Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 18073

All 18073 CVE vulnerabilities found in Linux, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumeration (CWE) vulnerabilities affecting the Linux operating system product. It aggregates security data related to weaknesses within the kernel, distributions, and associated utilities provided by various Linux vendors and maintainers. The collection encompasses a wide range of vulnerability types, including memory corruption issues, privilege escalation flaws, information leaks, and denial-of-service conditions. The database covers historical records spanning several decades, reflecting the evolution of the Linux ecosystem from its early releases to modern stable and development branches. This extensive time range allows for the analysis of long-term security trends and the remediation status of legacy systems that remain in production environments. Visitors to this resource can track vendor-specific advisories to stay informed about patches and updates released by major Linux distribution maintainers. You can also use the page to understand the characteristics and impact of specific weakness classes as they manifest in the Linux environment. Additionally, the interface supports looking up a specific product’s vulnerability history, enabling security professionals to assess risk exposure and prioritize mitigation efforts for critical infrastructure components. The data is organized to facilitate efficient searching and correlation between weakness identifiers and affected software versions, ensuring that administrators and developers have access to comprehensive security insights necessary for maintaining system integrity and compliance.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2026-63948 Bluetooth: L2CAP: fix chan ref leak in l2cap_chan_timeout() on !conn - - 2026-07-19
CVE-2026-63947 Bluetooth: HIDP: fix missing length checks in hidp_input_report() 8.8 High 2026-07-19
CVE-2026-63946 Bluetooth: ISO: fix UAF in iso_recv_frame 8.8 High 2026-07-19
CVE-2026-63945 Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock 7.8 High 2026-07-19
CVE-2026-63944 Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync 8.8 High 2026-07-19
CVE-2026-63943 Input: xpad - fix out-of-bounds access for Share button - - 2026-07-19
CVE-2026-63942 parport: Fix race between port and client registration 7.8 High 2026-07-19
CVE-2026-63941 KVM: arm64: Correctly cap ZCR_EL2 provided by a guest hypervisor 8.8 High 2026-07-19
CVE-2026-63940 KVM: SEV: Ignore Port I/O requests of length '0' 9.3 Critical 2026-07-19
CVE-2026-63939 KVM: SEV: Compute the correct max length of the in-GHCB scratch area 9.3 Critical 2026-07-19
CVE-2026-63937 KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer 8.8 High 2026-07-19
CVE-2026-63938 KVM: SEV: Check PSC request indices against the actual size of the buffer 9.3 Critical 2026-07-19
CVE-2026-63936 iio: adc: mt6359: fix unchecked return value in mt6358_read_imp - - 2026-07-19
CVE-2026-63935 iio: adc: nxp-sar-adc: fix division by zero in write_raw - - 2026-07-19
CVE-2026-63934 iio: gyro: itg3200: fix i2c read into the wrong stack location - - 2026-07-19
CVE-2026-63933 iio: gyro: adis16260: fix division by zero in write_raw - - 2026-07-19
CVE-2026-63931 iio: chemical: scd30: fix division by zero in write_raw - - 2026-07-19
CVE-2026-63932 iio: chemical: mhz19b: reject oversized serial replies - - 2026-07-19
CVE-2026-63930 iio: buffer: hw-consumer: fix use-after-free in error path 7.8 High 2026-07-19
CVE-2026-63929 iio: buffer: Fix DMA fence leak in iio_buffer_enqueue_dmabuf() - - 2026-07-19
CVE-2026-63928 USB: serial: omninet: fix memory corruption with small endpoint - - 2026-07-19
CVE-2026-63927 usb: dwc2: Fix use after free in debug code 7.8 High 2026-07-19
CVE-2026-63926 bpf: sockmap: fix tail fragment offset in bpf_msg_push_data 8.4 High 2026-07-19
CVE-2026-63925 macsec: fix replay protection at XPN lower-PN wrap 8.1 High 2026-07-19
CVE-2026-63924 ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() 9.8 Critical 2026-07-19
CVE-2026-63923 octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify 8.8 High 2026-07-19
CVE-2026-63922 ipv6: exthdrs: refresh nh after handling HAO option 9.8 Critical 2026-07-19
CVE-2026-63921 ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). 8.8 High 2026-07-19
CVE-2026-63920 ipv6: validate extension header length before copying to cmsg 7.1 High 2026-07-19
CVE-2026-63919 xfrm: input: hold netns during deferred transport reinjection 8.8 High 2026-07-19

All 18073 known CVE vulnerabilities affecting Linux with full Chinese analysis, references, and POCs where available.