Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17853

All 17853 CVE vulnerabilities found in Linux, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumeration (CWE) vulnerabilities affecting the Linux operating system product. It aggregates security data related to weaknesses within the kernel, distributions, and associated utilities provided by various Linux vendors and maintainers. The collection encompasses a wide range of vulnerability types, including memory corruption issues, privilege escalation flaws, information leaks, and denial-of-service conditions. The database covers historical records spanning several decades, reflecting the evolution of the Linux ecosystem from its early releases to modern stable and development branches. This extensive time range allows for the analysis of long-term security trends and the remediation status of legacy systems that remain in production environments. Visitors to this resource can track vendor-specific advisories to stay informed about patches and updates released by major Linux distribution maintainers. You can also use the page to understand the characteristics and impact of specific weakness classes as they manifest in the Linux environment. Additionally, the interface supports looking up a specific product’s vulnerability history, enabling security professionals to assess risk exposure and prioritize mitigation efforts for critical infrastructure components. The data is organized to facilitate efficient searching and correlation between weakness identifiers and affected software versions, ensuring that administrators and developers have access to comprehensive security insights necessary for maintaining system integrity and compliance.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2026-89497 orangefs: skip leading spaces before parsing client debug masks 7.8 High 2026-09-11
CVE-2026-89496 ocfs2: always run deallocs on copy-on-write completion - - 2026-09-11
CVE-2026-89495 ocfs2: bound namelen in dlm_migrate_request_handler 9.8 Critical 2026-09-11
CVE-2026-89493 ocfs2: validate rl_used against rl_count in refcount block validator 8.8 High 2026-09-11
CVE-2026-89494 ocfs2: validate lengths in dlm_mig_lockres_handler 9.8 Critical 2026-09-11
CVE-2026-89492 ocfs2: validate directory-index entry counts when reading metadata 9.8 Critical 2026-09-11
CVE-2026-89490 ocfs2: fix readdir position truncation on 32-bit kernels - - 2026-09-11
CVE-2026-89491 ocfs2: cluster: don't sleep while holding o2hb_live_lock in o2hb_region_pin() - - 2026-09-11
CVE-2026-89489 openrisc: fix arbitrary kernel memory access via or1k_atomic syscall 7.8 High 2026-09-11
CVE-2026-89488 openvswitch: Fix CT limit teardown use-after-free 7.8 High 2026-09-11
CVE-2026-89487 openvswitch: only skb_tx_error() a packet we are about to drop 7.8 High 2026-09-11
CVE-2026-89486 ipmi: Fix use-after-free of cmd_rcvr in _ipmi_destroy_user() 7.8 High 2026-09-11
CVE-2026-89485 lockd: pin next file across nlm_inspect_file lock-drop 9.8 Critical 2026-09-11
CVE-2026-89484 lockd: fix NULL dereference on lockowner allocation failure - - 2026-09-11
CVE-2026-89483 nvme: zero the discard fallback page 7.5 High 2026-09-11
CVE-2026-89481 nvme-tcp: fix host memory disclosure on R2T for a read command 7.5 High 2026-09-11
CVE-2026-89482 nvme-tcp: do not accept C2HData based on blk_rq_payload_bytes() alone 9.8 Critical 2026-09-11
CVE-2026-89480 nvme-tcp: reject a read that transferred too few bytes 7.5 High 2026-09-11
CVE-2026-89479 sctp: stop processing a packet once its association is deleted 9.8 Critical 2026-09-11
CVE-2026-89478 sctp: drop a chunk if its transport was removed 9.8 Critical 2026-09-11
CVE-2026-89477 sctp: fix NULL deref on untransmitted RECONF completion 7.5 High 2026-09-11
CVE-2026-89476 sctp: fix stream->outcnt underflow on duplicate RECONF responses 7.5 High 2026-09-11
CVE-2026-89475 power: supply: bq24257: fix use-after-free on remove - - 2026-09-11
CVE-2026-89474 power: supply: bq256xx: drain usb_work before freeing the charger - - 2026-09-11
CVE-2026-89473 power: supply: bq25890: Fix power_supply reference leak - - 2026-09-11
CVE-2026-89472 power: supply: charger-manager: register regulators before exposing sysfs 7.8 High 2026-09-11
CVE-2026-89471 power: supply: cros_usbpd-charger: bound the EC-reported port count 8.4 High 2026-09-11
CVE-2026-89469 power: supply: lp8727: fix use-after-free in lp8727_release_irq() 8.4 High 2026-09-11
CVE-2026-89470 power: supply: cros_usbpd: Limit port counts to EC_USB_PD_MAX_PORTS 8.4 High 2026-09-11
CVE-2026-89468 power: supply: lp8788-charger: fix use-after-free on remove - - 2026-09-11

All 17853 known CVE vulnerabilities affecting Linux with full Chinese analysis, references, and POCs where available.