Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17500

Browse all 17500 CVE security advisories affecting Linux. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Linux serves as the foundational operating system for the majority of internet servers, cloud infrastructure, and embedded devices, powering critical global digital services. Its open-source nature and widespread deployment have historically exposed it to diverse vulnerability classes, including remote code execution, buffer overflows, and privilege escalation flaws within kernel modules and system utilities. While the project maintains rigorous security practices, the sheer volume of code contributes to a high cumulative count of recorded Common Vulnerabilities and Exposures, currently exceeding eleven thousand. Notable incidents often stem from misconfigurations or unpatched legacy components rather than fundamental architectural failures. The community responds rapidly to disclosed threats, yet the extensive attack surface necessitates continuous vigilance. Administrators must prioritize regular updates and strict access controls to mitigate risks associated with this ubiquitous platform, ensuring stability across both enterprise and consumer environments.

CVE ID Title CVSS Severity Published
CVE-2026-90037 NFSD: Prevent client use-after-free during close_lru reaping — Linux 9.8 Critical 2026-09-16
CVE-2026-90038 NFSD: Prevent client use-after-free during export state revocation — Linux 9.8 Critical 2026-09-16
CVE-2026-90036 NFSD: Prevent client use-after-free during blocked-lock reaping — Linux 9.8 Critical 2026-09-16
CVE-2026-90034 usb: image: mdc800: change kmalloc() to kzalloc() — Linux - - 2026-09-16
CVE-2026-90035 drm/amd/display: fix division by zero in get_estimated_bw() — Linux - - 2026-09-16
CVE-2026-90033 ALSA: usb-audio: fix OOB write in snd_usbmidi_us122l_output() — Linux - - 2026-09-16
CVE-2026-90032 media: usbtv: keep device alive while ALSA card exists — Linux 7.8 High 2026-09-16
CVE-2026-90031 usb-storage: ene_ub6250: fix race between scan work and probe — Linux - - 2026-09-16
CVE-2026-90030 usb: dwc3: clear forceRM when issuing EndTransfer — Linux 7.8 High 2026-09-16
CVE-2026-90029 usb: storage: realtek_cr: fix use-after-free on disconnect — Linux - - 2026-09-16
CVE-2026-90028 usb: typec: hd3ss3220: track VBUS enable state per consumer — Linux - - 2026-09-16
CVE-2026-90027 usb: typec: qcom-pmic-typec: disable cc_debounce_dwork on stop — Linux 7.8 High 2026-09-16
CVE-2026-90026 usb: typec: qcom-pmic: cancel reset_work on stop — Linux 7.8 High 2026-09-16
CVE-2026-90025 usb: typec: ucsi: displayport: Fix OOB altmode array index — Linux 7.7 High 2026-09-16
CVE-2026-90024 usb: gadget: midi2: Fix null-pointer dereference in f_midi2_free_ep_reqs — Linux - - 2026-09-16
CVE-2026-90023 usb: gadget: f_mass_storage: fix null pointer dereference in fsg_common_set_num_buffers() — Linux - - 2026-09-16
CVE-2026-90021 usb: gadget: f_midi: initialize work in f_midi_alloc() — Linux - - 2026-09-16
CVE-2026-90022 usb: gadget: f_midi2: fix use-after-free in string attribute show path — Linux 7.8 High 2026-09-16
CVE-2026-90020 USB: gadget: fix NULL pointer dereference in gadget_dev_ioctl() — Linux - - 2026-09-16
CVE-2026-90019 usb: gadget: fix null pointer dereference in usb_put_function_instance() — Linux - - 2026-09-16
CVE-2026-90018 staging: rtl8723bs: fix OOB read / stack overflow in rtw_get_wps_attr() — Linux 8.8 High 2026-09-16
CVE-2026-90017 staging: rtl8723bs: fix OOB read in rtw_action_frame_parse() — Linux 7.1 High 2026-09-16
CVE-2026-90016 staging: rtl8723bs: fix OOB read in rtw_restruct_wmm_ie() — Linux 7.1 High 2026-09-16
CVE-2026-90015 xhci: fix lost bounce buffers on TDs spanning several ring segments — Linux - - 2026-09-16
CVE-2026-90014 tracing: Have show_event_filters/triggers files take trace array ref — Linux 7.8 High 2026-09-16
CVE-2026-90013 tracing: Take trace_array reference when opening options file — Linux 7.8 High 2026-09-16
CVE-2026-90012 spi: Fix DMA mapping ownership on partial map failure — Linux 9.8 Critical 2026-09-16
CVE-2026-90011 scsi: target: iscsi: Reserve a terminator byte for the login payload — Linux 9.1 Critical 2026-09-16
CVE-2026-90010 scsi: bsg: Cap io_uring sense copy to max_response_len — Linux 7.8 High 2026-09-16
CVE-2026-90009 scsi: bsg: Fix TOCTOU in io_uring passthrough command setup — Linux 7.8 High 2026-09-16

This page lists every published CVE security advisory associated with Linux. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.