CVE-2023-52884

The Linux kernel contains a vulnerability in the cyapa input driver where missing input core locking during suspend/resume functions causes a system warning. The root cause is the failure to grab the input->mutex during these cycles, specifically affecting Samsung Exynos5250-based Snow Chromeb...

CVE-2023-52916

CVE-2023-52916 affects the Linux kernel’s media: aspeed driver. When displaying 1600x900 and memory is tight, the macro block capture can cause a system crash due to a memory overwrite; the issue is tied to an 8x8 block sizing, fixed by aligning the src-buf height to 8. The CVSS v3.1 base score i...

CVE-2023-53000

CVE-2023-53000 is a Linux kernel vulnerability affecting the netlink attribute handling. The issue arises when the netlink attribute type (nla_type) is used as an index after validation, enabling a possible Spectre v1 gadget to leak kernel memory to a local attacker. The public description notes ...

CVE-2023-53065

CVE-2023-53065 is a Linux kernel vulnerability in perf/core where perf_output_begin was invoked with an incorrect parameter in perf_event_bpf_output. Syzkaller reported a KASAN stack-out-of-bounds issue, traced through __perf_event_header__init_id, causing memory overwrites. The root cause is the...

CVE-2023-53090

CVE-2023-53090 affects the Linux kernel DRM/AMDKFD component (kfd_wait_on_events). The vulnerability arises because the kfd_event_waiter structure allocated by alloc_event_waiters() does not initialize its event field. If copy_from_user() fails in kfd_wait_on_events(), the code frees the previous...

CVE-2024-35825

Summary (CVE-2024-35825) : The issue in the Linux kernel USB gadget for CDC NCM NTB handling occurs when a zero wBlockLength is encountered. The code’s previous logic could repeatedly process the same NTB if block length is zero, risking a crash. The connected Astra Linux advisory confirms this v...

CVE-2024-35829

In the Linux kernel, the following vulnerability has been resolved: drm/lima: fix a memleak in lima_heap_alloc When lima_vm_map_bo fails, the resources need to be deallocated, orthere will be memleaks.

CVE-2024-36019

CVE-2024-36019 has concrete Linux kernel details in the connected document set: the issue is in the Linux kernel regmap maple driver, where cache corruption occurred due to indexing regcache_maple_entry[] by the register address instead of the required offset when preserving the upper end of a ca...

CVE-2024-36021

CVE-2024-36021 affects the Linux kernel net driver for hns3, causing a kernel crash when a devlink reload occurs during PF initialization. The root cause is devlink reload accessing hardware resources before the hardware is initialized. A patch fixes this by taking devl_lock during initialization...

CVE-2024-36032

CVE-2024-36032 relates to the Linux kernel Bluetooth QCA driver: a fix for an info leak when fetching the fw build ID. The patch adds missing sanity checks and moves the 255-byte build-id buffer off the stack to prevent leaking stack data through debugfs if the build-info reply is malformed. Astr...

CVE-2024-38664

CVE-2024-38664 affects the Linux kernel driver path for ZynqMP DP: the drm/zy nqmp bridge initialization could trigger a lockdep warning due to zynqmp_dp_hpd_work_func calling drm_bridge_hpd_notify before the hpd_mutex is initialized. The fix ensures the DRM bridge is always registered prior to z...

CVE-2024-40909

CVE-2024-40909 is a Linux kernel vulnerability resolved in the bpf subsystem. After commit 1a80dbcb2dba, a race could cause a use-after-free when bpf_link is freed by link->ops->dealloc_deferred but the code still tests and uses link->ops->dealloc afterward. The fix ensures only one o...

CVE-2024-41078

CVE-2024-41078 (Linux kernel, btrfs qgroup) fixes a quota root leak that occurs if quota disable cleanup fails, leaking the quota root via fs_info->quota_root. The root cause is a missing btrfs_put_root() on the out path when dropping quota root references; a NULL assignment previously happene...

CVE-2024-42095

CVE-2024-42095 affects the Linux kernel component serial: 8250_omap, implementing Errata i2310. The issue allows an erroneous timeout that, if not cleared, can trigger a storm of interrupts per TI’s Errata i2310 (TI TI sprz536, page 23). Public records in connected sources consistently cite imple...

CVE-2024-43841

CVE-2024-43841 affects the Linux kernel wifi/virt_wifi path. The vulnerability allowed a reported successful connection to be reported even when the SSID from user space differed from what virt_wifi advertised, because the SSID was not checked (only BSSID was validated). A fix was implemented in ...

CVE-2024-46680

In CVE-2024-46680, the Linux kernel Bluetooth btnxpuart driver can crash when the driver is removed because ps_wakeup() schedules work after module removal. The fix introduces ps_cleanup() to deassert UART break immediately on serdev close, cancel any scheduled work, and destroy the ps_lock mutex...

CVE-2024-46719

CVE-2024-46719 (Linux kernel) addresses a NULL pointer dereference in the USB Type-C UCSI code. The root cause is that ucsi_register_altmode considers NULL a valid alt pointer and, when CONFIG_TYPEC_DP_ALTMODE is disabled, ucsi_register_displayport can return NULL, leading to a NULL pointer deref...

CVE-2024-46738

CVE-2024-46738 affects the Linux kernel VMCI subsystem. A use-after-free occurs in vmci_resource_remove() when removing a resource from vmci_resource_table if two resources share the same handle (same context and resource fields) but differ by type; the code previously could free the wrong object...

CVE-2024-47663

Technical details about CVE-2024-47663 are not provided in the supplied documents. The entries summarize a kernel fix in ad9834 frequency handling but do not include vendor/product specifics or patch details. Monitor for updates.

CVE-2024-47686

The CVE-2024-47686 item concerns a Linux kernel vulnerability in the ep93xx clock driver. The root cause is an off-by-one in ep93xx_div_recalc_rate() where the psc->div[] array length (psc->num_div) did not correctly guard reads; the condition must be >= rather than > to prevent an ou...

CVE-2024-49857

CVE-2024-49857 affects the Linux kernel WiFi stack (iwlwifi, mvm) where the cipher pointer is dereferenced without being initialized, causing a NULL pointer dereference. The vulnerability is fixed by setting the cipher parameter before dereferencing, thereby preventing the crash/possible impact d...

CVE-2024-49926

CVE-2024-49926 affects the Linux kernel’s rcu-tasks path (rcu_tasks_need_gpcb). The root cause is an access to a non-existent percpu rtpcp variable when CONFIG_FORCE_NR_CPUS=y, causing nr_cpu_ids to resolve to NR_CPUS instead of the number of possible CPUs, which can lead to a kernel page fault a...

CVE-2024-50000

CVE-2024-50000 affects the Linux kernel mlx5e driver: in mlx5e_tir_builder_alloc(), kvzalloc() may return NULL and the code dereferences it, causing a NULL pointer dereference. The vulnerability is fixed by the upstream patch in the Linux kernel; remediation is to upgrade to a version containing ...

CVE-2024-53167

CVE-2024-53167 affects the Linux kernel NFS client’s blocklayout path. The issue arises during unmount of a pNFS SCSI layout when a NULL block_device is dereferenced due to premature PR key unregistration; the code may unregister a device when none is attached. The root cause is a failure to guar...

CVE-2024-54458

The CVE-2024-54458 issue is in the Linux kernel, involving the SCSI/ufs subsystem (bsg path). The root cause is not fully described beyond the fix: after removing the bsg_queue, it should be set to NULL to avoid potential use-after-free (UAF). The advisory states this vulnerability has been resol...

CVE-2024-56537

Technical details for CVE-2024-56537 are not publicly available in the provided documents. No vendor/product specifics or remediation are given here. Monitor for official advisories and patch notes for affected kernel components.

CVE-2024-56563

CVE-2024-56563 corresponds to a Linux kernel exposure in Ceph’s MDS access check. The vulnerability arises in ceph_mds_check_access() where get_current_cred() increments the credentials reference count but a corresponding put_cred() may be missing, enabling a potential credential leak. The connec...

CVE-2024-56617

CVE-2024-56617 affects the Linux kernel cacheinfo handling during CPU hotplug. The root cause is potential NULL dereference in last_level_cache_is_valid when cacheinfo memory was not allocated (x86 does not use early build); a patch sequence allocates cacheinfo memory during hotplug when not done...

CVE-2024-56702

The CVE-2024-56702 issue is a Linux kernel fix for BPF raw tracepoints. It explains that raw_tp arguments were previously treated as non-NULL, risking NULL dereferences when NULL values occur. The fix marks raw_tp arguments as PTR_MAYBE_NULL and adjusts dereferences, arithmetic, and allowed passe...

CVE-2025-21725

CVE-2025-21725 Affects the Linux kernel SMB/CIFS client. The issue occurs when NETWORK_INTERFACE_INFO::LinkSpeed is not set, which can trigger an oops/divide error in cifs_debug_data_proc_show. The patch fixes this by initializing cifs_server_iface::speed to a sane default of 1 Gbps when the link...

CVE-2025-21732

CVE-2025-21732 pertains to the Linux kernel RDMA mlx5 path. It describes a race in the ODP MR handling where, during __mlx5_ib_dereg_mr(), a concurrent mlx5_ib_invalidate_range() can invalidate a freed lkey, triggering a CQE error and potentially placing the UMR QP in an error state. The disclose...

CVE-2025-21790

CVE-2025-21790 fixes a kernel-space issue in the vxlan code. The vulnerable path is in vxlan_vnigroup_init() not being checked by vxlan_init(), which can lead to a NULL dereference or general protection fault later when vxlan_dev is created/unregistered (local attacker with access to the kernel c...

CVE-2025-21815

CVE-2025-21815 affects the Linux kernel, specifically the memory management path in mm/compaction (isolate_freepages_block). The issue stems from a UBSAN shift-out-of-bounds warning caused by (1UL <

CVE-2025-21960

CVE-2025-21960 is addressed in the TencentOS Server 4 kernel advisory (TSSA-2025:0348). The issue is in nbd reconnect handling after disconnect, potentially enabling a use-after-free via recv_work when nbd_config is freed. The advisory states the root cause: in nbd_genl_disconnect(), NBD_RT_BOUND...

CVE-2025-21970

CVE-2025-21970 affects the Linux kernel mlx5 bridge implementation (net/mlx5) where removing a LAG device from a bridge can crash the system. The root cause is a sequence where, during NETDEV_CHANGEUPPER, the driver checks mlx5_lag_is_shared_fdb and may call mlx5_esw_bridge_lag_rep_get() which re...

CVE-2025-21980

The CVE-2025-21980 entry concerns the Linux kernel GRED scheduler. It covers a potential NULL pointer dereference when kzalloc in gred_init returns NULL and the error path leads to gred_destroy, which calls gred_offload and may pass a NULL pointer to memset, potentially crashing the kernel. The i...

CVE-2025-22061

CVE-2025-22061 concerns the Linux kernel’s airoha Ethernet driver (airoha_eth) and the function airoha_tc_get_htb_get_leaf_queue() . Connected advisories explicitly state the root cause as a fix to the qid reporting in that routine, addressing kernel warnings when deleting HTB offloaded qdiscs. T...

CVE-2025-23137

CVE-2025-23137: A NULL pointer dereference in Linux kernel cpufreq/amd-pstate during amd_pstate_update has been fixed by adding a NULL check for policy before dereferencing. This resolves a local-privilege scenario with a MEDIUM base score (CVSS v3.1: AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H). The con...

CVE-2025-23140

CVE-2025-23140 affects the Linux kernel PCI Endpoint Test driver. The issue arose when devm_request_irq() failed in pci_endpoint_test_request_irq(): some IRQs were not released, leaving /proc/irq entries and triggering a WARN in fs/proc/generic.c (remove_proc_entry). The root cause is that pci_en...

CVE-2025-37811

CVE-2025-37811 is a Linux kernel vulnerability in the USB chipidea ci_hdrc_imx driver. The root cause is an unsafe dereference of data->usbmisc_data when usbmisc is NULL; the fix adds a guard before dereferencing the pointer. Reported under CVSSv3.1: AV Local, AC Low, PR Low, UI None, S U, C a...

CVE-2025-37903

The CVE-2025-37903 issue affects the Linux kernel DRM/AMD display path (drm/amd/display) in the amdgpu_dm_hdcp.c handling. The root cause is that the HDCP code copies pointers to amdgpu_dm_connector objects without incrementing their kref reference counts. In a USB‑C dock scenario, unplugging fre...

CVE-2025-37968

CVE-2025-37968 (Linux kernel) affects the iio: light: opt3001 driver. The issue is a deadlock in a threaded IRQ path caused by reading the same flag twice (once for mutex_lock, once for mutex_unlock). The fix standardizes the flag handling by reading it into a local variable and reusing that valu...

CVE-2025-37989

Technical details about CVE-2025-37989 are not publicly provided in the connected documents. Monitor for updates from official advisories; the current sources do not reveal affected products, versions, impact, or fixes beyond the description.

CVE-2025-38234

CVE-2025-38234 affects the Linux kernel scheduler, specifically a race in sched/rt: push_rt_task that can mishandle task migration when waking up and queuing on another CPU’s runqueue. The root cause involves find_lock_lowest_rq taking double locks and potential lock drop/reacquisition, creating ...

CVE-2025-39930

The CVE-2025-39930 entry concerns the Linux kernel ASoC simple-card-utils. The root cause is the premature __free of device_node in graph_util_parse_dai(), which could free a node still in use. The correction is to stop freeing __free(device_node) in graph_util_parse_dai() and to retain freeing b...

CVE-2026-53016

Summary of CVE-2026-53016 (Linux kernel): The vulnerability exists in the crypto CCP driver when handling AF_ALG rfc3686-ctr-aes-ccp requests. The function ccp_aes_complete() restores AES_BLOCK_SIZE bytes into the caller’s IV buffer, but RFC3686 skciphers expose an 8-byte IV, leading to a buffer ...

CVE-2009-3228

The CVE-2009-3228 issue concerns the Linux kernel tc subsystem (net/sched/sch_api.c: tc_fill_tclass). In Linux kernel 2.4.x before 2.4.37.6 and 2.6.x before 2.6.31-rc9, certain structure members (tcm__pad1, tcm__pad2) are not initialized, which could allow local users to read sensitive data from ...

CVE-2010-2495

CVE-2010-2495 affects the Linux kernel’s L2TP implementation (pppol2tp.c). The vulnerability arises from improper validation of certain interface-related values in pppol2tp_xmit, enabling a NULL pointer dereference and an OOPs that can cause a denial of service via routing-change vectors. The iss...

CVE-2010-2524

CVE-2010-2524 affects the Linux kernel CIFS DNS upcall: when CONFIG_CIFS_DFS_UPCALL is enabled, DNS resolution relies on a user keyring via the dns_resolver upcall in the cifs.upcall userspace helper. This allows local privileged or nearby users to spoof DNS query results and mount arbitrary CIFS...

CVE-2010-3877

The CVE-2010-3877 issue affects the Linux kernel (as cited in MiracleLinux AXSA:2011-143:02 and related advisories) where get_name in net/tipc/socket.c does not initialize a structure, enabling local attackers to read uninitialized kernel stack memory and leak information. Impact is a local infor...