Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17500

Browse all 17500 CVE security advisories affecting Linux. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Linux serves as the foundational operating system for the majority of internet servers, cloud infrastructure, and embedded devices, powering critical global digital services. Its open-source nature and widespread deployment have historically exposed it to diverse vulnerability classes, including remote code execution, buffer overflows, and privilege escalation flaws within kernel modules and system utilities. While the project maintains rigorous security practices, the sheer volume of code contributes to a high cumulative count of recorded Common Vulnerabilities and Exposures, currently exceeding eleven thousand. Notable incidents often stem from misconfigurations or unpatched legacy components rather than fundamental architectural failures. The community responds rapidly to disclosed threats, yet the extensive attack surface necessitates continuous vigilance. Administrators must prioritize regular updates and strict access controls to mitigate risks associated with this ubiquitous platform, ensuring stability across both enterprise and consumer environments.

CVE ID Title CVSS Severity Published
CVE-2026-90128 vdpa/mlx5: fix wrong list iterated in add_direct_chain error path — Linux - - 2026-09-17
CVE-2026-90127 virtio: rtc: time out alarm requests — Linux - - 2026-09-17
CVE-2026-90126 rtc: pcf8563: fix clock provider leak on unbind — Linux - - 2026-09-17
CVE-2026-90125 smb: client: fix request buffer leak in smb2_new_read_req() — Linux - - 2026-09-17
CVE-2026-90123 irqchip/ast2700-intc: Avoid allocating in the irq_domain activate() callback — Linux - - 2026-09-17
CVE-2026-90124 irqchip/renesas-rzg2l: Fix loss of interrupt — Linux - - 2026-09-17
CVE-2026-90122 clk: visconti: Make sure clk_init_data is fully initialized — Linux - - 2026-09-17
CVE-2026-90121 irqchip/gic-v5: Clear per-CPU IRS data on teardown — Linux - - 2026-09-17
CVE-2026-90120 irqchip/gic-v5: Check get_logical_index() return value in MADT IAFFID parsing — Linux 8.4 High 2026-09-17
CVE-2026-90119 ALSA: ice1712: Fix the card leak at probe error with the auto-cleanup — Linux - - 2026-09-17
CVE-2026-90117 ntfs: validate usa_ofs before preserving the update sequence number — Linux - - 2026-09-17
CVE-2026-90118 ntfs: fix off-by-one page overflow in ntfs_decompress() — Linux 7.8 High 2026-09-17
CVE-2026-90116 ALSA: mtpav: shut down output timer before card teardown — Linux - - 2026-09-17
CVE-2026-90114 net: bridge: Reject descending VLAN tunnel ranges — Linux - - 2026-09-17
CVE-2026-90115 xsk: fix NULL pointer dereference in __xsk_rcv() — Linux - - 2026-09-17
CVE-2026-90113 netdevsim: update queue NAPI association on queue reset — Linux - - 2026-09-17
CVE-2026-90111 ip6mr: do not clone dst in ip6mr_cache_report() — Linux 7.8 High 2026-09-17
CVE-2026-90112 net: qlcnic: validate unified ROM sections before loading — Linux - - 2026-09-17
CVE-2026-90110 inetpeer: randomize RB-tree node comparison using SipHash — Linux 9.4 Critical 2026-09-17
CVE-2026-90108 net/smc: free stashed qentry before overwrite in REQ_ADD_LINK to ADD_LINK transition — Linux - - 2026-09-17
CVE-2026-90109 net: sched: fix 32-bit backlog wrap in gred, bfifo and plug enqueue — Linux - - 2026-09-17
CVE-2026-90107 net/smc: free pending qentry in smc_llc_flow_stop() before memset — Linux - - 2026-09-17
CVE-2026-90106 net: bridge: arp/nd proxy: fix reading neigh ha — Linux - - 2026-09-17
CVE-2026-90105 vxlan: fix reading neigh ha — Linux - - 2026-09-17
CVE-2026-90103 NFSv4.2: fix LAYOUTSTATS send buffer exhaustion — Linux 7.5 High 2026-09-17
CVE-2026-90104 NFSv4.1: zero referring call lists before decoding — Linux 9.8 Critical 2026-09-17
CVE-2026-90102 NFSv4/pnfs: key the data server cache on the NFS version — Linux 7.5 High 2026-09-17
CVE-2026-90100 ptp: netc: fix period truncation and potential divide-by-zero in PEROUT — Linux - - 2026-09-17
CVE-2026-90101 bnxt_en: Fix call to hardware monitoring event handler — Linux - - 2026-09-17
CVE-2026-90099 net/sched: account classifier filter allocations to memcg — Linux - - 2026-09-17

This page lists every published CVE security advisory associated with Linux. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.