Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17978

Browse all 17978 CVE security advisories affecting Linux. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Linux serves as the foundational operating system for the majority of internet servers, cloud infrastructure, and embedded devices, powering critical global digital services. Its open-source nature and widespread deployment have historically exposed it to diverse vulnerability classes, including remote code execution, buffer overflows, and privilege escalation flaws within kernel modules and system utilities. While the project maintains rigorous security practices, the sheer volume of code contributes to a high cumulative count of recorded Common Vulnerabilities and Exposures, currently exceeding eleven thousand. Notable incidents often stem from misconfigurations or unpatched legacy components rather than fundamental architectural failures. The community responds rapidly to disclosed threats, yet the extensive attack surface necessitates continuous vigilance. Administrators must prioritize regular updates and strict access controls to mitigate risks associated with this ubiquitous platform, ensuring stability across both enterprise and consumer environments.

CVE ID Title CVSS Severity Published
CVE-2026-63999 ethtool: rss: fix indir_table and hkey leak on get_rxfh failure — Linux - - 2026-07-19
CVE-2026-63997 ethtool: module: avoid leaking a netdev ref on module flash errors — Linux - - 2026-07-19
CVE-2026-63996 ethtool: cmis: require exact CDB reply length — Linux 7.8 High 2026-07-19
CVE-2026-63995 ethtool: cmis: validate start_cmd_payload_size from module — Linux 7.8 High 2026-07-19
CVE-2026-63994 tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() — Linux 9.8 Critical 2026-07-19
CVE-2026-63993 vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() — Linux 9.8 Critical 2026-07-19
CVE-2026-63992 tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() — Linux 9.1 Critical 2026-07-19
CVE-2026-63991 Bluetooth: 6lowpan: check skb_clone() return value in send_mcast_pkt() — Linux - - 2026-07-19
CVE-2026-63990 bonding: refuse to enslave CAN devices — Linux - - 2026-07-19
CVE-2026-63989 bridge: Fix sleep in atomic context in netlink path — Linux - - 2026-07-19
CVE-2026-63988 bridge: Fix sleep in atomic context in sysfs path — Linux - - 2026-07-19
CVE-2026-63987 ethtool: coalesce: cap profile updates at NET_DIM_PARAMS_NUM_PROFILES — Linux 7.8 High 2026-07-19
CVE-2026-63985 ethtool: eeprom: add more safeties to EEPROM Netlink fallback — Linux 7.8 High 2026-07-19
CVE-2026-63986 ethtool: tsinfo: don't pass ERR_PTR to genlmsg_cancel on prepare failure — Linux - - 2026-07-19
CVE-2026-63984 ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() — Linux 9.8 Critical 2026-07-19
CVE-2026-63983 net/sched: fix packet loop on netem when duplicate is on — Linux - - 2026-07-19
CVE-2026-63982 net/sched: Fix ethx:ingress -> ethy:egress -> ethx:ingress mirred loop — Linux - - 2026-07-19
CVE-2026-63981 net/sched: act_mirred: Fix blockcast recursion bypass leading to stack overflow — Linux - - 2026-07-19
CVE-2026-63980 net/handshake: Use spin_lock_bh for hn_lock — Linux 7.5 High 2026-07-19
CVE-2026-63979 net/handshake: hand off the pinned file reference to accept_doit — Linux 9.8 Critical 2026-07-19
CVE-2026-63978 net/handshake: Drain pending requests at net namespace exit — Linux 9.8 Critical 2026-07-19
CVE-2026-63977 dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work — Linux 7.8 High 2026-07-19
CVE-2026-63975 Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp — Linux 8.8 High 2026-07-19
CVE-2026-63976 Bluetooth: l2cap: clear chan->ident on ECRED reconfiguration success — Linux 8.8 High 2026-07-19
CVE-2026-63974 Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close — Linux 8.8 High 2026-07-19
CVE-2026-63973 net: mana: Add NULL guards in teardown path to prevent panic on attach failure — Linux - - 2026-07-19
CVE-2026-63972 net: mana: Skip redundant detach on already-detached port — Linux 7.5 High 2026-07-19
CVE-2026-63971 sctp: fix race between sctp_wait_for_connect and peeloff — Linux 7.8 High 2026-07-19
CVE-2026-63970 vsock/virtio: bind uarg before filling zerocopy skb — Linux 7.8 High 2026-07-19
CVE-2026-63968 ipv6: fix possible infinite loop in fib6_select_path() — Linux 7.5 High 2026-07-19

This page lists every published CVE security advisory associated with Linux. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.