Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17500

Browse all 17500 CVE security advisories affecting Linux. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Linux serves as the foundational operating system for the majority of internet servers, cloud infrastructure, and embedded devices, powering critical global digital services. Its open-source nature and widespread deployment have historically exposed it to diverse vulnerability classes, including remote code execution, buffer overflows, and privilege escalation flaws within kernel modules and system utilities. While the project maintains rigorous security practices, the sheer volume of code contributes to a high cumulative count of recorded Common Vulnerabilities and Exposures, currently exceeding eleven thousand. Notable incidents often stem from misconfigurations or unpatched legacy components rather than fundamental architectural failures. The community responds rapidly to disclosed threats, yet the extensive attack surface necessitates continuous vigilance. Administrators must prioritize regular updates and strict access controls to mitigate risks associated with this ubiquitous platform, ensuring stability across both enterprise and consumer environments.

CVE ID Title CVSS Severity Published
CVE-2026-90158 m68k: nfcon: Do not call console_is_registered() in nfcon_device() — Linux - - 2026-09-17
CVE-2026-90157 bpf: Reject negative optlen in cgroup getsockopt hook — Linux - - 2026-09-17
CVE-2026-90156 ksmbd: safely discard unregistered deferred locks — Linux - - 2026-09-17
CVE-2026-90155 ksmbd: detach blocked lock requests before freeing — Linux - - 2026-09-17
CVE-2026-90154 ksmbd: scope session state changes to bound connections — Linux - - 2026-09-17
CVE-2026-90153 ksmbd: bound smb_check_perm_dacl() ACE walks by DACL size — Linux 8.1 High 2026-09-17
CVE-2026-90152 smb/server: fix session leak in ksmbd_session_register() — Linux - - 2026-09-17
CVE-2026-90151 NFSv4: remove callback IDR entry on client allocation failure — Linux 9.8 Critical 2026-09-17
CVE-2026-90150 pnfs/blocklayout: Fix device leaks on parse failure — Linux - - 2026-09-17
CVE-2026-90149 NFSv4/flexfiles: fix NULL dereference for NFSv4.0 data servers — Linux 7.5 High 2026-09-17
CVE-2026-90148 NFSv4: Fix incorrect argument passed to nfs4_delete_lease() in nfs4_add_lease() — Linux - - 2026-09-17
CVE-2026-90146 bpf, xdp: move offload check into dev_xdp_install() — Linux 7.8 High 2026-09-17
CVE-2026-90147 clk: devres: fix cleanup in devm_clk_get_optional_enabled_with_rate() — Linux - - 2026-09-17
CVE-2026-90145 hinic3: Fix skb linearization mismatch and drop skb when skb_checksum_help() failed — Linux 7.1 High 2026-09-17
CVE-2026-90144 dpll: fix NULL deref in dpll_device_ops() during teardown race — Linux - - 2026-09-17
CVE-2026-90143 net: kcm: Hold RCU read lock while running BPF parser — Linux 7.8 High 2026-09-17
CVE-2026-90142 virtio_net: Fix resize of the RX ring — Linux 7.8 High 2026-09-17
CVE-2026-90141 ipvs: fix integer overflow in ftp helper port/address parsing — Linux 7.3 High 2026-09-17
CVE-2026-90140 cuse: wait for pending RCU callbacks on module exit — Linux - - 2026-09-17
CVE-2026-90138 vsock: don't check the listener's sk_err in vsock_accept() — Linux - - 2026-09-17
CVE-2026-90139 fuse: check for NULL root inode in fuse_fill_super_submount — Linux - - 2026-09-17
CVE-2026-90137 platform/x86: hp-bioscfg: fix password encoding bounds check — Linux 7.7 High 2026-09-17
CVE-2026-90135 net: add missing ref_tracker_dir_exit() to alloc_netdev_mqs() — Linux - - 2026-09-17
CVE-2026-90136 platform/x86/amd/hsmp: Reject negative power cap writes in hwmon — Linux - - 2026-09-17
CVE-2026-90134 ntfs: fix kmap_local_page() usage in compress — Linux - - 2026-09-17
CVE-2026-90133 ntfs: Fix index_root heap OOB write in ntfs_ir_to_ib() — Linux 7.8 High 2026-09-17
CVE-2026-90132 ntfs: reject unprivileged writes to reserved $LX* xattrs — Linux 7.1 High 2026-09-17
CVE-2026-90131 ntfs: serialize resident iomap reads with mrec_lock — Linux 7.1 High 2026-09-17
CVE-2026-90130 vdpa_sim: fix cleanup after worker creation failure — Linux - - 2026-09-17
CVE-2026-90129 virtio_balloon: quiesce balloon work before device shutdown — Linux - - 2026-09-17

This page lists every published CVE security advisory associated with Linux. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.