Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17855

All 17855 CVE vulnerabilities found in Linux, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumeration (CWE) vulnerabilities affecting the Linux operating system product. It aggregates security data related to weaknesses within the kernel, distributions, and associated utilities provided by various Linux vendors and maintainers. The collection encompasses a wide range of vulnerability types, including memory corruption issues, privilege escalation flaws, information leaks, and denial-of-service conditions. The database covers historical records spanning several decades, reflecting the evolution of the Linux ecosystem from its early releases to modern stable and development branches. This extensive time range allows for the analysis of long-term security trends and the remediation status of legacy systems that remain in production environments. Visitors to this resource can track vendor-specific advisories to stay informed about patches and updates released by major Linux distribution maintainers. You can also use the page to understand the characteristics and impact of specific weakness classes as they manifest in the Linux environment. Additionally, the interface supports looking up a specific product’s vulnerability history, enabling security professionals to assess risk exposure and prioritize mitigation efforts for critical infrastructure components. The data is organized to facilitate efficient searching and correlation between weakness identifiers and affected software versions, ensuring that administrators and developers have access to comprehensive security insights necessary for maintaining system integrity and compliance.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2026-64433 Bluetooth: MGMT: Fix UAF of hci_conn_params in add_device_complete - - 2026-07-25
CVE-2026-64431 ntfs: avoid calling post_write_mst_fixup() for invalid index_block 7.8 High 2026-07-25
CVE-2026-64430 NTB: epf: Avoid calling pci_irq_vector() from hardirq context 7.5 High 2026-07-25
CVE-2026-64429 gpio: eic-sprd: use raw_spinlock_t in the irq startup path - - 2026-07-25
CVE-2026-64427 HID: logitech-dj: Fix maxfield check in DJ short report validation - - 2026-07-25
CVE-2026-64428 gpio: sch: use raw_spinlock_t in the irq startup path - - 2026-07-25
CVE-2026-64426 io_uring/nop: fix file reference leak with IOSQE_FIXED_FILE - - 2026-07-25
CVE-2026-64425 io_uring/io-wq: re-check IO_WQ_BIT_EXIT for each linked work item - - 2026-07-25
CVE-2026-64424 netpoll: fix a use-after-free on shutdown path - - 2026-07-25
CVE-2026-64423 ipv4: igmp: remove multicast group from hash table on device destruction 7.8 High 2026-07-25
CVE-2026-64422 net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes 7.1 High 2026-07-25
CVE-2026-64421 media: nxp: imx8-isi: Fix use-after-free on remove - - 2026-07-25
CVE-2026-64420 mfd: cros_ec: Delay dev_set_drvdata() until probe success 7.0 High 2026-07-25
CVE-2026-64419 mm/shrinker: do not hold RCU lock in shrinker_debugfs_count_show() - - 2026-07-25
CVE-2026-64418 mm: shrinker: fix shrinker_info teardown race with expansion 7.8 High 2026-07-25
CVE-2026-64417 mm: shrinker: fix NULL pointer dereference in debugfs - - 2026-07-25
CVE-2026-64416 mm: swap_cgroup: fix NULL deref in lookup_swap_cgroup_id on swapless host - - 2026-07-25
CVE-2026-64415 mm/swap: add cond_resched() in swap_reclaim_full_clusters to prevent softlockup - - 2026-07-25
CVE-2026-64413 netfilter: ebtables: zero chainstack array 7.0 High 2026-07-25
CVE-2026-64414 netfilter: handle unreadable frags 7.5 High 2026-07-25
CVE-2026-64412 netfilter: ebtables: module names must be null-terminated 7.1 High 2026-07-25
CVE-2026-64411 netfilter: ebtables: terminate table name before find_table_lock() 7.1 High 2026-07-25
CVE-2026-64410 netfilter: flowtable: IPIP tunnel hardware offload is not yet support 9.8 Critical 2026-07-25
CVE-2026-64409 Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work() - - 2026-07-25
CVE-2026-64408 Bluetooth: bnep: pin L2CAP connection during netdev registration 8.8 High 2026-07-25
CVE-2026-64407 Bluetooth: btnxpuart: Fix out-of-bounds firmware read in nxp_recv_fw_req_v3() - - 2026-07-25
CVE-2026-64406 Bluetooth: fix UAF in bt_accept_dequeue() 8.0 High 2026-07-25
CVE-2026-64405 Bluetooth: hci_conn: Fix null ptr deref in hci_abort_conn() - - 2026-07-25
CVE-2026-64404 Bluetooth: ISO: avoid NULL deref of conn in iso_conn_big_sync() - - 2026-07-25
CVE-2026-64403 Bluetooth: L2CAP: validate option length before reading conf opt value 7.1 High 2026-07-25

All 17855 known CVE vulnerabilities affecting Linux with full Chinese analysis, references, and POCs where available.