Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 18073

All 18073 CVE vulnerabilities found in Linux, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumeration (CWE) vulnerabilities affecting the Linux operating system product. It aggregates security data related to weaknesses within the kernel, distributions, and associated utilities provided by various Linux vendors and maintainers. The collection encompasses a wide range of vulnerability types, including memory corruption issues, privilege escalation flaws, information leaks, and denial-of-service conditions. The database covers historical records spanning several decades, reflecting the evolution of the Linux ecosystem from its early releases to modern stable and development branches. This extensive time range allows for the analysis of long-term security trends and the remediation status of legacy systems that remain in production environments. Visitors to this resource can track vendor-specific advisories to stay informed about patches and updates released by major Linux distribution maintainers. You can also use the page to understand the characteristics and impact of specific weakness classes as they manifest in the Linux environment. Additionally, the interface supports looking up a specific product’s vulnerability history, enabling security professionals to assess risk exposure and prioritize mitigation efforts for critical infrastructure components. The data is organized to facilitate efficient searching and correlation between weakness identifiers and affected software versions, ensuring that administrators and developers have access to comprehensive security insights necessary for maintaining system integrity and compliance.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2026-64410 netfilter: flowtable: IPIP tunnel hardware offload is not yet support 9.8 Critical 2026-07-25
CVE-2026-64409 Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work() - - 2026-07-25
CVE-2026-64408 Bluetooth: bnep: pin L2CAP connection during netdev registration 8.8 High 2026-07-25
CVE-2026-64407 Bluetooth: btnxpuart: Fix out-of-bounds firmware read in nxp_recv_fw_req_v3() - - 2026-07-25
CVE-2026-64406 Bluetooth: fix UAF in bt_accept_dequeue() 8.0 High 2026-07-25
CVE-2026-64405 Bluetooth: hci_conn: Fix null ptr deref in hci_abort_conn() - - 2026-07-25
CVE-2026-64404 Bluetooth: ISO: avoid NULL deref of conn in iso_conn_big_sync() - - 2026-07-25
CVE-2026-64403 Bluetooth: L2CAP: validate option length before reading conf opt value 7.1 High 2026-07-25
CVE-2026-64402 coresight: ultrasoc-smb: Fix OOB write in smb_sync_perf_buffer() 7.8 High 2026-07-25
CVE-2026-64401 smb: client: resolve SWN tcon from live registrations 7.8 High 2026-07-25
CVE-2026-64400 ksmbd: prevent path traversal bypass by restricting caseless retry 8.6 High 2026-07-25
CVE-2026-64399 ksmbd: add permission checks for FSCTL_DUPLICATE_EXTENTS_TO_FILE 9.8 Critical 2026-07-25
CVE-2026-64397 ksmbd: serialize QUERY_DIRECTORY requests per file 9.8 Critical 2026-07-25
CVE-2026-64398 ksmbd: add a permission check for FSCTL_SET_ZERO_DATA 8.1 High 2026-07-25
CVE-2026-64396 ksmbd: fix UAF of struct file_lock in SMB2_LOCK deferred-lock cancellation 8.8 High 2026-07-25
CVE-2026-64395 ksmbd: require source read access for duplicate extents 7.5 High 2026-07-25
CVE-2026-64394 ksmbd: add a WRITE_DAC/WRITE_OWNER check to SMB2 SET_INFO SECURITY 8.8 High 2026-07-25
CVE-2026-64392 ksmbd: use opener credentials for delete-on-close 9.1 Critical 2026-07-25
CVE-2026-64393 ksmbd: run set info with opener credentials 9.1 Critical 2026-07-25
CVE-2026-64391 ksmbd: use opener credentials for ADS I/O 9.8 Critical 2026-07-25
CVE-2026-64389 ksmbd: validate NTLMv2 response before updating session key 8.2 High 2026-07-25
CVE-2026-64390 ksmbd: track the connection owning a byte-range lock 8.8 High 2026-07-25
CVE-2026-64388 smb/client: fix chown/chgrp with SMB3 POSIX Extensions 7.8 High 2026-07-25
CVE-2026-64387 smb: client: fix query directory replay double-free 9.8 Critical 2026-07-25
CVE-2026-64386 smb: client: fix query_info() replay double-free 9.8 Critical 2026-07-25
CVE-2026-64385 smb: client: fix double-free in SMB2_ioctl() replay 9.8 Critical 2026-07-25
CVE-2026-64383 smb: client: fix double-free in SMB2_flush() replay 9.8 Critical 2026-07-25
CVE-2026-64384 smb: client: fix change notify replay double-free 9.8 Critical 2026-07-25
CVE-2026-64382 smb: client: fix double-free in SMB2_open() replay 8.8 High 2026-07-25
CVE-2026-64381 smb: client: Fix next buffer leak in receive_encrypted_standard() - - 2026-07-25

All 18073 known CVE vulnerabilities affecting Linux with full Chinese analysis, references, and POCs where available.