CVE-2022-49277

CVE-2022-49277 relates to a memory leak in the JFFS2 code path of the Linux kernel during jffs2_do_mount_fs. The issue arises when jffs2_build_filesystem() returns an error, leading to unfreed resources reported by kmemleak (kmem_cache_alloc_trace and __kmalloc paths). The advisory states the lea...

CVE-2022-49622

CVE-2022-49622 (Linux kernel) describes a use-after-free risk in nf_tables when verdict is NF_STOLEN in netfilter, where skb freeing may have occurred. The fix prevents illegal skb access by: (1) caching skb->nf_trace in the trace state and refreshing it when verdict != STOLEN; (2) skipping sk...

CVE-2022-49635

CVE-2022-49635 affects the Linux kernel. The issue is in drm/i915/selftests, where a subtraction overflow can occur when hole_end is small, and addr + 2 * min_alignment can overflow in mock tests. A patch was applied (cherry picked from commit ab3edc679c552a466e4bf0b11af3666008bd65a2) to fix both...

CVE-2023-39180

CVE-2023-39180 affects the Linux kernel ksmbd module. The root cause is improper memory release after the memory’s lifetime in SMB2_READ handling, enabling a network-based DoS without authentication on systems with ksmbd enabled. Public details confirm impact as denial-of-service; no vendor patch...

CVE-2023-50431

CVE-2023-50431 concerns the Linux kernel driver path sec_attest_info in drivers/accel/habanalabs/common/habanalabs_ioctl.c, where info->pad0 is not initialized, allowing an information leak to user space. The vulnerability affects the Linux kernel up to versions around 6.6.5 (per the provided ...

CVE-2023-52510

CVE-2023-52510 affects the Linux kernel's ieee802154 ca8210 driver. The vulnerability is caused by a potential use-after-free when of_clk_add_provider() fails in ca8210_register_ext_clock(), which could lead to double clk_unregister() calls during ca8210_probe/ca8210_remove. The fix removes the f...

CVE-2023-52511

In the Linux kernel, the following vulnerability has been resolved: spi: sun6i: reduce DMA RX transfer width to single byte Through empirical testing it has been determined that sometimes RX SPItransfers with DMA enabled return corrupted data. This is down to singleor even multiple bytes lost dur...

CVE-2023-52576

In the Linux kernel, the following vulnerability has been resolved: x86/mm, kexec, ima: Use memblock_free_late() from ima_free_kexec_buffer() The code calling ima_free_kexec_buffer() runs long after the memblockallocator has already been torn down, potentially resulting in a useafter free in memb...

CVE-2023-52616

CVE-2023-52616 affects the Linux kernel crypto/mpi code path: mpi_ec_init may fail to clear all fields in the mpi_ec_ctx on initialization, leading to a crash when the structure is released and a field is referenced later (notably when Za is computed for SM2). The issue is caused by fields not be...

CVE-2023-53008

CVE-2023-53008 (Linux kernel): CIFS session setup fix to prevent memory leaks by freeing cifs_ses::auth_key.response before allocating it. This addresses potential memory leaks during reconnect or mounting. The advisory states the fix in the CIFS session setup path; no exploit specifics are provi...

CVE-2023-53057

The CVE-2023-53057 entry corresponds to a Linux kernel Bluetooth HCI global-out-of-bounds bug. The issue arises in hci_init_stage_sync() looping a variable-length array, where amp_init1[] and amp_init2[] lacked an intentionally invalid final element, enabling out-of-bounds reads during hci_dev_op...

CVE-2023-53073

CVE-2023-53073 documents a Linux kernel issue in perf/x86/amd/core where the unhandled overflow status bits were not consistently masked when the loop continued after x86_perf_event_set_period() could return 0. This caused a warning and an inconsistency because the 'handled' counter could be incr...

CVE-2024-26714

CVE-2024-26714 affects the Linux kernel interconnect/qcom sc8180x module. Root cause: CO0 BCM must stay up as a keepalive to prevent hardware such as the UFS controller from losing connectivity, which can hang the platform and trigger heavy logspam. Documented fix marks CO0 BCM keepalive to ensur...

CVE-2024-26869

CVE-2024-26869 affects the Linux kernel in the f2fs subsystem. The root cause is a race in invalidating meta inode pages during GC, which can cause data corruption. The fix replaces invalidate_mapping_pages() with truncate_inode_pages_range() to ensure meta_inode pages are dropped safely. Several...

CVE-2024-35932

CVE-2024-35932 affects the Linux kernel DRM VC4 driver. The issue is in non-blocking commits where the check plane->state->fb == state->fb is not reliably protected, causing potential refcount underflow across prepare_fb/cleanup_fb. The root cause is that drm_plane.state should not be ac...

CVE-2024-35961

Summary: CVE-2024-35961 affects the Linux kernel mlx5 driver (net/mlx5). A non-fatal firmware error during device probe could cause a WARN_ON because devlink_register() was invoked late; the fix is to call devl_register() first under the devlink lock to avoid the warning. The issue is documented ...

CVE-2024-36023

CVE-2024-36023 is a Linux kernel vulnerability involving a null pointer dereference. The alteration was reported by Julia Lawall and has been resolved in the kernel code base, as reflected by the linked advisories and the CVSS vector (AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) with a base score of 5.5 ...

CVE-2024-40917

CVE-2024-40917 affects the Linux kernel memory management (memblock) related to NUMA/node handling. The issue stems from memblock_validate_numa_coverage() allowing a NUMA_NO_NODE condition and memblock_alloc_range_nid() warning about MAX_NUMNODES, leading to a NULL dereference in memmap_init() wh...

CVE-2024-42086

CVE-2024-42086 pertains to the Linux kernel iio: chemical: bme680 driver, where overflow could occur in compensate() functions due to bit shifting in internal calculations. The issue affects the kernel’s IIO BME680 support and was fixed by a code patch addressing the overflow paths in compensate(...

CVE-2024-42117

CVE-2024-42117 affects the Linux kernel DRM/AMD display path. The root cause was that find_disp_cfg_idx_by_plane_id and find_disp_cfg_idx_by_stream_id could return -1 and that value was used as an index, causing overrun/negative-return conditions. The fix is to return a valid positive index or ta...

CVE-2024-42287

Root cause: CVE-2024-42287 affects the Linux kernel SCSI qla2xxx path where command completion was done early in the unload path outside the lock, causing a race that could crash the system. The fix is to complete the command within the lock, avoiding the race with dma_free_attr and multiple comp...

CVE-2024-43819

CVE-2024-43819 : In the Linux kernel, KVM for s390 was updated to reject user memory region operations on ucontrol VMs. Specifically, KVM_SET_USER_MEMORY_REGION and KVM_SET_USER_MEMORY_REGION2 ioctls are now rejected for ucontrol VMs because their kvm->arch.gmap is set to 0, which could lead t...

CVE-2024-43864

The CVE-2024-43864 issue affects the Linux kernel mlx5e CT entry handling. A CT entry update would allocate a new modify header; if allocation failed (e.g., firmware maxed out), the new modify header becomes an error pointer and could trigger a panic during deallocation, while the old modify head...

CVE-2024-45007

The CVE-2024-45007 issue affects the Linux kernel component related to xillybus workqueues. Root cause: when a kref is decremented, destroy_workqueue() could be invoked from within a work item that is destroying its own workqueue, an illegal scenario. The documented fix introduces a module-global...

CVE-2024-46727

CVE-2024-46727 detail (mode C): Affects Linux kernel’s drm/amd/display path, specifically resource_log_pipe_topology_update. The issue arises from a missing NULL check on otg_master, which could trigger a NULL_RETURN path. A fix was implemented by adding an otg_master NULL check to prevent the NU...

CVE-2024-46760

CVE-2024-46760 concerns the Linux kernel wifi driver rtw88 (usb) where RX status handling could dereference a NULL pointer if USB replies arrive before the device is fully initialized. The root cause is initiation of USB REQs (usb_submit_urb) before rtw_dev setup completes, allowing races with in...

CVE-2024-46798

CVE-2024-46798 (Linux kernel, ASoC: dapm) : A use-after-free in snd_soc_pcm_runtime is triggered during system suspend when snd_pcm_suspend_all() accesses a freed object. The issue was detected with KASAN configurations and occurs because snd_pcm_sync_stop() handles substream.runtime defensively,...

CVE-2024-47682

CVE-2024-47682 – Linux kernel scsi sd off-by-one fix (detailed in connected docs): The vulnerability arises in sd_read_block_characteristics() when a device returns page 0xb1 with length 8, potentially allowing an out-of-bounds memory access at offset 8 of the zoned field. The issue has been reso...

CVE-2024-47746

CVE-2024-47746 affects the Linux kernel fuse subsystem. The issue arises when FUSE_I_CACHE_IO_MODE is set and an exclusive lock is not used, potentially causing fuse_file_cached_io_open to wait indefinitely. The root cause is locking mode for this flag; the fix is to switch to exclusive locking w...

CVE-2024-49941

CVE-2024-49941 in the Linux kernel relates to gpiolib’s gpiod_get_label() where a NULL label could be dereferenced if srcu_dereference_check() returns NULL, leading to accessing label->str without verifying label. The patch adds a proper NULL check for label and removes the label->str != NU...

CVE-2024-50176

CVE-2024-50176 is tied to the Linux kernel remoteproc k3-r5, where an error path during power-up could violate initialization rules and cause a core mismatch (first core usable, second not), leading to crashes on shutdown. The connected Nessus entry indicates this vulnerable state has not been pa...

CVE-2024-50260

CVE-2024-50260 affects the Linux kernel sock_map subsystem. The issue is a NULL-pointer dereference between sock_map_link_detach and sock_map_link_update_prog under sockmap_mutex, potentially dereferencing sockmap_link->map when a link is being released during an update. The fix adds a NULL po...

CVE-2024-53080

The CVE concerns the Linux kernel’s panthor driver. A vulnerability in panthor_vm_pool_get_vm() (drivers/gpu/drm/panthor/panthor_mmu.c) arises from incorrect locking while retrieving a VM pointer from the panthor pool. The underlying issue is improper use of XArray locking, which could allow a lo...

CVE-2024-53238

Technical details about CVE-2024-53238 are not publicly provided in the supplied documents. Please monitor vendor advisories and connected feeds for affected products, impact, and remediation.

CVE-2024-56784

Technical details for CVE-2024-56784 are not provided in the connected documents. The initial description notes a Linux kernel drm/amd/display fix, but explicit affected versions, root cause specifics, exploitability, or remediation are not disclosed here. Monitor for updates.

CVE-2024-58078

CVE-2024-58078 affects the Linux kernel’s misc subsystem. The issue stems from mismatched id allocation/free in dynamic/minor handling: misc_minor_alloc started using ida for all dynamic/misc minors, but misc_minor_free used ida_free regardless, creating a potential id-usage mismatch (reported tr...

CVE-2025-21713

CVE-2025-21713 affects the PowerPC/ pSeries IOMMU path in the Linux kernel. The issue occurs when reusing the same vfio container across different IOMMU groups, where spapr_tce_set_window() may lead to cleanup that dereferences a null or invalid tbl, causing a kernel crash (NULL pointer dereferen...

CVE-2025-21793

CVE-2025-21793 concerns the Linux kernel SPI SN-F-OSPI path. The linked Azure/Linux Nessus entry confirms the issue: when there is no dummy cycle in spi-nor commands, dummy bus cycle bytes and width become zero, risking a divide-by-zero warning. The fix is to return zero to avoid such calculation...

CVE-2025-21944

CVE-2025-21944 concerns the ksmbd component of the Linux kernel, where a bug in trap handling for smb2_lock can occur if the lock count exceeds 1. The root cause is that the code checked flags from the wrong source (flags) instead of the flags of smb_lock, which may lead to an erroneous trap in t...

CVE-2025-37937

CVE-2025-37937 refers to a Linux kernel vulnerability in the objtool/media path for the dib8000 DVB frontend. The issue occurs when dib8000_set_dds() calls dib8000_read32() and receives zero, causing a divide-by-zero. The kernel fix prevents this division by zero, addressing an UBSAN warning seen...

CVE-2025-37949

CVE-2025-37949 concerns the Linux kernel XenBus code. The connected docs describe a NULL pointer dereference in xenbus_thread caused by a wake-up path where req may be freed before resuming, and the fix adds two separate kref lifetimes (one for the caller and one for xenbus_thread) with kref_put(...

CVE-2025-37990

CVE-2025-37990 affects the Linux kernel’s wifi/brcm80211 fmac, where brcmf_usb_dl_writeimage() did not validate the return value of brcmf_usb_dl_cmd(), leaving state.state and state.bytes uninitialized if the call failed. The fix adds error handling to jump to the error path when brcmf_usb_dl_cmd...

CVE-2025-38459

CVE-2025-38459: Linux kernel ATM CLIP module vulnerability causing Denial of Service via infinite recursion in clip_push(). Root cause: second ATMARP_MKIP ioctl triggers recursion when vcc->old_push is used after first call; mitigation implemented by checking vcc->user_back (clip_vcc) and u...

CVE-2008-4307

CVE-2008-4307 is a Linux kernel local-denial-of-service issue caused by a race in do_setlk (fs/nfs/file.c) where improper handling of a race between fcntl and close in the EINTR path can crash the kernel and leave a stray FL_POSIX lock. Affected product: Linux kernel versions before 2.6.26. The v...

CVE-2009-0834

The CVE-2009-0834 issue affects the Linux kernel up to 2.6.28.7 on x86_64, where audit_syscall_entry mishandles 32-bit processes making 64-bit syscalls or 64-bit processes making 32-bit syscalls. This can allow local users to bypass certain syscall audit configurations, and is related to CVE-2009...

CVE-2010-3310

CVE-2010-3310 refers to multiple signedness errors in net/rose/af_rose.c of the Linux kernel, fixed before 2.6.36-rc5-next-20100923. The vulnerability allows local users to induce a denial of service (heap memory corruption) or possibly cause other unspecified impacts through a rose_getname call ...

CVE-2011-1079

The CVE-2011-1079 issue affects the Linux kernel up to version 2.6.38 (before 2.6.39) in the bnep_sock_ioctl path (net/bluetooth/bnep/sock.c). A local attacker could exploit inadequate termination of a device field (missing trailing NUL) via a BNEPCONNADD command to read kernel stack memory and p...

CVE-2011-1082

CVE-2011-1082 affects the Linux kernel prior to 2.6.38. The flaw is in fs/eventpoll.c where epoll file descriptors may be placed inside other epoll data structures without proper validation of closed loops or deep chains. This can let a local user cause a denial of service (deadlock or stack memo...

CVE-2011-2203

CVE-2011-2203 affects the Linux kernel (2.6.x) as cited in MiracleLinux AXSA:2012-220:01. The hfs_find_init function can crash the kernel (NULL pointer dereference) and trigger a kernel OOPs when mounting an HFS filesystem with a malformed MDB extent record, enabling a local DoS. The MiracleLinux...

CVE-2013-2893

Summary of CVE-2013-2893 from provided sources : The Linux kernel HID subsystem (through version 3.11) with CONFIG_LOGITECH_FF, CONFIG_LOGIG940_FF, or CONFIG_LOGIWHEELS_FF enabled is vulnerable to a denial of service via a crafted USB HID device. The issue manifests as a heap-based out-of-bounds ...