CVE-2011-5321

The vulnerability CVE-2011-5321 affects the Linux kernel up to version 3.1.0, specifically the tty_open function in drivers/tty/tty_io.c, where a driver-lookup failure can lead to a NULL pointer dereference and system crash via crafted access to /dev/pts devices. Local users can cause a denial of...

CVE-2024-38582

CVE-2024-38582 affects the Linux kernel nilfs2, causing a potential hang/deadlock during unmount. The issue arises when nilfs_segctor_sync() tries to synchronize with the log writer thread after nilfs_segctor_destroy() has already terminated that thread, leading to a deadlock path through several...

CVE-2024-39485

The CVE-2024-39485 issue affects the Linux kernel media: v4l subsystem, specifically the async notifier: the notifier_entry was not re-initialised after unregister, leaving dangling pointers. The documented fix is to reinitialise the notifier_entry (e.g., via list_del_init()) so the notifier_entr...

CVE-2024-39509

CVE-2024-39509 is a Linux kernel local vulnerability in HID core: implement() where a WARN_ON() was considered superfluous and removed to prevent syzkaller warnings in hid-core.c/hid_output_report. The issue arises when writing a value into a field of smaller size; the value is already masked and...

CVE-2024-40935

CVE-2024-40935 affects the Linux kernel cachefiles subsystem. In ondemand mode, when the cache is marked as CACHEFILES_DEAD, cachefiles_daemon_write() returns -EIO, preventing the daemon from passing the copen to the kernel and causing a hung_task for the waiting process. The fix requires flushin...

CVE-2024-40981

CVE-2024-40981 – Linux kernel batman-adv : The vulnerability centers on batman-adv’s originator handling in batadv_purge_orig_ref(), where empty buckets can lead to soft lockups (CPU 0 stuck for long periods). The root cause is not publicly disclosed in the provided documents, but the fix is desc...

CVE-2024-41068

CVE-2024-41068 – Linux kernel (s390 sclp_init cleanup) Affected: Linux kernel on s390. Root cause: sclp_init() could fail and leave sclp_state_change_event entries in sclp_reg_list, causing a list_add double add warning if multiple init attempts occur. Impact: local privilege or denial conditions...

CVE-2024-43837

CVE-2024-43837 (Linux kernel): The vulnerability is a null pointer dereference in BPF EXT program type resolution when dst_prog is not attached. The fix, as described in the primary document, changes resolve_prog_type() to return prog->type for BPF_PROG_TYPE_EXT when dst_prog is absent, instea...

CVE-2024-43883

CVE-2024-43883 is a Linux kernel vulnerability in the usb vhci-hcd subsystem. The issue is described as a race where the driver could carry stale references and may drop them before new references are gained. The description states this is resolved in the Linux kernel; the available connected con...

CVE-2024-43886

The connected Astra Linux bulletin confirms CVE-2024-43886 affects the Linux kernel in the DRM/AMD display path, specifically a risk in resource_log_pipe_topology_update within dc_resource.c. The root cause is a potential null pointer dereference when switching from “Extend” to “Second Display On...

CVE-2024-44988

CVE-2024-44988 concerns the Linux kernel’s net/dsa mv88e6xxx driver. The issue can cause an out-of-bounds access if an ATU violation results from a CPU Load operation, potentially allowing a local attacker to trigger a denial-of-service condition via an out-of-bounds SPID value exceeding DSA_MAX_...

CVE-2024-45020

Concrete details found: CVE-2024-45020 affects the Linux kernel BPF verifier, specifically a crash in stacksafe() caused by out-of-bounds memory access when iterating old->allocated_stack. The fix adds a check i >= cur->allocated_stack to fail stacksafe() when the condition would access ...

CVE-2024-46674

CVE-2024-46674 affects the Linux kernel USB/DWC3 ST platform path. The vulnerability stems from a probe error path that drops a platform device reference count due to an unused undo_platform_dev_alloc, causing unbalanced references and potential use-after-free when devm-managed resources are rele...

CVE-2024-47669

CVE-2024-47669 relates to a Linux kernel issue in the nilfs2 file system. The vulnerability arises in the error path of the log writing function (nilfs_segctor_do_construct) after a694291a6211, enabling problematic I/O behavior across logs in segments when multiple logs are created. The root caus...

CVE-2024-47720

CVE-2024-47720 in the Linux kernel relates to the AMD display path (drm/amd/display) where dcn30_set_output_transfer_func dereferenced set_output_gamma without a null check. The patch adds a nullity check for set_output_gamma before calling it and logs an error if it is NULL, preventing a potenti...

CVE-2024-49910

CVE-2024-49910 concerns the Linux kernel DRM/AMD display path. The root cause was a null dereference risk in drm/amd/display's dcn401_set_output_transfer_func: set_output_gamma could be non-null checked, then dereferenced. The fix adds a null check for set_output_gamma before invoking it, elimina...

CVE-2024-49916

CVE-2024-49916 affects the Linux kernel’s drm/amd/display code (dcn401_init_hw). The root cause is a potential null pointer dereference when dc->clk_mgr or dc->clk_mgr->funcs is null. The fix adds explicit null checks before dereferencing clk_mgr/clk_mgr->funcs, preventing dereference...

CVE-2024-50177

CVE-2024-50177 concerns the Linux kernel amdgpu display driver (DML2.1). The issue is a UBSAN shift-out-of-bounds triggered when programming phantom pipes and cursor_width is explicitly set to 0, causing an overflow in 32-bit size calculations. The published fix adds a guard to validate cursor wi...

CVE-2024-50243

CVE-2024-50243 affects the Linux kernel ntfs3 path; the issue is a general protection fault in run_is_mapped_full leading to a local denial of service. The fix (and related NTFS attribute handling fix) was committed in the kernel; affected advisories reference kernel 6.1.x updates. Remediation is...

CVE-2024-50263

Technical details for CVE-2024-50263 (affected component, impact, fix) are not publicly available in the provided documents. Monitor for updates from the vendor/security advisories.

CVE-2024-50276

The CVE CVE-2024-50276 affects the Linux kernel net/ethernet/vertexcom/mse102x driver (mse102x.c). The root cause is a double-free of the TX skb: when expanding the TX skb, the code could free the original skb again in mse102x_tx_work(), causing a crash. The fix is to free the temporary skb inste...

CVE-2024-53062

Technical details for CVE-2024-53062 are not provided in the supplied documents. Monitor official advisories for patches and affected products; no root-cause, impact, or remediation details are available here.

CVE-2024-56652

The Linux kernel vulnerability CVE-2024-56652 affects drm/xe reg_sr pool logic. A faulty register pool implementation can lead to use-after-free when krealloc moves memory, leaving xarray entries invalid and causing a use-after-free in xe_reg_sr_apply_mmio. The issue arises because memory relocat...

CVE-2024-56725

CVE-2024-56725 : In the Linux kernel, the octeontx2-pf driver (otx2_dcbnl.c) contained an unchecked error pointer after calling otx2_mbox_get_rsp, potentially leading to a NULL-pointer dereference if the function returned an error. The public description and connected Astra Linux bulletin confirm...

CVE-2024-58012

CVE-2024-58012 affects the Linux kernel ASoC: SOF Intel hda-dai path. The vulnerability arises from topologies not creating the correct number of DAI widgets for aggregated amps, allowing a NULL pointer dereference when associating a CPU DAI with a widget. The fixed code adds a validity check to ...

CVE-2024-58097

CVE-2024-58097 | Affected software: Linux kernel driver ath11k (wifi) in PCI WLAN on certain chips. Issue: during monitor destination ring processing, MSDUs are reaped by buf_id; if a valid buffer for a buf_id cannot be obtained, an infinite loop occurs in destination processing, leading to kerne...

CVE-2025-21634

CVE-2025-21634 concerns the Linux kernel cpuset/cgroup path where kernfs active protection can be broken during concurrent cpuset writes, triggering a warning and potential deadlock risk. The root cause involved a sequence of hotplug-related changes that async/sync cpuset processing and previousl...

CVE-2025-21732

CVE-2025-21732 pertains to the Linux kernel RDMA mlx5 path. It describes a race in the ODP MR handling where, during __mlx5_ib_dereg_mr(), a concurrent mlx5_ib_invalidate_range() can invalidate a freed lkey, triggering a CQE error and potentially placing the UMR QP in an error state. The disclose...

CVE-2025-21828

CVE-2025-21828 affects the Linux kernel wireless stack (wifi: mac80211). When a station (STA) is pre-moved to AUTHORIZED (e.g., in IBSS) and insertion fails, the STA can be freed without the driver knowing about it; an attempted flush of an untracked STA may crash. The description notes the root ...

CVE-2025-21856

The CVE-2025-21856 issue affects Linux kernel on s390/ISM where devices must have a release function. The kernel previously freed a struct device after device_add() without waiting for other references (e.g., sysfs), allowing a use-after-free if a release function was not set. Root cause: missing...

CVE-2025-21947

The CVE-2025-21947 issue affects the Linux kernel ksmbd subsystem and is resolved by a fix for a race condition that can cause type confusion in IPC message handling. Root cause: req->handle is allocated via ksmbd_acquire_id(&ipc_ida) (ida_alloc) and can be reused for ksmbd_ipc_login_request a...

CVE-2025-22016

CVE-2025-22016 affects the Linux kernel (dpll: fix xa_alloc_cyclic() error handling). The issue: returning ERR_PTR(1) from xa_alloc_cyclic() could cause IS_ERR() to be false, risking dereference of an unallocated pointer. Fix implemented by ensuring err is

CVE-2025-22071

CVE-2025-22071 concerns the Linux kernel spufs subsystem. The issue is a leak in spufs_create_context() that occurs when setting CPU affinity and spufs_mkdir() fails, requiring the code to drop the reference to the neighbor. The problem was fixed by this leak remediation, with historical notes th...

CVE-2025-22077

CVE-2025-22077 concerns Linux kernel CIFS SMB client TCP timers deadlock after rmmod. The advisory notes the patch that attempted to fix a NULL dereference in LOCKDEP via a CIFS netns reference was reverted, reviving a kernel TCP socket timer lifecycle mismatch. This reversion can cause FIN_WAIT_...

CVE-2025-22103

CVE-2025-22103 causes a NULL pointer dereference in the Linux kernel net: l3mdev_l3_rcv path when deleting an ipvlan l3s link (ipvlan1 type ipvlan mode l3s). The issue arises because ipvlan_l3s_unregister() can set dev->l3mdev_ops to NULL, and l3mdev_l3_rcv() may still access master->l3mdev...

CVE-2025-37744

CVE-2025-37744 affects the Linux kernel’s ath12k PCI wireless driver, where a memory allocated during ath12k_pci_probe() could leak if ATH12K_FLAG_QMI_FAIL is set and ath12k_fw_unmap() is not invoked in ath12k_pci_remove(). The issue is mitigated by a fixed sequence in the kernel fix, documented ...

CVE-2025-37980

CVE-2025-37980: In the Linux kernel block subsystem, a resource leak occurs in blk_register_queue() when a queue registration fails after blk_mq_sysfs_register() succeeds. The error-path path lacks cleanup of blk_mq_sysfs resources, leading to memory leaks. The advisory documents that the fix is ...

CVE-2025-38177

CVE-2025-38177 affects the Linux kernel’s scheduling subsystem (sch_hfsc). The documented fix makes hfsc_qlen_notify() idempotent to improve safety for callers such as qdisc_tree_reduce_backlog(). The described changes include guarding update_vf() (checking cl_nactive) and safely removing RB node...

CVE-2026-46099

The CVE-2026-46099 entry describes a use-after-free race in Linux kernel IPv6 handling for seg6 and rpl lightweight tunnels. A NOREF destination cached during ip6_route_input() can be freed by a concurrent FIB lookup on a shared nexthop under PREEMPT_RT, leading to a WARN or potential instability...

CVE-2008-0600

CVE-2008-0600 affects the Linux kernel vmsplice_to_pipe flaw present in 2.6.17–2.6.24.1. It allows an unprivileged local user to gain root privileges via crafted vmsplice calls. Several Nessus advisories place this in the context of affected distributions (e.g., MiracleLinux, Oracle Linux/OracleV...

CVE-2009-2844

CVE-2009-2844 affects the Linux kernel’s cfg80211 code (net/wireless/scan.c) in 2.6.30-rc1 and earlier than 2.6.31-rc6. The vulnerability allows remote attackers to cause a denial of service (crash) by sending a crafted sequence of beacon frames: one frame omits the SSID Information Element, and ...

CVE-2010-3084

CVE-2010-3084 refers to a buffer overflow in the Linux kernel 2.6 series (niu_get_ethtool_tcam_all in drivers/net/niu.c) exploitable via the ETHTOOL_GRXCLSRLALL ethtool command. Affected: Linux kernel older than 2.6.36-rc4. Impact described as local denial of service and potential other effects (...

CVE-2010-4165

CVE-2010-4165 affects the Linux kernel prior to 2.6.37-rc2. The do_tcp_setsockopt function does not properly constrain TCP_MAXSEG (MSS) values, allowing a local user to trigger a denial of service via a setsockopt with a small value, leading to a divide-by-zero or signed-integer misuse. Evidence ...

CVE-2010-4242

CVE-2010-4242 affects the Linux kernel 2.6.36 (and possibly other versions). The vulnerability is in the HCI UART driver, specifically the hci_uart_tty_open function in drivers/bluetooth/hci_ldisc.c, which does not verify if the tty has a write operation. This can allow a local user to cause a de...

CVE-2011-0726

The CVE-2011-0726 entry is supported by connected advisories describing a Linux kernel vulnerability in do_task_stat (fs/proc/array.c) present in kernels before 2.6.39-rc1. The flaw allows local users to defeat ASLR by reading start_code/end_code from /proc/[pid]/stat for PIE processes, implying ...

CVE-2011-1082

CVE-2011-1082 affects the Linux kernel prior to 2.6.38. The flaw is in fs/eventpoll.c where epoll file descriptors may be placed inside other epoll data structures without proper validation of closed loops or deep chains. This can let a local user cause a denial of service (deadlock or stack memo...

CVE-2011-2203

CVE-2011-2203 affects the Linux kernel (2.6.x) as cited in MiracleLinux AXSA:2012-220:01. The hfs_find_init function can crash the kernel (NULL pointer dereference) and trigger a kernel OOPs when mounting an HFS filesystem with a malformed MDB extent record, enabling a local DoS. The MiracleLinux...

CVE-2013-2232

CVE-2013-2232 affects the Linux kernel prior to 3.10. The vulnerable code is the ip6_sk_dst_check function in net/ipv6/ip6_output.c; it lets a local user cause a denial-of-service (system crash) by using an AF_INET6 socket to connect to an IPv4 interface. A remedy is the upstream patch applied in...

CVE-2014-1739

CVE-2014-1739 affects the Linux kernel before 3.14.6, where the function media_device_enum_entities in drivers/media/media-device.c fails to initialize a data structure. This leads to an information disclosure vulnerability: a local attacker with access to /dev/media0 can read kernel memory throu...

CVE-2014-3181

CVE-2014-3181 affects the Linux kernel HID Magic Mouse driver (drivers/hid/hid-magicmouse.c, function magicmouse_raw_event) through version 3.16.3. It results in stack-based buffer overflows when processing large EHCI or XHCI data from a device, enabling physically proximate attackers to cause a ...