Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17500

Browse all 17500 CVE security advisories affecting Linux. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Linux serves as the foundational operating system for the majority of internet servers, cloud infrastructure, and embedded devices, powering critical global digital services. Its open-source nature and widespread deployment have historically exposed it to diverse vulnerability classes, including remote code execution, buffer overflows, and privilege escalation flaws within kernel modules and system utilities. While the project maintains rigorous security practices, the sheer volume of code contributes to a high cumulative count of recorded Common Vulnerabilities and Exposures, currently exceeding eleven thousand. Notable incidents often stem from misconfigurations or unpatched legacy components rather than fundamental architectural failures. The community responds rapidly to disclosed threats, yet the extensive attack surface necessitates continuous vigilance. Administrators must prioritize regular updates and strict access controls to mitigate risks associated with this ubiquitous platform, ensuring stability across both enterprise and consumer environments.

CVE ID Title CVSS Severity Published
CVE-2026-89858 scsi: qla2xxx: Bound image count in qla2x00_update_fru_versions() — Linux - - 2026-09-16
CVE-2026-89856 scsi: qla2xxx: Clamp MSI-X derived queue counts to avoid truncation — Linux 8.4 High 2026-09-16
CVE-2026-89857 scsi: qla2xxx: Hold qpair lock when sending NVMe LS reject — Linux 9.8 Critical 2026-09-16
CVE-2026-89855 scsi: qla2xxx: Serialize flash version read in reset handler — Linux - - 2026-09-16
CVE-2026-89854 scsi: qla2xxx: Fix cs84xx use-after-free on host teardown — Linux 7.8 High 2026-09-16
CVE-2026-89853 scsi: qla2xxx: Fix FCE trace use-after-free during firmware dump — Linux - - 2026-09-16
CVE-2026-89852 scsi: qla2xxx: Zero mailbox struct in qla2x00_get_firmware_state() — Linux - - 2026-09-16
CVE-2026-89851 scsi: qla2xxx: Fix FCE trace enable parsing in debugfs — Linux - - 2026-09-16
CVE-2026-89850 scsi: qla2xxx: Don't query firmware state while chip is down — Linux - - 2026-09-16
CVE-2026-89849 scsi: qla2xxx: Reject non-SCSI SRB on status IOCB fast path — Linux 8.8 High 2026-09-16
CVE-2026-89848 scsi: qla2xxx: Quiesce response IRQ before freeing request queue — Linux 8.1 High 2026-09-16
CVE-2026-89847 scsi: qla2xxx: Avoid double completion in async IOCB timeout — Linux 9.8 Critical 2026-09-16
CVE-2026-89846 scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read — Linux 9.1 Critical 2026-09-16
CVE-2026-89845 scsi: qla2xxx: Avoid req_q_map double-read in qla2x00_error_entry() — Linux - - 2026-09-16
CVE-2026-89844 scsi: qla2xxx: Hold vport_slock for host map update in report ID acquisition — Linux 8.8 High 2026-09-16
CVE-2026-89842 scsi: qla2xxx: Skip NVMe LS reject IOCB when FW not started — Linux - - 2026-09-16
CVE-2026-89843 scsi: qla2xxx: Zero-init bsg stack buffers to avoid info leak — Linux - - 2026-09-16
CVE-2026-89841 f2fs: only redirty pinned folios in redirty_blocks — Linux 7.8 High 2026-09-16
CVE-2026-89840 f2fs: validate MOVE_RANGE destination size — Linux 7.1 High 2026-09-16
CVE-2026-89839 f2fs: use the mount idmap for the owner check in f2fs_xattr_advise_set() — Linux - - 2026-09-16
CVE-2026-89838 f2fs: limit recovery filename logging to stored length — Linux 7.1 High 2026-09-16
CVE-2026-89837 f2fs: fix dentry folio leak in find_in_level — Linux - - 2026-09-16
CVE-2026-89836 f2fs: fix folio_nr_pages() race after put in large folio invalidate — Linux 7.8 High 2026-09-16
CVE-2026-89835 f2fs: avoid NULL checkpoint thread access in sysfs — Linux - - 2026-09-16
CVE-2026-89834 f2fs: fix to migrate all curseg types during free_segment_range — Linux - - 2026-09-16
CVE-2026-89833 f2fs: fix to avoid potential deadloop in f2fs_fsync_node_pages() — Linux - - 2026-09-16
CVE-2026-89832 f2fs: fix to clear dirty flag on folio in error path — Linux 7.8 High 2026-09-16
CVE-2026-89831 f2fs: protect critical_task_priority updates with s_umount — Linux - - 2026-09-16
CVE-2026-89830 f2fs: fix valid block count leak on data block allocation failure — Linux - - 2026-09-16
CVE-2026-89829 f2fs: fix to pass folio->index to f2fs_sanity_check_node_footer() — Linux 7.8 High 2026-09-16

This page lists every published CVE security advisory associated with Linux. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.