Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17854

All 17854 CVE vulnerabilities found in Linux, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumeration (CWE) vulnerabilities affecting the Linux operating system product. It aggregates security data related to weaknesses within the kernel, distributions, and associated utilities provided by various Linux vendors and maintainers. The collection encompasses a wide range of vulnerability types, including memory corruption issues, privilege escalation flaws, information leaks, and denial-of-service conditions. The database covers historical records spanning several decades, reflecting the evolution of the Linux ecosystem from its early releases to modern stable and development branches. This extensive time range allows for the analysis of long-term security trends and the remediation status of legacy systems that remain in production environments. Visitors to this resource can track vendor-specific advisories to stay informed about patches and updates released by major Linux distribution maintainers. You can also use the page to understand the characteristics and impact of specific weakness classes as they manifest in the Linux environment. Additionally, the interface supports looking up a specific product’s vulnerability history, enabling security professionals to assess risk exposure and prioritize mitigation efforts for critical infrastructure components. The data is organized to facilitate efficient searching and correlation between weakness identifiers and affected software versions, ensuring that administrators and developers have access to comprehensive security insights necessary for maintaining system integrity and compliance.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2026-90311 thermal: hwmon: Remove hwmon class device along with its parent - - 2026-09-17
CVE-2026-90312 bpf: Check load-acquire src ptr type before the load 7.8 High 2026-09-17
CVE-2026-90309 RDMA/erdma: Hold CQ references when processing EQ events 7.8 High 2026-09-17
CVE-2026-90308 RDMA/erdma: Hold QP references for AE and CM processing 7.8 High 2026-09-17
CVE-2026-90307 RDMA/srp: fix heap information leak on a truncated SRP_CRED_REQ - - 2026-09-17
CVE-2026-90306 ARM: 9481/2: breakpoint: CFI breakpoints only on demand - - 2026-09-17
CVE-2026-90305 ARM: 9483/1: select HAVE_POSIX_CPU_TIMERS_TASK_WORK - - 2026-09-17
CVE-2026-90304 ARM: 9484/1: enable interrupts when unhandled user faults are triggered - - 2026-09-17
CVE-2026-90303 ARM: 9485/1: mm: acquire mmap write lock around show_pte() for user faults - - 2026-09-17
CVE-2026-90302 ocfs2: synchronize heartbeat callbacks with o2net teardown - - 2026-09-17
CVE-2026-90300 bpf: Clear buf on error in __bpf_get_task_stack - - 2026-09-17
CVE-2026-90301 ocfs2: o2hb: quiesce negotiate handlers and timeout work 8.1 High 2026-09-17
CVE-2026-90299 bpf: Fix sleepable check for tracing/lsm prog - - 2026-09-17
CVE-2026-90297 drm/sun4i: crtc: Propagate layer initialization error - - 2026-09-17
CVE-2026-90298 drm/sun4i: tcon: Drop TCON TOP device reference - - 2026-09-17
CVE-2026-90296 cpufreq: imx6q: fix devres accumulation across driver rebind - - 2026-09-17
CVE-2026-90294 IB/isert: delay the final Login Response until the session is registered 7.5 High 2026-09-17
CVE-2026-90295 cpufreq: imx6q: fix out-of-bounds write when probed more than once - - 2026-09-17
CVE-2026-90293 IB/isert: post the full-feature receive buffers after session registration 7.5 High 2026-09-17
CVE-2026-90292 RDMA/siw: Fix use-after-free in siw_accept() 7.8 High 2026-09-17
CVE-2026-90291 module/dups: Fix use-after-free in kmod_dup_req lifetime handling 7.8 High 2026-09-17
CVE-2026-90290 arm64: hibernate: Restore DAIF state on error - - 2026-09-17
CVE-2026-90288 phy: renesas: rcar-gen2: Fix double of_node_put on phy creation failure 7.4 High 2026-09-17
CVE-2026-90289 drm/amd/display: Resize MST HDCP per-connector arrays to 32 7.8 High 2026-09-17
CVE-2026-90287 phy: sunplus: fix error handling in sp_uphy_init() - - 2026-09-17
CVE-2026-90286 drm/amdgpu/gfx6: Use PFP on the compute queues too 8.8 High 2026-09-17
CVE-2026-90285 scsi: qla2xxx: Remove redundant VPD flash read in sysfs read path - - 2026-09-17
CVE-2026-90284 firmware_loader: do not queue completed sysfs fallback requests - - 2026-09-17
CVE-2026-90283 hugetlbfs: release subpool on fill_super failure - - 2026-09-17
CVE-2026-90282 phy: qcom: qmp-usb-legacy: Fix possible NULL-deref on early runtime suspend - - 2026-09-17

All 17854 known CVE vulnerabilities affecting Linux with full Chinese analysis, references, and POCs where available.