Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17500

Browse all 17500 CVE security advisories affecting Linux. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Linux serves as the foundational operating system for the majority of internet servers, cloud infrastructure, and embedded devices, powering critical global digital services. Its open-source nature and widespread deployment have historically exposed it to diverse vulnerability classes, including remote code execution, buffer overflows, and privilege escalation flaws within kernel modules and system utilities. While the project maintains rigorous security practices, the sheer volume of code contributes to a high cumulative count of recorded Common Vulnerabilities and Exposures, currently exceeding eleven thousand. Notable incidents often stem from misconfigurations or unpatched legacy components rather than fundamental architectural failures. The community responds rapidly to disclosed threats, yet the extensive attack surface necessitates continuous vigilance. Administrators must prioritize regular updates and strict access controls to mitigate risks associated with this ubiquitous platform, ensuring stability across both enterprise and consumer environments.

CVE ID Title CVSS Severity Published
CVE-2026-90309 RDMA/erdma: Hold CQ references when processing EQ events — Linux 7.8 High 2026-09-17
CVE-2026-90308 RDMA/erdma: Hold QP references for AE and CM processing — Linux 7.8 High 2026-09-17
CVE-2026-90307 RDMA/srp: fix heap information leak on a truncated SRP_CRED_REQ — Linux - - 2026-09-17
CVE-2026-90306 ARM: 9481/2: breakpoint: CFI breakpoints only on demand — Linux - - 2026-09-17
CVE-2026-90305 ARM: 9483/1: select HAVE_POSIX_CPU_TIMERS_TASK_WORK — Linux - - 2026-09-17
CVE-2026-90304 ARM: 9484/1: enable interrupts when unhandled user faults are triggered — Linux - - 2026-09-17
CVE-2026-90303 ARM: 9485/1: mm: acquire mmap write lock around show_pte() for user faults — Linux - - 2026-09-17
CVE-2026-90302 ocfs2: synchronize heartbeat callbacks with o2net teardown — Linux - - 2026-09-17
CVE-2026-90300 bpf: Clear buf on error in __bpf_get_task_stack — Linux - - 2026-09-17
CVE-2026-90301 ocfs2: o2hb: quiesce negotiate handlers and timeout work — Linux 8.1 High 2026-09-17
CVE-2026-90299 bpf: Fix sleepable check for tracing/lsm prog — Linux - - 2026-09-17
CVE-2026-90297 drm/sun4i: crtc: Propagate layer initialization error — Linux - - 2026-09-17
CVE-2026-90298 drm/sun4i: tcon: Drop TCON TOP device reference — Linux - - 2026-09-17
CVE-2026-90296 cpufreq: imx6q: fix devres accumulation across driver rebind — Linux - - 2026-09-17
CVE-2026-90294 IB/isert: delay the final Login Response until the session is registered — Linux 7.5 High 2026-09-17
CVE-2026-90295 cpufreq: imx6q: fix out-of-bounds write when probed more than once — Linux - - 2026-09-17
CVE-2026-90293 IB/isert: post the full-feature receive buffers after session registration — Linux 7.5 High 2026-09-17
CVE-2026-90292 RDMA/siw: Fix use-after-free in siw_accept() — Linux 7.8 High 2026-09-17
CVE-2026-90291 module/dups: Fix use-after-free in kmod_dup_req lifetime handling — Linux 7.8 High 2026-09-17
CVE-2026-90290 arm64: hibernate: Restore DAIF state on error — Linux - - 2026-09-17
CVE-2026-90288 phy: renesas: rcar-gen2: Fix double of_node_put on phy creation failure — Linux 7.4 High 2026-09-17
CVE-2026-90289 drm/amd/display: Resize MST HDCP per-connector arrays to 32 — Linux 7.8 High 2026-09-17
CVE-2026-90287 phy: sunplus: fix error handling in sp_uphy_init() — Linux - - 2026-09-17
CVE-2026-90286 drm/amdgpu/gfx6: Use PFP on the compute queues too — Linux 8.8 High 2026-09-17
CVE-2026-90285 scsi: qla2xxx: Remove redundant VPD flash read in sysfs read path — Linux - - 2026-09-17
CVE-2026-90284 firmware_loader: do not queue completed sysfs fallback requests — Linux - - 2026-09-17
CVE-2026-90283 hugetlbfs: release subpool on fill_super failure — Linux - - 2026-09-17
CVE-2026-90282 phy: qcom: qmp-usb-legacy: Fix possible NULL-deref on early runtime suspend — Linux - - 2026-09-17
CVE-2026-90281 phy: qcom: snps-femto-v2: Fix possible NULL-deref on early runtime suspend — Linux - - 2026-09-17
CVE-2026-90280 phy: qcom: qmp-usb: Fix possible NULL-deref on early runtime suspend — Linux - - 2026-09-17

This page lists every published CVE security advisory associated with Linux. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.