CVE-2021-47659

CVE-2021-47659 affects the Linux kernel DRM plane path. The vulnerability arises because the range check for format_count is performed late in __drm_universal_plane_init(); if format_count > 64 yields a WARN_ON, it can leak the plane->format_types array and skip drm_mode_object_unregister()...

CVE-2024-44996

The CVE-2024-44996 issue affects the Linux kernel vsock path when a vsock socket is added to a BPF sockmap. The bug arises when prot->recvmsg is replaced by vsock_bpf_recvmsg(), creating a recursive call chain: vsock_bpf_recvmsg() -> __vsock_recvmsg() -> vsock_connectible_recvmsg() ->...

CVE-2024-45028

Summary (CVE-2024-45028) : The vulnerability is in the Linux kernel code path mmc_test, where the allocation of test->highmem via alloc_pages() can lead to a NULL dereference when __free_pages(test->highmem) executes after allocation failure. The fix changes the dereference handling to avoi...

CVE-2024-46717

CVE-2024-46717 relates to the Linux kernel mlx5e SHAMPO header handling. The bug caused SHAMPO header pages to be released more than once when a data page was used for a non-SHAMPO header, due to releasing a SHAMPO header page from header_index after a non-header data page was formed into a new s...

CVE-2024-46739

The CVE-2024-46739 issue is in the Linux kernel (uio_hv_generic) and affects hv_uio_rescind for VM Bus channels. Root cause: the primary_channel pointer is NULL for primary channels and rescind callbacks are meant for primary channels only, leading to a NULL pointer dereference. The fix retrieves...

CVE-2024-46869

CVE-2024-46869 relates to the Linux kernel Bluetooth driver, specifically the btintel_pcie path. The issue was caused by not allocating memory for the driver-private data structure (struct btintel_data), leaving internal data storage unallocated. The connected Astra Linux security bulletin restat...

CVE-2024-46870

CVE-2024-46870 concerns the Linux kernel’s DRM/AMD display path, where a race condition can occur in DCN35 when DMCUB timeout is not appropriate. The provided description states that DMCUB can take longer to process commands, and the old ASIC policy could continue after a diagnostic error, riskin...

CVE-2024-47732

CVE-2024-47732 is a Linux kernel crypto issue reported as a potential use-after-free in iaa compression mode handling. The OSV entry notes that free_device_compression_mode(iaa_device, device_mode) frees device_mode and then passes it to iaa_compression_modes[i]->free(), which could cause use-...

CVE-2024-50175

CVE-2024-50175 is a Linux kernel CAMSS issue where an incorrect use_count guard in stop_streaming for multiple VCs on the same RDI can cause stop_streaming to leave buffers in an active state and fail to re-start (noted as -EBUSY). The vulnerability was resolved by removing the use_count check, w...

CVE-2024-50238

CVE-2024-50238 affects the Linux kernel Qualcomm qmp-usb/qmp-usbc drivers. The issue was a NULL-pointer dereference during runtime suspend caused by removing the initialisation of platform driver data in probe, after a commit cleaned up probe initialisation. The bug reproduced when the driver was...

CVE-2024-50292

CVE-2024-50292: Linux kernel ASoC stm32_spdifrx DMA channel release bug. If ctrl_chan DMA request fails and ctrl_chan is non-NULL, releasing the DMA channel can dereference a NULL pointer, leading to a kernel NULL dereference. The fix releases the channel only when the pointer is valid (non-NULL)...

CVE-2024-50295

CVE-2024-50295 : In the Linux kernel, the arc net driver fix addresses a DMA mapping issue where ndev->dev and pdev->dev may not be the same device. The correct device used for dma_map_single/dma_unmap_single is ndev->dev.parent, since ndev->dev.parent has the dma_mask, whereas ndev-&...

CVE-2024-53071

CVE-2024-53071 affects the Linux kernel's drm/panthor driver. The panthor_device_mmap_io() path mishandles two IO-mapped regions: (1) it bails when VM_WRITE is set for DRM_PANTHOR_USER_FLUSH_ID_MMIO_OFFSET but does not clear VM_MAYWRITE, potentially allowing userspace to writable mappings later v...

CVE-2024-53081

Public technical details (affected product/version/root cause/patch) for CVE-2024-53081 are not provided in the connected documents. Monitor for updates when new information becomes available.

CVE-2024-53154

Technical details for CVE-2024-53154 are not provided in the connected documents. The initial description mentions a NULL check added in applnco_probe for clk-apple-nco in the Linux kernel.

CVE-2024-53212

CVE-2024-53212 is a Linux kernel vulnerability where a false positive warning in netlink extack could occur during dumps. The fix reworks the validation by using the netlink message header (nlh) instead of scanning skb->data, addressing a scenario where a dump is initiated but not completed du...

CVE-2024-56665

CVE-2024-56665 refers to a Linux kernel issue in the bpf/perf subsystem. The crash arises when a tracepoint perf event uses a BPF program with attr.inherit=1, and the event is inherited by a child after fork, causing the child to share the parent’s tp_event->prog_array. On teardown, the first ...

CVE-2024-56771

CVE-2024-56771 concerns the Linux kernel mtd/spinand/winbond NAND ECC handling. Four WINBOND 3D NAND chips (W25N512GW, W25N01GW, W25N01JW, W25N02JW) rely on a single-bit ECC engine on-die. The issue arises because querying per-chunk bitflips via ->get_status() is unnecessary and unsupported fo...

CVE-2024-57930

CVE-2024-57930 : Linux kernel tracing fix. The vulnerability arises because process_string() did not consistently handle cases where a %s argument in TP_printk() referred to an array, risking unsafe dereferences of string data in trace events. The fix expands process_string() to treat references ...

CVE-2024-57933

CVE-2024-57933 (Linux kernel, GVE/XDP/XSK) : The issue arises from races around XSK/XDP queue existence. The patch adds guards to XSK operations and XDP xmit/NDO paths based on queue existence and interface state, preventing crashes when interfaces go down or queues disappear during operation. It...

CVE-2024-58034

CVE-2024-58034 in the Linux kernel fixes an OF node reference bug in memory: tegra20-emc. The issue arises when tegra_emc_find_node_by_ram_code() releases some device nodes while still in use, potentially causing use-after-free (UAF). The description states that the emc-tables node is a child wit...

CVE-2024-58086

CVE-2024-58086 is a Linux kernel vulnerability in the DRM/V3D driver where the active perfmon (v3d->active_perfmon) could be left dangling during destruction. The fixed behavior, as noted in the patch referenced by commit 7d1fd3638ee3, stops the active perfmon before it is destroyed, addressin...

CVE-2024-58088

In CVE-2024-58088, the Linux kernel’s BPF cgroup storage path could deadlock when freeing storage. The issue stemmed from passing NULL to bpf_local_storage_map_free() in cgrp storage, creating a locking window. Affected components include tasks attaching fentry/fexit programs and non-cgroup-attac...

CVE-2025-21674

CVE-2025-21674 affects the Linux kernel mlx5e/mlx5_core with IPsec tunnel offload in tunnel mode. The issue caused a kernel panic due to two problems: (1) in SA add, the _bh() variant should be used when marking SA mode, and (2) an unnecessary flush_workqueue in SA delete routine. The failure is ...

CVE-2025-21775

CVE-2025-21775 affects the Linux kernel CAN ctucanfd component. When skb allocation fails, the can_frame pointer can be NULL, and one NULL check was missed in ctucan_err_interrupt(); a fix adding the NULL check was implemented in the kernel (see references to the can: ctucanfd: handle skb allocat...

CVE-2025-21790

CVE-2025-21790 fixes a kernel-space issue in the vxlan code. The vulnerable path is in vxlan_vnigroup_init() not being checked by vxlan_init(), which can lead to a NULL dereference or general protection fault later when vxlan_dev is created/unregistered (local attacker with access to the kernel c...

CVE-2025-21810

Technical details for CVE-2025-21810 are not publicly available in the provided connected documents. Monitor kernel advisories and vendor advisories for affected versions, impact, and fixes.

CVE-2025-37777

CVE-2025-37777: In the Linux kernel ksmbd path, a use-after-free could occur in __smb2_lease_break_noti() when the connection is disconnected, because ksmbd_conn_write may touch freed structures if conn->ksmbd_transport is already freed. The fix moves the tcp_transport free to ksmbd_conn_free,...

CVE-2025-37894

Technical details for CVE-2025-37894 are not provided in the connected documents. The materials describe the vulnerability fix in the Linux kernel but do not specify exact affected versions, exploit scenarios, or remediation beyond the general patch guidance.

CVE-2025-38415

CVE-2025-38415 is a Linux kernel vulnerability affecting Squashfs where sb_min_blocksize(sb, SQUASHFS_DEVBLK_SIZE) can return 0, causing msblk->devblksize to be 0 and leading to an out-of-bounds shift (64) in msblk->devblksize_log2. The issue stems from not handling a 0 return from sb_min_b...

CVE-2025-38461

CVE-2025-38461 affects the Linux kernel vsock transport code. Root cause: a TOCTOU race where transport assignment could race with module unload, risking a stale pointer and potential instability. The fix adds protection for new_transport and a lockdep assertion; updated kernels are released (exa...

CVE-2025-38678

The CVE-2025-38678 vulnerability affects the Linux kernel’s netfilter nf_tables path, where a chain/flowtable update can carry duplicate devices within the same batch. The bug could leave the hook for a duplicated device unregistering, potentially enabling a foothold in local updates. The issue i...

CVE-2008-5700

The CVE-2008-5700 entry concerns the Linux kernel Libata subsystem: it does not set minimum SG_IO timeouts, allowing local DoS via multiple SG_IO invocations. Connected docs (MiracleLinux AXSA advisories) explicitly list CVE-2008-5700 and state the issue affects kernel versions prior to 2.6.27.9,...

CVE-2010-4649

The CVE-2010-4649 issue affects the Linux kernel up to 2.6.37, where an Integer overflow in ib_uverbs_poll_cq (drivers/infiniband/core/uverbs_cmd.c) allows a local user to cause memory corruption and a possible DoS or other unspecified impact when a structure member is large. The vulnerability re...

CVE-2011-1010

Concretely, CVE-2011-1010 is reported in MiracleLinux advisory AXSA:2011-282:05 as affecting kernel-2.6.18-238.2.AXS3. It describes a buffer overflow in the mac_partition function (fs/partitions/mac.c) of the Linux kernel, prior to version 2.6.37.2, which can allow a local user to cause a denial ...

CVE-2011-1172

The CVE-2011-1172 issue affects the Linux kernel IPv6 stack (net/ipv6/netfilter/ip6_tables.c): root cause is failure to append a null terminator to certain string values, enabling local memory information disclosure via a crafted request (CAP_NET_ADMIN) and reading the modprobe argument. Impact i...

CVE-2011-2723

CVE-2011-2723 affects the Linux kernel prior to 2.6.39.4 where the skb_gro_header_slow handling under GRO can reset fields incorrectly, enabling remote attackers to cause a denial of service (system crash) via crafted network traffic. Connected advisories confirm this CVE is referenced alongside ...

CVE-2011-4077

CVE-2011-4077 is a Linux kernel XFS-related vulnerability described in the provided documents as a buffer overflow in the xfs_readlink function (fs/xfs/xfs_vnodeops.c) when CONFIG_XFS_DEBUG is disabled. The issue affects Linux kernel 2.6 with XFS, allowing a local attacker to cause memory corrupt...

CVE-2013-0311

The CVE-2013-0311 issue affects the Linux kernel’s vhost translation logic. Specifically, the translate_desc function in drivers/vhost/vhost.c mishandles cross-region descriptors in kernels prior to 3.7, enabling a guest OS user with KVM privileges to escalate to host OS privileges. The vulnerabi...

CVE-2014-8369

The CVE-2014-8369 flaw affects the Linux kernel and is caused by a miscalculation in kvm_iommu_map_pages (virt/kvm/iommu.c) when handling a mapping failure. The vulnerability exists in kernels up to 3.17.2 and arises from an incorrect fix for CVE-2014-3601. This allows guest OS users with privile...

CVE-2015-8787

The CVE-2015-8787 entry concerns the Linux kernel, specifically the nf_nat_redirect_ipv4() function in net/netfilter/nf_nat_redirect.c. The vulnerability arises in kernel builds before 4.4, where remote attackers can send IPv4 packets to an incompletely configured interface to trigger a NULL poin...

CVE-2015-8962

CVE-2015-8962: Double free in sg_common_write (drivers/scsi/sg.c) of the Linux kernel before 4.4. A local user can gain privileges or cause memory corruption/system crash by detaching a device during an SG_IO ioctl. Remediation: upgrade to Linux kernel 4.4+ or apply vendor patch; exploitation con...

CVE-2017-16531

CVE-2017-16531 affects the Linux kernel before 4.13.6, where the driver/usb/core/config.c path allows a local user to trigger an out-of-bounds read via a crafted USB device, related to the USB_DT_INTERFACE_ASSOCIATION descriptor. Exploitation could cause a denial of service (kernel crash) and pot...

CVE-2021-47074

In CVE-2021-47074, the Linux kernel nvme-loop module had a memory leak in nvme_loop_create_ctrl(): if nvme_init_ctrl() fails, the created loop ctrl must be freed before exiting. The fix ensures proper cleanup of the loop ctrl on error to avoid leaking memory. The vulnerability’s described impact ...

CVE-2021-47186

CVE-2021-47186 affects the Linux kernel TIPC subsystem: kmemdup can return NULL and is dereferenced in tipc_crypto_key_xmit if not checked. The provided docs confirm a NULL pointer dereference path and cite kernel commits improving null-checks as the fix. Impact is local with potential kernel den...

CVE-2021-47379

The CVE-2021-47379 entry describes a kernel vulnerability in the Linux blk-cgroup subsystem related to a use-after-free (UAF) in the block I/O scheduler. The issue arises when destroying the blkcg policy hierarchy, where the BFQ/BLK MQ path can trigger a use-after-free during queue initialization...

CVE-2021-47559

CVE-2021-47559 (Linux kernel, net/smc): A NULL pointer dereference in smc_vlan_by_tcpsk() was reported during iteration over lower devices. The code path assigns ndev from netdev_lower_get_next and later dereferences ndev in is_vlan_dev(), risking a crash when the function returns NULL. The advis...

CVE-2022-2308

CVE-2022-2308 describes a vulnerability in the Linux kernel’s vDPA with the VDUSE backend. The VDUSE kernel driver does not validate that the device config space size matches the features advertised by the VDUSE userspace app, causing Virtio config read helpers to pass uninitialized memory to vdu...

CVE-2022-49325

CVE-2022-49325 (Linux kernel) : The vulnerability concerns the TCP path where tp->snd_cwnd can be illegal (zero or negative) values. The fix adds accessors to read/set tp->snd_cwnd to catch illegal values earlier; syzbot previously triggered WARN_ON_ONCE(!tp->prior_cwnd) in a commit that...

CVE-2022-49332

CVE-2022-49332 relates to the Linux kernel SCSI lpfc path. The vulnerability is a NULL pointer dereference in starget_to_rport() where calls may return NULL and the code could dereference a NULL rport. The described root cause is lack of a NULL check before dereferencing the rport, with the cited...