Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17546

Browse all 17546 CVE security advisories affecting Linux. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Linux serves as the foundational operating system for the majority of internet servers, cloud infrastructure, and embedded devices, powering critical global digital services. Its open-source nature and widespread deployment have historically exposed it to diverse vulnerability classes, including remote code execution, buffer overflows, and privilege escalation flaws within kernel modules and system utilities. While the project maintains rigorous security practices, the sheer volume of code contributes to a high cumulative count of recorded Common Vulnerabilities and Exposures, currently exceeding eleven thousand. Notable incidents often stem from misconfigurations or unpatched legacy components rather than fundamental architectural failures. The community responds rapidly to disclosed threats, yet the extensive attack surface necessitates continuous vigilance. Administrators must prioritize regular updates and strict access controls to mitigate risks associated with this ubiquitous platform, ensuring stability across both enterprise and consumer environments.

CVE ID Title CVSS Severity Published
CVE-2026-89604 efivarfs: Rate limit statfs() handler — Linux - - 2026-09-11
CVE-2026-89603 entry: Fix seccomp bypass after ptrace with TSYNC — Linux 8.4 High 2026-09-11
CVE-2026-89602 erofs: skip sufficiently large global buffers when resizing — Linux 7.8 High 2026-09-11
CVE-2026-89601 ext2: Fix lost inode updates for IS_SYNC inodes — Linux 8.8 High 2026-09-11
CVE-2026-89600 fanotify: fix use-after-free of file range info — Linux 7.8 High 2026-09-11
CVE-2026-89599 fbdev: omapfb: panel-dsi-cm: initialize lock before registering display — Linux 8.4 High 2026-09-11
CVE-2026-89598 fbdev: ssd1307fb: defer I2C transfers from damage callbacks — Linux - - 2026-09-11
CVE-2026-89597 fbdev: uvesafb: unregister connector callback on init failure — Linux 7.8 High 2026-09-11
CVE-2026-89596 forcedeth: fix off-by-one when saving/restoring non-PCI config space — Linux 7.1 High 2026-09-11
CVE-2026-89595 fsnotify: Fix stale object mask after concurrent mark updates — Linux - - 2026-09-11
CVE-2026-89593 hugetlb: only adjust reservation during unmapping if mapcount is 0 — Linux 7.1 High 2026-09-11
CVE-2026-89594 hsi: omap_ssi_core: fix missing DMA mask setup for SSI controller device — Linux 7.8 High 2026-09-11
CVE-2026-89592 accel/rocket: fix NULL dereference and integer overflow in rocket_job_push() — Linux - - 2026-09-11
CVE-2026-89591 accel/rocket: initialize job domain before cleanup paths — Linux - - 2026-09-11
CVE-2026-89589 acpi/apei/ghes: Use raw_spinlock_t for CXL CPER work locks — Linux - - 2026-09-11
CVE-2026-89590 accel/rocket: Fix error path handling in rocket_job_run() — Linux - - 2026-09-11
CVE-2026-89588 ACPI: APEI: GHES: fix ARM section length accounting after header — Linux 8.4 High 2026-09-11
CVE-2026-89587 ACPI: pfr_update: fix stack buffer overflow in query_capability() — Linux 7.8 High 2026-09-11
CVE-2026-89586 ata: libata-scsi: fix DSM TRIM for sector sizes larger than 2048 bytes — Linux 8.2 High 2026-09-11
CVE-2026-89585 auxdisplay: charlcd: cancel backlight work on registration failure — Linux 7.8 High 2026-09-11
CVE-2026-89584 block: validate user space vectors during extraction — Linux 7.8 High 2026-09-11
CVE-2026-89583 Bluetooth: eir: Fix OOB read in eir_get_service_data() — Linux 8.1 High 2026-09-11
CVE-2026-89582 bnx2x: fix double free in bnx2x_init_firmware() error path — Linux - - 2026-09-11
CVE-2026-89581 bpf, x86: Fix per-CPU address resolution into an extended register — Linux 7.8 High 2026-09-11
CVE-2026-89580 bpf: Disable preemption in __bpf_get_stack — Linux 7.8 High 2026-09-11
CVE-2026-89579 bpf: Harden bloom filter sizing and indexing on 32-bit kernels — Linux 7.8 High 2026-09-11
CVE-2026-89577 dm-io: report non-retryable errors separatedly — Linux - - 2026-09-11
CVE-2026-89578 dm-io: clone the source bio instead of copying its biovec — Linux - - 2026-09-11
CVE-2026-89576 dm-era: fix shadowed superblock leak on take-snap failure — Linux - - 2026-09-11
CVE-2026-89575 dm raid1: reserve space for NUL-terminator in build_constructor_string() — Linux - - 2026-09-11

This page lists every published CVE security advisory associated with Linux. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.