Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17854

All 17854 CVE vulnerabilities found in Linux, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumeration (CWE) vulnerabilities affecting the Linux operating system product. It aggregates security data related to weaknesses within the kernel, distributions, and associated utilities provided by various Linux vendors and maintainers. The collection encompasses a wide range of vulnerability types, including memory corruption issues, privilege escalation flaws, information leaks, and denial-of-service conditions. The database covers historical records spanning several decades, reflecting the evolution of the Linux ecosystem from its early releases to modern stable and development branches. This extensive time range allows for the analysis of long-term security trends and the remediation status of legacy systems that remain in production environments. Visitors to this resource can track vendor-specific advisories to stay informed about patches and updates released by major Linux distribution maintainers. You can also use the page to understand the characteristics and impact of specific weakness classes as they manifest in the Linux environment. Additionally, the interface supports looking up a specific product’s vulnerability history, enabling security professionals to assess risk exposure and prioritize mitigation efforts for critical infrastructure components. The data is organized to facilitate efficient searching and correlation between weakness identifiers and affected software versions, ensuring that administrators and developers have access to comprehensive security insights necessary for maintaining system integrity and compliance.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2026-89918 KVM: arm64: Correctly handle end of VA space TLBI invalidation 9.3 Critical 2026-09-16
CVE-2026-89917 KVM: arm64: Handle VNCR TLB invalidation race with vcpu_put() VNCR unmapping - - 2026-09-16
CVE-2026-89916 KVM: arm64: Make VNCR invalidation participate in MMU invalidation retry 9.3 Critical 2026-09-16
CVE-2026-89914 KVM: arm64: Sign-extend VA for range-based TLBI invalidation 9.3 Critical 2026-09-16
CVE-2026-89915 KVM: arm64: Remove VM-wide VNCR mapping counter 9.3 Critical 2026-09-16
CVE-2026-89913 KVM: arm64: vgic-v3: take an LPI reference in vgic_v3_save_pending_tables 8.8 High 2026-09-16
CVE-2026-89911 KVM: arm64: Correctly cap TLBI Range to the architural limit 7.9 High 2026-09-16
CVE-2026-89912 KVM: arm64: vgic-its: Don't dereference a NULL collection on ITT save 7.1 High 2026-09-16
CVE-2026-89910 LoongArch: KVM: Fix uninitialized stack variable issue with dmsintc 7.3 High 2026-09-16
CVE-2026-89908 LoongArch: KVM: Preserve memslot arch flags on KVM_MR_FLAGS_ONLY 8.8 High 2026-09-16
CVE-2026-89909 LoongArch: KVM: Free init resources if kvm_init() fails - - 2026-09-16
CVE-2026-89907 LoongArch: KVM: Validate MSI data before routing it to EIOINTC 8.8 High 2026-09-16
CVE-2026-89906 LoongArch: BPF: Refactor jump offset calculation in tail call 7.8 High 2026-09-16
CVE-2026-89904 LoongArch: Fix acpi_package_ids[] array overflow 8.4 High 2026-09-16
CVE-2026-89905 LoongArch: BPF: Move arena register slot below TCC context - - 2026-09-16
CVE-2026-89903 LoongArch: Do not save/restore percpu base register in rethook trampoline 7.8 High 2026-09-16
CVE-2026-89902 LoongArch: Avoid preempt count underflow without probe 7.8 High 2026-09-16
CVE-2026-89901 media: airspy: use vb2_video_unregister_device() on disconnect to fix NULL deref - - 2026-09-16
CVE-2026-89900 media: cec: core: Fix kmemleak due to missed rc_free_device() call - - 2026-09-16
CVE-2026-89899 media: cec: disable delayed work before freeing an interrupted transmit 7.8 High 2026-09-16
CVE-2026-89898 media: cec: extron-da-hd-4k-plus: add sanity check 8.8 High 2026-09-16
CVE-2026-89897 media: cec: Serialize exclusive follower delivery 7.5 High 2026-09-16
CVE-2026-89896 media: cedrus: fix memory leak in cedrus_init_ctrls() - - 2026-09-16
CVE-2026-89895 media: cobalt: Avoid freeing ALSA private data twice - - 2026-09-16
CVE-2026-89894 media: cx231xx: reject geometry changes while the VBI queue is busy 7.8 High 2026-09-16
CVE-2026-89892 media: em28xx: defer audio-only extension registration - - 2026-09-16
CVE-2026-89893 media: cx23885: cancel NetUP CI work before teardown 7.8 High 2026-09-16
CVE-2026-89891 media: em28xx: fix use-after-free of dev_next->devlist on disconnect - - 2026-09-16
CVE-2026-89890 media: go7007: defer the ALSA v4l2 put until card release 7.8 High 2026-09-16
CVE-2026-89889 media: i2c: imx415: Release runtime PM reference on VBLANK error - - 2026-09-16

All 17854 known CVE vulnerabilities affecting Linux with full Chinese analysis, references, and POCs where available.