Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17854

All 17854 CVE vulnerabilities found in Linux, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumeration (CWE) vulnerabilities affecting the Linux operating system product. It aggregates security data related to weaknesses within the kernel, distributions, and associated utilities provided by various Linux vendors and maintainers. The collection encompasses a wide range of vulnerability types, including memory corruption issues, privilege escalation flaws, information leaks, and denial-of-service conditions. The database covers historical records spanning several decades, reflecting the evolution of the Linux ecosystem from its early releases to modern stable and development branches. This extensive time range allows for the analysis of long-term security trends and the remediation status of legacy systems that remain in production environments. Visitors to this resource can track vendor-specific advisories to stay informed about patches and updates released by major Linux distribution maintainers. You can also use the page to understand the characteristics and impact of specific weakness classes as they manifest in the Linux environment. Additionally, the interface supports looking up a specific product’s vulnerability history, enabling security professionals to assess risk exposure and prioritize mitigation efforts for critical infrastructure components. The data is organized to facilitate efficient searching and correlation between weakness identifiers and affected software versions, ensuring that administrators and developers have access to comprehensive security insights necessary for maintaining system integrity and compliance.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2026-90037 NFSD: Prevent client use-after-free during close_lru reaping 9.8 Critical 2026-09-16
CVE-2026-90038 NFSD: Prevent client use-after-free during export state revocation 9.8 Critical 2026-09-16
CVE-2026-90036 NFSD: Prevent client use-after-free during blocked-lock reaping 9.8 Critical 2026-09-16
CVE-2026-90034 usb: image: mdc800: change kmalloc() to kzalloc() - - 2026-09-16
CVE-2026-90035 drm/amd/display: fix division by zero in get_estimated_bw() - - 2026-09-16
CVE-2026-90033 ALSA: usb-audio: fix OOB write in snd_usbmidi_us122l_output() - - 2026-09-16
CVE-2026-90032 media: usbtv: keep device alive while ALSA card exists 7.8 High 2026-09-16
CVE-2026-90031 usb-storage: ene_ub6250: fix race between scan work and probe - - 2026-09-16
CVE-2026-90030 usb: dwc3: clear forceRM when issuing EndTransfer 7.8 High 2026-09-16
CVE-2026-90029 usb: storage: realtek_cr: fix use-after-free on disconnect - - 2026-09-16
CVE-2026-90028 usb: typec: hd3ss3220: track VBUS enable state per consumer - - 2026-09-16
CVE-2026-90027 usb: typec: qcom-pmic-typec: disable cc_debounce_dwork on stop 7.8 High 2026-09-16
CVE-2026-90026 usb: typec: qcom-pmic: cancel reset_work on stop 7.8 High 2026-09-16
CVE-2026-90025 usb: typec: ucsi: displayport: Fix OOB altmode array index 7.7 High 2026-09-16
CVE-2026-90024 usb: gadget: midi2: Fix null-pointer dereference in f_midi2_free_ep_reqs - - 2026-09-16
CVE-2026-90023 usb: gadget: f_mass_storage: fix null pointer dereference in fsg_common_set_num_buffers() - - 2026-09-16
CVE-2026-90021 usb: gadget: f_midi: initialize work in f_midi_alloc() - - 2026-09-16
CVE-2026-90022 usb: gadget: f_midi2: fix use-after-free in string attribute show path 7.8 High 2026-09-16
CVE-2026-90020 USB: gadget: fix NULL pointer dereference in gadget_dev_ioctl() - - 2026-09-16
CVE-2026-90019 usb: gadget: fix null pointer dereference in usb_put_function_instance() - - 2026-09-16
CVE-2026-90018 staging: rtl8723bs: fix OOB read / stack overflow in rtw_get_wps_attr() 8.8 High 2026-09-16
CVE-2026-90017 staging: rtl8723bs: fix OOB read in rtw_action_frame_parse() 7.1 High 2026-09-16
CVE-2026-90016 staging: rtl8723bs: fix OOB read in rtw_restruct_wmm_ie() 7.1 High 2026-09-16
CVE-2026-90015 xhci: fix lost bounce buffers on TDs spanning several ring segments - - 2026-09-16
CVE-2026-90014 tracing: Have show_event_filters/triggers files take trace array ref 7.8 High 2026-09-16
CVE-2026-90013 tracing: Take trace_array reference when opening options file 7.8 High 2026-09-16
CVE-2026-90012 spi: Fix DMA mapping ownership on partial map failure 9.8 Critical 2026-09-16
CVE-2026-90011 scsi: target: iscsi: Reserve a terminator byte for the login payload 9.1 Critical 2026-09-16
CVE-2026-90010 scsi: bsg: Cap io_uring sense copy to max_response_len 7.8 High 2026-09-16
CVE-2026-90009 scsi: bsg: Fix TOCTOU in io_uring passthrough command setup 7.8 High 2026-09-16

All 17854 known CVE vulnerabilities affecting Linux with full Chinese analysis, references, and POCs where available.