Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17546

Browse all 17546 CVE security advisories affecting Linux. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Linux serves as the foundational operating system for the majority of internet servers, cloud infrastructure, and embedded devices, powering critical global digital services. Its open-source nature and widespread deployment have historically exposed it to diverse vulnerability classes, including remote code execution, buffer overflows, and privilege escalation flaws within kernel modules and system utilities. While the project maintains rigorous security practices, the sheer volume of code contributes to a high cumulative count of recorded Common Vulnerabilities and Exposures, currently exceeding eleven thousand. Notable incidents often stem from misconfigurations or unpatched legacy components rather than fundamental architectural failures. The community responds rapidly to disclosed threats, yet the extensive attack surface necessitates continuous vigilance. Administrators must prioritize regular updates and strict access controls to mitigate risks associated with this ubiquitous platform, ensuring stability across both enterprise and consumer environments.

CVE ID Title CVSS Severity Published
CVE-2026-89634 smb: client: fix ALIGN() overflow in symlink_data() error context loop — Linux 9.1 Critical 2026-09-11
CVE-2026-89633 smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2() — Linux 9.8 Critical 2026-09-11
CVE-2026-89632 smb: client: fix use-before-check of ReparseDataLength in reparse_buf_ptr() — Linux 8.2 High 2026-09-11
CVE-2026-89631 smb: client: reject a tree connect response whose byte count is too small — Linux 9.1 Critical 2026-09-11
CVE-2026-89630 smb: client: restore the data_offset bound in is_valid_oplock_break() — Linux 9.1 Critical 2026-09-11
CVE-2026-89629 HID: corsair-void: Check size of status and firmware events before reading them — Linux - - 2026-09-11
CVE-2026-89628 HID: picolcd: clamp eeprom debugfs read to bytes actually received — Linux - - 2026-09-11
CVE-2026-89626 HID: sensor: custom: Fix field sysfs group cleanup on failure — Linux 8.8 High 2026-09-11
CVE-2026-89627 HID: roccat: free buffered reports when destroying device — Linux - - 2026-09-11
CVE-2026-89625 HID: sony: fix UAF of ghl_poke_timer / ghl_urb at driver unbind — Linux - - 2026-09-11
CVE-2026-89623 HID: mcp2221: stop device IO before hid_hw_stop — Linux - - 2026-09-11
CVE-2026-89624 HID: universal-pidff: stop the device when force-feedback init fails — Linux 7.8 High 2026-09-11
CVE-2026-89622 HID: mcp2221: clear rxbuf after I2C/SMBus transfer completes — Linux 7.8 High 2026-09-11
CVE-2026-89621 HID: mcp2221: validate report size in mcp2221_raw_event() — Linux - - 2026-09-11
CVE-2026-89620 HID: intel-thc-hid: intel-quickspi: validate report size before copy — Linux 7.8 High 2026-09-11
CVE-2026-89619 HID: intel-thc-hid: intel-quickspi: bound GET_REPORT response to the caller buffer — Linux 7.8 High 2026-09-11
CVE-2026-89617 fs/ntfs3: validate dirty page table on log replay — Linux 7.8 High 2026-09-11
CVE-2026-89618 eventfs: Initialize ei->children and ei->list in init_ei() — Linux - - 2026-09-11
CVE-2026-89616 fs/ntfs3: fix info-leak on partial LZNT decompress in ni_read_frame() — Linux 7.5 High 2026-09-11
CVE-2026-89614 ntfs: bound the free-cluster bitmap scan to the volume — Linux 9.8 Critical 2026-09-11
CVE-2026-89615 fs/ntfs3: bound page_lcns[] index by the log record — Linux 8.4 High 2026-09-11
CVE-2026-89613 ntfs: reject invalid empty mapping pairs — Linux 9.8 Critical 2026-09-11
CVE-2026-89612 ntfs: reject invalid MFT LCNs from boot sector — Linux 9.8 Critical 2026-09-11
CVE-2026-89611 ntfs: validate non-resident attribute offsets — Linux 9.8 Critical 2026-09-11
CVE-2026-89610 ntfs: verify run length exceeding volume boundary — Linux 9.8 Critical 2026-09-11
CVE-2026-89609 ecryptfs: hold msg ctx list lock when cleaning daemon queue — Linux 7.8 High 2026-09-11
CVE-2026-89607 ecryptfs: reject oversized encrypted_key_size in parse_tag_3_packet — Linux 7.8 High 2026-09-11
CVE-2026-89608 ecryptfs: pass packet set buffer size to parser — Linux 7.1 High 2026-09-11
CVE-2026-89606 ecryptfs: reject too-small tag 70 packets — Linux 7.8 High 2026-09-11
CVE-2026-89605 ecryptfs: release message context on send failure — Linux 7.8 High 2026-09-11

This page lists every published CVE security advisory associated with Linux. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.