Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17979

Browse all 17979 CVE security advisories affecting Linux. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Linux serves as the foundational operating system for the majority of internet servers, cloud infrastructure, and embedded devices, powering critical global digital services. Its open-source nature and widespread deployment have historically exposed it to diverse vulnerability classes, including remote code execution, buffer overflows, and privilege escalation flaws within kernel modules and system utilities. While the project maintains rigorous security practices, the sheer volume of code contributes to a high cumulative count of recorded Common Vulnerabilities and Exposures, currently exceeding eleven thousand. Notable incidents often stem from misconfigurations or unpatched legacy components rather than fundamental architectural failures. The community responds rapidly to disclosed threats, yet the extensive attack surface necessitates continuous vigilance. Administrators must prioritize regular updates and strict access controls to mitigate risks associated with this ubiquitous platform, ensuring stability across both enterprise and consumer environments.

CVE ID Title CVSS Severity Published
CVE-2026-64550 net: qualcomm: rmnet: validate MAP frame length before ingress parsing — Linux 7.3 High 2026-07-27
CVE-2026-64548 bpf, sockmap: reject overflowing copy + len in bpf_msg_push_data() — Linux 8.4 High 2026-07-27
CVE-2026-64547 net: usb: net1080: validate packet_len before pad-byte access in rx_fixup — Linux 8.1 High 2026-07-27
CVE-2026-64545 net, bpf: check master for NULL in xdp_master_redirect() — Linux 7.5 High 2026-07-27
CVE-2026-64546 drm/edid: fix OOB read in drm_parse_tiled_block() — Linux 7.1 High 2026-07-27
CVE-2026-64544 crypto: asymmetric_keys - fix OOB read in pefile_digest_pe_contents — Linux - - 2026-07-27
CVE-2026-64543 tipc: fix use-after-free of the discoverer in tipc_disc_rcv() — Linux 7.8 High 2026-07-27
CVE-2026-64542 ipv6: ndisc: fix NULL deref in accept_untracked_na() — Linux - - 2026-07-27
CVE-2026-64541 net/smc: fix UAF in smc_cdc_rx_handler() by pinning the socket — Linux 9.8 Critical 2026-07-27
CVE-2026-64540 usbnet: gl620a: fix out-of-bounds read in genelink_rx_fixup() — Linux 8.1 High 2026-07-27
CVE-2026-64539 Bluetooth: eir: Fix stack OOB write when prepending the Flags AD — Linux 7.8 High 2026-07-27
CVE-2026-64538 ipv6: Fix null-ptr-deref in fib6_nh_mtu_change(). — Linux - - 2026-07-27
CVE-2026-64537 bridge: cfm: reject invalid CCM interval at configuration time — Linux - - 2026-07-27
CVE-2026-17523 can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet — Linux 7.8 High 2026-07-27
CVE-2026-64536 staging: rtl8723bs: fix OOB reads in is_ap_in_tkip() IE loop — Linux 8.1 High 2026-07-27
CVE-2026-64535 nvmet-tcp: Fix potential UAF when ddgst mismatch — Linux 9.8 Critical 2026-07-27
CVE-2026-64534 nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path — Linux 9.8 Critical 2026-07-27
CVE-2026-64533 fs/ntfs3: validate lcns_follow in log_replay conversion — Linux 7.8 High 2026-07-27
CVE-2026-64531 net: openvswitch: reject oversized nested action attrs — Linux 7.8 High 2026-07-27
CVE-2026-64532 fs/ntfs3: bound NTFS_DE view.data_off in UpdateRecordData{Root,Allocation} — Linux 7.8 High 2026-07-27
CVE-2024-14040 net: nexthop: Increase weight to u16 — Linux 7.8 High 2026-07-26
CVE-2026-64530 net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle — Linux 9.8 Critical 2026-07-26
CVE-2026-64529 crypto: qat - remove unused character device and IOCTLs — Linux 7.8 High 2026-07-25
CVE-2026-64528 tty: serial: samsung: Remove redundant port lock acquisition in rx helpers — Linux - - 2026-07-25
CVE-2026-64527 drm/hyperv: validate VMBus packet size in receive callback — Linux - - 2026-07-25
CVE-2026-64526 ethtool: tsconfig: fix missing ethnl_ops_complete() — Linux - - 2026-07-25
CVE-2026-64525 xfrm: move policy_bydst RCU sync from per-netns .exit to .pre_exit — Linux - - 2026-07-25
CVE-2026-64523 net/handshake: Take a long-lived file reference at submit — Linux 9.8 Critical 2026-07-25
CVE-2026-64524 drm/hyperv: validate resolution_count and fix WIN8 fallback — Linux 7.7 High 2026-07-25
CVE-2026-64522 net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA — Linux 8.8 High 2026-07-25

This page lists every published CVE security advisory associated with Linux. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.