Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17546

Browse all 17546 CVE security advisories affecting Linux. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Linux serves as the foundational operating system for the majority of internet servers, cloud infrastructure, and embedded devices, powering critical global digital services. Its open-source nature and widespread deployment have historically exposed it to diverse vulnerability classes, including remote code execution, buffer overflows, and privilege escalation flaws within kernel modules and system utilities. While the project maintains rigorous security practices, the sheer volume of code contributes to a high cumulative count of recorded Common Vulnerabilities and Exposures, currently exceeding eleven thousand. Notable incidents often stem from misconfigurations or unpatched legacy components rather than fundamental architectural failures. The community responds rapidly to disclosed threats, yet the extensive attack surface necessitates continuous vigilance. Administrators must prioritize regular updates and strict access controls to mitigate risks associated with this ubiquitous platform, ensuring stability across both enterprise and consumer environments.

CVE ID Title CVSS Severity Published
CVE-2026-89694 nfsd: check client ownership when cancelling a copy-notify stateid — Linux - - 2026-09-11
CVE-2026-89693 nfsd: check nfsd4_acl_to_attr() return value in nfsd4_create() — Linux - - 2026-09-11
CVE-2026-89692 nfsd: clear CALLBACK_RUNNING on failed delegation recall queue — Linux 7.5 High 2026-09-11
CVE-2026-89690 nfsd: defer vfree of compound ops to fix rpc_status UAF — Linux 7.8 High 2026-09-11
CVE-2026-89691 nfsd: clear opcnt on compound arg release to prevent OOB read — Linux 7.1 High 2026-09-11
CVE-2026-89689 nfsd: don't free session slots that are still in use — Linux 9.8 Critical 2026-09-11
CVE-2026-89687 nfsd: ensure nfsd_file_do_acquire() does not use a non-opened file — Linux 7.5 High 2026-09-11
CVE-2026-89688 nfsd: drop the stateid, not the stateowner, on seqid_op replay retry — Linux 9.8 Critical 2026-09-11
CVE-2026-89686 nfsd: fix BUG_ON in nfsd4_alloc_layout_stateid on racing delegation revoke — Linux 9.8 Critical 2026-09-11
CVE-2026-89685 nfsd: fix clock domain mismatch in clients_still_reclaiming() — Linux 7.5 High 2026-09-11
CVE-2026-89684 nfsd: fix cpntf publish race in nfs4_init_cp_state — Linux 7.5 High 2026-09-11
CVE-2026-89683 nfsd: fix dentry ref leak on V4ROOT export filehandle lookup — Linux - - 2026-09-11
CVE-2026-89682 nfsd: fix fcache_disposal UAF by inlining dispose state into nfsd_net — Linux 8.1 High 2026-09-11
CVE-2026-89681 nfsd: fix layout fence worker double-reference race — Linux 9.8 Critical 2026-09-11
CVE-2026-89679 nfsd: fix null dereference in nfsd4_setattr for deleg timestamp attrs — Linux 7.5 High 2026-09-11
CVE-2026-89680 nfsd: fix nfsd_file leak on inter-server COPY setup failure — Linux 7.5 High 2026-09-11
CVE-2026-89678 nfsd: fix partial-write detection in nfsd_direct_write — Linux 7.5 High 2026-09-11
CVE-2026-89677 nfsd: fix possible fh_compose of wrong dentry in nfsd4_create_file() — Linux 9.8 Critical 2026-09-11
CVE-2026-89676 nfsd: fix stale s2s_cp_stateids IDR entry for async COPY — Linux 9.8 Critical 2026-09-11
CVE-2026-89675 nfsd: fix UAF in async copy cancel and shutdown — Linux 9.8 Critical 2026-09-11
CVE-2026-89674 nfsd: fix XDR length calculation in nfsd4_ff_encode_layoutget — Linux 9.8 Critical 2026-09-11
CVE-2026-89673 nfsd: fix XDR padding calculation in ff_encode_getdeviceinfo — Linux - - 2026-09-11
CVE-2026-89672 nfsd: gate nfs2 setacl by argp->mask — Linux 9.1 Critical 2026-09-11
CVE-2026-89671 nfsd: gate nfs3 setacl by argp->mask — Linux 9.1 Critical 2026-09-11
CVE-2026-89670 nfsd: hold rcu across localio cmpxchg retry — Linux 7.8 High 2026-09-11
CVE-2026-89669 nfsd: initialize copy-notify stateid before publishing it — Linux 9.8 Critical 2026-09-11
CVE-2026-89667 nfsd: close shrinker/GC/fsnotify vs per-net shutdown race in filecache — Linux 8.1 High 2026-09-11
CVE-2026-89668 nfsd: move nfsd_debugfs_init() after nfsd4_init_slabs() in init_nfsd() — Linux 7.8 High 2026-09-11
CVE-2026-89666 nfsd: reject out-of-range nseconds in NFSv3 SETATTR and create ops — Linux - - 2026-09-11
CVE-2026-89665 nfsd: reject out-of-range useconds in NFSv2 SETATTR/CREATE — Linux 8.2 High 2026-09-11

This page lists every published CVE security advisory associated with Linux. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.