Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17983

Browse all 17983 CVE security advisories affecting Linux. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Linux serves as the foundational operating system for the majority of internet servers, cloud infrastructure, and embedded devices, powering critical global digital services. Its open-source nature and widespread deployment have historically exposed it to diverse vulnerability classes, including remote code execution, buffer overflows, and privilege escalation flaws within kernel modules and system utilities. While the project maintains rigorous security practices, the sheer volume of code contributes to a high cumulative count of recorded Common Vulnerabilities and Exposures, currently exceeding eleven thousand. Notable incidents often stem from misconfigurations or unpatched legacy components rather than fundamental architectural failures. The community responds rapidly to disclosed threats, yet the extensive attack surface necessitates continuous vigilance. Administrators must prioritize regular updates and strict access controls to mitigate risks associated with this ubiquitous platform, ensuring stability across both enterprise and consumer environments.

CVE ID Title CVSS Severity Published
CVE-2026-89441 mmc: via-sdmmc: cancel card-detect work on remove — Linux 7.8 High 2026-09-11
CVE-2026-89440 mmc: via-sdmmc: stop card-detect handling on probe failure — Linux 7.8 High 2026-09-11
CVE-2026-89439 platform/x86: ISST: Add a NULL check for sst_inst[] — Linux - - 2026-09-11
CVE-2026-89438 platform/x86: ISST: Validate logical CPU id and clos id — Linux - - 2026-09-11
CVE-2026-89437 platform/x86: int1092: Fix potential memory leak in sar_probe() — Linux - - 2026-09-11
CVE-2026-89436 platform/x86: panasonic-laptop: Fix sentinel write past pcc->sinf[] — Linux 7.8 High 2026-09-11
CVE-2026-81018 platform/x86: think-lmi: Free system certificate signatures — Linux - - 2026-09-11
CVE-2026-81016 platform/x86/amd/pmc: Propagate SMU errors and validate S2D address — Linux 7.7 High 2026-09-11
CVE-2026-81017 platform/chrome: sensorhub: Bound the EC-reported sensor number — Linux 8.4 High 2026-09-11
CVE-2026-81015 platform/x86/amd/pmc: Fix LPS0 and debugfs leaks when STB init fails — Linux 7.8 High 2026-09-11
CVE-2026-81014 platform/x86: hp-bioscfg: fix heap OOB read in sk_store() and kek_store() — Linux - - 2026-09-11
CVE-2026-81013 platform/x86: hp-bioscfg: fix heap OOB read on empty password write — Linux - - 2026-09-11
CVE-2026-81012 platform/x86: hp-bioscfg: fix off-by-one write in hp_get_string_from_buffer() — Linux 8.4 High 2026-09-11
CVE-2026-81011 platform/x86: hp-bioscfg: pass validated element count to package parsers — Linux 7.1 High 2026-09-11
CVE-2026-81010 io_uring/waitid: honor task_work cancellation — Linux 7.8 High 2026-09-11
CVE-2026-81009 io_uring/query: cap user size passed to copy_struct_to_user — Linux - - 2026-09-11
CVE-2026-81007 ipmi: ipmb: validate write message length — Linux 7.1 High 2026-09-11
CVE-2026-81008 interconnect: Fix use after free in icc_get() and of_icc_get_by_index() — Linux 7.8 High 2026-09-11
CVE-2026-81006 ipmi: Remove all sysfs files on registration failure — Linux 7.8 High 2026-09-11
CVE-2026-81004 ipmi:msghandler: Cancel work cleanly on an error — Linux 8.4 High 2026-09-11
CVE-2026-81005 ipmi: si: Fix NULL pointer dereference after failed registration — Linux - - 2026-09-11
CVE-2026-81003 net/iucv: filter frames in afiucv_hs_rcv() by ingress device — Linux 8.1 High 2026-09-11
CVE-2026-81002 xdp: fix zero-copy frame layout — Linux 9.8 Critical 2026-09-11
CVE-2026-81001 slip: fix use-after-free in sl_sync() — Linux 7.8 High 2026-09-11
CVE-2026-81000 net: tun: bound receive headroom — Linux 7.8 High 2026-09-11
CVE-2026-80999 net: dsa: realtek: use gpiod_set_value_cansleep for reset GPIO — Linux - - 2026-09-11
CVE-2026-80998 net: bnxt: ring the doorbell when SW USO exits early — Linux 7.5 High 2026-09-11
CVE-2026-80996 net: l2tp: do not propagate multicast notification errors — Linux - - 2026-09-11
CVE-2026-80997 net: ipa: fix stalled modem TX queue after runtime resume — Linux 7.5 High 2026-09-11
CVE-2026-80995 net: mctp: hold a reference to the route device in mctp_route_lookup() — Linux 7.8 High 2026-09-11

This page lists every published CVE security advisory associated with Linux. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.