Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17854

All 17854 CVE vulnerabilities found in Linux, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumeration (CWE) vulnerabilities affecting the Linux operating system product. It aggregates security data related to weaknesses within the kernel, distributions, and associated utilities provided by various Linux vendors and maintainers. The collection encompasses a wide range of vulnerability types, including memory corruption issues, privilege escalation flaws, information leaks, and denial-of-service conditions. The database covers historical records spanning several decades, reflecting the evolution of the Linux ecosystem from its early releases to modern stable and development branches. This extensive time range allows for the analysis of long-term security trends and the remediation status of legacy systems that remain in production environments. Visitors to this resource can track vendor-specific advisories to stay informed about patches and updates released by major Linux distribution maintainers. You can also use the page to understand the characteristics and impact of specific weakness classes as they manifest in the Linux environment. Additionally, the interface supports looking up a specific product’s vulnerability history, enabling security professionals to assess risk exposure and prioritize mitigation efforts for critical infrastructure components. The data is organized to facilitate efficient searching and correlation between weakness identifiers and affected software versions, ensuring that administrators and developers have access to comprehensive security insights necessary for maintaining system integrity and compliance.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2026-89978 accel/amdxdna: return early from a zero-length flush - - 2026-09-16
CVE-2026-89976 accel/ethosu: fix job completion fence cleanup - - 2026-09-16
CVE-2026-89977 accel/ethosu: check MMIO mapping errors in probe - - 2026-09-16
CVE-2026-89975 nvme-fabrics: fix DHCHAP secret leak on parse failure - - 2026-09-16
CVE-2026-89974 nvme-fc: fix double free of fabrics options when nvme_add_ctrl() fails 7.5 High 2026-09-16
CVE-2026-89972 nvme: add missing SRCU grace period in error path 9.8 Critical 2026-09-16
CVE-2026-89973 nvme-tcp: check the data direction of a C2HData PDU 8.2 High 2026-09-16
CVE-2026-89971 nvme: skip the zoned limits update if the zone info query failed 7.5 High 2026-09-16
CVE-2026-89969 nvmet-tcp: fix out-of-bounds write when receiving an over-long PDU 9.8 Critical 2026-09-16
CVE-2026-89970 nvmet-auth: Synchronize timeout work during SQ teardown 9.8 Critical 2026-09-16
CVE-2026-89968 nvmet-tcp: reject unsolicited H2CData PDUs 7.5 High 2026-09-16
CVE-2026-89967 mm/migrate_device: avoid out-of-bounds writes for compound folios 7.8 High 2026-09-16
CVE-2026-89966 mm/hugetlb_cma: fix null nodemask dereference in hugetlb_cma_alloc_frozen_folio - - 2026-09-16
CVE-2026-89965 nvdimm/btt: reject an arena whose nfree is below the lane count 7.8 High 2026-09-16
CVE-2026-89964 parisc: eisa: Fix infinite loop when parsing invalid IRQ value - - 2026-09-16
CVE-2026-89963 powerpc/kexec_file: Fix null-ptr-def in extra size calculation - - 2026-09-16
CVE-2026-89962 powerpc/kexec_file: Prevent kexec range truncation - - 2026-09-16
CVE-2026-89961 powerpc/mm: fix wrong addr_pfn tracking in compound vmemmap population 7.8 High 2026-09-16
CVE-2026-89960 s390/vfio-ap: fix stale pqap_hook pointer on error in vfio_ap_mdev_set_kvm() 8.8 High 2026-09-16
CVE-2026-89959 s390/vfio-ap: Fix control domain removal in vfio_ap_mdev_cfg_remove 8.8 High 2026-09-16
CVE-2026-89957 s390/vfio-ap: Fix hot-unplug skipped when last AP adapter or domain removed 8.8 High 2026-09-16
CVE-2026-89958 s390/vfio-ap: Fix dereference matrix_mdev->kvm without checking for NULL - - 2026-09-16
CVE-2026-89956 s390/vfio-ap: Fix missing lock required to access list of ap_matrix_mdev objects - - 2026-09-16
CVE-2026-89955 s390/vfio-ap: Fix NULL deref in status_show() during queue probe - - 2026-09-16
CVE-2026-89954 mtd: afs: validate v2 image info bounds 8.0 High 2026-09-16
CVE-2026-89953 mtd: mtdoops: free page bitmap when the backing MTD is removed - - 2026-09-16
CVE-2026-89952 mtd: rawnand: validate ONFI extended parameter page sections - - 2026-09-16
CVE-2026-89951 batman-adv: fix stale receive device on merged fragments 8.8 High 2026-09-16
CVE-2026-89949 batman-adv: dat: avoid unaligned fault in IP extraction - - 2026-09-16
CVE-2026-89950 batman-adv: mcast: linearize skbuff for packet generation - - 2026-09-16

All 17854 known CVE vulnerabilities affecting Linux with full Chinese analysis, references, and POCs where available.