CVE-2022-48653

CVE-2022-48653 relates to the Linux kernel ice driver. The vulnerability arises from a double unplug of aux devices in the IDC callback (triggered when aux drivers request a reset and again in ice_prepare_for_reset), causing a scheduling while atomic BUG. The effect is a kernel panic/BUG rather t...

CVE-2022-48721

CVE-2022-48721 – Linux kernel net/smc wakeup handling after fallback Affected: Linux kernel with net/smc subsystem using SMC fallback to TCP. Issue: when switching from SMC to TCP, some socket waitqueue entries (e.g., eppoll_entries) remain in smc socket->wq. After fallback, only clcsocket-&gt...

CVE-2022-48761

CVE-2022-48761 affects the Linux kernel USB xhci-plat code. The issue occurs on platforms like i.MX8QM during suspend with remote wake enabled, where xhci_suspend disables the hub wake and then accesses registers after the device clock is gated by run-time suspend. The underlying root cause was t...

CVE-2022-48808

CVE-2022-48808 concerns a Linux kernel issue in DSA (dpaa2-eth) handling. On systems with LX2160A and Marvell DSA switches, rebooting while the DSA master is up could panic due to the master’s deregistration triggering NETDEV_GOING_DOWN and attempting to close slave interfaces after they were alr...

CVE-2022-48822

CVE-2022-48822 — Linux kernel usb f_fs use-after-free (epfile) Technical summary: A race between ffs_func_eps_disable (which uses a local copy of epfiles) and ffs_epfile_release can lead to use-after-free of the epfile read buffer. While ffs_epfile_release frees the buffer and destroys ffs->ep...

CVE-2022-48876

CVE-2022-48876 concerns the Linux kernel wifi/mac80211 path, where rx->link and rx->link_sta were not always initialized, risking a NULL pointer dereference in code paths such as __ieee80211_rx_h_amsdu invoked from fast-rx. The public records in the provided documents describe the vulnerabi...

CVE-2022-48910

The CVE-2022-48910 case concerns the Linux kernel IPv6 addrconf path: when NETDEV_DOWN is triggered for reasons other than actual interface down, repeated calls can leak one ifmcaddr6 per multicast group by leaking idev->mc_tomb. The fix is to ensure ipv6_mc_down() runs at most once per state ...

CVE-2022-49067

CVE-2022-49067 is about a Linux kernel issue where virt_addr_valid() incorrectly returned true for vmalloc addresses in 64-bit Book3E (and related 32-bit behavior). Investigations across multiple advisories (NVD, Red Hat, Debian OSV, Unity/NASL/Nessus plugins) describe the root cause: __pa() can ...

CVE-2022-49073

Summary (CVE-2022-49073): In the Linux kernel, the sata_dwc_460ex/PCIe SATA controller driver had an OOB write crash due to incorrect use of libata tag values. The patch increases ATA_TAG_INTERNAL to 32 and fixes SATA_DWC_QCMD_MAX to account for that, setting it to ATA_MAX_QUEUE + 1 to avoid out-...

CVE-2022-49089

Summary (CVE-2022-49089) The Linux kernel vulnerability stems from a race condition in IB/rdmavt code where a call to rvt_error_qp was not consistently guarded by the required locks (r_lock and s_lock) due to a commit in Fixes. The function’s documentation requires both locks to be held and lockd...

CVE-2022-49105

CVE-2022-49105 concerns the Linux kernel: in the staging/wfx driver, an error path in wfx_init_common() could return without freeing ieee80211 hardware state, leading to a memory leak. The fix adds an err label and ensures ieee80211_free_hw(hw) is called on error paths, unifying the error handlin...

CVE-2022-49125

CVE-2022-49125 affects the Linux kernel DRM sprd driver. The issue is a potential NULL dereference of the ‘drm’ pointer in sprd_drm_shutdown, with a warning log that could dereference it. The fix removes the dereference risk by adjusting the shutdown path and changes the warning handling from unc...

CVE-2022-49171

CVE-2022-49171 is a Linux kernel issue in the mm/gup.c path affecting ext4. The race causes [un]pin_user_pages_remote to dirty pages without proper pre-notification to ext4, which can lead to data loss. While the root cause is classed as a bug in mm/gup.c, ext4 is particularly fragile: if another...

CVE-2022-49187

The CVE-2022-49187 entry concerns the Linux kernel clk subsystem. A NULL device pointer in clk_core (often from clk_register/clk_hw_register paths) can lead to a NULL pointer dereference when clk_hw_get_clk() is invoked on a clk_hw whose clk_core.dev is NULL, due to a call to dev_name() on NULL. ...

CVE-2022-49212

Vulnerability (CVE-2022-49212) in the Linux kernel affects the MTD/Rawnand Atmel NAND driver. A refcounting bug on a refcounted object nc->dmac can miss a balance in several error paths after dma_request_channel(), potentially leaking a reference. The issue is fixed by decrementing the refcoun...

CVE-2022-49224

CVE-2022-49224 affects the Linux kernel in the power: supply: ab8500 module, where a memory leak can occur because kobject_init_and_add() may fail and memory is not released. The fix is to call kobject_put() on error to properly clean up, as documented in the vulnerability description. The issue ...

CVE-2022-49382

CVE-2022-49382 affects the Linux kernel: soc: rockchip: Fix refcount leak in rockchip_grf_init. The issue occurred because of_find_matching_node_and_match returns a node pointer with an incremented refcount, and the patch adds missing of_node_put() when done to avoid the leak. Connected Astra Lin...

CVE-2022-49533

CVE-2022-49533 relates to the Linux kernel ath11k driver, where a buffer overflow could occur while copying SSIDs into the scan_req_params structure during hardware scanning. The root cause is the mismatch between the number of SSIDs supported (16) and the structure’s capacity (10), potentially a...

CVE-2022-49645

CVE-2022-49645 affects the Linux kernel (drm/panfrost). The issue occurs when the madvise IOCTL is called twice on a BO: the memory shrinker list is corrupted because the BO is already on the list and is re-added without removing it first, leading to a kernel crash. The connected documents confir...

CVE-2022-49776

CVE-2022-49776 affects the Linux kernel macvlan code; it fixes a low-level issue by enforcing a minimal MTU of 68 at link creation to prevent crashes in the IPv6 stack. The advisory notes that macvlan0 should reject mtu values below the device minimum (e.g., 67 rejected, 68 accepted), with the fi...

CVE-2022-49789

The CVE-2022-49789 entry documents a Linux kernel issue in the SCSI zfcp path: double free of an FSF request due to caching the FSF request ID in a signed 32-bit int, causing truncation and sign-extension when converting to 64-bit, leading to mismatches in the internal hash table and a stale poin...

CVE-2022-49865

The CVE-2022-49865 entry corresponds to a Linux kernel fix for an infoleak in IPv6 addrlabel. Root cause: when copying a struct ifaddrlblmsg to the network, the __ifal_reserved field was left uninitialized, enabling a 1-byte information leak. The patch initializes the reserved field to prevent le...

CVE-2022-49962

CVE-2022-49962 affects the Linux kernel xHCI driver: the remove path could dereference a null pointer when xHC has only one roothub, attempting to remove both main and shared hcds even if the shared_hcd doesn’t exist. This could trigger a NULL pointer dereference during reboot for affected contro...

CVE-2022-50033

CVE-2022-50033: In the Linux kernel USB host OHCI PPC OF driver, of_find_compatible_node() may return a node with an incremented refcount and of_node_put() must be used when not needed. The issue is a refcount leak in ohci_hcd_ppc_of_probe(). Affected: Linux kernel (ohci-ppc-of path). Impact is a...

CVE-2022-50069

CVE-2022-50069 concerns the Linux kernel BPF subsystem. The root cause is that bpf_sys_bpf() may copy instruction data from a kernel address (via bpfptr_t) without validating it, since copy_from_bpfptr() can dereference in-kernel pointers. This can lead to a use-after-free/invalid dereference in ...

CVE-2022-50138

The CVE-2022-50138 entry describes a memory-leak in Linux kernel RDMA qedr: __qedr_alloc_mr() allocates mr->info.pbl_table; if rdma_alloc_tid() and rdma_register_tid() fail, the 'mr' is released but mr->info.pbl_table isn’t, causing a leak. The fix is to release mr->info.pbl_table with q...

CVE-2023-20844

CVE-2023-20844 affects the imgsys_cmdq component in MediaTek devices. The issue is an out-of-bounds read caused by missing valid range checking, potentially enabling local information disclosure with system-execution privileges required. Exploitation requires user interaction. The vulnerability i...

CVE-2023-3022

The CVE-2023-3022 entry corresponds to a Linux kernel IPv6 module flaw where arg.result is inconsistently used in fib6_rule_lookup, being sometimes rt6_info and other times fib6_info. This mismatch is not accounted for where rt6_info is expected unconditionally, potentially causing a kernel panic...

CVE-2023-52808

Summary: CVE-2023-52808 affects the Linux kernel driver path for the Hisilicon SAS host bus adapter (hisi_sas). The root cause is that after a failed init path, debugfs_remove_recursive() is called but debugfs_dir is not set to NULL, causing a NULL pointer dereference during device removal. Impac...

CVE-2023-52836

CVE-2023-52836 concerns Linux kernel workqueue handling in the ww_mutex test. The connected advisories confirm the issue was a lifetime problem where the workqueue’s work_struct node lived inside the stress struct; the work_struct could be freed before the worker finished, causing premature flush...

CVE-2023-52862

CVE-2023-52862 is a Linux kernel vulnerability in the DRM/AMD display path (Display Core) where a null pointer dereference could occur when printing the error message if the DC fails to initialize. The fix prevents dereferencing a DC version field that may be undefined when DC initialization has ...

CVE-2023-52863

CVE-2023-52863 affects the Linux kernel hwmon driver for axi-fan-control. The flaw arises when axi_fan_control_irq_handler() runs before the hwmon device is registered, potentially dereferencing a NULL axi_fan_control_data pointer and causing a kernel NULL pointer dereference. The issue is eviden...

CVE-2023-52870

CVE-2023-52870 affects the Linux kernel Mediatek clk-mt6765 clock driver. Root cause: missing check for mtk_alloc_clk_data() return value, risking NULL pointer dereference. The fix adds a check on the allocation result to prevent dereference of NULL, aligning with the referenced stable commits (e...

CVE-2023-52871

CVE-2023-52871 concerns the Linux kernel’s soc: qcom: llcc driver. The issue arises when a second llcc device exists: a failed probe could overwrite the global drv_data pointer, risking data corruption. The fixed description: validate drv_data before overwriting it. Affected context in connected ...

CVE-2023-52898

CVE-2023-52898 is a Linux kernel vulnerability in the xHCI USB host controller code. The issue is a potential null pointer dereference when the host dies, caused by a race between xhci_free_dev() freeing virt devices and xhci_kill_endpoint_urbs() iterating endpoints. The fix synchronizes access b...

CVE-2023-53031

In CVE-2023-53031, the Linux kernel vulnerability affects the POWER9/PowerPC imc-pmu code where a mutex is used in sections where IRQs are disabled. The underlying issue is that mutex_lock may call __might_resched(), which can emit a warning when IRQs are disabled, potentially triggering sleep-re...

CVE-2023-53050

In CVE-2023-53050, the Linux kernel vulnerability affects thunderbolt margining and was resolved by fixing a memory leak in usb4->margining where memory was not released for the upstream router port, even though the router device removal released the debugfs directory. The issue is tied to the...

CVE-2024-26913

Mode C: The CVE-2024-26913 issue concerns the Linux kernel DRM/AMD display driver (dcn35 8k30) where odm calculation was missing for pipe-split policy, causing Underflow/Corruption. The fix adds the missing odm calculation. Public references in connected docs point to kernel commits addressing th...

CVE-2024-35834

Technical details for CVE-2024-35834 are not provided in the supplied documents. No specifics on affected products/versions, root cause, or fixes are present; please monitor for official updates.

CVE-2024-35968

In CVE-2024-35968, the Linux kernel pds_core/pdsc health path was fixed to avoid a deadlock when fw_status == 0xff. Previously, the driver attempted a PCI reset from within the health thread, while pdsc_reset_prepare tried to stop/flush that health thread. The fix queues a new pdsc_pci_reset_thre...

CVE-2024-35974

CVE-2024-35974 affects the Linux kernel block subsystem. The vulnerability arises from a q->blkg_list corruption introduced when multiple gendisk instances are allocated for a single request queue during disk rebind, allowing a blkg to linger in q->blkg_list during blkcg_init_disk() and thu...

CVE-2024-35975

CVE-2024-35975 concerns the Linux kernel, specifically the octeontx2-pf Netdev driver, where a bug in the Round Robin scheduling patch caused transmit schedulers to not be freed after a class deletion. The vulnerability is described as a transmit scheduler resource leak that arises during shaping...

CVE-2024-35994

CVE-2024-35994 concerns the Linux kernel firmware driver for Qualcomm QSEE/QSEECom (uefisecapp). The issue stems from the QSEECOM APP_SEND command handling: the driver originally treated request and response buffers as separate DMA regions, but the firmware expects both buffers to live in a singl...

CVE-2024-36931

The CVE-2024-36931 issue affects the Linux kernel on s390 architecture, specifically in s390/cio where a copied user buffer (lbuf-sized) is not guaranteed to be NUL-terminated before a scanf, enabling an out-of-bounds read. The root cause is missing termination inside the copied buffer, which is ...

CVE-2024-36962

The CVE-2024-36962 issue affects the Linux kernel KS8851 driver for SPI-bus KS8851, where RX packets were queued in the IRQ handler with netif_rx() inside a critical section protected by a lock. This could lead to a hang by racing with the driver’s start_xmit. The fix removes BH manipulation and ...

CVE-2024-38546

CVE-2024-38546 : Linux kernel (drm: vc4) fix for a NULL pointer dereference in vc4_hdmi_audio_init. of_get_address() may return NULL and be dereferenced; patch adds a NULL check to prevent the crash. This applies to the vc4 HDMI audio path in the kernel DRM vc4 driver; no exploits/public advisori...

CVE-2024-38548

The CVE-2024-38548 issue is in the Linux kernel’s drm: bridge: cdns-mhdp8546 path. The root cause is a potential NULL pointer dereference in cdns_mhdp_atomic_enable() after drm_mode_duplicate() returns NULL, which is dereferenced in drm_mode_set_name(). The fix adds a check for mhdp_state->cur...

CVE-2024-42144

In CVE-2024-42144, the Linux kernel vulnerability is in thermal/drivers/mediatek/lvts_thermal where lvts_data could be NULL. The root cause is a NULL pointer dereference; the fix adds a check that lvts_data is not NULL before use, mitigating a potential availability impact. Affected component: Li...

CVE-2024-42149

CVE-2024-42149 affects the Linux kernel and pertains to the block device thaw/mount handling. The issue occurs when a block device is frozen before a filesystem has claimed it, leading to a window where a concurrent mount may observe an elevated bd_fsfreeze_count and abort mounting, while a later...

CVE-2024-46734

CVE-2024-46734 — Linux kernel race between direct IO writes and fsync . In scenarios where two threads share the same fd opened with O_DIRECT, one performing direct IO writes and the other calling fsync, a race can occur that may trigger an assertion failure (inode lock not held) or a memory acce...