Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 18073

All 18073 CVE vulnerabilities found in Linux, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumeration (CWE) vulnerabilities affecting the Linux operating system product. It aggregates security data related to weaknesses within the kernel, distributions, and associated utilities provided by various Linux vendors and maintainers. The collection encompasses a wide range of vulnerability types, including memory corruption issues, privilege escalation flaws, information leaks, and denial-of-service conditions. The database covers historical records spanning several decades, reflecting the evolution of the Linux ecosystem from its early releases to modern stable and development branches. This extensive time range allows for the analysis of long-term security trends and the remediation status of legacy systems that remain in production environments. Visitors to this resource can track vendor-specific advisories to stay informed about patches and updates released by major Linux distribution maintainers. You can also use the page to understand the characteristics and impact of specific weakness classes as they manifest in the Linux environment. Additionally, the interface supports looking up a specific product’s vulnerability history, enabling security professionals to assess risk exposure and prioritize mitigation efforts for critical infrastructure components. The data is organized to facilitate efficient searching and correlation between weakness identifiers and affected software versions, ensuring that administrators and developers have access to comprehensive security insights necessary for maintaining system integrity and compliance.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2026-64558 s390/pkey: Check length in pkey_pckmo handler implementation 7.8 High 2026-07-29
CVE-2026-64556 perf/core: Detach event groups during remove_on_exec 7.8 High 2026-07-29
CVE-2026-64557 Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() 8.8 High 2026-07-29
CVE-2026-64554 netfilter: bridge: fix stale prevhdr pointer in br_ip6_fragment() 8.8 High 2026-07-27
CVE-2026-64555 KVM: arm64: nv: Fix SPSR_EL2 restore in kvm_hyp_handle_mops() 8.8 High 2026-07-27
CVE-2026-64552 virtio-net: fix len check in receive_big() 8.4 High 2026-07-27
CVE-2026-64553 net: psample: fix info leak in PSAMPLE_ATTR_DATA - - 2026-07-27
CVE-2026-64551 sctp: validate STALE_COOKIE cause length before reading staleness 9.1 Critical 2026-07-27
CVE-2026-64549 Bluetooth: bpa10x: avoid OOB read of revision string in bpa10x_setup() - - 2026-07-27
CVE-2026-64550 net: qualcomm: rmnet: validate MAP frame length before ingress parsing 7.3 High 2026-07-27
CVE-2026-64548 bpf, sockmap: reject overflowing copy + len in bpf_msg_push_data() 8.4 High 2026-07-27
CVE-2026-64547 net: usb: net1080: validate packet_len before pad-byte access in rx_fixup 8.1 High 2026-07-27
CVE-2026-64545 net, bpf: check master for NULL in xdp_master_redirect() 7.5 High 2026-07-27
CVE-2026-64546 drm/edid: fix OOB read in drm_parse_tiled_block() 7.1 High 2026-07-27
CVE-2026-64544 crypto: asymmetric_keys - fix OOB read in pefile_digest_pe_contents - - 2026-07-27
CVE-2026-64543 tipc: fix use-after-free of the discoverer in tipc_disc_rcv() 7.8 High 2026-07-27
CVE-2026-64542 ipv6: ndisc: fix NULL deref in accept_untracked_na() - - 2026-07-27
CVE-2026-64541 net/smc: fix UAF in smc_cdc_rx_handler() by pinning the socket 9.8 Critical 2026-07-27
CVE-2026-64540 usbnet: gl620a: fix out-of-bounds read in genelink_rx_fixup() 8.1 High 2026-07-27
CVE-2026-64539 Bluetooth: eir: Fix stack OOB write when prepending the Flags AD 7.8 High 2026-07-27
CVE-2026-64538 ipv6: Fix null-ptr-deref in fib6_nh_mtu_change(). - - 2026-07-27
CVE-2026-64537 bridge: cfm: reject invalid CCM interval at configuration time - - 2026-07-27
CVE-2026-17523 can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet 7.8 High 2026-07-27
CVE-2026-64536 staging: rtl8723bs: fix OOB reads in is_ap_in_tkip() IE loop 8.1 High 2026-07-27
CVE-2026-64535 nvmet-tcp: Fix potential UAF when ddgst mismatch 9.8 Critical 2026-07-27
CVE-2026-64534 nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path 9.8 Critical 2026-07-27
CVE-2026-64533 fs/ntfs3: validate lcns_follow in log_replay conversion 7.8 High 2026-07-27
CVE-2026-64531 net: openvswitch: reject oversized nested action attrs 7.8 High 2026-07-27
CVE-2026-64532 fs/ntfs3: bound NTFS_DE view.data_off in UpdateRecordData{Root,Allocation} 7.8 High 2026-07-27
CVE-2024-14040 net: nexthop: Increase weight to u16 7.8 High 2026-07-26

All 18073 known CVE vulnerabilities affecting Linux with full Chinese analysis, references, and POCs where available.