Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17500

Browse all 17500 CVE security advisories affecting Linux. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Linux serves as the foundational operating system for the majority of internet servers, cloud infrastructure, and embedded devices, powering critical global digital services. Its open-source nature and widespread deployment have historically exposed it to diverse vulnerability classes, including remote code execution, buffer overflows, and privilege escalation flaws within kernel modules and system utilities. While the project maintains rigorous security practices, the sheer volume of code contributes to a high cumulative count of recorded Common Vulnerabilities and Exposures, currently exceeding eleven thousand. Notable incidents often stem from misconfigurations or unpatched legacy components rather than fundamental architectural failures. The community responds rapidly to disclosed threats, yet the extensive attack surface necessitates continuous vigilance. Administrators must prioritize regular updates and strict access controls to mitigate risks associated with this ubiquitous platform, ensuring stability across both enterprise and consumer environments.

CVE ID Title CVSS Severity Published
CVE-2026-89918 KVM: arm64: Correctly handle end of VA space TLBI invalidation — Linux 9.3 Critical 2026-09-16
CVE-2026-89917 KVM: arm64: Handle VNCR TLB invalidation race with vcpu_put() VNCR unmapping — Linux - - 2026-09-16
CVE-2026-89916 KVM: arm64: Make VNCR invalidation participate in MMU invalidation retry — Linux 9.3 Critical 2026-09-16
CVE-2026-89914 KVM: arm64: Sign-extend VA for range-based TLBI invalidation — Linux 9.3 Critical 2026-09-16
CVE-2026-89915 KVM: arm64: Remove VM-wide VNCR mapping counter — Linux 9.3 Critical 2026-09-16
CVE-2026-89913 KVM: arm64: vgic-v3: take an LPI reference in vgic_v3_save_pending_tables — Linux 8.8 High 2026-09-16
CVE-2026-89911 KVM: arm64: Correctly cap TLBI Range to the architural limit — Linux 7.9 High 2026-09-16
CVE-2026-89912 KVM: arm64: vgic-its: Don't dereference a NULL collection on ITT save — Linux 7.1 High 2026-09-16
CVE-2026-89910 LoongArch: KVM: Fix uninitialized stack variable issue with dmsintc — Linux 7.3 High 2026-09-16
CVE-2026-89908 LoongArch: KVM: Preserve memslot arch flags on KVM_MR_FLAGS_ONLY — Linux 8.8 High 2026-09-16
CVE-2026-89909 LoongArch: KVM: Free init resources if kvm_init() fails — Linux - - 2026-09-16
CVE-2026-89907 LoongArch: KVM: Validate MSI data before routing it to EIOINTC — Linux 8.8 High 2026-09-16
CVE-2026-89906 LoongArch: BPF: Refactor jump offset calculation in tail call — Linux 7.8 High 2026-09-16
CVE-2026-89904 LoongArch: Fix acpi_package_ids[] array overflow — Linux 8.4 High 2026-09-16
CVE-2026-89905 LoongArch: BPF: Move arena register slot below TCC context — Linux - - 2026-09-16
CVE-2026-89903 LoongArch: Do not save/restore percpu base register in rethook trampoline — Linux 7.8 High 2026-09-16
CVE-2026-89902 LoongArch: Avoid preempt count underflow without probe — Linux 7.8 High 2026-09-16
CVE-2026-89901 media: airspy: use vb2_video_unregister_device() on disconnect to fix NULL deref — Linux - - 2026-09-16
CVE-2026-89900 media: cec: core: Fix kmemleak due to missed rc_free_device() call — Linux - - 2026-09-16
CVE-2026-89899 media: cec: disable delayed work before freeing an interrupted transmit — Linux 7.8 High 2026-09-16
CVE-2026-89898 media: cec: extron-da-hd-4k-plus: add sanity check — Linux 8.8 High 2026-09-16
CVE-2026-89897 media: cec: Serialize exclusive follower delivery — Linux 7.5 High 2026-09-16
CVE-2026-89896 media: cedrus: fix memory leak in cedrus_init_ctrls() — Linux - - 2026-09-16
CVE-2026-89895 media: cobalt: Avoid freeing ALSA private data twice — Linux - - 2026-09-16
CVE-2026-89894 media: cx231xx: reject geometry changes while the VBI queue is busy — Linux 7.8 High 2026-09-16
CVE-2026-89892 media: em28xx: defer audio-only extension registration — Linux - - 2026-09-16
CVE-2026-89893 media: cx23885: cancel NetUP CI work before teardown — Linux 7.8 High 2026-09-16
CVE-2026-89891 media: em28xx: fix use-after-free of dev_next->devlist on disconnect — Linux - - 2026-09-16
CVE-2026-89890 media: go7007: defer the ALSA v4l2 put until card release — Linux 7.8 High 2026-09-16
CVE-2026-89889 media: i2c: imx415: Release runtime PM reference on VBLANK error — Linux - - 2026-09-16

This page lists every published CVE security advisory associated with Linux. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.