Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17979

Browse all 17979 CVE security advisories affecting Linux. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Linux serves as the foundational operating system for the majority of internet servers, cloud infrastructure, and embedded devices, powering critical global digital services. Its open-source nature and widespread deployment have historically exposed it to diverse vulnerability classes, including remote code execution, buffer overflows, and privilege escalation flaws within kernel modules and system utilities. While the project maintains rigorous security practices, the sheer volume of code contributes to a high cumulative count of recorded Common Vulnerabilities and Exposures, currently exceeding eleven thousand. Notable incidents often stem from misconfigurations or unpatched legacy components rather than fundamental architectural failures. The community responds rapidly to disclosed threats, yet the extensive attack surface necessitates continuous vigilance. Administrators must prioritize regular updates and strict access controls to mitigate risks associated with this ubiquitous platform, ensuring stability across both enterprise and consumer environments.

CVE ID Title CVSS Severity Published
CVE-2026-64149 dma-mapping: move dma_map_resource() sanity check into debug code — Linux - - 2026-07-19
CVE-2026-64148 pds_core: fix error handling in pdsc_devcmd_wait — Linux 7.5 High 2026-07-19
CVE-2026-64147 pds_core: fix debugfs_lookup dentry leak and error handling — Linux - - 2026-07-19
CVE-2026-64145 wifi: wilc1000: fix dma_buffer leak on bus acquire failure — Linux - - 2026-07-19
CVE-2026-64146 erofs: fix metabuf leak in inode xattr initialization — Linux - - 2026-07-19
CVE-2026-64144 Bluetooth: btmtk: fix urb->setup_packet leak in error paths — Linux - - 2026-07-19
CVE-2026-64143 platform/x86: uniwill-laptop: Do not enable the charging limit even when forced — Linux - - 2026-07-19
CVE-2026-64142 ksmbd: close durable scavenger races against m_fp_list lookups — Linux 9.8 Critical 2026-07-19
CVE-2026-64141 ksmbd: fix null pointer dereference in compare_guid_key() — Linux 7.5 High 2026-07-19
CVE-2026-64140 ksmbd: fix null pointer dereference in proc_show_files() — Linux 7.5 High 2026-07-19
CVE-2026-64139 ksmbd: fix SID memory leak in set_posix_acl_entries_dacl() on overflow — Linux - - 2026-07-19
CVE-2026-64138 ksmbd: validate SID in parent security descriptor during ACL inheritance — Linux 8.8 High 2026-07-19
CVE-2026-64137 smb: client: require net admin for CIFS SWN netlink — Linux 7.8 High 2026-07-19
CVE-2026-64135 hwmon: (pmbus/adm1266) widen blackbox-info buffer to I2C_SMBUS_BLOCK_MAX — Linux - - 2026-07-19
CVE-2026-64136 smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() — Linux 9.8 Critical 2026-07-19
CVE-2026-64134 ALSA: pcm: Don't setup bogus iov_iter for silencing — Linux 7.8 High 2026-07-19
CVE-2026-64132 ipv6: ioam: refresh hdr pointer before ioam6_event() — Linux 9.8 Critical 2026-07-19
CVE-2026-64133 ALSA: asihpi: Fix potential OOB array access at reading cache — Linux 7.8 High 2026-07-19
CVE-2026-64131 mm/memory: fix spurious warning when unmapping device-private/exclusive pages — Linux - - 2026-07-19
CVE-2026-64130 mm/page_alloc: fix initialization of tags of the huge zero folio with init_on_free — Linux - - 2026-07-19
CVE-2026-64128 Bluetooth: ISO: drop ISO_END frames received without prior ISO_START — Linux - - 2026-07-19
CVE-2026-64129 mm/migrate_device: fix spinlock leak in migrate_vma_insert_huge_pmd_page — Linux - - 2026-07-19
CVE-2026-64127 Bluetooth: L2CAP: ecred_reconfigure: send packed pdu, not stack pointer — Linux - - 2026-07-19
CVE-2026-64126 Bluetooth: MGMT: validate Add Extended Advertising Data length — Linux 7.3 High 2026-07-19
CVE-2026-64125 net: bcmgenet: keep RBUF EEE/PM disabled — Linux 9.8 Critical 2026-07-19
CVE-2026-64124 net: devmem: reject dma-buf bind with non-page-aligned size or SG length — Linux 8.8 High 2026-07-19
CVE-2026-64123 net: hsr: defer node table free until after RCU readers — Linux 7.8 High 2026-07-19
CVE-2026-64122 net/mlx5e: Fix use-after-free in mlx5e_tx_reporter_timeout_recover — Linux 9.8 Critical 2026-07-19
CVE-2026-64121 net: ifb: report ethtool stats over num_tx_queues — Linux - - 2026-07-19
CVE-2026-64120 net: ethtool: fix NULL pointer dereference in phy_reply_size — Linux - - 2026-07-19

This page lists every published CVE security advisory associated with Linux. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.