Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17548

Browse all 17548 CVE security advisories affecting Linux. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Linux serves as the foundational operating system for the majority of internet servers, cloud infrastructure, and embedded devices, powering critical global digital services. Its open-source nature and widespread deployment have historically exposed it to diverse vulnerability classes, including remote code execution, buffer overflows, and privilege escalation flaws within kernel modules and system utilities. While the project maintains rigorous security practices, the sheer volume of code contributes to a high cumulative count of recorded Common Vulnerabilities and Exposures, currently exceeding eleven thousand. Notable incidents often stem from misconfigurations or unpatched legacy components rather than fundamental architectural failures. The community responds rapidly to disclosed threats, yet the extensive attack surface necessitates continuous vigilance. Administrators must prioritize regular updates and strict access controls to mitigate risks associated with this ubiquitous platform, ensuring stability across both enterprise and consumer environments.

CVE ID Title CVSS Severity Published
CVE-2026-89576 dm-era: fix shadowed superblock leak on take-snap failure — Linux - - 2026-09-11
CVE-2026-89575 dm raid1: reserve space for NUL-terminator in build_constructor_string() — Linux - - 2026-09-11
CVE-2026-89574 dm array: validate array block headers on read — Linux 7.8 High 2026-09-11
CVE-2026-89573 dm array: reject an array block whose value size is not the caller's — Linux 7.8 High 2026-09-11
CVE-2026-89572 cpufreq: apple-soc: Fix OPP table cleanup — Linux - - 2026-09-11
CVE-2026-89570 cxl/mce: Make the MCE notifier per-region — Linux 7.8 High 2026-09-11
CVE-2026-89571 cxl/features: bound fwctl command payload to the input buffer — Linux 7.1 High 2026-09-11
CVE-2026-89569 Bluetooth: RFCOMM: serialize security confirmation handling — Linux 8.8 High 2026-09-11
CVE-2026-89568 kho: fix size calculation in kho_preserved_memory_reserve() — Linux - - 2026-09-11
CVE-2026-89566 jbd2: check need_resched() when skipping busy checkpoint buffers — Linux - - 2026-09-11
CVE-2026-89567 jbd2: bound shrinker scans by examined checkpoint buffers — Linux - - 2026-09-11
CVE-2026-89565 ipip: fix skb leak in collect_md mode when metadata_dst allocation fails — Linux - - 2026-09-11
CVE-2026-89564 ip: orphan prefetched skbs before multicast forwarding — Linux 7.8 High 2026-09-11
CVE-2026-89563 ip6_tunnel: use skb_cow_head() in ip6_tnl_xmit() — Linux 7.8 High 2026-09-11
CVE-2026-89562 ip6_gre: fix hardware header length for NBMA tunnels — Linux 7.8 High 2026-09-11
CVE-2026-89561 ipv6: rpl: fix NULL dereference of idev in ipv6_rpl_srh_rcv() — Linux 7.5 High 2026-09-11
CVE-2026-89560 landlock: Require LANDLOCK_ACCESS_FS_MAKE_REG for whiteout creation — Linux 8.4 High 2026-09-11
CVE-2026-89558 md/raid10: fix still_degraded being inverted in raid10_sync_request() — Linux 9.8 Critical 2026-09-11
CVE-2026-89559 libnvdimm/labels: Prevent integer overflow in __nd_label_validate() — Linux 7.8 High 2026-09-11
CVE-2026-89557 md: do overflow check for sb->bblog_shift in super_1_load() — Linux 7.8 High 2026-09-11
CVE-2026-89556 module: validate string table section types — Linux - - 2026-09-11
CVE-2026-89554 mptcp: fix uninitialized local_id in syncookie MP_JOIN reconstruction — Linux 8.2 High 2026-09-11
CVE-2026-89555 mpls: reload header after pskb_may_pull() — Linux 9.8 Critical 2026-09-11
CVE-2026-89553 nouveau/gem: reserve the bo in the info ioctl around the vma lookup — Linux 7.8 High 2026-09-11
CVE-2026-89552 params: fix charp corruption on allocation failure — Linux - - 2026-09-11
CVE-2026-89551 SUNRPC: xdr_buf_trim: clamp buf->len to avoid underflow — Linux 9.8 Critical 2026-09-11
CVE-2026-89550 SUNRPC: svcauth_gss: enforce krb5 token minimum length — Linux 9.8 Critical 2026-09-11
CVE-2026-89549 sunrpc: route to a populated pool in svc_pool_for_cpu() — Linux 7.5 High 2026-09-11
CVE-2026-89547 SUNRPC: Check svc pool percpu counter allocation — Linux 8.1 High 2026-09-11
CVE-2026-89548 SUNRPC: always drain cache_cleaner before destroying a cache_detail — Linux 7.8 High 2026-09-11

This page lists every published CVE security advisory associated with Linux. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.