Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17853

All 17853 CVE vulnerabilities found in Linux, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumeration (CWE) vulnerabilities affecting the Linux operating system product. It aggregates security data related to weaknesses within the kernel, distributions, and associated utilities provided by various Linux vendors and maintainers. The collection encompasses a wide range of vulnerability types, including memory corruption issues, privilege escalation flaws, information leaks, and denial-of-service conditions. The database covers historical records spanning several decades, reflecting the evolution of the Linux ecosystem from its early releases to modern stable and development branches. This extensive time range allows for the analysis of long-term security trends and the remediation status of legacy systems that remain in production environments. Visitors to this resource can track vendor-specific advisories to stay informed about patches and updates released by major Linux distribution maintainers. You can also use the page to understand the characteristics and impact of specific weakness classes as they manifest in the Linux environment. Additionally, the interface supports looking up a specific product’s vulnerability history, enabling security professionals to assess risk exposure and prioritize mitigation efforts for critical infrastructure components. The data is organized to facilitate efficient searching and correlation between weakness identifiers and affected software versions, ensuring that administrators and developers have access to comprehensive security insights necessary for maintaining system integrity and compliance.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2026-89617 fs/ntfs3: validate dirty page table on log replay 7.8 High 2026-09-11
CVE-2026-89618 eventfs: Initialize ei->children and ei->list in init_ei() - - 2026-09-11
CVE-2026-89616 fs/ntfs3: fix info-leak on partial LZNT decompress in ni_read_frame() 7.5 High 2026-09-11
CVE-2026-89614 ntfs: bound the free-cluster bitmap scan to the volume 9.8 Critical 2026-09-11
CVE-2026-89615 fs/ntfs3: bound page_lcns[] index by the log record 8.4 High 2026-09-11
CVE-2026-89613 ntfs: reject invalid empty mapping pairs 9.8 Critical 2026-09-11
CVE-2026-89612 ntfs: reject invalid MFT LCNs from boot sector 9.8 Critical 2026-09-11
CVE-2026-89611 ntfs: validate non-resident attribute offsets 9.8 Critical 2026-09-11
CVE-2026-89610 ntfs: verify run length exceeding volume boundary 9.8 Critical 2026-09-11
CVE-2026-89609 ecryptfs: hold msg ctx list lock when cleaning daemon queue 7.8 High 2026-09-11
CVE-2026-89607 ecryptfs: reject oversized encrypted_key_size in parse_tag_3_packet 7.8 High 2026-09-11
CVE-2026-89608 ecryptfs: pass packet set buffer size to parser 7.1 High 2026-09-11
CVE-2026-89606 ecryptfs: reject too-small tag 70 packets 7.8 High 2026-09-11
CVE-2026-89605 ecryptfs: release message context on send failure 7.8 High 2026-09-11
CVE-2026-89604 efivarfs: Rate limit statfs() handler - - 2026-09-11
CVE-2026-89602 erofs: skip sufficiently large global buffers when resizing 7.8 High 2026-09-11
CVE-2026-89601 ext2: Fix lost inode updates for IS_SYNC inodes 8.8 High 2026-09-11
CVE-2026-89600 fanotify: fix use-after-free of file range info 7.8 High 2026-09-11
CVE-2026-89599 fbdev: omapfb: panel-dsi-cm: initialize lock before registering display 8.4 High 2026-09-11
CVE-2026-89598 fbdev: ssd1307fb: defer I2C transfers from damage callbacks - - 2026-09-11
CVE-2026-89597 fbdev: uvesafb: unregister connector callback on init failure 7.8 High 2026-09-11
CVE-2026-89596 forcedeth: fix off-by-one when saving/restoring non-PCI config space 7.1 High 2026-09-11
CVE-2026-89595 fsnotify: Fix stale object mask after concurrent mark updates - - 2026-09-11
CVE-2026-89593 hugetlb: only adjust reservation during unmapping if mapcount is 0 7.1 High 2026-09-11
CVE-2026-89594 hsi: omap_ssi_core: fix missing DMA mask setup for SSI controller device 7.8 High 2026-09-11
CVE-2026-89592 accel/rocket: fix NULL dereference and integer overflow in rocket_job_push() - - 2026-09-11
CVE-2026-89591 accel/rocket: initialize job domain before cleanup paths - - 2026-09-11
CVE-2026-89589 acpi/apei/ghes: Use raw_spinlock_t for CXL CPER work locks - - 2026-09-11
CVE-2026-89590 accel/rocket: Fix error path handling in rocket_job_run() - - 2026-09-11
CVE-2026-89588 ACPI: APEI: GHES: fix ARM section length accounting after header 8.4 High 2026-09-11

All 17853 known CVE vulnerabilities affecting Linux with full Chinese analysis, references, and POCs where available.