Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17853

All 17853 CVE vulnerabilities found in Linux, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumeration (CWE) vulnerabilities affecting the Linux operating system product. It aggregates security data related to weaknesses within the kernel, distributions, and associated utilities provided by various Linux vendors and maintainers. The collection encompasses a wide range of vulnerability types, including memory corruption issues, privilege escalation flaws, information leaks, and denial-of-service conditions. The database covers historical records spanning several decades, reflecting the evolution of the Linux ecosystem from its early releases to modern stable and development branches. This extensive time range allows for the analysis of long-term security trends and the remediation status of legacy systems that remain in production environments. Visitors to this resource can track vendor-specific advisories to stay informed about patches and updates released by major Linux distribution maintainers. You can also use the page to understand the characteristics and impact of specific weakness classes as they manifest in the Linux environment. Additionally, the interface supports looking up a specific product’s vulnerability history, enabling security professionals to assess risk exposure and prioritize mitigation efforts for critical infrastructure components. The data is organized to facilitate efficient searching and correlation between weakness identifiers and affected software versions, ensuring that administrators and developers have access to comprehensive security insights necessary for maintaining system integrity and compliance.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2026-89527 svcrdma: Use svc_xprt_put to free listener on create failure - - 2026-09-11
CVE-2026-89526 svcrdma: Validate Read chunk positions before reconstruction 9.8 Critical 2026-09-11
CVE-2026-89525 udf: reject VAT indexes equal to the entry count - - 2026-09-11
CVE-2026-89524 wifi: ath6kl: clamp assoc request/response lengths before subtracting IE offsets 8.1 High 2026-09-11
CVE-2026-89523 wifi: mt76: mt7925: cancel pending mlo_pm_work 7.8 High 2026-09-11
CVE-2026-89522 media: staging/ipu7: fix async notifier UAF on probe error path 7.8 High 2026-09-11
CVE-2026-89520 sched/core: Make core-sched flips wait for in-flight selections 7.8 High 2026-09-11
CVE-2026-89521 sched/core: Handle pick_task() releasing the rq lock 7.3 High 2026-09-11
CVE-2026-89519 sched_ext: Replace SCX_RQ_BAL_KEEP with a dispatch verdict return - - 2026-09-11
CVE-2026-89517 sched_ext: Fix rq->core_pick corruption under core scheduling - - 2026-09-11
CVE-2026-89518 sched_ext: Fix this_rq() assumptions in dispatch kfuncs - - 2026-09-11
CVE-2026-89516 sched_ext: Don't BUG_ON a destroyed DSQ in process_deferred_reenq_users - - 2026-09-11
CVE-2026-89514 scsi: fnic: Use GFP_ATOMIC for VLAN alloc under spinlock - - 2026-09-11
CVE-2026-89515 scsi: core: Fill in DMA padding bytes in scsi_alloc_sgtables() - - 2026-09-11
CVE-2026-89513 RISC-V: KVM: Fix PMU event info array size overflow 8.8 High 2026-09-11
CVE-2026-89511 qede: Fix NULL pointer dereference in TPA fragment processing 7.5 High 2026-09-11
CVE-2026-89512 remoteproc: scp: Fix device reference leak on failed lookup - - 2026-09-11
CVE-2026-89510 RDMA/cxgb4: Cancel reg_work before freeing device on remove 7.8 High 2026-09-11
CVE-2026-89509 RDMA/ionic: Embed counter driver data in rdma_counter allocation - - 2026-09-11
CVE-2026-89508 RDMA/ucma: Lock the handler in ucma_set_ib_path() 7.8 High 2026-09-11
CVE-2026-89507 RDMA/ucma: Lock the handler in ucma_write_cm_event() 7.8 High 2026-09-11
CVE-2026-89505 RDMA/uverbs: Guard legacy bundles without method_elm - - 2026-09-11
CVE-2026-89506 RDMA/uverbs: Add UVERBS_ATTR_UHW to UVERBS_METHOD_REG_MR - - 2026-09-11
CVE-2026-89504 regulator: as3722_get_regulator_dt_data: fix premature of_node_put leaving dangling of_node pointer 8.4 High 2026-09-11
CVE-2026-89503 ring-buffer: Fix subbuf resize race with ring_buffer_alloc_read_page() 7.8 High 2026-09-11
CVE-2026-89502 ring-buffer: Free cpu_buffer::free_page with subbuf_order - - 2026-09-11
CVE-2026-89501 ring-buffer: Hold cpu_buffer::lock when resizing a subbuf 7.8 High 2026-09-11
CVE-2026-89500 ring-buffer: Make cpu_buffer::free_page a buffer_data_read_page 7.8 High 2026-09-11
CVE-2026-89499 ring-buffer: Stop remote reader update when page swap fails 7.8 High 2026-09-11
CVE-2026-89498 orangefs: fix double-free of trailer_buf on readdir copy failure - - 2026-09-11

All 17853 known CVE vulnerabilities affecting Linux with full Chinese analysis, references, and POCs where available.