CVE-2024-26807

CVE-2024-26807 affects the Linux kernel via the cadence-quadspi driver path: runtime_suspend() and runtime_resume() incorrectly use dev_get_drvdata to retrieve a struct that is not a valid spi_controller pointer, causing memory corruption during PM runtime if probe enables PM runtime. Local impac...

CVE-2021-47138

In CVE-2021-47138, the Linux kernel cxgb4 driver is vulnerable because hardware registers for the server TID base can hold invalid values when the adapter is in a bad state (e.g., AER fatal error). Reading these values during filter clearing could cause out-of-bounds memory access. The fix uses t...

CVE-2021-47203

CVE-2021-47203 concerns the Linux kernel SCSI lpfc driver. The description details a corruption in the lpfc_drain_txq() path where, if an adapter send fails, a local fail_msg is set and jobs are added to a completions list. Processing of subsequent jobs continues, and because fail_msg remains set...

CVE-2021-47366

CVE-2021-47366 affects the Linux kernel afs client (AFS-3) when talking to non‑YFS OpenAFS servers. The issue is a reads/position corruption caused by sign‑extending the 64‑bit file position to signed 32‑bit values in FS.FetchData/FetchData64 logic. The fix captures capability bits from FS.GetCap...

CVE-2022-48636

CVE-2022-48636 affects the Linux kernel, specifically the s390/dasd path. The issue is an Oops in dasd_alias_get_start_dev caused by a missing pavgroup dereference, created by a race: pavgroup can become NULL between function entry and _lcu_update(), when lcu->lock is not held. The patch fixes...

CVE-2022-48664

CVE-2022-48664 concerns the Linux kernel, specifically the btrfs filesystem. The issue caused hangs during unmount when a space reclaim worker is stopped, usually observed as a long-blocked umount task in tests (e.g., generic/562). The described sequence shows the cleaner kthread starting a trans...

CVE-2022-48702

CVE-2022-48702 : In the Linux kernel, ALSA emu10k1’s snd_emu10k1_pcm_channel_alloc() can perform out-of-bounds access when the voice allocator wraps around near the end of the array (first_voice + requested_voice_count > 64). The UBSAN report shows index 65 accessed in snd_emu10k1_voice[64]. T...

CVE-2022-48829

CVE-2022-48829 is a Linux kernel vulnerability fixed in NFSD for NFSv3 SETATTR/CREATE handling of large file sizes. The issue arises from iattr::ia_size being a loff_t and the potential to pass values larger than s64_max, risking incorrect data if large sizes are silently capped. The fix removes ...

CVE-2022-48911

CVE-2022-48911 is a Linux kernel vulnerability in netfilter nf_queue: a use-after-free risk related to sock_hold() and possibly an already-zero sk_refcnt. If the check fails, the packet cannot be queued and will be dropped by the caller. Connected advisories confirm a fix was applied in the kerne...

CVE-2022-48994

CVE-2022-48994 affects the Linux kernel ALSA sequencing path. The issue arises from a prototype mismatch: seq_copy_in_user() and seq_copy_in_kernel() did not match snd_seq_dump_func_t, leading to -Wcast-function-type-strict checks with Clang. The patch fixes the function prototypes and removes ca...

CVE-2022-49021

CVE-2022-49021 affects the Linux kernel’s PCI/phy probing path. A null-pointer dereference can occur during device removal if phy_attach_direct() fails after initializing dev->driver but before binding a driver (device_bind_driver not called). This leaves the knode_driver entry uninitialized, ...

CVE-2022-49314

The CVE-2022-49314 issue is a Linux kernel resource leak in tty/icom_probe: if pci_read_config_dword fails, resources allocated earlier are recycled by pci_release_regions() and pci_disable_device(). The connected Astra Linux advisory reiterates the fix for linux-5.10/5.15 series kernels and mirr...

CVE-2022-49326

CVE-2022-49326 affects RTL818x wireless in Linux kernel (rtl8180/rtl8185/rtl8187se family). The issue arises from using not initialized tx queues, where reading ring->entries when zero can crash the kernel. The fix patches the driver to ignore priority for cards with a single TX queue and to p...

CVE-2022-49930

CVE-2022-49930 affects the Linux kernel in the RDMA/hns path (free_mr_init) where a race can cause a NULL pointer dereference when a lock is grabbed concurrently without proper initialization. The vulnerability leads to an in-kernel NULL dereference (call trace beginning at __mutex_lock.constprop...

CVE-2023-2430

CVE-2023-2430 concerns the Linux kernel io_uring IOPOLL path. The root cause is a missing lock in io_cqring_event_overflow(), allowing a locally privileged user to trigger a Denial of Service via the io_uring subsystem. Public advisories (Debian, SUSE, Amazon Linux) indicate patches exist in upda...

CVE-2023-38429

The CVE-2023-38429 issue is reported in the Linux kernel (pre-6.3.4) within ksmbd: fs/ksmbd/connection.c contains an off-by-one error in memory allocation (ksmbd_smb2_check_message), which can cause out-of-bounds access. Connected advisories (Astra Linux, Nessus plugin references) corroborate the...

CVE-2023-46343

CVE-2023-46343 concerns the Linux kernel up to version 6.5.9, with a NULL pointer dereference in send_acknowledge (net/nfc/nci/spi.c). Affected component: kernel. Root cause: NULL pointer dereference in send_acknowledge. Explicit impact details in the provided metrics show Confidentiality and Int...

CVE-2023-52925

CVE-2023-52925 relates to the Linux kernel nf_tables code. The vulnerability concerns how nf_tables handles inserts for duplicate set entries when some duplicates have expired. The description states that the system should ignore expired duplicates and not fail inserts, noting an asymmetry in nft...

CVE-2023-52937

Summary: CVE-2023-52937 affects the Linux kernel’s hv_balloon path. The vulnerability arises from a memory leak when using debugfs_lookup(): the result must be released with dput(), but this handling is not performed in the hv_balloon code. The available connected sources state the fix is to call...

CVE-2023-53042

CVE-2023-53042 : In the Linux kernel, the drm/amd/display component was vulnerable when writing DRR registers (e.g., OTG_V_TOTAL_MIN) in the same frame as a pipe commit, which could cause underflow. The issue has been resolved by preventing DRR from being set on a pipe commit. The available conne...

CVE-2024-26887

The CVE-2024-26887 issue affects the Linux kernel Bluetooth stack, specifically btusb (and related btmtk coredump handling). The vulnerability is a memory leak that occurs when cloning skb conditioned on CONFIG_DEV_COREDUMP, with potential skb leakage in the coredump path. The issue has been fixe...

CVE-2024-36003

CVE-2024-36003: Linux kernel ice driver deadlock in ice_reset_vf() due to lock order between VF config_lock and LAG mutex when ICE_VF_RESET_LOCK is involved. Connected advisories describe the issue as a possible circular locking dependency triggered on VF creation/removal, enabling a deadlock bet...

CVE-2024-36910

CVE-2024-36910 concerns the Linux kernel’s uio_hv_generic path. The issue arises when CoCo VMs allow set_memory_encrypted() or set_memory_decrypted() to fail, causing the operation to return an error while memory may be shared. The VMBus device UIO driver could then free decrypted/shared pages if...

CVE-2024-36918

In CVE-2024-36918, the Linux kernel’s bloom_filter_map creation path lacked a guard for bloom filter value sizes, allowing values larger than KMALLOC_MAX_SIZE to slip through. The patch adds a check during bloom filter creation to reject oversized values, aligning behavior with other map types an...

CVE-2024-38594

CVE-2024-38594 concerns the Linux kernel net: stmmac subsystem where the EST lock was moved from the EST structure into struct stmmac_priv to avoid reinitializing the mutex when reinitializing the EST. The underlying issue was that reinitializing the EST could reset the embedded mutex lock, trigg...

CVE-2024-40987

Mode C: The CVE-2024-40987 issue affects the Linux kernel's DRM/amdgpu driver, where a UBSAN warning in kv_dpm.c is fixed by adding a bounds check for sumo_vid_mapping_entry. The patch targets the root cause (bounds check failure) and reports the fix as part of the kernel update. Public reference...

CVE-2024-40994

CVE-2024-40994 is a Linux kernel issue: in the ptp subsystem, an integer overflow in max_vclocks_store on 32‑bit systems when doing 4 * max can occur. The documented fix changes the allocation to use kcalloc() to prevent the overflow. The Azure Nessus entry confirms the vulnerability affects an A...

CVE-2024-42120

CVE-2024-42120 pertains to the Linux kernel, specifically a vulnerability in the DRM AMD display code. The issue is an OVERRUN caused by accessing the pipe_ctx array without validating an index against its MAX_PIPES size, which could lead to out-of-bounds access in the vblank handling path. The d...

CVE-2024-42273

CVE-2024-42273 affects the Linux kernel f2fs driver. Concrete details show that the flaw arises when CURSEG_ALL_DATA_ATGC is assigned to COMPR_ADDR for a valid blkaddr, in scenarios involving f2fs_io setflags compression, leading to a kernel BUG_ON at fs/f2fs/segment.c:3589. The provided exploit ...

CVE-2024-42320

CVE-2024-42320 affects the Linux kernel’s s390/dasd subsystem. The root cause is a missing validation of the result from dasd_add_busid() when an allocation fails, which could yield a NULL pointer dereference in dasd_copy_pair_store() . The fix adds a check using IS_ERR() and propagates the error...

CVE-2024-43860

CVE-2024-43860 affects the Linux kernel remoteproc component for imx_rproc. In imx_rproc_addr_init(), the code may dereference NULL during parsing because of_count_phandle_with_args() can yield empty phandles and of_parse_phandle() may return NULL. The fix adds a NULL-return check to prevent dere...

CVE-2024-44969

CVE-2024-44969 affects the Linux kernel, specifically the s390/sclp path. If a task waiting for a Store Data operation is interrupted and the halt attempt fails due to hardware/firmware issues, the SCLP facility might later store data into buffers referenced by the original operation. The fix pre...

CVE-2024-46674

CVE-2024-46674 affects the Linux kernel USB/DWC3 ST platform path. The vulnerability stems from a probe error path that drops a platform device reference count due to an unused undo_platform_dev_alloc, causing unbalanced references and potential use-after-free when devm-managed resources are rele...

CVE-2024-46720

CVE-2024-46720 affects the Linux kernel; the issue is in the DRM AMDGPU path where a dereference after a null pointer check was fixed. The description from the initial document notes “drm/amdgpu: fix dereference after null check” and “check the pointer hive before use.” The connected Azure Linux ...

CVE-2024-46773

The CVE-2024-46773 issue in the Linux kernel concerns the drm/amd/display path where a division could be performed with a zero denominator (pbn_div). The root cause is a denominator that could be zero; upstream patch adds a check before use to prevent a DIVIDE_BY_ZERO. Public documents confirm th...

CVE-2024-46896

The CVE-2024-46896 vulnerability is in the Linux kernel DRM/AMDGPU path. It stems from a memset in drm_sched_job_init() that overwrites the initialized base.sched field in amdgpu_job_alloc, causing a CS validation path to be rejected with a bogus ring and potentially a crash. The fix passes NULL ...

CVE-2024-47664

The CVE affects the Linux kernel SPI driver for Hisilicon Kunpeng (spi: hisi-kunpeng). The root cause is a division by zero in hisi_calc_effective_speed() when max_speed_hz (provided by firmware) is 0. The firmware-supplied value is treated as trusted, but 0 is now explicitly invalidated, and an ...

CVE-2024-49910

CVE-2024-49910 concerns the Linux kernel DRM/AMD display path. The root cause was a null dereference risk in drm/amd/display's dcn401_set_output_transfer_func: set_output_gamma could be non-null checked, then dereferenced. The fix adds a null check for set_output_gamma before invoking it, elimina...

CVE-2024-49947

CVE-2024-49947 affects the Linux kernel net stack, specifically a vulnerability in virtio_net_hdr_to_skb() where an incorrectly set skb->csum_start could place the transport header before or after the network header when processing injected packets via af_packet. Syzbot-triggered warnings show...

CVE-2024-50165

CVE-2024-50165 is a Linux kernel vulnerability in the bpf_parse_param path (kernel/bpf/inode.c) where param->string was not preserved after parsing mount options, leading to a memory leak in kmem. The 8-byte leak and related stack traces were observed in kmemleak/memdup_user usage. The issue h...

CVE-2024-52559

The CVE-2024-52559 instance affects the Linux kernel’s DRM MSM driver: drm/msm/gem_submit() is vulnerable to an integer overflow when handling user-supplied submit->cmd[i].size and submit->cmd[i].offset (u32) via submit_lookup_cmds(). The issue is addressed by using size_add() to prevent wr...

CVE-2024-53062

Technical details for CVE-2024-53062 are not provided in the supplied documents. Monitor official advisories for patches and affected products; no root-cause, impact, or remediation details are available here.

CVE-2024-53132

CVE-2024-53132 affects the Linux kernel DRM XE OA subsystem (xe/oa). Root cause: missing outer runtime PM protection leading to a warning and potential mis-handling of runtime power management for xe/oa. Remedy: patch applied in commit b107c63d2953907908fd0cafb0e543b3c3167b75; kernel updates inco...

CVE-2024-53207

CVE-2024-53207 affects the Linux kernel Bluetooth MGMT path. The issue is a deadlock risk in the Bluetooth stack caused by hci_cmd_sync_dequeue leading to destroy function execution and hung tasks (example trace shows kworker blocks and a long hung_task_timeout). The provided description states a...

CVE-2024-56674

CVE-2024-56674 affects the Linux kernel virtio_net driver. The issue arises from the netdev_tx_reset_queue() invocation timing during virtnet_open/virtnet_close, which can leave TX completions unconsumed and crash on the first NAPI poll under heavy TX. The fix removes netdev_tx_reset_queue() from...

CVE-2024-56687

The CVE-2024-56687 issue affects the Linux kernel USB MUSB gadget path, where a request’s complete callback could be invoked from usb_ep_queue(), risking a hardware lockup and potential deadlock in the RX path. Root cause involves complex interaction between RXPKTRDY handling, IRQs, and the callb...

CVE-2025-21677

CVE-2025-21677 describes a Linux kernel PFCP issue where the device is destroyed along with the UDP socket’s netns. The root cause is that pfcp_newlink() links the PFCP device to dev_net(dev) rather than the socket’s netns, so removing netns ns1 can leave the device alive in dev_net(dev) and trig...

CVE-2025-21750

CVE-2025-21750 affects the Linux kernel wifi driver brcmfmac. The issue results from not validating the return value of of_property_read_string_index(), which can leave tmp uninitialized when a property is missing, leading to a kernel crash (BUG/OOPS) from passing a random pointer to devm_kstrdup...

CVE-2025-21850

CVE-2025-21850 concerns the Linux kernel nvmet subsystem where a crash can occur when disabling a namespace while a percpu counter tracks pending I/O. The root cause is unsafe handling of the percpu counter during enable/disable cycles, which could lead to a crash (as observed in blktests/nvme/05...

CVE-2025-21986

CVE-2025-21986 affects the Linux kernel net: switchdev notification path. The root cause is a blocking notification chain that uses a read-write semaphore to protect the chain, which allows recursive notifications to cause the semaphore to be acquired twice for reading. In certain bridge/offload ...