Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 18073

All 18073 CVE vulnerabilities found in Linux, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumeration (CWE) vulnerabilities affecting the Linux operating system product. It aggregates security data related to weaknesses within the kernel, distributions, and associated utilities provided by various Linux vendors and maintainers. The collection encompasses a wide range of vulnerability types, including memory corruption issues, privilege escalation flaws, information leaks, and denial-of-service conditions. The database covers historical records spanning several decades, reflecting the evolution of the Linux ecosystem from its early releases to modern stable and development branches. This extensive time range allows for the analysis of long-term security trends and the remediation status of legacy systems that remain in production environments. Visitors to this resource can track vendor-specific advisories to stay informed about patches and updates released by major Linux distribution maintainers. You can also use the page to understand the characteristics and impact of specific weakness classes as they manifest in the Linux environment. Additionally, the interface supports looking up a specific product’s vulnerability history, enabling security professionals to assess risk exposure and prioritize mitigation efforts for critical infrastructure components. The data is organized to facilitate efficient searching and correlation between weakness identifiers and affected software versions, ensuring that administrators and developers have access to comprehensive security insights necessary for maintaining system integrity and compliance.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2026-64230 regulator: tps65219: fix irq_data.rdev not being assigned - - 2026-07-24
CVE-2026-64228 net: ethtool: phy: avoid NULL deref when PHY driver is unbound - - 2026-07-24
CVE-2026-64229 x86/mm: Disable broadcast TLB flush when PCID is disabled - - 2026-07-24
CVE-2026-64227 ACPI: driver: Check ACPI_COMPANION() against NULL during probe - - 2026-07-24
CVE-2026-64226 sched_ext: Avoid UAF in scx_root_enable_workfn() init failure path 7.8 High 2026-07-24
CVE-2026-64225 octeontx2-af: CGX: add bounds check to cgx_speed_mbps index - - 2026-07-24
CVE-2026-64224 octeontx2-pf: fix double free in rvu_rep_rsrc_init() - - 2026-07-24
CVE-2026-64223 wifi: mac80211: consume only present negotiated TTLM maps 8.1 High 2026-07-24
CVE-2026-64222 octeontx2-pf: avoid double free of pool->stack on AQ init failure 7.0 High 2026-07-24
CVE-2026-64221 spi: ti-qspi: fix use-after-free after DMA setup failure 7.8 High 2026-07-24
CVE-2026-64220 device property: set fwnode->secondary to NULL in fwnode_init() - - 2026-07-24
CVE-2026-64218 batman-adv: bla: fix report_work leak on backbone_gw purge 7.8 High 2026-07-24
CVE-2026-64219 drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async 7.0 High 2026-07-24
CVE-2026-64216 netfs: Fix potential UAF in netfs_unlock_abandoned_read_pages() 9.8 Critical 2026-07-24
CVE-2026-64217 netfs: Fix overrun check in netfs_extract_user_iter() 7.8 High 2026-07-24
CVE-2026-64214 powerpc/time: Remove redundant preempt_disable|enable() calls from arch_irq_work_raise() - - 2026-07-24
CVE-2026-64215 drm/msm/a6xx: Check kzalloc return in a8xx_hfi_send_perf_table - - 2026-07-24
CVE-2026-64213 hwmon: (lm90) Add lock protection to lm90_alert - - 2026-07-24
CVE-2026-64212 wifi: iwlwifi: mld: don't dereference a pointer before NULL checking it - - 2026-07-24
CVE-2026-64211 srcu: Don't queue workqueue handlers to never-online CPUs - - 2026-07-24
CVE-2026-64210 net/mlx5e: xsk: Fix unlocked writing to ICOSQ 7.5 High 2026-07-24
CVE-2026-64209 phy: qcom: qmp-usbc: Fix out-of-bounds array access in dp swing config - - 2026-07-24
CVE-2026-64208 crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks 7.5 High 2026-07-24
CVE-2026-64600 xfs: resample the data fork mapping after cycling ILOCK 7.8 High 2026-07-23
CVE-2026-64206 Bluetooth: L2CAP: cancel pending_rx_work before taking conn->lock 8.8 High 2026-07-20
CVE-2026-64207 net/sched: dualpi2: fix GSO backlog accounting - - 2026-07-20
CVE-2026-64205 i2c: i801: fix hardware state machine corruption in error path - - 2026-07-20
CVE-2026-64192 bpf: Reject BPF_MAP_TYPE_INODE_STORAGE creation if BPF LSM is uninitialized - - 2026-07-20
CVE-2026-64191 i2c: stub: Reject I2C block transfers with invalid length 7.8 High 2026-07-20
CVE-2026-64190 net: team: fix NULL pointer dereference in team_xmit during mode change - - 2026-07-20

All 18073 known CVE vulnerabilities affecting Linux with full Chinese analysis, references, and POCs where available.