Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17500

Browse all 17500 CVE security advisories affecting Linux. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Linux serves as the foundational operating system for the majority of internet servers, cloud infrastructure, and embedded devices, powering critical global digital services. Its open-source nature and widespread deployment have historically exposed it to diverse vulnerability classes, including remote code execution, buffer overflows, and privilege escalation flaws within kernel modules and system utilities. While the project maintains rigorous security practices, the sheer volume of code contributes to a high cumulative count of recorded Common Vulnerabilities and Exposures, currently exceeding eleven thousand. Notable incidents often stem from misconfigurations or unpatched legacy components rather than fundamental architectural failures. The community responds rapidly to disclosed threats, yet the extensive attack surface necessitates continuous vigilance. Administrators must prioritize regular updates and strict access controls to mitigate risks associated with this ubiquitous platform, ensuring stability across both enterprise and consumer environments.

CVE ID Title CVSS Severity Published
CVE-2026-90098 net: sparx5: fix sleep in atomic context in MAC table access — Linux - - 2026-09-17
CVE-2026-90097 Drivers: hv: vmbus: Skip VMBus module cleanup for non-nested root partition — Linux - - 2026-09-17
CVE-2026-90096 fuse: invalidate the correct range after O_APPEND direct write — Linux - - 2026-09-17
CVE-2026-90095 fuse: Fix the condition to enable over-io-uring — Linux - - 2026-09-17
CVE-2026-90093 Bluetooth: L2CAP: access chan->conn safely in get/setsockopt — Linux 7.8 High 2026-09-17
CVE-2026-90094 arm64: process: Fix context switching MTE store-only tag check — Linux - - 2026-09-17
CVE-2026-90092 Bluetooth: L2CAP: reject accept queue add unless BT_LISTEN — Linux 8.0 High 2026-09-17
CVE-2026-90091 Bluetooth: L2CAP: fix race l2cap_sock_cleanup_listen() vs. put_chan — Linux 8.0 High 2026-09-17
CVE-2026-90090 Bluetooth: btmtksdio: Fix out-of-bounds DMA read in the TX path — Linux - - 2026-09-17
CVE-2026-90088 Bluetooth: RFCOMM: Validate MTU in rfcomm_apply_pn() to prevent infinite loop — Linux - - 2026-09-17
CVE-2026-90089 Bluetooth: btnxpuart: Validate the FW dump header length — Linux 7.1 High 2026-09-17
CVE-2026-90087 Bluetooth: do not leak an hci_conn when a second LE connect is rejected — Linux - - 2026-09-17
CVE-2026-90085 octeontx2-af: fix NULL deref in NIX TM tree debugfs read path — Linux - - 2026-09-17
CVE-2026-90086 xsk: honor XDP_TX_METADATA in zero-copy path — Linux - - 2026-09-17
CVE-2026-90084 octeontx2-vf: fix workqueue and netdev race in probe/remove — Linux - - 2026-09-17
CVE-2026-90082 net: mana: Cap MSI-X vectors to the device MSI-X table size — Linux - - 2026-09-17
CVE-2026-90083 net/sched: act_ife: Only operate on Ethernet frames — Linux - - 2026-09-17
CVE-2026-90081 net/rds: use wq_has_sleeper() in rds_cong_map_updated() — Linux - - 2026-09-17
CVE-2026-90080 octeontx2-pf: fix NULL deref of af_xdp_zc_qidx on rep setup — Linux - - 2026-09-17
CVE-2026-90079 octeontx2-af: fix cn20k mailbox lifetime on repeated rvu_mbox_init() — Linux - - 2026-09-17
CVE-2026-90078 net/sched: act_skbmod: fix length calculations and avoid invalid header warnings — Linux - - 2026-09-17
CVE-2026-90076 net/sched: fq: add overflow bounds to quantum and initial quantum — Linux - - 2026-09-17
CVE-2026-90077 net: fix a resource leak in copy_net_ns() error handling path — Linux - - 2026-09-17
CVE-2026-90075 net/sched: fq_codel: clamp default quantum and mtu — Linux - - 2026-09-17
CVE-2026-90074 net/sched: fq_pie: clamp default quantum to avoid signed overflow — Linux - - 2026-09-17
CVE-2026-90073 net/sched: hhf: clamp quantum before hhf_change() to avoid overflow — Linux - - 2026-09-17
CVE-2026-90072 net/sched: sfq: clamp quantum to avoid signed overflow soft lockup — Linux - - 2026-09-17
CVE-2026-90071 net/sched: sch_teql: restore skb->dev on the slave failure path — Linux 7.8 High 2026-09-17
CVE-2026-90070 tpm: st33zp24: Return zero on status read failure — Linux - - 2026-09-17
CVE-2026-90069 crypto: acomp - allocate async request context when cloning — Linux 7.8 High 2026-09-17

This page lists every published CVE security advisory associated with Linux. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.