Lucene search
+L
LinuxLinux Kernel

14999 matches found

CVE
CVE
added 2024/05/17 1:27 p.m.138 views

CVE-2024-35825

Summary (CVE-2024-35825) : The issue in the Linux kernel USB gadget for CDC NCM NTB handling occurs when a zero wBlockLength is encountered. The code’s previous logic could repeatedly process the same NTB if block length is zero, risking a crash. The connected Astra Linux advisory confirms this v...

5.5CVSS6.6AI score0.00232EPSS
Save
CVE
CVE
added 2024/05/20 9:48 a.m.138 views

CVE-2024-36008

CVE-2024-36008 affects the Linux kernel; connected sources confirm a vulnerability in IPv4 path involving NULL idev handling in ip_route_use_hint() and a NULL-deref in fib_validate_source(). The issue arises in older trees and was addressed by ensuring __in_dev_get_rcu() results are checked for N...

5.5CVSS6.4AI score0.00214EPSS
Save
CVE
CVE
added 2024/07/12 12:20 p.m.138 views

CVE-2024-40909

CVE-2024-40909 is a Linux kernel vulnerability resolved in the bpf subsystem. After commit 1a80dbcb2dba, a race could cause a use-after-free when bpf_link is freed by link->ops->dealloc_deferred but the code still tests and uses link->ops->dealloc afterward. The fix ensures only one o...

7.8CVSS8.3AI score0.00278EPSS
Save
CVE
CVE
added 2024/07/12 12:25 p.m.138 views

CVE-2024-40935

CVE-2024-40935 affects the Linux kernel cachefiles subsystem. In ondemand mode, when the cache is marked as CACHEFILES_DEAD, cachefiles_daemon_write() returns -EIO, preventing the daemon from passing the copen to the kernel and causing a hung_task for the waiting process. The fix requires flushin...

7.8CVSS6.2AI score0.00259EPSS
Save
CVE
CVE
added 2024/07/29 2:31 p.m.138 views

CVE-2024-41034

CVE-2024-41034 : In the Linux kernel, the nilfs2 filesystem may fail during rename of a broken directory due to __block_write_begin_int() potentially triggering a BUG_ON when the parent reference entry ("..") is located beyond a folio/page boundary. The root cause is insufficient validation in ni...

7.8CVSS6.8AI score0.00323EPSS
Save
CVE
CVE
added 2024/07/30 7:46 a.m.138 views

CVE-2024-42106

CVE-2024-42106 : In the Linux kernel, the inet_diag path for raw sockets could read an uninitialized pad field in inet_diag_req_v2 when converting inet_diag_req to v2, leading to uninitialized reads in raw_lookup(). The root cause is that inet_diag_get_exact_compat() and inet_diag_dump_compat() d...

5.5CVSS6.1AI score0.00258EPSS
Save
CVE
CVE
added 2024/09/13 5:29 a.m.138 views

CVE-2024-46674

CVE-2024-46674 affects the Linux kernel USB/DWC3 ST platform path. The vulnerability stems from a probe error path that drops a platform device reference count due to an unused undo_platform_dev_alloc, causing unbalanced references and potential use-after-free when devm-managed resources are rele...

7.8CVSS7.3AI score0.00278EPSS
Save
CVE
CVE
added 2024/09/18 6:32 a.m.138 views

CVE-2024-46720

CVE-2024-46720 affects the Linux kernel; the issue is in the DRM AMDGPU path where a dereference after a null pointer check was fixed. The description from the initial document notes “drm/amdgpu: fix dereference after null check” and “check the pointer hive before use.” The connected Azure Linux ...

5.5CVSS6.1AI score0.00218EPSS
Save
CVE
CVE
added 2024/09/27 12:39 p.m.138 views

CVE-2024-46829

The CVE-2024-46829 entry affects the Linux kernel and concerns a deadlock condition in rtmutex handling. Root cause: rt_mutex_handle_deadlock() is invoked with rt_mutex::wait_lock still held; in the deadlock path this could lead to an endless scheduling loop while the lock remains held and trigge...

5.5CVSS5.8AI score0.00202EPSS
Save
CVE
CVE
added 2025/01/11 12:35 p.m.138 views

CVE-2024-46896

The CVE-2024-46896 vulnerability is in the Linux kernel DRM/AMDGPU path. It stems from a memset in drm_sched_job_init() that overwrites the initialized base.sched field in amdgpu_job_alloc, causing a CS validation path to be rejected with a bogus ring and potentially a crash. The fix passes NULL ...

5.5CVSS6.5AI score0.00218EPSS
Save
CVE
CVE
added 2024/10/21 6:01 p.m.138 views

CVE-2024-49887

CVE-2024-49887 targets the f2fs file system in the Linux kernel. Root cause: when injecting a fault for “no free segment,” the kernel could panic in __allocate_new_segment / get_new_segment, triggering a serious system halt. The description notes the issue was resolved by a fix that prevents pani...

5.5CVSS5.3AI score0.00262EPSS
Save
CVE
CVE
added 2024/10/21 6:53 p.m.138 views

CVE-2024-50005

CVE-2024-50005 affects the Linux kernel (mac802154) and is resolved by a fix in mac802154_scan_worker. The vulnerability arose from accessing scan_req->type after exiting the RCU read-side critical section, which can violate RCU rules and cause use-after-free or memory-access issues. The patch...

7.8CVSS7.2AI score0.00221EPSS
Save
CVE
CVE
added 2024/11/08 5:23 a.m.138 views

CVE-2024-50177

CVE-2024-50177 concerns the Linux kernel amdgpu display driver (DML2.1). The issue is a UBSAN shift-out-of-bounds triggered when programming phantom pipes and cursor_width is explicitly set to 0, causing an overflow in 32-bit size calculations. The published fix adds a guard to validate cursor wi...

5.5CVSS6.7AI score0.0019EPSS
Save
CVE
CVE
added 2024/11/08 5:24 a.m.138 views

CVE-2024-50178

Technical details (affected component, root cause, versions, or exploit status) are not provided in the connected documents; the initial description summarizes the fix but lacks vendor/product specifics in the supplied material. Monitor for authoritative advisories for updates.

5.5CVSS6.6AI score0.00192EPSS
Save
CVE
CVE
added 2024/12/27 2:23 p.m.138 views

CVE-2024-56563

CVE-2024-56563 corresponds to a Linux kernel exposure in Ceph’s MDS access check. The vulnerability arises in ceph_mds_check_access() where get_current_cred() increments the credentials reference count but a corresponding put_cred() may be missing, enabling a potential credential leak. The connec...

7.8CVSS6.5AI score0.00211EPSS
Save
CVE
CVE
added 2024/12/27 2:51 p.m.138 views

CVE-2024-56617

CVE-2024-56617 affects the Linux kernel cacheinfo handling during CPU hotplug. The root cause is potential NULL dereference in last_level_cache_is_valid when cacheinfo memory was not allocated (x86 does not use early build); a patch sequence allocates cacheinfo memory during hotplug when not done...

5.5CVSS6.3AI score0.00204EPSS
Save
CVE
CVE
added 2024/12/28 9:46 a.m.138 views

CVE-2024-56680

CVE-2024-56680 affects the Linux kernel. The issue stems from IPU6 interrupt handling on shared IRQ lines: when the IPU6 device is disabled, an IRQ can be triggered by another device and ISR_STATUS may read 0xffffffff, risking system hang. The kernel fix adds defensive checks to avoid suspending ...

5.5CVSS6.6AI score0.00254EPSS
Save
CVE
CVE
added 2024/12/28 9:46 a.m.138 views

CVE-2024-56684

CVE-2024-56684: In the Linux kernel, mailbox: mtk-cmdq had a wrong sizeof usage in cmdq_get_clocks() where a data pointer was passed to devm_kcalloc(); the allocation should be sizeof(struct clk_bulk_data). The patch fixes the allocation size, addressing a potential memory/overflow issue when con...

8.4CVSS6.5AI score0.00218EPSS
Save
CVE
CVE
added 2024/12/29 11:30 a.m.138 views

CVE-2024-56725

CVE-2024-56725 : In the Linux kernel, the octeontx2-pf driver (otx2_dcbnl.c) contained an unchecked error pointer after calling otx2_mbox_get_rsp, potentially leading to a NULL-pointer dereference if the function returned an error. The public description and connected Astra Linux bulletin confirm...

5.5CVSS6.5AI score0.00207EPSS
Save
CVE
CVE
added 2025/01/31 11:25 a.m.138 views

CVE-2025-21674

CVE-2025-21674 affects the Linux kernel mlx5e/mlx5_core with IPsec tunnel offload in tunnel mode. The issue caused a kernel panic due to two problems: (1) in SA add, the _bh() variant should be used when marking SA mode, and (2) an unnecessary flush_workqueue in SA delete routine. The failure is ...

5.5CVSS7AI score0.00175EPSS
Save
CVE
CVE
added 2025/02/27 2:12 a.m.138 views

CVE-2025-21734

Concrete details found for CVE-2025-21734 in connected documents: the Linux kernel fastrpc driver mishandles page size calculation for non-registered buffers by using absolute addresses instead of an offset-adjusted address, risking improper/out-of-bounds page sizes and memory issues. The fix is ...

7.8CVSS6.8AI score0.00201EPSS
Save
CVE
CVE
added 2025/04/01 3:41 p.m.138 views

CVE-2025-21946

The CVE-2025-21946 entry affects the Linux kernel ksmbd component; the issue is a slab-out-of-bounds in parse_sec_desc() caused by offsets (osidoffset, gsidoffset, dacloffset) exceeding the smb_ntsd structure, and by not verifying the subauth array size when validating a SID. The connected Astra ...

8.8CVSS7.1AI score0.00483EPSS
Save
CVE
CVE
added 2025/04/08 8:18 a.m.138 views

CVE-2025-22016

CVE-2025-22016 affects the Linux kernel (dpll: fix xa_alloc_cyclic() error handling). The issue: returning ERR_PTR(1) from xa_alloc_cyclic() could cause IS_ERR() to be false, risking dereference of an unallocated pointer. Fix implemented by ensuring err is

5.5CVSS7AI score0.00195EPSS
Save
CVE
CVE
added 2025/04/16 2:13 p.m.138 views

CVE-2025-22117

CVE-2025-22117 affects the Linux kernel ice driver (ice_vc_fdir_parse_raw in ice_virtchnl_fdir.c). The vulnerability arises from using an untrusted value of pkt_len, fixed by verifying pkt_len does not exceed VIRTCHNL_MAX_SIZE_RAW_PACKET in ice_vc_fdir_parse_raw(). Connected advisories (Debian, O...

8.7CVSS6.6AI score0.00192EPSS
Save
CVE
CVE
added 2025/04/16 2:13 p.m.138 views

CVE-2025-23129

CVE-2025-23129: In the Linux kernel, the ath11k PCI driver (ath11k_pci) could log a warning when error paths freed a shared IRQ without clearing the IRQ affinity hint. The root cause was setting the IRQ affinity hint after irq vector allocation in ath11k_pci_alloc_msi(), which caused free_irq in ...

5.5CVSS6.5AI score0.00189EPSS
Save
CVE
CVE
added 2025/04/16 2:13 p.m.138 views

CVE-2025-23134

CVE-2025-23134 affects the Linux kernel ALSA timer code. The vulnerability stems from taking mmap_lock while inside a mutex-wrapped copy_from/to_user() via the pattern guard(mutex)(&register_mutex). This can lead to deadlocks when copy_from/to_user() is invoked under the register_mutex, particula...

5.5CVSS6.5AI score0.00147EPSS
Save
CVE
CVE
added 2025/05/01 12:55 p.m.138 views

CVE-2025-37744

CVE-2025-37744 affects the Linux kernel’s ath12k PCI wireless driver, where a memory allocated during ath12k_pci_probe() could leak if ATH12K_FLAG_QMI_FAIL is set and ath12k_fw_unmap() is not invoked in ath12k_pci_remove(). The issue is mitigated by a fixed sequence in the kernel fix, documented ...

5.5CVSS6.6AI score0.00152EPSS
Save
CVE
CVE
added 2025/05/01 1:07 p.m.138 views

CVE-2025-37775

CVE-2025-37775 affects the Linux kernel in the ksmbd component. The issue centers on a warning in __kernel_write_iter that could relate to directory write attempts; the patch stabilizes behavior by not allowing writes to directories, as described in the initial advisory. The vulnerability is addr...

5.5CVSS6.6AI score0.00181EPSS
Save
CVE
CVE
added 2025/05/20 4:47 p.m.138 views

CVE-2025-37967

CVE-2025-37967 affects the Linux kernel USB Type-C UCSI driver (displayport) and fixes a deadlock when handling DP Alt Mode. The patch adds ucsi_con_mutex_lock and ucsi_con_mutex_unlock so the connector mutex is only acquired when a connection exists and the partner pointer is valid, preventing a...

5.5CVSS6.5AI score0.0014EPSS
Save
CVE
CVE
added 2025/05/20 5:09 p.m.138 views

CVE-2025-37989

Technical details about CVE-2025-37989 are not publicly provided in the connected documents. Monitor for updates from official advisories; the current sources do not reveal affected products, versions, impact, or fixes beyond the description.

5.5CVSS6.5AI score0.00185EPSS
Save
CVE
CVE
added 2025/05/29 1:15 p.m.138 views

CVE-2025-37999

The CVE-2025-37999 issue affects the Linux kernel's EROFS fileio path. When bio_add_folio() fails, erofs_fileio_scan_folio() submits a new I/O request and retries with an empty bio, but erofs_onlinefolio_split() had already run, incrementing folio->private. The retry then calls erofs_onlinefol...

5.5CVSS6.5AI score0.00174EPSS
Save
CVE
CVE
added 2025/07/18 7:53 a.m.138 views

CVE-2025-38349

The CVE-2025-38349 entry concerns a Linux kernel eventpoll use-after-free risk due to dropping the epoll refcount while the ep mutex is still held. Description and related details explain that incrementing/decrementing the ep refcount in the wrong order combined with unlock timing can allow a con...

7.8CVSS6.5AI score0.00156EPSS
Save
CVE
CVE
added 2025/04/18 7:01 a.m.138 views

CVE-2025-39778

Technical details about CVE-2025-39778 (affected product, impact, and fix specifics) are not provided in the connected documents. Monitor for official disclosures and vendor advisories for updates and patch information.

7.1CVSS6.8AI score0.00251EPSS
Save
CVE
CVE
added 2026/05/06 7:21 a.m.138 views

CVE-2026-43074

CVE-2026-43074 affects the Linux kernel eventpoll code. The vulnerability arises from ep_free() freeing the eventpoll structure while still in use by another thread, creating a use-after-free (UAF). The fix defers kfree() of the epi->ep struct to an RCU grace period to prevent UAF; multiple so...

7.8CVSS5.8AI score0.00482EPSS
Save
CVE
CVE
added 2026/07/25 8:51 a.m.138 views

CVE-2026-64438

Summary of CVE-2026-64438 : In the Linux kernel’s crypto: qat path, a race during VF2PF teardown could cause use-after-free of per-VF state (vf_info) due to tearing down per-VF locks and state before in-flight VF2PF work completes. The fix introduces a PF-local flag (vf2pf_disabled) that gates wo...

8.8CVSS5.8AI score0.00135EPSS
Save
CVE
CVE
added 2009/07/31 6:29 p.m.137 views

CVE-2009-2407

CVE-2009-2407 describes a heap-based buffer overflow in the parse_tag_3_packet function of fs/ecryptfs/keystore.c in the Linux kernel’s eCryptfs subsystem, exploitable via a crafted eCryptfs file. The issue affects Linux kernels before 2.6.30.4 and can lead to a denial of service (system crash) o...

6.9CVSS5.9AI score0.00594EPSS
Save
CVE
CVE
added 2011/01/11 1:00 a.m.137 views

CVE-2010-4242

CVE-2010-4242 affects the Linux kernel 2.6.36 (and possibly other versions). The vulnerability is in the HCI UART driver, specifically the hci_uart_tty_open function in drivers/bluetooth/hci_ldisc.c, which does not verify if the tty has a write operation. This can allow a local user to cause a de...

4CVSS7AI score0.00459EPSS
Save
CVE
CVE
added 2011/02/18 7:00 p.m.137 views

CVE-2011-1044

CVE-2011-1044 affects the Linux kernel (pre-2.6.37) and is caused by ib_uverbs_poll_cq in drivers/infiniband/core/uverbs_cmd.c not initializing a certain response buffer. This allows local attackers to read potentially sensitive data from kernel memory via vectors that fill the buffer only partia...

2.1CVSS5.4AI score0.00386EPSS
Save
CVE
CVE
added 2011/06/22 10:00 p.m.137 views

CVE-2011-1171

CVE-2011-1171 affects the Linux kernel prior to 2.6.39, specifically the IPv4 netfilter ip_tables.c path. The issue is that string data in certain structure members may not end with the expected null terminator, enabling a local attacker with CAP_NET_ADMIN to craft a request and read the argument...

2.1CVSS7.5AI score0.00376EPSS
Save
CVE
CVE
added 2013/03/01 11:00 a.m.137 views

CVE-2011-2491

The CVE-2011-2491 issue affects the Linux kernel’s NFS client NLM protocol implementation. It allows a local attacker to cause a denial of service (system hang) by abusing a LOCK_UN flock system call. The vulnerability is rooted in the NLM handling in the kernel prior to 3.0. The referenced fix/c...

4.9CVSS6AI score0.00399EPSS
Save
CVE
CVE
added 2016/05/02 10:00 a.m.137 views

CVE-2011-5321

The vulnerability CVE-2011-5321 affects the Linux kernel up to version 3.1.0, specifically the tty_open function in drivers/tty/tty_io.c, where a driver-lookup failure can lead to a NULL pointer dereference and system crash via crafted access to /dev/pts devices. Local users can cause a denial of...

5.5CVSS5.8AI score0.0037EPSS
Save
CVE
CVE
added 2012/10/03 10:00 a.m.137 views

CVE-2012-3375

CVE-2012-3375—Linux kernel epoll_ctl DoS Affected: Linux kernel before 3.2.24 (fs/eventpoll.c).Cause: EPOLL_CTL_ADD mishandles ELOOP errors, due to an incorrect fix for CVE-2011-1083.Impact: Local users can trigger a denial of service via a crafted application that creates circular epoll dependen...

4.9CVSS7.2AI score0.01017EPSS
Save
CVE
CVE
added 2013/09/13 6:00 p.m.137 views

CVE-2013-2888

CVE-2013-2888 : The Linux kernel HID subsystem contains multiple array index errors in drivers/hid/hid-core.c that can be triggered by a crafted HID device providing an invalid Report ID. The vulnerability allows physically proximate attackers to execute arbitrary code or cause a denial of servic...

6.2CVSS6.9AI score0.00459EPSS
Save
CVE
CVE
added 2013/09/13 6:00 p.m.137 views

CVE-2013-2892

The CVE-2013-2892 issue affects the Linux kernel HID subsystem specifically the HID driver at drivers/hid/hid-pl.c. When CONFIG_HID_PANTHERLORD is enabled, a physically proximate crafted HID device can cause a heap-based out-of-bounds write, leading to a denial of service. The provided documents ...

4.7CVSS5.9AI score0.00423EPSS
Save
CVE
CVE
added 2013/12/14 6:00 p.m.137 views

CVE-2013-6368

CVE-2013-6368 affects the KVM subsystem in the Linux kernel up to version 3.12.5, enabling local users to gain privileges or trigger a denial of service (system crash) via a VAPIC synchronization operation involving a page-end address. The connected advisories for MiracleLinux, Unity Linux, and E...

6.2CVSS6.2AI score0.00613EPSS
Save
CVE
CVE
added 2014/01/06 11:00 a.m.137 views

CVE-2013-7265

CVE-2013-7265 affects the Linux kernel; the pn_recvmsg function in net/phonet/datagram.c updates a length value before the associated data structure is initialized, enabling local users to read sensitive kernel stack memory via recvfrom/recvmmsg/recvmsg calls. Impact is a local information leak. ...

4.9CVSS5.3AI score0.00461EPSS
Save
CVE
CVE
added 2014/08/18 10:00 a.m.137 views

CVE-2014-5207

CVE-2014-5207 affects the Linux kernel up to version 3.16.1. The flaw occurs in fs/namespace.c where clearing MNT_NODEV, MNT_NOSUID, MNT_NOEXEC and changing MNT_ATIME_MASK during a remount of a bind mount is not properly restricted, allowing local users to gain privileges, interfere with backups/...

6.2CVSS7.2AI score0.00881EPSS
SaveWeb
CVE
CVE
added 2014/11/30 1:00 a.m.137 views

CVE-2014-9090

CVE-2014-9090 affects the Linux kernel up to 3.17.4, where do_double_fault in arch/x86/kernel/traps.c mishandles SS fault conditions, allowing local users to cause a denial of service (panic) via modify_ldt (demonstrated by sigreturn_32 in linux-clock-tests). The issue was addressed by a patch li...

4.9CVSS5.9AI score0.00376EPSS
Save
CVE
CVE
added 2016/08/30 5:00 p.m.137 views

CVE-2016-5344

CVE-2016-5344 affects the MDSS driver in the Linux kernel 3.x, used in Qualcomm QuIC Android MSM contributions. The root cause is multiple integer overflows triggered by large size values in mdss_compat_utils.c, mdss_fb.c, and mdss_rotator.c, potentially causing denial of service and possibly oth...

9.8CVSS9.2AI score0.01734EPSS
Save
CVE
CVE
added 2021/06/07 7:20 p.m.137 views

CVE-2018-25015

CVE-2018-25015 affects the Linux kernel up to version 4.14.15, with a use-after-free in net/sctp/socket.c when a lock is held after a peel-off (CID-a0ff660058b8). Exploitation details are not provided in the supplied documents, but CVSS v3 indicates a high impact. The ChangeLog entry for 4.14.16 ...

7.8CVSS7.4AI score0.00569EPSS
Save
Total number of security vulnerabilities14999