Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17500

Browse all 17500 CVE security advisories affecting Linux. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Linux serves as the foundational operating system for the majority of internet servers, cloud infrastructure, and embedded devices, powering critical global digital services. Its open-source nature and widespread deployment have historically exposed it to diverse vulnerability classes, including remote code execution, buffer overflows, and privilege escalation flaws within kernel modules and system utilities. While the project maintains rigorous security practices, the sheer volume of code contributes to a high cumulative count of recorded Common Vulnerabilities and Exposures, currently exceeding eleven thousand. Notable incidents often stem from misconfigurations or unpatched legacy components rather than fundamental architectural failures. The community responds rapidly to disclosed threats, yet the extensive attack surface necessitates continuous vigilance. Administrators must prioritize regular updates and strict access controls to mitigate risks associated with this ubiquitous platform, ensuring stability across both enterprise and consumer environments.

CVE ID Title CVSS Severity Published
CVE-2026-90067 libceph: validate banner payload length — Linux 7.5 High 2026-09-17
CVE-2026-90068 ASoC: dapm: Fix off-by-one check on the second enum channel — Linux - - 2026-09-17
CVE-2026-90066 samples/ftrace: Fix kthread_stop() on ERR_PTR in ftrace-direct-multi-modify — Linux - - 2026-09-17
CVE-2026-90064 drm/xe: Reject page faults from non-fault-mode scratch VMs — Linux - - 2026-09-17
CVE-2026-90065 net/smc: release the internal TCP sock on IPPROTO_SMC socket creation failure — Linux - - 2026-09-17
CVE-2026-90063 virtio-net: Ensure that TCP packets don't overflow gso_segs — Linux - - 2026-09-17
CVE-2026-90062 netfilter: nf_tables: move hardware offload step after building the chain blob — Linux 7.1 High 2026-09-17
CVE-2026-90061 netfilter: nf_tables: skip double clone set expressions on element insert — Linux - - 2026-09-17
CVE-2026-90060 ALSA: control: Don't add invalid kcontrols to LED layer — Linux - - 2026-09-17
CVE-2026-90059 net: stmmac: restore NET_IP_ALIGN in the RX DMA offset — Linux 7.5 High 2026-09-17
CVE-2026-90058 net/sched: bound qdisc_pkt_len to prevent qdisc soft lockup — Linux - - 2026-09-17
CVE-2026-90057 slip: remove slip_hangup() to fix use-after-free in slip_receive_buf() — Linux 7.8 High 2026-09-17
CVE-2026-90056 net: fec: only stop PTP if it was initialized — Linux - - 2026-09-17
CVE-2026-90054 tcp: fix corruption of urgent data on multi-segment retransmit — Linux - - 2026-09-17
CVE-2026-90055 usb: atm: usbatm: fix invalid ci_range initialization — Linux - - 2026-09-17
CVE-2026-90053 net/sched: sch_htb: limit htb_classify inner-class filter hops — Linux - - 2026-09-17
CVE-2026-90052 dm-integrity: fix buffer overflow with keyed discard — Linux 7.8 High 2026-09-17
CVE-2026-90051 tcp: reject non zerocopy devmem tx — Linux 7.8 High 2026-09-17
CVE-2026-90050 net/sched: fq: clamp quantum and initial_quantum in change path — Linux - - 2026-09-17
CVE-2026-90049 net: skbuff: don't skb_tx_error() the source skb in skb_zerocopy() — Linux 9.3 Critical 2026-09-16
CVE-2026-90048 fs/ntfs3: fix slab-out-of-bounds write in ni_create_attr_list() — Linux 9.8 Critical 2026-09-16
CVE-2026-90047 drm/xe: Don't hand out the flat CCS storage as usable VRAM — Linux 7.8 High 2026-09-16
CVE-2026-90046 mm/page_alloc: don't spin_trylock() in NMI on UP — Linux 7.8 High 2026-09-16
CVE-2026-90044 usb: gadget: f_fs: Fix Use-After-Free in AIO error path — Linux 7.8 High 2026-09-16
CVE-2026-90045 USB: gadget: ffs: fix mm lifetime handling — Linux 7.8 High 2026-09-16
CVE-2026-90043 zram: fix slot lock bit position on big-endian 64-bit — Linux 7.8 High 2026-09-16
CVE-2026-90042 ceph: properly decrypt filenames in vmalloc() buffers — Linux 9.8 Critical 2026-09-16
CVE-2026-90040 KVM: SEV: Forcefully invalidate SNP VMSA if its backing gmem page is zapped — Linux - - 2026-09-16
CVE-2026-90041 HID: sony: clean up device list on probe failure — Linux 8.8 High 2026-09-16
CVE-2026-90039 NFSD: Guard admin state-revocation walks with NFSD_NET_UP — Linux - - 2026-09-16

This page lists every published CVE security advisory associated with Linux. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.