Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17500

Browse all 17500 CVE security advisories affecting Linux. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Linux serves as the foundational operating system for the majority of internet servers, cloud infrastructure, and embedded devices, powering critical global digital services. Its open-source nature and widespread deployment have historically exposed it to diverse vulnerability classes, including remote code execution, buffer overflows, and privilege escalation flaws within kernel modules and system utilities. While the project maintains rigorous security practices, the sheer volume of code contributes to a high cumulative count of recorded Common Vulnerabilities and Exposures, currently exceeding eleven thousand. Notable incidents often stem from misconfigurations or unpatched legacy components rather than fundamental architectural failures. The community responds rapidly to disclosed threats, yet the extensive attack surface necessitates continuous vigilance. Administrators must prioritize regular updates and strict access controls to mitigate risks associated with this ubiquitous platform, ensuring stability across both enterprise and consumer environments.

CVE ID Title CVSS Severity Published
CVE-2026-90008 scsi: megaraid_sas: Limit NVMe request size to the PRP chain frame — Linux 7.8 High 2026-09-16
CVE-2026-90007 scsi: pm8001: Use rollback index when freeing MSI-X vectors — Linux 7.8 High 2026-09-16
CVE-2026-90005 samples/damon/wsse: handle damon_start() failure — Linux - - 2026-09-16
CVE-2026-90006 samples/damon/mtier: handle damon_stop() failure — Linux - - 2026-09-16
CVE-2026-90004 mm/damon/core: handle region split failure in apply_min_nr_regions() — Linux - - 2026-09-16
CVE-2026-90002 ftrace: Take trace_array reference before accessing its ftrace_ops — Linux 7.8 High 2026-09-16
CVE-2026-90003 futex: Prevent rcuwait use-after-free during requeue PI — Linux 7.8 High 2026-09-16
CVE-2026-90001 HID: bpf: serialize device reference release in struct_ops destroy path — Linux 7.8 High 2026-09-16
CVE-2026-89999 HID: wacom: validate report length in wacom_intuos_pro2_bt_irq — Linux 8.1 High 2026-09-16
CVE-2026-90000 HID: rmi: fix OOB access with undersized RMI reports — Linux 8.8 High 2026-09-16
CVE-2026-89998 dm: fix race when loading and unloading a table — Linux 7.8 High 2026-09-16
CVE-2026-89996 dma-buf: dma-heap: don't publish fd before copy_to_user() succeeds — Linux - - 2026-09-16
CVE-2026-89997 dm: fix resume-vs-remove race — Linux 7.8 High 2026-09-16
CVE-2026-89995 dma-direct: return struct page from dma_direct_alloc_from_pool() — Linux 8.8 High 2026-09-16
CVE-2026-89994 dmaengine: fsl-edma: tracing: no ptr dereference during log output — Linux 7.8 High 2026-09-16
CVE-2026-89993 dmaengine: dw-edma: Initialize IRQ data before requesting IRQs — Linux - - 2026-09-16
CVE-2026-89992 cpuidle: dt_idle_genpd: kfree() the original name allocation — Linux 8.4 High 2026-09-16
CVE-2026-89991 bpf: Fix infinite loop in pcpu_freelist push with one possible CPU — Linux - - 2026-09-16
CVE-2026-89990 ceph: lock mutex in ceph_mds_check_access() — Linux 9.8 Critical 2026-09-16
CVE-2026-89989 ima: Check for ERR_PTR from dentry_path() in validate_hash_algo() — Linux - - 2026-09-16
CVE-2026-89988 kprobes: Protect kprobe_blacklist with RCU — Linux 7.8 High 2026-09-16
CVE-2026-89987 mm/huge_memory: transfer the pmd dirty bit to the folio on zap — Linux - - 2026-09-16
CVE-2026-89986 mm/mempolicy: fix sleeping allocation in alloc_pages_bulk_weighted_interleave() — Linux 7.8 High 2026-09-16
CVE-2026-89985 memcg: keep folio's objcg same as its node — Linux 7.8 High 2026-09-16
CVE-2026-89984 perf/x86/intel: Fix kernel address leakages in LBR stack — Linux - - 2026-09-16
CVE-2026-89983 i2c: core: fix debugfs UAF on adapter removal — Linux - - 2026-09-16
CVE-2026-89982 i2c: mux: Fix channel node leak on adapter add failure — Linux - - 2026-09-16
CVE-2026-89981 arm64: Don't read GMID_EL1 when MTE is disabled — Linux - - 2026-09-16
CVE-2026-89980 ALSA: harmony: initialize locks before requesting IRQ — Linux 8.4 High 2026-09-16
CVE-2026-89979 ALSA: pcm: Fix race between non-atomic ops and trigger-start — Linux 7.8 High 2026-09-16

This page lists every published CVE security advisory associated with Linux. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.