Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17547

Browse all 17547 CVE security advisories affecting Linux. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Linux serves as the foundational operating system for the majority of internet servers, cloud infrastructure, and embedded devices, powering critical global digital services. Its open-source nature and widespread deployment have historically exposed it to diverse vulnerability classes, including remote code execution, buffer overflows, and privilege escalation flaws within kernel modules and system utilities. While the project maintains rigorous security practices, the sheer volume of code contributes to a high cumulative count of recorded Common Vulnerabilities and Exposures, currently exceeding eleven thousand. Notable incidents often stem from misconfigurations or unpatched legacy components rather than fundamental architectural failures. The community responds rapidly to disclosed threats, yet the extensive attack surface necessitates continuous vigilance. Administrators must prioritize regular updates and strict access controls to mitigate risks associated with this ubiquitous platform, ensuring stability across both enterprise and consumer environments.

CVE ID Title CVSS Severity Published
CVE-2026-89787 ext4: check dir entry fits before reading the hash trailer in ext4_search_dir() — Linux - - 2026-09-16
CVE-2026-89785 fs/ntfs3: fix out-of-bounds read of INDEX_ROOT in reparse/objid init — Linux - - 2026-09-16
CVE-2026-89783 xfrm6: fix out-of-bounds write in xfrm6_input_addr() when secpath is full — Linux 9.8 Critical 2026-09-16
CVE-2026-89784 SUNRPC: check rpc_sockaddr2uaddr() return value in rpcb_register_inet4/6 — Linux - - 2026-09-16
CVE-2026-89782 fs/ntfs3: reject restart table growth beyond U16_MAX entries — Linux 8.4 High 2026-09-16
CVE-2026-89780 net: qualcomm: rmnet: restore skb->dev on deaggregated frames — Linux - - 2026-09-16
CVE-2026-89781 fs/ntfs3: fix out-of-bounds read in read_log_rec_buf() — Linux 8.4 High 2026-09-16
CVE-2026-89779 fs/ntfs3: validate ef->size covers the record's name and value — Linux 9.1 Critical 2026-09-16
CVE-2026-89777 vfio/pci: clear vdev->msi_perm after freeing it on init failure — Linux 8.8 High 2026-09-16
CVE-2026-89778 isofs: fix out-of-bounds page array access on empty zisofs block — Linux 9.8 Critical 2026-09-16
CVE-2026-89776 vxlan: vnifilter: enforce exact length of GROUP/GROUP6 attributes — Linux - - 2026-09-16
CVE-2026-89775 KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation — Linux 9.3 Critical 2026-09-16
CVE-2026-89774 Bluetooth: SCO: hold sk properly in sco_conn_ready — Linux 8.8 High 2026-09-16
CVE-2026-89773 drm/amd/display: Skip Update HDCP Config In Transition State — Linux - - 2026-09-11
CVE-2026-89772 btrfs: write-protect folios during data writeback — Linux - - 2026-09-11
CVE-2026-89771 ring-buffer: Fix subbuf resize race with ring buffer readers — Linux 7.8 High 2026-09-11
CVE-2026-89770 iomap: don't free integrity payload that doesn't exist — Linux - - 2026-09-11
CVE-2026-89769 clocksource/drivers/nxp-pit: Fix IRQ leak on cpuhp_setup_state error path — Linux 7.4 High 2026-09-11
CVE-2026-89768 fs: fix user path of nested backing files — Linux - - 2026-09-11
CVE-2026-89767 ovl: fix double end_creating() on the casefold-mismatch path — Linux 7.8 High 2026-09-11
CVE-2026-89766 pidfd: hold exec_update_lock around namespace ioctl — Linux - - 2026-09-11
CVE-2026-89765 timers/itimer: Zero-init old itimerval before copy to userspace — Linux - - 2026-09-11
CVE-2026-89764 rust: devres: fix race between concurrent revokers — Linux 7.8 High 2026-09-11
CVE-2026-89762 apparmor: fix cred UAF caused by begin_current_label_crit_section() — Linux 7.8 High 2026-09-11
CVE-2026-89763 KEYS: trusted: Fix TPM teardown ordering — Linux 7.8 High 2026-09-11
CVE-2026-89761 apparmor: fix out-of-bounds write when null terminating a label vec — Linux 7.8 High 2026-09-11
CVE-2026-89760 mm, swap: don't free a hibernation slot that is in the swap cache — Linux 7.8 High 2026-09-11
CVE-2026-89759 mm/kmemleak: avoid soft lockup when scanning task stacks — Linux - - 2026-09-11
CVE-2026-89758 mm/mempolicy: skip non-present PMDs when queueing folios — Linux 7.8 High 2026-09-11
CVE-2026-89757 mm/mglru: fix and remove redundant unevictable folio handling — Linux - - 2026-09-11

This page lists every published CVE security advisory associated with Linux. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.