Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17500

Browse all 17500 CVE security advisories affecting Linux. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Linux serves as the foundational operating system for the majority of internet servers, cloud infrastructure, and embedded devices, powering critical global digital services. Its open-source nature and widespread deployment have historically exposed it to diverse vulnerability classes, including remote code execution, buffer overflows, and privilege escalation flaws within kernel modules and system utilities. While the project maintains rigorous security practices, the sheer volume of code contributes to a high cumulative count of recorded Common Vulnerabilities and Exposures, currently exceeding eleven thousand. Notable incidents often stem from misconfigurations or unpatched legacy components rather than fundamental architectural failures. The community responds rapidly to disclosed threats, yet the extensive attack surface necessitates continuous vigilance. Administrators must prioritize regular updates and strict access controls to mitigate risks associated with this ubiquitous platform, ensuring stability across both enterprise and consumer environments.

CVE ID Title CVSS Severity Published
CVE-2026-90219 RDMA/cxgb4: Free debugfs on registration failure — Linux - - 2026-09-17
CVE-2026-90218 RDMA/cma: Fix WARNING in res_to_rt — Linux - - 2026-09-17
CVE-2026-90216 ubi: Fix rollback for explicit UBI device numbers — Linux - - 2026-09-17
CVE-2026-90217 bpf: Compare iterator types during state pruning — Linux 7.8 High 2026-09-17
CVE-2026-90215 mtd: ubi: Release device reference on busy detach — Linux - - 2026-09-17
CVE-2026-90213 firewire: core: fix memory leak in error path of build_tree() — Linux - - 2026-09-17
CVE-2026-90214 ASoC: xilinx: formatter_pcm: fix stream_data leak on open error — Linux - - 2026-09-17
CVE-2026-90212 arm64/efi: Avoid voluntary preemption with efi_mm installed — Linux - - 2026-09-17
CVE-2026-90211 bpf, s390: Clear fetch destination on faulting arena atomic — Linux - - 2026-09-17
CVE-2026-90210 bpf: Fix UAF in bpf_trampoline_multi_attach_free on update failure — Linux 7.8 High 2026-09-17
CVE-2026-90209 s390/debug: Fix deadlock during unregister — Linux - - 2026-09-17
CVE-2026-90207 ALSA: seq: midi: Serialize input teardown with event_input — Linux 7.8 High 2026-09-17
CVE-2026-90208 clocksource/drivers/samsung_pwm: Switch to raw_spinlock_t type — Linux - - 2026-09-17
CVE-2026-90205 ocfs2: validate orphan slot during inode read — Linux 7.8 High 2026-09-17
CVE-2026-90206 nvmet: fix max_qid race between configfs and controller allocation — Linux - - 2026-09-17
CVE-2026-90204 ocfs2: validate DIO orphan slot during inode read — Linux 7.8 High 2026-09-17
CVE-2026-90203 Squashfs: check block offset is not negative — Linux 7.1 High 2026-09-17
CVE-2026-90202 scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers — Linux - - 2026-09-17
CVE-2026-90201 net: page_pool: fix UAF in __page_pool_release_netmem_dma on xa_cmpxchg race — Linux - - 2026-09-17
CVE-2026-90200 fs/ntfs3: fix integer overflow in MFT cluster validation — Linux - - 2026-09-17
CVE-2026-90199 fs/ntfs3: reject out-of-range evcn in mi_enum_attr() — Linux 7.8 High 2026-09-17
CVE-2026-90198 ALSA: core: Fix use-after-free in snd_card_do_free() — Linux - - 2026-09-17
CVE-2026-90197 HID: haptic: don't write an uninitialized value to unhandled usages — Linux - - 2026-09-17
CVE-2026-90196 ASoC: SOF: validate topology volume range before allocation — Linux - - 2026-09-17
CVE-2026-90195 riscv, bpf: Fix missing sign-ext for signed 1-byte and 2-byte kfunc args — Linux - - 2026-09-17
CVE-2026-90194 ACPI: scan: fix bus ID cleanup on device_add() failures — Linux - - 2026-09-17
CVE-2026-90193 mailbox: qcom-cpucp: fix PREEMPT_RT self-deadlock in IRQ handler — Linux - - 2026-09-17
CVE-2026-90192 mailbox: qcom-cpucp: handle NULL data in send_data callback — Linux - - 2026-09-17
CVE-2026-90191 mailbox: riscv-sbi-mpxy: validate RPMI notification lengths — Linux 8.4 High 2026-09-17
CVE-2026-90190 null_blk: use DEFINE_MUTEX for the file-scope mutex — Linux - - 2026-09-17

This page lists every published CVE security advisory associated with Linux. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.