CVE-2015-0573

CVE-2015-0573 affects the Linux kernel 3.x TSC driver (drivers/media/platform/msm/broadcast/tsc.c) as used in Qualcomm Innovation Center (QuIC) Android MSM builds. The vulnerability is a use of the TSC_GET_CARD_STATUS ioctl that can trigger an invalid pointer dereference, leading to a denial of s...

CVE-2015-8787

The CVE-2015-8787 entry concerns the Linux kernel, specifically the nf_nat_redirect_ipv4() function in net/netfilter/nf_nat_redirect.c. The vulnerability arises in kernel builds before 4.4, where remote attackers can send IPv4 packets to an incompletely configured interface to trigger a NULL poin...

CVE-2015-8962

CVE-2015-8962: Double free in sg_common_write (drivers/scsi/sg.c) of the Linux kernel before 4.4. A local user can gain privileges or cause memory corruption/system crash by detaching a device during an SG_IO ioctl. Remediation: upgrade to Linux kernel 4.4+ or apply vendor patch; exploitation con...

CVE-2017-8064

The CVE refers to Linux kernel 4.9.x and 4.10.x before 4.10.12 where the DVB-USB core (drivers/media/usb/dvb-usb-v2/dvb_usb_core.c) interacts incorrectly with CONFIG_VMAP_STACK. This can allow a local attacker to cause a denial of service (system crash or memory corruption) or other impact by abu...

CVE-2018-14614

CVE-2018-14614 concerns a Linux kernel issue up to version 4.17.10 where mounting an f2fs image triggers an out-of-bounds access in __remove_dirty_segment() within fs/f2fs/segment.c. Publicly documented details identify the affected component as the kernel’s f2fs filesystem driver, with a local a...

CVE-2019-10125

CVE-2019-10125 affects the Linux kernel (up to v5.0.4) where aio_poll() in fs/aio.c may release a file by aio_poll_wake() after vfs_poll() returns, causing a use-after-free. Connected advisories (Unity Linux UTSA entries) reproduce the vulnerable description and map the issue to kernel code path ...

CVE-2021-47459

CVE-2021-47459 describes a use-after-free in the Linux kernel can: j1939: j1939_netdev_start() related to rx_kref of j1939_priv. The issue arises during j1939_sk_bind and netdev_start when rx_kref is accessed without proper synchronization. Public advisories indicate this is fixed by kernel updat...

CVE-2022-48771

The CVE-2022-48771 issue affects the Linux kernel drm/vmwgfx: a failing usercopy of the fence_rep object can leave a stale file descriptor entry because put_unused_fd() isn’t released; this can let userland reference a dangling file descriptor and enable use-after-free scenarios. The fix defers t...

CVE-2022-48921

Summary of CVE-2022-48921 : In the Linux kernel, a race between sched_post_fork() and setpriority(PRIO_PGRP) for a thread group can trigger a NULL pointer dereference in reweight_entity() (part of CFS). The scenario: a main process spawns multiple new threads that then call setpriority, while sch...

CVE-2022-49033

CVE-2022-49033 affects the Linux kernel’s btrfs qgroup code, where a sleep was performed in an invalid context during qgroup inheritance. The advisory and connected documents describe the fix as: call qgroup_dirty() on the destination qgroup and update the limit item in btrfs_run_qgroups() later,...

CVE-2022-49086

CVE-2022-49086 affects the Linux kernel Open vSwitch actions: during parsing user-provided actions, the ovs_openvswitch module can allocate memory and leak it when destroying actions due to nested actions not being freed. The root cause is that several actions can hold nested lists of actions and...

CVE-2022-49152

CVE-2022-49152 affects the Linux kernel XArray feature, specifically the xas_create_range() path. When an existing entry with order >= XA_CHUNK_SHIFT is present, xas_create_range() can misinterpret it as a node and dereference xa_node->parent, potentially causing a crash (general protection...

CVE-2022-49300

CVE-2022-49300 affects the Linux kernel nbd subsystem. A race occurs when the nbd module is removed: nbd_genl_connect() may call nbd_alloc_config() concurrently, and although try_module_get() can fail, nbd_alloc_config() previously did not handle that. This can cause leakage of nbd_config and rel...

CVE-2022-49309

CVE-2022-49309 (Linux kernel) describes a deadlock in drivers: staging: rtl8723bs, specifically in rtw_surveydone_event_callback(). The issue occurs when a thread holds pmlmepriv->lock inside the callback and calls del_timer_sync() to stop a timer that is also needed by the timer handler, caus...

CVE-2022-49332

CVE-2022-49332 relates to the Linux kernel SCSI lpfc path. The vulnerability is a NULL pointer dereference in starget_to_rport() where calls may return NULL and the code could dereference a NULL rport. The described root cause is lack of a NULL check before dereferencing the rport, with the cited...

CVE-2022-49407

CVE-2022-49407 : Linux kernel dlm plock invalid read, fixed in the patch that moves the callback field into struct plock_op and adjusts handling for plock_xop. The issue arose when a sequence (unlock -> send_op -> append to send_list) could lead to a dev_write() path treating a plock_op as ...

CVE-2022-49413

CVE-2022-49413 affects the Linux kernel bfq driver (bfq_merge_bio). The vulnerability arises when a process migrates to a different cgroup or writeback starts bios for another cgroup, leaving stale cgroup data in bfq’s bic and potentially merging requests across distinct or dead bfq queues, riski...

CVE-2022-49787

Summary (CVE-2022-49787): In the Linux kernel, the mmc: sdhci-pci fix prevents a memory leak by ensuring proper PCI device reference counting. The root cause is that pci_get_device() increases the pci_dev reference count and may not be balanced with pci_dev_put() before amd_probe() returns; the f...

CVE-2023-31082

CVE-2023-31082 : In Linux kernel 6.2, the issue arises from a sleeping function invoked from an invalid context in gsmld_write (drivers/tty/n_gsm.c), which can block the kernel. The vulnerability is explicitly tied to the affected component and context, with the impact described as potentially ca...

CVE-2023-37454

CVE-2023-37454 affects the Linux kernel up to 6.4.2. It stems from a use-after-free in udf_put_super and udf_close_lvid triggered by a crafted UDF filesystem image in fs/udf/super.c. The external reference notes a different SUSE perspective. The provided connected documents do not specify a vendo...

CVE-2023-51781

CVE-2023-51781 affects the Linux kernel up to version before 6.6.8, with a use-after-free in atalk_ioctl (net/appletalk/ddp.c) caused by a race in atalk_recvmsg. The issue is locally exploitable and has a high impact on confidentiality/integity/availability per CVSS. A patch is available in kerne...

CVE-2023-52693

The CVE-2023-52693 issue affects the Linux kernel ACPI video backlight code. Root cause: acpi_get_parent() can fail (e.g., acpi_ut_acquire_mutex() failure) and pass an uninitialized acpi_parent to acpi_get_pci_dev() during acpi_video_dev_register_backlight(). Impact: potential incorrect parent ha...

CVE-2023-52932

The CVE-2023-52932 issue concerns the Linux kernel mm/swapfile get_swap_pages(), where a plist_for_each_entry_safe() loop could loop tens of thousands of times under memory pressure, risking soft lockup. The fix adds cond_resched() into get_swap_pages() when space isn’t found, addressing softlock...

CVE-2023-53046

CVE-2023-53046 describes a race condition between hci_cmd_sync_work and hci_cmd_sync_clear in the Linux kernel Bluetooth subsystem, which can lead to a use-after-free and potentially a kernel panic. The issue arises when hci_cmd_sync_work is queued after a cancel_work_sync, allowing the cmd_sync_...

CVE-2023-53078

CVE-2023-53078 is a Linux kernel memleak in the SCSI ALUA path (scsi_dh_alua: alua_activate). The issue occurs if alua_rtpg_queue() fails during alua_activate(), leaving the allocated qdata unreleased and causing a memory leak. The public docs indicate the fix is to free qdata in the error path. ...

CVE-2023-53084

CVE-2023-53084 – Linux kernel (drm/shmem) 손상 문제 확인 Impact: In the Linux kernel, the error path in drm_gem_shmem_mmap() could fail to drop a reference, causing a dma-buf shmem GEM object to be freed prematurely and potentially leading to a use-after-free. Affected component: drm/shmem-helper and r...

CVE-2023-53097

CVE-2023-53097: In the Linux kernel powerpc IOMMU path, a memory leak occurs when using debugfs_lookup() because the result isn’t dput()-ed; the fix uses debugfs_lookup_and_remove() to handle the lookup and release in one step. The vulnerability is described as local, with potential high impact t...

CVE-2023-53108

CVE-2023-53108 – Linux kernel (net/iucv) : The vulnerability arises from incorrect sizing of iucv_irq_data, which must be 4 bytes larger. The under-allocation can permit a Redzone/heap corruption (dma-kmalloc-64) during iucv_init/cpu hotplug flow, with objects showin g incomplete frees in the obs...

CVE-2024-26824

CVE-2024-26824 affects the Linux kernel crypto/algif_hash: hashing a zero-length message could trigger a faulty SG list free on error. The fix removes freeing the SG list on the zero-length error path; kernel updates implementing this change are the remediation.

CVE-2024-35999

CVE-2024-35999 concerns the Linux kernel where a data race could occur in the SMB3 path due to a missing lock when picking the channel. Coverity identified a missing channel lock when accessing the ses channel index (Address-Coverity: 1582039). The vulnerability was resolved in the Linux kernel a...

CVE-2024-38578

The CVE-2024-38578 issue is a Linux kernel vulnerability in ecryptfs: the buffer for the TAG 66 packet was 3 bytes too small, causing a potential write past the end (KASAN slab-out-of-bounds). The fix increases the allocation size to ensure the entire packet fits, addressing the bug described in ...

CVE-2024-41072

CVE-2024-41072 affects the Linux kernel wifi subsystem (cfg80211 wext). The fix adds an extra validation in cfg80211_wext_siwscan() to ensure the number of channels passed via ioct(SIOCSIWSCAN, ...) does not exceed IW_MAX_FREQUENCIES; requests that exceed this limit are rejected with -EINVAL. Thi...

CVE-2024-42074

CVE-2024-42074 pertains to the Linux kernel’s ASoC AMD ACP driver. When the acp platform device creation is skipped, chip->chip_pdev can be NULL, leading to a potential NULL pointer dereference in snd_acp_resume. The connected Nessus/NASL entries confirm the root cause and describe the fix: ad...

CVE-2024-43859

CVE-2024-43859 affects the Linux kernel with the f2fs filesystem. The root cause is an uninitialized inode.i_crypt_info during mount paths that involve f2fs_gc/truncate, leading to a NULL pointer dereference in fscrypt-related code when handling preallocated blocks. The documented mitigation is t...

CVE-2024-43861

CVE-2024-43861 affects the Linux kernel (net/usb/qmi_wwan) where a memory leak could occur for non-IP packets due to an unused skb not being freed. The description in Connected documents confirms the fix: freeing the unused skb when non-IP packets arrive. The CIRCL/CVE sighting shows related advi...

CVE-2024-43880

CVE-2024-43880 affects the Linux kernel mlxsw spectrum ACL (Spectrum-2 and newer). The vulnerability arises from how ACLs could be migrated between A-TCAM and C-TCAM using the objagg mask aggregation, where the driver and lib compared masks without respecting TCAM context, potentially creating ne...

CVE-2024-45008

CVE-2024-45008 affects the Linux kernel input subsystem. The vulnerability arises when input_mt_init_slots() allocates slots based on user-supplied num_slots via UI_DEV_CREATE, risking oversized allocations. A patch caps the maximum slots at 1024, mitigating memory exhaustion. Connected advisorie...

CVE-2024-46721

CVE-2024-46721 covers a NULL-pointer dereference in the Linux kernel’s AppArmor path when creating profiles. The issue arises in aafs_create.constprop.0 within aa_replace_profiles, where profile->parent->dents[AAFS_PROF_DIR] could be NULL if the parent was created by __create_missing_ancest...

CVE-2024-46736

The connected document BDU:2026-03544 describes CVE-2024-46736 as a Linux kernel SMB client issue in fs/smb/client/smb2inode.c: the smb2_rename_path() path could double-put the @cfile when smb2_set_path_attr() returns -EINVAL, leading to potential confidentiality/integrity/access impact. The entr...

CVE-2024-46780

The CVE-2024-46780 entry concerns the Linux kernel nilfs2 subsystem, where sysfs read methods accessed a superblock buffer without the required mutual exclusion. The issue arises because nilfs2 superblock parameters exposed in sysfs could be read without holding the ns_sem lock, risking invalid p...

CVE-2024-46784

The CVE-2024-46784 issue affects the Linux kernel net: mana subsystem (mana_create_txq/rxq) where napi_disable() is called during cleanup before napi is enabled and hrtimer is initialized, leading to a kernel panic. The Astra Linux bulletin and related advisories confirm a resolved patch in the L...

CVE-2024-46804

CVE-2024-46804 affects the Linux kernel’s DRM/AMD display path, specifically HDCP DDC access. The vulnerability stems from an array index overrun due to not validating the index, which could lead to overrun/W earlier reports. The fix adds proper checks: validate the message id (msg_id) and ensure...

CVE-2024-46836

CVE-2024-46836 in the Linux kernel affects usb: gadget: aspeed_udc. The issue is a missing bound check for the endpoint index, which may allow an out-of-bounds access to the endpoint array if the host manipulates the index. Descriptions and Nessus references confirm this bound-check root cause an...

CVE-2024-46841

Technical details about CVE-2024-46841 are not publicly available in the provided connected documents. Monitor for updates from official advisories and vendor pages.

CVE-2024-48875

In the Linux kernel, CVE-2024-48875 is described as a fix for a btrfs issue: don’t take the dev_replace rwsem if the task already holds it. The root cause is a possible deadlock when btrfs_dev_replace flow takes the same rwsem twice during operations like btrfs_map_block, as demonstrated by a loc...

CVE-2024-49874

CVE-2024-49874 affects the Linux kernel’s i3c master subsystem (svc_i3c_master). The issue is a use-after-free race between the worker threads bound to master->hj_work and master->ibi_work during cleanup. If the module is removed, master->base can be freed while a worker may still access...

CVE-2024-49917

CVE-2024-49917 concerns the Linux kernel’s drm/amd/display path. The vulnerability is due to a potential NULL pointer dereference in dcn30_init_hw when either dc->clk_mgr or dc->clk_mgr->funcs is NULL. The fixed commits add explicit NULL checks to prevent accessing clk_mgr/clk_mgr->fu...

CVE-2024-49978

CVE-2024-49978 : Linux kernel fix for UDP GSO fraglist segmentation after pulling from frag_list. The issue involved invalid SKB_GSO_FRAGLIST geometry where head_skb and frag_list SKBs could violate invariants if datapath hooks (NAT/BPF) altered data, potentially leading to a NULL pointer derefer...

CVE-2024-50026

CVE-2024-50026 affects the Linux kernel SCSI wd33c93 path. A regression from the commit that moved scsi_pointer from hostdata->connected to private command data caused an oops in wd33c93_intr() because hostdata->connected is not valid during selection. The fix retrieves the current scsi_poi...

CVE-2024-50157

CVE-2024-50157 concerns the Linux kernel RDMA/bnxt_re driver. The root cause is a loop waiting for the FIFO occupancy to drop below a threshold; under high pacing interrupts, this can cause a soft lockup on a processor. The fix adds a loop counter for FPGA and exits __wait_for_fifo_occupancy_belo...