CVE-2024-46780

The CVE-2024-46780 entry concerns the Linux kernel nilfs2 subsystem, where sysfs read methods accessed a superblock buffer without the required mutual exclusion. The issue arises because nilfs2 superblock parameters exposed in sysfs could be read without holding the ns_sem lock, risking invalid p...

CVE-2024-46844

CVE-2024-46844: In the Linux kernel, the setup_one_line() path prints a pointer that could be uninitialized for *error_out, risking a NULL pointer dereference or incorrect prints. The fix initializes *error_out in all control paths, addressing the issue. The CVE is scored locally with high impact...

CVE-2024-47677

CVE-2024-47677 affects the Linux kernel exFAT implementation. The flaw: when exfat_load_upcase_table reaches the end and returns -EINVAL, allocated memory is not freed, and as exfat_load_default_upcase_table allocates more memory this can cause a memory leak. Details from connected advisories ind...

CVE-2024-49890

CVE-2024-49890 : Linux kernel fix for a NULL dereference in drm/amd/pm by ensuring fw_info is not NULL before use. The issue manifested as a null dereference warning reported by Coverity; the patch prevents dereferencing a NULL fw_info and thus mitigates the vulnerability as described in the entr...

CVE-2024-49918

CVE-2024-49918 relates to a Linux kernel issue in the AMD display path (drm/amd/display) where dcn32_acquire_idle_pipe_for_head_pipe_in_layer could dereference a null head_pipe. The fix adds a null check and returns NULL if head_pipe is null, preventing a potential NPE. Connected sources corrobor...

CVE-2024-50231

CVE-2024-50231 affects the Linux kernel’s IIO subsystem (gts helper). The issue is a memory-leak in iio_gts_build_avail_scale_table() where per_time_gains elements/arrays are not freed, triggered when running iio-test-gts tests (gts_test_gains, gts_test_itimes). The leak manifests as unreferenced...

CVE-2024-53116

CVE-2024-53116 concerns the Linux kernel panic/warning scenario in the Panthor DRM/GPU VM path. The description documents a bug in partial GPU mapping of buffer objects (BOs) where Panthor failed to correctly handle mappings that span multiple scatterlists and where the mapping offset did not sta...

CVE-2024-53201

Technical details about CVE-2024-53201 are not provided in the supplied documents. No affected products, root cause, impact, or remediation details are included here; monitor for official disclosures.

CVE-2024-57801

CVE-2024-57801 affects the Linux kernel in the mlx5e driver: during unload, a use-after-free can occur when accessing rpriv->netdev or walking rpriv->tc_ht for a vport representor that is not fully loaded. The root cause is missing checks when restoring TC rules for the vport representor, l...

CVE-2025-21688

CVE-2025-21688 : In the Linux kernel, a race between the DRM v3d scheduler and the IRQ execution thread occurs when signaling a fence after a job completes. The patch that assigns the job pointer to NULL after completion can race with run_job() assigning a new job, risking a NULL pointer derefere...

CVE-2025-21889

Technical details for CVE-2025-21889 are not publicly provided in the supplied documents. No affected products, root cause, or patch information are confirmed here. Monitor vendor advisories for updates.

CVE-2025-21918

CVE-2025-21918 is a Linux kernel vulnerability described in connected Azure Linux advisory: usb: typec: ucsi: Fix NULL pointer access. The issue arises from premature resource release; the fix ensures resources are freed only after the associated workqueue completes, preventing NULL-pointer acces...

CVE-2025-22025

CVE-2025-22025: In the Linux kernel NFS server (nfsd), if nfsd4_run_cb fails while queuing a dl_recall, the incremented dl_stid reference is not decremented, causing a potential dl_stid leak. The issue is addressed by checking the result of nfsd4_run_cb and, on failure, calling nfs4_put_stid to p...

CVE-2025-22064

CVE-2025-22064 affects the Linux kernel nf_tables: when nf_tables_updchain encounters an error, the code path may unregister a hook that wasn’t registered if the table is dormant. Root cause: move the hook assignment into the registration block so dormant tables do not unregister. Impact per sour...

CVE-2025-22065

CVE-2025-22065 : Linux kernel idpf SR-IOV path could double-remove a VF during reboot, causing a NULL pointer dereference when the adapter is NULL on the first idpf_remove() call. Fixes replace idpf_remove() in idpf_shutdown() with idpf_vc_core_deinit() and idpf_deinit_dflt_mbx(), moving cleanup ...

CVE-2025-22118

Linux kernel vulnerability CVE-2025-22118 affects the ice driver where queue quanta parameters could lead to out-of-bounds access. The fix adds queue wraparound prevention in quanta configuration and ensures end_qid cannot overflow by validating start_qid and num_queues. This is a local-privilege...

CVE-2025-37748

CVE-2025-37748 : In the Linux kernel, the iommu/mediatek fix prevents a NULL pointer dereference in mtk_iommu_device_group during probe. The issue occurred because iommu_device_register could be called before the driver data’s hw_list was initialized, causing a dereference when list_first_entry i...

CVE-2025-37765

Summary (CVE-2025-37765): The Linux kernel DRM Nouveau path had a delayed-delete oops during ttm_bo_delayed_delete. The root cause is a dangling nouveau_bo.resv pointer after dma_buf destruction frees amdgpu_bo, and the subsequent ttm_bo_delayed_delete dereferences that pointer, causing a general...

CVE-2025-37932

The CVE-2025-37932 issue affects the Linux kernel’s HTB qdisc: htb_qlen_notify() was not idempotent and could deactivate an HTB class or trigger a warning if called when already deactivated. The fix ports the function to be idempotent, easing callers such as fq_codel_dequeue() and qdisc_tree_redu...

CVE-2010-3296

CVE-2010-3296 affects the Linux kernel driver cxgb3 (cxgb_extension_ioctl in drivers/net/cxgb3/cxgb3_main.c). The advisory states that the code path in kernels up to 2.6.36-rc5 does not properly initialize a structure member, allowing a local user to potentially read sensitive data from kernel st...

CVE-2010-4163

The CVE-2010-4163 issue affects the Linux kernel, where blk_rq_map_user_iov in block/blk-map.c is vulnerable before version 2.6.36.2. A local attacker can trigger a denial of service (kernel panic) by submitting a zero-length I/O request via a device ioctl to a SCSI device. The description explic...

CVE-2011-1013

CVE-2011-1013 is an integer signedness error in the drm_modeset_ctl ioctl handling that affects the Linux kernel prior to 2.6.38 and OpenBSD prior to 4.9, allowing local users to trigger out-of-bounds writes and potentially crash the system or cause other impact via a crafted vb_num in an ioctl. ...

CVE-2012-3412

CVE-2012-3412 affects the sfc (Solarflare Solarstorm) driver in the Linux kernel, specifically versions before 3.2.30. The vulnerability allows remote attackers to trigger a denial of service by sending crafted TCP packets that induce a small MSS value, leading to DMA descriptor consumption and n...

CVE-2013-6378

CVE-2013-6378 affects the Linux kernel up to 3.12.1 and is tied to lbs_debugfs_write in drivers/net/wireless/libertas/debugfs.c. The vulnerability lets a local attacker with root privileges cause a denial of service (OOPS) via a zero-length write call. Multiple connected advisories reference this...

CVE-2014-4652

CVE-2014-4652 affects the Linux kernel ALSA sound subsystem. A race condition in the tlv handler (snd_ctl_elem_user_tlv) within sound/core/control.c before version 3.15.2 allows local users to read kernel memory via /dev/snd/controlCX. Impact is partial confidentiality of kernel memory. The vulne...

CVE-2016-2550

The CVE-2016-2550 issue affects the Linux kernel prior to 4.5. It arises from incorrect tracking of descriptor ownership and from sending each descriptor over a UNIX domain socket before closing it, enabling a local attacker to bypass file-des descriptor limits and cause memory‑exhaustion denial ...

CVE-2016-4568

CVE-2016-4568 affects the Linux kernel’s videobuf2-v4l2 implementation (drivers/media/v4l2-core/videobuf2-v4l2.c). The flaw allows a local attacker to trigger a kernel memory write (and potential other impact) via a crafted number of planes in a VIDIOC_DQBUF ioctl, leading to a denial of service ...

CVE-2016-7915

CVE-2016-7915 affects the Linux kernel, where the hid_input_field function in drivers/hid/hid-core.c (pre-4.6) can be triggered by a physically proximate USB device (e.g., Logitech DJ receiver) to perform an out-of-bounds read, leaking kernel memory or causing a denial of service. The issue arise...

CVE-2017-8924

CVE-2017-8924 affects Linux kernel

CVE-2021-47202

Summary (concrete details from connected docs): CVE-2021-47202 affects the Linux kernel’s thermal subsystem. The vulnerability arises in of_parse_thermal_zones(), which registers a thermal_zone for each subnode of thermal-zones. If a thermal zone uses a thermal sensor whose device has not yet pro...

CVE-2021-47483

CVE-2021-47483 affects the Linux kernel regmap subsystem (regcache_rbtree). The issue is a double-free in error handling when a reallocation fails, causing rbnode->block to reference freed memory. The fix moves the rbnode->block assignment to immediately after a successful reallocation, ens...

CVE-2022-48423

CVE-2022-48423 affects the Linux kernel (fs/ntfs3/record.c) prior to version 6.1.3, where resident attribute names are not validated, allowing an out-of-bounds write. Public references in the provided documents cite kernel fixes in 6.1.3 (ChangeLog-6.1.3, commit 54e45702b6…) and related advisorie...

CVE-2022-49147

Technical details for CVE-2022-49147 are not publicly provided in the supplied documents; no affected products, impact, or remediation are specified here. Monitor for updates from connected sources.

CVE-2022-49152

CVE-2022-49152 affects the Linux kernel XArray feature, specifically the xas_create_range() path. When an existing entry with order >= XA_CHUNK_SHIFT is present, xas_create_range() can misinterpret it as a node and dereference xa_node->parent, potentially causing a crash (general protection...

CVE-2022-49664

CVE-2022-49664 affects the Linux kernel TIPC subsystem. The issue is a NULL pointer dereference in tipc_link_is_up caused by a BC link not yet created when a BC packet arrives during node creation. The patch fixes this by moving BC link creation to occur before inserting the new node into the has...

CVE-2022-49787

Summary (CVE-2022-49787): In the Linux kernel, the mmc: sdhci-pci fix prevents a memory leak by ensuring proper PCI device reference counting. The root cause is that pci_get_device() increases the pci_dev reference count and may not be balanced with pci_dev_put() before amd_probe() returns; the f...

CVE-2022-49885

CVE-2022-49885 is a Linux kernel vulnerability in ACPI APEI where ghes_estatus_pool_init() can overflow due to signed integer math during len calculation (len += (num_ghes * GHES_ESOURCE_PREALLOC_MAX_SIZE)). The root cause is using int for num_ghes, which can overflow and cause subsequent vmalloc...

CVE-2022-49911

In CVE-2022-49911, the Linux kernel's netfilter ipset hash:net,iface type could exhaust memory because it did not enforce the documented limit of storing more than 64 networks with distinct interfaces in a single set. The issue is addressed by applying the documented restriction (max 64 interface...

CVE-2023-1583

CVE-2023-1583 : A NULL pointer dereference in io_uring/filetable.c (io_file_bitmap_get) can be triggered after unregistration of fixed files when IORING_FILE_INDEX_ALLOC is used. The root cause is that context data (file_alloc_start/end and alloc_hint) is not cleared, allowing an unprivileged loc...

CVE-2023-34256

CVE-2023-34256 describes an out-of-bounds read in crc16 in lib/crc16.c when invoked from fs/ext4/super.c due to incomplete offset checks in ext4_group_desc_csum, affecting the Linux kernel up to but not including 6.3.3. The issue can enable local denial of service or information leaks via a craft...

CVE-2023-52484

CVE-2023-52484 affects the Linux kernel in iommu/arm-smmu-v3 where arm_smmu_mm_invalidate_range (renamed to arm_smmu_mm_arch_invalidate_secondary_tlbs since 6.6-rc1) can trigger a soft lockup during SVA-case TLBI range notifs. The issue is linked to not checking MAX_TLBI_OPS and near MMU tlb flus...

CVE-2023-52566

The CVE concerns NILFS2 in Linux kernels: in nilfs_gccache_submit_read_data(), releasing the buffer head (bh) before unlocking/putting its page can trigger a use-after-free if bh->b_page is dereferenced. The fix moves the release after unlocking and putting the page. This patch targets GC-rela...

CVE-2023-52691

CVE-2023-52691 concerns the Linux kernel’s DRM AMD power management path. The issue is a double-free in the AMD GPU driver flow: when allocation of adev->pm.dpm.dyn_state.vddc_dependency_on_dispclk.entries fails, amdgpu_free_extended_power_table is called to free fields, and if control flow re...

CVE-2023-52769

CVE-2023-52769 concerns the Linux kernel wireless driver ath12k. The issue arises in the htt_mlo_offset event handling path, where the code calling ath12k_mac_get_ar_by_pdev_id() was not protected by an RCU read-side critical section, potentially enabling use-after-free in active pdev contexts. T...

CVE-2023-52932

The CVE-2023-52932 issue concerns the Linux kernel mm/swapfile get_swap_pages(), where a plist_for_each_entry_safe() loop could loop tens of thousands of times under memory pressure, risking soft lockup. The fix adds cond_resched() into get_swap_pages() when space isn’t found, addressing softlock...

CVE-2023-52933

CVE-2023-52933 affects the Linux kernel Squashfs xattr_ids handling. Two overflow flaws were exposed by a corrupted filesystem: on 64‑bit systems, sign extension of xattr_ids when multiplied by sizeof(struct squashfs_xattr_id) can overflow and yield an incorrect len; on 32‑bit systems, the unsign...

CVE-2023-53016

CVE-2023-53016 concerns a potential deadlock in the Linux kernel Bluetooth rfcomm path. The issue arises when rfcomm_sock_connect holds the sk lock while waiting for the rfcomm lock, and rfcomm_sock_release may hold the rfcomm lock and attempt to acquire the sk lock, creating a deadlock scenario....

CVE-2023-53078

CVE-2023-53078 is a Linux kernel memleak in the SCSI ALUA path (scsi_dh_alua: alua_activate). The issue occurs if alua_rtpg_queue() fails during alua_activate(), leaving the allocated qdata unreleased and causing a memory leak. The public docs indicate the fix is to free qdata in the error path. ...

CVE-2023-53114

CVE-2023-53114 - In the Linux kernel, the i40e Intel XL710 Ethernet driver had a crash during reboot when the firmware is in recovery mode. The root cause was that during recovery mode, the probe skipped pci_set_drvdata(), which later caused a NULL dereference in i40e_shutdown() during shutdown/r...

CVE-2024-26888

CVE-2024-26888 : Linux kernel vulnerability in Bluetooth msft path reported as fixed by a memory leak fix. The issue involved a leaking buffer allocated to send MSFT_OP_LE_MONITOR_ADVERTISEMENT. Public docs confirm the fix; CVSS indicates LOCAL attack vector with low to moderate impact (Base 5.5,...