Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 18073

All 18073 CVE vulnerabilities found in Linux, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumeration (CWE) vulnerabilities affecting the Linux operating system product. It aggregates security data related to weaknesses within the kernel, distributions, and associated utilities provided by various Linux vendors and maintainers. The collection encompasses a wide range of vulnerability types, including memory corruption issues, privilege escalation flaws, information leaks, and denial-of-service conditions. The database covers historical records spanning several decades, reflecting the evolution of the Linux ecosystem from its early releases to modern stable and development branches. This extensive time range allows for the analysis of long-term security trends and the remediation status of legacy systems that remain in production environments. Visitors to this resource can track vendor-specific advisories to stay informed about patches and updates released by major Linux distribution maintainers. You can also use the page to understand the characteristics and impact of specific weakness classes as they manifest in the Linux environment. Additionally, the interface supports looking up a specific product’s vulnerability history, enabling security professionals to assess risk exposure and prioritize mitigation efforts for critical infrastructure components. The data is organized to facilitate efficient searching and correlation between weakness identifiers and affected software versions, ensuring that administrators and developers have access to comprehensive security insights necessary for maintaining system integrity and compliance.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2026-64379 smb: client: mask server-provided mode to 07777 in modefromsid 7.1 High 2026-07-25
CVE-2026-64380 smb: client: harden POSIX SID length parsing 8.2 High 2026-07-25
CVE-2026-64378 writeback: fix race between cgroup_writeback_umount() and inode_switch_wbs() 7.8 High 2026-07-25
CVE-2026-64376 firmware_loader: fix device reference leak in firmware_upload_register() - - 2026-07-25
CVE-2026-64377 cpufreq: qcom-cpufreq-hw: Fix possible double free - - 2026-07-25
CVE-2026-64375 proc: protect ptrace_may_access() with exec_update_lock (FD links) 7.8 High 2026-07-25
CVE-2026-64374 sched/rt: Have RT_PUSH_IPI be default off for non PREEMPT_RT 7.5 High 2026-07-25
CVE-2026-64372 cpufreq: pcc: fix use-after-free and double free in _OSC evaluation 7.8 High 2026-07-25
CVE-2026-64373 cpufreq: Fix hotplug-suspend race during reboot - - 2026-07-25
CVE-2026-64371 proc: protect ptrace_may_access() with exec_update_lock (part 1) - - 2026-07-25
CVE-2026-64369 s390: Revert support for DCACHE_WORD_ACCESS - - 2026-07-25
CVE-2026-64370 posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path - - 2026-07-25
CVE-2026-64368 mm/slab: do not limit zeroing to orig_size when only red zoning is enabled 8.1 High 2026-07-25
CVE-2026-64366 HID: wacom: fix slab-out-of-bounds write in wacom_wac_queue_insert 8.8 High 2026-07-25
CVE-2026-64367 HID: hid-goodix-spi: validate report size to prevent stack buffer overflow 7.8 High 2026-07-25
CVE-2026-64365 HID: letsketch: fix UAF on inrange_timer at driver unbind - - 2026-07-25
CVE-2026-64363 HID: appleir: fix UAF on pending key_up_timer in remove() - - 2026-07-25
CVE-2026-64364 HID: multitouch: fix out-of-bounds bit access on mt_io_flags 8.8 High 2026-07-25
CVE-2026-64362 HID: lg-g15: cancel pending work on remove to fix a use-after-free - - 2026-07-25
CVE-2026-64361 hfs/hfsplus: fix u32 overflow in check_and_correct_requested_length 7.8 High 2026-07-25
CVE-2026-64360 hfs/hfsplus: zero-initialize buffer in hfs_bnode_read - - 2026-07-25
CVE-2026-64359 nilfs2: reject CLEAN_SEGMENTS ioctl with out-of-range segment numbers - - 2026-07-25
CVE-2026-64357 xfs: fix exchmaps reservation limit check - - 2026-07-25
CVE-2026-64358 media: mtk-jpeg: cancel workqueue on release for supported platforms only - - 2026-07-25
CVE-2026-64356 xfs: fix memory leak in xfs_dqinode_metadir_create() - - 2026-07-25
CVE-2026-64354 bpf: Validate BTF repeated field counts before expansion 7.8 High 2026-07-25
CVE-2026-64355 bpf: Reject fragmented frames in devmap 9.8 Critical 2026-07-25
CVE-2026-64352 bpf: Allow LPM map access from sleepable BPF programs - - 2026-07-25
CVE-2026-64353 bpf: Keep dynamic inner array lookups nullable - - 2026-07-25
CVE-2026-64351 net: usb: kalmia: bound RX frame length in kalmia_rx_fixup() - - 2026-07-25

All 18073 known CVE vulnerabilities affecting Linux with full Chinese analysis, references, and POCs where available.