Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17978

Browse all 17978 CVE security advisories affecting Linux. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Linux serves as the foundational operating system for the majority of internet servers, cloud infrastructure, and embedded devices, powering critical global digital services. Its open-source nature and widespread deployment have historically exposed it to diverse vulnerability classes, including remote code execution, buffer overflows, and privilege escalation flaws within kernel modules and system utilities. While the project maintains rigorous security practices, the sheer volume of code contributes to a high cumulative count of recorded Common Vulnerabilities and Exposures, currently exceeding eleven thousand. Notable incidents often stem from misconfigurations or unpatched legacy components rather than fundamental architectural failures. The community responds rapidly to disclosed threats, yet the extensive attack surface necessitates continuous vigilance. Administrators must prioritize regular updates and strict access controls to mitigate risks associated with this ubiquitous platform, ensuring stability across both enterprise and consumer environments.

CVE ID Title CVSS Severity Published
CVE-2026-63969 ipv6: fix possible infinite loop in rt6_fill_node() — Linux - - 2026-07-19
CVE-2026-63967 iio: imu: st_lsm6dsx: fix stack leak in tagged FIFO buffer — Linux - - 2026-07-19
CVE-2026-63966 iio: imu: adis16550: fix stack leak in trigger handler — Linux - - 2026-07-19
CVE-2026-63965 iio: pressure: bmp280: fix stack leak in bmp580 trigger handler — Linux - - 2026-07-19
CVE-2026-63964 usb: typec: ucsi: ccg: reject firmware images without a ':' record header — Linux - - 2026-07-19
CVE-2026-63963 usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers — Linux - - 2026-07-19
CVE-2026-63962 usb: typec: tcpm: bound altmode_desc[] per iteration in svdm_consume_modes() — Linux - - 2026-07-19
CVE-2026-63961 usb: typec: altmodes/displayport: validate count before reading Status Update VDO — Linux - - 2026-07-19
CVE-2026-63959 usb: typec: tcpm/tcpci_maxim: validate header NDO against RX_BYTE_CNT — Linux - - 2026-07-19
CVE-2026-63960 usb: typec: wcove: don't write past struct pd_message in wcove_read_rx_buffer() — Linux - - 2026-07-19
CVE-2026-63958 usb: typec: ucsi: validate connector number in ucsi_connector_change() — Linux - - 2026-07-19
CVE-2026-63957 USB: serial: safe_serial: fix memory corruption with small endpoint — Linux - - 2026-07-19
CVE-2026-63956 USB: serial: cypress_m8: fix memory corruption with small endpoint — Linux - - 2026-07-19
CVE-2026-63955 mm/vmalloc: do not trigger BUG() on BH disabled context — Linux 7.5 High 2026-07-19
CVE-2026-63954 hpfs: fix a crash if hpfs_map_dnode_bitmap fails — Linux 7.8 High 2026-07-19
CVE-2026-63953 mm/migrate_device: fix pgtable leak in migrate_vma_insert_huge_pmd_page — Linux - - 2026-07-19
CVE-2026-63952 memfd: deny writeable mappings when implying SEAL_WRITE — Linux 8.4 High 2026-07-19
CVE-2026-63951 zram: fix use-after-free in zram_writeback_endio — Linux 7.8 High 2026-07-19
CVE-2026-63949 auxdisplay: line-display: fix OOB read on zero-length message_store() — Linux - - 2026-07-19
CVE-2026-63950 mm/rmap: initialize nr_pages to 1 at loop start in try_to_unmap_one — Linux 7.8 High 2026-07-19
CVE-2026-63948 Bluetooth: L2CAP: fix chan ref leak in l2cap_chan_timeout() on !conn — Linux - - 2026-07-19
CVE-2026-63947 Bluetooth: HIDP: fix missing length checks in hidp_input_report() — Linux 8.8 High 2026-07-19
CVE-2026-63946 Bluetooth: ISO: fix UAF in iso_recv_frame — Linux 8.8 High 2026-07-19
CVE-2026-63945 Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock — Linux 7.8 High 2026-07-19
CVE-2026-63944 Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync — Linux 8.8 High 2026-07-19
CVE-2026-63943 Input: xpad - fix out-of-bounds access for Share button — Linux - - 2026-07-19
CVE-2026-63942 parport: Fix race between port and client registration — Linux 7.8 High 2026-07-19
CVE-2026-63941 KVM: arm64: Correctly cap ZCR_EL2 provided by a guest hypervisor — Linux 8.8 High 2026-07-19
CVE-2026-63940 KVM: SEV: Ignore Port I/O requests of length '0' — Linux 9.3 Critical 2026-07-19
CVE-2026-63939 KVM: SEV: Compute the correct max length of the in-GHCB scratch area — Linux 9.3 Critical 2026-07-19

This page lists every published CVE security advisory associated with Linux. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.