Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17854

All 17854 CVE vulnerabilities found in Linux, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumeration (CWE) vulnerabilities affecting the Linux operating system product. It aggregates security data related to weaknesses within the kernel, distributions, and associated utilities provided by various Linux vendors and maintainers. The collection encompasses a wide range of vulnerability types, including memory corruption issues, privilege escalation flaws, information leaks, and denial-of-service conditions. The database covers historical records spanning several decades, reflecting the evolution of the Linux ecosystem from its early releases to modern stable and development branches. This extensive time range allows for the analysis of long-term security trends and the remediation status of legacy systems that remain in production environments. Visitors to this resource can track vendor-specific advisories to stay informed about patches and updates released by major Linux distribution maintainers. You can also use the page to understand the characteristics and impact of specific weakness classes as they manifest in the Linux environment. Additionally, the interface supports looking up a specific product’s vulnerability history, enabling security professionals to assess risk exposure and prioritize mitigation efforts for critical infrastructure components. The data is organized to facilitate efficient searching and correlation between weakness identifiers and affected software versions, ensuring that administrators and developers have access to comprehensive security insights necessary for maintaining system integrity and compliance.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2026-89678 nfsd: fix partial-write detection in nfsd_direct_write 7.5 High 2026-09-11
CVE-2026-89677 nfsd: fix possible fh_compose of wrong dentry in nfsd4_create_file() 9.8 Critical 2026-09-11
CVE-2026-89676 nfsd: fix stale s2s_cp_stateids IDR entry for async COPY 9.8 Critical 2026-09-11
CVE-2026-89675 nfsd: fix UAF in async copy cancel and shutdown 9.8 Critical 2026-09-11
CVE-2026-89674 nfsd: fix XDR length calculation in nfsd4_ff_encode_layoutget 9.8 Critical 2026-09-11
CVE-2026-89673 nfsd: fix XDR padding calculation in ff_encode_getdeviceinfo - - 2026-09-11
CVE-2026-89672 nfsd: gate nfs2 setacl by argp->mask 9.1 Critical 2026-09-11
CVE-2026-89671 nfsd: gate nfs3 setacl by argp->mask 9.1 Critical 2026-09-11
CVE-2026-89670 nfsd: hold rcu across localio cmpxchg retry 7.8 High 2026-09-11
CVE-2026-89669 nfsd: initialize copy-notify stateid before publishing it 9.8 Critical 2026-09-11
CVE-2026-89667 nfsd: close shrinker/GC/fsnotify vs per-net shutdown race in filecache 8.1 High 2026-09-11
CVE-2026-89668 nfsd: move nfsd_debugfs_init() after nfsd4_init_slabs() in init_nfsd() 7.8 High 2026-09-11
CVE-2026-89666 nfsd: reject out-of-range nseconds in NFSv3 SETATTR and create ops - - 2026-09-11
CVE-2026-89665 nfsd: reject out-of-range useconds in NFSv2 SETATTR/CREATE 8.2 High 2026-09-11
CVE-2026-89663 nfsd: revoke copy-notify stateids before dropping their reference 8.8 High 2026-09-11
CVE-2026-89664 nfsd: release OPEN-decoded posix ACLs via op_release 7.5 High 2026-09-11
CVE-2026-89662 NFSD: Prevent lock owner use-after-free during client teardown 9.8 Critical 2026-09-11
CVE-2026-89661 NFSD: Prevent post-shutdown use-after-free in unlock_filesystem - - 2026-09-11
CVE-2026-89659 NFSD: Prevent client use-after-free during delegation revoke 9.8 Critical 2026-09-11
CVE-2026-89660 NFSD: Prevent client use-after-free during admin state revocation 9.8 Critical 2026-09-11
CVE-2026-89658 NFSD: Prevent client use-after-free during NFSv4.0 revoked-state cleanup 9.8 Critical 2026-09-11
CVE-2026-89657 libceph: validate OSD extent maps before cursor advance 7.5 High 2026-09-11
CVE-2026-89655 ceph: fix UAF in __kick_flushing_caps() on cf entry freed during unlock 9.8 Critical 2026-09-11
CVE-2026-89656 libceph: reject buckets with mismatched CRUSH ids 9.8 Critical 2026-09-11
CVE-2026-89654 ceph: fix UAF in check_new_map() on session freed during unlock 9.8 Critical 2026-09-11
CVE-2026-89653 ceph: reject export_targets ranks >= CEPH_MAX_MDS in mdsmap decode 9.8 Critical 2026-09-11
CVE-2026-89651 ceph: bound MDSCapAuth path and fs_name decode in handle_session() 9.8 Critical 2026-09-11
CVE-2026-89652 ceph: bound copied dentry name length in NFS export get_name 9.8 Critical 2026-09-11
CVE-2026-89650 ceph: bound num_export_targets array for mds info v2/v3 9.1 Critical 2026-09-11
CVE-2026-89649 ceph: bound xattr value length in __build_xattrs() 9.1 Critical 2026-09-11

All 17854 known CVE vulnerabilities affecting Linux with full Chinese analysis, references, and POCs where available.