CVE-2024-46842

CVE-2024-46842 is a Linux kernel SCSI lpfc issue. The mailbox command cleanup in lpfc_get_sfp_info does not correctly handle MBX_TIMEOUT, causing the same mailbox memory region to reference freed memory if firmware provides SFP information later. The root cause is failure to properly handle MBX_T...

CVE-2024-47731

CVE-2024-47731 affects the Linux kernel driver path: drivers/perf, specifically the ali_drw_pmu/ Alibaba uncore PMU handling. The vulnerability arises because the alibaba_uncore_pmu driver did not clear all interrupt statuses in its interrupt processing function, so after a PMU counter overflow a...

CVE-2024-49910

CVE-2024-49910 concerns the Linux kernel DRM/AMD display path. The root cause was a null dereference risk in drm/amd/display's dcn401_set_output_transfer_func: set_output_gamma could be non-null checked, then dereferenced. The fix adds a null check for set_output_gamma before invoking it, elimina...

CVE-2024-49980

CVE-2024-49980 affects the Linux kernel VRF path. The issue stems from removing an RCU-bh critical section around dev_queue_xmit_nit, which violated an invariant and could cause an inconsistent lock state, potentially enabling a deadlock during packet reception when BH is disabled. The vulnerabil...

CVE-2024-50034

CVE-2024-50034 affects the Linux kernel net/smc, where INET_PROTOSW_ICSK can leave icsk_sync_mss unset for IPPROTO_SMC, triggering a NULL pointer dereference panic. The provided trace indicates a kernel oops when handling IPPROTO_SMC, with a failed icsk_mss synchronization. A patch sequence in st...

CVE-2024-50104

Technical details for CVE-2024-50104 are not publicly provided in the supplied documents; monitor for official advisories or patches.

CVE-2024-50222

Technical details beyond the summary, including affected products/versions, root cause, and fixes, are not provided in the connected documents; monitor for updates.

CVE-2024-50263

Technical details for CVE-2024-50263 (affected component, impact, fix) are not publicly available in the provided documents. Monitor for updates from the vendor/security advisories.

CVE-2024-53071

CVE-2024-53071 affects the Linux kernel's drm/panthor driver. The panthor_device_mmap_io() path mishandles two IO-mapped regions: (1) it bails when VM_WRITE is set for DRM_PANTHOR_USER_FLUSH_ID_MMIO_OFFSET but does not clear VM_MAYWRITE, potentially allowing userspace to writable mappings later v...

CVE-2024-53111

The CVE-2024-53111 issue is in the Linux kernel mm/mremap.c: move_page_tables on 32-bit arches, where len + old_addr can wrap and trigger a false positive in the old_end check. This can cause mremap() to report success without moving PTEs, potentially losing contents of anonymous private mappings...

CVE-2024-56580

Technical details are not provided in the supplied documents. Monitor official advisories for CVE-2024-56580.

CVE-2024-57930

CVE-2024-57930 : Linux kernel tracing fix. The vulnerability arises because process_string() did not consistently handle cases where a %s argument in TP_printk() referred to an array, risking unsafe dereferences of string data in trace events. The fix expands process_string() to treat references ...

CVE-2025-21768

Technical details for CVE-2025-21768 are not publicly provided in the supplied documents. Monitor for updates from the linked advisories and security feeds.

CVE-2025-21815

CVE-2025-21815 affects the Linux kernel, specifically the memory management path in mm/compaction (isolate_freepages_block). The issue stems from a UBSAN shift-out-of-bounds warning caused by (1UL <

CVE-2025-22070

The CVE-2025-22070 issue affects the Linux kernel 9P client (9p/v9fs) where mkdir could crash a mounted 9p tree when posixacl is used. Root cause: v9fs_vfs_mkdir_dotl() incorrectly passes a NULL fid to v9fs_set_create_acl(), leading to a NULL pointer dereference in v9fs_set_acl and subsequent ACL...

CVE-2025-23132

CVE-2025-23132 concerns the Linux kernel’s File System F2FS quota handling. The provided connected documents describe a race condition in the quota writeback path: checkpoint/remount/freeze/quotactl can race with f2fs_remount and core quota synchronization, triggering a warning in dquot_writeback...

CVE-2025-37755

CVE-2025-37755 is described in the Azure Linux 3.0 security advisory as a Linux kernel vulnerability in net: libwx related to page_pool_dev_alloc_pages returning NULL. The WARN_ON(!page) path could continue to dereference a NULL pointer, causing a crash. The Azure Nessus note confirms the affecte...

CVE-2025-37853

Mode C: CVE-2025-37853 affects the Linux kernel DRM/AMDKFD debugfs hang_hws interface for MES path, where a NULL pointer dereference (dqm->packet_mgr not set up) can crash the kernel during MES GPU reset testing. The advisory notes the issue is resolved by skipping MES for now and that MES han...

CVE-2025-37935

The CVE-2025-37935 issue affects the Linux kernel driver net: ethernet: mtk_eth_soc, where the mtk_poll_rx() path, upon detecting MTK_RESETTING, jumps to release_desc and refills the SDP high word for 4GB+ RAM, causing mtk_rx_clean to process an invalid SDP and trigger a panic. A fix from MediaTe...

CVE-2025-37944

CVE-2025-37944 affects the Linux kernel wifi stack (ath12k). The root cause is in ath12k_dp_mon_srng_process, which incorrectly uses ath12k_hal_srng_src_get_next_entry to fetch entries from the destination ring. This misapplied function leads to invalid memory access, risking data corruption or c...

CVE-2025-37948

CVE-2025-37948 affects the Linux kernel arm64 and is fixed by adding a BHB mitigation in the epilogue of BPF programs (cBPF) loaded via seccomp. The vulnerability arises when a classic cBPF program manipulates the branch history to influence speculative execution. The published details indicate t...

CVE-2025-38239

CVE-2025-38239 affects the Linux kernel megaraid_sas driver. On systems with DRAM interleave enabled, an out-of-bounds access can occur due to an invalid node index in megasas_alloc_irq_vectors during megaraid_sas probing, which triggers UBSAN reports (array-index-out-of-bounds in topology.h: ind...

CVE-2025-38279

CVE-2025-38279: Linux kernel bpf verifier backtracking bug in __mark_chain_precision (verifier) when handling precise registers; a test demonstrating a r10-related path and a patch that stops including stack ptr in precision backtracking was provided. Affected component: Linux kernel BPF verifier...

CVE-2025-38472

CVE-2025-38472 affects the Linux kernel netfilter nf_conntrack code. A race can cause a crash when removing a conntrack entry from the hash bucket list, yielding an apparently partially initialized nf_conn with garbage hlist pointers and abnormal timeout/state (IPS_CONFIRMED). The vulnerability s...

CVE-2025-39930

The CVE-2025-39930 entry concerns the Linux kernel ASoC simple-card-utils. The root cause is the premature __free of device_node in graph_util_parse_dai(), which could free a node still in use. The correction is to stop freeing __free(device_node) in graph_util_parse_dai() and to retain freeing b...

CVE-2026-53309

CVE-2026-53309 relates to the Linux kernel OCFS2 DLM component. A bug in the dlm_match_regions() region comparison used a <= bound, allowing reads beyond the valid range of qr_regions. The fix modifies the loop condition to use

CVE-2012-6537

CVE-2012-6537 affects the Linux kernel (before 3.6) in net/xfrm/xfrm_user.c where certain structures are not initialized, enabling local users with CAP_NET_ADMIN to leak sensitive kernel memory. The vulnerability is a local information disclosure through kernel memory exposure. Affected component...

CVE-2013-2234

CVE-2013-2234: In the Linux kernel (net/key/af_key.c), the functions key_notify_sa_flush and key_notify_policy_flush do not initialize certain structure members in versions before 3.10, allowing local users to read sensitive information from kernel heap memory via a broadcast message on the IPSec...

CVE-2014-3181

CVE-2014-3181 affects the Linux kernel HID Magic Mouse driver (drivers/hid/hid-magicmouse.c, function magicmouse_raw_event) through version 3.16.3. It results in stack-based buffer overflows when processing large EHCI or XHCI data from a device, enabling physically proximate attackers to cause a ...

CVE-2014-9728

CVE-2014-9728 concerns the Linux kernel UDF filesystem before 3.18.2, where missing validation of certain lengths in fs/udf/inode.c and fs/udf/symlink.c can enable a local attacker to trigger a denial of service via a crafted UDF image, potentially causing a buffer over-read and system crash. The...

CVE-2015-0274

The CVE-2015-0274 entry references the Linux kernel XFS flaw: before 3.15, the XFS implementation uses an old size value during remote attribute replacement, allowing a local attacker with XFS access to trigger a denial of service (transaction overrun/data corruption) and potentially escalate pri...

CVE-2016-2549

CVE-2016-2549 affects the Linux kernel prior to version 4.4.1, where sound/core/hrtimer.c fails to prevent recursive callback access, enabling local users to trigger a denial of service (deadlock) via a crafted ioctl. Connected advisories (Unity Linux UTSA-2026-000840/000...) confirm this issue i...

CVE-2016-8636

The CVE-2016-8636 issue affects the Linux kernel’s mem_check_range path in drivers/infiniband/sw/rxe/rxe_mr.c, where an integer overflow can occur. This vulnerability in Soft RoCE (RDMA over InfiniBand) allows local users to trigger memory corruption, potentially cause a denial of service, and ma...

CVE-2016-8660

CVE-2016-8660 affects the Linux kernel XFS subsystem up to version 4.8.2. A local attacker can trigger a denial of service (fdatasync failure and system hang) by using the vfs syscall group in the Trinity program, due to a page lock order bug in the XFS seek hole/data implementation. The root cau...

CVE-2017-13694

CVE-2017-13694 affects the Linux kernel up to 4.12.9. The acpi_ps_complete_final_op() function in drivers/acpi/acpica/psobject.c does not flush the node and node_ext caches, enabling a local attacker to trigger a kernel memory disclosure and bypass KASLR via a crafted ACPI table. The issue is mit...

CVE-2017-16648

CVE-2017-16648 affects the Linux kernel, specifically the dvb_frontend_free function in drivers/media/dvb-core/dvb_frontend.c, up to kernel 4.13.11. The issue is a use-after-free in the DVB frontend management path that can be triggered by a crafted USB device, enabling local users to cause a den...

CVE-2017-17053

CVE-2017-17053 affects the Linux kernel, specifically the init_new_context code path in arch/x86/include/asm/mmu_context.h, for kernels built with CONFIG_MODIFY_LDT_SYSCALL=y. Before 4.12.10, errors from LDT table allocation when forking a new process are not handled correctly, enabling a local a...

CVE-2017-5549

CVE-2017-5549 affects the Linux kernel prior to 4.9.5. The vulnerability exists in klsi_105_get_line_state (drivers/usb/serial/kl5kusb105.c) where, on a failure to read the line status, uninitialized heap memory contents are placed into a log entry. This can allow a local attacker to read sensiti...

CVE-2020-36788

CVE-2020-36788 affects the Linux kernel DRM/Nouveau: when nouveau_bo_init() fails, the underlying memory may be freed twice due to a use-after-free in the BO init path. The description explains that nouveau_bo_init() delegates to ttm_bo_init(), and on failure ttm_bo_init() calls a destructor that...

CVE-2021-46977

CVE-2021-46977 (Linux Kernel KVM VMX) : The vulnerability arises from preemption of the host while probing user return MSRs via RDMSR/WRMSR. If the MSR value differs per logical CPU, a WRMSR could corrupt the host value if KVM is preempted between the RDMSR and WRMSR and rescheduled on another CP...

CVE-2021-46997

CVE-2021-46997 is rejected/not used; not an active vulnerability entry.

CVE-2021-47238

CVE-2021-47238 involves a memory-leak in the Linux kernel IPv4 multicast path (ip_mc_add1_src) that occurs when manipulating IGMP source lists. The root cause is a leak in ip_mc_add1_src/ip_mc_add_src handling of in_dev->mc_list->sources, described in the advisory. The linked commits and di...

CVE-2021-47291

CVE-2021-47291 corresponds to a Linux kernel vulnerability where a slab-out-of-bounds occurs in ipv6 fib6_nh_flush_exceptions during KASAN-self-test scenarios. The issue is tied to the handling/initialization of fib6_metrics when an nh is provided, and the fix mirrors an earlier patch by explicit...

CVE-2021-47379

The CVE-2021-47379 entry describes a kernel vulnerability in the Linux blk-cgroup subsystem related to a use-after-free (UAF) in the block I/O scheduler. The issue arises when destroying the blkcg policy hierarchy, where the BFQ/BLK MQ path can trigger a use-after-free during queue initialization...

CVE-2021-47520

Summary (CVE-2021-47520): A Linux kernel issue in can: pch_can: pch_can_rx_normal leads to a use-after-free when dereferencing skb after netif_receive_skb(skb); the can_frame cf aliases skb memory and is dereferenced immediately after. The documented fix is a reordering of lines to prevent derefe...

CVE-2022-3544

CVE-2022-3544 describes a memory leak in the Linux kernel within Netfilter, specifically the damon_sysfs_add_target function in mm/damon/sysfs.c. The issue is triggered through manipulation of target handling and is described as a vulnerability in the kernel’s Netfilter component. The initial des...

CVE-2022-48829

CVE-2022-48829 is a Linux kernel vulnerability fixed in NFSD for NFSv3 SETATTR/CREATE handling of large file sizes. The issue arises from iattr::ia_size being a loff_t and the potential to pass values larger than s64_max, risking incorrect data if large sizes are silently capped. The fix removes ...

CVE-2022-49021

CVE-2022-49021 affects the Linux kernel’s PCI/phy probing path. A null-pointer dereference can occur during device removal if phy_attach_direct() fails after initializing dev->driver but before binding a driver (device_bind_driver not called). This leaves the knode_driver entry uninitialized, ...

CVE-2022-49228

CVE-2022-49228 relates to the Linux kernel and a bug in BTF decl_tag handling during function tagging in BPF. The issue arises when btf_decl_tag_resolve() checks a function type’s func_proto; the code attempted to access func_proto’s vlen for a type 3 function prototype, which was out of range an...

CVE-2022-49377

CVE-2022-49377 is a Linux kernel vulnerability in the block multi-queue (blk-mq) path. The root cause was a use-after-free involving ->tagset during blk_mq_run_hw_queues, when there were no queued requests and the tagset could be freed after blk_cleanup_queue. The fix disables touching tagset ...