Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17854

All 17854 CVE vulnerabilities found in Linux, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumeration (CWE) vulnerabilities affecting the Linux operating system product. It aggregates security data related to weaknesses within the kernel, distributions, and associated utilities provided by various Linux vendors and maintainers. The collection encompasses a wide range of vulnerability types, including memory corruption issues, privilege escalation flaws, information leaks, and denial-of-service conditions. The database covers historical records spanning several decades, reflecting the evolution of the Linux ecosystem from its early releases to modern stable and development branches. This extensive time range allows for the analysis of long-term security trends and the remediation status of legacy systems that remain in production environments. Visitors to this resource can track vendor-specific advisories to stay informed about patches and updates released by major Linux distribution maintainers. You can also use the page to understand the characteristics and impact of specific weakness classes as they manifest in the Linux environment. Additionally, the interface supports looking up a specific product’s vulnerability history, enabling security professionals to assess risk exposure and prioritize mitigation efforts for critical infrastructure components. The data is organized to facilitate efficient searching and correlation between weakness identifiers and affected software versions, ensuring that administrators and developers have access to comprehensive security insights necessary for maintaining system integrity and compliance.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2026-89888 media: i2c: ov02a10: fix endpoint parsing use-after-free 7.8 High 2026-09-16
CVE-2026-89887 media: i2c: ov7740: fix use-after-destroy in remove 7.8 High 2026-09-16
CVE-2026-89885 media: platform: mtk-mdp3: Fix SCP device refcounting 8.4 High 2026-09-16
CVE-2026-89886 media: intel/ipu6: fix async notifier cleanup leak on parse error - - 2026-09-16
CVE-2026-89884 media: platform: mtk-mdp3: fix NULL deref on failed SCP lookup - - 2026-09-16
CVE-2026-89883 media: rc: sunxi-cir: Unregister rc device on probe failure 7.8 High 2026-09-16
CVE-2026-89882 media: rkvdec: hevc: guard INTER_REF_PIC_SET_PRED index underflow 7.8 High 2026-09-16
CVE-2026-89881 media: rtl2832_sdr: use vb2_video_unregister_device() on remove to fix DMA leak - - 2026-09-16
CVE-2026-89880 media: rtl2832_sdr: release URBs and stream buffers on start_streaming() failure 7.8 High 2026-09-16
CVE-2026-89879 media: s2255: bound JPEG frame size before copying into the buffer - - 2026-09-16
CVE-2026-89878 media: s2255: check firmware size before reading trailing marker - - 2026-09-16
CVE-2026-89877 media: saa7164: fix cleanup on resource allocation failure 8.4 High 2026-09-16
CVE-2026-89875 media: ti: vpe: quiesce overflow recovery before freeing streams 7.8 High 2026-09-16
CVE-2026-89876 media: tda18250: fix possible integer overflow - - 2026-09-16
CVE-2026-89874 media: v4l2-async: avoid deleting unlinked ASC entry on link error - - 2026-09-16
CVE-2026-89872 media: v4l2-fwnode: Fix fwnode leak in v4l2_fwnode_parse_link - - 2026-09-16
CVE-2026-89873 media: v4l2-ctrls: validate HEVC EXT SPS RPS counts 7.8 High 2026-09-16
CVE-2026-89871 media: video-i2c: fix kthread error pointer left in kthread_vid_cap on failure - - 2026-09-16
CVE-2026-89870 media: zoran: Avoid freeing a registered video_device twice 7.8 High 2026-09-16
CVE-2026-89869 media: qcom: iris: use disable_irq() during power-off - - 2026-09-16
CVE-2026-89868 media: chips-media: wave5: Add timeout while stop_streaming - - 2026-09-16
CVE-2026-89867 media: chips-media: wave5: Defer job_finish() only when a DEC_PIC was queued - - 2026-09-16
CVE-2026-89866 media: chips-media: wave5: Resume device before setting EOS flag - - 2026-09-16
CVE-2026-89865 scsi: qla2xxx: Zero SFP DMA buffer in FRU/I2C bsg handlers - - 2026-09-16
CVE-2026-89864 scsi: qla2xxx: Bound i2c->length in I2C bsg handlers - - 2026-09-16
CVE-2026-89863 scsi: qla2xxx: edif: Fix NULL pointer deref in RX SA delete check 7.5 High 2026-09-16
CVE-2026-89862 scsi: qla2xxx: Fix BSG job leak on validate flash image error path - - 2026-09-16
CVE-2026-89861 scsi: qla2xxx: Hold vport reference in qla24xx_report_id_acquisition() 8.1 High 2026-09-16
CVE-2026-89860 scsi: qla2xxx: Initialize NVMe abort_work once at submission 8.8 High 2026-09-16
CVE-2026-89859 scsi: qla2xxx: Zero dport diagnostics buffer to avoid info leak - - 2026-09-16

All 17854 known CVE vulnerabilities affecting Linux with full Chinese analysis, references, and POCs where available.