Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17853

All 17853 CVE vulnerabilities found in Linux, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumeration (CWE) vulnerabilities affecting the Linux operating system product. It aggregates security data related to weaknesses within the kernel, distributions, and associated utilities provided by various Linux vendors and maintainers. The collection encompasses a wide range of vulnerability types, including memory corruption issues, privilege escalation flaws, information leaks, and denial-of-service conditions. The database covers historical records spanning several decades, reflecting the evolution of the Linux ecosystem from its early releases to modern stable and development branches. This extensive time range allows for the analysis of long-term security trends and the remediation status of legacy systems that remain in production environments. Visitors to this resource can track vendor-specific advisories to stay informed about patches and updates released by major Linux distribution maintainers. You can also use the page to understand the characteristics and impact of specific weakness classes as they manifest in the Linux environment. Additionally, the interface supports looking up a specific product’s vulnerability history, enabling security professionals to assess risk exposure and prioritize mitigation efforts for critical infrastructure components. The data is organized to facilitate efficient searching and correlation between weakness identifiers and affected software versions, ensuring that administrators and developers have access to comprehensive security insights necessary for maintaining system integrity and compliance.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2026-89587 ACPI: pfr_update: fix stack buffer overflow in query_capability() 7.8 High 2026-09-11
CVE-2026-89586 ata: libata-scsi: fix DSM TRIM for sector sizes larger than 2048 bytes 8.2 High 2026-09-11
CVE-2026-89585 auxdisplay: charlcd: cancel backlight work on registration failure 7.8 High 2026-09-11
CVE-2026-89584 block: validate user space vectors during extraction 7.8 High 2026-09-11
CVE-2026-89583 Bluetooth: eir: Fix OOB read in eir_get_service_data() 8.1 High 2026-09-11
CVE-2026-89582 bnx2x: fix double free in bnx2x_init_firmware() error path - - 2026-09-11
CVE-2026-89581 bpf, x86: Fix per-CPU address resolution into an extended register 7.8 High 2026-09-11
CVE-2026-89580 bpf: Disable preemption in __bpf_get_stack 7.8 High 2026-09-11
CVE-2026-89579 bpf: Harden bloom filter sizing and indexing on 32-bit kernels 7.8 High 2026-09-11
CVE-2026-89577 dm-io: report non-retryable errors separatedly - - 2026-09-11
CVE-2026-89578 dm-io: clone the source bio instead of copying its biovec - - 2026-09-11
CVE-2026-89576 dm-era: fix shadowed superblock leak on take-snap failure - - 2026-09-11
CVE-2026-89575 dm raid1: reserve space for NUL-terminator in build_constructor_string() - - 2026-09-11
CVE-2026-89574 dm array: validate array block headers on read 7.8 High 2026-09-11
CVE-2026-89573 dm array: reject an array block whose value size is not the caller's 7.8 High 2026-09-11
CVE-2026-89572 cpufreq: apple-soc: Fix OPP table cleanup - - 2026-09-11
CVE-2026-89570 cxl/mce: Make the MCE notifier per-region 7.8 High 2026-09-11
CVE-2026-89571 cxl/features: bound fwctl command payload to the input buffer 7.1 High 2026-09-11
CVE-2026-89569 Bluetooth: RFCOMM: serialize security confirmation handling 8.8 High 2026-09-11
CVE-2026-89568 kho: fix size calculation in kho_preserved_memory_reserve() - - 2026-09-11
CVE-2026-89566 jbd2: check need_resched() when skipping busy checkpoint buffers - - 2026-09-11
CVE-2026-89567 jbd2: bound shrinker scans by examined checkpoint buffers - - 2026-09-11
CVE-2026-89565 ipip: fix skb leak in collect_md mode when metadata_dst allocation fails - - 2026-09-11
CVE-2026-89564 ip: orphan prefetched skbs before multicast forwarding 7.8 High 2026-09-11
CVE-2026-89563 ip6_tunnel: use skb_cow_head() in ip6_tnl_xmit() 7.8 High 2026-09-11
CVE-2026-89562 ip6_gre: fix hardware header length for NBMA tunnels 7.8 High 2026-09-11
CVE-2026-89561 ipv6: rpl: fix NULL dereference of idev in ipv6_rpl_srh_rcv() 7.5 High 2026-09-11
CVE-2026-89560 landlock: Require LANDLOCK_ACCESS_FS_MAKE_REG for whiteout creation 8.4 High 2026-09-11
CVE-2026-89558 md/raid10: fix still_degraded being inverted in raid10_sync_request() 9.8 Critical 2026-09-11
CVE-2026-89559 libnvdimm/labels: Prevent integer overflow in __nd_label_validate() 7.8 High 2026-09-11

All 17853 known CVE vulnerabilities affecting Linux with full Chinese analysis, references, and POCs where available.