CVE-2024-53200

Technical details about CVE-2024-53200 are not publicly provided in the supplied documents. Monitor vendor advisories for updates, affected products, impact, and fixes.

CVE-2024-56540

In CVE-2024-56540, the Linux kernel ivpu IPC path (drivers/accel/ivpu/ivpu_ipc.c) was refactored: ipc send/receive functions were adjusted to avoid triggering a recovery during probe/resume. ivpu_send_receive_internal() is now used by D0i3 entry, DCT init, and HW init, with updated functions retu...

CVE-2024-56698

The CVE affects the Linux kernel’s DWC3 gadget USB driver. The root cause is a faulty accounting of scatter-gather entries: dwc3_request->num_queued_sgs is decremented on completion, and if a request is only partially completed, the total number of SG entries may be misreported, potentially le...

CVE-2024-56710

CVE-2024-56710 is a Linux kernel vulnerability involving a memory leak in the ceph Direct I/O path. The bvecs array allocated in iter_get_bvecs_alloc() can leak and leave pages pinned if ceph_alloc_sparse_ext_map() fails. The fix moves sparse_ext allocation earlier (and applies a similar adjustme...

CVE-2025-21820

CVE-2025-21820 affects the Linux kernel tty/xilinx_uartps driver. A deadlock could occur due to a circular lock dependency between uart_port_lock and console_lock when handling sysrq. The fix splits sysrq handling into two parts: using a prepare step under the port lock and deferring actual handl...

CVE-2025-21884

CVE-2025-21884 concerns the Linux kernel topic “net: better track kernel sockets lifetime.” The description in Astra Linux and related Nessus references show the issue arises because kernel sockets freed during pernet_operations->exit() can be delayed by remaining tx packets in qdisc/device qu...

CVE-2025-22040

CVE-2025-22040 affects the Linux kernel ksmbd multichannel path. A race between session setup and ksmbd_sessions_deregister can free a session before its connection is added to the session’s channel list. The fix adds a reference-count check before freeing the session. Documented impact is high (...

CVE-2025-22085

CVE-2025-22085 affects the Linux kernel RDMA/core. The description documents a use-after-free (slab) in the netlink/name rename path, caused by a use-after-free in nla_put during device-name rename handling. The issue manifests as a slab-use-after-free Read in nla_put, traced through netlink/nlde...

CVE-2025-23134

CVE-2025-23134 affects the Linux kernel ALSA timer code. The vulnerability stems from taking mmap_lock while inside a mutex-wrapped copy_from/to_user() via the pattern guard(mutex)(&register_mutex). This can lead to deadlocks when copy_from/to_user() is invoked under the register_mutex, particula...

CVE-2025-37739

CVE-2025-37739 involves a Linux kernel issue in the f2fs filesystem where out-of-bounds access could occur during truncate_inode_blocks(). UBSAN reported an array-index-out-of-bounds in f2fs/node.h when get_nid() accessed i_nid with a negative index due to dn.ofs_in_node being zero while the load...

CVE-2025-37765

Summary (CVE-2025-37765): The Linux kernel DRM Nouveau path had a delayed-delete oops during ttm_bo_delayed_delete. The root cause is a dangling nouveau_bo.resv pointer after dma_buf destruction frees amdgpu_bo, and the subsequent ttm_bo_delayed_delete dereferences that pointer, causing a general...

CVE-2025-38104

Technical details about CVE-2025-38104 (affected products, versions, exploit information, or fixes) are not provided in the supplied documents; monitor for updates.

CVE-2026-31607

CVE-2026-31607 (Linux kernel USB/IP) : A RET_SUBMIT response can cause an out-of-bounds write when usbip_pack_ret_submit() overwrites urb->number_of_packets without validation. The loop bound in usbip_recv_iso()/usbip_pad_iso() then writes beyond urb->iso_frame_desc[], triggering a heap OOB...

CVE-2009-1072

CVE-2009-1072 affects the Linux kernel prior to 2.6.28.9. nfsd in the kernel does not drop the CAP_MKNOD capability before handling a user request in a thread, enabling local users on an exported filesystem using root_squash to create device nodes. MiracleLinux 3 lists this as fixed in kernel-2.6...

CVE-2011-1577

CVE-2011-1577 describes a heap-based buffer overflow in the is_gpt_valid function of fs/partitions/efi.c in Linux kernel 2.6.38 and earlier. This allows physically proximate attackers to cause a denial of service (OOPS) or potentially other impact via a crafted EFI GPT header size on removable me...

CVE-2012-0207

CVE-2012-0207 affects the Linux kernel before 3.2.1, where igmp_heard_query in net/ipv4/igmp.c can be triggered by IGMP packets to cause a divide-by-zero leading to a kernel panic (DoS). The vulnerability is addressed in Linux 3.2.1 (as per ChangeLog-3.2.1). Connected advisories/Nessus entries re...

CVE-2012-3412

CVE-2012-3412 affects the sfc (Solarflare Solarstorm) driver in the Linux kernel, specifically versions before 3.2.30. The vulnerability allows remote attackers to trigger a denial of service by sending crafted TCP packets that induce a small MSS value, leading to DMA descriptor consumption and n...

CVE-2013-6367

CVE-2013-6367 affects the Linux kernel KVM implementation (arch/x86/kvm/lapic.c) up to version 3.12.5. The vulnerability lets guest-OS users cause a denial of service (divide-by-zero, host crash) by crafting modifications to the TMICT value. The MiracleLinux/Unity Linux Nessus entries explicitly ...

CVE-2013-6378

CVE-2013-6378 affects the Linux kernel up to 3.12.1 and is tied to lbs_debugfs_write in drivers/net/wireless/libertas/debugfs.c. The vulnerability lets a local attacker with root privileges cause a denial of service (OOPS) via a zero-length write call. Multiple connected advisories reference this...

CVE-2013-6383

The CVE-2013-6383 issue is real in the Linux kernel up to version 3.11.7: the aac_compat_ioctl function in drivers/scsi/aacraid/linit.c does not require CAP_SYS_RAWIO, allowing local users to bypass access restrictions via a crafted ioctl. Affected: Linux kernel prior to 3.11.8 (notably seen in a...

CVE-2014-2706

CVE-2014-2706 describes a race condition in the Linux kernel’s mac80211 subsystem (sta_info.c and tx.c) that, when handling network traffic in conjunction with the WLAN_STA_PS_STA (power-save) state, can cause a remote denial of service (system crash). The issue affects kernel versions prior to 3...

CVE-2014-8709

The CVE affects the Linux kernel: ieee80211_fragment in net/mac80211/tx.c, vulnerable in versions before 3.13.5 due to an improperly maintained tail pointer which can allow remote attackers to read packets and obtain cleartext information. A fix is available in Linux kernel 3.13.5 and later (see ...

CVE-2015-1333

CVE-2015-1333 is a memory-leak vulnerability in the Linux kernel prior to 4.1.4. The issue is in the __key_link_end function within security/keys/keyring.c, where adding a key to a keyring via add_key can allow a local attacker to exhaust memory and cause a denial of service. Public advisories an...

CVE-2016-2053

CVE-2016-2053: The Linux kernel’s asn1_ber_decoder in lib/asn1_decoder.c is vulnerable to denial-of-service (panic) via a crafted ASN.1 BER file that lacks a public key. The issue occurs in kernel builds prior to 4.3. Consequence is a local DoS without authenticated user interaction. Affected com...

CVE-2016-5243

CVE-2016-5243 affects the Linux kernel up to 4.6.3. The tipc_nl_compat_link_dump function in net/tipc/netlink_compat.c does not properly copy a string, enabling a local attacker to read sensitive data from kernel stack memory via a Netlink message. Impact is information disclosure with LOCAL acce...

CVE-2016-6327

CVE-2016-6327 affects the Linux kernel: the infiniband ulp srpt driver (ib_srpt.c) before 4.5.1 is vulnerable to a local denial-of-service via an ABORT_TASK command that aborts a device write operation, leading to a NULL pointer dereference and system crash. Affected are kernels prior to 4.5.1; r...

CVE-2017-18079

CVE-2017-18079 affects the Linux kernel, state: a NULL pointer dereference in drivers/input/serio/i8042.c can crash the system because the port->exists value can change after validation, leading to a denial of service or potentially other impact. Public docs specify the vulnerable condition is...

CVE-2017-18221

CVE-2017-18221 affects the Linux kernel: the __munlock_pagevec function in mm/mlock.c before 4.11.4 can be exploited locally via crafted mlockall/munlockall usage to cause NR_MLOCK accounting corruption and a denial of service. Affected versions are kernel prior to 4.11.4; the issue is mitigated ...

CVE-2018-14610

CVE-2018-14610 concerns the Linux kernel up to 4.17.10. A crafted btrfs image mounting scenario can trigger an out-of-bounds access in write_extent_buffer() due to insufficient verification that each block group has a corresponding chunk at mount time (in fs/btrfs/extent-tree.c). This can lead to...

CVE-2019-10142

CVE-2019-10142 references a flaw in the Linux kernel's freescale hypervisor manager implementation. A parameter passed to an ioctl was not properly validated and was used in size calculations for page size, making the kernel vulnerable on 5.0.x kernels before 5.0.17. Exploitation could crash the ...

CVE-2022-0998

CVE-2022-0998 details an integer overflow in the Linux kernel's virtio device driver, specifically in vhost_vdpa_config_validate, permitting a local user to crash the system or potentially escalate privileges. Connected advisories confirm this flaw in the kernel virtio path and reference related ...

CVE-2022-3115

Mode C: CVE-2022-3115 affects the Linux kernel up to 5.16-rc6. The malidp_crtc_reset path in drivers/gpu/drm/arm/malidp_crtc.c does not check kzalloc() return, causing a NULL pointer dereference. Impact is local, potentially enabling kernel denial of service. Public details confirm the exact vuln...

CVE-2022-48918

CVE-2022-48918 — Linux kernel iwlwifi/mvm debugfs_dir null-pointer issue . When debugfs=off is passed, the iwiwifi mvm module used an unchecked debugfs_dir pointer, causing a kernel NULL pointer dereference (BUG) as shown in the provided trace (iwl_mvm_dbgfs_register). The issue is resolved by ad...

CVE-2022-49152

CVE-2022-49152 affects the Linux kernel XArray feature, specifically the xas_create_range() path. When an existing entry with order >= XA_CHUNK_SHIFT is present, xas_create_range() can misinterpret it as a node and dereference xa_node->parent, potentially causing a crash (general protection...

CVE-2022-49778

CVE-2022-49778 concerns the Linux kernel on arm64 where pmd_user_accessible_page() incorrectly treated non-leaf PMDs as leaf, causing a decrease of file_map_count for non-leaf PMDs during collapse of huge pages and triggering a BUG_ON() in mm/page_table_check.c. The provided connected documents c...

CVE-2022-49911

In CVE-2022-49911, the Linux kernel's netfilter ipset hash:net,iface type could exhaust memory because it did not enforce the documented limit of storing more than 64 networks with distinct interfaces in a single set. The issue is addressed by applying the documented restriction (max 64 interface...

CVE-2023-34256

CVE-2023-34256 describes an out-of-bounds read in crc16 in lib/crc16.c when invoked from fs/ext4/super.c due to incomplete offset checks in ext4_group_desc_csum, affecting the Linux kernel up to but not including 6.3.3. The issue can enable local denial of service or information leaks via a craft...

CVE-2023-52515

CVE-2023-52515 affects the Linux kernel RDMA/srp path. The root cause is calling scsi_done() from srp_abort() after scmd_eh_abort_handler() runs, which could trigger a use-after-free via subsequent actions (scsi_queue_insert, scsi_finish_command, or scsi_eh_scmd_add). The fix removes the scsi_don...

CVE-2023-52518

A memory leak vulnerability exists in the Bluetooth functionality of the Linux kernel within the hci_codec component. The issue occurs because content from the local_codecs list is leaked when the controller supports codecs that are stored in the list but are never freed. This flaw allows a local...

CVE-2023-52640

CVE-2023-52640 (Linux kernel ntfs3): The issue is a local, out-of-bounds in ntfs_listxattr where the length of the name must not exceed the allocated EA space. Affected code path is in the ntfs3 filesystem. The connected Astra Linux advisory confirms the same vulnerability and indicates a resolve...

CVE-2023-52691

CVE-2023-52691 concerns the Linux kernel’s DRM AMD power management path. The issue is a double-free in the AMD GPU driver flow: when allocation of adev->pm.dpm.dyn_state.vddc_dependency_on_dispclk.entries fails, amdgpu_free_extended_power_table is called to free fields, and if control flow re...

CVE-2023-52769

CVE-2023-52769 concerns the Linux kernel wireless driver ath12k. The issue arises in the htt_mlo_offset event handling path, where the code calling ath12k_mac_get_ar_by_pdev_id() was not protected by an RCU read-side critical section, potentially enabling use-after-free in active pdev contexts. T...

CVE-2023-53107

CVE-2023-53107 concerns the Linux kernel veth/XDP path, specifically a use-after-free in XDP_REDIRECT triggered via AF_XDP. The root cause was a bug in veth_xdp_rcv_skb introduced by commit 718a18a0c8a6 that could call kmalloc to expand headroom when headroom

CVE-2023-53114

CVE-2023-53114 - In the Linux kernel, the i40e Intel XL710 Ethernet driver had a crash during reboot when the firmware is in recovery mode. The root cause was that during recovery mode, the probe skipped pci_set_drvdata(), which later caused a NULL dereference in i40e_shutdown() during shutdown/r...

CVE-2023-53120

CVE-2023-53120 relates to the Linux kernel SCSI mpi3mr driver: a DMA memory leak in the config page, addressed by fixes that ensure pending DMA allocations are freed when the device is released. The root cause involves DMA memory not being properly released, with patches referenced in stable kern...

CVE-2024-35990

CVE-2024-35990 maps to a Linux kernel fix for the xilinx_dpdma DMA driver: the issue was improper locking in xilinx_dpdma_chan_queue_transfer (chan->lock/chan->vchan.lock) that could trigger lockdep warnings. The connected sources describe the exact locking issues and the patch that adds th...

CVE-2024-36008

CVE-2024-36008 affects the Linux kernel; connected sources confirm a vulnerability in IPv4 path involving NULL idev handling in ip_route_use_hint() and a NULL-deref in fib_validate_source(). The issue arises in older trees and was addressed by ensuring __in_dev_get_rcu() results are checked for N...

CVE-2024-38633

CVE-2024-38633 affects the Linux kernel serial MAX3100 driver. The issue arises when the last MAX3100 device is removed, as the global state tracking the UART driver registration is not updated, leading to a NULL pointer dereference during driver re-insertion (insmod/rmmod/insmod cycle). The docu...

CVE-2024-40975

CVE-2024-40975 affects the Linux kernel in platform/x86/x86-android-tablets code. The issue arises when a device is unregistered while consumers still hold references, with the regulator subsystem given as a concrete example. If a regulator is unregistered prematurely, a WARN() can be triggered (...

CVE-2024-41088

CVE-2024-41088 (Linux kernel) affects the can mcp251xfd driver. When mcp251xfd_start_xmit() fails, tx_ring->head is still incremented, causing the Transmit Event FIFO to reflect an outstanding TX while a response is expected, which can lead to an infinite loop in the interrupt routine if multi...