Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17978

Browse all 17978 CVE security advisories affecting Linux. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Linux serves as the foundational operating system for the majority of internet servers, cloud infrastructure, and embedded devices, powering critical global digital services. Its open-source nature and widespread deployment have historically exposed it to diverse vulnerability classes, including remote code execution, buffer overflows, and privilege escalation flaws within kernel modules and system utilities. While the project maintains rigorous security practices, the sheer volume of code contributes to a high cumulative count of recorded Common Vulnerabilities and Exposures, currently exceeding eleven thousand. Notable incidents often stem from misconfigurations or unpatched legacy components rather than fundamental architectural failures. The community responds rapidly to disclosed threats, yet the extensive attack surface necessitates continuous vigilance. Administrators must prioritize regular updates and strict access controls to mitigate risks associated with this ubiquitous platform, ensuring stability across both enterprise and consumer environments.

CVE ID Title CVSS Severity Published
CVE-2026-63937 KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer — Linux 8.8 High 2026-07-19
CVE-2026-63938 KVM: SEV: Check PSC request indices against the actual size of the buffer — Linux 9.3 Critical 2026-07-19
CVE-2026-63936 iio: adc: mt6359: fix unchecked return value in mt6358_read_imp — Linux - - 2026-07-19
CVE-2026-63935 iio: adc: nxp-sar-adc: fix division by zero in write_raw — Linux - - 2026-07-19
CVE-2026-63934 iio: gyro: itg3200: fix i2c read into the wrong stack location — Linux - - 2026-07-19
CVE-2026-63933 iio: gyro: adis16260: fix division by zero in write_raw — Linux - - 2026-07-19
CVE-2026-63931 iio: chemical: scd30: fix division by zero in write_raw — Linux - - 2026-07-19
CVE-2026-63932 iio: chemical: mhz19b: reject oversized serial replies — Linux - - 2026-07-19
CVE-2026-63930 iio: buffer: hw-consumer: fix use-after-free in error path — Linux 7.8 High 2026-07-19
CVE-2026-63929 iio: buffer: Fix DMA fence leak in iio_buffer_enqueue_dmabuf() — Linux - - 2026-07-19
CVE-2026-63928 USB: serial: omninet: fix memory corruption with small endpoint — Linux - - 2026-07-19
CVE-2026-63927 usb: dwc2: Fix use after free in debug code — Linux 7.8 High 2026-07-19
CVE-2026-63926 bpf: sockmap: fix tail fragment offset in bpf_msg_push_data — Linux 8.4 High 2026-07-19
CVE-2026-63925 macsec: fix replay protection at XPN lower-PN wrap — Linux 8.1 High 2026-07-19
CVE-2026-63924 ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() — Linux 9.8 Critical 2026-07-19
CVE-2026-63923 octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify — Linux 8.8 High 2026-07-19
CVE-2026-63922 ipv6: exthdrs: refresh nh after handling HAO option — Linux 9.8 Critical 2026-07-19
CVE-2026-63921 ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). — Linux 8.8 High 2026-07-19
CVE-2026-63920 ipv6: validate extension header length before copying to cmsg — Linux 7.1 High 2026-07-19
CVE-2026-63919 xfrm: input: hold netns during deferred transport reinjection — Linux 8.8 High 2026-07-19
CVE-2026-63917 ip6: vti: Use ip6_tnl.net in vti6_changelink(). — Linux 8.8 High 2026-07-19
CVE-2026-63918 l2tp: use refcount_inc_not_zero in l2tp_session_get_by_ifname — Linux 7.8 High 2026-07-19
CVE-2026-63916 HID: wacom: Fix OOB write in wacom_hid_set_device_mode() — Linux 8.8 High 2026-07-19
CVE-2026-63915 nfc: hci: fix out-of-bounds read in HCP header parsing — Linux 8.8 High 2026-07-19
CVE-2026-63914 xfrm: route MIGRATE notifications to caller's netns — Linux 7.3 High 2026-07-19
CVE-2026-63913 netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check — Linux 8.2 High 2026-07-19
CVE-2026-63912 xfrm: esp: restore combined single-frag length gate — Linux 9.8 Critical 2026-07-19
CVE-2026-63911 xfrm: iptfs: reset runtime state when cloning SAs — Linux 7.8 High 2026-07-19
CVE-2026-63910 dma-buf: fix UAF in dma_buf_fd() tracepoint — Linux 7.8 High 2026-07-19
CVE-2026-63909 ksmbd: OOB read regression in smb_check_perm_dacl() ACE-walk loops — Linux 8.1 High 2026-07-19

This page lists every published CVE security advisory associated with Linux. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.