Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17854

All 17854 CVE vulnerabilities found in Linux, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumeration (CWE) vulnerabilities affecting the Linux operating system product. It aggregates security data related to weaknesses within the kernel, distributions, and associated utilities provided by various Linux vendors and maintainers. The collection encompasses a wide range of vulnerability types, including memory corruption issues, privilege escalation flaws, information leaks, and denial-of-service conditions. The database covers historical records spanning several decades, reflecting the evolution of the Linux ecosystem from its early releases to modern stable and development branches. This extensive time range allows for the analysis of long-term security trends and the remediation status of legacy systems that remain in production environments. Visitors to this resource can track vendor-specific advisories to stay informed about patches and updates released by major Linux distribution maintainers. You can also use the page to understand the characteristics and impact of specific weakness classes as they manifest in the Linux environment. Additionally, the interface supports looking up a specific product’s vulnerability history, enabling security professionals to assess risk exposure and prioritize mitigation efforts for critical infrastructure components. The data is organized to facilitate efficient searching and correlation between weakness identifiers and affected software versions, ensuring that administrators and developers have access to comprehensive security insights necessary for maintaining system integrity and compliance.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2026-90160 lwt_bpf: Restore reserved headroom after xmit program - - 2026-09-17
CVE-2026-90159 bpf: Disallow bpf_{g,s}etsockopt() in cgroup UNIX getname hooks - - 2026-09-17
CVE-2026-90158 m68k: nfcon: Do not call console_is_registered() in nfcon_device() - - 2026-09-17
CVE-2026-90157 bpf: Reject negative optlen in cgroup getsockopt hook - - 2026-09-17
CVE-2026-90156 ksmbd: safely discard unregistered deferred locks - - 2026-09-17
CVE-2026-90155 ksmbd: detach blocked lock requests before freeing - - 2026-09-17
CVE-2026-90154 ksmbd: scope session state changes to bound connections - - 2026-09-17
CVE-2026-90153 ksmbd: bound smb_check_perm_dacl() ACE walks by DACL size 8.1 High 2026-09-17
CVE-2026-90152 smb/server: fix session leak in ksmbd_session_register() - - 2026-09-17
CVE-2026-90151 NFSv4: remove callback IDR entry on client allocation failure 9.8 Critical 2026-09-17
CVE-2026-90150 pnfs/blocklayout: Fix device leaks on parse failure - - 2026-09-17
CVE-2026-90149 NFSv4/flexfiles: fix NULL dereference for NFSv4.0 data servers 7.5 High 2026-09-17
CVE-2026-90148 NFSv4: Fix incorrect argument passed to nfs4_delete_lease() in nfs4_add_lease() - - 2026-09-17
CVE-2026-90146 bpf, xdp: move offload check into dev_xdp_install() 7.8 High 2026-09-17
CVE-2026-90147 clk: devres: fix cleanup in devm_clk_get_optional_enabled_with_rate() - - 2026-09-17
CVE-2026-90145 hinic3: Fix skb linearization mismatch and drop skb when skb_checksum_help() failed 7.1 High 2026-09-17
CVE-2026-90144 dpll: fix NULL deref in dpll_device_ops() during teardown race - - 2026-09-17
CVE-2026-90143 net: kcm: Hold RCU read lock while running BPF parser 7.8 High 2026-09-17
CVE-2026-90142 virtio_net: Fix resize of the RX ring 7.8 High 2026-09-17
CVE-2026-90141 ipvs: fix integer overflow in ftp helper port/address parsing 7.3 High 2026-09-17
CVE-2026-90140 cuse: wait for pending RCU callbacks on module exit - - 2026-09-17
CVE-2026-90138 vsock: don't check the listener's sk_err in vsock_accept() - - 2026-09-17
CVE-2026-90139 fuse: check for NULL root inode in fuse_fill_super_submount - - 2026-09-17
CVE-2026-90137 platform/x86: hp-bioscfg: fix password encoding bounds check 7.7 High 2026-09-17
CVE-2026-90135 net: add missing ref_tracker_dir_exit() to alloc_netdev_mqs() - - 2026-09-17
CVE-2026-90136 platform/x86/amd/hsmp: Reject negative power cap writes in hwmon - - 2026-09-17
CVE-2026-90134 ntfs: fix kmap_local_page() usage in compress - - 2026-09-17
CVE-2026-90133 ntfs: Fix index_root heap OOB write in ntfs_ir_to_ib() 7.8 High 2026-09-17
CVE-2026-90132 ntfs: reject unprivileged writes to reserved $LX* xattrs 7.1 High 2026-09-17
CVE-2026-90131 ntfs: serialize resident iomap reads with mrec_lock 7.1 High 2026-09-17

All 17854 known CVE vulnerabilities affecting Linux with full Chinese analysis, references, and POCs where available.