Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17500

Browse all 17500 CVE security advisories affecting Linux. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Linux serves as the foundational operating system for the majority of internet servers, cloud infrastructure, and embedded devices, powering critical global digital services. Its open-source nature and widespread deployment have historically exposed it to diverse vulnerability classes, including remote code execution, buffer overflows, and privilege escalation flaws within kernel modules and system utilities. While the project maintains rigorous security practices, the sheer volume of code contributes to a high cumulative count of recorded Common Vulnerabilities and Exposures, currently exceeding eleven thousand. Notable incidents often stem from misconfigurations or unpatched legacy components rather than fundamental architectural failures. The community responds rapidly to disclosed threats, yet the extensive attack surface necessitates continuous vigilance. Administrators must prioritize regular updates and strict access controls to mitigate risks associated with this ubiquitous platform, ensuring stability across both enterprise and consumer environments.

CVE ID Title CVSS Severity Published
CVE-2026-90249 iio: light: gp2ap002: Fix unbalanced runtime PM on repeated event writes — Linux - - 2026-09-17
CVE-2026-90248 net/sched: cls_api: fix teardown of an adopted proto on insert-race loss — Linux - - 2026-09-17
CVE-2026-90247 bpf: Fix mmap_lock leak in irq_work path — Linux - - 2026-09-17
CVE-2026-90246 apparmor: fix integer overflow in verify_tags() bounds check — Linux 7.1 High 2026-09-17
CVE-2026-90245 fbdev: kyro: Validate overlay viewport coordinates — Linux - - 2026-09-17
CVE-2026-90244 iommu/dma: Restore locking around msi_page_list — Linux 7.8 High 2026-09-17
CVE-2026-90242 iommu/vt-d: Fix iopf_refcount leak on RID domain replacement — Linux - - 2026-09-17
CVE-2026-90243 iommu/vt-d: Clear Present bit before tearing down copied context entry — Linux 8.1 High 2026-09-17
CVE-2026-90241 iommu/vt-d: Tear down scalable-mode context on probe failure — Linux 8.2 High 2026-09-17
CVE-2026-90239 media: amd: isp4: release partial allocations in isp4if_alloc_fw_gpumem() — Linux - - 2026-09-17
CVE-2026-90240 iommu/vt-d: Flush context cache with correct SID when tearing down aliases — Linux 8.8 High 2026-09-17
CVE-2026-90238 media: amd: isp4: fix self-deadlock in isp4sd_pwron_and_init() error path — Linux - - 2026-09-17
CVE-2026-90237 netfilter: nft_ct: move custom expectation support to helper — Linux 7.8 High 2026-09-17
CVE-2026-90236 NFSD: Release the export reference when reaping open stateids — Linux - - 2026-09-17
CVE-2026-90235 sunrpc: xprtsock: annotate shared socket callbacks with READ_ONCE/WRITE_ONCE — Linux 9.8 Critical 2026-09-17
CVE-2026-90234 NFS: Return a delegation the client fails to record — Linux 7.5 High 2026-09-17
CVE-2026-90233 nvme-pci: release descriptor pools on probe failure — Linux - - 2026-09-17
CVE-2026-90231 apparmor: fix unconfined user namespace restriction forced stack — Linux 8.4 High 2026-09-17
CVE-2026-90232 amt: Don't support cross-netns setup. — Linux - - 2026-09-17
CVE-2026-90230 nvmet: fix heap out-of-bounds read in nvmet_auth_negotiate() — Linux 9.1 Critical 2026-09-17
CVE-2026-90228 nvmet: fix NULL pointer dereference in nvmet_execute_identify_ns_zns() — Linux 7.5 High 2026-09-17
CVE-2026-90229 nvme-apple: Destroy the admin queue on removal — Linux 7.4 High 2026-09-17
CVE-2026-90227 nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() — Linux 7.8 High 2026-09-17
CVE-2026-90225 nfc: llcp: read llcp_sock->local under the socket lock in getsockopt — Linux 7.8 High 2026-09-17
CVE-2026-90226 nfc: llcp: avoid userspace overflow on invalid optlen — Linux - - 2026-09-17
CVE-2026-90224 nfc: nci: fix double completion race in nci_data_exchange_complete — Linux 7.5 High 2026-09-17
CVE-2026-90222 nfc: pn533: hold a reference to the request skb during send_frame — Linux - - 2026-09-17
CVE-2026-90223 nfc: llcp: bound SNL TLV parsing to the skb and add length checks — Linux 7.1 High 2026-09-17
CVE-2026-90221 nfc: nci: fix use of uninitialized memory in CORE_INIT_RSP parsing — Linux - - 2026-09-17
CVE-2026-90220 ALSA: seq: Don't leak the extension cell pointer in the bounce payload — Linux - - 2026-09-17

This page lists every published CVE security advisory associated with Linux. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.