Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17547

Browse all 17547 CVE security advisories affecting Linux. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Linux serves as the foundational operating system for the majority of internet servers, cloud infrastructure, and embedded devices, powering critical global digital services. Its open-source nature and widespread deployment have historically exposed it to diverse vulnerability classes, including remote code execution, buffer overflows, and privilege escalation flaws within kernel modules and system utilities. While the project maintains rigorous security practices, the sheer volume of code contributes to a high cumulative count of recorded Common Vulnerabilities and Exposures, currently exceeding eleven thousand. Notable incidents often stem from misconfigurations or unpatched legacy components rather than fundamental architectural failures. The community responds rapidly to disclosed threats, yet the extensive attack surface necessitates continuous vigilance. Administrators must prioritize regular updates and strict access controls to mitigate risks associated with this ubiquitous platform, ensuring stability across both enterprise and consumer environments.

CVE ID Title CVSS Severity Published
CVE-2026-89514 scsi: fnic: Use GFP_ATOMIC for VLAN alloc under spinlock — Linux - - 2026-09-11
CVE-2026-89515 scsi: core: Fill in DMA padding bytes in scsi_alloc_sgtables() — Linux - - 2026-09-11
CVE-2026-89513 RISC-V: KVM: Fix PMU event info array size overflow — Linux 8.8 High 2026-09-11
CVE-2026-89511 qede: Fix NULL pointer dereference in TPA fragment processing — Linux 7.5 High 2026-09-11
CVE-2026-89512 remoteproc: scp: Fix device reference leak on failed lookup — Linux - - 2026-09-11
CVE-2026-89510 RDMA/cxgb4: Cancel reg_work before freeing device on remove — Linux 7.8 High 2026-09-11
CVE-2026-89509 RDMA/ionic: Embed counter driver data in rdma_counter allocation — Linux - - 2026-09-11
CVE-2026-89508 RDMA/ucma: Lock the handler in ucma_set_ib_path() — Linux 7.8 High 2026-09-11
CVE-2026-89507 RDMA/ucma: Lock the handler in ucma_write_cm_event() — Linux 7.8 High 2026-09-11
CVE-2026-89505 RDMA/uverbs: Guard legacy bundles without method_elm — Linux - - 2026-09-11
CVE-2026-89506 RDMA/uverbs: Add UVERBS_ATTR_UHW to UVERBS_METHOD_REG_MR — Linux - - 2026-09-11
CVE-2026-89504 regulator: as3722_get_regulator_dt_data: fix premature of_node_put leaving dangling of_node pointer — Linux 8.4 High 2026-09-11
CVE-2026-89503 ring-buffer: Fix subbuf resize race with ring_buffer_alloc_read_page() — Linux 7.8 High 2026-09-11
CVE-2026-89502 ring-buffer: Free cpu_buffer::free_page with subbuf_order — Linux - - 2026-09-11
CVE-2026-89501 ring-buffer: Hold cpu_buffer::lock when resizing a subbuf — Linux 7.8 High 2026-09-11
CVE-2026-89500 ring-buffer: Make cpu_buffer::free_page a buffer_data_read_page — Linux 7.8 High 2026-09-11
CVE-2026-89499 ring-buffer: Stop remote reader update when page swap fails — Linux 7.8 High 2026-09-11
CVE-2026-89498 orangefs: fix double-free of trailer_buf on readdir copy failure — Linux - - 2026-09-11
CVE-2026-89497 orangefs: skip leading spaces before parsing client debug masks — Linux 7.8 High 2026-09-11
CVE-2026-89496 ocfs2: always run deallocs on copy-on-write completion — Linux - - 2026-09-11
CVE-2026-89495 ocfs2: bound namelen in dlm_migrate_request_handler — Linux 9.8 Critical 2026-09-11
CVE-2026-89493 ocfs2: validate rl_used against rl_count in refcount block validator — Linux 8.8 High 2026-09-11
CVE-2026-89494 ocfs2: validate lengths in dlm_mig_lockres_handler — Linux 9.8 Critical 2026-09-11
CVE-2026-89492 ocfs2: validate directory-index entry counts when reading metadata — Linux 9.8 Critical 2026-09-11
CVE-2026-89490 ocfs2: fix readdir position truncation on 32-bit kernels — Linux - - 2026-09-11
CVE-2026-89491 ocfs2: cluster: don't sleep while holding o2hb_live_lock in o2hb_region_pin() — Linux - - 2026-09-11
CVE-2026-89489 openrisc: fix arbitrary kernel memory access via or1k_atomic syscall — Linux 7.8 High 2026-09-11
CVE-2026-89488 openvswitch: Fix CT limit teardown use-after-free — Linux 7.8 High 2026-09-11
CVE-2026-89487 openvswitch: only skb_tx_error() a packet we are about to drop — Linux 7.8 High 2026-09-11
CVE-2026-89486 ipmi: Fix use-after-free of cmd_rcvr in _ipmi_destroy_user() — Linux 7.8 High 2026-09-11

This page lists every published CVE security advisory associated with Linux. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.