Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 18073

All 18073 CVE vulnerabilities found in Linux, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumeration (CWE) vulnerabilities affecting the Linux operating system product. It aggregates security data related to weaknesses within the kernel, distributions, and associated utilities provided by various Linux vendors and maintainers. The collection encompasses a wide range of vulnerability types, including memory corruption issues, privilege escalation flaws, information leaks, and denial-of-service conditions. The database covers historical records spanning several decades, reflecting the evolution of the Linux ecosystem from its early releases to modern stable and development branches. This extensive time range allows for the analysis of long-term security trends and the remediation status of legacy systems that remain in production environments. Visitors to this resource can track vendor-specific advisories to stay informed about patches and updates released by major Linux distribution maintainers. You can also use the page to understand the characteristics and impact of specific weakness classes as they manifest in the Linux environment. Additionally, the interface supports looking up a specific product’s vulnerability history, enabling security professionals to assess risk exposure and prioritize mitigation efforts for critical infrastructure components. The data is organized to facilitate efficient searching and correlation between weakness identifiers and affected software versions, ensuring that administrators and developers have access to comprehensive security insights necessary for maintaining system integrity and compliance.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2026-63888 scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() 9.8 Critical 2026-07-19
CVE-2026-63887 scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf 9.8 Critical 2026-07-19
CVE-2026-63886 scsi: target: iscsi: Validate CHAP_R length before base64 decode 9.8 Critical 2026-07-19
CVE-2026-63885 drm/gem: fix race between change_handle and handle_delete 8.8 High 2026-07-19
CVE-2026-63884 drm/i915: Fix potential UAF in TTM object purge 7.8 High 2026-07-19
CVE-2026-63883 serial: qcom_geni: fix kfifo underflow when flush precedes DMA completion IRQ 7.3 High 2026-07-19
CVE-2026-63882 drm/amdkfd: fix NULL pointer bug in svm_range_set_attr - - 2026-07-19
CVE-2026-63881 drm/amdkfd: fix a vulnerability of integer overflow in kfd debugger 7.8 High 2026-07-19
CVE-2026-63879 drm/amdgpu: fix amdgpu_hmm_range_get_pages 7.8 High 2026-07-19
CVE-2026-63880 drm/amdgpu: fix lock leak on ENOMEM in AMDGPU_GEM_OP_GET_MAPPING_INFO - - 2026-07-19
CVE-2026-63878 drm/amdgpu: check num_entries in GEM_OP GET_MAPPING_INFO - - 2026-07-19
CVE-2026-63877 serial: dz: Convert to use a platform device - - 2026-07-19
CVE-2026-63876 serial: zs: Convert to use a platform device - - 2026-07-19
CVE-2026-63875 arm64: tlb: Flush walk cache when unsharing PMD tables 7.8 High 2026-07-19
CVE-2026-63874 net: mctp: usb: fix race between urb completion and rx_retry cancellation 7.8 High 2026-07-19
CVE-2026-63873 accel/amdxdna: Fix mm_struct reference leak in aie2_populate_range() - - 2026-07-19
CVE-2026-63871 Bluetooth: ISO: Fix data-race on iso_pi fields in hci_get_route calls - - 2026-07-19
CVE-2026-63870 ieee802154: 6lowpan: only accept IPv6 packets in lowpan_xmit() 7.8 High 2026-07-19
CVE-2026-63868 net: garp: fix unsigned integer underflow in garp_pdu_parse_attr - - 2026-07-19
CVE-2026-63869 wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap 7.6 High 2026-07-19
CVE-2026-63867 mptcp: close TOCTOU race while computing rcv_wnd 8.2 High 2026-07-19
CVE-2026-63866 wifi: mt76: mt7996: Clear wcid pointer in mt7996_mac_sta_deinit_link() 8.8 High 2026-07-19
CVE-2026-63864 bpf: Propagate error from visit_tailcall_insn 8.4 High 2026-07-19
CVE-2026-63865 bpf: Drop task_to_inode and inet_conn_established from lsm sleepable hooks 8.8 High 2026-07-19
CVE-2026-63863 drm/gpusvm: Fix unbalanced unlock in drm_gpusvm_scan_mm() 8.8 High 2026-07-19
CVE-2026-63861 spi: mtk-snfi: unregister ECC engine on probe failure and remove() callback - - 2026-07-19
CVE-2026-63862 PCI: mediatek-gen3: Prevent leaking IRQ domains when IRQ not found - - 2026-07-19
CVE-2026-63860 RDMA/core: Prefer NLA_NUL_STRING 8.4 High 2026-07-19
CVE-2026-63859 net: airoha: Add missing bits in airoha_qdma_cleanup_tx_queue() - - 2026-07-19
CVE-2026-63858 netfilter: nf_tables: add hook transactions for device deletions 7.8 High 2026-07-19

All 18073 known CVE vulnerabilities affecting Linux with full Chinese analysis, references, and POCs where available.