Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17979

Browse all 17979 CVE security advisories affecting Linux. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Linux serves as the foundational operating system for the majority of internet servers, cloud infrastructure, and embedded devices, powering critical global digital services. Its open-source nature and widespread deployment have historically exposed it to diverse vulnerability classes, including remote code execution, buffer overflows, and privilege escalation flaws within kernel modules and system utilities. While the project maintains rigorous security practices, the sheer volume of code contributes to a high cumulative count of recorded Common Vulnerabilities and Exposures, currently exceeding eleven thousand. Notable incidents often stem from misconfigurations or unpatched legacy components rather than fundamental architectural failures. The community responds rapidly to disclosed threats, yet the extensive attack surface necessitates continuous vigilance. Administrators must prioritize regular updates and strict access controls to mitigate risks associated with this ubiquitous platform, ensuring stability across both enterprise and consumer environments.

CVE ID Title CVSS Severity Published
CVE-2026-64579 xfrm: policy: preallocate inexact bins before xfrm_hash_rebuild reinsert — Linux - - 2026-08-05
CVE-2026-64576 nexthop: initialize extack in nh_res_bucket_migrate() — Linux 7.1 High 2026-08-05
CVE-2026-64577 gtp: check skb_pull_data() return in gtp1u_send_echo_resp() — Linux 7.5 High 2026-08-05
CVE-2026-64575 bpf: tcp: fix double sock release on batch realloc — Linux 7.8 High 2026-08-05
CVE-2026-64573 Bluetooth: qca: fix NVM tag length underflow in TLV parser — Linux - - 2026-08-05
CVE-2026-64574 wifi: mac80211: tear down new links on vif update error path — Linux 7.8 High 2026-08-05
CVE-2026-64572 ipv4: fib: free fib_alias with kfree_rcu() on insert error path — Linux - - 2026-08-05
CVE-2026-64571 wifi: p54: validate RX frame length in p54_rx_eeprom_readback() — Linux - - 2026-08-05
CVE-2026-64570 wifi: mac80211: fix fils_discovery double free on alloc failure — Linux 7.8 High 2026-08-05
CVE-2026-64569 mpls: fix NULL deref in mpls_valid_fib_dump_req() on CONFIG_INET=n — Linux - - 2026-08-05
CVE-2026-64568 wifi: mac80211: fix unsol_bcast_probe_resp double free on alloc failure — Linux 7.8 High 2026-08-05
CVE-2026-64567 btrfs: reject free space cache with more entries than pages — Linux 7.8 High 2026-08-05
CVE-2026-64566 xfrm: iptfs: propagate SKBFL_SHARED_FRAG in iptfs_skb_add_frags() — Linux 9.8 Critical 2026-08-05
CVE-2026-64565 Input: ims-pcu - fix heap-buffer-overflow in ims_pcu_process_data() — Linux - - 2026-08-04
CVE-2026-64564 sctp: don't free the ASCONF's own transport in DEL-IP processing — Linux 9.8 Critical 2026-08-04
CVE-2026-64563 rhashtable: clear stale iter->p on table restart — Linux 7.8 High 2026-08-04
CVE-2026-64562 KVM: nVMX: Hide shadow VMCS right after VMCLEAR — Linux 8.8 High 2026-08-04
CVE-2026-64561 KVM: x86: Check for invalid/obsolete root *after* making MMU pages available — Linux 8.8 High 2026-08-04
CVE-2022-4994 KVM: x86: wean fast IN from emulator_pio_in — Linux - - 2026-07-30
CVE-2026-64560 posix-cpu-timers: Prevent UAF caused by non-leader exec() race — Linux 7.8 High 2026-07-29
CVE-2026-64559 s390/pkey: Check length in PKEY_VERIFYPROTK ioctl — Linux 7.8 High 2026-07-29
CVE-2026-64558 s390/pkey: Check length in pkey_pckmo handler implementation — Linux 7.8 High 2026-07-29
CVE-2026-64556 perf/core: Detach event groups during remove_on_exec — Linux 7.8 High 2026-07-29
CVE-2026-64557 Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() — Linux 8.8 High 2026-07-29
CVE-2026-64554 netfilter: bridge: fix stale prevhdr pointer in br_ip6_fragment() — Linux 8.8 High 2026-07-27
CVE-2026-64555 KVM: arm64: nv: Fix SPSR_EL2 restore in kvm_hyp_handle_mops() — Linux 8.8 High 2026-07-27
CVE-2026-64552 virtio-net: fix len check in receive_big() — Linux 8.4 High 2026-07-27
CVE-2026-64553 net: psample: fix info leak in PSAMPLE_ATTR_DATA — Linux - - 2026-07-27
CVE-2026-64551 sctp: validate STALE_COOKIE cause length before reading staleness — Linux 9.1 Critical 2026-07-27
CVE-2026-64549 Bluetooth: bpa10x: avoid OOB read of revision string in bpa10x_setup() — Linux - - 2026-07-27

This page lists every published CVE security advisory associated with Linux. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.