Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17546

Browse all 17546 CVE security advisories affecting Linux. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Linux serves as the foundational operating system for the majority of internet servers, cloud infrastructure, and embedded devices, powering critical global digital services. Its open-source nature and widespread deployment have historically exposed it to diverse vulnerability classes, including remote code execution, buffer overflows, and privilege escalation flaws within kernel modules and system utilities. While the project maintains rigorous security practices, the sheer volume of code contributes to a high cumulative count of recorded Common Vulnerabilities and Exposures, currently exceeding eleven thousand. Notable incidents often stem from misconfigurations or unpatched legacy components rather than fundamental architectural failures. The community responds rapidly to disclosed threats, yet the extensive attack surface necessitates continuous vigilance. Administrators must prioritize regular updates and strict access controls to mitigate risks associated with this ubiquitous platform, ensuring stability across both enterprise and consumer environments.

CVE ID Title CVSS Severity Published
CVE-2026-89724 media: vicodec: fix out-of-bounds write in FWHT encoder — Linux 7.8 High 2026-09-11
CVE-2026-89723 nilfs2: fix slab-out-of-bounds in nilfs_direct_propagate after truncation — Linux 7.8 High 2026-09-11
CVE-2026-89721 phy: rockchip-samsung-dcphy: fix out-of-range max_register — Linux - - 2026-09-11
CVE-2026-89722 PCI/sysfs: Fix out-of-bounds read in pci_write_legacy_io() — Linux - - 2026-09-11
CVE-2026-89720 ubifs: fix out-of-bounds read in signature length check — Linux 7.7 High 2026-09-11
CVE-2026-89719 zram: fix out-of-bounds access in read_block_state() — Linux - - 2026-09-11
CVE-2026-89717 zram: set default primary compressor in zram_destroy_comps() — Linux - - 2026-09-11
CVE-2026-89718 zram: fix out-of-bounds access in writeback_store() — Linux - - 2026-09-11
CVE-2026-89716 zram: validate deflate params — Linux - - 2026-09-11
CVE-2026-89715 NFS/localio: fix ref leak on nfs_uuid_add_file failure — Linux - - 2026-09-11
CVE-2026-89714 NFS: fix delegation_hash_table leak when nfs4_server_common_setup() fails — Linux - - 2026-09-11
CVE-2026-89713 NFSD: check truncate permission under inode lock — Linux 9.1 Critical 2026-09-11
CVE-2026-89712 NFSD: restart ssc_expire_umount walk after dropping nfsd_ssc_lock — Linux 9.8 Critical 2026-09-11
CVE-2026-89711 NFSD: remove flawed WARN_ON_ONCE from nfsd_mode_check — Linux 8.2 High 2026-09-11
CVE-2026-89710 NFSv4.1: fix layout segment leak on the pnfs_layout_process() forget path — Linux - - 2026-09-11
CVE-2026-89709 lockd, nfsd: RCU-protect nlmsvc_ops dispatch — Linux 8.1 High 2026-09-11
CVE-2026-89708 nfsd: RCU-protect cl_cb_session to fix use-after-free on session teardown — Linux 9.8 Critical 2026-09-11
CVE-2026-89706 nfsd: Reset write verifier when async COPY writeback fails — Linux 7.5 High 2026-09-11
CVE-2026-89707 nfsd: release path refs on follow_down() error — Linux 7.5 High 2026-09-11
CVE-2026-89705 nfsd: restore rq_status_counter to even on all nfsd_dispatch() exit paths — Linux 7.1 High 2026-09-11
CVE-2026-89704 nfsd: sample writeback error cursor before async COPY loop — Linux 7.5 High 2026-09-11
CVE-2026-89703 nfsd: set SC_STATUS_FREED in nfsd4_drop_revoked_stid for delegations — Linux 9.8 Critical 2026-09-11
CVE-2026-89702 nfsd: size fh_verify server sockaddr slot by xpt_locallen — Linux 9.8 Critical 2026-09-11
CVE-2026-89701 nfsd: validate nseconds in TIME_DELEG decode paths — Linux - - 2026-09-11
CVE-2026-89700 nfsd: validate sockaddr length per family in listener_set — Linux - - 2026-09-11
CVE-2026-89698 nfsd: widen nfsd_genl_rqstp address fields to sockaddr_storage — Linux - - 2026-09-11
CVE-2026-89699 nfsd: validate symlink target length in NFSv4 CREATE — Linux 7.5 High 2026-09-11
CVE-2026-89697 nfsd: add fh_want_write() for early-verified SETATTR in nfsd_proc_setattr() — Linux 9.1 Critical 2026-09-11
CVE-2026-89696 nfsd: block non-SAVEFH ops after FOREIGN PUTFH to prevent NULL deref — Linux 7.5 High 2026-09-11
CVE-2026-89695 nfsd: cap decoded POSIX ACL count to bound sort cost — Linux 7.5 High 2026-09-11

This page lists every published CVE security advisory associated with Linux. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.