Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 18073

All 18073 CVE vulnerabilities found in Linux, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumeration (CWE) vulnerabilities affecting the Linux operating system product. It aggregates security data related to weaknesses within the kernel, distributions, and associated utilities provided by various Linux vendors and maintainers. The collection encompasses a wide range of vulnerability types, including memory corruption issues, privilege escalation flaws, information leaks, and denial-of-service conditions. The database covers historical records spanning several decades, reflecting the evolution of the Linux ecosystem from its early releases to modern stable and development branches. This extensive time range allows for the analysis of long-term security trends and the remediation status of legacy systems that remain in production environments. Visitors to this resource can track vendor-specific advisories to stay informed about patches and updates released by major Linux distribution maintainers. You can also use the page to understand the characteristics and impact of specific weakness classes as they manifest in the Linux environment. Additionally, the interface supports looking up a specific product’s vulnerability history, enabling security professionals to assess risk exposure and prioritize mitigation efforts for critical infrastructure components. The data is organized to facilitate efficient searching and correlation between weakness identifiers and affected software versions, ensuring that administrators and developers have access to comprehensive security insights necessary for maintaining system integrity and compliance.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2026-63797 rpmsg: char: Fix use-after-free on probe error path 8.4 High 2026-07-19
CVE-2026-63796 ocfs2: reject oversized group bitmap descriptors 8.8 High 2026-07-19
CVE-2026-63795 9p: avoid putting oldfid in p9_client_walk() error path 10.0 Critical 2026-07-19
CVE-2026-63794 KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path - - 2026-07-19
CVE-2026-63793 ntfs: serialize volume label accesses 7.8 High 2026-07-19
CVE-2026-53403 fbdev: Fix fb_new_modelist to prevent null-ptr-deref in fb_videomode_to_var - - 2026-07-19
CVE-2026-53402 fbdev: fbcon: fix out-of-bounds read in err_out of fbcon_do_set_font() 7.1 High 2026-07-19
CVE-2026-53400 i2c: core: fix adapter registration race 7.8 High 2026-07-19
CVE-2026-53401 fbdev: omap2: fix use-after-free in omapfb_mmap 7.8 High 2026-07-19
CVE-2026-53399 nfsd: release layout stid on setlease failure 9.8 Critical 2026-07-19
CVE-2026-53398 NFSD: Fix SECINFO_NO_NAME decode error cleanup 9.8 Critical 2026-07-19
CVE-2026-53397 nfsd: fix posix_acl leak on SETACL decode failure 7.5 High 2026-07-19
CVE-2026-53395 nfsd: fix dead ACL conflict guard in nfsd4_create 7.5 High 2026-07-19
CVE-2026-53396 nfsd: fix posix_acl leak and ignored error in nfsd4_create_file 7.1 High 2026-07-19
CVE-2026-53394 nfsd: avoid leaking pre-allocated openowner on unconfirmed retry race 7.5 High 2026-07-19
CVE-2026-53393 nfsd: reset write verifier on deferred writeback errors - - 2026-07-19
CVE-2026-53391 NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr 7.5 High 2026-07-19
CVE-2026-53392 NFSv4/flexfiles: reject zero filehandle version count 7.5 High 2026-07-19
CVE-2026-53390 ksmbd: fix out-of-bounds read in smb_check_perm_dacl() 8.1 High 2026-07-19
CVE-2026-53389 net/tcp-ao: fix use-after-free of key in del_async path 7.8 High 2026-07-19
CVE-2026-53387 iio: light: veml6075: add bounds check to veml6075_it_ms index 7.1 High 2026-07-19
CVE-2026-53388 fuse: re-lock request before replacing page cache folio 7.8 High 2026-07-19
CVE-2026-53386 iio: adc: ti-ads1298: add bounds check to pga_settings index 7.8 High 2026-07-19
CVE-2026-53385 vc_screen: fix null-ptr-deref in vcs_notifier() during concurrent vcs_write - - 2026-07-19
CVE-2026-53384 serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails 9.8 Critical 2026-07-19
CVE-2026-53383 ksmbd: reject non-VALID session in compound request branch 7.5 High 2026-07-19
CVE-2026-53382 media: vidtv: fix NULL pointer dereference in vidtv_mux_push_si - - 2026-07-19
CVE-2026-53381 virtiofs: fix UAF on submount umount 7.8 High 2026-07-19
CVE-2026-53380 media: rzv2h-ivc: Fix concurrent buffer list access 7.8 High 2026-07-19
CVE-2026-53379 media: i2c: ov8856: free control handler on error in ov8856_init_controls() - - 2026-07-19

All 18073 known CVE vulnerabilities affecting Linux with full Chinese analysis, references, and POCs where available.