Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17855

All 17855 CVE vulnerabilities found in Linux, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumeration (CWE) vulnerabilities affecting the Linux operating system product. It aggregates security data related to weaknesses within the kernel, distributions, and associated utilities provided by various Linux vendors and maintainers. The collection encompasses a wide range of vulnerability types, including memory corruption issues, privilege escalation flaws, information leaks, and denial-of-service conditions. The database covers historical records spanning several decades, reflecting the evolution of the Linux ecosystem from its early releases to modern stable and development branches. This extensive time range allows for the analysis of long-term security trends and the remediation status of legacy systems that remain in production environments. Visitors to this resource can track vendor-specific advisories to stay informed about patches and updates released by major Linux distribution maintainers. You can also use the page to understand the characteristics and impact of specific weakness classes as they manifest in the Linux environment. Additionally, the interface supports looking up a specific product’s vulnerability history, enabling security professionals to assess risk exposure and prioritize mitigation efforts for critical infrastructure components. The data is organized to facilitate efficient searching and correlation between weakness identifiers and affected software versions, ensuring that administrators and developers have access to comprehensive security insights necessary for maintaining system integrity and compliance.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2026-64222 octeontx2-pf: avoid double free of pool->stack on AQ init failure 7.0 High 2026-07-24
CVE-2026-64221 spi: ti-qspi: fix use-after-free after DMA setup failure 7.8 High 2026-07-24
CVE-2026-64220 device property: set fwnode->secondary to NULL in fwnode_init() - - 2026-07-24
CVE-2026-64218 batman-adv: bla: fix report_work leak on backbone_gw purge 7.8 High 2026-07-24
CVE-2026-64219 drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async 7.0 High 2026-07-24
CVE-2026-64216 netfs: Fix potential UAF in netfs_unlock_abandoned_read_pages() 9.8 Critical 2026-07-24
CVE-2026-64217 netfs: Fix overrun check in netfs_extract_user_iter() 7.8 High 2026-07-24
CVE-2026-64214 powerpc/time: Remove redundant preempt_disable|enable() calls from arch_irq_work_raise() - - 2026-07-24
CVE-2026-64215 drm/msm/a6xx: Check kzalloc return in a8xx_hfi_send_perf_table - - 2026-07-24
CVE-2026-64213 hwmon: (lm90) Add lock protection to lm90_alert - - 2026-07-24
CVE-2026-64212 wifi: iwlwifi: mld: don't dereference a pointer before NULL checking it - - 2026-07-24
CVE-2026-64211 srcu: Don't queue workqueue handlers to never-online CPUs - - 2026-07-24
CVE-2026-64210 net/mlx5e: xsk: Fix unlocked writing to ICOSQ 7.5 High 2026-07-24
CVE-2026-64209 phy: qcom: qmp-usbc: Fix out-of-bounds array access in dp swing config - - 2026-07-24
CVE-2026-64208 crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks 7.5 High 2026-07-24
CVE-2026-64600 xfs: resample the data fork mapping after cycling ILOCK 7.8 High 2026-07-23
CVE-2026-64206 Bluetooth: L2CAP: cancel pending_rx_work before taking conn->lock 8.8 High 2026-07-20
CVE-2026-64207 net/sched: dualpi2: fix GSO backlog accounting - - 2026-07-20
CVE-2026-64205 i2c: i801: fix hardware state machine corruption in error path - - 2026-07-20
CVE-2026-64192 bpf: Reject BPF_MAP_TYPE_INODE_STORAGE creation if BPF LSM is uninitialized - - 2026-07-20
CVE-2026-64191 i2c: stub: Reject I2C block transfers with invalid length 7.8 High 2026-07-20
CVE-2026-64190 net: team: fix NULL pointer dereference in team_xmit during mode change - - 2026-07-20
CVE-2026-64189 netfilter: ipset: fix race between dump and ip_set_list resize 7.8 High 2026-07-20
CVE-2026-64187 xfs: fail recovery on a committed log item with no regions - - 2026-07-20
CVE-2026-64188 net: qualcomm: rmnet: fix endpoint use-after-free in rmnet_dellink() 7.8 High 2026-07-20
CVE-2026-64186 iommu/amd: Remove latent out-of-bounds access in IOMMU debugfs - - 2026-07-19
CVE-2026-64184 mm/damon/sysfs-schemes: call missing mem_cgroup_iter_break() - - 2026-07-19
CVE-2026-64185 sysfs: don't remove existing directory on update failure - - 2026-07-19
CVE-2026-64183 efi: Allocate runtime workqueue before ACPI init - - 2026-07-19
CVE-2026-64182 drivers/base/memory: fix memory block reference leak in poison accounting - - 2026-07-19

All 17855 known CVE vulnerabilities affecting Linux with full Chinese analysis, references, and POCs where available.