Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17853

All 17853 CVE vulnerabilities found in Linux, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumeration (CWE) vulnerabilities affecting the Linux operating system product. It aggregates security data related to weaknesses within the kernel, distributions, and associated utilities provided by various Linux vendors and maintainers. The collection encompasses a wide range of vulnerability types, including memory corruption issues, privilege escalation flaws, information leaks, and denial-of-service conditions. The database covers historical records spanning several decades, reflecting the evolution of the Linux ecosystem from its early releases to modern stable and development branches. This extensive time range allows for the analysis of long-term security trends and the remediation status of legacy systems that remain in production environments. Visitors to this resource can track vendor-specific advisories to stay informed about patches and updates released by major Linux distribution maintainers. You can also use the page to understand the characteristics and impact of specific weakness classes as they manifest in the Linux environment. Additionally, the interface supports looking up a specific product’s vulnerability history, enabling security professionals to assess risk exposure and prioritize mitigation efforts for critical infrastructure components. The data is organized to facilitate efficient searching and correlation between weakness identifiers and affected software versions, ensuring that administrators and developers have access to comprehensive security insights necessary for maintaining system integrity and compliance.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2026-89647 ceph: do not repeat ceph_trim_dentries() if no progress possible 7.5 High 2026-09-11
CVE-2026-89648 ceph: cap delegated inode count in ceph_parse_deleg_inos() 7.5 High 2026-09-11
CVE-2026-89646 ceph: fix leaked inode reference on writeback abort at umount 7.8 High 2026-09-11
CVE-2026-89645 btrfs: drop recovered reloc root refs on recovery failure - - 2026-09-11
CVE-2026-89644 btrfs: fix extent map leak in NOCOW direct I/O write - - 2026-09-11
CVE-2026-89643 audit: avoid dropping live tree ref on fsnotify rule autoremove 9.8 Critical 2026-09-11
CVE-2026-89642 cifs: call pagecache_isize_extended() in cifs_setsize() when extending - - 2026-09-11
CVE-2026-89641 cifs: clear tcon after cifsFileInfo_put() in cifs_file_set_size() 7.8 High 2026-09-11
CVE-2026-89639 cifs: use cifs_invalidate_cache() in cifs_do_truncate() for O_TRUNC 7.1 High 2026-09-11
CVE-2026-89640 cifs: fix loff_t underflow in cifs_remap_file_range() when len == 0 7.1 High 2026-09-11
CVE-2026-89638 smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions 7.8 High 2026-09-11
CVE-2026-89637 smb: client: fix UAF and buffer leak in cifs_check_trans2() for malformed secondary T2 9.8 Critical 2026-09-11
CVE-2026-89635 ksmbd: only rebind the reopened file's own oplock on durable reconnect 9.8 Critical 2026-09-11
CVE-2026-89636 smb: client: clear ce->tgthint in free_tgts() 9.8 Critical 2026-09-11
CVE-2026-89634 smb: client: fix ALIGN() overflow in symlink_data() error context loop 9.1 Critical 2026-09-11
CVE-2026-89633 smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2() 9.8 Critical 2026-09-11
CVE-2026-89632 smb: client: fix use-before-check of ReparseDataLength in reparse_buf_ptr() 8.2 High 2026-09-11
CVE-2026-89631 smb: client: reject a tree connect response whose byte count is too small 9.1 Critical 2026-09-11
CVE-2026-89630 smb: client: restore the data_offset bound in is_valid_oplock_break() 9.1 Critical 2026-09-11
CVE-2026-89629 HID: corsair-void: Check size of status and firmware events before reading them - - 2026-09-11
CVE-2026-89628 HID: picolcd: clamp eeprom debugfs read to bytes actually received - - 2026-09-11
CVE-2026-89626 HID: sensor: custom: Fix field sysfs group cleanup on failure 8.8 High 2026-09-11
CVE-2026-89627 HID: roccat: free buffered reports when destroying device - - 2026-09-11
CVE-2026-89625 HID: sony: fix UAF of ghl_poke_timer / ghl_urb at driver unbind - - 2026-09-11
CVE-2026-89623 HID: mcp2221: stop device IO before hid_hw_stop - - 2026-09-11
CVE-2026-89624 HID: universal-pidff: stop the device when force-feedback init fails 7.8 High 2026-09-11
CVE-2026-89622 HID: mcp2221: clear rxbuf after I2C/SMBus transfer completes 7.8 High 2026-09-11
CVE-2026-89621 HID: mcp2221: validate report size in mcp2221_raw_event() - - 2026-09-11
CVE-2026-89620 HID: intel-thc-hid: intel-quickspi: validate report size before copy 7.8 High 2026-09-11
CVE-2026-89619 HID: intel-thc-hid: intel-quickspi: bound GET_REPORT response to the caller buffer 7.8 High 2026-09-11

All 17853 known CVE vulnerabilities affecting Linux with full Chinese analysis, references, and POCs where available.