Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17548

Browse all 17548 CVE security advisories affecting Linux. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Linux serves as the foundational operating system for the majority of internet servers, cloud infrastructure, and embedded devices, powering critical global digital services. Its open-source nature and widespread deployment have historically exposed it to diverse vulnerability classes, including remote code execution, buffer overflows, and privilege escalation flaws within kernel modules and system utilities. While the project maintains rigorous security practices, the sheer volume of code contributes to a high cumulative count of recorded Common Vulnerabilities and Exposures, currently exceeding eleven thousand. Notable incidents often stem from misconfigurations or unpatched legacy components rather than fundamental architectural failures. The community responds rapidly to disclosed threats, yet the extensive attack surface necessitates continuous vigilance. Administrators must prioritize regular updates and strict access controls to mitigate risks associated with this ubiquitous platform, ensuring stability across both enterprise and consumer environments.

CVE ID Title CVSS Severity Published
CVE-2026-89486 ipmi: Fix use-after-free of cmd_rcvr in _ipmi_destroy_user() — Linux 7.8 High 2026-09-11
CVE-2026-89485 lockd: pin next file across nlm_inspect_file lock-drop — Linux 9.8 Critical 2026-09-11
CVE-2026-89484 lockd: fix NULL dereference on lockowner allocation failure — Linux - - 2026-09-11
CVE-2026-89483 nvme: zero the discard fallback page — Linux 7.5 High 2026-09-11
CVE-2026-89481 nvme-tcp: fix host memory disclosure on R2T for a read command — Linux 7.5 High 2026-09-11
CVE-2026-89482 nvme-tcp: do not accept C2HData based on blk_rq_payload_bytes() alone — Linux 9.8 Critical 2026-09-11
CVE-2026-89480 nvme-tcp: reject a read that transferred too few bytes — Linux 7.5 High 2026-09-11
CVE-2026-89479 sctp: stop processing a packet once its association is deleted — Linux 9.8 Critical 2026-09-11
CVE-2026-89478 sctp: drop a chunk if its transport was removed — Linux 9.8 Critical 2026-09-11
CVE-2026-89477 sctp: fix NULL deref on untransmitted RECONF completion — Linux 7.5 High 2026-09-11
CVE-2026-89476 sctp: fix stream->outcnt underflow on duplicate RECONF responses — Linux 7.5 High 2026-09-11
CVE-2026-89475 power: supply: bq24257: fix use-after-free on remove — Linux - - 2026-09-11
CVE-2026-89474 power: supply: bq256xx: drain usb_work before freeing the charger — Linux - - 2026-09-11
CVE-2026-89473 power: supply: bq25890: Fix power_supply reference leak — Linux - - 2026-09-11
CVE-2026-89472 power: supply: charger-manager: register regulators before exposing sysfs — Linux 7.8 High 2026-09-11
CVE-2026-89471 power: supply: cros_usbpd-charger: bound the EC-reported port count — Linux 8.4 High 2026-09-11
CVE-2026-89469 power: supply: lp8727: fix use-after-free in lp8727_release_irq() — Linux 8.4 High 2026-09-11
CVE-2026-89470 power: supply: cros_usbpd: Limit port counts to EC_USB_PD_MAX_PORTS — Linux 8.4 High 2026-09-11
CVE-2026-89468 power: supply: lp8788-charger: fix use-after-free on remove — Linux - - 2026-09-11
CVE-2026-89467 power: supply: qcom_battmgr: fix use-after-free — Linux - - 2026-09-11
CVE-2026-89466 power: supply: qcom_battmgr: terminate the strings from firmware — Linux 7.7 High 2026-09-11
CVE-2026-89465 power: supply: rt9455: quiesce delayed work before teardown — Linux 8.4 High 2026-09-11
CVE-2026-89463 power: supply: ucs1002: fix use-after-free on remove — Linux - - 2026-09-11
CVE-2026-89464 power: supply: twl4030_charger: cancel workers via devm — Linux - - 2026-09-11
CVE-2026-89462 power: supply: max17040: propagate register read errors — Linux - - 2026-09-11
CVE-2026-89461 power: supply: max17040: synchronize work cancellation on suspend — Linux - - 2026-09-11
CVE-2026-89460 s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks — Linux - - 2026-09-11
CVE-2026-89459 s390/percpu: Fix MVIY_PERCPU() with older binutils — Linux 7.0 High 2026-09-11
CVE-2026-89458 s390/dasd: Do not complete a failed ESE read as successful — Linux - - 2026-09-11
CVE-2026-89457 s390/dasd: Guard sysfs discipline callbacks against unallocated private data — Linux - - 2026-09-11

This page lists every published CVE security advisory associated with Linux. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.