Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17855

All 17855 CVE vulnerabilities found in Linux, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumeration (CWE) vulnerabilities affecting the Linux operating system product. It aggregates security data related to weaknesses within the kernel, distributions, and associated utilities provided by various Linux vendors and maintainers. The collection encompasses a wide range of vulnerability types, including memory corruption issues, privilege escalation flaws, information leaks, and denial-of-service conditions. The database covers historical records spanning several decades, reflecting the evolution of the Linux ecosystem from its early releases to modern stable and development branches. This extensive time range allows for the analysis of long-term security trends and the remediation status of legacy systems that remain in production environments. Visitors to this resource can track vendor-specific advisories to stay informed about patches and updates released by major Linux distribution maintainers. You can also use the page to understand the characteristics and impact of specific weakness classes as they manifest in the Linux environment. Additionally, the interface supports looking up a specific product’s vulnerability history, enabling security professionals to assess risk exposure and prioritize mitigation efforts for critical infrastructure components. The data is organized to facilitate efficient searching and correlation between weakness identifiers and affected software versions, ensuring that administrators and developers have access to comprehensive security insights necessary for maintaining system integrity and compliance.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2026-64462 PCI: altera: Fix resource leaks on probe failure - - 2026-07-25
CVE-2026-64460 PCI/IOV: Skip VF Resizable BAR restore on read error 7.0 High 2026-07-25
CVE-2026-64461 PCI: mediatek: Fix IRQ domain leak when port fails to enable - - 2026-07-25
CVE-2026-64459 tcp: restore RCU grace period in tcp_ao_destroy_sock 9.8 Critical 2026-07-25
CVE-2026-64458 mm/damon/ops-common: handle extreme intervals in damon_hot_score() - - 2026-07-25
CVE-2026-64456 hwrng: virtio: clamp device-reported used.len at copy_data() 7.7 High 2026-07-25
CVE-2026-64457 virtio_pci: fix vq info pointer lookup via wrong index - - 2026-07-25
CVE-2026-64455 USB: chaoskey: Fix slab-use-after-free in chaoskey_release() - - 2026-07-25
CVE-2026-64454 usb: dwc3: run gadget disconnect from sleepable suspend context - - 2026-07-25
CVE-2026-64452 6lowpan: fix NHC entry use-after-free on error path 7.1 High 2026-07-25
CVE-2026-64453 usb: misc: usbio: fix disconnect UAF in client teardown - - 2026-07-25
CVE-2026-64451 tracing: Fix NULL pointer dereference in func_set_flag() - - 2026-07-25
CVE-2026-64450 tipc: fix out-of-bounds read in broadcast Gap ACK blocks 9.1 Critical 2026-07-25
CVE-2026-64449 staging: vme_user: bound slave read/write to the kern_buf size 7.8 High 2026-07-25
CVE-2026-64448 smb: client: restrict implied bcc[0] exemption to responses without data area 8.2 High 2026-07-25
CVE-2026-64447 staging: media: ipu7: fix double-free and use-after-free in error paths 7.8 High 2026-07-25
CVE-2026-64446 staging: rtl8723bs: fix heap buffer overflow in rtw_cfg80211_set_wpa_ie() - - 2026-07-25
CVE-2026-64445 staging: rtl8723bs: fix WEP length underflow and OOB read in OnAuth() 8.8 High 2026-07-25
CVE-2026-64444 staging: rtl8723bs: fix OOB read in OnAssocRsp() IE loop 8.1 High 2026-07-25
CVE-2026-64443 staging: rtl8723bs: fix OOB read in update_beacon_info() IE loop 8.1 High 2026-07-25
CVE-2026-64442 staging: rtl8723bs: fix OOB reads in IE loops in issue_assocreq() and join_cmd_hdl() 8.1 High 2026-07-25
CVE-2026-64441 staging: rtl8723bs: fix OOB reads in rtw_get_sec_ie(), rtw_get_wapi_ie(), and rtw_get_wps_attr() 8.8 High 2026-07-25
CVE-2026-64440 staging: rtl8723bs: fix OOB write in HT_caps_handler() 8.1 High 2026-07-25
CVE-2026-64439 crypto: krb5 - filter out async aead implementations at alloc 9.8 Critical 2026-07-25
CVE-2026-64438 crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() 8.8 High 2026-07-25
CVE-2026-64437 ksmbd: fix use-after-free of a deferred file_lock on SMB2_CLOSE then SMB2_CANCEL 8.8 High 2026-07-25
CVE-2026-64435 audit: Fix data races of skb_queue_len() readers on audit_queue 8.2 High 2026-07-25
CVE-2026-64436 net: af_key: initialize alg_key_len for IPComp states 7.1 High 2026-07-25
CVE-2026-64434 Bluetooth: L2CAP: Fix UAF in channel timeout by holding conn ref 8.8 High 2026-07-25
CVE-2026-64432 fs/ntfs3: validate Dirty Page Table capacity in log_replay copy_lcns 7.8 High 2026-07-25

All 17855 known CVE vulnerabilities affecting Linux with full Chinese analysis, references, and POCs where available.