Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17500

Browse all 17500 CVE security advisories affecting Linux. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Linux serves as the foundational operating system for the majority of internet servers, cloud infrastructure, and embedded devices, powering critical global digital services. Its open-source nature and widespread deployment have historically exposed it to diverse vulnerability classes, including remote code execution, buffer overflows, and privilege escalation flaws within kernel modules and system utilities. While the project maintains rigorous security practices, the sheer volume of code contributes to a high cumulative count of recorded Common Vulnerabilities and Exposures, currently exceeding eleven thousand. Notable incidents often stem from misconfigurations or unpatched legacy components rather than fundamental architectural failures. The community responds rapidly to disclosed threats, yet the extensive attack surface necessitates continuous vigilance. Administrators must prioritize regular updates and strict access controls to mitigate risks associated with this ubiquitous platform, ensuring stability across both enterprise and consumer environments.

CVE ID Title CVSS Severity Published
CVE-2026-90279 md/raid5: round bitmap stripes with sector division — Linux - - 2026-09-17
CVE-2026-90278 md: wait for behind writes before destroying bitmap — Linux - - 2026-09-17
CVE-2026-90277 md/md-llbitmap: prevent create failure bitmap UAF — Linux - - 2026-09-17
CVE-2026-90276 md/md-llbitmap: stop daemon timer rearm on destroy — Linux - - 2026-09-17
CVE-2026-90275 md/raid1: don't set array_frozen in raid1_takeover() — Linux - - 2026-09-17
CVE-2026-90274 coresight: etm4x: fix underflow for usage of (nrseqstate - 1) — Linux - - 2026-09-17
CVE-2026-90273 coresight: etm4x: missing cscfg_csdev_disable_active_config() in perf enable — Linux - - 2026-09-17
CVE-2026-90272 perf: arm_pmuv3: Zero initialize hw_id branch stack field — Linux - - 2026-09-17
CVE-2026-90271 arm_mpam: Fix a NULL pointer dereference on unbinding after an error interrupt — Linux - - 2026-09-17
CVE-2026-90270 arm_mpam: Disable driver unbind to avoid UAF — Linux - - 2026-09-17
CVE-2026-90269 bpf: Reject load-acquire from pointers requiring fault protection — Linux - - 2026-09-17
CVE-2026-90267 scsi: sd: Fix special_vec mempool leak when scsi_alloc_sgtables() fails — Linux - - 2026-09-17
CVE-2026-90268 scsi: sd: Fix error handling in sd_probe() after large pool creation failure — Linux 8.1 High 2026-09-17
CVE-2026-90266 btrfs: zoned: don't force read-only on transient -EAGAIN from reloc merge — Linux - - 2026-09-17
CVE-2026-90264 btrfs: always wait for ordered extents to avoid OE races — Linux - - 2026-09-17
CVE-2026-90265 btrfs: defrag: fix deadlock between defrag and delalloc space reservation — Linux - - 2026-09-17
CVE-2026-90263 btrfs: check if root is readonly when setting posix acl — Linux - - 2026-09-17
CVE-2026-90262 btrfs: retry verity reads for not-uptodate Merkle folios — Linux - - 2026-09-17
CVE-2026-90261 btrfs: zoned: flush active metadata block group at btree_writepages() start — Linux - - 2026-09-17
CVE-2026-90260 btrfs: zoned: don't clobber the extent buffer when zeroing it out — Linux 7.1 High 2026-09-17
CVE-2026-90259 btrfs: qgroup: fix a wrong length calculation in qgroup_free_reserved_data() — Linux - - 2026-09-17
CVE-2026-90258 pinctrl: airoha: add missed IRQ resource helpers — Linux - - 2026-09-17
CVE-2026-90257 Bluetooth: virtio_bt: avoid OOB read of build info string — Linux - - 2026-09-17
CVE-2026-90255 Bluetooth: hci_conn: fix the SCO setup context lifetime — Linux 8.8 High 2026-09-17
CVE-2026-90256 Bluetooth: L2CAP: use proto_lock for l2cap_data to fix l2cap_disconn_ind — Linux 8.8 High 2026-09-17
CVE-2026-90254 Bluetooth: hci_sync: free the advertising instance on the failure and cancel paths — Linux - - 2026-09-17
CVE-2026-90252 Bluetooth: MGMT: free the HCI command when it is cancelled — Linux - - 2026-09-17
CVE-2026-90253 Bluetooth: MGMT: free the mesh send cancel command when it is cancelled — Linux - - 2026-09-17
CVE-2026-90251 Bluetooth: MSFT: validate evt_prefix_len against the response length — Linux - - 2026-09-17
CVE-2026-90250 bpf, cgroup: Fix storage null-ptr-deref after replacing prog — Linux - - 2026-09-17

This page lists every published CVE security advisory associated with Linux. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.