Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17548

Browse all 17548 CVE security advisories affecting Linux. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Linux serves as the foundational operating system for the majority of internet servers, cloud infrastructure, and embedded devices, powering critical global digital services. Its open-source nature and widespread deployment have historically exposed it to diverse vulnerability classes, including remote code execution, buffer overflows, and privilege escalation flaws within kernel modules and system utilities. While the project maintains rigorous security practices, the sheer volume of code contributes to a high cumulative count of recorded Common Vulnerabilities and Exposures, currently exceeding eleven thousand. Notable incidents often stem from misconfigurations or unpatched legacy components rather than fundamental architectural failures. The community responds rapidly to disclosed threats, yet the extensive attack surface necessitates continuous vigilance. Administrators must prioritize regular updates and strict access controls to mitigate risks associated with this ubiquitous platform, ensuring stability across both enterprise and consumer environments.

CVE ID Title CVSS Severity Published
CVE-2026-89546 SUNRPC: close backchannel before destroying callback service — Linux 9.8 Critical 2026-09-11
CVE-2026-89545 sunrpc: defer rq_argp and rq_resp free until after RCU grace period — Linux 7.8 High 2026-09-11
CVE-2026-89543 sunrpc: fix use-after-free in __rpc_clnt_handle_event and __rpc_clnt_remove_pipedir — Linux - - 2026-09-11
CVE-2026-89544 SUNRPC: fix gssx_dec_option_array error path bugs — Linux 7.5 High 2026-09-11
CVE-2026-89542 SUNRPC: harden gss_krb5_unwrap_v2 against short tokens — Linux 9.8 Critical 2026-09-11
CVE-2026-89541 SUNRPC: harden gss_unwrap_resp_priv length checks — Linux 9.8 Critical 2026-09-11
CVE-2026-89539 SUNRPC: reject duplicate CREDS_VALUE options — Linux - - 2026-09-11
CVE-2026-89540 sunrpc: init gssp_lock before publishing proc entry — Linux 7.8 High 2026-09-11
CVE-2026-89538 SUNRPC: Reject krb5 v2 wrap tokens with oversized ec field — Linux 9.8 Critical 2026-09-11
CVE-2026-89537 SUNRPC: Reject short RFC 4121 MIC tokens in gss_krb5_verify_mic_v2 — Linux 9.1 Critical 2026-09-11
CVE-2026-89536 SUNRPC: wait for in-flight client TLS handshake callback — Linux 9.8 Critical 2026-09-11
CVE-2026-89535 svcrdma: Reorder rpcrdma_rn_unregister before rdma_destroy_id — Linux 8.1 High 2026-09-11
CVE-2026-89534 svcrdma: Clear sc_cm_id when ADDR_CHANGE replacement fails — Linux 8.8 High 2026-09-11
CVE-2026-89533 svcrdma: Fix offset arithmetic in read_chunk_range — Linux 9.8 Critical 2026-09-11
CVE-2026-89531 svcrdma: Reject connection when transport allocation fails — Linux - - 2026-09-11
CVE-2026-89532 svcrdma: Fix pcl_for_each_segment for empty chunks — Linux 9.1 Critical 2026-09-11
CVE-2026-89530 svcrdma: Reject inline replies that overflow the pull-up buffer — Linux 9.8 Critical 2026-09-11
CVE-2026-89529 svcrdma: Reject oversized Read segments at decode time — Linux - - 2026-09-11
CVE-2026-89528 svcrdma: Reject Read lists that exceed the page budget — Linux 7.5 High 2026-09-11
CVE-2026-89527 svcrdma: Use svc_xprt_put to free listener on create failure — Linux - - 2026-09-11
CVE-2026-89526 svcrdma: Validate Read chunk positions before reconstruction — Linux 9.8 Critical 2026-09-11
CVE-2026-89525 udf: reject VAT indexes equal to the entry count — Linux - - 2026-09-11
CVE-2026-89524 wifi: ath6kl: clamp assoc request/response lengths before subtracting IE offsets — Linux 8.1 High 2026-09-11
CVE-2026-89523 wifi: mt76: mt7925: cancel pending mlo_pm_work — Linux 7.8 High 2026-09-11
CVE-2026-89522 media: staging/ipu7: fix async notifier UAF on probe error path — Linux 7.8 High 2026-09-11
CVE-2026-89520 sched/core: Make core-sched flips wait for in-flight selections — Linux 7.8 High 2026-09-11
CVE-2026-89521 sched/core: Handle pick_task() releasing the rq lock — Linux 7.3 High 2026-09-11
CVE-2026-89519 sched_ext: Replace SCX_RQ_BAL_KEEP with a dispatch verdict return — Linux - - 2026-09-11
CVE-2026-89517 sched_ext: Fix rq->core_pick corruption under core scheduling — Linux - - 2026-09-11
CVE-2026-89518 sched_ext: Fix this_rq() assumptions in dispatch kfuncs — Linux - - 2026-09-11

This page lists every published CVE security advisory associated with Linux. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.