Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 18073

All 18073 CVE vulnerabilities found in Linux, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumeration (CWE) vulnerabilities affecting the Linux operating system product. It aggregates security data related to weaknesses within the kernel, distributions, and associated utilities provided by various Linux vendors and maintainers. The collection encompasses a wide range of vulnerability types, including memory corruption issues, privilege escalation flaws, information leaks, and denial-of-service conditions. The database covers historical records spanning several decades, reflecting the evolution of the Linux ecosystem from its early releases to modern stable and development branches. This extensive time range allows for the analysis of long-term security trends and the remediation status of legacy systems that remain in production environments. Visitors to this resource can track vendor-specific advisories to stay informed about patches and updates released by major Linux distribution maintainers. You can also use the page to understand the characteristics and impact of specific weakness classes as they manifest in the Linux environment. Additionally, the interface supports looking up a specific product’s vulnerability history, enabling security professionals to assess risk exposure and prioritize mitigation efforts for critical infrastructure components. The data is organized to facilitate efficient searching and correlation between weakness identifiers and affected software versions, ensuring that administrators and developers have access to comprehensive security insights necessary for maintaining system integrity and compliance.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2026-64038 hwmon: (lm90) Stop work before releasing hwmon device - - 2026-07-19
CVE-2026-64036 cgroup/rstat: validate cpu before css_rstat_cpu() access 7.8 High 2026-07-19
CVE-2026-64037 wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled 9.8 Critical 2026-07-19
CVE-2026-64035 igc: set tx buffer type for SMD frames 9.8 Critical 2026-07-19
CVE-2026-64033 RDMA/rtrs: Fix use-after-free in path file creation cleanup 9.8 Critical 2026-07-19
CVE-2026-64034 net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer 9.3 Critical 2026-07-19
CVE-2026-64032 bridge: mcast: Fix a possible use-after-free when removing a bridge port 7.8 High 2026-07-19
CVE-2026-64031 erofs: fix managed cache race for unaligned extents 7.8 High 2026-07-19
CVE-2026-64030 wifi: mac80211: bounds-check link_id in ieee80211_ml_epcs 8.8 High 2026-07-19
CVE-2026-64029 ALSA: seq: Serialize UMP output teardown with event_input 7.8 High 2026-07-19
CVE-2026-64028 tracing: Avoid NULL return from hist_field_name() on truncation - - 2026-07-19
CVE-2026-64027 net: shaper: rework the VALID marking (again) 7.8 High 2026-07-19
CVE-2026-64026 rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg 7.8 High 2026-07-19
CVE-2026-64025 bpf, skmsg: fix verdict sk_data_ready racing with ktls rx 9.8 Critical 2026-07-19
CVE-2026-64024 tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction 9.4 Critical 2026-07-19
CVE-2026-64023 gpio: aggregator: fix a potential use-after-free 7.8 High 2026-07-19
CVE-2026-64022 gpio: aggregator: remove the software node when deactivating the aggregator - - 2026-07-19
CVE-2026-64021 drm/xe/oa: Fix exec_queue leak on width check in stream open - - 2026-07-19
CVE-2026-64020 nvme-pci: fix dma_vecs leak on p2p memory 7.5 High 2026-07-19
CVE-2026-64018 net: mana: validate rx_req_idx to prevent out-of-bounds array access 9.3 Critical 2026-07-19
CVE-2026-64019 nvme-pci: fix dma mapping leak on data setup error - - 2026-07-19
CVE-2026-64017 blk-mq: pop cached request if it is usable 7.8 High 2026-07-19
CVE-2026-64016 ksmbd: fix durable reconnect error path file lifetime 9.8 Critical 2026-07-19
CVE-2026-64015 security/keys: fix missed RCU read section on lookup 7.8 High 2026-07-19
CVE-2026-64014 Input: usbtouchscreen - clamp NEXIO data_len/x_len to URB buffer size - - 2026-07-19
CVE-2026-64013 ACPI: button: Fix ACPI GPE handler leak during removal - - 2026-07-19
CVE-2026-64012 net/sched: sch_sfb: Replace direct dequeue call with peek and qdisc_dequeue_peeked - - 2026-07-19
CVE-2026-64011 nfc: llcp: Fix use-after-free in llcp_sock_release() 7.8 High 2026-07-19
CVE-2026-64010 nfc: llcp: Fix use-after-free race in nfc_llcp_recv_cc() 8.8 High 2026-07-19
CVE-2026-64008 accel/rocket: fix UAF via dangling GEM handle in create_bo 7.8 High 2026-07-19

All 18073 known CVE vulnerabilities affecting Linux with full Chinese analysis, references, and POCs where available.