CVE-2024-35833

CVE-2024-35833 affects the Linux kernel's dmaengine: fsl-qdma. The issue is a memory leak in the queue command DMA caused by dma_alloc_coherent() being undone in neither the remove path nor the error path of fsl_qdma_probe(). The advisory across connected sources states the fix is to switch to th...

CVE-2024-36909

In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus: Don't free ring buffers that couldn't be re-encrypted In CoCo VMs it is possible for the untrusted host to causeset_memory_encrypted() or set_memory_decrypted() to fail such that anerror is returned and the re...

CVE-2024-36975

CVE-2024-36975 is a Linux kernel issue: when asn1_encode_sequence() fails, using WARN is inappropriate. The function is located in lib/asn1_encode.c and is not an internal helper, which makes the stack trace less useful. On certain paths, this can crash the kernel if panic_on_warn is set. The rec...

CVE-2024-37354

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix crash on racing fsync and size-extending write into prealloc We have been seeing crashes on duplicate keys inbtrfs_set_item_key_safe(): BTRFS critical (device vdb): slot 4 key (450 108 8192) new key (450 108 8192)-----...

CVE-2024-38550

CVE-2024-38550 : In the Linux kernel, the ASoC kirkwood code fix prevents a potential NULL dereference in kirkwood_dma_hw_params by guarding the mv_mbus_dram_info() return value when CONFIG_PLAT_ORION is not defined. The vulnerability arises because mv_mbus_dram_info() can return NULL, and derefe...

CVE-2024-39293

In the Linux kernel, the following vulnerability has been resolved: Revert "xsk: Support redirect to any socket bound to the same umem" This reverts commit 2863d665ea41282379f108e4da6c8a2366ba66db. This patch introduced a potential kernel crash when multiple napi instancesredirect to the same AF_...

CVE-2024-40979

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix kernel crash during resume Currently during resume, QMI target memory is not properly handled, resultingin kernel crash in case DMA remap is not supported: BUG: Bad page state in process kworker/u16:54 pfn:36e80...

CVE-2024-42109

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: unconditionally flush pending work before notifier syzbot reports: KASAN: slab-uaf in nft_ctx_update include/net/netfilter/nf_tables.h:1831KASAN: slab-uaf in nft_commit_release net/netfilter/nf_tables_api.c:...

CVE-2024-44956

CVE-2024-44956 — Linux kernel (drm/xe/preempt_fence): The vulnerability relates to enlarging the fence critical section to cover the entire preempt_fence_work_func callback. This change aims to improve lockdep understanding when signaling fences, potentially avoiding races with vm->lock. The i...

CVE-2024-46706

The connected documents provide concrete details for CVE-2024-46706 in the Linux kernel: the issue lies in the fsl_lpuart driver where, during uart_add_one_port, a child serial_ctrl is probed with PM runtime enabled, causing a runtime suspend race that can hang early console output when boot argu...

CVE-2024-46708

CVE-2024-46708 corresponds to a Linux kernel issue in the pinctrl/qcom subsystem (x1e80100) where an erroneous 0x100000 offset caused boards to crash when pin state changes were applied. The vulnerability was resolved by removing that incorrect offset, enabling intended state changes to take effe...

CVE-2024-46767

Technical details about CVE-2024-46767 are not provided in the connected documents. Monitor for updates.

CVE-2024-47683

CVE-2024-47683 affects the Linux kernel’s DRM/AMD display path. The issue is a NULL pointer dereference during MST/DSC setup when a mode change is not detected; the fix is to skip recomputing DSC parameters if there is no stream on the link, with further checks to confirm whether the stream is al...

CVE-2024-49942

Technical details about CVE-2024-49942 are not provided in the connected documents. The entry is listed with kernel-related fix/impact, but there are no vendor/product/version/exploit specifics available here.

CVE-2024-49956

In the Linux kernel, the following vulnerability has been resolved: gfs2: fix double destroy_workqueue error When gfs2_fill_super() fails, destroy_workqueue() is called withingfs2_gl_hash_clear(), and the subsequent code path callsdestroy_workqueue() on the same work queue again. This issue can b...

CVE-2024-50173

In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Fix access to uninitialized variable in tick_ctx_cleanup() The group variable can't be used to retrieve ptdev in our second loop,because it points to the previously iterated list_head, not a validgroup. Get the ptdev...

CVE-2024-56534

CVE-2024-56534 affects the Linux kernel isofs implementation. The flaw is a memory leak in iocharset handling during mount parsing; opt->iocharset may not be freed in some paths (e.g., when isofs_fill_super is bypassed, such as in get_tree_bdev_flags scenarios). The description notes that free...

CVE-2024-56624

In the Linux kernel, the following vulnerability has been resolved: iommufd: Fix out_fput in iommufd_fault_alloc() As fput() calls the file->f_op->release op, where fault obj and ictx aregetting released, there is no need to release these two after fput() onemore time, which would result in...

CVE-2024-56713

Technical details for CVE-2024-56713 are not provided in the connected documents. The initial description mentions nsim_pp_hold_write() issues in the Linux kernel but lacks explicit product/version/remediation details. Monitor for authoritative updates.

CVE-2024-56753

CVE-2024-56753 : In the Linux kernel, the amdgpu gfx9 cleaner shader deinitialization was missing. The fix adds a call to amdgpu_gfx_cleaner_shader_sw_fini(adev) in gfx_v9_0_sw_fini to properly free resources and prevent memory leaks, ensuring GPU state is clean for reinitialization. No exploit d...

CVE-2025-22031

CVE-2025-22031 affects the Linux kernel PCI/bwctrl subsystem. Root cause: when bus numbers are exhausted during PCI device enumeration, subordinate becomes NULL, and the bandwidth controller dereferences it during probe. This leads to a NULL pointer dereference and silent erroring of bandwidth co...

CVE-2025-22123

CVE-2025-22123 relates to the Linux kernel’s F2FS filesystem. The issue arises when a faulty allocator path introduced by a commit (FAULT_NO_SEGMENT) may set curseg->segno to NULL_SEGNO while CP_ERROR_FLAG is set. This can lead to a page fault path where f2fs_write_inode() traverses a sequence...

CVE-2025-23152

CVE-2025-23152 affects the Linux kernel on arm64, where the bug was in arm64/crc-t10dif: out-of-scope array usage in crc_t10dif_arch(). A fix was applied in the kernel, described as correcting an array used outside its scope. Connected advisories/patch references include kernel commits (stable) a...

CVE-2025-37929

CVE-2025-37929 affects the Linux kernel arm64 Spectre-BHB mitigation (

CVE-2025-37964

CVE-2025-37964 relates to the Linux kernel x86/mm TLB handling. The issue is a bug in should_flush_tlb() that can suppress TLB flushes in a narrow window between load_new_mm_cr3() and writing the new mm state into loaded_mm, risking missed TLB flushes during address space switch. The fix widens t...

CVE-2025-37972

CVE-2025-37972 — The Linux kernel vulnerability in the mtk-pmic-keys driver can cause a NULL pointer dereference in mtk_pmic_keys_probe when the device-tree button node is absent (e.g., left floating). The fix uses the generic regs structure defined for all platforms and allows the key register t...

CVE-2025-38011

Summary: CVE-2025-38011 affects the Linux kernel DRM/amdgpu path (csa unmapping). The root cause is a use of an interruptible lock while unmapping the CSA and freeing GPU VM, which could lead to a memory leak and a warning backtrace when a signal is accepted after process exit and a VM lock wait ...

CVE-2026-46099

The CVE-2026-46099 entry describes a use-after-free race in Linux kernel IPv6 handling for seg6 and rpl lightweight tunnels. A NOREF destination cached during ip6_route_input() can be freed by a concurrent FIB lookup on a shared nexthop under PREEMPT_RT, leading to a WARN or potential instability...

CVE-2006-5755

CVE-2006-5755 affects the Linux kernel on x86_64 where, during a context switch, EFLAGS were not properly saved/restored. This can allow a local user to trigger a denial-of-service crash by causing SYSENTER to set an NT flag, which may crash on the IRET of the next task. The vulnerability is docu...

CVE-2007-1357

Technical details about CVE-2007-1357 are not provided in the connected documents; no affected products, root cause, or fixes are listed here. Monitor for updates.

CVE-2007-6063

CVE-2007-6063 is referenced in MiracleLinux AXSA-2008-150:05 as a fix for a possible isdn_net buffer overflow in the Linux kernel, specifically related to isdn_net_setcfg. The connected advisory notes the kernel vulnerability affects Miracl eLinux 3.x with kernel-2.6.18-53.11AXS3 and lists CVE-20...

CVE-2008-1375

CVE-2008-1375 describes a race condition in the Linux kernel’s directory notification subsystem (dnotify). It affects Linux kernel 2.6.x before 2.6.24.6, and 2.6.25 before 2.6.25.1. Successful exploitation could allow local users to cause a denial of service (OOPS) and possibly gain privileges vi...

CVE-2009-0322

CVE-2009-0322 affects the Linux kernel Dell RBU (Remote BIOS Update) driver: reading zero bytes from image_type or packet_size under /sys/devices/platform/dell_rbu/ can cause a local DoS (system crash). Concrete references in connected advisories show affected kernels include 2.6.27.x (before 2.6...

CVE-2011-1573

CVE-2011-1573: Linux kernel SCTP (net/sctp/sm_make_chunk.c) can OOPs DoS when addip_enable and auth_enable are used because INIT/INIT-ACK length calculation ignores zero padding. Affects kernels before 2.6.34; patch/fix shipped in 2.6.34+. vulnerable component/file: sm_make_chunk.c; impact: denia...

CVE-2011-1598

CVE-2011-1598 affects the Linux kernel’s CAN subsystem: the bcm_release function in net/can/bcm.c does not validate a socket data structure, enabling a local user to trigger a NULL pointer dereference and cause a denial of service. The affected version range is kernel 2.6.39-rc6 and earlier. Reso...

CVE-2011-1771

CVE-2011-1771 affects the Linux kernel up to version 2.6.38, specifically the cifs_close function in fs/cifs/file.c. If a local user opens a CIFS file with the O_DIRECT flag, it can trigger a NULL pointer dereference (and BUG), causing a denial of service or unspecified impact. Mitigation: upgrad...

CVE-2011-4326

CVE-2011-4326 affects the Linux kernel’s UDP fragment handling for IPv6 when UDP Fragmentation Offload (UFO) is enabled. Specifically, the vulnerability lies in udp6_ufo_fragment in net/ipv6/udp.c, allowing remote attackers to crash the system by sending fragmented IPv6 UDP packets to a bridge. T...

CVE-2012-0044

CVE-2012-0044 is an integer overflow in drm_mode_dirtyfb_ioctl() within Linux kernel drivers/gpu/drm/drm_crtc.c, vulnerable before 3.1.5. The flaw allows local users to gain privileges or trigger memory corruption/DoS via a crafted ioctl. Public sources (including MiracleLinux AXSA-2012-646:05) c...

CVE-2012-6542

The CVE-2012-6542 issue affects the Linux kernel prior to 3.6. It involves the function llc_ui_getname in net/llc/af_llc.c returning an incorrect value under certain circumstances, enabling local users to read sensitive data from kernel stack memory via an application that uses an uninitialized p...

CVE-2013-2930

CVE-2013-2930 affects the Linux kernel prior to 3.12.2, where the perf_trace_event_perm function does not properly restrict access to the perf subsystem. This allows local users to enable function tracing via a crafted application. The advisory indicates the impact is partial for confidentiality ...

CVE-2015-4692

CVE-2015-4692 affects the Linux kernel’s KVM code: in arch/x86/kvm/lapic.h, the kvm_apic_has_events() function may dereference a NULL pointer via an ioctl to /dev/kvm, enabling a local attacker to cause a denial of service (system crash). The description indicates the issue exists through kernel ...

CVE-2018-14641

CVE-2018-14641 is a Linux kernel vulnerability affecting versions 4.19-rc1 through 4.19-rc3, with the flaw located in ip_frag_reasm() (net/ipv4/ip_fragment.c). Under certain non-default but not rare configurations on a victim host, an attacker can remotely trigger a crash in ip_do_fragment(), pro...

CVE-2021-47111

CVE-2021-47111 affects the Linux kernel xen-netback where the RX task thread could be freed before kthread_stop during backend teardown, causing a use-after-free. The fix reintroduces taking a reference to the RX task thread and adds an explanation why it’s needed (XSA-374 / CVE-2021-28691). Affe...

CVE-2021-47113

In the Linux kernel, the following vulnerability has been resolved: btrfs: abort in rename_exchange if we fail to insert the second ref Error injection stress uncovered a problem where we'd leave a danglinginode ref if we failed during a rename_exchange. This happens becausewe insert the inode re...

CVE-2021-47237

CVE-2021-47237 relates to a memory leak in the Linux kernel’s net: hamradio mkiss driver. The issue occurs because mkiss_open() allocates a net device but mkiss_close() only unregisters it without freeing, leading to multiple unreferenced objects and memory leaks reported in syzbot logs. The conn...

CVE-2021-47288

CVE-2021-47288 affects the Linux kernel media: ngene component. Affected code path is ngene_command_config_free_buf(), which previously copied 6 bytes into a one-byte config field of the wrong structure (FW_CONFIGURE_BUFFERS) via a single memcpy(). The fix relocates the 6 additional members into ...

CVE-2021-47337

The CVE-2021-47337 issue is in the Linux kernel SCSI core path: when an error arises during scsi_host_alloc() and the error-handling ehandler thread fails to spawn, shost->ehandler may be set to ERR_PTR(-ENOMEM) and scsi_host_dev_release() would call kthread_stop() on a NULL/invalid pointer, r...

CVE-2021-47380

In the Linux kernel, the following vulnerability has been resolved: HID: amd_sfh: Fix potential NULL pointer dereference devm_add_action_or_reset() can suddenly invoke amd_mp2_pci_remove() atregistration that will cause NULL pointer dereference sincecorresponding data is not initialized yet. The ...

CVE-2021-47418

CVE-2021-47418 refers to a Linux kernel vulnerability in net_sched: a NULL pointer dereference inside fifo_set_limit() that could OOPS when adjusting limits on certain qdiscs (notably pfifo_fast, which lacks a change() operation). The issue was reproduced via syzbot and the fix makes fifo_set_lim...

CVE-2021-47436

CVE-2021-47436 – Linux kernel USB Musb DSPS probe error path fix . The connected Astra/Unity advisories confirm a root cause in the Musb DSPS driver where dsps_setup_optional_vbus_irq() and dsps_create_musb_pdev() were inverted in the error path, leaving a platform device registered but not unreg...