf, cgroup: Fix invalid storage access after __cgroup_bpf_attach failed - - 2026-09-17

All 17854 known CVE vulnerabilities affecting Linux with full Chinese analysis, references, and POCs where available.