Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17854

All 17854 CVE vulnerabilities found in Linux, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumeration (CWE) vulnerabilities affecting the Linux operating system product. It aggregates security data related to weaknesses within the kernel, distributions, and associated utilities provided by various Linux vendors and maintainers. The collection encompasses a wide range of vulnerability types, including memory corruption issues, privilege escalation flaws, information leaks, and denial-of-service conditions. The database covers historical records spanning several decades, reflecting the evolution of the Linux ecosystem from its early releases to modern stable and development branches. This extensive time range allows for the analysis of long-term security trends and the remediation status of legacy systems that remain in production environments. Visitors to this resource can track vendor-specific advisories to stay informed about patches and updates released by major Linux distribution maintainers. You can also use the page to understand the characteristics and impact of specific weakness classes as they manifest in the Linux environment. Additionally, the interface supports looking up a specific product’s vulnerability history, enabling security professionals to assess risk exposure and prioritize mitigation efforts for critical infrastructure components. The data is organized to facilitate efficient searching and correlation between weakness identifiers and affected software versions, ensuring that administrators and developers have access to comprehensive security insights necessary for maintaining system integrity and compliance.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2026-90251 Bluetooth: MSFT: validate evt_prefix_len against the response length - - 2026-09-17
CVE-2026-90250 bpf, cgroup: Fix storage null-ptr-deref after replacing prog - - 2026-09-17
CVE-2026-90249 iio: light: gp2ap002: Fix unbalanced runtime PM on repeated event writes - - 2026-09-17
CVE-2026-90248 net/sched: cls_api: fix teardown of an adopted proto on insert-race loss - - 2026-09-17
CVE-2026-90247 bpf: Fix mmap_lock leak in irq_work path - - 2026-09-17
CVE-2026-90246 apparmor: fix integer overflow in verify_tags() bounds check 7.1 High 2026-09-17
CVE-2026-90245 fbdev: kyro: Validate overlay viewport coordinates - - 2026-09-17
CVE-2026-90244 iommu/dma: Restore locking around msi_page_list 7.8 High 2026-09-17
CVE-2026-90242 iommu/vt-d: Fix iopf_refcount leak on RID domain replacement - - 2026-09-17
CVE-2026-90243 iommu/vt-d: Clear Present bit before tearing down copied context entry 8.1 High 2026-09-17
CVE-2026-90241 iommu/vt-d: Tear down scalable-mode context on probe failure 8.2 High 2026-09-17
CVE-2026-90239 media: amd: isp4: release partial allocations in isp4if_alloc_fw_gpumem() - - 2026-09-17
CVE-2026-90240 iommu/vt-d: Flush context cache with correct SID when tearing down aliases 8.8 High 2026-09-17
CVE-2026-90238 media: amd: isp4: fix self-deadlock in isp4sd_pwron_and_init() error path - - 2026-09-17
CVE-2026-90237 netfilter: nft_ct: move custom expectation support to helper 7.8 High 2026-09-17
CVE-2026-90236 NFSD: Release the export reference when reaping open stateids - - 2026-09-17
CVE-2026-90235 sunrpc: xprtsock: annotate shared socket callbacks with READ_ONCE/WRITE_ONCE 9.8 Critical 2026-09-17
CVE-2026-90234 NFS: Return a delegation the client fails to record 7.5 High 2026-09-17
CVE-2026-90233 nvme-pci: release descriptor pools on probe failure - - 2026-09-17
CVE-2026-90231 apparmor: fix unconfined user namespace restriction forced stack 8.4 High 2026-09-17
CVE-2026-90232 amt: Don't support cross-netns setup. - - 2026-09-17
CVE-2026-90230 nvmet: fix heap out-of-bounds read in nvmet_auth_negotiate() 9.1 Critical 2026-09-17
CVE-2026-90228 nvmet: fix NULL pointer dereference in nvmet_execute_identify_ns_zns() 7.5 High 2026-09-17
CVE-2026-90229 nvme-apple: Destroy the admin queue on removal 7.4 High 2026-09-17
CVE-2026-90227 nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() 7.8 High 2026-09-17
CVE-2026-90225 nfc: llcp: read llcp_sock->local under the socket lock in getsockopt 7.8 High 2026-09-17
CVE-2026-90226 nfc: llcp: avoid userspace overflow on invalid optlen - - 2026-09-17
CVE-2026-90224 nfc: nci: fix double completion race in nci_data_exchange_complete 7.5 High 2026-09-17
CVE-2026-90222 nfc: pn533: hold a reference to the request skb during send_frame - - 2026-09-17
CVE-2026-90223 nfc: llcp: bound SNL TLV parsing to the skb and add length checks 7.1 High 2026-09-17

All 17854 known CVE vulnerabilities affecting Linux with full Chinese analysis, references, and POCs where available.