Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17854

All 17854 CVE vulnerabilities found in Linux, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumeration (CWE) vulnerabilities affecting the Linux operating system product. It aggregates security data related to weaknesses within the kernel, distributions, and associated utilities provided by various Linux vendors and maintainers. The collection encompasses a wide range of vulnerability types, including memory corruption issues, privilege escalation flaws, information leaks, and denial-of-service conditions. The database covers historical records spanning several decades, reflecting the evolution of the Linux ecosystem from its early releases to modern stable and development branches. This extensive time range allows for the analysis of long-term security trends and the remediation status of legacy systems that remain in production environments. Visitors to this resource can track vendor-specific advisories to stay informed about patches and updates released by major Linux distribution maintainers. You can also use the page to understand the characteristics and impact of specific weakness classes as they manifest in the Linux environment. Additionally, the interface supports looking up a specific product’s vulnerability history, enabling security professionals to assess risk exposure and prioritize mitigation efforts for critical infrastructure components. The data is organized to facilitate efficient searching and correlation between weakness identifiers and affected software versions, ensuring that administrators and developers have access to comprehensive security insights necessary for maintaining system integrity and compliance.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2026-90221 nfc: nci: fix use of uninitialized memory in CORE_INIT_RSP parsing - - 2026-09-17
CVE-2026-90220 ALSA: seq: Don't leak the extension cell pointer in the bounce payload - - 2026-09-17
CVE-2026-90219 RDMA/cxgb4: Free debugfs on registration failure - - 2026-09-17
CVE-2026-90218 RDMA/cma: Fix WARNING in res_to_rt - - 2026-09-17
CVE-2026-90216 ubi: Fix rollback for explicit UBI device numbers - - 2026-09-17
CVE-2026-90217 bpf: Compare iterator types during state pruning 7.8 High 2026-09-17
CVE-2026-90215 mtd: ubi: Release device reference on busy detach - - 2026-09-17
CVE-2026-90213 firewire: core: fix memory leak in error path of build_tree() - - 2026-09-17
CVE-2026-90214 ASoC: xilinx: formatter_pcm: fix stream_data leak on open error - - 2026-09-17
CVE-2026-90212 arm64/efi: Avoid voluntary preemption with efi_mm installed - - 2026-09-17
CVE-2026-90211 bpf, s390: Clear fetch destination on faulting arena atomic - - 2026-09-17
CVE-2026-90210 bpf: Fix UAF in bpf_trampoline_multi_attach_free on update failure 7.8 High 2026-09-17
CVE-2026-90209 s390/debug: Fix deadlock during unregister - - 2026-09-17
CVE-2026-90207 ALSA: seq: midi: Serialize input teardown with event_input 7.8 High 2026-09-17
CVE-2026-90208 clocksource/drivers/samsung_pwm: Switch to raw_spinlock_t type - - 2026-09-17
CVE-2026-90205 ocfs2: validate orphan slot during inode read 7.8 High 2026-09-17
CVE-2026-90206 nvmet: fix max_qid race between configfs and controller allocation - - 2026-09-17
CVE-2026-90204 ocfs2: validate DIO orphan slot during inode read 7.8 High 2026-09-17
CVE-2026-90203 Squashfs: check block offset is not negative 7.1 High 2026-09-17
CVE-2026-90202 scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers - - 2026-09-17
CVE-2026-90201 net: page_pool: fix UAF in __page_pool_release_netmem_dma on xa_cmpxchg race - - 2026-09-17
CVE-2026-90200 fs/ntfs3: fix integer overflow in MFT cluster validation - - 2026-09-17
CVE-2026-90199 fs/ntfs3: reject out-of-range evcn in mi_enum_attr() 7.8 High 2026-09-17
CVE-2026-90198 ALSA: core: Fix use-after-free in snd_card_do_free() - - 2026-09-17
CVE-2026-90197 HID: haptic: don't write an uninitialized value to unhandled usages - - 2026-09-17
CVE-2026-90196 ASoC: SOF: validate topology volume range before allocation - - 2026-09-17
CVE-2026-90195 riscv, bpf: Fix missing sign-ext for signed 1-byte and 2-byte kfunc args - - 2026-09-17
CVE-2026-90194 ACPI: scan: fix bus ID cleanup on device_add() failures - - 2026-09-17
CVE-2026-90193 mailbox: qcom-cpucp: fix PREEMPT_RT self-deadlock in IRQ handler - - 2026-09-17
CVE-2026-90192 mailbox: qcom-cpucp: handle NULL data in send_data callback - - 2026-09-17

All 17854 known CVE vulnerabilities affecting Linux with full Chinese analysis, references, and POCs where available.