CVE-2014-5207

CVE-2014-5207 affects the Linux kernel up to version 3.16.1. The flaw occurs in fs/namespace.c where clearing MNT_NODEV, MNT_NOSUID, MNT_NOEXEC and changing MNT_ATIME_MASK during a remount of a bind mount is not properly restricted, allowing local users to gain privileges, interfere with backups/...

CVE-2014-7826

CVE-2014-7826 affects the Linux kernel up to 3.17.2, where kernel/trace/trace_syscalls.c in the ftrace subsystem mishandles private syscall numbers. This can allow a local user to gain privileges or cause a denial of service via an crafted application (invalid pointer dereference). Connected advi...

CVE-2015-0274

The CVE-2015-0274 entry references the Linux kernel XFS flaw: before 3.15, the XFS implementation uses an old size value during remote attribute replacement, allowing a local attacker with XFS access to trigger a denial of service (transaction overrun/data corruption) and potentially escalate pri...

CVE-2015-8844

CVE-2015-8844 affects the Linux kernel on PowerPC where the signal implementation does not validate an MSR with both the S and T bits set. This can enable a local attacker to cause a denial of service (TM Bad Thing exception and panic) via a crafted application. The vulnerability is fixed in the ...

CVE-2017-10662

The CVE-2017-10662 issue affects the Linux kernel’s F2FS implementation: the sanity_check_raw_super function in fs/f2fs/super.c fails to validate the segment count, enabling local privilege escalation. Concretely, affected versions are before 4.11.1. Several connected advisories (e.g., UTSA/Euler...

CVE-2018-5703

The CVE-2018-5703 issue affects the Linux kernel’s IPv6 stack, specifically tcp_v6_syn_recv_sock in net/ipv6/tcp_ipv6.c, through version 4.14.11. It enables a slab out-of-bounds write that can cause denial of service (DoS) and potentially other impacts via TLS-related vectors. Multiple vendor adv...

CVE-2019-0145

CVE-2019-0145 : Buffer overflow in the i40e driver for Intel(R) Ethernet 700 Series Controllers, affecting versions before 7.0. An authenticated local user can potentially escalate privileges. The vulnerability arises in the i40e driver implementation and is documented in multiple advisories refe...

CVE-2020-36780

Mode C: The CVE-2020-36780 issue concerns the Linux kernel i2c Sprd driver. The root cause is a reference leak where pm_runtime_get_sync increments the device PM reference count on return even when the operation failed, in sprd_i2c_master_xfer() and sprd_i2c_remove(). The fix replaces the increme...

CVE-2021-4442

CVE-2021-4442 – The Linux kernel TCP stack vulnerability described as: a syzkaller repro could cause RCV_SEQ to be advanced after data restoration in the receive queue, enabling an out-of-order or invalid sequence handling when TCP_QUEUE_SEQ is used on non-empty queues. The connected documents (A...

CVE-2021-47056

CVE-2021-47056 affects Linux kernel components involving the Intel QAT crypto path (qat_dh895xccvf, adf_iov_putmsg, adf_vf2pf_shutdown). The issue is that ADF_STATUS_PF_RUNNING was set unconditionally; vf2pf_lock is initialized in adf_dev_init() and may be uninitialized/destroyed if init fails, l...

CVE-2021-47070

CVE-2021-47070 is described in the connected docs as a Linux kernel vulnerability in the uio_hv_generic driver where memory allocated by vmbus_alloc_ring() during probe is leaked in error handling paths. The fix adds a missing vmbus_free_ring() call, noting that the memory is already freed in the...

CVE-2021-47186

CVE-2021-47186 affects the Linux kernel TIPC subsystem: kmemdup can return NULL and is dereferenced in tipc_crypto_key_xmit if not checked. The provided docs confirm a NULL pointer dereference path and cite kernel commits improving null-checks as the fix. Impact is local with potential kernel den...

CVE-2021-47238

CVE-2021-47238 involves a memory-leak in the Linux kernel IPv4 multicast path (ip_mc_add1_src) that occurs when manipulating IGMP source lists. The root cause is a leak in ip_mc_add1_src/ip_mc_add_src handling of in_dev->mc_list->sources, described in the advisory. The linked commits and di...

CVE-2021-47315

CVE-2021-47315 affects the Linux kernel memory driver fsl_ifc (fsl_ifc_ctrl_probe). The issue is a leak of IO memory on probe failure due to not releasing gregs on error, as reported by Smatch. The resolved description states the fix is to unmap the IO memory when probe errors occur. The impact d...

CVE-2022-2308

CVE-2022-2308 describes a vulnerability in the Linux kernel’s vDPA with the VDUSE backend. The VDUSE kernel driver does not validate that the device config space size matches the features advertised by the VDUSE userspace app, causing Virtio config read helpers to pass uninitialized memory to vdu...

CVE-2022-3112

CVE-2022-3112 affects the Linux kernel up to 5.16-rc6. The issue is in amvdec_set_canvases (drivers/staging/media/meson/vdec/vdec_helpers.c) where kzalloc() return value is not checked, leading to a NULL pointer dereference. Connected sources confirm the same defect across various advisories (e.g...

CVE-2022-49228

CVE-2022-49228 relates to the Linux kernel and a bug in BTF decl_tag handling during function tagging in BPF. The issue arises when btf_decl_tag_resolve() checks a function type’s func_proto; the code attempted to access func_proto’s vlen for a type 3 function prototype, which was out of range an...

CVE-2022-49377

CVE-2022-49377 is a Linux kernel vulnerability in the block multi-queue (blk-mq) path. The root cause was a use-after-free involving ->tagset during blk_mq_run_hw_queues, when there were no queued requests and the tagset could be freed after blk_cleanup_queue. The fix disables touching tagset ...

CVE-2022-49611

The CVE-2022-49611 entry refers to a Linux kernel x86 speculation mitigation: Fill RSB on vmexit for IBRS to prevent RSB underflow/poisoning. The description notes mitigation is implemented in the kernel and documents tribal knowledge about RSB attacks. Connected Nessus/OpenVAS entries for EulerO...

CVE-2022-49951

CVE-2022-49951 concerns the Linux kernel firmware_loader use-after-free during unregister. In firmware_upload_unregister(), device_unregister() could free fw_upload_priv via dev_release before module_put() dereferences it. The documented fix copies fw_upload_priv->module to a local variable an...

CVE-2023-38429

The CVE-2023-38429 issue is reported in the Linux kernel (pre-6.3.4) within ksmbd: fs/ksmbd/connection.c contains an off-by-one error in memory allocation (ksmbd_smb2_check_message), which can cause out-of-bounds access. Connected advisories (Astra Linux, Nessus plugin references) corroborate the...

CVE-2023-46343

CVE-2023-46343 concerns the Linux kernel up to version 6.5.9, with a NULL pointer dereference in send_acknowledge (net/nfc/nci/spi.c). Affected component: kernel. Root cause: NULL pointer dereference in send_acknowledge. Explicit impact details in the provided metrics show Confidentiality and Int...

CVE-2023-52789

CVE-2023-52789 : In the Linux kernel, the vulnerability affects the tty/vcc path (vcc_probe). The root cause is failure to check the return value of kstrdup(), risking a NULL pointer dereference. The fix adds a check for kstrdup() and returns an error if it fails. This resolves the issue by preve...

CVE-2023-53008

CVE-2023-53008 (Linux kernel): CIFS session setup fix to prevent memory leaks by freeing cifs_ses::auth_key.response before allocating it. This addresses potential memory leaks during reconnect or mounting. The advisory states the fix in the CIFS session setup path; no exploit specifics are provi...

CVE-2024-26630

CVE-2024-26630 (Linux kernel) : The issue in cachestat stemmed from reading folio data from the page cache XRAY without holding a reference, allowing a folio to be released and reused during the operation. The fix switches to the xarray machinery for folio offsets and dirty/writeback state, preve...

CVE-2024-26688

CVE-2024-26688 — affected component: Linux kernel hugetlbfs . The vulnerability is a NULL pointer dereference in hugetlbfs_fill_super() triggered when configuring a hugetlb filesystem via fsconfig() with an invalid pagesize. The issue happens because ctx->hstate may be set to NULL in hugetlbfs...

CVE-2024-27412

Technical details about CVE-2024-27412 (affected product, root cause, impact, fix) are not provided in the connected documents; public details are limited to the CVE description in the initial document.

CVE-2024-35945

CVE-2024-35945 (Linux kernel) is reported as resolved in OSV entries for Root:Ubuntu 22.04 via ROOT-OS-UBUNTU-2204-CVE-2024-35945, with multiple fixed ROOT rootio-linux versions available. Other OSVs (ROOT-OS-DEBIAN-11-CVE-2024-35945, ROOT-OS-DEBIAN-12-CVE-2024-35945) also indicate patches in roo...

CVE-2024-36003

CVE-2024-36003: Linux kernel ice driver deadlock in ice_reset_vf() due to lock order between VF config_lock and LAG mutex when ICE_VF_RESET_LOCK is involved. Connected advisories describe the issue as a possible circular locking dependency triggered on VF creation/removal, enabling a deadlock bet...

CVE-2024-36910

CVE-2024-36910 concerns the Linux kernel’s uio_hv_generic path. The issue arises when CoCo VMs allow set_memory_encrypted() or set_memory_decrypted() to fail, causing the operation to return an error while memory may be shared. The VMBus device UIO driver could then free decrypted/shared pages if...

CVE-2024-38577

CVE-2024-38577 affects the Linux kernel (rcu-tasks: show_rcu_tasks_trace_gp_kthread). The issue is a potential buffer overflow when counters passed to sprintf() are unrealistically large; the fix replaces sprintf() with snprintf() using a bounded buffer. Patches are incorporated in various adviso...

CVE-2024-41088

CVE-2024-41088 (Linux kernel) affects the can mcp251xfd driver. When mcp251xfd_start_xmit() fails, tx_ring->head is still incremented, causing the Transmit Event FIFO to reflect an outstanding TX while a response is expected, which can lead to an infinite loop in the interrupt routine if multi...

CVE-2024-42087

CVE-2024-42087 affects the Linux kernel in the drm/panel/ilitek-ili9881c GPIO reset implementation. The issue arises from using gpiod_set_value() for a GPIO controller that may sleep, which triggers warnings. A fix replaces the non-sleeping call with gpiod_set_value_cansleep(), addressing the war...

CVE-2024-42095

CVE-2024-42095 affects the Linux kernel component serial: 8250_omap, implementing Errata i2310. The issue allows an erroneous timeout that, if not cleared, can trigger a storm of interrupts per TI’s Errata i2310 (TI TI sprz536, page 23). Public records in connected sources consistently cite imple...

CVE-2024-42157

CVE-2024-42157 affects the Linux kernel (s390/pkey) and is tied to wiping sensitive data on failure. Proposed fix/remediation exists in the kernel, with commits referenced by kernel-stable history (e.g., c44a2151e5d21c66b070a056c26471f30719b575 and related commits) and multiple advisories noting ...

CVE-2024-42282

The CVE refers to the Linux kernel Mediatek driver: a NULL pointer dereference in dummy_net_device handling was addressed by moving the free_netdev() call from mtk_free_dev() to mtk_remove(), ensuring free_netdev() only runs after a successful mtk_probe() and full allocation of eth->dummy_dev....

CVE-2024-43849

CVE-2024-43849 concerns the Linux kernel. The issue arises when the service locator server restarts quickly, allowing concurrent rewrites of locator_addr fields in the PDR. The documented fix is to guard the modification of locator_addr with the main pdr lock, ensuring these fields are updated un...

CVE-2024-44969

CVE-2024-44969 affects the Linux kernel, specifically the s390/sclp path. If a task waiting for a Store Data operation is interrupted and the halt attempt fails due to hardware/firmware issues, the SCLP facility might later store data into buffers referenced by the original operation. The fix pre...

CVE-2024-46773

The CVE-2024-46773 issue in the Linux kernel concerns the drm/amd/display path where a division could be performed with a zero denominator (pbn_div). The root cause is a denominator that could be zero; upstream patch adds a check before use to prevent a DIVIDE_BY_ZERO. Public documents confirm th...

CVE-2024-49887

CVE-2024-49887 targets the f2fs file system in the Linux kernel. Root cause: when injecting a fault for “no free segment,” the kernel could panic in __allocate_new_segment / get_new_segment, triggering a serious system halt. The description notes the issue was resolved by a fix that prevents pani...

CVE-2024-49947

CVE-2024-49947 affects the Linux kernel net stack, specifically a vulnerability in virtio_net_hdr_to_skb() where an incorrectly set skb->csum_start could place the transport header before or after the network header when processing injected packets via af_packet. Syzbot-triggered warnings show...

CVE-2024-50005

CVE-2024-50005 affects the Linux kernel (mac802154) and is resolved by a fix in mac802154_scan_worker. The vulnerability arose from accessing scan_req->type after exiting the RCU read-side critical section, which can violate RCU rules and cause use-after-free or memory-access issues. The patch...

CVE-2024-50021

Technical details for CVE-2024-50021 are not publicly disclosed in the provided Connected documents. Monitor for updates from vendor/security advisories.

CVE-2024-50034

CVE-2024-50034 affects the Linux kernel net/smc, where INET_PROTOSW_ICSK can leave icsk_sync_mss unset for IPPROTO_SMC, triggering a NULL pointer dereference panic. The provided trace indicates a kernel oops when handling IPPROTO_SMC, with a failed icsk_mss synchronization. A patch sequence in st...

CVE-2024-50178

Technical details (affected component, root cause, versions, or exploit status) are not provided in the connected documents; the initial description summarizes the fix but lacks vendor/product specifics in the supplied material. Monitor for authoritative advisories for updates.

CVE-2024-52559

The CVE-2024-52559 instance affects the Linux kernel’s DRM MSM driver: drm/msm/gem_submit() is vulnerable to an integer overflow when handling user-supplied submit->cmd[i].size and submit->cmd[i].offset (u32) via submit_lookup_cmds(). The issue is addressed by using size_add() to prevent wr...

CVE-2024-53098

CVE-2024-53098 affects the Linux kernel DRM XE ufence path. The root cause is that access_ok() only checks for addr overflow and may also read the user-supplied address to catch invalid addresses, coupled with prefetching ufence addresses to detect bogus ones. The issue is remedied by a kernel fi...

CVE-2024-53109

The CVE-2024-53109 issue affects the Linux kernel nommu path: when deleting a vma entry from a maple tree, the code passed a NULL argument to vma_iter_prealloc() incorrectly, leading to crashes when accessing a vma iterator (e.g., acct_collect() reading vma sizes after do_munmap()). A patch fixes...

CVE-2024-53111

The CVE-2024-53111 issue is in the Linux kernel mm/mremap.c: move_page_tables on 32-bit arches, where len + old_addr can wrap and trigger a false positive in the old_end check. This can cause mremap() to report success without moving PTEs, potentially losing contents of anonymous private mappings...

CVE-2024-56563

CVE-2024-56563 corresponds to a Linux kernel exposure in Ceph’s MDS access check. The vulnerability arises in ceph_mds_check_access() where get_current_cred() increments the credentials reference count but a corresponding put_cred() may be missing, enabling a potential credential leak. The connec...