14999 matches found
CVE-2024-38616
CVE-2024-38616 affects the Linux kernel wifi: carl9170 stack. The issue is a fortified-memset warning triggered in carl9170_tx_release (inlined via kref_put and carl9170_tx_put_skb) in randconfig builds. The root cause is a Fortify warning in fortify_memset_chk due to memory bounds handling; patc...
CVE-2022-49242
CVE-2022-49242 relates to the Linux kernel ASoC: mxs driver. The issue is a refcount leak in error paths within mxs_sgtl5000_probe caused by only calling of_node_put() in the regular path; if codec_np is NULL, saif_np[0] and saif_np[1] may remain non-NULL and leak. The root cause is improper rele...
CVE-2022-49260
CVE-2022-49260 affects the Linux kernel crypto path: crypto: hisilicon/sec, where the aead software fallback for the engine could mismanage private context memory due to a subreq pointer mishandling, potentially causing an OS panic when configuring a 64K page. The connected documents confirm a fi...
CVE-2022-49341
The CVE-2022-49341 entry concerns the Linux kernel vulnerability where bpf, arm64 paths could reveal kernel memory via copy_to_user() in bpf_prog_get_info_by_fd() due to incorrect handling of prog->jited_len. The issue arises when prog->jited_len is set (e.g., to 43) but prog->bpf_func i...
CVE-2022-49342
CVE-2022-49342 affects the Linux kernel net/ethernet/bgmac path (bcma_mdio_mii_register) where of_get_child_by_name() increases the node refcount, causing a refcount leak. The root cause is missing of_node_put() on unused nodes. Patches add the missing of_node_put() to prevent leaks. Patched stat...
CVE-2022-49352
CVE-2022-49352 relates to the Linux kernel ext4: fix warning in ext4_handle_inode_extension, where a write path can trigger inode size accounting inconsistencies under memory pressure. The issue describes an observed sequence where inode.i_size is 4096, but EXT4_I(inode)->i_disksize is set to ...
CVE-2022-49431
CVE-2022-49431 concerns the Linux kernel powerpc iommu: a missing of_node_put in iommu_init_early_dart leads to a refcount leak for the device_node returned by of_find_compatible_node. The issue is local in scope (AV:L, AC:L, PR:L, UI:N) with a high impact on availability and a moderate base scor...
CVE-2022-49470
CVE-2022-49470 concerns the Linux kernel Bluetooth subsystem, specifically the btmtksdio driver. The provided sources confirm a concrete issue: use-after-free involving the skb/data in btmtksdio_recv_event after hci_recv_frame is called, leading to a KASAN report. The impact is high (CVE score 7....
CVE-2022-49489
CVE-2022-49489 details (NORMAL mode) Affects the Linux kernel component: drm/msm/disp/dpu1. The issue arises from set vbif hw config to NULL to avoid use-after-free during PM runtime resume in the DPU, leading to an Unable to handle kernel paging request crash (illustrated by the call trace inclu...
CVE-2022-49514
Concrete details available: CVE-2022-49514 concerns the Linux kernel ASoC Mediatek driver, specifically a fix in the mt8173_max98090_dev_probe error path. The root issue was a refcount leak in the error path, and the remediation is to call of_node_put(platform_node) to avoid the leak. Connected a...
CVE-2022-49517
CVE-2022-49517 corresponds to a Linux kernel ASoC issue in Mediatek platforms: mt2701_wm8960_machine_probe incorrectly increments a phandle refcount without balancing it, leading to a refcount leak. The fix is to call of_node_put() to drop the reference. Connected advisories (Astra Linux and Ness...
CVE-2022-49521
In CVE-2022-49521, the Linux kernel vulnerability affects the lpfc SCSI path: if lpfc_complete_unsol_iocb() cannot match the rctl of a received frame, the frame is dropped and resources are leaked. The fix returns resources when discarding an unhandled frame type and updates lpfc_fc_frame_check()...
CVE-2022-49627
CVE-2022-49627 targets the Linux kernel’s Integrity Measurement Architecture (IMA). The advisory notes a memory leak possibility in ima_init_crypto() if SHA1 tfm allocation fails, where the ima_algo_array may not be freed. The documented fix adds the missing kfree() for ima_algo_array to prevent ...
CVE-2022-49694
The CVE-2022-49694 vulnerability affects the Linux kernel in the block I/O subsystem, where the elevator is disabled in del_gendisk. The root cause is a use-after-free risk on q->tag_set because the elevator disabling and scheduler tag freeing were performed in disk_release/blk_cleanup_queue t...
CVE-2022-49875
CVE-2022-49875: In the Linux kernel, bpftool can cause a NULL pointer dereference when pinning BPFFS objects (PROG, MAP, LINK) without a FILE, leading to a local segmentation fault. The root cause is strlen being invoked on a NULL name during mount_bpffs_for_pin. The mitigation provided in the so...
CVE-2022-49979
CVE-2022-49979 concerns a Linux kernel refcount bug in sk_psock_get triggered during an SMC fallback in the connect path, due to a mismatch in the sk_user_data field used by both smc and psock. The root cause is the shared use of sk_user_data by two subsystems; the patch adds a new bit (SK_USER_D...
CVE-2022-50029
CVE-2022-50029 affects the Linux kernel “clk: qcom: ipq8074: dont disable gcc_sleep_clk_src” issue where the USB sleep clock is disabled while the clock framework tries to disable the sleep clock source, causing a failure. The connected advisories (Unity Linux / Astra Linux / SUSE entries) descri...
CVE-2022-50115
CVE-2022-50115 : In the Linux kernel, the ASoC: SOF: ipc3-topology vulnerability caused potential memory corruption due to a double free of ipc_control_data in error/rollback paths when load_bytes-related validation fails. The issue arose because scontrol->ipc_control_data could be freed but n...
CVE-2022-50229
CVE-2022-50229 is a Linux kernel vulnerability in the ALSA bcd2000 driver. The issue is a use-after-free (UAF) bug that occurs on the error path during probing: when snd_card_register() fails, the driver frees midi_out_urb before it is killed, enabling a UAF condition. The observed log pattern me...
CVE-2023-22996
CVE-2023-22996 affects the Linux kernel prior to 5.17.2. In drivers/soc/qcom/qcom_aoss.c, an of_find_device_by_node reference is not released after use (e.g., via put_device), which can lead to a lingering reference. The practical impact and exploitability are not described in the provided docume...
CVE-2023-52523
CVE-2023-52523 – Linux kernel vulnerability (bpf, sockmap): A BPF sk_msg redirect can target a non-TCP exit socket (via SOCKMAP/SOCKHASH), which previously could downcast to a tcp_sock and crash. The issue arose after enabling redirects to non-TCP sockets, breaking assumptions that the egress soc...
CVE-2023-52701
The CVE-2023-52701 entry concerns Linux kernel net handling: copying skb marks and skb_cb data led to a memory exposure via usercopy checks, observed as a kernel crash on arm64 when CONFIG_HARDENED_USERCOPY=y. Root cause: copying data from skb->cb[] and skb->mark can bypass size checks; pat...
CVE-2023-52708
CVE-2023-52708 affects the Linux kernel MMC SPI code. The issue stems from error handling in mmc_spi_probe(): if mmc_add_host() fails, the code previously could call mmc_remove_host() and dereference a null device, causing a crash. The fix routes control to the fail_glue_init path on mmc_add_host...
CVE-2023-52737
CVE-2023-52737: In the Linux kernel, when using Btrfs, fiemap could deadlock with an in-flight fsync due to not taking the inode lock (i_mutex) before fiemap operations. The root cause is that fiemap_fill_next_extent() could fault while accessing user space buffers, which creates a lock-order cyc...
CVE-2023-52754
CVE-2023-52754 is a Linux kernel vulnerability in the imon USB driver. The driver could memory-corrupt by naively assuming the first interface is bound to imon when probing the second interface; a malformed descriptor could bind the first interface to another driver. A patch adds a sanity check a...
CVE-2023-52849
CVE-2023-52849 is a Linux kernel vulnerability related to CXL memory shutdown order. The issue caused a NULL pointer dereference during teardown when removing cxl_mock_mem, tracing through cxl_region_decode_reset and related cleanup paths (cxl_region_detach, cxld_unregister, devres_release_all, d...
CVE-2023-52850
CVE-2023-52850 affects Linux kernel media: hantro: the i.MX8MM/N/P VPU reset is done by genpd, and the .reset op may be undefined. The fix removes the .reset op from i.MX8M hantro G2 implementation and adds a check for definition before calling .reset to avoid NULL pointer dereference. In public ...
CVE-2023-52873
The CVE-2023-52873 issue affects the Linux kernel clock driver for Mediatek (clk-mt6779). Root cause: missing validation of the return value from mtk_alloc_clk_data(), which could lead to a NULL pointer dereference. Impact is local with possible kernel gains if exploited. The connected sources in...
CVE-2023-52992
CVE-2023-52992 affects the Linux kernel; the vulnerability exists in BPF’s send_signal_common path where a task with pid=1 can trigger a kernel panic (kernel: “Attempted to kill init!”). A fix was applied to skip pid=1 in bpf_send_signal_common(), preventing this panic. Impact is local, with pote...
CVE-2023-53045
CVE-2023-53045 is mitigated in the Linux kernel via a fix to the USB gadget driver (usb: gadget: u_audio). In the unbind callback for f_uac1/f_uac2, a call to snd_card_free() could block waiting for resources to be released if userspace kept the file descriptor open, potentially causing a deadloc...
CVE-2023-53109
CVE-2023-53109 : Linux kernel vulnerability in net: tunnels where IP tunnels may update dev->needed_headroom in the xmit path, causing a data race (KCSAN) in ip_tunnel_xmit and related paths. The patch annotates lockless accesses to dev->needed_headroom for three tunnels’ xmit paths and als...
CVE-2024-22386
CVE-2024-22386 involves a race condition in the Linux kernel’s drm/exynos driver (exynos_drm_crtc_atomic_disable) that can cause a NULL dereference, potentially leading to kernel panics or denial of service. Connected Nessus/NASL entries for Unity Linux (UTSA-2026-004378 and related advisories) c...
CVE-2024-26682
CVE-2024-26682 affects the Linux kernel's wifi/mac80211 CSA/ECSA handling. The patch fixes: (1) ignoring ECSA elements stuck in probe responses when cfg80211 previously detected them, preventing false connection refusals during CSA; and (2) permitting connections to APs switching to a channel alr...
CVE-2024-26690
In CVE-2024-26690, the Linux kernel stmmac driver fix avoids 32-bit seqcount race conditions in u64_stats_sync by splitting 64-bit statistics into three context-specific groups and introducing a per-cpu stats structure (stmmac_pcpu_stats). The tx, napi/poll, and interrupt contexts now update disj...
CVE-2024-26760
Summary: CVE-2024-26760 affects the Linux kernel, specifically the SCSI PSCI path (scsi: target: pscsi). The issue stems from memory handling in bio_kmalloc: after a non-success path, bio_uninit() and kfree() are not reliably invoked, which can lead to a WARN and a NULL pointer dereference in bio...
CVE-2024-26796
The CVE-2024-26796 vulnerability affects the Linux kernel perf subsystem on RISCV with the PMU legacy path. The root cause is that the ctr_get_width function was not defined for the legacy configuration (CONFIG_RISCV_PMU_LEGACY=y, CONFIG_RISCV_PMU_SBI=n), causing a NULL pointer dereference in per...
CVE-2024-35841
CVE-2024-35841 describes a Linux kernel vulnerability in the TLS path (net: tls) related to splice handling with MSG_SPLICE_PAGES. The issue occurs when moving user pages from msg to msg_pl; if more pages are added than MAX_MSG_FRAGS and the MORE flag is used, the code can attempt to re-fill a fu...
CVE-2024-35919
CVE-2024-35919: The Linux kernel vulnerability involves a race/NULL dereference in media: mediatek: vcodec code where vpu_enc_ipi_handler may access a deleted ctx_list, potentially leading to a NULL pointer dereference when SCP IP block behavior deletes the list. A lock was added to protect the e...
CVE-2024-35986
CVE-2024-35986 affects the Linux kernel ti phy tusb1210 charger-detect path. The issue stems from long-lived in-kernel references to power_supply devices: unregistering a power_supply with an active reference can trigger a WARN in power_supply_unregister(), leading to a dangling reference and a c...
CVE-2024-40993
The CVE-2024-40993 vulnerability affects the Linux kernel, specifically netfilter/ipset. A fix was added to ip_set_dereference() to perform an rcu_dereference_protected() check when destroying all sets, accounting for pernet exit phase (in addition to the userspace destroy path). The issue arose ...
CVE-2024-41149
CVE-2024-41149 concerns a Linux kernel use-after-free in the block layer where hctx must be removed from the cpuhp callback list before reuse. If hctx remains linked, reuse may trigger use-after-free, enabling local or partial system impact as described. A fix has been applied in the kernel; refe...
CVE-2024-44953
The CVE-2024-44953 entry documents a Linux kernel SCSI/UFS deadlock in RTC update handling triggered by runtime suspend waiting for RTC work flush, where the RTC work calls ufshcd_rpm_get_sync() to wait for runtime resume. The deadlock trace is provided, and the issue is stated to be resolved by ...
CVE-2024-45013
CVE-2024-45013 - Linux kernel NVMe keep-alive handling : The vulnerability stemmed from not stopping the NVMe keep-alive when unloading the host driver, creating a use-after-free path if controller startup fails. The fix moves the stopping keep-alive step into nvme_uninit_ctrl(), aligning it with...
CVE-2024-46741
The CVE-2024-46741 issue is in the Linux kernel’s misc/fastrpc subsystem. The root cause is a double free of the fastrpc buffer in the error path of fastrpc_req_mmap(): the buffer is freed in fastrpc_req_munmap_impl() on a successful unmap, but there is an unconditional call to fastrpc_buf_free()...
CVE-2024-49873
CVE-2024-49873 : In the Linux kernel, memfd_pin_folios with THP-backed memory may panic or cause a NULL-pointer dereference when the requested start offset is not aligned to a huge page boundary. The issue arises because filemap_get_folios_contig could load a folio that is a sibling and then fail...
CVE-2024-50270
CVE-2024-50270 targets the Linux kernel, specifically in mm/damon/core where damon_feed_loop_next_input() contains overflow-prone calculations (score_goal_diff_bp, compensation, etc.) related to a constant target score of 10,000. The fix rewrites the function to avoid overflows and removes the un...
CVE-2024-51729
Technical details for CVE-2024-51729 are not provided in the connected documents. The supplied items reference a kernel fix at a high level but do not enumerate affected products/versions beyond generic kernel context; monitor for updates.
CVE-2024-53182
The CVE-2024-53182 issue affects the Linux kernel BFQ Scheduler. A revert of the patch that merged bfq_release_process_ref() into bfq_put_cooperator() caused bic_set_bfqq to operate on a freed bic data structure, yielding a slab-use-after-free detected by KASAN in bic_set_bfqq+0x200/0x230. Impact...
CVE-2024-57976
CVE-2024-57976 affects the Linux kernel’s btrfs filesystem. When cow_file_range() returns an error during delalloc handling (ENOSPC), error cleanup clears EXTENT_DELALLOC and dirty flags, but pages can remain dirty, triggering a subsequent COW fixup path and a kernel BUG (extent_writepage_io). Th...