CVE-2025-37914

CVE-2025-37914 is a Linux kernel network scheduler vulnerability in net_sched: ets where a netem child qdisc can trigger reentrant enqueue, causing the same classifier to be added twice to the active_list and potentially memory corruption. The patch adds an active check (cl_is_active) and guards ...

CVE-2025-38104

Technical details about CVE-2025-38104 (affected products, versions, exploit information, or fixes) are not provided in the supplied documents; monitor for updates.

CVE-2025-38396

The CVE-2025-38396 entry concerns the Linux kernel vulnerability where anon_inode_make_secure_inode() is exported to allow KVM guest_memfd to create anonymous inodes with proper security context, fixing a secretmem LSM bypass. The issue involved the S_PRIVATE flag not being cleared after alloc_an...

CVE-2008-1673

The CVE-2008-1673 vulnerability affects the Linux kernel ASN.1 BER decoding in CIFS and ip_nat_snmp_basic modules (and gxsnmp). Root cause: improper validation of ASN.1 BER lengths, enabling a remote attacker to crash the system or execute arbitrary code via: (1) a length greater than the working...

CVE-2009-3228

The CVE-2009-3228 issue concerns the Linux kernel tc subsystem (net/sched/sch_api.c: tc_fill_tclass). In Linux kernel 2.4.x before 2.4.37.6 and 2.6.x before 2.6.31-rc9, certain structure members (tcm__pad1, tcm__pad2) are not initialized, which could allow local users to read sensitive data from ...

CVE-2010-3078

The CVE-2010-3078 issue affects the Linux kernel (xfs_ioc_fsgetxattr) where a structure member is not initialized, enabling local attackers to read potentially sensitive data from kernel stack memory via an ioctl. This vulnerability is documented in MiracleLinux AXSA-2010-500:18 and is fixed in 2...

CVE-2011-1010

Concretely, CVE-2011-1010 is reported in MiracleLinux advisory AXSA:2011-282:05 as affecting kernel-2.6.18-238.2.AXS3. It describes a buffer overflow in the mac_partition function (fs/partitions/mac.c) of the Linux kernel, prior to version 2.6.37.2, which can allow a local user to cause a denial ...

CVE-2013-1774

CVE-2013-1774 affects the Linux kernel (drivers/usb/serial/io_ti.c) prior to 3.7.4. The chase_port function allows local users to trigger a NULL pointer dereference and system crash by performing a read or write on a disconnected Edgeport USB serial converter, resulting in a denial of service. Th...

CVE-2013-2889

CVE-2013-2889 affects the Linux kernel HID subsystem, specifically the HID driver file hid-zpff.c. When the CONFIG_HID_ZEROPLUS option is enabled, a crafted device can let physically proximate attackers cause a denial of service via a heap-based out-of-bounds write (heap corruption). The connecte...

CVE-2013-7339

The CVE-2013-7339 issue affects the Linux kernel up to version 3.12.7 (fixed in 3.12.8) where the rds_ib_laddr_check function in net/rds/ib.c allows a local attacker to trigger a NULL pointer dereference via a bind(2) call on an RDS socket on systems without RDS transports. This can cause a denia...

CVE-2017-14497

CVE-2017-14497 describes a vulnerability in the Linux kernel’s tpacket_rcv() path (net/packet/af_packet.c) where the code mishandles vnet headers. It is triggered by crafted system calls and, per the connected Nessus entries, could allow a local attacker to cause a denial of service via buffer ov...

CVE-2022-48659

CVE-2022-48659 is a Linux kernel issue localized to mm/slub where kmalloc() can fail with an OOM, and the fix ensures create_unique_id() returns a proper errno instead of triggering BUG_ON(). The result is a kernel BUG at mm/slub.c:5893 in the failing path, with the stack showing sysfs_slab_add →...

CVE-2022-48816

CVE-2022-48816 is a Linux kernel vulnerability in the SUNRPC subsystem where a race allows the sock pointer to become NULL during sysfs reads if the recv_mutex is not held, potentially triggering an oops. The issue is addressed by kernel fixes (including commit 17f09d3f619a) that tighten the xprt...

CVE-2022-49313

CVE-2022-49313 : Linux kernel patch fixes a deadlock in usb host oxu_bus_suspend(). The issue arises when oxu_bus_suspend() holds oxu->lock while waiting for a timer to stop via del_timer_sync(), but the timer handler also needs the same lock, causing a potential deadlock. The patch removes de...

CVE-2022-49721

CVE-2022-49721 affects the Linux kernel (arm64) ftrace. The root cause is inconsistent handling of PLT entries when calling ftrace trampolines: ftrace_modify_call() can produce out-of-range branches, causing warnings and no code change, or replace the old branch with a BRK, risking a kernel panic...

CVE-2022-50053

CVE-2022-50053 concerns the Linux kernel iavf driver: a reset error handling path could lead to deadlock due to double napi_disable and a stuck iavf_remove when VF removal occurs during rapid resets. The fix removes the call to iavf_close in reset error handling and instead calls iavf_disable_vf ...

CVE-2023-32248

CVE-2023-32248 describes a flaw in the Linux kernel’s ksmbd (the in-kernel SMB server) related to the handling of SMB2_TREE_CONNECT and SMB2_QUERY_INFO. The issue stems from the lack of proper validation of a pointer before access, which attackers can leverage to cause a denial-of-service conditi...

CVE-2023-52566

The CVE concerns NILFS2 in Linux kernels: in nilfs_gccache_submit_read_data(), releasing the buffer head (bh) before unlocking/putting its page can trigger a use-after-free if bh->b_page is dereferenced. The fix moves the release after unlocking and putting the page. This patch targets GC-rela...

CVE-2023-52569

CVE-2023-52569 affects the Linux kernel's btrfs code path. The patch removes a BUG() on failure to insert a delayed dir index item and adds proper error handling, but it does not fix the underlying issue of using the same index number for different items, per the provided documentation. No exploi...

CVE-2023-52938

CVE-2023-52938 concerns the Linux kernel in the usb: typec: ucsi area. The issue occurs when the driver tries to resume USB-C ports that have not yet been registered, causing a NULL pointer dereference. The attached connected documents confirm the vulnerability and its fix in the kernel, with ref...

CVE-2023-53014

The CVE-2023-53014 issue affects the Linux kernel’s DMA engine (tegra). It describes a memory leak that occurs when terminating an ongoing transfer: the vdesc must be terminated and placed in the desc_terminated list, with the descriptor freed later in desc_free_list(). The provided connected doc...

CVE-2023-53018

CVE-2023-53018 affects the Linux kernel Bluetooth stack. If hci_cmd_sync_queue() fails in hci_le_terminate_big() or hci_le_big_terminate(), the memory pointed to by d is not freed, causing a memory leak. A patch adds a release path in the error flow to fix this. Exploitation details are not provi...

CVE-2023-53079

The CVE-2023-53079 issue affects the Linux kernel mlx5 driver (net/mlx5) and related eswitch/vport flow-rule handling. Root cause: during EEH, vport MC/UC/multicast promiscuous rules aren’t deleted in teardown, and the firmware may reset these settings after EEH, causing the driver to attempt to ...

CVE-2023-53105

CVE-2023-53105 affects the Linux kernel mlx5 driver, specifically a NULL pointer dereference in encap lock cleanup when unloading a module with a peer offloaded TC flow. The underlying issue occurs when the peer uplink rep profile is changed to a NIC profile and the encap lock is destroyed during...

CVE-2024-26676

CVE-2024-26676 concerns the Linux kernel’s af_unix garbage collection. The issue arose when a socketpair self-send creates a self-referential GC candidate cycle that is not untangled due to missing MSG_OOB handling, causing a memory leak. The root cause was exposed after removing io_uring GC dead...

CVE-2024-26790

The CVE-2024-26790 issue affects the Linux kernel, specifically the dmaengine: fsl-qdma path. It describes a vulnerability where 16-byte unaligned read transactions by QDMA on ls1028a-based SoCs can stall the Network On-Chip (NOC) and trigger PCIe controller timeouts, potentially causing a deadlo...

CVE-2024-35902

The CVE-2024-35902 issue affects the Linux kernel’s RDS path. In net/rds, a null cp can be dereferenced in __rds_rdma_map when cp->cp_conn is accessed, potentially causing a crash. Analysis notes that cp is a parameter that may be NULL at several call sites (e.g., rds_get_mr, rds_get_mr_for_de...

CVE-2024-35922

The CVE-2024-35922 issue is a Linux kernel vulnerability in fbmon/fb_videomode_from_videomode() where htotal * vtotal can overflow to zero, risking division by zero. The root cause is overflow during videomode computation; the fix mirrors fb_var_to_videomode() by preventing division by zero. Affe...

CVE-2024-35990

CVE-2024-35990 maps to a Linux kernel fix for the xilinx_dpdma DMA driver: the issue was improper locking in xilinx_dpdma_chan_queue_transfer (chan->lock/chan->vchan.lock) that could trigger lockdep warnings. The connected sources describe the exact locking issues and the patch that adds th...

CVE-2024-39468

CVE-2024-39468 : Linux kernel SMB/CIFS client deadlock in smb2_find_smb_tcon() fixed by unlocking cifs_tcp_ses_lock before calling cifs_put_smb_ses(). Affected component is the SMB client in the kernel; deadlock could occur locally via SMB2 TCON handling. Public references point to kernel.org sta...

CVE-2024-39481

CVE-2024-39481 affects the Linux kernel media subsystem (media: mc). The issue arises in media_pipeline_start where the graph walk followed all links, including non-data ones, causing a crash (e.g., MEDIA_LNK_FL_ANCILLARY_LINK). The fix narrows the walk to only MEDIA_LNK_FL_DATA_LINK, eliminating...

CVE-2024-41036

The CVE-2024-41036 vulnerability involves the ks8851 driver in the Linux kernel. When SMP is enabled, functional spinlocks can cause a deadlock between ks8851_start_xmit_spi and ks8851_irq due to contention on the statelock, leading to a soft lockup (high availability impact). The issue occurs in...

CVE-2024-42224

CVE-2024-42224 affects the Linux kernel code path for the mv88e6xxx DSA driver. The vulnerability stems from an incorrect check in mv88e6xxx_default_mdio_bus(): after commit enabling multiple MDIO busses, the code used list_first_entry() and assumed a non-NULL result to imply a non-empty chip-&gt...

CVE-2024-42310

CVE-2024-42310 concerns a null pointer dereference in the Linux kernel's DRM GMA500 driver, specifically cdv_intel_lvds_get_modes. The bug arises when the return value of drm_mode_duplicate() is assigned to mode and drm_mode_duplicate() fails, potentially leading to an NPD. The issue has been fix...

CVE-2024-45011

CVE-2024-45011 in the Linux kernel relates to the xillybus/xillyusb driver probing a device and not validating USB endpoints before use. The patching guidance in the description indicates that every XillyUSB device must have a Bulk IN endpoint at address 1 and may have additional Bulk OUT endpoin...

CVE-2024-46680

In CVE-2024-46680, the Linux kernel Bluetooth btnxpuart driver can crash when the driver is removed because ps_wakeup() schedules work after module removal. The fix introduces ps_cleanup() to deassert UART break immediately on serdev close, cancel any scheduled work, and destroy the ps_lock mutex...

CVE-2024-46719

CVE-2024-46719 (Linux kernel) addresses a NULL pointer dereference in the USB Type-C UCSI code. The root cause is that ucsi_register_altmode considers NULL a valid alt pointer and, when CONFIG_TYPEC_DP_ALTMODE is disabled, ucsi_register_displayport can return NULL, leading to a NULL pointer deref...

CVE-2024-46739

The CVE-2024-46739 issue is in the Linux kernel (uio_hv_generic) and affects hv_uio_rescind for VM Bus channels. Root cause: the primary_channel pointer is NULL for primary channels and rescind callbacks are meant for primary channels only, leading to a NULL pointer dereference. The fix retrieves...

CVE-2024-46802

CVE-2024-46802 affects the Linux kernel’s DRM-AMD display path. The vulnerability is a NULL-dereference in drm/amd/display when validating a stream, caused by missing NULL checks for dc or stream. The fixed code adds a NULL check at the start of dc_validate_stream to prevent invalid memory access...

CVE-2024-46843

CVE-2024-46843 concerns the Linux kernel SCSI/UFS path. The issue arises when removing the ufshcd driver from a UFS device, potentially causing a kernel panic if ufshcd_async_scan fails during ufshcd_probe_hba before a SCSI host is added. The fix is to guarantee the SCSI host is removed only if i...

CVE-2024-47677

CVE-2024-47677 affects the Linux kernel exFAT implementation. The flaw: when exfat_load_upcase_table reaches the end and returns -EINVAL, allocated memory is not freed, and as exfat_load_default_upcase_table allocates more memory this can cause a memory leak. Details from connected advisories ind...

CVE-2024-47732

CVE-2024-47732 is a Linux kernel crypto issue reported as a potential use-after-free in iaa compression mode handling. The OSV entry notes that free_device_compression_mode(iaa_device, device_mode) frees device_mode and then passes it to iaa_compression_modes[i]->free(), which could cause use-...

CVE-2024-49940

CVE-2024-49940 (Linux kernel) affects the l2tp code path and describes a tunnel refcount underflow window during session creation and tunnel refcount handling. Root cause details: a backpointer from a session to its tunnel is set in l2tp_session_create before the tunnel refcount is incremented by...

CVE-2024-49961

CVE-2024-49961 is a Linux kernel issue affecting GPIO handling via an I2C port expander (ar0521). The fix updates ar0521_power_on/power_off to use the cansleep variant of gpiod_set_value(), correcting a mismatch where GPIO resets using I2C expander were not cansleep-enabled. The CVE context in th...

CVE-2024-50170

CVE-2024-50170 corresponds to a Linux kernel issue in the bcmasp driver (net: bcmasp: bcmasp_xmit) where skb memory was not freed on mapping failure, causing a potential memory leak. The root cause is that bcmasp_xmit() returns NETDEV_TX_OK without freeing the skb when mapping fails. A fix was co...

CVE-2024-50210

The CVE-2024-50210 issue is in the Linux kernel posix-clock routine pc_clock_settime(). If get_clock_desc() succeeds, the code locks the clock’s fd and holds the rwsem; the error path failed to release the lock and fput the fd, causing unbalanced locking and a potential resource leak. The root ca...

CVE-2024-50240

The CVE-2024-50240 issue concerns the Linux kernel PHY driver for Qualcomm QMP-USB. After commit 413db06c05e7, driver data initialisation was removed but still used in runtime PM callbacks, causing a NULL-pointer dereference on runtime suspend when runtime PM is enabled via sysfs. The fix restore...

CVE-2024-53081

Public technical details (affected product/version/root cause/patch) for CVE-2024-53081 are not provided in the connected documents. Monitor for updates when new information becomes available.

CVE-2024-56742

The CVE-2024-56742 entry concerns the Linux kernel VFIO/MLX5 path. It fixes an unwind issue in mlx5vf_add_migration_pages() where pages allocated but not added to the SG table must be freed to prevent a memory leak; pages already added to the SG table are freed via mlx5vf_free_data_buffer(). Affe...

CVE-2024-57872

CVE-2024-57872 – Linux kernel vulnerability affecting the SCSI/ufs path. The issue is caused by not releasing the HBA during ufshcd_pltfrm_remove(), which can lead to memory leaks. The fix ensures proper cleanup by calling scsi_host_dev_release() to free the HBA and avoid leaks. The CVE is rated ...