Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17500

Browse all 17500 CVE security advisories affecting Linux. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Linux serves as the foundational operating system for the majority of internet servers, cloud infrastructure, and embedded devices, powering critical global digital services. Its open-source nature and widespread deployment have historically exposed it to diverse vulnerability classes, including remote code execution, buffer overflows, and privilege escalation flaws within kernel modules and system utilities. While the project maintains rigorous security practices, the sheer volume of code contributes to a high cumulative count of recorded Common Vulnerabilities and Exposures, currently exceeding eleven thousand. Notable incidents often stem from misconfigurations or unpatched legacy components rather than fundamental architectural failures. The community responds rapidly to disclosed threats, yet the extensive attack surface necessitates continuous vigilance. Administrators must prioritize regular updates and strict access controls to mitigate risks associated with this ubiquitous platform, ensuring stability across both enterprise and consumer environments.

CVE ID Title CVSS Severity Published
CVE-2026-89888 media: i2c: ov02a10: fix endpoint parsing use-after-free — Linux 7.8 High 2026-09-16
CVE-2026-89887 media: i2c: ov7740: fix use-after-destroy in remove — Linux 7.8 High 2026-09-16
CVE-2026-89885 media: platform: mtk-mdp3: Fix SCP device refcounting — Linux 8.4 High 2026-09-16
CVE-2026-89886 media: intel/ipu6: fix async notifier cleanup leak on parse error — Linux - - 2026-09-16
CVE-2026-89884 media: platform: mtk-mdp3: fix NULL deref on failed SCP lookup — Linux - - 2026-09-16
CVE-2026-89883 media: rc: sunxi-cir: Unregister rc device on probe failure — Linux 7.8 High 2026-09-16
CVE-2026-89882 media: rkvdec: hevc: guard INTER_REF_PIC_SET_PRED index underflow — Linux 7.8 High 2026-09-16
CVE-2026-89881 media: rtl2832_sdr: use vb2_video_unregister_device() on remove to fix DMA leak — Linux - - 2026-09-16
CVE-2026-89880 media: rtl2832_sdr: release URBs and stream buffers on start_streaming() failure — Linux 7.8 High 2026-09-16
CVE-2026-89879 media: s2255: bound JPEG frame size before copying into the buffer — Linux - - 2026-09-16
CVE-2026-89878 media: s2255: check firmware size before reading trailing marker — Linux - - 2026-09-16
CVE-2026-89877 media: saa7164: fix cleanup on resource allocation failure — Linux 8.4 High 2026-09-16
CVE-2026-89875 media: ti: vpe: quiesce overflow recovery before freeing streams — Linux 7.8 High 2026-09-16
CVE-2026-89876 media: tda18250: fix possible integer overflow — Linux - - 2026-09-16
CVE-2026-89874 media: v4l2-async: avoid deleting unlinked ASC entry on link error — Linux - - 2026-09-16
CVE-2026-89872 media: v4l2-fwnode: Fix fwnode leak in v4l2_fwnode_parse_link — Linux - - 2026-09-16
CVE-2026-89873 media: v4l2-ctrls: validate HEVC EXT SPS RPS counts — Linux 7.8 High 2026-09-16
CVE-2026-89871 media: video-i2c: fix kthread error pointer left in kthread_vid_cap on failure — Linux - - 2026-09-16
CVE-2026-89870 media: zoran: Avoid freeing a registered video_device twice — Linux 7.8 High 2026-09-16
CVE-2026-89869 media: qcom: iris: use disable_irq() during power-off — Linux - - 2026-09-16
CVE-2026-89868 media: chips-media: wave5: Add timeout while stop_streaming — Linux - - 2026-09-16
CVE-2026-89867 media: chips-media: wave5: Defer job_finish() only when a DEC_PIC was queued — Linux - - 2026-09-16
CVE-2026-89866 media: chips-media: wave5: Resume device before setting EOS flag — Linux - - 2026-09-16
CVE-2026-89865 scsi: qla2xxx: Zero SFP DMA buffer in FRU/I2C bsg handlers — Linux - - 2026-09-16
CVE-2026-89864 scsi: qla2xxx: Bound i2c->length in I2C bsg handlers — Linux - - 2026-09-16
CVE-2026-89863 scsi: qla2xxx: edif: Fix NULL pointer deref in RX SA delete check — Linux 7.5 High 2026-09-16
CVE-2026-89862 scsi: qla2xxx: Fix BSG job leak on validate flash image error path — Linux - - 2026-09-16
CVE-2026-89861 scsi: qla2xxx: Hold vport reference in qla24xx_report_id_acquisition() — Linux 8.1 High 2026-09-16
CVE-2026-89860 scsi: qla2xxx: Initialize NVMe abort_work once at submission — Linux 8.8 High 2026-09-16
CVE-2026-89859 scsi: qla2xxx: Zero dport diagnostics buffer to avoid info leak — Linux - - 2026-09-16

This page lists every published CVE security advisory associated with Linux. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.