Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17854

All 17854 CVE vulnerabilities found in Linux, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumeration (CWE) vulnerabilities affecting the Linux operating system product. It aggregates security data related to weaknesses within the kernel, distributions, and associated utilities provided by various Linux vendors and maintainers. The collection encompasses a wide range of vulnerability types, including memory corruption issues, privilege escalation flaws, information leaks, and denial-of-service conditions. The database covers historical records spanning several decades, reflecting the evolution of the Linux ecosystem from its early releases to modern stable and development branches. This extensive time range allows for the analysis of long-term security trends and the remediation status of legacy systems that remain in production environments. Visitors to this resource can track vendor-specific advisories to stay informed about patches and updates released by major Linux distribution maintainers. You can also use the page to understand the characteristics and impact of specific weakness classes as they manifest in the Linux environment. Additionally, the interface supports looking up a specific product’s vulnerability history, enabling security professionals to assess risk exposure and prioritize mitigation efforts for critical infrastructure components. The data is organized to facilitate efficient searching and correlation between weakness identifiers and affected software versions, ensuring that administrators and developers have access to comprehensive security insights necessary for maintaining system integrity and compliance.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2026-90281 phy: qcom: snps-femto-v2: Fix possible NULL-deref on early runtime suspend - - 2026-09-17
CVE-2026-90280 phy: qcom: qmp-usb: Fix possible NULL-deref on early runtime suspend - - 2026-09-17
CVE-2026-90279 md/raid5: round bitmap stripes with sector division - - 2026-09-17
CVE-2026-90278 md: wait for behind writes before destroying bitmap - - 2026-09-17
CVE-2026-90277 md/md-llbitmap: prevent create failure bitmap UAF - - 2026-09-17
CVE-2026-90276 md/md-llbitmap: stop daemon timer rearm on destroy - - 2026-09-17
CVE-2026-90275 md/raid1: don't set array_frozen in raid1_takeover() - - 2026-09-17
CVE-2026-90274 coresight: etm4x: fix underflow for usage of (nrseqstate - 1) - - 2026-09-17
CVE-2026-90273 coresight: etm4x: missing cscfg_csdev_disable_active_config() in perf enable - - 2026-09-17
CVE-2026-90272 perf: arm_pmuv3: Zero initialize hw_id branch stack field - - 2026-09-17
CVE-2026-90271 arm_mpam: Fix a NULL pointer dereference on unbinding after an error interrupt - - 2026-09-17
CVE-2026-90270 arm_mpam: Disable driver unbind to avoid UAF - - 2026-09-17
CVE-2026-90269 bpf: Reject load-acquire from pointers requiring fault protection - - 2026-09-17
CVE-2026-90267 scsi: sd: Fix special_vec mempool leak when scsi_alloc_sgtables() fails - - 2026-09-17
CVE-2026-90268 scsi: sd: Fix error handling in sd_probe() after large pool creation failure 8.1 High 2026-09-17
CVE-2026-90266 btrfs: zoned: don't force read-only on transient -EAGAIN from reloc merge - - 2026-09-17
CVE-2026-90264 btrfs: always wait for ordered extents to avoid OE races - - 2026-09-17
CVE-2026-90265 btrfs: defrag: fix deadlock between defrag and delalloc space reservation - - 2026-09-17
CVE-2026-90263 btrfs: check if root is readonly when setting posix acl - - 2026-09-17
CVE-2026-90262 btrfs: retry verity reads for not-uptodate Merkle folios - - 2026-09-17
CVE-2026-90261 btrfs: zoned: flush active metadata block group at btree_writepages() start - - 2026-09-17
CVE-2026-90260 btrfs: zoned: don't clobber the extent buffer when zeroing it out 7.1 High 2026-09-17
CVE-2026-90259 btrfs: qgroup: fix a wrong length calculation in qgroup_free_reserved_data() - - 2026-09-17
CVE-2026-90258 pinctrl: airoha: add missed IRQ resource helpers - - 2026-09-17
CVE-2026-90257 Bluetooth: virtio_bt: avoid OOB read of build info string - - 2026-09-17
CVE-2026-90255 Bluetooth: hci_conn: fix the SCO setup context lifetime 8.8 High 2026-09-17
CVE-2026-90256 Bluetooth: L2CAP: use proto_lock for l2cap_data to fix l2cap_disconn_ind 8.8 High 2026-09-17
CVE-2026-90254 Bluetooth: hci_sync: free the advertising instance on the failure and cancel paths - - 2026-09-17
CVE-2026-90252 Bluetooth: MGMT: free the HCI command when it is cancelled - - 2026-09-17
CVE-2026-90253 Bluetooth: MGMT: free the mesh send cancel command when it is cancelled - - 2026-09-17

All 17854 known CVE vulnerabilities affecting Linux with full Chinese analysis, references, and POCs where available.