Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17546

Browse all 17546 CVE security advisories affecting Linux. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Linux serves as the foundational operating system for the majority of internet servers, cloud infrastructure, and embedded devices, powering critical global digital services. Its open-source nature and widespread deployment have historically exposed it to diverse vulnerability classes, including remote code execution, buffer overflows, and privilege escalation flaws within kernel modules and system utilities. While the project maintains rigorous security practices, the sheer volume of code contributes to a high cumulative count of recorded Common Vulnerabilities and Exposures, currently exceeding eleven thousand. Notable incidents often stem from misconfigurations or unpatched legacy components rather than fundamental architectural failures. The community responds rapidly to disclosed threats, yet the extensive attack surface necessitates continuous vigilance. Administrators must prioritize regular updates and strict access controls to mitigate risks associated with this ubiquitous platform, ensuring stability across both enterprise and consumer environments.

CVE ID Title CVSS Severity Published
CVE-2026-89663 nfsd: revoke copy-notify stateids before dropping their reference — Linux 8.8 High 2026-09-11
CVE-2026-89664 nfsd: release OPEN-decoded posix ACLs via op_release — Linux 7.5 High 2026-09-11
CVE-2026-89662 NFSD: Prevent lock owner use-after-free during client teardown — Linux 9.8 Critical 2026-09-11
CVE-2026-89661 NFSD: Prevent post-shutdown use-after-free in unlock_filesystem — Linux - - 2026-09-11
CVE-2026-89659 NFSD: Prevent client use-after-free during delegation revoke — Linux 9.8 Critical 2026-09-11
CVE-2026-89660 NFSD: Prevent client use-after-free during admin state revocation — Linux 9.8 Critical 2026-09-11
CVE-2026-89658 NFSD: Prevent client use-after-free during NFSv4.0 revoked-state cleanup — Linux 9.8 Critical 2026-09-11
CVE-2026-89657 libceph: validate OSD extent maps before cursor advance — Linux 7.5 High 2026-09-11
CVE-2026-89655 ceph: fix UAF in __kick_flushing_caps() on cf entry freed during unlock — Linux 9.8 Critical 2026-09-11
CVE-2026-89656 libceph: reject buckets with mismatched CRUSH ids — Linux 9.8 Critical 2026-09-11
CVE-2026-89654 ceph: fix UAF in check_new_map() on session freed during unlock — Linux 9.8 Critical 2026-09-11
CVE-2026-89653 ceph: reject export_targets ranks >= CEPH_MAX_MDS in mdsmap decode — Linux 9.8 Critical 2026-09-11
CVE-2026-89651 ceph: bound MDSCapAuth path and fs_name decode in handle_session() — Linux 9.8 Critical 2026-09-11
CVE-2026-89652 ceph: bound copied dentry name length in NFS export get_name — Linux 9.8 Critical 2026-09-11
CVE-2026-89650 ceph: bound num_export_targets array for mds info v2/v3 — Linux 9.1 Critical 2026-09-11
CVE-2026-89649 ceph: bound xattr value length in __build_xattrs() — Linux 9.1 Critical 2026-09-11
CVE-2026-89647 ceph: do not repeat ceph_trim_dentries() if no progress possible — Linux 7.5 High 2026-09-11
CVE-2026-89648 ceph: cap delegated inode count in ceph_parse_deleg_inos() — Linux 7.5 High 2026-09-11
CVE-2026-89646 ceph: fix leaked inode reference on writeback abort at umount — Linux 7.8 High 2026-09-11
CVE-2026-89645 btrfs: drop recovered reloc root refs on recovery failure — Linux - - 2026-09-11
CVE-2026-89644 btrfs: fix extent map leak in NOCOW direct I/O write — Linux - - 2026-09-11
CVE-2026-89643 audit: avoid dropping live tree ref on fsnotify rule autoremove — Linux 9.8 Critical 2026-09-11
CVE-2026-89642 cifs: call pagecache_isize_extended() in cifs_setsize() when extending — Linux - - 2026-09-11
CVE-2026-89641 cifs: clear tcon after cifsFileInfo_put() in cifs_file_set_size() — Linux 7.8 High 2026-09-11
CVE-2026-89639 cifs: use cifs_invalidate_cache() in cifs_do_truncate() for O_TRUNC — Linux 7.1 High 2026-09-11
CVE-2026-89640 cifs: fix loff_t underflow in cifs_remap_file_range() when len == 0 — Linux 7.1 High 2026-09-11
CVE-2026-89638 smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions — Linux 7.8 High 2026-09-11
CVE-2026-89637 smb: client: fix UAF and buffer leak in cifs_check_trans2() for malformed secondary T2 — Linux 9.8 Critical 2026-09-11
CVE-2026-89635 ksmbd: only rebind the reopened file's own oplock on durable reconnect — Linux 9.8 Critical 2026-09-11
CVE-2026-89636 smb: client: clear ce->tgthint in free_tgts() — Linux 9.8 Critical 2026-09-11

This page lists every published CVE security advisory associated with Linux. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.