CVE-2024-43832

CVE-2024-43832 affects the Linux kernel (s390/uv) and is resolved by ensuring folio_wait_writeback() is called with a folio reference. The issue arises after PTL drop when a folio could be freed concurrently; a temporary reference is now grabbed to prevent use-after-free. Impact is Local, with CV...

CVE-2024-43857

CVE-2024-43857 — Linux kernel (f2fs): The patch fixes a potential NULL pointer dereference in is_end_zone_blkaddr() when checking the end of a zone, which could occur if f2fs is mounted as a single device. Affected component is the f2fs code path in the Linux kernel; root cause is a null referenc...

CVE-2024-44943

CVE-2024-44943 relates to the Linux kernel mm/gup code where pinning folio in CMA memory during SEV VM startup could trigger a warning due to misusing try_grab_folio in both fast and slow paths. The issue stems from the longterm pinning check causing fallback paths to also fail, producing a kerne...

CVE-2024-44982

Summary of CVE-2024-44982 (Linux kernel): A bug in drm/msm/dpu cleanup occurs when dpu_format_populate_layout() fails, causing the FB to be prepared but not cleaned up. This leaks the GEM object pin_count and triggers a kernel crash (splat) on DRM file closure. Affected component: DRM/GPU MSM dri...

CVE-2024-46694

CVE-2024-46694 affects the Linux kernel DRM/AMD display path. Root cause: code path dereferenced framebuffer object state->fb->obj[0] without proper null checks. Fix: replace with proper retrieval of the framebuffer object via drm_gem_fb_get_obj() and return an error if the object is NULL (...

CVE-2024-46778

The CVE-2024-46778 entry describes a Linux kernel defect in drm/amd/display where UnboundedRequestEnabled was checked as a pointer (dml_bool_t *UnboundedRequestEnabled) instead of its boolean value, causing address-based checks rather than dereferenced value. This was fixed to address a reverse N...

CVE-2024-46825

CVE-2024-46825 involves the Linux kernel wifi (iwlwifi mvm) where the firmware link ID is checked using WARN_ON() instead of IWL_FW_CHECK. The fix changes the lookup function iwl_mvm_rcu_fw_link_id_to_link_conf() to use IWL_FW_CHECK() when validating firmware-provided input. Public docs show this...

CVE-2024-50100

CVE-2024-50100 affects the Linux kernel USB gadget dummy-hcd driver. A change to use hrtimers introduced a mismatch between timer_pending() and hrtimer_active(), causing the URB dequeue path to miss a restarted timer and leading to usb_kill_urb() hangs. The fix adds a dedicated timer_pending flag...

CVE-2024-50114

CVE-2024-50114 affects Linux kernel KVM on arm64. The flaw originates in the vCPU teardown path when a failed vCPU creation leads to an MMIO redistributor being unregistered, triggering a use-after-free in kvm_put_kvm during VM teardown. The root cause is improper teardown ordering that could all...

CVE-2024-56541

The CVE-2024-56541 entry concerns the Linux kernel wireless driver ath12k (wifi) where a use-after-free occurs during module removal. Specifically, ath12k_core_deinit() calls ath12k_mac_destroy() which unregisters ah->hw from mac80211 and frees ah->hw and related ar structures; then ath12k_...

CVE-2024-56674

CVE-2024-56674 affects the Linux kernel virtio_net driver. The issue arises from the netdev_tx_reset_queue() invocation timing during virtnet_open/virtnet_close, which can leave TX completions unconsumed and crash on the first NAPI poll under heavy TX. The fix removes netdev_tx_reset_queue() from...

CVE-2025-21710

CVE-2025-21710: In the Linux kernel, tcp window advertising under extreme memory squeeze could diverge between the local receive window and the peer, leading to a stall where the peer sends no data. Root cause: the receive window (tp->rcv_wnd) and pending update logic (tp->rcv_wup) could mi...

CVE-2025-21895

CVE-2025-21895 pertains to the Linux kernel perf subsystem. The issue arises in perf/core where the order of perf_event_pmu_context entries in parent/child contexts can become inconsistent due to the timing of PMU/event additions, triggering a warning about an unordered pmu_ctx_list in perf_event...

CVE-2025-21906

The CVE-2025-21906 issue concerns the Linux kernel wireless stack (iwlwifi/mvm) where ROC cleanup on failure was mishandled. In the failure/stop path, iwl_mvm_roc_finished() could be a no‑op because IWL_MVM_STATUS_ROC_P2P_RUNNING was never set, potentially causing a WARN_ON() on a remain-on-chann...

CVE-2025-21998

CVE-2025-21998 : In the Linux kernel, the efivars service could race with memory pool allocation after the TZ allocator change, risking a NULL pointer dereference on racing EFI variable access. The fix ensures all resources are initialized before registering efivars (firmware: qcom: uefisecapp). ...

CVE-2025-22017

Technical details about CVE-2025-22017 are not provided in the connected documents. Public information in the initial description is limited to a Linux kernel fix in devlink/xa_alloc_cyclic. Monitor for updates from authoritative advisories.

CVE-2025-22091

In the Linux kernel, RDMA/mlx5: Fix page_size variable overflow has been addressed. The fix changes all variables storing mlx5_umem_mkc_find_best_pgsz() results to unsigned long to support values larger than 31 and prevent overflow. Example impact: registering 4GB of contiguous physical memory co...

CVE-2025-23132

CVE-2025-23132 concerns the Linux kernel’s File System F2FS quota handling. The provided connected documents describe a race condition in the quota writeback path: checkpoint/remount/freeze/quotactl can race with f2fs_remount and core quota synchronization, triggering a warning in dquot_writeback...

CVE-2025-23160

CVE-2025-23160 affects the Linux kernel on Mediatek platforms with a system companion processor (SCP). The issue is a resource leak in the Media subsystem (vcodec) during firmware initialization when the mtk_scp structure is not properly freed, leading to a leak if firmware initialization allocat...

CVE-2025-37926

CVE-2025-37926 concerns the Linux kernel’s ksmbd component. A_use-after-free can occur due to a race between ksmbd_session_rpc_open() and __session_rpc_close(), potentially allowing exploitation when an attacker could trigger a session race. The fix adds a lock (rpc_lock) to the session to protec...

CVE-2025-37946

CVE-2025-37946 concerns the Linux kernel, specifically the s390 PCI subsystem. The issue arises from a duplicate pci_dev_put() in disable_slot() when a PF has child VFs, introduced during a change that added a lock to zpci_dev state. The extra pci_dev_put() can lead to a use-after-free if the pci...

CVE-2025-37970

CVE-2025-37970 affects the Linux kernel IIO imu driver st_lsm6dsx_read_fifo. The root cause is a possible infinite loop when pattern_len is zero and the device FIFO is not empty, leading to a local lockup and availability impact. The vulnerability is addressed by a fix in the kernel (as described...

CVE-2025-37980

CVE-2025-37980: In the Linux kernel block subsystem, a resource leak occurs in blk_register_queue() when a queue registration fails after blk_mq_sysfs_register() succeeds. The error-path path lacks cleanup of blk_mq_sysfs resources, leading to memory leaks. The advisory documents that the fix is ...

CVE-2025-38007

CVE-2025-38007 affects HID uclogic in the Linux kernel. Root cause: uclogic_input_configured() dereferences a NULL after devm_kasprintf() returns NULL due to allocation failure. Mitigation: a NULL check is added after devm_kasprintf() to prevent the dereference. Described fixes are documented in ...

CVE-2025-38461

CVE-2025-38461 affects the Linux kernel vsock transport code. Root cause: a TOCTOU race where transport assignment could race with module unload, risking a stale pointer and potential instability. The fix adds protection for new_transport and a lockdep assertion; updated kernels are released (exa...

CVE-2025-38477

The CVE-2025-38477 entry concerns a race in the Linux kernel’s net/sched qfq code. A concurrent modification of agg in qfq_change_agg (invoked during qfq_enqueue) could lead to a NULL dereference in qfq_dump_class and a use-after-free in qfq_delete_class. The fix moves qfq_destroy_class into the ...

CVE-2025-71238

CVE-2025-71238 is a Linux kernel issue in the qla2xxx SCSI/BSG path where bsg_done() could be called on failure, causing a double free and possible system crash or privilege escalation. The root cause is failure paths calling bsg_done() without proper validation; fixes patch the bsg_done() invoca...

CVE-2026-46054

CVE-2026-46054 affects the Linux kernel SELinux overlayfs access checks for mmap() and mprotect(). The issue arises from insufficient enforcement of backing-file access between the user file and backing file, potentially bypassing policies. A patch introduces security_mmap_backing_file() to enfor...

CVE-1999-0165

Technical details about CVE-1999-0165 are not publicly available in the provided documents; no concrete affected products, versions, or fixes are specified. Monitor for updates from vendors and CVE sources.

CVE-2006-1056

CVE-2006-1056 : A vulnerability in the Linux kernel (before 2.6.16.9) and FreeBSD on AMD64/7th–8th gen AMD processors causes FXSAVE/FXRSTOR to save/restore only certain x87 registers when an exception is pending. This can allow a local attacker to infer portions of the floating‑point state of oth...

CVE-2008-5182

The connected Nessus advisory for MiracleLinux 3 (AXSA:2009-22:03) references CVE-2008-5182 in the inotify subsystem of the Linux kernel. Affected product: MiracleLinux 3 running kernel 2.6.18-53.21AXS3. Vulnerability type/root cause: a race condition related to inotify watch removal and unmount,...

CVE-2009-1338

The CVE-2009-1338 issue is confirmed in the Linux kernel prior to 2.6.28, where the kill_something_info() function in kernel/signal.c did not respect PID namespaces when handling signals directed to PID -1. This allowed a local attacker to bypass namespace isolation and send signals to processes ...

CVE-2010-0008

CVE-2010-0008 affects the Linux kernel SCTP implementation prior to 2.6.23. The vulnerability in sctp_rcv_ootb allows remote attackers to cause a denial of service (infinite loop) via an Out Of The Blue (OOTB) chunk or a zero-length chunk. This CVE is also referenced in MiracleLinux AXSA-2010-166...

CVE-2010-3086

CVE-2010-3086 affects the Linux kernel (pre-2.6.25) via futex.h: exception fixup code replaced LOCK_PREFIX with a no-op, enabling local users to trigger a page fault and cause a denial of service (panic). Public advisories (e.g., MiracleLinux AXSA-2010-500:18 and OSV/RHSA entries) reference this ...

CVE-2012-1146

The vulnerability CVE-2012-1146 affects the Linux kernel, specifically mem_cgroup_usage_unregister_event in mm/memcontrol.c, when running versions before 3.2.10. The issue arises from how multiple events attached to the same eventfd are handled, enabling a local attacker to trigger a NULL pointer...

CVE-2012-1179

CVE-2012-1179 affects the Linux kernel prior to 3.3.1 when KVM is used: guest OS users can trigger a host OS denial of service (host crash) via page faults related to huge pages in pmd_none_or_clear_bad. MiracleLinux and related advisories reference this CVE among fixes in kernel updates before/a...

CVE-2013-3222

CVE-2013-3222 affects the Linux kernel: the vcc_recvmsg function in net/atm/common.c does not initialize a length variable, enabling a local attacker to read sensitive data from kernel stack memory via crafted recvmsg/recvfrom calls. The condition is “before 3.9-rc7”; the implication is a local i...

CVE-2013-3231

CVE-2013-3231 affects the Linux kernel prior to 3.9-rc7. The llc_ui_recvmsg function in net/llc/af_llc.c does not initialize a certain length variable, enabling local users to leak sensitive information from kernel stack memory via crafted recvmsg or recvfrom syscalls. This is a local information...

CVE-2013-6380

The CVE-2013-6380 entry concerns the Linux kernel up to version 3.12.1. The vulnerability exists in the aac_send_raw_srb function, located in drivers/scsi/aacraid/commctrl.c, where an insufficient validation of a size value allows a local attacker to trigger an invalid pointer dereference via an ...

CVE-2014-0049

CVE-2014-0049 affects the Linux kernel up to version 3.13.5 via a buffer overflow in the complete_emulated_mmio path of arch/x86/kvm/x86.c. The flaw allows a guest OS user to trigger an invalid memory copy that can lead to arbitrary code execution on the host. The published fix is in Linux kernel...

CVE-2014-8989

CVE-2014-8989 affects the Linux kernel up to 3.17.4, where dropping supplemental group memberships in certain namespace scenarios is not properly restricted. This enables a local attacker to bypass file permissions by abusing a POSIX ACL entry for the group category that is more restrictive than ...

CVE-2016-3139

CVE-2016-3139 : The Linux kernel before 3.17 is vulnerable in drivers/input/tablet/wacom_sys.c (wacom_probe). A crafted endpoints value in a USB device descriptor can be exploited by a physically proximate attacker to trigger a NULL pointer dereference, causing a denial of service (system crash)....

CVE-2017-18218

CVE-2017-18218 affects the Linux kernel's HNS Ethernet driver (drivers/net/ethernet/hisilicon/hns/hns_enet.c) pre-4.13. Local users can trigger a denial of service via use-after-free/BUG by exploiting differences in skb handling between hns_nic_net_xmit_hw and hns_nic_net_xmit. The connected docu...

CVE-2020-36782

CVE-2020-36782 covers a Linux kernel vulnerability in the I2C imx-lpi2c driver where the PM reference count could leak due to an unbalanced increment on return from pm_runtime_get_sync failures. The root cause is that pm_runtime_get_sync increments the PM usage count even when the operation fails...

CVE-2020-36786

The CVE-2020-36786 entry concerns a memory leak in the Linux kernel’s media: atomisp driver (staging) where, if lm3554_platform_data_func returns an error, flash object memory is leaked on the error return path. The fix introduces an error return path that frees flash and renames labels (fail2→fa...

CVE-2021-47075

The CVE-2021-47075 entry concerns the Linux kernel nvmet subsystem. A memory leak in nvmet_alloc_ctrl() could occur when cntlid_min is larger than the subsystem’s cntlid_max, because the code may jump to out_free_changed_ns_list without freeing ctrl->sqs. The patch fixes this by jumping to the...

CVE-2021-47086

The CVE-2021-47086 entry concerns the Linux kernel Phonet/pep path. The connected Astra Linux bulletin repeats that the vulnerability arises in an ioctl that refines enabling an unbound pipe, where the socket may not be bound to a valid Phonet object. If the socket is not bound, two issues occur:...

CVE-2021-47136

CVE-2021-47136 (Linux kernel) arises from not zero‑initializing the TC_SKB_EXT skb extension on allocation, causing use of uninitialized memory when the extension gained new fields. The UBSAN log shows invalid loads in openvswitch flow key extraction paths (ovs_flow_key_extract.cold, ovs_vport_re...

CVE-2021-47188

CVE-2021-47188 affects the Linux kernel SCSI UFS core abort handling. A warning is produced (WARN_ON(lrbp->cmd)) in ufshcd_queuecommand during abort processing, as shown in the test trace. The fix removes the spurious cmd reference by clearing lrbp->cmd in the abort handler. The associated ...

CVE-2021-47403

CVE-2021-47403 relates to the Linux kernel ipack: ipoctal subsystem, where a reference to the carrier module was taken on every open but released only when the final reference to the tty struct dropped. The root cause is a module reference leak during tty installation/open, leading to a lingering...