Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17500

Browse all 17500 CVE security advisories affecting Linux. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Linux serves as the foundational operating system for the majority of internet servers, cloud infrastructure, and embedded devices, powering critical global digital services. Its open-source nature and widespread deployment have historically exposed it to diverse vulnerability classes, including remote code execution, buffer overflows, and privilege escalation flaws within kernel modules and system utilities. While the project maintains rigorous security practices, the sheer volume of code contributes to a high cumulative count of recorded Common Vulnerabilities and Exposures, currently exceeding eleven thousand. Notable incidents often stem from misconfigurations or unpatched legacy components rather than fundamental architectural failures. The community responds rapidly to disclosed threats, yet the extensive attack surface necessitates continuous vigilance. Administrators must prioritize regular updates and strict access controls to mitigate risks associated with this ubiquitous platform, ensuring stability across both enterprise and consumer environments.

CVE ID Title CVSS Severity Published
CVE-2026-90189 null_blk: register configfs subsystem after creating default devices — Linux - - 2026-09-17
CVE-2026-90187 null_blk: free zones array on device power-off — Linux - - 2026-09-17
CVE-2026-90188 null_blk: free global tag_set on init error path — Linux - - 2026-09-17
CVE-2026-90186 null_blk: reject per-device queue resize for shared tag set — Linux - - 2026-09-17
CVE-2026-90185 null_blk: serialize configfs attribute stores with the lock — Linux - - 2026-09-17
CVE-2026-90184 null_blk: serialize configfs attribute updates with device setup — Linux - - 2026-09-17
CVE-2026-90183 blk-iolatency: clear delay state when freeing policy data — Linux - - 2026-09-17
CVE-2026-90181 ublk: avoid teardown retry loop on xarray allocation failure — Linux - - 2026-09-17
CVE-2026-90182 blk-iocost: clear delay state when freeing policy data — Linux - - 2026-09-17
CVE-2026-90180 block: mtip32xx: synchronize ioctls with device removal — Linux - - 2026-09-17
CVE-2026-90179 apparmor: fix deadlock in complain-mode change_hat — Linux - - 2026-09-17
CVE-2026-90178 hwmon: (coretemp) Fix core_data leak on CPUs without PTS — Linux - - 2026-09-17
CVE-2026-90177 bpf: Check pointer type for all atomic RMW paths — Linux 7.8 High 2026-09-17
CVE-2026-90175 smb: server: fix leak of ksmbd_ipc_login_request_ext() returned buffer — Linux - - 2026-09-17
CVE-2026-90176 ksmbd: Do not skip lock checks for single-byte ranges — Linux 8.1 High 2026-09-17
CVE-2026-90174 ksmbd: fix slab-out-of-bounds read in ksmbd_alloc_user() — Linux 7.1 High 2026-09-17
CVE-2026-90172 smb: smbdirect: destroy QP before mem pools on accept failure — Linux 7.5 High 2026-09-17
CVE-2026-90173 smb: smbdirect: free completion queues with ib_free_cq() — Linux 9.8 Critical 2026-09-17
CVE-2026-90171 smb: smbdirect: release pending child sockets outside the handler lock — Linux - - 2026-09-17
CVE-2026-90170 ksmbd: validate ipc response length before dereferencing its fields — Linux - - 2026-09-17
CVE-2026-90169 ksmbd: free preauth sessions on connection teardown — Linux - - 2026-09-17
CVE-2026-90167 ksmbd: serialize oplock close with pending break ownership — Linux - - 2026-09-17
CVE-2026-90166 smb/server: fix null-ptr-deref in ksmbd_ipc_tree_connect_request() — Linux - - 2026-09-17
CVE-2026-90164 smb/server: abort initialization when proc setup fails — Linux - - 2026-09-17
CVE-2026-90165 smb/server: fix invalid pointer dereference in ksmbd_stop_durable_scavenger() — Linux - - 2026-09-17
CVE-2026-90163 smb/server: call ksmbd_proc_cleanup() on module init failure — Linux - - 2026-09-17
CVE-2026-90162 ksmbd: defer publishing granted locks to prevent UAF/double-free race — Linux 8.8 High 2026-09-17
CVE-2026-90161 erofs: fix interlaced ztailpacking pclusters — Linux 7.1 High 2026-09-17
CVE-2026-90160 lwt_bpf: Restore reserved headroom after xmit program — Linux - - 2026-09-17
CVE-2026-90159 bpf: Disallow bpf_{g,s}etsockopt() in cgroup UNIX getname hooks — Linux - - 2026-09-17

This page lists every published CVE security advisory associated with Linux. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.