CVE-2023-52510

CVE-2023-52510 affects the Linux kernel's ieee802154 ca8210 driver. The vulnerability is caused by a potential use-after-free when of_clk_add_provider() fails in ca8210_register_ext_clock(), which could lead to double clk_unregister() calls during ca8210_probe/ca8210_remove. The fix removes the f...

CVE-2023-52627

CVE-2023-52627 affects the Linux kernel IIO ADC driver for AD7091R-5 devices. The issue was a missing set of event configuration callbacks, causing null pointer dereferences when users attempted to configure or read IIO events and their thresholds. The fix adds event configuration callbacks to re...

CVE-2023-52633

CVE-2023-52633 affects the Linux kernel time-travel feature. In basic time-travel mode, timer_read() may process a timer interrupt after computing the forward time but before finishing the update, causing the interrupt to set a time that is incompatible with the forward, which can make time go ba...

CVE-2023-52640

CVE-2023-52640 (Linux kernel ntfs3): The issue is a local, out-of-bounds in ntfs_listxattr where the length of the name must not exceed the allocated EA space. Affected code path is in the ntfs3 filesystem. The connected Astra Linux advisory confirms the same vulnerability and indicates a resolve...

CVE-2023-53095

The CVE-2023-53095 issue is in the Linux kernel DRM TTM path, where a NULL pointer dereference could occur during swap decisions. The root cause is a mismatch in locking between res->bo (LRU lock) and bo->resource (object lock), with bo->resource clearing also guarded by the LRU lock. Th...

CVE-2023-53101

CVE-2023-53101 affects the Linux kernel ext4 bootloader inode handling. The issue arises when EXT4_IOC_SWAP_BOOT initializes an inode with a non-zero i_size, causing i_disksize to remain non-zero and creating an i_size vs i_disksize inconsistency that can trigger a kernel warning (as shown in the...

CVE-2024-26727

CVE-2024-26727 (Linux kernel, btrfs subvolume creation) Concrete details are present in connected Astra/Linux advisory. The issue arises when creating a new subvolume under btrfs: after inserting the root item, a backref/read could access the subvolume before a preallocated anonymous device (anon...

CVE-2024-26748

CVE-2024-26748 (Linux kernel) — Affects the usb cdns3 gadget driver. A memory double-free could occur when handling a zero-length packet that was queued as an extra request. The patch adds a check at line 829 to skip usb_gadget_giveback_request() for this additional zero-length request, avoiding ...

CVE-2024-26836

In CVE-2024-26836, the Linux kernel flaw lies in platform/x86 think-lmi where the password opcode ordering must occur before changing the attribute value for Lenovo workstations with Admin password enabled. The fix adjusts this order to address the issue (tested on some ThinkPads). The vulnerabil...

CVE-2024-36029

CVE-2024-36029 affects the Linux kernel’s MMC subsystem, specifically the mmc: sdhci-msm driver. The vulnerability arises because the sdhci-msm driver does not set the host->runtime_suspended flag, which protects access to the LED device registered by the generic sdhci code. As a result, acces...

CVE-2024-36973

CVE-2024-36973 is a Linux kernel vulnerability in the misc: microchip: pci1xxxx path. The issue is a double free in the error handling of gp_aux_bus_probe, where memory freed by ida_free() and kfree(aux_device_wrapper) could be freed again if auxiliary_device_add() fails and calls auxiliary_devic...

CVE-2024-38549

CVE-2024-38549 affects the Linux kernel in the DRM/mediatek path: mtk_drm_gem_obj lacked a 0-byte allocation check, potentially leading to a kernel panic when a userspace app allocates a 0x0 GBM buffer. The fix adds a 0-byte allocation check in mtk_drm_gem_init, and testing on MT8188 confirms tha...

CVE-2024-42063

CVE-2024-42063: In the Linux kernel, a KMSAN-flagged uninitialized memory issue was identified in BPF devmap when calling map_lookup_elem/map_delete_elem in interpreter mode. Reproducer shows uninitialized value paths through __dev_map_lookup_elem and bpf_map_lookup_elem during BPF program execut...

CVE-2024-42067

CVE-2024-42067 : In the Linux kernel, the vulnerability involves BPF/JIT memory protection. The function set_memory_rox() can fail, leaving memory unprotected. The fix makes the code check the return value of set_memory_rox() via bpf_jit_binary_lock_ro() and bail out if an error occurs, ensuring ...

CVE-2024-42319

CVE-2024-42319 (Linux kernel) : The issue affects the mailbox/CMDQ path (mtk-cmdq) where devm_mbox_controller_register() was invoked before devm_pm_runtime_enable(). On unbind, a WARN_ON can trigger due to pm_runtime_get_sync()

CVE-2024-43847

CVE-2024-43847 affects the Linux kernel wireless driver ath12k (reported under the Linux kernel vulnerability about fragmented packets). The issue arises when the monitor ring and the reo reinject ring share the same ring mask index; an interrupt on the reo reinject ring can cause the monitor rin...

CVE-2024-46727

CVE-2024-46727 detail (mode C): Affects Linux kernel’s drm/amd/display path, specifically resource_log_pipe_topology_update. The issue arises from a missing NULL check on otg_master, which could trigger a NULL_RETURN path. A fix was implemented by adding an otg_master NULL check to prevent the NU...

CVE-2024-47664

The CVE affects the Linux kernel SPI driver for Hisilicon Kunpeng (spi: hisi-kunpeng). The root cause is a division by zero in hisi_calc_effective_speed() when max_speed_hz (provided by firmware) is 0. The firmware-supplied value is treated as trusted, but 0 is now explicitly invalidated, and an ...

CVE-2024-49887

CVE-2024-49887 targets the f2fs file system in the Linux kernel. Root cause: when injecting a fault for “no free segment,” the kernel could panic in __allocate_new_segment / get_new_segment, triggering a serious system halt. The description notes the issue was resolved by a fix that prevents pani...

CVE-2024-50268

CVE-2024-50268: Linux kernel USB-C UCSI update path fix. The vulnerability stems from user-controlled *cmd via debugfs allowing new_cam values up to 255, while ucsi_ccg_update_set_new_cam_cmd() updates an updated[] buffer sized UCSI_MAX_ALTMODES (30), creating an out-of-bounds read. The issue occ...

CVE-2024-53083

Technical details for CVE-2024-53083 are not present in the provided connected documents; only a brief kernel description is given. Monitor for updates.

CVE-2024-53107

CVE-2024-53107 refers to a Linux kernel vulnerability in fs/proc/task_mmu that could allow an integer overflow during pagemap_scan_get_args() due to the arg->vec_len value being used in a multiplication by sizeof(struct page_region). The fix changes the calculation to use size_mul() and adds s...

CVE-2024-53109

CVE-2024-53109 affects Linux kernel nommu builds. The issue occurred when deleting a vma entry from a maple tree: do_munmap required passing NULL to vma_iter_prealloc(), but an incorrect argument was provided, causing crashes when accessing a vma iterator (e.g., acct_collect() reading vma sizes)....

CVE-2024-53238

Technical details about CVE-2024-53238 are not publicly provided in the supplied documents. Please monitor vendor advisories and connected feeds for affected products, impact, and remediation.

CVE-2024-54456

CVE-2024-54456 : Linux kernel NFS path vulnerability in nfs_sysfs_link_rpc_client() leading to potential buffer overflow due to strcat on cl_program->name; fix replaces with strscpy() and strncat() (kernel-side patch). Affected: Linux kernel NFS subsystem; root cause: unbounded name field size...

CVE-2024-57895

CVE-2024-57895 affects the Linux kernel component ksmbd, where the code path for setting file times (mtime) would warn when ATTR_CTIME flags were not considered. The connected Azure Linux 3.0 security update notes that ksmbd was attempting to set atime/mtime via notify_change without setting ctim...

CVE-2025-21729

The CVE-2025-21729 vulnerability affects the Linux kernel wifi driver rtw89 (rtwdev) with a race between cancel_hw_scan and hw_scan completion. Root cause: rtwdev->scanning was not mutex-protected, allowing cancel_hw_scan to observe/modify state while hw_scan completion could unset the flag an...

CVE-2025-21809

Technical details for CVE-2025-21809 are not publicly available in the provided connected documents; monitor for official advisories or vendor updates for affected products, impact, and fixes.

CVE-2025-21972

The connected BDU/FSTEC entry describes a vulnerability in the Linux kernel MCTP implementation, specifically the mctp_frag_queue() function in net/mctp/route.c. It cites improper memory release as the root cause, leading to a memory leak and the potential to cause a service failure. Exploitation...

CVE-2025-37807

CVE-2025-37807 is a Linux kernel issue in the BPF percpu hashmap path where a percpu pointer is stored at an 8-byte aligned location only if the key_size rounds up to 8; otherwise a 4-byte aligned location is used, causing kmemleak to miss the pointer and report a leak. The root cause is an align...

CVE-2025-37818

LoongArch Linux kernel vulnerability CVE-2025-37818: the issue originates from huge_pte_offset() returning a PMD slot pointer even when the underlying pmd points to an invalid_pte_table, which could be misinterpreted as a swap entry by generic is_swap_pte() and lead to a crash in pfn_swap_entry_t...

CVE-2025-37913

Summary: CVE-2025-37913 affects the Linux kernel’s net_sched/qfq when a netem child qdisc can cause the parent enqueue callback to be reentrant, risking memory corruption from adding the same classifier twice. The root cause is a double list add in the class when reentry occurs; the fix adds a gu...

CVE-2025-37923

CVE-2025-37923 affects the Linux kernel tracing path. The bug is a slab-out-of-bounds write in trace_seq_to_buffer() that can copy more data than PAGE_SIZE when used by tracing_splice_read_pipe, leading to a local, high-severity impact. The root cause is an out-of-bounds copy in trace_seq_to_buff...

CVE-2025-38077

CVE-2025-38077 affects the Linux kernel, in platform/x86 dell-wmi-sysman. The root cause was a potential buffer overflow when current_password_store() accessed buf[length-1] after an empty string length. A check for empty strings was added. The Azure Linux Nessus advisory confirms the fix and rec...

CVE-2025-38415

CVE-2025-38415 is a Linux kernel vulnerability affecting Squashfs where sb_min_blocksize(sb, SQUASHFS_DEVBLK_SIZE) can return 0, causing msblk->devblksize to be 0 and leading to an out-of-bounds shift (64) in msblk->devblksize_log2. The issue stems from not handling a 0 return from sb_min_b...

CVE-2026-31532

CVE-2026-31532 affects the Linux kernel’s raw CAN socket implementation. A use-after-free can occur when, during unregistration of CAN receive filters, the kernel defers receiver deletion with RCU and frees per-CPU storage ro->uniq too early in raw_release(). The fix moves free_percpu(ro->u...

CVE-2008-0600

CVE-2008-0600 affects the Linux kernel vmsplice_to_pipe flaw present in 2.6.17–2.6.24.1. It allows an unprivileged local user to gain root privileges via crafted vmsplice calls. Several Nessus advisories place this in the context of affected distributions (e.g., MiracleLinux, Oracle Linux/OracleV...

CVE-2008-5700

The CVE-2008-5700 entry concerns the Linux kernel Libata subsystem: it does not set minimum SG_IO timeouts, allowing local DoS via multiple SG_IO invocations. Connected docs (MiracleLinux AXSA advisories) explicitly list CVE-2008-5700 and state the issue affects kernel versions prior to 2.6.27.9,...

CVE-2009-1630

CVE-2009-1630 affects the Linux kernel nfs client: the nfs_permission function in fs/nfs/dir.c (kernel 2.6.29.3 and earlier) does not check execute (MAY_EXEC) permission bits when atomic_open is available. This allows local users to bypass permissions and execute files, as demonstrated by files o...

CVE-2009-4308

CVE-2009-4308 affects the Linux kernel ext4 filesystem: the ext4_decode_error function in fs/ext4/super.c can cause a NULL pointer dereference and potential other impact when processing a read-only, journal-less filesystem, enabling user‑assisted remote denial of service. The vulnerability is fix...

CVE-2010-4078

CVE-2010-4078 affects the Linux kernel before 2.6.36-rc6, where the sisfb_ioctl function in drivers/video/sis/sis_main.c fails to properly initialize a structure member. This allows local users to leak potentially sensitive information from kernel stack memory via the FBIOGET_VBLANK ioctl. Connec...

CVE-2010-4082

CVE-2010-4082 affects the Linux kernel prior to 2.6.36-rc5, where viafb_ioctl_get_viafb_info in drivers/video/via/ioctl.c fails to initialize a structure member. This can allow local users to leak potentially sensitive information from kernel stack memory via a VIAFB_GET_INFO ioctl call. The issu...

CVE-2012-2744

The vulnerability CVE-2012-2744 affects the Linux kernel (net/ipv6/netfilter/nf_conntrack_reasm.c) when nf_conntrack_ipv6 is enabled. It allows remote attackers to cause a denial of service (NULL pointer dereference and system crash) via certain fragmented IPv6 packets. A fix is available in kern...

CVE-2013-0311

The CVE-2013-0311 issue affects the Linux kernel’s vhost translation logic. Specifically, the translate_desc function in drivers/vhost/vhost.c mishandles cross-region descriptors in kernels prior to 3.7, enabling a guest OS user with KVM privileges to escalate to host OS privileges. The vulnerabi...

CVE-2013-1773

CVE-2013-1773 involves a buffer overflow in the Linux kernel VFAT UTF-8 to UTF-16 conversion during a VFAT write when utf8 mount option is used. Affects Linux kernel before 3.3; local privilege escalation or system crash possible. The connected advisory set includes references to kernel patches (...

CVE-2013-1929

The CVE-2013-1929 issue is a heap-based buffer overflow in the tg3_read_vpd function of the Linux kernel (drivers/net/ethernet/broadcom/tg3.c) prior to 3.8.6. It allows physically proximate attackers to cause a denial of service (system crash) or possibly execute arbitrary code via crafted Vital ...

CVE-2013-2147

CVE-2013-2147 affects the Linux kernel drivers for HP Smart Array/Compaq SMART2 (cpqarray/cciss). The root cause is uninitialized data structures in ida_locked_ioctl (via /dev/ida) and cciss_ioctl32_passthru (via /dev/cciss), allowing local attackers to read kernel memory how? through crafted IDA...

CVE-2013-2899

CVE-2013-2899 concerns the Linux kernel HID subsystem: the file drivers/hid/hid-picolcd_core.c is vulnerable through kernel version 3.11 when CONFIG_HID_PICOLCD is enabled. The issue allows physically proximate attackers to cause a denial of service via a crafted device, manifested as a NULL poin...

CVE-2013-4483

The issue CVE-2013-4483 affects the Linux kernel (ipc/util.c: ipc_rcu_putref) where reference count handling is flawed in versions prior to 3.10. This local denial of service can be triggered by a crafted application, leading to memory consumption or system crash. Public advisories (e.g., Unity L...

CVE-2014-0155

The CVE-2014-0155 entry concerns the Linux kernel up to 3.14.1, where the ioapic_deliver function in virt/kvm/ioapic.c does not properly validate the return value of kvm_irq_delivery_to_apic. This can allow a guest OS user to trigger a host OS denial of service (host crash) via a crafted entry in...