Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17854

All 17854 CVE vulnerabilities found in Linux, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumeration (CWE) vulnerabilities affecting the Linux operating system product. It aggregates security data related to weaknesses within the kernel, distributions, and associated utilities provided by various Linux vendors and maintainers. The collection encompasses a wide range of vulnerability types, including memory corruption issues, privilege escalation flaws, information leaks, and denial-of-service conditions. The database covers historical records spanning several decades, reflecting the evolution of the Linux ecosystem from its early releases to modern stable and development branches. This extensive time range allows for the analysis of long-term security trends and the remediation status of legacy systems that remain in production environments. Visitors to this resource can track vendor-specific advisories to stay informed about patches and updates released by major Linux distribution maintainers. You can also use the page to understand the characteristics and impact of specific weakness classes as they manifest in the Linux environment. Additionally, the interface supports looking up a specific product’s vulnerability history, enabling security professionals to assess risk exposure and prioritize mitigation efforts for critical infrastructure components. The data is organized to facilitate efficient searching and correlation between weakness identifiers and affected software versions, ensuring that administrators and developers have access to comprehensive security insights necessary for maintaining system integrity and compliance.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2026-90191 mailbox: riscv-sbi-mpxy: validate RPMI notification lengths 8.4 High 2026-09-17
CVE-2026-90190 null_blk: use DEFINE_MUTEX for the file-scope mutex - - 2026-09-17
CVE-2026-90189 null_blk: register configfs subsystem after creating default devices - - 2026-09-17
CVE-2026-90187 null_blk: free zones array on device power-off - - 2026-09-17
CVE-2026-90188 null_blk: free global tag_set on init error path - - 2026-09-17
CVE-2026-90186 null_blk: reject per-device queue resize for shared tag set - - 2026-09-17
CVE-2026-90185 null_blk: serialize configfs attribute stores with the lock - - 2026-09-17
CVE-2026-90184 null_blk: serialize configfs attribute updates with device setup - - 2026-09-17
CVE-2026-90183 blk-iolatency: clear delay state when freeing policy data - - 2026-09-17
CVE-2026-90181 ublk: avoid teardown retry loop on xarray allocation failure - - 2026-09-17
CVE-2026-90182 blk-iocost: clear delay state when freeing policy data - - 2026-09-17
CVE-2026-90180 block: mtip32xx: synchronize ioctls with device removal - - 2026-09-17
CVE-2026-90179 apparmor: fix deadlock in complain-mode change_hat - - 2026-09-17
CVE-2026-90178 hwmon: (coretemp) Fix core_data leak on CPUs without PTS - - 2026-09-17
CVE-2026-90177 bpf: Check pointer type for all atomic RMW paths 7.8 High 2026-09-17
CVE-2026-90175 smb: server: fix leak of ksmbd_ipc_login_request_ext() returned buffer - - 2026-09-17
CVE-2026-90176 ksmbd: Do not skip lock checks for single-byte ranges 8.1 High 2026-09-17
CVE-2026-90174 ksmbd: fix slab-out-of-bounds read in ksmbd_alloc_user() 7.1 High 2026-09-17
CVE-2026-90172 smb: smbdirect: destroy QP before mem pools on accept failure 7.5 High 2026-09-17
CVE-2026-90173 smb: smbdirect: free completion queues with ib_free_cq() 9.8 Critical 2026-09-17
CVE-2026-90171 smb: smbdirect: release pending child sockets outside the handler lock - - 2026-09-17
CVE-2026-90170 ksmbd: validate ipc response length before dereferencing its fields - - 2026-09-17
CVE-2026-90169 ksmbd: free preauth sessions on connection teardown - - 2026-09-17
CVE-2026-90167 ksmbd: serialize oplock close with pending break ownership - - 2026-09-17
CVE-2026-90166 smb/server: fix null-ptr-deref in ksmbd_ipc_tree_connect_request() - - 2026-09-17
CVE-2026-90164 smb/server: abort initialization when proc setup fails - - 2026-09-17
CVE-2026-90165 smb/server: fix invalid pointer dereference in ksmbd_stop_durable_scavenger() - - 2026-09-17
CVE-2026-90163 smb/server: call ksmbd_proc_cleanup() on module init failure - - 2026-09-17
CVE-2026-90162 ksmbd: defer publishing granted locks to prevent UAF/double-free race 8.8 High 2026-09-17
CVE-2026-90161 erofs: fix interlaced ztailpacking pclusters 7.1 High 2026-09-17

All 17854 known CVE vulnerabilities affecting Linux with full Chinese analysis, references, and POCs where available.