Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 18084

All 18084 CVE vulnerabilities found in Linux, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumeration (CWE) vulnerabilities affecting the Linux operating system product. It aggregates security data related to weaknesses within the kernel, distributions, and associated utilities provided by various Linux vendors and maintainers. The collection encompasses a wide range of vulnerability types, including memory corruption issues, privilege escalation flaws, information leaks, and denial-of-service conditions. The database covers historical records spanning several decades, reflecting the evolution of the Linux ecosystem from its early releases to modern stable and development branches. This extensive time range allows for the analysis of long-term security trends and the remediation status of legacy systems that remain in production environments. Visitors to this resource can track vendor-specific advisories to stay informed about patches and updates released by major Linux distribution maintainers. You can also use the page to understand the characteristics and impact of specific weakness classes as they manifest in the Linux environment. Additionally, the interface supports looking up a specific product’s vulnerability history, enabling security professionals to assess risk exposure and prioritize mitigation efforts for critical infrastructure components. The data is organized to facilitate efficient searching and correlation between weakness identifiers and affected software versions, ensuring that administrators and developers have access to comprehensive security insights necessary for maintaining system integrity and compliance.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2026-63929 iio: buffer: Fix DMA fence leak in iio_buffer_enqueue_dmabuf() - - 2026-07-19
CVE-2026-63928 USB: serial: omninet: fix memory corruption with small endpoint - - 2026-07-19
CVE-2026-63927 usb: dwc2: Fix use after free in debug code 7.8 High 2026-07-19
CVE-2026-63926 bpf: sockmap: fix tail fragment offset in bpf_msg_push_data 8.4 High 2026-07-19
CVE-2026-63925 macsec: fix replay protection at XPN lower-PN wrap 8.1 High 2026-07-19
CVE-2026-63924 ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() 9.8 Critical 2026-07-19
CVE-2026-63923 octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify 8.8 High 2026-07-19
CVE-2026-63922 ipv6: exthdrs: refresh nh after handling HAO option 9.8 Critical 2026-07-19
CVE-2026-63921 ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). 8.8 High 2026-07-19
CVE-2026-63920 ipv6: validate extension header length before copying to cmsg 7.1 High 2026-07-19
CVE-2026-63919 xfrm: input: hold netns during deferred transport reinjection 8.8 High 2026-07-19
CVE-2026-63917 ip6: vti: Use ip6_tnl.net in vti6_changelink(). 8.8 High 2026-07-19
CVE-2026-63918 l2tp: use refcount_inc_not_zero in l2tp_session_get_by_ifname 7.8 High 2026-07-19
CVE-2026-63916 HID: wacom: Fix OOB write in wacom_hid_set_device_mode() 8.8 High 2026-07-19
CVE-2026-63915 nfc: hci: fix out-of-bounds read in HCP header parsing 8.8 High 2026-07-19
CVE-2026-63914 xfrm: route MIGRATE notifications to caller's netns 7.3 High 2026-07-19
CVE-2026-63913 netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check 8.2 High 2026-07-19
CVE-2026-63912 xfrm: esp: restore combined single-frag length gate 9.8 Critical 2026-07-19
CVE-2026-63911 xfrm: iptfs: reset runtime state when cloning SAs 7.8 High 2026-07-19
CVE-2026-63910 dma-buf: fix UAF in dma_buf_fd() tracepoint 7.8 High 2026-07-19
CVE-2026-63909 ksmbd: OOB read regression in smb_check_perm_dacl() ACE-walk loops 8.1 High 2026-07-19
CVE-2026-63908 Input: atmel_mxt_ts - fix boundary check in mxt_prepare_cfg_mem - - 2026-07-19
CVE-2026-63907 uio: uio_pci_generic_sva: fix double free of devm_kzalloc() memory - - 2026-07-19
CVE-2026-63906 usb: musb: omap2430: Fix use-after-free in omap2430_probe() 8.4 High 2026-07-19
CVE-2026-63904 usb: usbtmc: check URB actual_length for interrupt-IN notifications - - 2026-07-19
CVE-2026-63905 usbip: vudc: Fix use after free bug in vudc_remove due to race condition - - 2026-07-19
CVE-2026-63903 USB: serial: belkin_sa: validate interrupt status length - - 2026-07-19
CVE-2026-63902 USB: serial: cypress_m8: validate interrupt packet headers - - 2026-07-19
CVE-2026-63901 USB: serial: digi_acceleport: fix memory corruption with small endpoints - - 2026-07-19
CVE-2026-63900 USB: serial: keyspan: fix missing indat transfer sanity check - - 2026-07-19

All 18084 known CVE vulnerabilities affecting Linux with full Chinese analysis, references, and POCs where available.