Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17854

All 17854 CVE vulnerabilities found in Linux, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumeration (CWE) vulnerabilities affecting the Linux operating system product. It aggregates security data related to weaknesses within the kernel, distributions, and associated utilities provided by various Linux vendors and maintainers. The collection encompasses a wide range of vulnerability types, including memory corruption issues, privilege escalation flaws, information leaks, and denial-of-service conditions. The database covers historical records spanning several decades, reflecting the evolution of the Linux ecosystem from its early releases to modern stable and development branches. This extensive time range allows for the analysis of long-term security trends and the remediation status of legacy systems that remain in production environments. Visitors to this resource can track vendor-specific advisories to stay informed about patches and updates released by major Linux distribution maintainers. You can also use the page to understand the characteristics and impact of specific weakness classes as they manifest in the Linux environment. Additionally, the interface supports looking up a specific product’s vulnerability history, enabling security professionals to assess risk exposure and prioritize mitigation efforts for critical infrastructure components. The data is organized to facilitate efficient searching and correlation between weakness identifiers and affected software versions, ensuring that administrators and developers have access to comprehensive security insights necessary for maintaining system integrity and compliance.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2026-89768 fs: fix user path of nested backing files - - 2026-09-11
CVE-2026-89767 ovl: fix double end_creating() on the casefold-mismatch path 7.8 High 2026-09-11
CVE-2026-89766 pidfd: hold exec_update_lock around namespace ioctl - - 2026-09-11
CVE-2026-89765 timers/itimer: Zero-init old itimerval before copy to userspace - - 2026-09-11
CVE-2026-89764 rust: devres: fix race between concurrent revokers 7.8 High 2026-09-11
CVE-2026-89762 apparmor: fix cred UAF caused by begin_current_label_crit_section() 7.8 High 2026-09-11
CVE-2026-89763 KEYS: trusted: Fix TPM teardown ordering 7.8 High 2026-09-11
CVE-2026-89761 apparmor: fix out-of-bounds write when null terminating a label vec 7.8 High 2026-09-11
CVE-2026-89760 mm, swap: don't free a hibernation slot that is in the swap cache 7.8 High 2026-09-11
CVE-2026-89759 mm/kmemleak: avoid soft lockup when scanning task stacks - - 2026-09-11
CVE-2026-89758 mm/mempolicy: skip non-present PMDs when queueing folios 7.8 High 2026-09-11
CVE-2026-89757 mm/mglru: fix and remove redundant unevictable folio handling - - 2026-09-11
CVE-2026-89756 mm/migrate: report RCU-tasks quiescent states in migrate_pages_batch() - - 2026-09-11
CVE-2026-89754 mm/pagewalk: fix stale walk->action escaping walk_pmd_range() 7.8 High 2026-09-11
CVE-2026-89755 mm/migrate_device: clear stale mapping after freeing swapcache 7.8 High 2026-09-11
CVE-2026-89753 mm/vmscan: report RCU-tasks quiescent states in shrink_lruvec() - - 2026-09-11
CVE-2026-89752 mm: memcg: stop reclaim when a limit update is superseded - - 2026-09-11
CVE-2026-89751 x86/tdx: Fix off-by-one in port I/O handling - - 2026-09-11
CVE-2026-89750 tracing/user_events: Clear copied tracing state before fork duplication 7.8 High 2026-09-11
CVE-2026-89749 tracing: Fix crash passing ERR_PTR to kthread_stop() - - 2026-09-11
CVE-2026-89748 tracing: Fix retry exhaustion in simple ring buffer reader swap 7.8 High 2026-09-11
CVE-2026-89746 tracing: Fix use-after-free with same-name named triggers 7.8 High 2026-09-11
CVE-2026-89747 tracing: Fix use-after-free in trace_pipe read on sub-buffer order change 7.8 High 2026-09-11
CVE-2026-89745 debugfs: Fix lockdown check for mmap_prepare - - 2026-09-11
CVE-2026-89744 device property: fix infinite loop in fwnode_for_each_child_node() 8.4 High 2026-09-11
CVE-2026-89742 rapidio: mport_cdev: fix use-after-free in dma_req_free() 7.8 High 2026-09-11
CVE-2026-89743 misc: nsm: bound the device-reported response length 7.7 High 2026-09-11
CVE-2026-89741 Revert "media: v4l2-dev: fix error handling in __video_register_device()" 7.8 High 2026-09-11
CVE-2026-89739 usb: dwc3: gadget: Fix use-after-free in dwc3_gadget_free_endpoints due to race condition - - 2026-09-11
CVE-2026-89740 serial: imx: serialize imx_uart_ports[] lifetime - - 2026-09-11

All 17854 known CVE vulnerabilities affecting Linux with full Chinese analysis, references, and POCs where available.