14606 matches found
CVE-2021-47521
CVE-2021-47521 affects the Linux kernel via can: sja1000: fix use after free in ems_pcmcia_add_card(). The fix ensures that when the last channel is unavailable, dev is freed and pdev->irq can be used instead, with an additional check that at least one channel was set up. In the available docu...
CVE-2021-47538
CVE-2021-47538 affects the Linux kernel’s rxrpc component. The root cause is a leak of an rxrpc_local reference in rxrpc_lookup_peer(), where a peer candidate’s local object is not released properly. The fix requires calling rxrpc_put_local() for the peer candidate before kfree(), as the peer hol...
CVE-2021-47656
Summary (CVE-2021-47656): In the Linux kernel’s jffs2 subsystem, a use-after-free occurs in jffs2_clear_xattr_subsystem during mounting a jffs2 image when an abnormal block is encountered. The code path frees an xattr_ref object twice (UAF) due to a call sequence in jffs2_build_filesystem/jffs2_d...
CVE-2022-48766
CVE-2022-48766 relates to the Linux kernel, specifically the DRM/AMD display path. The vulnerability is resolved by wrapping dcn301_calculate_wm_and_dlg for FPU, mirroring the dcn30 logic. Without this fix, the kernel may emit a flood of WARNs and can experience kernel panics. The description not...
CVE-2022-48777
CVE-2022-48777 affects the Linux kernel mtd parsers for Qualcomm partitions. The issue triggers a kernel panic when a partition entry is skipped (name is empty and leads to a NULL name in cleanup). The patch reworks the parser logic to first validate the partition number, then allocate and popula...
CVE-2022-48999
CVE-2022-48999 concerns a Linux kernel issue in IPv4 multipath route deletion. The root cause is a slab-out-of-bounds read in fib_nh_match when deleting a route where fib_info references a nexthop while separate nexthop objects conflict with the legacy multipath spec. The workaround/fix implement...
CVE-2022-49100
The CVE-2022-49100 entry concerns the Linux kernel virtio_console subsystem. The vulnerability is resolved by removing anonymous init and exit functions (module_init/module_exit) and assigning unique driver-specific names, to avoid ambiguity in System.map and initcall_debug logs, per the descript...
CVE-2022-49104
CVE-2022-49104 affects the Linux kernel, specifically the staging/vchiq_core code path. The issue is triggered when find_service_by_handle is given an invalid handle, which can return NULL and lead to a NULL pointer dereference. The description in the provided documents confirms this root cause a...
CVE-2022-49113
CVE-2022-49113 — In the Linux kernel, a refcount leak in powerpc/secvar, specifically in format_show(), is fixed. The leak can occur when format_show returns failure in multiple paths. The mitigation is the unified management of of_node_put to correct the leak. The available connected sources con...
CVE-2022-49164
CVE-2022-49164 describes a Linux kernel vulnerability on PowerPC with TM (transaction memory) that could corrupt the user r13 register due to a SLB miss during treclaim/trechkpt handling. The issue occurs when SCRATCH0 is live with the saved user r13 value, which can be clobbered by the kernel r1...
CVE-2022-49201
In the Linux kernel, the following vulnerability has been resolved: ibmvnic: fix race between xmit and reset There is a race between reset and the transmit paths that can lead toibmvnic_xmit() accessing an scrq after it has been freed in the resetpath. It can result in a crash like: Kernel attemp...
CVE-2022-49286
CVE-2022-49286 is tied to a Linux kernel TPM space fix: tpm2_del_space() was missing proper teardown after series conversion, leading to a tiny race where chip->tpm_mutex could be dereferenced if the space flush occurs after removal. The accepted mitigation is to convert tpm2_del_space() to us...
CVE-2022-49293
The CVE-2022-49293 entry concerns the Linux kernel where the nf_tables code path in nft_do_chain had a bug in register initialization. The issue could allow a stack leak into userspace, with local attack vector and no user interaction required. The vulnerability is classified as LOCAL, with LOW a...
CVE-2022-49303
CVE-2022-49303 concerns a Linux kernel deadlock in the rtl8192eu driver (drivers/staging/rtl8192eu) during rtw_joinbss_event_prehandle. The provided details describe a lock-order issue: thread 1 holds pmlmepriv->lock while waiting on del_timer_sync(), but the timer handler (thread 2) also need...
CVE-2022-49315
CVE-2022-49315 concerns a deadlock in the Linux kernel, specifically in the staging driver rtl8192e (rtllib_beacons_stop). The issue arises when rtllib_beacons_stop() holds ieee->beacon_lock while calling del_timer_sync(), while the timer handler (rtllib_send_beacon_cb) needs the same lock, ca...
CVE-2022-49353
The CVE-2022-49353 entry affects the Linux kernel’s powerpc/papr_scm PMU code. A NULL pointer and kernel panic could be triggered when a zero-sized stat_buffer is passed to drc_pmem_query_stats() for NVDIMM performance IDs because papr_scm_pmu_check_events() did not verify p->stat_buffer_len b...
CVE-2022-49402
CVE-2022-49402 concerns the Linux kernel ftrace hashing of direct_functions. The issue triggers a general protection fault when register_ftrace_direct fails, due to the entry not being removed from direct_functions. The available connected docs confirm the root cause and the fix: remove the entry...
CVE-2022-49474
CVE-2022-49474 (Linux kernel) affects the Bluetooth SCO path. The issue arises when connecting the same SCO socket twice (sco_sock_connect), which can create two sco_conn objects but only one is bound to the socket. If the socket closes before the SCO connection is established, the timer for the ...
CVE-2022-49489
CVE-2022-49489 details (NORMAL mode) Affects the Linux kernel component: drm/msm/disp/dpu1. The issue arises from set vbif hw config to NULL to avoid use-after-free during PM runtime resume in the DPU, leading to an Unable to handle kernel paging request crash (illustrated by the call trace inclu...
CVE-2022-49514
Concrete details available: CVE-2022-49514 concerns the Linux kernel ASoC Mediatek driver, specifically a fix in the mt8173_max98090_dev_probe error path. The root issue was a refcount leak in the error path, and the remediation is to call of_node_put(platform_node) to avoid the leak. Connected a...
CVE-2022-49525
CVE-2022-49525 relates to the Linux kernel: the media: cx25821 driver issue triggers a warning when removing the module (remove_proc_entry leaking cx25821 IRQ). The connected advisories confirm the root cause is not a_privately exploitable bug in userland but a resource management ordering proble...
CVE-2022-49607
CVE-2022-49607 concerns a data race in the Linux kernel between perf_event_set_output() and perf_mmap_close() in the perf/core subsystem. The root cause is a race where perf_mmap_close() holds e2->mmap_mutex while perf_event_set_output() holds e1->mmap_mutex, allowing no serialization and p...
CVE-2022-49661
Affected component: Linux kernel, gs_usb driver (USB CAN adapter). Issue: memory leak in gs_usb_open/close where RX URBs allocated with usb_alloc_coherent() were not freed by usb_kill_anchored_urbs() and DMA memory leaked. Root cause: improper freeing pattern; the fix explicitly frees RX URBs and...
CVE-2022-49713
In CVE-2022-49713, the Linux kernel vulnerability affects the USB-DWC2 HCD initialization path. The issue is a memory leak in dwc2_hcd_init where usb_create_hcd allocates memory for hcd but may fail to free it if platform_get_resource() fails; the fix moves the error path from error1 to error2 an...
CVE-2022-49984
CVE-2022-49984 is a Linux kernel vulnerability in the HID Steam driver: the code dereferences a HID report pointer without validating it, enabling a local attacker with a malicious HID device to trigger a NULL pointer dereference in steam_recv/steam_send_report. The issue has been fixed in the ke...
CVE-2022-50029
CVE-2022-50029 affects the Linux kernel “clk: qcom: ipq8074: dont disable gcc_sleep_clk_src” issue where the USB sleep clock is disabled while the clock framework tries to disable the sleep clock source, causing a failure. The connected advisories (Unity Linux / Astra Linux / SUSE entries) descri...
CVE-2022-50095
The CVE-2022-50095 issue affects the Linux kernel posix-cpu-timers: when a non-leader thread execs, the timer’s task reference may point to the old PID, so exit_itimers cannot disarm armed timers. This could leave timers in the timerqueue_list and, during processing, cause a use-after-free. The r...
CVE-2022-50126
CVE-2022-50126 concerns the Linux kernel, specifically jbd2: fix assertion 'jh->b_frozen_data == NULL' failure when a journal is aborted. The impact is a kernel BUG triggered during journal abort paths in jbd2_journal_dirty_metadata(), as seen in reproducer traces involving ext4 unlink operati...
CVE-2023-22996
CVE-2023-22996 affects the Linux kernel prior to 5.17.2. In drivers/soc/qcom/qcom_aoss.c, an of_find_device_by_node reference is not released after use (e.g., via put_device), which can lead to a lingering reference. The practical impact and exploitability are not described in the provided docume...
CVE-2023-22999
The CVE-2023-22999 issue affects the Linux kernel prior to 5.16.3, specifically the drivers/usb/dwc3/dwc3-qcom.c path. The root cause is that dwc3_qcom_create_urs_usb_platdev’s return value is misinterpreted in error cases (expected NULL but it is an error pointer), leading to an incorrect handli...
CVE-2023-52805
CVE-2023-52805 affects the Linux kernel/JFS inode allocation. The issue is an array-index-out-of-bounds in diAlloc caused by lack of validation of the iag’s agno during new inode allocation, which could lead to fragmentation. A fix was added to perform the necessary check, and multiple connected ...
CVE-2023-52865
CVE-2023-52865 affects the Linux kernel clk-mt6797 clock-data path. The vulnerability arises from not validating the return value of mtk_alloc_clk_data(), which could lead to a NULL pointer dereference. The fix adds a check for the return value to prevent NULL dereference and stabilize clock data...
CVE-2024-26652
CVE-2024-26652: Linux kernel net/pds_core fixes a possible double free in the error path when auxiliary_device_add() fails and later calls auxiliary_device_uninit(); the callback pdsc_auxbus_dev_release calls kfree(padev) and the patch removes the redundant kfree and moves error handling back to ...
CVE-2024-26721
In CVE-2024-26721, the Linux kernel’s drm/i915 dsc: PPS register address macro was wrong after PPS 11. The patch fixes the address calculation by adding an offset of 12 for PPS >= 12, correcting PPS 12–16 addresses that previously caused incorrect DSC PPS parameter reads/writes and potential D...
CVE-2024-26731
CVE-2024-26731 affects the Linux kernel’s BPF sockmap path. The issue is a NULL pointer dereference in sk_psock_verdict_data_ready() that can occur when sk_psock_verdict_data_ready() and sk_psock_stop_verdict() run concurrently, leaving psock->saved_data_ready NULL. The fix calls the appropria...
CVE-2024-27433
CVE-2024-27433 affects the Linux kernel clock driver: mediatek mt7622-apmixedsys. The root cause was an error path where clk_data, allocated via mtk_devm_alloc_clk_data(), could be double-freed if mtk_free_clk_data() remained in the remove path. The fix removes this redundant deallocation in the ...
CVE-2024-35988
CVE-2024-35988 concerns the Linux kernel RISCV NOMMU patch that corrects TASK_SIZE for 64-bit NOMMU. The current TASK_SIZE definition caused spurious failures in userspace memory access when any RAM above 4 GiB existed, leading to incorrect memory access behavior. The vulnerability is resolved by...
CVE-2024-36900
CVE-2024-36900 affects the Linux kernel’s net/hns3 driver. The vulnerability arises when a devlink reload occurs during hardware initialization: the reload can access hardware resources before initialization, potentially causing a kernel crash. The fix is to register devlink after hardware initia...
CVE-2024-40993
The CVE-2024-40993 vulnerability affects the Linux kernel, specifically netfilter/ipset. A fix was added to ip_set_dereference() to perform an rcu_dereference_protected() check when destroying all sets, accounting for pernet exit phase (in addition to the userspace destroy path). The issue arose ...
CVE-2024-44993
In CVE-2024-44993, the Linux kernel DRM v3d driver exposes an out-of-bounds read in v3d_csd_job_run() when UBSAN is enabled on Raspberry Pi 5. The UAPI supplies seven configuration registers, but the code reads an eighth element of a __u32 array, triggering a local read violation in v3d_csd_job_r...
CVE-2024-45029
CVE-2024-45029 affects the Linux kernel i2c Tegra driver on ACPI machines. The root cause is a mutex being used inside a spinlock during power-runtime handling, which can lead to a sleeping function call from an invalid context when __pm_runtime_resume() triggers acpi_subsys_runtime_resume(). The...
CVE-2024-46794
CVE-2024-46794 : In the Linux kernel (x86/tdx), the mmio_read() TDVMCALL could leak the value of an initialized stack variable (val) to the VMM. The fix prevents sending the original value of *val to the VMM. The vulnerability description appears consistently in connected sources (e.g., Astra Lin...
CVE-2024-47717
Technical details for CVE-2024-47717 are not publicly provided in the supplied documents; monitor for updates.
CVE-2024-49941
CVE-2024-49941 in the Linux kernel relates to gpiolib’s gpiod_get_label() where a NULL label could be dereferenced if srcu_dereference_check() returns NULL, leading to accessing label->str without verifying label. The patch adds a proper NULL check for label and removes the label->str != NU...
CVE-2024-56639
CVE-2024-56639 affects the Linux kernel net/hsr RedBox path. The root cause was an under-allocated skb in hsr_init_skb() for RedBox, causing skb_over_panic when sending supervision frames that add two TLV components. The issue led to OOPs in skb_panic at net/core/skbuff.c:206 and a local exploit ...
CVE-2024-56671
CVE-2024-56671 affects the Linux kernel gpio graniterapids vGPIO driver. A crash during boot was caused by unauthorized modification of irq_chip.name via casting away const in gpio_irq_chip_set_chip; the issue stems from suboptimal initialization. The fix moves irq_chip.name initialization into t...
CVE-2024-57984
The CVE-2024-57984 entry concerns the Linux kernel i3c subsystem (dw_i3c_master). It describes a use-after-free caused by a race between the worker dw_i3c_hj_work and the cleanup path in dw_i3c_common_remove, which frees master->base after device_unreg/is removed. The connected advisory notes ...
CVE-2025-21977
CVE-2025-21977 : Linux kernel hyperv_fb vulnerability affecting Gen2 Hyper‑V VMs. When the kdump kernel loads, efifb may hang due to the Hyper‑V framebuffer being moved to a new MMIO address and the kdump screen_info using the original address. Root cause: framebuffer relocation is not reset for ...
CVE-2025-22078
CVE-2025-22078 affects the Linux kernel staging/vchiq_arm component. The issue occurs when vchiq_platform_conn_state_changed() is never called or fails before driver removal, causing ka_thread to potentially point to an invalid task_struct and risking a crash. The fix adds necessary guards before...