CVE-2024-57984

The CVE-2024-57984 entry concerns the Linux kernel i3c subsystem (dw_i3c_master). It describes a use-after-free caused by a race between the worker dw_i3c_hj_work and the cleanup path in dw_i3c_common_remove, which frees master->base after device_unreg/is removed. The connected advisory notes ...

CVE-2024-42066

CVE-2024-42066 is a Linux kernel vulnerability affecting DRM Xe: a potential integer overflow in page size calculation when computing min_page_size. The issue stems from not casting tbo->page_alignment to a 64-bit type before bit-shifting, enabling overflow in the calculation. The connected As...

CVE-2024-42108

Technical details for CVE-2024-42108 are not publicly provided in the connected documents. The available sources reference the vulnerability at a high level. Monitor for updates from kernel advisories and vendor patches.

CVE-2024-44953

The CVE-2024-44953 entry documents a Linux kernel SCSI/UFS deadlock in RTC update handling triggered by runtime suspend waiting for RTC work flush, where the RTC work calls ufshcd_rpm_get_sync() to wait for runtime resume. The deadlock trace is provided, and the issue is stated to be resolved by ...

CVE-2024-45013

CVE-2024-45013 - Linux kernel NVMe keep-alive handling : The vulnerability stemmed from not stopping the NVMe keep-alive when unloading the host driver, creating a use-after-free path if controller startup fails. The fix moves the stopping keep-alive step into nvme_uninit_ctrl(), aligning it with...

CVE-2024-46709

The CVE-2024-46709 issue affects the Linux kernel drm/vmwgfx driver, fixed by ensuring external buffers map through the dma_buf interface instead of direct page access. The vulnerability arises because external buffers may not expose readable/writable pages, so media buffers (bo) created from ext...

CVE-2024-46776

The CVE-2024-46776 entry corresponds to a Linux kernel flaw in the DRM/AMD display pipeline. The issue arises when the DC_LOG_DC is executed before verifying link_enc, allowing an invalid state that prompted a reported reverse_inull defect; the fix corrects the sequence by running DC_LOG_DC only ...

CVE-2024-49872

The CVE-2024-49872 issue affects the Linux kernel in mm/gup where memfd_pin_folios can race when creating a hugetlb folio and another actor has already done so, leading to a -EEXIST and a panicking folio_put call if the same folio is used in the next loop iteration. The patch fixes the race by cl...

CVE-2024-50144

The CVE-2024-50144 issue affects the Linux kernel DRM/XE path. Root cause: an unbalanced rpm put() can occur if fence_fini() is invoked twice on error while handling GuC CT for a tlb request, because the code path signals the fence and then returns an error, causing the caller to run fini() again...

CVE-2024-50254

CVE-2024-50254 : In the Linux kernel, the bpf_iter_bits_destroy() path incorrectly used kit->nr_bits bit = kit->nr_bits on completion, uses !nr_bits || bits >= nr_bits to determine completion, and keeps nr_bits > 64 to indicate dynamic allocation. It also changes kit->nr_bits from ...

CVE-2024-50270

CVE-2024-50270 targets the Linux kernel, specifically in mm/damon/core where damon_feed_loop_next_input() contains overflow-prone calculations (score_goal_diff_bp, compensation, etc.) related to a constant target score of 10,000. The fix rewrites the function to avoid overflows and removes the un...

CVE-2024-50288

CVE-2024-50288 affects the Linux kernel vivid driver (video capture path). The issue arises in vivid_create_queue handling of video capture buffers: the video capture queue can request up to 64 buffers, but the must_blank array remained sized for 32 (VIDEO_MAX_FRAME), causing an out-of-bounds wri...

CVE-2024-56555

CVE-2024-56555 affects the Linux kernel binder subsystem. A race in binder_add_freeze_work() can occur when the process’ rbtree (proc->nodes) lock is intermittently dropped to acquire node locks, allowing binder_deferred_release() to move nodes to binder_dead_nodes. This can corrupt the rb_nex...

CVE-2024-57880

Technical details about CVE-2024-57880 are not provided in the connected documents. Public specifics, affected products, and fixes are not disclosed here; monitor for updates.

CVE-2025-22098

CVE-2025-22098 affects the Linux kernel’s DRM for ZynqMP DP. The issue is a deadlock in zynqmp_dp_ignore_hpd_set caused by attempting to lock the same mutex twice; the fix is to lock and unlock it properly (instead of locking twice). The vulnerability was identified by the Clang thread-safety ana...

CVE-2025-37751

The CVE affects the Linux kernel x86 CPU code. It arises from removing the NULL terminator at the end of the AMD erratum table during the switch from x86_cpu_desc to x86_cpu_id, causing readers to read past the end of the array. The fixed behavior is to replace the NULL terminator. Connected sour...

CVE-2025-37870

Technical details about CVE-2025-37870 are not publicly provided in the supplied documents. Please monitor for updates from vendors and security advisories.

CVE-2025-38005

CVE-2025-38005 affects the Linux kernel DMA engine TI k3-udma driver. The root cause is a missing locking in k3-udma.c; the provided docs note that a commit adding the missing locking resolves the issue. Remediation: apply the kernel patch/updated driver version that includes the locking fix (as ...

CVE-2025-38051

CVE-2025-38051 affects the Linux kernel CIFS client: a race in the readdir/concurrency path allows a use-after-free in cifs_fill_dirent when the rsp buffer is freed, leading to a reported KASAN-use-after-free. The vulnerability is tracked with a CVSSv3.1 vector of CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U...

CVE-2025-38060

The CVE-2025-38060 entry describes a Linux kernel BPF verifier bug: copy_verifier_state() failed to copy the loop_entry field, allowing .loop_entry values from unrelated states to pollute env->cur_state. This can cause incorrect state tracking during verification, since env->stack states ma...

CVE-2025-38098

The CVE-2025-38098 issue affects the Linux kernel DRM AMD display stack. It centers on treating a wb (writeback) connector as physical in create_validate_stream_for_sink, and incorrect handling when operating on a drm_wb_connector as an amdgpu_dm_connector. The description notes that dereferencin...

CVE-2025-38219

CVE-2025-38219 affects the Linux kernel F2FS code path. The issue is a downgrade-related negative i_nlink scenario that could trigger a kernel warning; the vulnerability was resolved in the cited upstream code path (f2fs_i_links_write -> f2fs_drop_nlink -> f2fs_unlink), as shown in the conn...

CVE-2025-38300

CVE-2025-38300: In the Linux kernel sun8i-ce-cipher path (sun8i_ce_cipher_prepare), two DMA cleanup issues on the error path are fixed. 1) On the theend_sgs error path, dma_unmap is now performed only if the corresponding dma_map_sg() succeeded for areq->dst. 2) On the theend_iv path, dma_unma...

CVE-2025-38369

CVE-2025-38369 affects the Linux kernel DMA engine idxd path. Under certain container configurations running IDXD workloads with /dev mounted can trigger a call trace or kernel panic when the parent process of the container is terminated. Root cause described: Docker’s mount replication propagati...

CVE-2025-38382

The CVE-2025-38382 entry concerns a Linux kernel bug in btrfs related to iterating extrefs during log replay. Specifically, in __inode_add_ref(), processing extrefs could jump to a next label with victim_name.len uninitialized, causing undefined memory access in the next loop iteration. The docum...

CVE-2025-38392

CVE-2025-38392 (Linux kernel) describes a concurrency issue in the idpf driver where a control queue mutex (cq_lock) is held across operations that may sleep, triggering warnings during module load when VIRTCHNL2_CAP_MACFILTER is ON. The fix converts cq_lock from a mutex to a spinlock to avoid sl...

CVE-2025-38453

CVE-2025-38453 affects the Linux kernel io_uring/msg_ring path, where io_kiocb freeing could occur while a previously freed request is still in use. The connected docs specify a root cause: requests allocated and freed independently in msg_ring can race with RCUs, risking use-after-free. The reco...

CVE-2025-38475

CVE-2025-38475 concerns the Linux kernel SMC socket type confusion where smc_sock hijacks AF_INET/AF_INET6 internals, causing inet_opt to be interpreted as a function pointer due to inet_sock not being the first member of smc_sock. The root cause is the misalignment between smc_sock and inet_sock...

CVE-2026-52991

CVE-2026-52991 concerns a race in the Linux kernel PSI subsystem where a use-after-free can occur due to a race between pressure_write and cgroup file release touching the priv member of struct kernfs_open_file. The issue is fixed by widening the scope of the cgroup_mutex in pressure_write to cov...

CVE-2026-53360

The CVE-2026-53360 entry concerns a Linux kernel KVM/SEV issue: if GHCB v2+ is used, in-GHCB scratch area must reside in the shared buffer. The root cause is a bounds check flaw in snp_begin_psc() where idx_end is validated against VMGEXIT_PSC_MAX_COUNT (253) but not against the actual buffer siz...

CVE-2005-3359

CVE-2005-3359 affects Linux kernel 2.6.x (atm module) where certain socket calls can produce inconsistent references counts on loadable protocol modules, enabling a local user to trigger a denial of service (panic). Publicly documented in Debian/DSA-1103-1 and Red Hat/CESA-RHSA-2006:0493 style ad...

CVE-2007-4998

CVE-2007-4998 is a local, user‑assisted vulnerability in cp when preserving symlinks across multiple OSes. The issue allows an attacker to cause a race/symlink attack that can overwrite arbitrary files by crafting directories with multiple source files copied to the same destination. Multiple con...

CVE-2010-0007

CVE-2010-0007 affects the Linux kernel’s ebtables in netfilter, where netfilter/ebtables.c allows local users to modify rules without CAP_NET_ADMIN, bypassing access restrictions and enabling arbitrary network-traffic filtering via a modified ebtables user-space tool. Vulnerable: kernel before 2....

CVE-2010-4525

CVE-2010-4525: The Linux kernel up to 2.6.34.y omits initialization of kvm_vcpu_events->interrupt.pad, enabling local attackers to read potentially sensitive data from kernel stack memory via unspecified vectors. The affected component is kernel/KVM (Linux kernel 2.6.33/2.6.34.y). Multiple adv...

CVE-2011-1598

CVE-2011-1598 affects the Linux kernel’s CAN subsystem: the bcm_release function in net/can/bcm.c does not validate a socket data structure, enabling a local user to trigger a NULL pointer dereference and cause a denial of service. The affected version range is kernel 2.6.39-rc6 and earlier. Reso...

CVE-2011-2494

The CVE-2011-2494 issue affects the Linux kernel (taskstats.c) up to version before 3.1. Local users can obtain sensitive I/O statistics by sending taskstats commands to a netlink socket, with the description noting this could reveal password length information. The vulnerability’s root cause is ...

CVE-2013-1928

CVE-2013-1928 affects the Linux kernel prior to 3.6.5. The do_video_set_spu_palette function in fs/compat_ioctl.c lacks an error check, potentially enabling local attackers to read sensitive kernel stack memory via a crafted VIDEO_SET_SPU_PALETTE ioctl on a /dev/dvb device. The issue is addressed...

CVE-2015-4003

CVE-2015-4003 affects the OZWPAN driver in the Linux kernel (drivers/staging/ozwpan/ozusbsvc1.c, function oz_usb_handle_ep_data) through kernel 4.0.5. A remote attacker can send a crafted packet to trigger a divide-by-zero and cause a system crash (DoS). The connected advisories (Unity Linux/Eule...

CVE-2017-17857

The CVE-2017-17857 vulnerability affects the Linux kernel’s verifier.c check_stack_boundary in versions up to 4.14.8, allowing local users to trigger memory corruption and potential denial of service or other impact by mishandling invalid variable stack read operations. Connected advisories (Unit...

CVE-2017-7277

CVE-2017-7277 affects the Linux kernel TCP stack up to version 4.10.6. It arises from mishandling SCM_TIMESTAMPING_OPT_STATS in net/core/skbuff.c and net/socket.c, enabling local users to read sensitive kernel socket data or cause a denial of service (out-of-bounds read) via crafted syscalls. Ups...

CVE-2018-12714

The CVE-2018-12714 entry concerns the Linux kernel up to 4.17.2, where filter parsing in kernel/trace/trace_events_filter.c could be invoked with no filter (N=0), causing an N−1 index access. This can lead to a slab out-of-bounds write via crafted perf_event_open and mmap, resulting in denial-of-...

CVE-2020-36779

CVE-2020-36779 affects the Linux kernel i2c stm32f7 driver. The issue is a PM reference leak where pm_runtime_get_sync increments the usage count on return even when it fails, in stm32f7_i2c_xx functions (local attack vector). The patch replaces the problematic path with pm_runtime_resume_and_get...

CVE-2021-47105

CVE-2021-47105 : In the Linux kernel, the ice: xsk path had a bug where cleaning the SW ring NULLed xdp_buff but did not return the buffers to the xsk pool. This caused buffers in the umem to leak and become unusable. The fix adds a missing xsk_buff_free() in the cleanup path and ensures only the...

CVE-2021-47253

CVE-2021-47253 affects the Linux kernel’s DRM/AMD display path, where DMUB hw_init could leak memory on suspend/resume due to kzalloc allocation without guard. The fix ensures the DC wrapper memory is only allocated if it was not previously allocated, avoiding reallocation on suspend/resume. Docu...

CVE-2021-47254

In CVE-2021-47254, the Linux kernel gfs2 subsystem has a use-after-free in gfs2_glock_shrink_scan. The GLF_LRU flag is checked under lru_lock to remove the glock from the lru list in __gfs2_glock_put(), but cond_resched_lock(&lru_lock) allows progress on the put side without deleting the glock fr...

CVE-2021-47351

CVE-2021-47351 concerns a Linux kernel issue in UBIFS where races between xattr_set/xattr_get and listxattr could cause assertion failures, memory corruption, or stale xattr values. The description confirms the root cause as synchronization problems within UBIFS inode xattrs, and the fix introduc...

CVE-2021-47357

CVE-2021-47357 : In the Linux kernel, the atm: iphase removal path calls del_timer(), which can leave a timer handler running after the driver remove completes, causing a possible use-after-free. The fix uses del_timer_sync() to wait for the timer handler to finish and prevent rescheduling. Conne...

CVE-2021-47409

CVE-2021-47409 concerns a Linux kernel vulnerability in the USB: dwc2 subsystem where a NULL return from platform_get_resource() could lead to a NULL pointer dereference. The issue is triggered when the return value is not checked, as described in the CVE entry and echoed in connected advisories ...

CVE-2021-47421

CVE-2021-47421 affects the Linux kernel amdgpu driver. The root cause is that during PCI error handling, the code may release a write lock in amdgpu_pci_resume even when not safely holding it, leading to potential deadlocks when other threads acquire a read lock. The fix, documented across connec...

CVE-2021-47436

CVE-2021-47436 – Linux kernel USB Musb DSPS probe error path fix . The connected Astra/Unity advisories confirm a root cause in the Musb DSPS driver where dsps_setup_optional_vbus_irq() and dsps_create_musb_pdev() were inverted in the error path, leaving a platform device registered but not unreg...