Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17855

All 17855 CVE vulnerabilities found in Linux, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumeration (CWE) vulnerabilities affecting the Linux operating system product. It aggregates security data related to weaknesses within the kernel, distributions, and associated utilities provided by various Linux vendors and maintainers. The collection encompasses a wide range of vulnerability types, including memory corruption issues, privilege escalation flaws, information leaks, and denial-of-service conditions. The database covers historical records spanning several decades, reflecting the evolution of the Linux ecosystem from its early releases to modern stable and development branches. This extensive time range allows for the analysis of long-term security trends and the remediation status of legacy systems that remain in production environments. Visitors to this resource can track vendor-specific advisories to stay informed about patches and updates released by major Linux distribution maintainers. You can also use the page to understand the characteristics and impact of specific weakness classes as they manifest in the Linux environment. Additionally, the interface supports looking up a specific product’s vulnerability history, enabling security professionals to assess risk exposure and prioritize mitigation efforts for critical infrastructure components. The data is organized to facilitate efficient searching and correlation between weakness identifiers and affected software versions, ensuring that administrators and developers have access to comprehensive security insights necessary for maintaining system integrity and compliance.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2026-64402 coresight: ultrasoc-smb: Fix OOB write in smb_sync_perf_buffer() 7.8 High 2026-07-25
CVE-2026-64401 smb: client: resolve SWN tcon from live registrations 7.8 High 2026-07-25
CVE-2026-64400 ksmbd: prevent path traversal bypass by restricting caseless retry 8.6 High 2026-07-25
CVE-2026-64399 ksmbd: add permission checks for FSCTL_DUPLICATE_EXTENTS_TO_FILE 9.8 Critical 2026-07-25
CVE-2026-64397 ksmbd: serialize QUERY_DIRECTORY requests per file 9.8 Critical 2026-07-25
CVE-2026-64398 ksmbd: add a permission check for FSCTL_SET_ZERO_DATA 8.1 High 2026-07-25
CVE-2026-64396 ksmbd: fix UAF of struct file_lock in SMB2_LOCK deferred-lock cancellation 8.8 High 2026-07-25
CVE-2026-64395 ksmbd: require source read access for duplicate extents 7.5 High 2026-07-25
CVE-2026-64394 ksmbd: add a WRITE_DAC/WRITE_OWNER check to SMB2 SET_INFO SECURITY 8.8 High 2026-07-25
CVE-2026-64392 ksmbd: use opener credentials for delete-on-close 9.1 Critical 2026-07-25
CVE-2026-64393 ksmbd: run set info with opener credentials 9.1 Critical 2026-07-25
CVE-2026-64391 ksmbd: use opener credentials for ADS I/O 9.8 Critical 2026-07-25
CVE-2026-64389 ksmbd: validate NTLMv2 response before updating session key 8.2 High 2026-07-25
CVE-2026-64390 ksmbd: track the connection owning a byte-range lock 8.8 High 2026-07-25
CVE-2026-64388 smb/client: fix chown/chgrp with SMB3 POSIX Extensions 7.8 High 2026-07-25
CVE-2026-64387 smb: client: fix query directory replay double-free 9.8 Critical 2026-07-25
CVE-2026-64386 smb: client: fix query_info() replay double-free 9.8 Critical 2026-07-25
CVE-2026-64385 smb: client: fix double-free in SMB2_ioctl() replay 9.8 Critical 2026-07-25
CVE-2026-64383 smb: client: fix double-free in SMB2_flush() replay 9.8 Critical 2026-07-25
CVE-2026-64384 smb: client: fix change notify replay double-free 9.8 Critical 2026-07-25
CVE-2026-64382 smb: client: fix double-free in SMB2_open() replay 8.8 High 2026-07-25
CVE-2026-64381 smb: client: Fix next buffer leak in receive_encrypted_standard() - - 2026-07-25
CVE-2026-64379 smb: client: mask server-provided mode to 07777 in modefromsid 7.1 High 2026-07-25
CVE-2026-64380 smb: client: harden POSIX SID length parsing 8.2 High 2026-07-25
CVE-2026-64378 writeback: fix race between cgroup_writeback_umount() and inode_switch_wbs() 7.8 High 2026-07-25
CVE-2026-64376 firmware_loader: fix device reference leak in firmware_upload_register() - - 2026-07-25
CVE-2026-64377 cpufreq: qcom-cpufreq-hw: Fix possible double free - - 2026-07-25
CVE-2026-64375 proc: protect ptrace_may_access() with exec_update_lock (FD links) 7.8 High 2026-07-25
CVE-2026-64374 sched/rt: Have RT_PUSH_IPI be default off for non PREEMPT_RT 7.5 High 2026-07-25
CVE-2026-64372 cpufreq: pcc: fix use-after-free and double free in _OSC evaluation 7.8 High 2026-07-25

All 17855 known CVE vulnerabilities affecting Linux with full Chinese analysis, references, and POCs where available.