15062 matches found
CVE-2024-26942
CVE-2024-26942 (Linux kernel) affects the qcom at803x PHY driver (at8031) in the Linux kernel. The root cause is a NULL dereference where the private data (priv) is referenced before it has been allocated during the driver’s rework/split, causing a kernel panic when probing at8031. The fix ensure...
CVE-2021-4148
CVE-2021-4148 : Linux kernel vulnerability in the function block_invalidatepage (fs/buffer.c) where a missing sanity check can allow a local user with privileges to cause a denial of service. The connected advisories corroborate a local DoS impact but do not provide vendor-specific patch details ...
CVE-2021-47023
In the Linux kernel, the following vulnerability has been resolved: net: marvell: prestera: fix port event handling on init For some reason there might be a crash during ports creation if portevents are handling at the same time because fw may send initialport event with down state. The crash poi...
CVE-2022-49238
CVE-2022-49238 concerns the Linux kernel ath11k driver for QCA6390/WCN6855. The issue arises when disconnecting from an AP: a commit sequence intended to fix a firmware crash ended up skipping all peer deletion, leaving peer->sta set and then used, causing a use-after-free. The log shows a use...
CVE-2022-49311
CVE-2022-49311 concerns a deadlock in the Linux kernel driver rtl8192bs (rtw_joinbss_event_prehandle) where a timer deletion under a spin_lock_bh caused a timer handler to wait on the same lock. The issue manifested as two threads blocking each other, risking an infinite hang. The documented fix ...
CVE-2022-49313
CVE-2022-49313 : Linux kernel patch fixes a deadlock in usb host oxu_bus_suspend(). The issue arises when oxu_bus_suspend() holds oxu->lock while waiting for a timer to stop via del_timer_sync(), but the timer handler also needs the same lock, causing a potential deadlock. The patch removes de...
CVE-2022-49370
The CVE-2022-49370 issue affects the Linux kernel component handling firmware dmi-sysfs, where a memory leak occurs due to improper cleanup in dmi_sysfs_register_handle when kobject_init_and_add() returns an error. The documented fix is to call kobject_put() to release memory in that failure path...
CVE-2022-49778
CVE-2022-49778 concerns the Linux kernel on arm64 where pmd_user_accessible_page() incorrectly treated non-leaf PMDs as leaf, causing a decrease of file_map_count for non-leaf PMDs during collapse of huge pages and triggering a BUG_ON() in mm/page_table_check.c. The provided connected documents c...
CVE-2022-49787
Summary (CVE-2022-49787): In the Linux kernel, the mmc: sdhci-pci fix prevents a memory leak by ensuring proper PCI device reference counting. The root cause is that pci_get_device() increases the pci_dev reference count and may not be balanced with pci_dev_put() before amd_probe() returns; the f...
CVE-2022-49885
CVE-2022-49885 is a Linux kernel vulnerability in ACPI APEI where ghes_estatus_pool_init() can overflow due to signed integer math during len calculation (len += (num_ghes * GHES_ESOURCE_PREALLOC_MAX_SIZE)). The root cause is using int for num_ghes, which can overflow and cause subsequent vmalloc...
CVE-2023-52567
CVE-2023-52567 : In the Linux kernel serial driver (8250_port), if a leaf driver uses IRQ polling (irq=0) and the IIR indicates an interrupt, the IRQ data can be NULL, potentially leading to a NULL pointer dereference. The published fix adds a check to ensure IRQ data is valid before wake-up hand...
CVE-2023-52569
CVE-2023-52569 affects the Linux kernel's btrfs code path. The patch removes a BUG() on failure to insert a delayed dir index item and adds proper error handling, but it does not fix the underlying issue of using the same index number for different items, per the provided documentation. No exploi...
CVE-2023-52657
The CVE-2023-52657 entry centers on a Linux kernel revert in the AMD DRM subsystem (drm/amd/pm: resolve reboot exception for si oland), specifically reverting commit e490d60a2f76bff636c68ce4fe34c1b6c34bbd86. Public references describe that this change causes hangs on SI when DC is enabled and int...
CVE-2023-52771
CVE-2023-52771 affects the Linux kernel CXL stack. The issue is a race between delete_endpoint() teardown and parent unregistration, which can impact the cxl_mem/cxl_port topology during port removal. The provided description states two fixes: (1) acquire a reference on the parent to prevent use‑...
CVE-2023-52789
CVE-2023-52789 : In the Linux kernel, the vulnerability affects the tty/vcc path (vcc_probe). The root cause is failure to check the return value of kstrdup(), risking a NULL pointer dereference. The fix adds a check for kstrdup() and returns an error if it fails. This resolves the issue by preve...
CVE-2023-52904
CVE-2023-52904 refers to a Linux kernel ALSA usb-audio vulnerability where snd_usb_pcm_has_fixed_rate() can dereference a NULL subs function argument. The root cause is using the subs argument before a NULL check, leading to an eventual NULL pointer dereference. Exploitation context is local (per...
CVE-2023-52977
CVE-2023-52977 is a kernel vulnerability in the Linux kernel’s net/openvswitch path where a memory leak occurs in ovs_flow_cmd_new when key allocation fails. The issue is triggered during netlink/genl handling as shown in the provided trace, and the remediation described in the patch is to reorde...
CVE-2023-53018
CVE-2023-53018 affects the Linux kernel Bluetooth stack. If hci_cmd_sync_queue() fails in hci_le_terminate_big() or hci_le_big_terminate(), the memory pointed to by d is not freed, causing a memory leak. A patch adds a release path in the error flow to fix this. Exploitation details are not provi...
CVE-2023-53072
CVE-2023-53072 (Linux kernel, MPTCP) : A use-after-free UaF at token lookup during MPTCP passive socket initialization was fixed by changing cleanup order to destroy unaccepted MPTCP sockets via a workqueue, ensuring the MPC subflow cleanup ends with the msk released. The fix reuses the MPTCP_WOR...
CVE-2023-53078
CVE-2023-53078 is a Linux kernel memleak in the SCSI ALUA path (scsi_dh_alua: alua_activate). The issue occurs if alua_rtpg_queue() fails during alua_activate(), leaving the allocated qdata unreleased and causing a memory leak. The public docs indicate the fix is to free qdata in the error path. ...
CVE-2023-53100
The CVE-2023-53100 entry relates to the Linux kernel ext4 code path. The issue was triggered during inline data handling when adding xattrs to an inode: after ext4_xattr_shift_entries(), i_inline_off can be incorrectly updated (reported as changing to 176), which can cause ext4_update_inline_dir/...
CVE-2023-53113
The CVE-2023-53113 entry concerns the Linux kernel wifi NL80211 offchannel check. A NULL-pointer dereference could occur when a link was created by userspace in AP mode but not activated yet, resulting in a chandef that is invalid or has no channel. The vulnerability arises from dereferencing thi...
CVE-2024-26742
The CVE-2024-26742 issue lies in the Linux kernel’s scsi: smartpqi driver, where enablement of the default PCI_IRQ_AFFINITY flag caused incorrect registration with the block layer (blk_mq_pci_map_queues was used instead of blk_mq_map_queues). This could produce a stack trace and potentially undef...
CVE-2024-26844
Linux kernel vulnerability CVE-2024-26844 was resolved by patching the block layer to address a harmful iov_iter direction issue. A Syzkaller warning reported that an iov_iter could be used in both directions due to a transfer direction SG_DXFER_TO_FROM_DEV, which would copy user buffers into the...
CVE-2024-26917
CVE-2024-26917 affects the Linux kernel SCSI/FCoE path. The vulnerability stems from reverting a commit that changed spin lock usage for FCoE devices (from bh to irqsave), which caused interrupts to be lost for FCoE devices. The problem was introduced in the patch set around scsi: fcoe: Fix poten...
CVE-2024-35936
CVE-2024-35936. In the Linux kernel, the btrfs relocation code (btrfs_relocate_sys_chunks) contains an unhandled corruption case in its chunk-tree lookup loop. The issue arises from two theoretically impossible conditions: (1) an inexact search yields a key with offset -1 for a chunk-tree item, a...
CVE-2024-39371
CVE-2024-39371 affects the Linux kernel io_uring path. The issue arises in io_file_can_poll() when a forced ASYNC request has a bad or unassigned file descriptor, potentially triggering a NULL pointer dereference via the forced async preparation path. The vulnerability is demonstrated in the trac...
CVE-2024-39468
CVE-2024-39468 : Linux kernel SMB/CIFS client deadlock in smb2_find_smb_tcon() fixed by unlocking cifs_tcp_ses_lock before calling cifs_put_smb_ses(). Affected component is the SMB client in the kernel; deadlock could occur locally via SMB2 TCON handling. Public references point to kernel.org sta...
CVE-2024-40937
CVE-2024-40937 is a kernel vulnerability affecting the gve component where gve_rx_free_skb() leaves napi->skb pointing to a freed skb, risking a dangling pointer in subsequent napi_get_frags calls. The issue is resolved by clearing napi->skb before dev_kfree_skb_any() frees the skb. Connect...
CVE-2024-41022
CVE-2024-41022: In Linux kernel drm/amdgpu, the signedness bug in sdma_v4_0_process_trap_irq() was fixed. The root cause was an unsigned “instance” variable used in error handling; it needed to be signed for correct control flow. Affected: AMDGPU SDMA v4_0 trap IRQ path. Impact/ Exploitation: The...
CVE-2024-41036
The CVE-2024-41036 vulnerability involves the ks8851 driver in the Linux kernel. When SMP is enabled, functional spinlocks can cause a deadlock between ks8851_start_xmit_spi and ks8851_irq due to contention on the statelock, leading to a soft lockup (high availability impact). The issue occurs in...
CVE-2024-41050
CVE-2024-41050 (Linux kernel) affects the cachefiles subsystem, specifically the ondemand path handling of object reopening. The vulnerability arises from cyclic re-use of msg_id after a malicious reopen, which can cause a read request to remain unprocessed and lead to a hang. The root cause is r...
CVE-2024-42161
Technical details about CVE-2024-42161 are not publicly provided in the connected documents. The description mentions a Linux kernel BPF_CORE_READ_BITFIELD uninitialized value fix and a patch to initialize val, but there are no explicit affected products/versions or remediation steps beyond the p...
CVE-2024-46755
CVE-2024-46755 concerns the Linux kernel wifi mwifiex driver. The issue arises from mwifiex_get_priv_by_id() returning priv pointers for a given bss_num/bss_type without verifying that the priv is currently in use; unused priv pointers lack an attached wiphy, which can lead to a NULL pointer dere...
CVE-2024-46851
The CVE-2024-46851 issue appears in the Linux kernel DRM/AMD display code: a race between dcn10_set_drr() and dc_state_destruct() can occur if dc_state_destruct() nulls the DC state resource context while IRQ processing calls dcn10_set_drr(). The pipe context passed to dcn10_set_drr() is part of ...
CVE-2024-50105
CVE-2024-50105 relates to the Linux kernel ASoC Qualcomm Soundwire path. The SC7280 Soundwire runtime stream allocation was not updated when allocation was moved to per-machine soundcard drivers, risking NULL pointer dereference or uninitialized memory during playback. The fix (commit 15c7fab0e04...
CVE-2024-50170
CVE-2024-50170 corresponds to a Linux kernel issue in the bcmasp driver (net: bcmasp: bcmasp_xmit) where skb memory was not freed on mapping failure, causing a potential memory leak. The root cause is that bcmasp_xmit() returns NETDEV_TX_OK without freeing the skb when mapping fails. A fix was co...
CVE-2024-50263
Technical details for CVE-2024-50263 (affected component, impact, fix) are not publicly available in the provided documents. Monitor for updates from the vendor/security advisories.
CVE-2024-50285
The CVE-2024-50285 issue affects the ksmbd component of the Linux kernel. When a client sends simultaneous SMB requests to ksmbd, memory can be exhausted via the ksmbd_work_cache, leading to an Out-Of-Memory condition. The root cause is insufficient handling of concurrent SMB operations despite a...
CVE-2024-53228
Technical details about CVE-2024-53228 are not publicly provided in the supplied documents; only a high-level summary of the fix (riscv kvm out-of-bounds check) is present. Monitor for updates.
CVE-2024-56697
CVE-2024-56697 affects the Linux kernel DRM/AMDGPU path. The issue was a memory allocation problem in amdgpu_discovery_get_nps_info() (mem_ranges) that could dereference a NULL pointer. The fix adds a failure check, switches to kvcalloc() to guard against integer overflow, and assigns output para...
CVE-2024-56742
The CVE-2024-56742 entry concerns the Linux kernel VFIO/MLX5 path. It fixes an unwind issue in mlx5vf_add_migration_pages() where pages allocated but not added to the SG table must be freed to prevent a memory leak; pages already added to the SG table are freed via mlx5vf_free_data_buffer(). Affe...
CVE-2024-57881
CVE-2024-57881 : In the Linux kernel, a bug in mm/page_alloc could call pfn_to_page() on a PFN that might not exist during split_large_buddy(). In corner cases, such as freeing the highest pageblock in the last memory section, CONFIG_SPARSEMEM && !CONFIG_SPARSEMEM_EXTREME could cause __pfn_to_sec...
CVE-2024-58068
CVE-2024-58068 affects the Linux kernel OPP subsystem. If a bandwidth table is not created (e.g., interconnect properties missing in the OPP consumer node) and a driver calls dev_pm_opp_find_bw_ceil() or dev_pm_opp_find_bw_floor(), the kernel may NULL-dereference when reading bandwidth from _read...
CVE-2024-58086
CVE-2024-58086 is a Linux kernel vulnerability in the DRM/V3D driver where the active perfmon (v3d->active_perfmon) could be left dangling during destruction. The fixed behavior, as noted in the patch referenced by commit 7d1fd3638ee3, stops the active perfmon before it is destroyed, addressin...
CVE-2025-21696
CVE-2025-21696 (Linux kernel) : Affects memory management with userfaultfd (UFFD). When mremap() moves a region previously registered with UFFD_WP but without UFFD_FEATURE_EVENT_REMAP, the code could fail to clear uffd-wp on PTE/PMD, causing a mismatch between vma flags (UFFD_WP cleared) and PTE/...
CVE-2025-21706
CVE-2025-21706 is a Linux kernel vulnerability in the MPTCP path-manager. The in-kernel path-manager’s netlink set_flags path allowed non-subflow endpoints to receive the fullmesh flag due to a permissive hook, enabling an issue observed by syzbot warnings in net/mptcp/pm_netlink.c. The root caus...
CVE-2025-21809
Technical details for CVE-2025-21809 are not publicly available in the provided connected documents; monitor for official advisories or vendor updates for affected products, impact, and fixes.
CVE-2025-21875
CVE-2025-21875 affects the Linux kernel MPTCP PM path. Connected docs describe a lock-order flaw where the PM can send RM_ADDR notifications over a msk socket without first acquiring the msk socket lock, allowing concurrent access to the PM removal/address path. The bug path follows PM removal of...