CVE-2024-38664

CVE-2024-38664 affects the Linux kernel driver path for ZynqMP DP: the drm/zy nqmp bridge initialization could trigger a lockdep warning due to zynqmp_dp_hpd_work_func calling drm_bridge_hpd_notify before the hpd_mutex is initialized. The fix ensures the DRM bridge is always registered prior to z...

CVE-2023-52657

The CVE-2023-52657 entry centers on a Linux kernel revert in the AMD DRM subsystem (drm/amd/pm: resolve reboot exception for si oland), specifically reverting commit e490d60a2f76bff636c68ce4fe34c1b6c34bbd86. Public references describe that this change causes hangs on SI when DC is enabled and int...

CVE-2023-53126

The CVE-2023-53126 entry concerns the Linux kernel mpi3mr SCSI driver: a memory leak in sas_hba.phy within mpi3mr_remove() is fixed, specifically freeing mrioc->sas_hba.phy at .remove. The vulnerability affects the kernel's SCSI MPI3MR path and was addressed by the fix; no exploit details are ...

CVE-2024-27050

CVE-2024-27050 relates to Linux kernel/libbpf where bpf_xdp_query_opts gained feature_flags and xdp_zc_max_segs. The vulnerability arises because the code wrote these fields without using the OPTS_SET() macro, risking unbounded/staked writes when programs built against older, smaller libbpf struc...

CVE-2024-35829

CVE-2024-35829 affects the Linux kernel DRM Lima heap allocator. The issue is a memleak in lima_heap_alloc where, if lima_vm_map_bo fails, allocated resources were not properly deallocated, leading to memory leaks. Connected advisories (Astra Linux, Unity Nessus entry) confirm the same root cause...

CVE-2024-36478

CVE-2024-36478 affects the Linux kernel null_blk driver. The issue is a NULL pointer dereference that occurs when power and submit_queues are configured concurrently, leading to a kernel panic via a race between del_gendisk and NR HW queue updates. The fixes consolidate protection by reusing a gl...

CVE-2024-36898

CVE-2024-36898 affects Linux kernel gpiolib: cdev. The issue is an uninitialised kfifo when software debounce is active and edge-detection is re-enabled, causing events to be written/read from an uninitialised queue. The published fix initializes the kfifo in the debounce-active path. Connected a...

CVE-2024-38591

CVE-2024-38591 affects the Linux kernel RDMA/hns driver. The issue is a deadlock in SRQ handling during asynchronous events: xa_lock for the SRQ table may be required in AEQ, and the patch uses xa_store_irq() / xa_erase_irq() to avoid deadlock. Documentation confirms the vulnerability is resolved...

CVE-2024-42126

CVE-2024-42126 pertains to the Linux kernel on powerpc where nmi_enter/nmi_exit can touch per-CPU state and crash the kernel when invoked during real-mode interrupt handling if percpu allocations come from the vmalloc area. The issue manifests under CONFIG_NEED_PER_CPU_PAGE_FIRST_CHUNK with percp...

CVE-2024-42129

CVE-2024-42129 – Linux kernel (mlxreg LED driver) : The vulnerability arose because leds: mlxreg registered LEDs with devm_led_classdev_register(), but led_classdev_unregister() invoked a brightness callback that used a mutex already destroyed during module removal. The fix uses the devm API for ...

CVE-2024-42147

CVE-2024-42147 affects the Linux kernel crypto: hisilicon/debugfs path. During zip probe, debugfs initialization failure could cause the error branch to release_regs, and the regs uninitialization could release multiple times. The root cause is an uninitialized regs path when debugfs init fails, ...

CVE-2024-43894

CVE-2024-43894 — kernel DRM NULL-deref fix : In the Linux kernel drm/client path, the function drm_client_modeset_probe can dereference a NULL after drm_mode_duplicate() fails because the returned pointer is assigned directly to modeset->mode. The patch adds a safety check to avoid NULL pointe...

CVE-2024-50020

CVE-2024-50020 (Linux kernel) affects the ice driver’s refcount handling in ice_sriov_set_msix_vec_count(). The issue: vf pointer reference counts were leaked if ice_get_vf_by_id() succeeds but ice_get_vf_vsi() fails, or if vf->first_vector_idx

CVE-2024-53086

Technical details about CVE-2024-53086 are not publicly provided in the supplied documents. Please monitor for updates from kernel commits and vendor advisories to obtain affected products, vulnerable components, and remediation.

CVE-2024-56537

Technical details for CVE-2024-56537 are not publicly available in the provided documents. No vendor/product specifics or remediation are given here. Monitor for official advisories and patch notes for affected kernel components.

CVE-2024-56540

In CVE-2024-56540, the Linux kernel ivpu IPC path (drivers/accel/ivpu/ivpu_ipc.c) was refactored: ipc send/receive functions were adjusted to avoid triggering a recovery during probe/resume. ivpu_send_receive_internal() is now used by D0i3 entry, DCT init, and HW init, with updated functions retu...

CVE-2024-56702

The CVE-2024-56702 issue is a Linux kernel fix for BPF raw tracepoints. It explains that raw_tp arguments were previously treated as non-NULL, risking NULL dereferences when NULL values occur. The fix marks raw_tp arguments as PTR_MAYBE_NULL and adjusts dereferences, arithmetic, and allowed passe...

CVE-2024-57881

CVE-2024-57881 : In the Linux kernel, a bug in mm/page_alloc could call pfn_to_page() on a PFN that might not exist during split_large_buddy(). In corner cases, such as freeing the highest pageblock in the last memory section, CONFIG_SPARSEMEM && !CONFIG_SPARSEMEM_EXTREME could cause __pfn_to_sec...

CVE-2025-21734

Concrete details found for CVE-2025-21734 in connected documents: the Linux kernel fastrpc driver mishandles page size calculation for non-registered buffers by using absolute addresses instead of an offset-adjusted address, risking improper/out-of-bounds page sizes and memory issues. The fix is ...

CVE-2025-21743

CVE-2025-21743 affects the Linux kernel’s usbnet/ipheth handling. The vulnerability stems from an overflow in the DPE length check when wDatagramIndex + wDatagramLength could exceed U16_MAX, allowing an OoB read. The fix moves the wDatagramIndex term across the inequality, preserving the existing...

CVE-2025-21750

CVE-2025-21750 affects the Linux kernel wifi driver brcmfmac. The issue results from not validating the return value of of_property_read_string_index(), which can leave tmp uninitialized when a property is missing, leading to a kernel crash (BUG/OOPS) from passing a random pointer to devm_kstrdup...

CVE-2025-21875

CVE-2025-21875 affects the Linux kernel MPTCP PM path. Connected docs describe a lock-order flaw where the PM can send RM_ADDR notifications over a msk socket without first acquiring the msk socket lock, allowing concurrent access to the PM removal/address path. The bug path follows PM removal of...

CVE-2025-22030

CVE-2025-22030 involves a deadlock in the Linux kernel zswap path. The root cause: zswap_cpu_comp_dead() can call crypto_free_acomp() while holding the per-CPU acomp_ctx mutex, while crypto_free_acomp() may attempt to acquire scomp_lock via crypto_exit_scomp_ops_async(), and crypto_alloc_acomp_no...

CVE-2025-22085

CVE-2025-22085 affects the Linux kernel RDMA/core. The description documents a use-after-free (slab) in the netlink/name rename path, caused by a use-after-free in nla_put during device-name rename handling. The issue manifests as a slab-use-after-free Read in nla_put, traced through netlink/nlde...

CVE-2025-37775

CVE-2025-37775 affects the Linux kernel in the ksmbd component. The issue centers on a warning in __kernel_write_iter that could relate to directory write attempts; the patch stabilizes behavior by not allowing writes to directories, as described in the initial advisory. The vulnerability is addr...

CVE-2025-37793

CVE-2025-37793 affects the Linux kernel ASoC: Intel avs driver. The vulnerability arises when avs_component_probe() dereferences a NULL from devm_kasprintf() if memory allocation fails, leading to a NULL pointer dereference. A fix was implemented in the kernel to check for NULL from devm_kasprint...

CVE-2025-37989

Technical details about CVE-2025-37989 are not publicly provided in the connected documents. Monitor for updates from official advisories; the current sources do not reveal affected products, versions, impact, or fixes beyond the description.

CVE-2025-39778

Technical details about CVE-2025-39778 (affected product, impact, and fix specifics) are not provided in the connected documents. Monitor for official disclosures and vendor advisories for updates and patch information.

CVE-2004-0554

CVE-2004-0554 affects the Linux kernel (2.4.x and 2.6.x on x86). The root cause is a local-denial-of-service condition triggered by an infinite loop that abuses a sequence of fsave/frstor instructions in a signal handler (as demonstrated by crash.c). The practical impact is a system crash/DoS wit...

CVE-2009-3612

CVE-2009-3612 affects the Linux kernel’s net/sched/cls_api.c tcf_fill_node in the netlink subsystem. The issue is that a tcm__pad2 structure member is not initialized, potentially allowing local attackers to read sensitive kernel memory. Affected: kernel 2.6.x prior to 2.6.32-rc5 and 2.4.37.6 and...

CVE-2010-2492

CVE-2010-2492 affects the Linux kernel’s eCryptfs component: a buffer overflow in the ecryptfs_uid_hash macro (fs/ecryptfs/messaging.c) could allow local privilege escalation or a denial of service. The MiracleLinux AXSA advisory lists this CVE among kernel issues and specifies the flaw occurs in...

CVE-2010-4083

CVE-2010-4083 affects the Linux kernel (pre-2.6.36). The vulnerable code path is copy_semid_to_user() in ipc/sem.c, where a structure is not initialized, enabling local attackers to leak kernel stack memory via semctl commands (IPC_INFO, SEM_INFO, IPC_STAT, SEM_STAT). The issue is mitigated by up...

CVE-2010-4668

CVE-2010-4668 affects the Linux kernel up to 2.6.37-rc7, where blk_rq_map_user_iov in block/blk-map.c allows a local user to trigger a panic/DoS via a zero-length I/O request to a SCSI device, due to an unaligned map. The vulnerability is tied to an incomplete fix for CVE-2010-4163. Affected vers...

CVE-2011-1017

CVE-2011-1017 relates to a heap-based buffer overflow in the Linux kernel’s LDM code path. Affected component: fs/partitions/ldm.c (ldm_frag_add) in kernel 2.6.37.2 and earlier. Root cause cited in connected docs: bugs in evaluating LDM partitions could crash the kernel for certain corrupted LDM ...

CVE-2011-1044

CVE-2011-1044 affects the Linux kernel (pre-2.6.37) and is caused by ib_uverbs_poll_cq in drivers/infiniband/core/uverbs_cmd.c not initializing a certain response buffer. This allows local attackers to read potentially sensitive data from kernel memory via vectors that fill the buffer only partia...

CVE-2011-2498

CVE-2011-2498 affects the Linux kernel: versions prior to 2.6.39 allow local unprivileged users to trigger creation of PTE pages, causing memory consumption and a denial of service. The issue is rooted in how PTE pages are accounted for during OOM scoring. Public disclosures reference Ubuntu, SUS...

CVE-2012-1097

CVE-2012-1097 affects the Linux kernel before 3.2.10, where the regset (register set) path mishandles absence of .get/.set methods. This can allow a local attacker to trigger a NULL pointer dereference via PTRACE_GETREGSET or PTRACE_SETREGSET, possibly causing denial of service or other impact. R...

CVE-2012-2313

The CVE-2012-2313 issue affects the Linux kernel up to version 3.3.7, where rio_ioctl in drivers/net/ethernet/dlink/dl2k.c does not restrict access to the SIOCSMIIREG ioctl. This allows local attackers to write data to an Ethernet adapter via an ioctl call. The vulnerability is rooted in insuffic...

CVE-2013-6368

CVE-2013-6368 affects the KVM subsystem in the Linux kernel up to version 3.12.5, enabling local users to gain privileges or trigger a denial of service (system crash) via a VAPIC synchronization operation involving a page-end address. The connected advisories for MiracleLinux, Unity Linux, and E...

CVE-2013-7265

CVE-2013-7265 affects the Linux kernel; the pn_recvmsg function in net/phonet/datagram.c updates a length value before the associated data structure is initialized, enabling local users to read sensitive kernel stack memory via recvfrom/recvmmsg/recvmsg calls. Impact is a local information leak. ...

CVE-2014-4655

CVE-2014-4655 affects the Linux kernel ALSA control path: snd_ctl_elem_add in sound/core/control.c does not correctly maintain user_ctl_count, enabling a local DoS via a large number of SNDRV_CTL_IOCTL_ELEM_REPLACE calls to /dev/snd/controlCX. Affected: Linux kernel prior to 3.15.2 (ALSA control ...

CVE-2015-2042

CVE-2015-2042 affects the Linux kernel (pre-3.19). The vulnerability lies in net/rds/sysctl.c where an incorrect data type in a sysctl table can allow local users to read potentially sensitive kernel memory via a sysctl entry, with unspecified other impact. Affected products include kernel builds...

CVE-2015-8944

CVE-2015-8944 concerns the Linux kernel up to version 4.7 (as used in Android on Nexus 6/7 devices before 2016-08-05). The ioresources_init function in kernel/resource.c uses weak permissions for /proc/iomem, allowing local users to read this file and obtain sensitive information. The description...

CVE-2016-2547

The CVE-2016-2547 issue affects Linux kernel sound/core/timer.c prior to 4.4.1. The root cause is a locking approach that ignores slave timer instances, enabling a local attacker to trigger a denial-of-service via a crafted ioctl (race condition/use-after-free leading to system crash). Public adv...

CVE-2017-16528

CVE-2017-16528 affects the Linux kernel: sound/core/seq_device.c prior to version 4.13.4. A crafted USB device can trigger a use-after-free in snd_rawmidi_dev_seq_free , causing local DoS and potential system crash. Impact is described as high for confidentiality, integrity, and availability in t...

CVE-2017-5549

CVE-2017-5549 affects the Linux kernel prior to 4.9.5. The vulnerability exists in klsi_105_get_line_state (drivers/usb/serial/kl5kusb105.c) where, on a failure to read the line status, uninitialized heap memory contents are placed into a log entry. This can allow a local attacker to read sensiti...

CVE-2021-47177

CVE-2021-47177 is a kernel-level issue in the Linux IOMMU VT-d subsystem where iommu_device_sysfs_add() leaked sysfs state on error. The published description and connected advisories state that the leak occurs in alloc_iommu() and that the sysfs entry must be cleaned on subsequent errors; a fix ...

CVE-2022-3077

CVE-2022-3077 : A buffer overflow vulnerability in the Linux kernel Intel iSMT SMBus host controller driver, exposed via I2C_SMBUS (I2C_SMBUS_BLOCK_PROC_CALL) with malicious input. Local users can crash the system. Documents consistently reference this CVE in multiple advisories/plugins (e.g., Mi...

CVE-2022-48636

CVE-2022-48636 affects the Linux kernel, specifically the s390/dasd path. The issue is an Oops in dasd_alias_get_start_dev caused by a missing pavgroup dereference, created by a race: pavgroup can become NULL between function entry and _lcu_update(), when lcu->lock is not held. The patch fixes...

CVE-2022-48796

CVE-2022-48796 relates to the Linux kernel iommu path where use-after-free can occur during device probe. The issue arises when freeing dev->iommu in dev_iommu_free while a deferred_probe_work_func accesses dev->iommu->fwspec in of_iommu_configure, leading to a KASAN use-after-free. The ...