CVE-2025-38459

CVE-2025-38459: Linux kernel ATM CLIP module vulnerability causing Denial of Service via infinite recursion in clip_push(). Root cause: second ATMARP_MKIP ioctl triggers recursion when vcc->old_push is used after first call; mitigation implemented by checking vcc->user_back (clip_vcc) and u...

CVE-2024-53083

Technical details for CVE-2024-53083 are not present in the provided connected documents; only a brief kernel description is given. Monitor for updates.

CVE-2024-56580

Technical details are not provided in the supplied documents. Monitor official advisories for CVE-2024-56580.

CVE-2024-58097

CVE-2024-58097 | Affected software: Linux kernel driver ath11k (wifi) in PCI WLAN on certain chips. Issue: during monitor destination ring processing, MSDUs are reaped by buf_id; if a valid buffer for a buf_id cannot be obtained, an infinite loop occurs in destination processing, leading to kerne...

CVE-2025-21737

CVE-2025-21737: Linux kernel memory-leak in ceph_mds_auth_match fixed by freeing the temporary target path substring allocation on all branches; leak could trigger memory growth and kernel OOM. Connected docs corroborate the fix in ceph_mds_auth_match and the impact described in production. No ad...

CVE-2025-21742

CVE-2025-21742 affects the Linux kernel’s usbnet: ipheth handling within URB buffers. The vulnerability arose because the start of the NDP16 block could be placed anywhere in the URB based on wNdpIndex, allowing the fixed-length portion of NDP16 to extend past the URB end and trigger an OoB read....

CVE-2025-21953

CVE-2025-21953 describes a Linux kernel issue in the mana subsystem (MANA VM) triggered during hibernation. If mana_gd_resume() fails while creating HWC, mana_port_debugfs is not reinitialized and may point to an older, cleaned-up dentry. Later in the hibernate path, during power_down(), mana_gd_...

CVE-2025-21972

The connected BDU/FSTEC entry describes a vulnerability in the Linux kernel MCTP implementation, specifically the mctp_frag_queue() function in net/mctp/route.c. It cites improper memory release as the root cause, leading to a memory leak and the potential to cause a service failure. Exploitation...

CVE-2025-21985

CVE-2025-21985 : In the Linux kernel DRM/AMD display path, the fix addresses out-of-bounds accesses. Specifically, hpo_stream_to_link_encoder_mapping is sized MAX_HPO_DP2_ENCODERS(=4) but can reference up to 6 elements, so the location must be checked against MAX_HPO_DP2_ENCODERS. Also, disp_cfg_...

CVE-2025-22034

CVE-2025-22034 concerns the Linux kernel mm/gup path and the handling of FOLL_SPLIT_PMD with hugetlb VMAs. The connected documents indicate a patch series addressing device-exclusive entries (hmm) and that THP interaction was a motivating factor, with hugetlb fencing and mapcount interactions imp...

CVE-2025-22070

The CVE-2025-22070 issue affects the Linux kernel 9P client (9p/v9fs) where mkdir could crash a mounted 9p tree when posixacl is used. Root cause: v9fs_vfs_mkdir_dotl() incorrectly passes a NULL fid to v9fs_set_create_acl(), leading to a NULL pointer dereference in v9fs_set_acl and subsequent ACL...

CVE-2025-22101

CVE-2025-22101 affects the Linux kernel net:libwx path, where a bug set the Tx L4 checksum flag for non-TCP/UDP/SCTP offloads, causing the TX ring to hang. The fix switches to software checksumming for these packets to avoid the hang. No exploitation details are provided in the documents. Remedia...

CVE-2025-22127

CVE-2025-22127 affects the Linux kernel F2FS. The issue could cause a kernel hang when a compressed file system operation triggers IO errors during load of the error table to a dm device, while f2fs_write_data_pages holds the writepages lock. Root cause described: IO error looping in f2fs_prepare...

CVE-2025-37776

CVE-2025-37776 : In the Linux kernel, ksmbd has a use-after-free in smb_break_all_levII_oplock() caused by a race when unlocking in the middle of the loop. A patch adds a read lock to protect the whole loop. This vulnerability has a local attack vector with high impact (C/H/I/A) per CVSS v3.1, an...

CVE-2025-37920

CVE-2025-37920 is a Linux kernel race-condition fix in the AF_XDP generic RX path. The patch moves rx_lock from xsk_socket to xsk_buff_pool and hardens synchronization for shared umem mode when multiple sockets share a single pool. The RX queue remains exclusive to each xsk_socket, while the FILL...

CVE-2025-37930

CVE-2025-37930 affects Linux kernels containing the drm/nouveau fix for WARN_ON in nouveau_fence_context_kill(). The issue arises because nouveau_fence_done() can signal fences, leaving signaled fences in the pending list, and a concurrent call to nouveau_fence_context_kill() could attempt to set...

CVE-2025-37956

CVE-2025-37956 affects the Linux kernel ksmbd server. A client can send an empty newname string when renaming a file or directory, which previously triggered a kernel oops in d_alloc. A patch has been applied to return an error when attempting to rename with an empty new name string, preventing t...

CVE-2025-37993

CVE-2025-37993 refers to a Linux kernel issue where the m_can_classdev.tx_handling_spinlock was not initialized during device probe, causing a spinlock bad magic crash (notably when cansend is used). The problem is resolved by initializing the spin lock in m_can_class_allocate_dev. Affected conte...

CVE-2025-38107

CVE-2025-38107: In the Linux kernel, a race in net_sched:ets (ets_qdisc_change) was fixed. The race occurs when a SFQ perturb timer fires at an inopportune moment, enabling underflow of a parent qlen during qdisc operations. The corrective action is to purge the qdisc with qdisc_purge_queue() bef...

CVE-2025-38192

CVE-2025-38192 is a Linux kernel vulnerability where an ingress NAT46 BPF program that flips IPv4/IPv6 can mutate skb->protocol to v6 while the dst remains IPv4, leading to a NULL pointer dereference in ip6_rcv_core. The fix is to clear the destination (dst) in all BPF helpers that change skb-...

CVE-2025-38197

CVE-2025-38197 affects the Linux kernel component platform/x86: dell_rbu. The root cause is a wrong list head passed to list_for_each_entry*() when iterating the packet list, causing incorrect data reads via sysfs and, on clearing the list, potential NULL pointer dereference. A patch fix was intr...

CVE-2025-38211

In the Linux kernel, CVE-2025-38211 affects the RDMA/iwcm path where use-after-free of cm_id_private work objects can occur during cm_id destruction. The root cause involved cm_id resource management and last-reference handling; prior fixes flushed pending works at cm_id destruction, but a remain...

CVE-2025-38212

CVE-2025-38212 affects the Linux kernel IPC subsystem. The bug was a use-after-free in radix_tree_node_free triggered by idr_for_each() not being in an RCU read-critical region when called from shm_destroy_orphaned(), risking reading freed memory during radix_tree_for_each_slot(). The fix adds RC...

CVE-2025-38250

In CVE-2025-38250, the Linux kernel Bluetooth vhci_flush() path is affected by a use-after-free when a thread closes a vhci fd while another thread uses the device. The issue stems from a missing synchronization after unlinking hdev from hci_dev_list in hci_unregister_dev(), allowing another thre...

CVE-2025-38373

CVE-2025-38373 concerns the Linux kernel’s mlx5_ib MR deregistration deadlock. The description shows a flow where holding the mutex umem_mutex during dereg_mr() can lead kzalloc() to trigger reclaim paths (fs_reclaim, mmu_notifier_invalidate_range_start), which in turn calls mlx5_ib_invalidate_ra...

CVE-2025-71238

CVE-2025-71238 is a Linux kernel issue in the qla2xxx SCSI/BSG path where bsg_done() could be called on failure, causing a double free and possible system crash or privilege escalation. The root cause is failure paths calling bsg_done() without proper validation; fixes patch the bsg_done() invoca...

CVE-2026-43502

The CVE-2026-43502 vulnerability affects the Linux kernel net/rds zerocopy send path. The root cause is incorrect cleanup logic: zerocopy ownership is determined by op_mmp_znotifier, but purge uses rm->m_rs, risking unqueued messages being cleaned up as if they owned normal payload pages. The ...

CVE-2026-52943

CVE-2026-52943 affects the Linux kernel: two pskb_carve helpers (pskb_carve_inside_header and pskb_carve_inside_nonlinear) copy the old skb_shared_info header via memcpy without calling net_zcopy_get() for the new copy, creating an unaccounted destructor_arg (uarg) reference. This can cause use-a...

CVE-2007-6206

CVE-2007-6206 affects the Linux kernel (2.4.x and 2.6.x up to 2.6.24-rc3). The issue lies in the do_coredump function in fs/exec.c, where the core dump file’s UID is not changed if a core dump already exists in the same location when a root-owned process dumps a core. This behavior could allow a ...

CVE-2010-2226

CVE-2010-2226 affects the Linux kernel: the xfs_swapext function in fs/xfs/xfs_dfrag.c does not properly validate file descriptors passed to the SWAPEXT ioctl, enabling a local user with write access to swap a file into another and gain read access. The issue is present in kernel versions before ...

CVE-2010-4251

CVE-2010-4251 affects the Linux kernel up to version 2.6.34. The vulnerability lies in the socket backlog handling in net/core/sock.c, which allows remote attackers to cause memory exhaustion DoS by sending大量 network traffic (e.g., UDP via netperf). The issue is addressed by the 2.6.34 changelog ...

CVE-2010-4656

CVE-2010-4656 affects the Linux kernel’s USB iowarrior driver (drivers/usb/misc/iowarrior.c). The root cause is improper buffer/memory allocation in iowarrior_write, enabling a heap-based buffer overflow via a long report from a malicious device. This aligns with openSUSE/SUSE advisories noting a...

CVE-2011-0712

Technical details about CVE-2011-0712 are not publicly provided in the supplied documents. Monitor for updates in connected advisories; no confirmed affected products, versions, or fixes are stated here.

CVE-2011-1090

CVE-2011-1090 affects the Linux kernel’s NFSv4 ACL handling: the function __nfs4_proc_set_acl in fs/nfs/nfs4proc.c allocates memory with kmalloc but does not always free it, enabling a local attacker to trigger a denial of service (panic) by crafting an ACL set operation. The vulnerability is doc...

CVE-2011-2498

CVE-2011-2498 affects the Linux kernel: versions prior to 2.6.39 allow local unprivileged users to trigger creation of PTE pages, causing memory consumption and a denial of service. The issue is rooted in how PTE pages are accounted for during OOM scoring. Public disclosures reference Ubuntu, SUS...

CVE-2012-2121

CVE-2012-2121 affects the KVM component of the Linux kernel prior to 3.3.4. The vulnerability stems from improper management of the relationships between memory slots and the iommu, enabling guest OS users (with administrative access inside the guest) to trigger hotplug/hotunplug operations on de...

CVE-2012-2372

CVE-2012-2372 affects the Linux kernel (3.7.4 and earlier). The vulnerability is in the rds_ib_xmit function (net/rds/ib_send.c) and can allow local users to cause a denial of service (BUG_ON and kernel panic) by establishing an RDS connection with the source IP equal to the IPoIB interface’s own...

CVE-2013-3301

CVE-2013-3301 affects the Linux kernel ftrace implementation up to version before 3.8.8. Local users with CAP_SYS_ADMIN can write to either set_ftrace_pid or set_graph_function and trigger an lseek, leading to a NULL pointer dereference and possible system crash or other impact. Multiple connecte...

CVE-2014-3181

CVE-2014-3181 affects the Linux kernel HID Magic Mouse driver (drivers/hid/hid-magicmouse.c, function magicmouse_raw_event) through version 3.16.3. It results in stack-based buffer overflows when processing large EHCI or XHCI data from a device, enabling physically proximate attackers to cause a ...

CVE-2014-8989

CVE-2014-8989 affects the Linux kernel up to 3.17.4, where dropping supplemental group memberships in certain namespace scenarios is not properly restricted. This enables a local attacker to bypass file permissions by abusing a POSIX ACL entry for the group category that is more restrictive than ...

CVE-2015-8844

CVE-2015-8844 affects the Linux kernel on PowerPC where the signal implementation does not validate an MSR with both the S and T bits set. This can enable a local attacker to cause a denial of service (TM Bad Thing exception and panic) via a crafted application. The vulnerability is fixed in the ...

CVE-2016-8636

The CVE-2016-8636 issue affects the Linux kernel’s mem_check_range path in drivers/infiniband/sw/rxe/rxe_mr.c, where an integer overflow can occur. This vulnerability in Soft RoCE (RDMA over InfiniBand) allows local users to trigger memory corruption, potentially cause a denial of service, and ma...

CVE-2017-17856

CVE-2017-17856 affects the Linux kernel kernel/bpf/verifier.c up to version 4.14.8. It enables local users to cause a denial of service via memory corruption due to lack of stack-pointer alignment enforcement. The provided documents do not include exploitation details or a remediation patch/versi...

CVE-2017-18224

CVE-2017-18224 : The Linux kernel before 4.15 contains a race condition in the ocfs2 extent-tree path. Specifically, in fs/ocfs2/aops.c, a semaphore is omitted during read operations in DIRECT mode, enabling a local attacker to trigger a denial of service by modifying the e_cpos field. The connec...

CVE-2019-15792

CVE-2019-15792 affects the shiftfs implementation in Ubuntu's kernel series (5.0 and 5.3), where shiftfs_btrfs_ioctl_fd_replace() calls fdget(oldfd) and passes the resulting file* to shiftfs_real_fdget(), casting file->private_data (a void*) to a struct shiftfs_file_info *. Since private_data ...

CVE-2020-36780

In the Linux kernel, the following vulnerability has been resolved: i2c: sprd: fix reference leak when pm_runtime_get_sync fails The PM reference count is not expected to be incremented onreturn in sprd_i2c_master_xfer() and sprd_i2c_remove(). However, pm_runtime_get_sync will increment the PM re...

CVE-2021-4442

CVE-2021-4442 – The Linux kernel TCP stack vulnerability described as: a syzkaller repro could cause RCV_SEQ to be advanced after data restoration in the receive queue, enabling an out-of-order or invalid sequence handling when TCP_QUEUE_SEQ is used on non-empty queues. The connected documents (A...

CVE-2021-46996

CVE-2021-46996 corresponds to a memleak in the Linux kernel nftables netfilter code, specifically in the userdata error path when creating new objects. The fixed description states that the patch releases an object name if userdata allocation fails, addressing a memory leak in the userdata error ...

CVE-2021-47065

CVE-2021-47065: Technical details (affected product/versions, impact, fix) are not provided in the supplied documents. Monitor official updates for the vulnerability specifics and patch availability.

CVE-2021-47372

CVE-2021-47372 is a Linux kernel use-after-free in the macb driver. The issue arises from plat_dev->dev->platform_data being released by platform_device_unregister() and subsequently using pclk and hclk, leading to use-after-free in macb_remove. The fixed sequence avoids using the clk devic...