Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17855

All 17855 CVE vulnerabilities found in Linux, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumeration (CWE) vulnerabilities affecting the Linux operating system product. It aggregates security data related to weaknesses within the kernel, distributions, and associated utilities provided by various Linux vendors and maintainers. The collection encompasses a wide range of vulnerability types, including memory corruption issues, privilege escalation flaws, information leaks, and denial-of-service conditions. The database covers historical records spanning several decades, reflecting the evolution of the Linux ecosystem from its early releases to modern stable and development branches. This extensive time range allows for the analysis of long-term security trends and the remediation status of legacy systems that remain in production environments. Visitors to this resource can track vendor-specific advisories to stay informed about patches and updates released by major Linux distribution maintainers. You can also use the page to understand the characteristics and impact of specific weakness classes as they manifest in the Linux environment. Additionally, the interface supports looking up a specific product’s vulnerability history, enabling security professionals to assess risk exposure and prioritize mitigation efforts for critical infrastructure components. The data is organized to facilitate efficient searching and correlation between weakness identifiers and affected software versions, ensuring that administrators and developers have access to comprehensive security insights necessary for maintaining system integrity and compliance.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2026-64491 ALSA: usx2y: us144mkii: fix work UAF on disconnect - - 2026-07-25
CVE-2026-64492 iio: temperature: tmp006: use devm_iio_trigger_register - - 2026-07-25
CVE-2026-64490 ALSA: virtio: Validate control metadata from the device 8.4 High 2026-07-25
CVE-2026-64489 ALSA: ymfpci: check snd_ctl_new1() return value - - 2026-07-25
CVE-2026-64487 ALSA: caiaq: fix out-of-bounds read in the Traktor Kontrol S4 input parser - - 2026-07-25
CVE-2026-64488 ALSA: aoa: check snd_ctl_new1() return value - - 2026-07-25
CVE-2026-64486 ALSA: cmipci: check snd_ctl_new1() return value - - 2026-07-25
CVE-2026-64484 ALSA: es1938: check snd_ctl_new1() return value - - 2026-07-25
CVE-2026-64485 ALSA: compress: Fix task creation error unwind 7.8 High 2026-07-25
CVE-2026-64483 ALSA: firewire: isight: bound the sample count to the packet payload - - 2026-07-25
CVE-2026-64482 ALSA: gus: check snd_ctl_new1() return value - - 2026-07-25
CVE-2026-64480 ALSA: ice1712: check snd_ctl_new1() return value - - 2026-07-25
CVE-2026-64481 ALSA: hda/cs35l41: Fix firmware load work teardown 7.8 High 2026-07-25
CVE-2026-64479 ALSA: seq: Fix uninitialised heap leak in snd_seq_event_dup() - - 2026-07-25
CVE-2026-64477 x86,fs/resctrl: Prevent out-of-bounds access while offlining CPU when SNC enabled - - 2026-07-25
CVE-2026-64478 ALSA: usb-audio: avoid kobject path lookup in DualSense match - - 2026-07-25
CVE-2026-64476 vfio/pci: Latch disable_idle_d3 per device - - 2026-07-25
CVE-2026-64475 vfio/pci: Release the VGA arbiter client on register_device() failure 8.8 High 2026-07-25
CVE-2026-64474 vfio: prevent infinite loop in vfio_mig_get_next_state() on blocked arc - - 2026-07-25
CVE-2026-64473 vfio: Remove device debugfs before releasing devres - - 2026-07-25
CVE-2026-64472 vfio/mlx5: Fix racy bitfields and tighten struct layout - - 2026-07-25
CVE-2026-64470 Bluetooth: btusb: fix use-after-free on marvell probe failure - - 2026-07-25
CVE-2026-64471 Bluetooth: btusb: fix use-after-free on registration failure - - 2026-07-25
CVE-2026-64469 binder: fix UAF in binder_thread_release() 7.8 High 2026-07-25
CVE-2026-64467 rust_binder: use a u64 stride when cleaning up the offsets array 8.8 High 2026-07-25
CVE-2026-64468 binder: fix UAF in binder_free_transaction() 7.8 High 2026-07-25
CVE-2026-64466 rust_binder: clear freeze listener on node removal - - 2026-07-25
CVE-2026-64465 usb: xhci: Fix sleep in atomic context in xhci_free_streams() - - 2026-07-25
CVE-2026-64463 usb: typec: tcpci_rt1711h: unregister TCPCI port with devres 7.8 High 2026-07-25
CVE-2026-64464 xhci: sideband: fix ring sg table pages leak - - 2026-07-25

All 17855 known CVE vulnerabilities affecting Linux with full Chinese analysis, references, and POCs where available.