Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17500

Browse all 17500 CVE security advisories affecting Linux. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Linux serves as the foundational operating system for the majority of internet servers, cloud infrastructure, and embedded devices, powering critical global digital services. Its open-source nature and widespread deployment have historically exposed it to diverse vulnerability classes, including remote code execution, buffer overflows, and privilege escalation flaws within kernel modules and system utilities. While the project maintains rigorous security practices, the sheer volume of code contributes to a high cumulative count of recorded Common Vulnerabilities and Exposures, currently exceeding eleven thousand. Notable incidents often stem from misconfigurations or unpatched legacy components rather than fundamental architectural failures. The community responds rapidly to disclosed threats, yet the extensive attack surface necessitates continuous vigilance. Administrators must prioritize regular updates and strict access controls to mitigate risks associated with this ubiquitous platform, ensuring stability across both enterprise and consumer environments.

CVE ID Title CVSS Severity Published
CVE-2026-89978 accel/amdxdna: return early from a zero-length flush — Linux - - 2026-09-16
CVE-2026-89976 accel/ethosu: fix job completion fence cleanup — Linux - - 2026-09-16
CVE-2026-89977 accel/ethosu: check MMIO mapping errors in probe — Linux - - 2026-09-16
CVE-2026-89975 nvme-fabrics: fix DHCHAP secret leak on parse failure — Linux - - 2026-09-16
CVE-2026-89974 nvme-fc: fix double free of fabrics options when nvme_add_ctrl() fails — Linux 7.5 High 2026-09-16
CVE-2026-89972 nvme: add missing SRCU grace period in error path — Linux 9.8 Critical 2026-09-16
CVE-2026-89973 nvme-tcp: check the data direction of a C2HData PDU — Linux 8.2 High 2026-09-16
CVE-2026-89971 nvme: skip the zoned limits update if the zone info query failed — Linux 7.5 High 2026-09-16
CVE-2026-89969 nvmet-tcp: fix out-of-bounds write when receiving an over-long PDU — Linux 9.8 Critical 2026-09-16
CVE-2026-89970 nvmet-auth: Synchronize timeout work during SQ teardown — Linux 9.8 Critical 2026-09-16
CVE-2026-89968 nvmet-tcp: reject unsolicited H2CData PDUs — Linux 7.5 High 2026-09-16
CVE-2026-89967 mm/migrate_device: avoid out-of-bounds writes for compound folios — Linux 7.8 High 2026-09-16
CVE-2026-89966 mm/hugetlb_cma: fix null nodemask dereference in hugetlb_cma_alloc_frozen_folio — Linux - - 2026-09-16
CVE-2026-89965 nvdimm/btt: reject an arena whose nfree is below the lane count — Linux 7.8 High 2026-09-16
CVE-2026-89964 parisc: eisa: Fix infinite loop when parsing invalid IRQ value — Linux - - 2026-09-16
CVE-2026-89963 powerpc/kexec_file: Fix null-ptr-def in extra size calculation — Linux - - 2026-09-16
CVE-2026-89962 powerpc/kexec_file: Prevent kexec range truncation — Linux - - 2026-09-16
CVE-2026-89961 powerpc/mm: fix wrong addr_pfn tracking in compound vmemmap population — Linux 7.8 High 2026-09-16
CVE-2026-89960 s390/vfio-ap: fix stale pqap_hook pointer on error in vfio_ap_mdev_set_kvm() — Linux 8.8 High 2026-09-16
CVE-2026-89959 s390/vfio-ap: Fix control domain removal in vfio_ap_mdev_cfg_remove — Linux 8.8 High 2026-09-16
CVE-2026-89957 s390/vfio-ap: Fix hot-unplug skipped when last AP adapter or domain removed — Linux 8.8 High 2026-09-16
CVE-2026-89958 s390/vfio-ap: Fix dereference matrix_mdev->kvm without checking for NULL — Linux - - 2026-09-16
CVE-2026-89956 s390/vfio-ap: Fix missing lock required to access list of ap_matrix_mdev objects — Linux - - 2026-09-16
CVE-2026-89955 s390/vfio-ap: Fix NULL deref in status_show() during queue probe — Linux - - 2026-09-16
CVE-2026-89954 mtd: afs: validate v2 image info bounds — Linux 8.0 High 2026-09-16
CVE-2026-89953 mtd: mtdoops: free page bitmap when the backing MTD is removed — Linux - - 2026-09-16
CVE-2026-89952 mtd: rawnand: validate ONFI extended parameter page sections — Linux - - 2026-09-16
CVE-2026-89951 batman-adv: fix stale receive device on merged fragments — Linux 8.8 High 2026-09-16
CVE-2026-89949 batman-adv: dat: avoid unaligned fault in IP extraction — Linux - - 2026-09-16
CVE-2026-89950 batman-adv: mcast: linearize skbuff for packet generation — Linux - - 2026-09-16

This page lists every published CVE security advisory associated with Linux. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.