CVE-2013-7339

The CVE-2013-7339 issue affects the Linux kernel up to version 3.12.7 (fixed in 3.12.8) where the rds_ib_laddr_check function in net/rds/ib.c allows a local attacker to trigger a NULL pointer dereference via a bind(2) call on an RDS socket on systems without RDS transports. This can cause a denia...

CVE-2022-49279

CVE-2022-49279 targets the Linux kernel NFSD on 32-bit systems, where the operation len * sizeof(*p) can overflow, potentially causing kernel instability (A high impact/DoS) with local attack capability. Public advisories (Astra Linux, Tencent Linux, etc.) discuss the 32‑bit overflow and show tha...

CVE-2010-2524

CVE-2010-2524 affects the Linux kernel CIFS DNS upcall: when CONFIG_CIFS_DFS_UPCALL is enabled, DNS resolution relies on a user keyring via the dns_resolver upcall in the cifs.upcall userspace helper. This allows local privileged or nearby users to spoof DNS query results and mount arbitrary CIFS...

CVE-2010-3078

The CVE-2010-3078 issue affects the Linux kernel (xfs_ioc_fsgetxattr) where a structure member is not initialized, enabling local attackers to read potentially sensitive data from kernel stack memory via an ioctl. This vulnerability is documented in MiracleLinux AXSA-2010-500:18 and is fixed in 2...

CVE-2010-3849

CVE-2010-3849 affects the Linux kernel’s econet_sendmsg path (net/econet/af_econet.c) prior to 2.6.36.2, when an Econet address is configured. A local user can trigger a denial of service by issuing a sendmsg with a NULL remote address, causing a NULL pointer dereference and OOPS. The correspondi...

CVE-2011-1078

CVE-2011-1078 affects the Linux kernel prior to 2.6.39. The vulnerable code is sco_sock_getsockopt_old in net/bluetooth/sco.c, where a structure used with the SCO_CONNINFO option is not initialized, enabling a local attacker to read potentially sensitive data from kernel stack memory. Exploitatio...

CVE-2011-1172

The CVE-2011-1172 issue affects the Linux kernel IPv6 stack (net/ipv6/netfilter/ip6_tables.c): root cause is failure to append a null terminator to certain string values, enabling local memory information disclosure via a crafted request (CAP_NET_ADMIN) and reading the modprobe argument. Impact i...

CVE-2012-3511

The CVE-2012-3511 entry maps to the Linux kernel issue in mm/madvise.c: madvise_remove contains race conditions that can be exploited locally to trigger use-after-free and kernel crash, resulting in denial of service via munmap or close. Affected lineage includes kernels before 3.4.5; patches add...

CVE-2013-6382

CVE-2013-6382 refers to multiple buffer underflows in the Linux kernel’s XFS implementation up to version 3.12.1, allowing local, CAP_SYS_ADMIN–bearing users to trigger memory corruption or potential other impacts via the XFS_IOC_ATTRLIST_BY_HANDLE or XFS_IOC_ATTRLIST_BY_HANDLE_32 ioctls with cra...

CVE-2016-7917

CVE-2016-7917 affects the Linux kernel’s netfilter: the nfnetlink_rcv_batch() function in net/netfilter/nfnetlink.c does not validate the batch length against the message, enabling a local user with CAP_NET_ADMIN to read kernel memory or trigger a denial of service (infinite loop or out-of-bounds...

CVE-2017-10663

CVE-2017-10663 affects the Linux kernel prior to 4.12.4, specifically the F2FS file system code (fs/f2fs/super.c). The vulnerability arises because sanity_check_ckpt does not validate blkoff and segno arrays, allowing an unprivileged, local user to trigger a system panic and potential privilege e...

CVE-2017-2634

CVE-2017-2634 affects the Linux kernel DCCP implementation prior to 2.6.22.17, where the IPv4-only inet_sk_rebuild_header() function was used for both IPv4 and IPv6 DCCP connections. This can result in memory corruptions and allows a remote attacker to crash the system. Connected advisories confi...

CVE-2018-14611

CVE-2018-14611 affects the Linux kernel up to version 4.17.10. The vulnerability is a use-after-free in try_merge_free_space() when mounting a crafted Btrfs image, caused by missing chunk type flag checks in fs/btrfs/volumes.c via btrfs_check_chunk_valid . In the provided connected documents, Nes...

CVE-2021-20219

CVE-2021-20219: Linux kernel DoS in n_tty_receive_char_special (drivers/tty/n_tty.c). Local attacker with unprivileged user can delay the loop (ldata->read_head changes) due to a missing sanity check, impacting availability. The initial doc does not specify affected kernel versions, patches, o...

CVE-2021-47162

CVE-2021-47162 summary (Linux kernel TIPC): The issue in tipc_bufAppend() could cause use-after-free crashes when a frag skb is appended to a frag_list that is shared by multiple skbs. The fix linearizes the head skb (skb_linearize) before skb_unshare() to ensure the appended fragment is only see...

CVE-2021-47177

CVE-2021-47177 is a kernel-level issue in the Linux IOMMU VT-d subsystem where iommu_device_sysfs_add() leaked sysfs state on error. The published description and connected advisories state that the leak occurs in alloc_iommu() and that the sysfs entry must be cleaned on subsequent errors; a fix ...

CVE-2022-1678

CVE-2022-1678 affects Linux kernel 4.18–4.19, with memory/netns leaks due to improper sock reference handling in TCP pacing. Public Nessus/Unity advisories confirm the issue and reference kernel commits addressing the vulnerability; exploitation is described as remote via TCP pacing. Mitigation/r...

CVE-2022-48951

The CVE-2022-48951 vulnerability is in the Linux kernel ASoC path: snd_soc_put_volsw_sx() does bounds checks only for the first channel, allowing potential out-of-bounds writes to the second channel in stereo controls. This is fixed upstream by adding proper checks (e.g., kernel commits cf611d......

CVE-2022-49311

CVE-2022-49311 concerns a deadlock in the Linux kernel driver rtl8192bs (rtw_joinbss_event_prehandle) where a timer deletion under a spin_lock_bh caused a timer handler to wait on the same lock. The issue manifested as two threads blocking each other, risking an infinite hang. The documented fix ...

CVE-2022-49564

CVE-2022-49564 affects the Linux kernel crypto/qat DH path. The vulnerability arises when copying a source scatterlist into a linear buffer, where a source buffer larger than the key size could trigger an integer underflow. The fix adds parameter checks for DH and rejects such requests, mitigatin...

CVE-2022-49921

CVE-2022-49921 has concrete details in connected sources: the Linux kernel vulnerability is a use-after-free in net_sched (red_enqueue) where skb must not be reused after qdisc_enqueue() is called. The tied OpenVAS/NASL entries corroborate the fix as part of the kernel scheduling code, linking to...

CVE-2023-38429

The CVE-2023-38429 issue is reported in the Linux kernel (pre-6.3.4) within ksmbd: fs/ksmbd/connection.c contains an off-by-one error in memory allocation (ksmbd_smb2_check_message), which can cause out-of-bounds access. Connected advisories (Astra Linux, Nessus plugin references) corroborate the...

CVE-2023-4611

CVE-2023-4611 is a use-after-free in the Linux kernel memory subsystem (mm/mempolicy.c) caused by a race between mbind() and VMA-locked page fault. The vulnerability could allow a local attacker to crash the system or leak kernel information. Connected sources confirm the affected component and t...

CVE-2023-52561

CVE-2023-52561 : Linux kernel (arm64) vulnerability affecting DB845c boards with Qualcomm sdm845-db845c DTs. The issue stems from not reserving the cont splash memory region (framebuffer memory used by the bootloader), which could trigger a kernel panic (arm-smmu: Unhandled context fault) on v5.1...

CVE-2023-52657

The CVE-2023-52657 entry centers on a Linux kernel revert in the AMD DRM subsystem (drm/amd/pm: resolve reboot exception for si oland), specifically reverting commit e490d60a2f76bff636c68ce4fe34c1b6c34bbd86. Public references describe that this change causes hangs on SI when DC is enabled and int...

CVE-2023-52789

CVE-2023-52789 : In the Linux kernel, the vulnerability affects the tty/vcc path (vcc_probe). The root cause is failure to check the return value of kstrdup(), risking a NULL pointer dereference. The fix adds a check for kstrdup() and returns an error if it fails. This resolves the issue by preve...

CVE-2023-53090

CVE-2023-53090 affects the Linux kernel DRM/AMDKFD component (kfd_wait_on_events). The vulnerability arises because the kfd_event_waiter structure allocated by alloc_event_waiters() does not initialize its event field. If copy_from_user() fails in kfd_wait_on_events(), the code frees the previous...

CVE-2023-53120

CVE-2023-53120 relates to the Linux kernel SCSI mpi3mr driver: a DMA memory leak in the config page, addressed by fixes that ensure pending DMA allocations are freed when the device is released. The root cause involves DMA memory not being properly released, with patches referenced in stable kern...

CVE-2024-35829

CVE-2024-35829 affects the Linux kernel DRM Lima heap allocator. The issue is a memleak in lima_heap_alloc where, if lima_vm_map_bo fails, allocated resources were not properly deallocated, leading to memory leaks. Connected advisories (Astra Linux, Unity Nessus entry) confirm the same root cause...

CVE-2024-35860

CVE-2024-35860 : Linux kernel vulnerability in deferring bpf_link deallocation to after RCU grace period. When a bpf_link’s refcnt drops to zero, some active BPF programs could still access the link data via context, risking data access. The patch introduces two deallocation callbacks (synchronou...

CVE-2024-35885

Mode CThe CVE affects the mlxbf_gige Linux kernel driver. The issue is a NULL pointer dereference during shutdown in mlxbf_gige_handle_tx_complete, leading to kernel Oops and a fatal interrupt (kernel panic). It can leave NAPI enabled and the network interface in an inconsistent state if stop() i...

CVE-2024-35936

CVE-2024-35936. In the Linux kernel, the btrfs relocation code (btrfs_relocate_sys_chunks) contains an unhandled corruption case in its chunk-tree lookup loop. The issue arises from two theoretically impossible conditions: (1) an inexact search yields a key with offset -1 for a chunk-tree item, a...

CVE-2024-36925

CVE-2024-36925 affects the Linux kernel SWIOTLB path. When CONFIG_DMA_RESTRICTED_POOL=y and CONFIG_SWIOTLB_DYNAMIC=y, initialising restricted pool memory could crash due to a NULL mem->pools during add_mem_pool() in rmem_swiotlb_device_init(). The crash arises from a NULL pointer dereference i...

CVE-2024-38664

CVE-2024-38664 affects the Linux kernel driver path for ZynqMP DP: the drm/zy nqmp bridge initialization could trigger a lockdep warning due to zynqmp_dp_hpd_work_func calling drm_bridge_hpd_notify before the hpd_mutex is initialized. The fix ensures the DRM bridge is always registered prior to z...

CVE-2024-40908

The CVE-2024-40908 issue affects the Linux kernel in the bpf component, specifically the rawtp test_run callback. The root cause is that the run context (task->bpf_ctx) was not properly set for the test_run callback, which SYZBOT reported could crash when a rawtp program called bpf_get_attach_...

CVE-2024-42295

CVE-2024-42295 — Linux kernel nilfs2 issue : Syzbot detected a buffer state inconsistency in nilfs_btnode_create_block that could occur when the argument block address is a virtual block number reallocated due to bitmap corruption. The patch changes nilfs_btnode_create_block() and its callers to ...

CVE-2024-43837

CVE-2024-43837 (Linux kernel): The vulnerability is a null pointer dereference in BPF EXT program type resolution when dst_prog is not attached. The fix, as described in the primary document, changes resolve_prog_type() to return prog->type for BPF_PROG_TYPE_EXT when dst_prog is absent, instea...

CVE-2024-43841

CVE-2024-43841 affects the Linux kernel wifi/virt_wifi path. The vulnerability allowed a reported successful connection to be reported even when the SSID from user space differed from what virt_wifi advertised, because the SSID was not checked (only BSSID was validated). A fix was implemented in ...

CVE-2024-44963

CVE-2024-44963 — Linux kernel (btrfs): The issue occurs in btrfs_free_tree_block() when freeing a tree block and an error occurs creating a delayed reference. Instead of handling the error, a BUG_ON() could trigger, causing space leakage if memory allocation fails or other errors propagate via bt...

CVE-2024-46717

CVE-2024-46717 relates to the Linux kernel mlx5e SHAMPO header handling. The bug caused SHAMPO header pages to be released more than once when a data page was used for a non-SHAMPO header, due to releasing a SHAMPO header page from header_index after a non-header data page was formed into a new s...

CVE-2024-46730

CVE-2024-46730 affects the Linux kernel’s drm/amd/display path. The issue arises when an array index tg_inst could be -1 if timing_generator_count equals 0, allowing an overrun to occur. The description in the connected documents confirms the root cause and states that this fix prevents negative ...

CVE-2024-46738

CVE-2024-46738 affects the Linux kernel VMCI subsystem. A use-after-free occurs in vmci_resource_remove() when removing a resource from vmci_resource_table if two resources share the same handle (same context and resource fields) but differ by type; the code previously could free the wrong object...

CVE-2024-46832

CVE-2024-46832 involves the Linux kernel, specifically the MIPS cevt-r4k path. The issue arose when get_c0_compare_int was called if a timer IRQ was installed, which could trigger a WARN/BUG: sleeping function called from invalid context on secondary CPU. The patch changes the flow to avoid calli...

CVE-2024-47663

Technical details about CVE-2024-47663 are not provided in the supplied documents. The entries summarize a kernel fix in ad9834 frequency handling but do not include vendor/product specifics or patch details. Monitor for updates.

CVE-2024-49864

CVE-2024-49864: The IBM Netezza IBM appliance advisory notes that the Linux kernel vulnerability “rxrpc: Fix a race between socket set up and I/O thread creation” has been addressed. The issue was a race between rxrpc_open_socket() establishing the socket and creating the I/O thread, where a UDP ...

CVE-2024-49865

CVE-2024-49865 affects the Linux kernel’s DRM XE VM code. The root cause is a use-after-free risk caused by the timing of allocating VM IDs with xa_alloc, which allowed an Evil user to guess the next VM id before vm destroy/ioctl completes, potentially exposing references to the same VM that is s...

CVE-2024-49916

CVE-2024-49916 affects the Linux kernel’s drm/amd/display code (dcn401_init_hw). The root cause is a potential null pointer dereference when dc->clk_mgr or dc->clk_mgr->funcs is null. The fix adds explicit null checks before dereferencing clk_mgr/clk_mgr->funcs, preventing dereference...

CVE-2024-49972

CVE-2024-49972 affects the Linux kernel DRM-AMD display path. The issue arises when creating DML memory during DC state changes: if the DML memory allocation fails, previously allocated memory was not deallocated, leaving an uninitialized, non-NULL structure. The documented fix deallocates the me...

CVE-2024-50206

CVE-2024-50206 affects the Linux kernel MTK Ethernet driver (drivers/net/ethernet/mediatek/mtk_eth_soc.c). The vulnerability is in mtk_init_fq_dma(), where a loop allocated up to MTK_FQ_DMA_LENGTH descriptors may touch more descriptors than exist, causing memory corruption. The fix adjusts the lo...

CVE-2024-53167

CVE-2024-53167 affects the Linux kernel NFS client’s blocklayout path. The issue arises during unmount of a pNFS SCSI layout when a NULL block_device is dereferenced due to premature PR key unregistration; the code may unregister a device when none is attached. The root cause is a failure to guar...