Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17855

All 17855 CVE vulnerabilities found in Linux, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumeration (CWE) vulnerabilities affecting the Linux operating system product. It aggregates security data related to weaknesses within the kernel, distributions, and associated utilities provided by various Linux vendors and maintainers. The collection encompasses a wide range of vulnerability types, including memory corruption issues, privilege escalation flaws, information leaks, and denial-of-service conditions. The database covers historical records spanning several decades, reflecting the evolution of the Linux ecosystem from its early releases to modern stable and development branches. This extensive time range allows for the analysis of long-term security trends and the remediation status of legacy systems that remain in production environments. Visitors to this resource can track vendor-specific advisories to stay informed about patches and updates released by major Linux distribution maintainers. You can also use the page to understand the characteristics and impact of specific weakness classes as they manifest in the Linux environment. Additionally, the interface supports looking up a specific product’s vulnerability history, enabling security professionals to assess risk exposure and prioritize mitigation efforts for critical infrastructure components. The data is organized to facilitate efficient searching and correlation between weakness identifiers and affected software versions, ensuring that administrators and developers have access to comprehensive security insights necessary for maintaining system integrity and compliance.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2026-68085 Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled 8.0 High 2026-08-10
CVE-2026-68084 staging: vme_user: fix location monitor leak in tsi148 bridge - - 2026-08-10
CVE-2026-68083 ksmbd: fix path resolution in ksmbd_vfs_kern_path_create 9.1 Critical 2026-08-10
CVE-2026-68081 KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state - - 2026-08-08
CVE-2026-68082 libceph: fix two unsafe bare decodes in decode_lockers() 9.8 Critical 2026-08-08
CVE-2026-68480 x86/bugs: Make Safe-RET robust against interrupt injection - - 2026-08-06
CVE-2026-64604 KVM: VMX: Grab vmcs12 on CR8 interception update iff vCPU is in guest mode - - 2026-08-06
CVE-2026-64602 iio: adc: spear: Initialize completion before requesting IRQ - - 2026-08-06
CVE-2026-64603 platform/x86: intel-hid: Protect ACPI notify handler against recursion - - 2026-08-06
CVE-2026-64601 ALSA: us144mkii: capture_urb_complete: redundant usb_anchor_urb corrupts anchor list on each resubmission 7.8 High 2026-08-06
CVE-2026-64599 crypto: amlogic - avoid double cleanup in meson_crypto_probe() 7.8 High 2026-08-06
CVE-2026-64598 smb/client: Fix error code in smb2_aead_req_alloc() 8.8 High 2026-08-06
CVE-2026-64597 smb: client: fix double-free in SMB2_close() replay 9.8 Critical 2026-08-06
CVE-2026-64596 libfs: set SB_I_NOEXEC and SB_I_NODEV by default in init_pseudo() - - 2026-08-06
CVE-2026-64595 HID: hid-lenovo-go: cancel cfg_setup work in hid_go_cfg_remove() - - 2026-08-06
CVE-2026-64593 btrfs: do not trim a device which is not writeable - - 2026-08-06
CVE-2026-64594 usb: gadget: f_fs: initialize reset_work at allocation time - - 2026-08-06
CVE-2026-64592 riscv: mm: Unconditionally sfence.vma for spurious fault - - 2026-08-06
CVE-2026-64590 dma-buf/udmabuf: skip redundant cpu sync to fix cacheline EEXIST warning - - 2026-08-06
CVE-2026-64591 iommu/vt-d: Avoid WARNING in sva unbind path - - 2026-08-06
CVE-2026-64589 i2c: core: fix NULL-deref on adapter registration failure - - 2026-08-06
CVE-2026-64588 fuse-uring: fix data races on ring->ready 7.8 High 2026-08-06
CVE-2026-64587 net: ethernet: arc: emac: quiesce interrupts before requesting IRQ 7.0 High 2026-08-06
CVE-2026-64586 wifi: brcmfmac: drain bus_reset work on device removal 8.8 High 2026-08-06
CVE-2026-64585 can: esd_usb: kill anchored URBs before freeing netdevs 7.8 High 2026-08-06
CVE-2026-64584 usb: gadget: f_midi: cancel pending IN work before freeing the midi object 7.8 High 2026-08-06
CVE-2026-64583 usb: gadget: udc: bdc: free IRQ and drain func_wake_notify before teardown 7.8 High 2026-08-06
CVE-2026-64582 RDMA/rxe: Fix a use-after-free problem in rxe_mmap 7.8 High 2026-08-05
CVE-2026-64581 xfrm: fix sk_dst_cache double-free in xfrm_user_policy() 7.8 High 2026-08-05
CVE-2026-64580 xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst() 7.8 High 2026-08-05

All 17855 known CVE vulnerabilities affecting Linux with full Chinese analysis, references, and POCs where available.