CVE-2023-52733

CVE-2023-52733 is rejected/not used; this CVE entry does not represent an active vulnerability.

CVE-2023-52731

CVE-2023-52731 relates to the Linux kernel fbdev with deferred I/O. After a fbdev device is opened and closed, dirty pages can remain in the pageref list and may later be processed, risking memory/page corruption and an Oops. The fix adds cancellation of the delayed work and cleans up the pageref...

CVE-2023-52708

CVE-2023-52708 affects the Linux kernel MMC SPI code. The issue stems from error handling in mmc_spi_probe(): if mmc_add_host() fails, the code previously could call mmc_remove_host() and dereference a null device, causing a crash. The fix routes control to the fail_glue_init path on mmc_add_host...

CVE-2023-52705

CVE-2023-52705 is a kernel vulnerability affecting the nilfs2 filesystem code in Linux. The issue is an underflow/incorrect boundary calculation in NILFS_SB2_OFFSET_BYTES that computes the position of the second superblock, which can underflow when the device size is smaller than 4096 bytes. This...

CVE-2022-48708

The CVE-2022-48708 issue affects the Linux kernel’s pinctrl/pinmux subsystem. A NULL dereference could occur because pinmux_generic_get_function() could return NULL and the code dereferenced the function pointer without a NULL check, in pcs_set_mux(). The vulnerability was addressed by adding a N...

CVE-2021-47411

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2021-47378

In the Linux kernel, the following vulnerability has been resolved: nvme-rdma: destroy cm id before destroy qp to avoid use after free We should always destroy cmid before destroy qp to avoid to get cma event after qp was destroyed, which may lead to use after free. In RDMA connection establishme...

CVE-2021-47377

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2021-47365

In the Linux kernel, the following vulnerability has been resolved: afs: Fix page leak There's a loop in afsextendwriteback that adds extra pages to a write we want to make to improve the efficiency of the writeback by making it larger. This loop stops, however, if we hit a page we can't write ba...

CVE-2021-47326

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2021-47291

In the Linux kernel, the following vulnerability has been resolved: ipv6: fix another slab-out-of-bounds in fib6nhflushexceptions While running the self-tests on a KASAN enabled kernel, I observed a slab-out-of-bounds splat very similar to the one reported in commit 821bbf79fe46 "ipv6: Fix KASAN:...

CVE-2021-47292

In the Linux kernel, the following vulnerability has been resolved: iouring: fix memleak in ioinitwqoffload I got memory leak report when doing fuzz test: BUG: memory leak unreferenced object 0xffff888107310a80 size 96: comm "syz-executor.6", pid 4610, jiffies 4295140240 age 20.135s hex dump firs...

CVE-2021-47426

CVE-2021-47426 affects the Linux kernel (bpf, s390) with a memory leak in jit_data. The issue occurs in the error path and is resolved by freeing jit_data with kfree() to prevent leaks. The provided metrics indicate local access, low attack complexity, and low privileges needed, with no confident...

CVE-2021-47423

CVE-2021-47423 is about the Linux kernel component drm/nouveau/debugfs. The root cause is a memory leak where, when using single_open() for opening, single_release() is not invoked, causing the 'op' allocated in single_open() to leak. The connected documents indicate this fix has been applied in ...

CVE-2021-47417

CVE-2021-47417 refers to a Linux kernel memory-leak issue in libbpf’s strset management. The vulnerability arises from freeing only internal parts previously, not the strset structure itself, allowing a memory leak. The CVE description and connected advisories confirm this root cause and indicate...

CVE-2021-47411

CVE-2021-47411 entry is rejected/withdrawn by the CVE Numbering Authority.

CVE-2021-47405

CVE-2021-47405 affects the Linux kernel HID usbhid subsystem. The issue is a memory leak from unsent raw_report buffers when a USB HID device is removed; a patch/fix has been released in the kernel to address this. The CVSS metrics in the initial record show a MEDIUM base score (5.5) with LOCAL a...

CVE-2021-47404

Summary (CVE-2021-47404): The issue stems from a slab-out-of-bounds write in the HID Betop driver (betopff) in the Linux kernel. Syzbot observed a write beyond slab bounds due to assuming an input report exists; malicious devices can violate this assumption. The public advisories, including Astra...

CVE-2021-47401

In the provided documents, CVE-2021-47401 affects the Linux kernel’s ipack/ipoctal driver (drivers/ipack/devices/ipoctal.c). The root cause is that the tty driver name was allocated on the stack, enabling a stack information leak to user space or triggering an oops, and the name could encode topo...

CVE-2021-47390

CVE-2021-47390 concerns the Linux kernel KVM path on x86, where KASAN reports a stack-out-of-bounds access in kvm_make_vcpus_request_mask() when handling IOAPIC indirect requests. The root cause is that the vcpu_bitmap is allocated as a single stack long instead of a size equal to KVM_MAX_VCPUS, ...