Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 18073

All 18073 CVE vulnerabilities found in Linux, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumeration (CWE) vulnerabilities affecting the Linux operating system product. It aggregates security data related to weaknesses within the kernel, distributions, and associated utilities provided by various Linux vendors and maintainers. The collection encompasses a wide range of vulnerability types, including memory corruption issues, privilege escalation flaws, information leaks, and denial-of-service conditions. The database covers historical records spanning several decades, reflecting the evolution of the Linux ecosystem from its early releases to modern stable and development branches. This extensive time range allows for the analysis of long-term security trends and the remediation status of legacy systems that remain in production environments. Visitors to this resource can track vendor-specific advisories to stay informed about patches and updates released by major Linux distribution maintainers. You can also use the page to understand the characteristics and impact of specific weakness classes as they manifest in the Linux environment. Additionally, the interface supports looking up a specific product’s vulnerability history, enabling security professionals to assess risk exposure and prioritize mitigation efforts for critical infrastructure components. The data is organized to facilitate efficient searching and correlation between weakness identifiers and affected software versions, ensuring that administrators and developers have access to comprehensive security insights necessary for maintaining system integrity and compliance.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2026-64129 mm/migrate_device: fix spinlock leak in migrate_vma_insert_huge_pmd_page - - 2026-07-19
CVE-2026-64127 Bluetooth: L2CAP: ecred_reconfigure: send packed pdu, not stack pointer - - 2026-07-19
CVE-2026-64126 Bluetooth: MGMT: validate Add Extended Advertising Data length 7.3 High 2026-07-19
CVE-2026-64125 net: bcmgenet: keep RBUF EEE/PM disabled 9.8 Critical 2026-07-19
CVE-2026-64124 net: devmem: reject dma-buf bind with non-page-aligned size or SG length 8.8 High 2026-07-19
CVE-2026-64123 net: hsr: defer node table free until after RCU readers 7.8 High 2026-07-19
CVE-2026-64122 net/mlx5e: Fix use-after-free in mlx5e_tx_reporter_timeout_recover 9.8 Critical 2026-07-19
CVE-2026-64121 net: ifb: report ethtool stats over num_tx_queues - - 2026-07-19
CVE-2026-64120 net: ethtool: fix NULL pointer dereference in phy_reply_size - - 2026-07-19
CVE-2026-64118 qed: fix double free in qed_cxt_tables_alloc() 8.4 High 2026-07-19
CVE-2026-64119 l2tp: use list_del_rcu in l2tp_session_unhash - - 2026-07-19
CVE-2026-64117 wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb 8.8 High 2026-07-19
CVE-2026-64116 ipv6: ioam: add NULL check for idev in ipv6_hop_ioam() 7.5 High 2026-07-19
CVE-2026-64115 vsock/vmci: fix UAF when peer resets connection during handshake 8.8 High 2026-07-19
CVE-2026-64114 ipv4: raw: reject IP_HDRINCL packets with ihl < 5 7.8 High 2026-07-19
CVE-2026-64112 rbd: eliminate a race in lock_dwork draining on unmap 7.8 High 2026-07-19
CVE-2026-64113 ixgbevf: fix use-after-free in VEPA multicast source pruning 9.8 Critical 2026-07-19
CVE-2026-64111 lsm: hold cred_guard_mutex for lsm_set_self_attr() 7.1 High 2026-07-19
CVE-2026-64109 af_unix: Fix UAF read of tail->len in unix_stream_data_wait() 8.8 High 2026-07-19
CVE-2026-64110 igc: fix potential skb leak in igc_fpe_xmit_smd_frame() - - 2026-07-19
CVE-2026-64108 cifs: Fix busy dentry used after unmounting 7.8 High 2026-07-19
CVE-2026-64107 ASoC: codecs: pcm512x: fix null-ptr dereference in pcm512x_overclock_xxx_put() - - 2026-07-19
CVE-2026-64106 KVM: arm64: vgic-its: Reject restored DTE with out-of-range num_eventid_bits 9.0 Critical 2026-07-19
CVE-2026-64105 KVM: arm64: vgic: Free private_irqs when init fails after allocation - - 2026-07-19
CVE-2026-64104 virt: sev-guest: Explicitly leak pages in unknown state 8.7 High 2026-07-19
CVE-2026-64102 RDMA/siw: Reject MPA FPDU length underflow before signed receive math 9.8 Critical 2026-07-19
CVE-2026-64103 scsi: isci: Fix use-after-free in device removal path - - 2026-07-19
CVE-2026-64101 fwctl: pds: Validate RPC input size before parsing - - 2026-07-19
CVE-2026-64100 drm/msm: Fix shrinker deadlock - - 2026-07-19
CVE-2026-64099 drm/v3d: Fix use-after-free of CPU job query arrays on error path 7.8 High 2026-07-19

All 18073 known CVE vulnerabilities affecting Linux with full Chinese analysis, references, and POCs where available.