Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17854

All 17854 CVE vulnerabilities found in Linux, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumeration (CWE) vulnerabilities affecting the Linux operating system product. It aggregates security data related to weaknesses within the kernel, distributions, and associated utilities provided by various Linux vendors and maintainers. The collection encompasses a wide range of vulnerability types, including memory corruption issues, privilege escalation flaws, information leaks, and denial-of-service conditions. The database covers historical records spanning several decades, reflecting the evolution of the Linux ecosystem from its early releases to modern stable and development branches. This extensive time range allows for the analysis of long-term security trends and the remediation status of legacy systems that remain in production environments. Visitors to this resource can track vendor-specific advisories to stay informed about patches and updates released by major Linux distribution maintainers. You can also use the page to understand the characteristics and impact of specific weakness classes as they manifest in the Linux environment. Additionally, the interface supports looking up a specific product’s vulnerability history, enabling security professionals to assess risk exposure and prioritize mitigation efforts for critical infrastructure components. The data is organized to facilitate efficient searching and correlation between weakness identifiers and affected software versions, ensuring that administrators and developers have access to comprehensive security insights necessary for maintaining system integrity and compliance.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2026-90008 scsi: megaraid_sas: Limit NVMe request size to the PRP chain frame 7.8 High 2026-09-16
CVE-2026-90007 scsi: pm8001: Use rollback index when freeing MSI-X vectors 7.8 High 2026-09-16
CVE-2026-90005 samples/damon/wsse: handle damon_start() failure - - 2026-09-16
CVE-2026-90006 samples/damon/mtier: handle damon_stop() failure - - 2026-09-16
CVE-2026-90004 mm/damon/core: handle region split failure in apply_min_nr_regions() - - 2026-09-16
CVE-2026-90002 ftrace: Take trace_array reference before accessing its ftrace_ops 7.8 High 2026-09-16
CVE-2026-90003 futex: Prevent rcuwait use-after-free during requeue PI 7.8 High 2026-09-16
CVE-2026-90001 HID: bpf: serialize device reference release in struct_ops destroy path 7.8 High 2026-09-16
CVE-2026-89999 HID: wacom: validate report length in wacom_intuos_pro2_bt_irq 8.1 High 2026-09-16
CVE-2026-90000 HID: rmi: fix OOB access with undersized RMI reports 8.8 High 2026-09-16
CVE-2026-89998 dm: fix race when loading and unloading a table 7.8 High 2026-09-16
CVE-2026-89996 dma-buf: dma-heap: don't publish fd before copy_to_user() succeeds - - 2026-09-16
CVE-2026-89997 dm: fix resume-vs-remove race 7.8 High 2026-09-16
CVE-2026-89995 dma-direct: return struct page from dma_direct_alloc_from_pool() 8.8 High 2026-09-16
CVE-2026-89994 dmaengine: fsl-edma: tracing: no ptr dereference during log output 7.8 High 2026-09-16
CVE-2026-89993 dmaengine: dw-edma: Initialize IRQ data before requesting IRQs - - 2026-09-16
CVE-2026-89992 cpuidle: dt_idle_genpd: kfree() the original name allocation 8.4 High 2026-09-16
CVE-2026-89991 bpf: Fix infinite loop in pcpu_freelist push with one possible CPU - - 2026-09-16
CVE-2026-89990 ceph: lock mutex in ceph_mds_check_access() 9.8 Critical 2026-09-16
CVE-2026-89989 ima: Check for ERR_PTR from dentry_path() in validate_hash_algo() - - 2026-09-16
CVE-2026-89988 kprobes: Protect kprobe_blacklist with RCU 7.8 High 2026-09-16
CVE-2026-89987 mm/huge_memory: transfer the pmd dirty bit to the folio on zap - - 2026-09-16
CVE-2026-89986 mm/mempolicy: fix sleeping allocation in alloc_pages_bulk_weighted_interleave() 7.8 High 2026-09-16
CVE-2026-89985 memcg: keep folio's objcg same as its node 7.8 High 2026-09-16
CVE-2026-89984 perf/x86/intel: Fix kernel address leakages in LBR stack - - 2026-09-16
CVE-2026-89983 i2c: core: fix debugfs UAF on adapter removal - - 2026-09-16
CVE-2026-89982 i2c: mux: Fix channel node leak on adapter add failure - - 2026-09-16
CVE-2026-89981 arm64: Don't read GMID_EL1 when MTE is disabled - - 2026-09-16
CVE-2026-89980 ALSA: harmony: initialize locks before requesting IRQ 8.4 High 2026-09-16
CVE-2026-89979 ALSA: pcm: Fix race between non-atomic ops and trigger-start 7.8 High 2026-09-16

All 17854 known CVE vulnerabilities affecting Linux with full Chinese analysis, references, and POCs where available.