Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 18073

All 18073 CVE vulnerabilities found in Linux, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumeration (CWE) vulnerabilities affecting the Linux operating system product. It aggregates security data related to weaknesses within the kernel, distributions, and associated utilities provided by various Linux vendors and maintainers. The collection encompasses a wide range of vulnerability types, including memory corruption issues, privilege escalation flaws, information leaks, and denial-of-service conditions. The database covers historical records spanning several decades, reflecting the evolution of the Linux ecosystem from its early releases to modern stable and development branches. This extensive time range allows for the analysis of long-term security trends and the remediation status of legacy systems that remain in production environments. Visitors to this resource can track vendor-specific advisories to stay informed about patches and updates released by major Linux distribution maintainers. You can also use the page to understand the characteristics and impact of specific weakness classes as they manifest in the Linux environment. Additionally, the interface supports looking up a specific product’s vulnerability history, enabling security professionals to assess risk exposure and prioritize mitigation efforts for critical infrastructure components. The data is organized to facilitate efficient searching and correlation between weakness identifiers and affected software versions, ensuring that administrators and developers have access to comprehensive security insights necessary for maintaining system integrity and compliance.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2026-64350 usb: cdnsp: fix stream context array leak in cdnsp_alloc_stream_info() - - 2026-07-25
CVE-2026-64349 usb: dwc3: fix dwc3_readl() and dwc3_writel() calls in dwc3_ulpi_setup() - - 2026-07-25
CVE-2026-64348 usb: free iso schedules on failed submit - - 2026-07-25
CVE-2026-64347 usb: gadget: composite: fix dead empty check in the USB_DT_OTG handler - - 2026-07-25
CVE-2026-64346 usb: gadget: udc: Fix use-after-free in gadget_match_driver - - 2026-07-25
CVE-2026-64345 usb: gadget: f_printer: take kref only for successful open - - 2026-07-25
CVE-2026-64344 USB: idmouse: fix use-after-free on disconnect race - - 2026-07-25
CVE-2026-64343 USB: ldusb: fix use-after-free on disconnect race - - 2026-07-25
CVE-2026-64341 USB: iowarrior: fix use-after-free on disconnect race - - 2026-07-25
CVE-2026-64342 USB: iowarrior: fix use-after-free on disconnect - - 2026-07-25
CVE-2026-64340 USB: legousbtower: fix use-after-free on disconnect race - - 2026-07-25
CVE-2026-64338 USB: misc: uss720: unregister parport on probe failure - - 2026-07-25
CVE-2026-64339 usb: misc: usbio: bound bulk IN response length to the received transfer - - 2026-07-25
CVE-2026-64337 usb: mtu3: unmap request DMA on queue failure - - 2026-07-25
CVE-2026-64336 USB: serial: keyspan_pda: fix information leak - - 2026-07-25
CVE-2026-64335 USB: serial: digi_acceleport: fix broken rx after throttle - - 2026-07-25
CVE-2026-64333 USB: serial: digi_acceleport: fix write buffer corruption 7.8 High 2026-07-25
CVE-2026-64334 USB: serial: digi_acceleport: fix hard lockup on disconnect - - 2026-07-25
CVE-2026-64332 USB: ulpi: fix memory leak on registration failure - - 2026-07-25
CVE-2026-64330 usb: typec: tcpm: Validate SVID index in svdm_consume_modes() - - 2026-07-25
CVE-2026-64331 usbip: vudc: fix NULL deref in vep_dequeue() - - 2026-07-25
CVE-2026-64329 usb: typec: ucsi: ccg: Fix use-after-free of ucsi on remove - - 2026-07-25
CVE-2026-64328 usb: gadget: f_fs: Fix DMA fence leak - - 2026-07-25
CVE-2026-64327 usb: gadget: f_fs: Initialize epfile->in early to fix endpoint direction checks - - 2026-07-25
CVE-2026-64326 block: skip sync_blockdev() on surprise removal in bdev_mark_dead() - - 2026-07-25
CVE-2026-64325 wifi: mt76: mt7921/mt7925: fix NULL dereference in CSA beacon - - 2026-07-25
CVE-2026-64324 udf: validate free block extents against the partition length 7.8 High 2026-07-25
CVE-2026-64323 udf: validate VAT header length against the VAT inode size 7.1 High 2026-07-25
CVE-2026-64322 udf: validate sparing table length as an entry count, not a byte count 7.8 High 2026-07-25
CVE-2026-64321 nvme: target: rdma: fix ndev refcount leak on queue connect - - 2026-07-25

All 18073 known CVE vulnerabilities affecting Linux with full Chinese analysis, references, and POCs where available.