CVE-2025-23162

The CVE-2025-23162 issue affects the Linux kernel DRM/XE driver with SR-IOV VFs. A VF could trigger a GT reset and attempt to write to register 0x941c, which is inaccessible to VFs, leading to a fault path during reset handling. The available connected docs document the root cause and provide a r...

CVE-2025-37959

CVE-2025-37959 – Linux kernel : Vulnerability in bpf_redirect_peer where redirecting a packet to a device in another network namespace could leave skb metadata (namespace-bound state) from the host in the container namespace, enabling potential information leakage. The patch scrubs the packet on ...

CVE-2025-38052

CVE-2025-38052 concerns the Linux kernel where a slab-use-after-free in net/tipc/crypto.c during tipc_aead_encrypt_done can occur after the tipc_crypto tx is freed when a namespace is deleted. The issue arises when simd_aead_encrypt is interrupted and crypto_simd_usable() returns false, allowing ...

CVE-2025-38064

The CVE-2025-38064 entry concerns the Linux kernel virtio subsystem, specifically virtio-console, where devices continue to write to MMIO after the underlying virtio-pci device is reset, causing hangs in kexec-in-VM scenarios. The issue is mitigated by the kernel fix that breaks all virtio device...

CVE-2025-38145

CVE-2025-38145 affects the Linux kernel in the ASPEED SoC driver (aspeed_lpc_enable_snoop). The vulnerability is due to not checking the return value of devm_kasprintf(), which can return NULL on memory allocation failure, leading to a NULL pointer dereference. The connected documentation confirm...

CVE-2025-38245

In the Linux kernel ATM subsystem, CVE-2025-38245 is due to releasing atm_dev_mutex before procfs/sysfs removal in atm_dev_deregister(), creating a race window where a device may still appear in procfs while the device list no longer contains it. This can trigger a splat warning during atm_dev_re...

CVE-2025-38348

The CVE-2025-38348 issue is in the Linux kernel wifi driver for the Intersil p54 interface. A malicious USB device could cause a buffer over-read in p54_rx_eeprom_readback() by tampering v1/v2 eeprom length fields, potentially crashing the host. A patch was applied to store the eeprom size in the...

CVE-2025-38455

CVE-2025-38455 is a Linux kernel/KVM vulnerability in the KVM: SVM path. The issue occurs during SEV{-ES} intra-host migration when a vCPU is being created (in-flight) on either source or destination VM, where SEV{-ES} state can be toggled to non-SEV{-ES} in the destination. This can lead to a cr...

CVE-2007-2172

CVE-2007-2172 affects the Linux kernel 2.6 (before 2.6.21-rc6) and 2.4 (before 2.4.35). A typo causes RTA_MAX to be used as an array size instead of RTN_MAX, leading to out-of-bounds access in dn_fib_props (dn_fib.c, DECNet) and fib_props (fib_semantics.c, IPv4). Connected advisories corroborate ...

CVE-2008-0598

CVE-2008-0598 affects the Linux kernel 2.6.9, 2.6.18 (and likely other versions) via the 32-bit/64-bit emulation. The issue allows local attackers to read uninitialized memory through crafted binaries, indicating a local, unauthenticated attack with LOW complexity and complete confidentiality imp...

CVE-2008-2812

CVE-2008-2812 affects the Linux kernel prior to 2.6.25.10, with NULL pointer dereferences in tty handling (notably in drivers/net/ such as hamradio, irda, ppp, slip, wan, and wireless components) potentially enabling local privilege escalation or a system crash. The issue arises from missing chec...

CVE-2009-0778

CVE-2009-0778 affects the Linux kernel prior to 2.6.25 when configured as a router with a REJECT route. The icmp_send code in net/ipv4/icmp.c can mishandle the Protocol Independent Destination (DST) cache, potentially leaking DST state and allowing remote attackers to cause a denial of service (c...

CVE-2009-4031

CVE-2009-4031 affects the KVM x86 emulator (arch/x86/kvm/emulate.c) in the Linux kernel prior to 2.6.32-rc8-next-20091125. The do_insn_fetch path could interpret instructions longer than valid, failing to enforce the 15-byte limit per instruction, which guest OS users can abuse to cause a denial ...

CVE-2010-3297

CVE-2010-3297 affects the Linux kernel net/eql driver; the eql_g_master_cfg function in drivers/net/eql.c did not initialize a structure member, enabling local users to read kernel stack memory via an EQL_GETMASTRCFG ioctl. Affects kernels before 2.6.36-rc5; corrected in subsequent patches (net/e...

CVE-2010-3298

CVE-2010-3298 affects the Linux kernel. The hso_get_count function in drivers/net/usb/hso.c, in kernel builds before 2.6.36-rc5, does not initialize a certain structure member, which allows local users to read potentially sensitive information from kernel stack memory via the TIOCGICOUNT ioctl. T...

CVE-2011-2182

The CVE-2011-2182 bug affects the Linux kernel’s LDM partition handling (fs/partitions/ldm.c) prior to 2.6.39.1, where memory allocation for non-initial fragments could misbehave, potentially enabling local users to trigger a buffer overflow, gain privileges, or access sensitive information when ...

CVE-2011-4915

CVE-2011-4915 affects the Linux kernel, specifically the file fs/proc/base.c, up to version 3.1. It enables a local attacker to disclose sensitive keystroke information by accessing /proc/interrupts, constituting an information-disclosure vulnerability. Root cause: improper exposure of keystroke-...

CVE-2012-1583

CVE-2012-1583 : Affected software is the Linux kernel (net/ipv6/xfrm6_tunnel.c) with the xfrm6_tunnel module enabled. The issue is a double free in xfrm6_tunnel_rcv, allowing remote attackers to cause a denial of service (panic) via crafted IPv6 packets on kernels before 2.6.22. This vulnerabilit...

CVE-2012-4461

CVE-2012-4461 overview: The Linux kernel KVM subsystem (pre-3.6.9) on hosts using qemu userspace without XSAVE is vulnerable. A local attacker can trigger a denial of service (kernel OOPS) by calling KVM_SET_SREGS to enable the X86_CR4_OSXSAVE bit in the guest CR4, then issuing KVM_RUN. The conne...

CVE-2012-4530

Technical details for CVE-2012-4530 are not publicly provided in the connected documents. Monitor for updates; current sources list this CVE among others but do not disclose product/version/root-cause/fix specifics.

CVE-2012-6544

CVE-2012-6544 affects the Linux kernel Bluetooth stack prior to 3.6. The issue arises from improper initialization of certain structures in the L2CAP/HCI paths, enabling a local attacker to read sensitive data from kernel stack memory via a crafted application. MiracleLinux AXSA-2014-258 (kernel-...

CVE-2014-0203

CVE-2014-0203 affects the Linux kernel up to version 2.6.32.x, where the __do_follow_link function in fs/namei.c mishandles the last pathname component for certain filesystems, enabling a local attacker to trigger a denial of service (incorrect free operations and system crash) via an open() call...

CVE-2014-1444

Technical details beyond the Initial Description are not publicly provided in the connected documents. Monitor for updates from upstream advisories to confirm affected products, versions, and fixes.

CVE-2014-3182

CVE-2014-3182 affects the Linux kernel up to version 3.16.1, where an array index error in the logi_dj_raw_event function of drivers/hid/hid-logitech-dj.c can be exploited by a physically proximate attacker using a malformed REPORT_TYPE_NOTIF_DEVICE_UNPAIRED value to execute arbitrary code or cau...

CVE-2014-6416

CVE-2014-6416 describes a buffer overflow in net/ceph/auth_x.c used by Ceph within the Linux kernel prior to 3.16.3. An unencrypted, long auth ticket can be exploited remotely to trigger memory corruption and a kernel panic (DoS). Connected advisories reiter the same root cause and impact. Remedi...

CVE-2015-4003

CVE-2015-4003 affects the OZWPAN driver in the Linux kernel (drivers/staging/ozwpan/ozusbsvc1.c, function oz_usb_handle_ep_data) through kernel 4.0.5. A remote attacker can send a crafted packet to trigger a divide-by-zero and cause a system crash (DoS). The connected advisories (Unity Linux/Eule...

CVE-2015-7312

CVE-2015-7312 affects the Linux kernel 3.x/4.x via race conditions in the aufs aufs3-mmap.patch and aufs4-mmap.patch patches. The vulnerability allows local users to cause denial of service (use-after-free/BUG) or potentially gain privileges through madvise or msync calls, related to mm/madvise.c...

CVE-2015-8966

CVE-2015-8966 affects the Linux kernel — specifically arch/arm/kernel/sys_oabi-compat.c — where, in versions before 4.4, a local user can gain privileges by crafting an fcntl64 call (F_OFD_GETLK, F_OFD_SETLK, or F_OFD_SETLKW). The connected Nessus advisories corroborate the kernel file and vulner...

CVE-2017-17854

CVE-2017-17854 affects the Linux kernel's kernel/bpf/verifier.c, with the vulnerability existing in images up to kernel version 4.14.8. The issue arises from unrestricted integer values used in pointer arithmetic, enabling local users to trigger a denial of service (integer overflow and memory co...

CVE-2018-11412

CVE-2018-11412 affects the Linux kernel versions 4.13–4.16.11, where ext4_read_inline_data() in fs/ext4/inline.c copies data with a length that can be untrusted in certain crafted filesystem layouts (storing system.data in a dedicated inode). This can enable out-of-bounds memory access leading to...

CVE-2018-12904

CVE-2018-12904 affects the Linux kernel’s KVM implementation on x86 when nested virtualization is enabled. The vulnerability arises in arch/x86/kvm/vmx.c due to insufficient CPL checks, potentially allowing a local attacker running in a guest VM (L1) to cause VMEXITs that may lead to privilege es...

CVE-2021-47007

CVE-2021-47007 affects the Linux kernel’s f2fs resizing path. The issue occurs in f2fs_resize_fs() when resizing a 16GB image to 8GB, where the allocator may run out of space during block migration because the code did not verify there is enough free space to store blocks before resizing. This ca...

CVE-2021-47062

The CVE-2021-47062 vulnerability affects the Linux kernel KVM SVM path. The issue occurs when iterating vCPUs for SEV-encrypted VMSAs using created_vcpus, which does not guarantee a vCPU’s existence and can trigger a NULL pointer dereference. The documented fix switches to iterating with online_v...

CVE-2021-47064

CVE-2021-47064 concerns the Linux kernel mt76 wireless driver. The issue arises in the mt76_dma_tx_queue_skb_raw path where buf can be uninitialized, causing the field skip_unmap to inherit a non-zero value from stack garbage. As a result, DMA mappings for MCU command frames may not be unmapped a...

CVE-2021-47163

In the Linux kernel, the following vulnerability has been resolved: tipc: wait and exit until all work queues are done On some host, a crash could be triggered simply by repeating thesecommands several times: modprobe tipc tipc bearer enable media udp name UDP1 localip 127.0.0.1 rmmod tipc [] BUG...

CVE-2021-47167

CVE-2021-47167 is a Linux kernel issue affecting NFS: an Oopsable condition in __nfs_pageio_add_request() could occur. The patch ensures that nfs_pageio_error_cleanup() resets the mirror array contents so the structure reflects an empty state, and it makes nfs_pageio_do_add_request() more robust ...

CVE-2021-47231

CVE-2021-47231 describes a memory leak in the Linux kernel SocketCAN driver (mcba_usb). The issue arises in mcba_usb_start() where 20 usb_coherent buffers are allocated but not freed; callbacks resubmit the URB and disconnect handling doesn’t free or mark URB_FREE_BUFFER for coherent buffers. Thi...

CVE-2021-47259

CVE-2021-47259 is a Linux kernel use-after-free in NFS: nfs4_init_client. Public docs confirm KASAN-detected UAF when mounting two exports via two NICs on the same server; affected kernels include around 5.7–5.10 with the root cause linked to refcounting changes. The connected Astra/Unity/EulerOS...

CVE-2021-47269

CVE-2021-47269 is a Linux kernel issue in the DesignWare USB3 (dwc3) ep0 handling. The root cause is missing validation of the ep index from dwc3_wIndex_to_dep(), which can lead to referring to a non-existing endpoint and a NULL pointer dereference in certain configurations (e.g., composite devic...

CVE-2021-47421

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume In current code, when a PCI error state pci_channel_io_normal is detectd,it will report PCI_ERS_RESULT_CAN_RECOVER status to PCI driver, and PCIdriver...

CVE-2021-47425

CVE-2021-47425: Linux kernel vulnerability in i2c via ACPI resource leak. acpi_i2c_find_adapter_by_handle() calls bus_find_device() which takes a reference on the adapter that is never released, causing a reference-count leak and potentially rendering the adapter unremovable. Connected advisories...

CVE-2021-47476

CVE-2021-47476 : In the Linux kernel, the comedi driver for ni_usb6501 exposed a NULL-dereference/overflow risk in command paths due to endpoint-sized USB transfer buffers without proper size checks. Exploitation could occur if a malicious device reports smaller max-packet sizes than expected, af...

CVE-2021-47478

In the Linux kernel, the following vulnerability has been resolved: isofs: Fix out of bound access for corrupted isofs image When isofs image is suitably corrupted isofs_read_inode() can read databeyond the end of buffer. Sanity-check the directory entry length beforeusing it.

CVE-2021-47516

CVE-2021-47516 concerns a memory‑leak in the Linux kernel’s nfp_cpp_area_cache_add() path. In the function, area = nfp_cpp_area_alloc(..., size) is allocated (#1). If the subsequent cache allocation kzalloc(sizeof(*cache), GFP_KERNEL) fails, the code returns -ENOMEM without freeing the previously...

CVE-2021-47563

CVE-2021-47563 (Linux kernel, ice driver): A refcount mismanagement in the ice XDP path during VSI rebuilds (e.g., ethtool set_channels) can swap bpf_prog pointers and trigger a late bpf_prog_put, potentially leading to a zero-refcount object and a kernel page fault. The issue affects the ice dri...

CVE-2021-47600

The CVE-2021-47600 entry concerns a Linux kernel vulnerability in the dm btree code where a use-after-free occurs during rebalance_children. The root cause is described as a use-after-free in the btree remove path, with the fix specified as moving dm_tm_unlock() after dm_tm_dec(). The vulnerabili...

CVE-2021-47614

CVE-2021-47614 affects the Linux kernel RDMA/irdma subsystem. The issue is a use-after-free in add_pble_prm where the ‘chunk’ was freed while it remained on the PBLE info list if irdma_hmc_sd_one failed. The fix defers adding the PBLE entry until after successful SD setting in irdma_hmc_sd_one, p...

CVE-2021-47650

CVE-2021-47650: In the Linux kernel, ASoC: soc-compress had a potential null pointer when codec_dai could be NULL if card->dai_link->num_codecs was 0, traced through snd_soc_register_card() -> snd_soc_bind_card() -> soc_init_pcm_runtime() -> snd_soc_dai_compress_new() -> snd_soc...

CVE-2021-47654

CVE-2021-47654: Linux kernel landlock sandbox fix for a path_list memory leak where path_list allocated in parse_path() is not freed. Description notes a leak warning in sandboxer.c:134 and that path_list is freed by none. No exploitation details or fixes/versions are specified beyond the fix not...

CVE-2022-48805

CVE-2022-48805 affects the Linux kernel USB driver net: usb: ax88179_178a, specifically the rx_fixup path (ax88179_rx_fixup()). The issue is multiple out-of-bounds accesses in RX fixup that can be triggered by a malicious or defective USB device. Reported problems include: (1) an out-of-bounds me...