Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17853

All 17853 CVE vulnerabilities found in Linux, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumeration (CWE) vulnerabilities affecting the Linux operating system product. It aggregates security data related to weaknesses within the kernel, distributions, and associated utilities provided by various Linux vendors and maintainers. The collection encompasses a wide range of vulnerability types, including memory corruption issues, privilege escalation flaws, information leaks, and denial-of-service conditions. The database covers historical records spanning several decades, reflecting the evolution of the Linux ecosystem from its early releases to modern stable and development branches. This extensive time range allows for the analysis of long-term security trends and the remediation status of legacy systems that remain in production environments. Visitors to this resource can track vendor-specific advisories to stay informed about patches and updates released by major Linux distribution maintainers. You can also use the page to understand the characteristics and impact of specific weakness classes as they manifest in the Linux environment. Additionally, the interface supports looking up a specific product’s vulnerability history, enabling security professionals to assess risk exposure and prioritize mitigation efforts for critical infrastructure components. The data is organized to facilitate efficient searching and correlation between weakness identifiers and affected software versions, ensuring that administrators and developers have access to comprehensive security insights necessary for maintaining system integrity and compliance.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2026-89557 md: do overflow check for sb->bblog_shift in super_1_load() 7.8 High 2026-09-11
CVE-2026-89556 module: validate string table section types - - 2026-09-11
CVE-2026-89554 mptcp: fix uninitialized local_id in syncookie MP_JOIN reconstruction 8.2 High 2026-09-11
CVE-2026-89555 mpls: reload header after pskb_may_pull() 9.8 Critical 2026-09-11
CVE-2026-89553 nouveau/gem: reserve the bo in the info ioctl around the vma lookup 7.8 High 2026-09-11
CVE-2026-89552 params: fix charp corruption on allocation failure - - 2026-09-11
CVE-2026-89551 SUNRPC: xdr_buf_trim: clamp buf->len to avoid underflow 9.8 Critical 2026-09-11
CVE-2026-89550 SUNRPC: svcauth_gss: enforce krb5 token minimum length 9.8 Critical 2026-09-11
CVE-2026-89549 sunrpc: route to a populated pool in svc_pool_for_cpu() 7.5 High 2026-09-11
CVE-2026-89547 SUNRPC: Check svc pool percpu counter allocation 8.1 High 2026-09-11
CVE-2026-89548 SUNRPC: always drain cache_cleaner before destroying a cache_detail 7.8 High 2026-09-11
CVE-2026-89546 SUNRPC: close backchannel before destroying callback service 9.8 Critical 2026-09-11
CVE-2026-89545 sunrpc: defer rq_argp and rq_resp free until after RCU grace period 7.8 High 2026-09-11
CVE-2026-89543 sunrpc: fix use-after-free in __rpc_clnt_handle_event and __rpc_clnt_remove_pipedir - - 2026-09-11
CVE-2026-89544 SUNRPC: fix gssx_dec_option_array error path bugs 7.5 High 2026-09-11
CVE-2026-89542 SUNRPC: harden gss_krb5_unwrap_v2 against short tokens 9.8 Critical 2026-09-11
CVE-2026-89541 SUNRPC: harden gss_unwrap_resp_priv length checks 9.8 Critical 2026-09-11
CVE-2026-89539 SUNRPC: reject duplicate CREDS_VALUE options - - 2026-09-11
CVE-2026-89540 sunrpc: init gssp_lock before publishing proc entry 7.8 High 2026-09-11
CVE-2026-89538 SUNRPC: Reject krb5 v2 wrap tokens with oversized ec field 9.8 Critical 2026-09-11
CVE-2026-89537 SUNRPC: Reject short RFC 4121 MIC tokens in gss_krb5_verify_mic_v2 9.1 Critical 2026-09-11
CVE-2026-89536 SUNRPC: wait for in-flight client TLS handshake callback 9.8 Critical 2026-09-11
CVE-2026-89535 svcrdma: Reorder rpcrdma_rn_unregister before rdma_destroy_id 8.1 High 2026-09-11
CVE-2026-89534 svcrdma: Clear sc_cm_id when ADDR_CHANGE replacement fails 8.8 High 2026-09-11
CVE-2026-89533 svcrdma: Fix offset arithmetic in read_chunk_range 9.8 Critical 2026-09-11
CVE-2026-89531 svcrdma: Reject connection when transport allocation fails - - 2026-09-11
CVE-2026-89532 svcrdma: Fix pcl_for_each_segment for empty chunks 9.1 Critical 2026-09-11
CVE-2026-89530 svcrdma: Reject inline replies that overflow the pull-up buffer 9.8 Critical 2026-09-11
CVE-2026-89529 svcrdma: Reject oversized Read segments at decode time - - 2026-09-11
CVE-2026-89528 svcrdma: Reject Read lists that exceed the page budget 7.5 High 2026-09-11

All 17853 known CVE vulnerabilities affecting Linux with full Chinese analysis, references, and POCs where available.