Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17855

All 17855 CVE vulnerabilities found in Linux, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumeration (CWE) vulnerabilities affecting the Linux operating system product. It aggregates security data related to weaknesses within the kernel, distributions, and associated utilities provided by various Linux vendors and maintainers. The collection encompasses a wide range of vulnerability types, including memory corruption issues, privilege escalation flaws, information leaks, and denial-of-service conditions. The database covers historical records spanning several decades, reflecting the evolution of the Linux ecosystem from its early releases to modern stable and development branches. This extensive time range allows for the analysis of long-term security trends and the remediation status of legacy systems that remain in production environments. Visitors to this resource can track vendor-specific advisories to stay informed about patches and updates released by major Linux distribution maintainers. You can also use the page to understand the characteristics and impact of specific weakness classes as they manifest in the Linux environment. Additionally, the interface supports looking up a specific product’s vulnerability history, enabling security professionals to assess risk exposure and prioritize mitigation efforts for critical infrastructure components. The data is organized to facilitate efficient searching and correlation between weakness identifiers and affected software versions, ensuring that administrators and developers have access to comprehensive security insights necessary for maintaining system integrity and compliance.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2026-64312 crypto: pcrypt - restore callback for non-parallel fallback 7.5 High 2026-07-25
CVE-2026-64310 crypto: ccp - Do not initialize SNP for SEV ioctls - - 2026-07-25
CVE-2026-64311 crypto: loongson - Remove broken and unused loongson-rng 7.8 High 2026-07-25
CVE-2026-64309 crypto: ccp - Do not initialize SNP for ioctl(SNP_COMMIT) - - 2026-07-25
CVE-2026-64308 crypto: ccp - Do not initialize SNP for ioctl(SNP_VLEK_LOAD) - - 2026-07-25
CVE-2026-64307 crypto: ccp - Do not initialize SNP for ioctl(SNP_CONFIG) - - 2026-07-25
CVE-2026-64306 crypto: drbg - Fix returning success on failure in CTR_DRBG - - 2026-07-25
CVE-2026-64305 crypto: qat - protect service table iterations with service_lock - - 2026-07-25
CVE-2026-64304 crypto: qat - validate RSA CRT component lengths 7.8 High 2026-07-25
CVE-2026-64302 x86/mm: Fix freeing of PMD-sized vmemmap pages - - 2026-07-25
CVE-2026-64303 spi: fsl-lpspi: terminate the RX channel on TX prepare failure path 9.8 Critical 2026-07-25
CVE-2026-64301 regulator: scmi: fix of_node refcount leak in scmi_regulator_probe() - - 2026-07-25
CVE-2026-64300 perf/aux: Fix page UAF in map_range() 7.8 High 2026-07-25
CVE-2026-64299 tracing: Prevent out-of-bounds read in glob matching 7.1 High 2026-07-25
CVE-2026-64298 NFSv4: include MAY_WRITE in open permission mask for O_TRUNC 7.1 High 2026-07-25
CVE-2026-64296 exfat: bound uniname advance in exfat_find_dir_entry() 7.8 High 2026-07-25
CVE-2026-64297 module: decompress: check return value of module_extend_max_pages() - - 2026-07-25
CVE-2026-64295 mm: page_ext: add count limit to page_ext_iter_next to prevent invalid PFN access - - 2026-07-25
CVE-2026-64294 mm: do file ownership checks with the proper mount idmap - - 2026-07-25
CVE-2026-64293 iommufd: Use sizeof(*hdr) instead of sizeof(hdr) in veventq read 7.8 High 2026-07-25
CVE-2026-64292 iommufd: Move vevent memory allocation outside spinlock - - 2026-07-25
CVE-2026-64291 iommufd: Set veventq_depth upper bound - - 2026-07-25
CVE-2026-64290 iommufd: Break the loop on failure in iommufd_fault_fops_read() - - 2026-07-25
CVE-2026-64288 KVM: arm64: nv: Avoid dereferencing NULL VNCR pseudo-TLB - - 2026-07-25
CVE-2026-64289 iommufd: Set upper bounds on cache invalidation entry_num and entry_len - - 2026-07-25
CVE-2026-64287 KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU 8.2 High 2026-07-25
CVE-2026-64286 KVM: arm64: Clear __hyp_running_vcpu when flushing the pKVM hyp vCPU 8.2 High 2026-07-25
CVE-2026-64285 KVM: SEV: Pin source page for write when adding CPUID data for SNP guest - - 2026-07-25
CVE-2026-64284 KVM: x86: Ensure vendor's exit handler runs before fastpath userspace exits 7.1 High 2026-07-25
CVE-2026-64283 KVM: guest_memfd: Treat memslot binding offset+size as unsigned values - - 2026-07-25

All 17855 known CVE vulnerabilities affecting Linux with full Chinese analysis, references, and POCs where available.