Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17854

All 17854 CVE vulnerabilities found in Linux, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumeration (CWE) vulnerabilities affecting the Linux operating system product. It aggregates security data related to weaknesses within the kernel, distributions, and associated utilities provided by various Linux vendors and maintainers. The collection encompasses a wide range of vulnerability types, including memory corruption issues, privilege escalation flaws, information leaks, and denial-of-service conditions. The database covers historical records spanning several decades, reflecting the evolution of the Linux ecosystem from its early releases to modern stable and development branches. This extensive time range allows for the analysis of long-term security trends and the remediation status of legacy systems that remain in production environments. Visitors to this resource can track vendor-specific advisories to stay informed about patches and updates released by major Linux distribution maintainers. You can also use the page to understand the characteristics and impact of specific weakness classes as they manifest in the Linux environment. Additionally, the interface supports looking up a specific product’s vulnerability history, enabling security professionals to assess risk exposure and prioritize mitigation efforts for critical infrastructure components. The data is organized to facilitate efficient searching and correlation between weakness identifiers and affected software versions, ensuring that administrators and developers have access to comprehensive security insights necessary for maintaining system integrity and compliance.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2026-89708 nfsd: RCU-protect cl_cb_session to fix use-after-free on session teardown 9.8 Critical 2026-09-11
CVE-2026-89706 nfsd: Reset write verifier when async COPY writeback fails 7.5 High 2026-09-11
CVE-2026-89707 nfsd: release path refs on follow_down() error 7.5 High 2026-09-11
CVE-2026-89705 nfsd: restore rq_status_counter to even on all nfsd_dispatch() exit paths 7.1 High 2026-09-11
CVE-2026-89704 nfsd: sample writeback error cursor before async COPY loop 7.5 High 2026-09-11
CVE-2026-89703 nfsd: set SC_STATUS_FREED in nfsd4_drop_revoked_stid for delegations 9.8 Critical 2026-09-11
CVE-2026-89702 nfsd: size fh_verify server sockaddr slot by xpt_locallen 9.8 Critical 2026-09-11
CVE-2026-89701 nfsd: validate nseconds in TIME_DELEG decode paths - - 2026-09-11
CVE-2026-89700 nfsd: validate sockaddr length per family in listener_set - - 2026-09-11
CVE-2026-89698 nfsd: widen nfsd_genl_rqstp address fields to sockaddr_storage - - 2026-09-11
CVE-2026-89699 nfsd: validate symlink target length in NFSv4 CREATE 7.5 High 2026-09-11
CVE-2026-89697 nfsd: add fh_want_write() for early-verified SETATTR in nfsd_proc_setattr() 9.1 Critical 2026-09-11
CVE-2026-89696 nfsd: block non-SAVEFH ops after FOREIGN PUTFH to prevent NULL deref 7.5 High 2026-09-11
CVE-2026-89695 nfsd: cap decoded POSIX ACL count to bound sort cost 7.5 High 2026-09-11
CVE-2026-89694 nfsd: check client ownership when cancelling a copy-notify stateid - - 2026-09-11
CVE-2026-89693 nfsd: check nfsd4_acl_to_attr() return value in nfsd4_create() - - 2026-09-11
CVE-2026-89692 nfsd: clear CALLBACK_RUNNING on failed delegation recall queue 7.5 High 2026-09-11
CVE-2026-89690 nfsd: defer vfree of compound ops to fix rpc_status UAF 7.8 High 2026-09-11
CVE-2026-89691 nfsd: clear opcnt on compound arg release to prevent OOB read 7.1 High 2026-09-11
CVE-2026-89689 nfsd: don't free session slots that are still in use 9.8 Critical 2026-09-11
CVE-2026-89687 nfsd: ensure nfsd_file_do_acquire() does not use a non-opened file 7.5 High 2026-09-11
CVE-2026-89688 nfsd: drop the stateid, not the stateowner, on seqid_op replay retry 9.8 Critical 2026-09-11
CVE-2026-89686 nfsd: fix BUG_ON in nfsd4_alloc_layout_stateid on racing delegation revoke 9.8 Critical 2026-09-11
CVE-2026-89685 nfsd: fix clock domain mismatch in clients_still_reclaiming() 7.5 High 2026-09-11
CVE-2026-89684 nfsd: fix cpntf publish race in nfs4_init_cp_state 7.5 High 2026-09-11
CVE-2026-89683 nfsd: fix dentry ref leak on V4ROOT export filehandle lookup - - 2026-09-11
CVE-2026-89682 nfsd: fix fcache_disposal UAF by inlining dispose state into nfsd_net 8.1 High 2026-09-11
CVE-2026-89681 nfsd: fix layout fence worker double-reference race 9.8 Critical 2026-09-11
CVE-2026-89679 nfsd: fix null dereference in nfsd4_setattr for deleg timestamp attrs 7.5 High 2026-09-11
CVE-2026-89680 nfsd: fix nfsd_file leak on inter-server COPY setup failure 7.5 High 2026-09-11

All 17854 known CVE vulnerabilities affecting Linux with full Chinese analysis, references, and POCs where available.