CVE-2021-47494

The CVE-2021-47494 relates to the Linux kernel cfg80211 management registrations locking. The disclosed issue was that cfg80211_mgmt_registrations_update() could iterate the per-wdev list without holding the correct global spinlocks, risking list corruption. The mitigation implemented in the refe...

CVE-2021-47500

The CVE-2021-47500 issue affects the Linux kernel IIO mma8452 driver. The driver assigned a trigger to the IIO device without first obtaining a reference, which allowed the trigger to be freed during use and caused a use-after-free. The documented fix is to obtain a reference to the trigger befor...

CVE-2021-47504

CVE-2021-47504 affects the Linux kernel io_uring cancel path. If a canceled work item also requires task_work processing, the item could sleep uninterruptibly in io_uring_cancel_generic() and never complete, blocking forward progress. The fix is within io_uring handling to ensure task_work runs d...

CVE-2022-48658

CVE-2022-48658 affects the Linux kernel:mm/slub: flush_cpu_slab()/__free_slab() invocations were moved out of IRQ context into a global workqueue. When flush_all_cpu_locked() runs from task context, a WQ_MEM_RECLAIM-enabled workqueue may flush the global workqueue, causing a dependency issue duri...

CVE-2022-48705

CVE-2022-48705 concerns the Linux kernel WiFi driver mt76 mt7921e. When a device driver fails during a chip reset, the reset sequence may loop, leaving tx_napi disabled/waiting for a state change and potentially causing a system crash. The fix changes the reset flow to avoid waiting on napi state...

CVE-2022-48802

CVE-2022-48802 affects the Linux kernel component involved in /proc task memory reporting. The vulnerability arises from reading the page mapcount during smaps accounting when a THP (huge page) may be split concurrently with MADV_FREE, creating a race that could trigger a kernel BUG in PageDouble...

CVE-2022-48825

CVE-2022-48825 concerns the Linux kernel fix for scsi: qedf: Add stag_work to all the vports. The issue manifested as a call trace when NPIV ports are created, with only 32 of 64 ports online because stag work was not initialized for vports. The provided Linux kernel data shows a 4.18.0-348.el8.x...

CVE-2022-48901

CVE-2022-48901 affects the Linux kernel’s btrfs implementation, addressing a race where relocation could start during a pending snapshot drop. The bug manifested when a recovering relocation on mount could clash with a concurrent snapshot deletion under balance, potentially leading to a state wit...

CVE-2022-48910

The CVE-2022-48910 case concerns the Linux kernel IPv6 addrconf path: when NETDEV_DOWN is triggered for reasons other than actual interface down, repeated calls can leak one ifmcaddr6 per multicast group by leaking idev->mc_tomb. The fix is to ensure ipv6_mc_down() runs at most once per state ...

CVE-2022-49105

CVE-2022-49105 concerns the Linux kernel: in the staging/wfx driver, an error path in wfx_init_common() could return without freeing ieee80211 hardware state, leading to a memory leak. The fix adds an err label and ensures ieee80211_free_hw(hw) is called on error paths, unifying the error handlin...

CVE-2022-49157

CVE-2022-49157 affects the Linux kernel scsi/qla2xxx driver. After a recoverable PCI error is detected and recovered, the qla2xxx driver may perform premature hardware access if the error condition persists or resume signaling is not yet received. The description and logs show a PCI disconnect an...

CVE-2022-49243

CVE-2022-49243 is a Linux kernel vulnerability affecting ASoC: atmel via the at91sam9g20ek_audio_probe path. The issue is a refcount mismatch: of_parse_phandle() returns a node pointer with a refcount that is incremented in the probe function, but a missing of_node_put() caused a leak. A fix was ...

CVE-2022-49498

CVE-2022-49498 affects the Linux kernel, specifically the ALSA PCM path. The issue: a pointer substream could be dereferenced before a null check (PCM_RUNTIME_CHECK), risking a crash/denial of service if triggered locally. The connected advisories (e.g., Astra Linux, SUSE SU-2025 updates) confirm...

CVE-2022-49533

CVE-2022-49533 relates to the Linux kernel ath11k driver, where a buffer overflow could occur while copying SSIDs into the scan_req_params structure during hardware scanning. The root cause is the mismatch between the number of SSIDs supported (16) and the structure’s capacity (10), potentially a...

CVE-2022-49570

CVE-2022-49570 affecting the Linux kernel gpio-xilinx driver. The issue is an integer overflow/overflow-prone data type that prevents configuring more than 32 pins; the fix casts to unsigned long to handle larger pin counts. Public references point to kernel stable tree patches (e.g., git.kernel....

CVE-2022-49677

In CVE-2022-49677, the Linux kernel ARM CNS3xxx codefix resolves a refcount leak in cns3xxx_init. The issue arises because of_find_compatible_node() returns a node pointer with its refcount incremented, and the patch adds a call to of_node_put() when finished to avoid leaking references. This vul...

CVE-2022-49678

The CVE-2022-49678 entry concerns the Linux kernel, specifically the BCM/BRCM STB PM integration (soc: bcm: brcmstb: pm: pm-arm). The root cause is a refcount leak: of_find_matching_node() returns a node pointer with an incremented refcount and was not released with of_node_put() when no longer n...

CVE-2022-49719

CVE-2022-49719 affects the Linux kernel realview GIC implementation. The root cause is a refcount leak in realview_gic_of_init caused by of_find_matching_node_and_match() returning a node pointer with an incremented refcount without a corresponding of_node_put() when it is no longer needed. The f...

CVE-2022-49821

CVE-2022-49821 concerns the Linux kernel mISDN subsystem. The vulnerability is described as a memory leak in mISDN_dsp_element_register(), mitigated by a patch that makes the device name allocation dynamic and uses put_device() to release references so the name can be freed in kobject_cleanup(). ...

CVE-2022-49826

CVE-2022-49826 — Linux kernel (ata: libata-transport) The vulnerability arises in the error path of ata_tport_add() where put_device() followed by ata_tport_release() can cause an extra decrement of the refcount on ap->host, leading to a NULL pointer dereference during unbind/stop (as ports ar...

CVE-2022-49878

Summary: CVE-2022-49878 is a Linux kernel vulnerability in the bpf verifier’s array reallocation. When realloc_array() errors (krealloc() returns NULL), callers previously set their pointers to NULL, but krealloc() leaves the original allocation untouched, causing a memory leak. The description i...

CVE-2022-49879

CVE-2022-49879 affects the Linux kernel ext4 code. A corrupted directory entry where rec_len is invalid (not a multiple of 4) can cause a kernel BUG() in ext4_rec_len_to_disk() called from make_indexed_dir(). The fix adds a validation step via ext4_check_dir_entry(), returning -EFSCORRUPTED for i...

CVE-2022-49881

CVE-2022-49881 – Linux kernel wifi cfg80211 memory leak in query_regdb_file() Root cause: in query_regdb_file(), the alpha2 data is duplicated with kmemdup() and freed in regdb_fw_cb(), but request_firmware_nowait() may fail and skip regdb_fw_cb(), leaking memory. The connected advisories confirm...

CVE-2022-49965

Summary: CVE-2022-49965 pertains to the Linux kernel component drm/amd/pm, where missing fini interfaces for some SMU13 ASICs could allow a memory leak. The issue is described as resolved in the Linux kernel, with references to upstream code changes and multiple advisories. What’s affected: Linux...

CVE-2022-50041

CVE-2022-50041 (Linux kernel, ice driver) : The issue arises from a WARN_ON() checking for a null VSI in ice_reset_vf during VF reset, which can trigger a call trace under stress (VF attach/detach with spoofcheck/trust changes). The connected advisories and Nessus/NVL references confirm the fix: ...

CVE-2022-50139

CVE-2022-50139 affects the Linux kernel’s usb: aspeed-vhub component. The root cause is a refcount leak in ast_vhub_init_desc() caused by not releasing a reference from of_get_child_by_name(). The fix is to call of_node_put() on that reference. This remediation prevents the refcount from being in...

CVE-2022-50177

CVE-2022-50177 concerns the Linux kernel where rcutorture ksoftirqd boosting timing/iteration could fail, causing RCU priority boosting to break under certain CPU configurations. The documented root causes are: (1) when the total CPUs exceed booted online CPUs, leading to boosting not applying to...

CVE-2023-52523

CVE-2023-52523 – Linux kernel vulnerability (bpf, sockmap): A BPF sk_msg redirect can target a non-TCP exit socket (via SOCKMAP/SOCKHASH), which previously could downcast to a tcp_sock and crash. The issue arose after enabling redirects to non-TCP sockets, breaking assumptions that the egress soc...

CVE-2023-52673

CVE-2023-52673 — Linux kernel (drm/amd/display): A debugfs-related NULL pointer error was fixed in the AMD display code. The root cause was calling the get_subvp_en() callback without verifying its existence. The fix adds a check for the callback before invocation, preventing potential NULL deref...

CVE-2023-52737

CVE-2023-52737: In the Linux kernel, when using Btrfs, fiemap could deadlock with an in-flight fsync due to not taking the inode lock (i_mutex) before fiemap operations. The root cause is that fiemap_fill_next_extent() could fault while accessing user space buffers, which creates a lock-order cyc...

CVE-2023-52841

CVE-2023-52841 concerns the Linux kernel component for media: vidtv: mux. The fix, described in the public description and echoed by Astra Linux security bulletin, adds a check for the return value of kstrdup() and returns an error if it fails to avoid a NULL pointer dereference. It also updates ...

CVE-2023-52899

CVE-2023-52899 – kernel vulnerability (Linux kernel) has concrete details in connected advisories: a missing protection in the AXI channel error handling path (axi_chan_handle_err) for the vd signal can lead to a NULL pointer dereference and kernel panic. The issue is described as “Add exception ...

CVE-2024-26753

CVE-2024-26753 is a Linux kernel vulnerability in crypto: virtio/akcipher where a stack overflow occurs when copying from a stack-allocated virtio_crypto_akcipher_session_para into the union in virtio_crypto_op_ctrl_req. The issue is caused by sizeof(struct virtio_crypto_akcipher_session_para) be...

CVE-2024-35879

CVE-2024-35879 affects the Linux kernel. The issue arises from a race between devlink removals and destruction of OF nodes during the sequence 1) of_platform_depopulate() and 2) of_overlay_remove(). During step 1, devices and attached of_node are destroyed asynchronously via a workqueue, which co...

CVE-2024-36892

The CVE-2024-36892 issue affects the Linux kernel SLUB allocator. The fix addresses a bug in single-object free: when init_on_free=1, the freepointer inside the freed object could be zeroed (or its handling was unsafe) and, under slub_debug=F and CONFIG_SLAB_FREELIST_HARDENED, do_slab_free() coul...

CVE-2024-38554

CVE-2024-38554 describes a Linux kernel AX25 driver issue where a reference-count leak in the net_device object can occur in ax25_dev_device_down when shutting down the device. The leak happens because the reference count may be dropped one or zero times depending on control flow, leading to memo...

CVE-2024-42144

In CVE-2024-42144, the Linux kernel vulnerability is in thermal/drivers/mediatek/lvts_thermal where lvts_data could be NULL. The root cause is a NULL pointer dereference; the fix adds a check that lvts_data is not NULL before use, mitigating a potential availability impact. Affected component: Li...

CVE-2024-42249

CVE-2024-42249 concerns the Linux kernel SPI driver, specifically the spi_async() path. The issue arises from calling spi_maybe_unoptimize_message() in spi_async(), which is unsafe because the message is likely still queued and not yet transferred, risking corruption when used by the controller d...

CVE-2024-45001

The CVE-2024-45001 issue affects the Linux kernel, specifically the MANA driver’s RX buffer allocation. The root cause is misalignment of alloc_size passed to napi_build_skb(), which places skb_shinfo(skb) at the end of the SKB. On ARM64, certain MTU settings (e.g., 4000) can cause alignment faul...

CVE-2024-45030

CVE-2024-45030 affects the Linux kernel igb driver: when MAX_SKB_FRAG is set to very large values (e.g., 45), payload corruption can occur on TX, demonstrated by an SSH session repro. Root cause: the driver fails to account for possibly large shared info size when choosing ring layout and may att...

CVE-2024-46703

The CVE-2024-46703 issue is in the Linux kernel and stems from reverting the change “serial: 8250_omap: Set the console genpd always on if no console suspend,” which Kevin reported can crash during suspend on platforms that don’t use PM domains. The fix is to revert that commit, resolving the cra...

CVE-2024-47694

CVE-2024-47694 affects the Linux kernel’s InfiniBand/RDMA stack, specifically mlx5-based drivers. The root cause is a broken UMR cleanup flow during driver init: the cited patch moved pd allocation to a new mlx5r_umr_cleanup() function, which could dereference a NULL pd in error paths, causing a ...

CVE-2024-49869

Summary of CVE-2024-49869 (Linux kernel) : In btrfs send, overflow was due to name_cache_entry->name length not matching name_len (included NUL terminator). The fix avoids storing the NUL terminator for name entries, aligns name_len with actual name size, marks the field as __nonstring, and sw...

CVE-2024-50266

CVE-2024-50266 concerns the Linux kernel clk/qcom/videocc-sm8350 path where a venus driver change could cause a stuck vcodec clock (example: video_cc_mvs0_clk) on certain ThinkPad hardware. The issue is triggered by runtime control mode in GDSCs and was resolved by using HW_CTRL_TRIGGER for vcode...

CVE-2024-56555

CVE-2024-56555 affects the Linux kernel binder subsystem. A race in binder_add_freeze_work() can occur when the process’ rbtree (proc->nodes) lock is intermittently dropped to acquire node locks, allowing binder_deferred_release() to move nodes to binder_dead_nodes. This can corrupt the rb_nex...

CVE-2025-22052

The CVE-2025-22052 issue affects the Linux kernel (staging gpib driver, ni_usb). It causes a NULL dereference Oops after a USB dongle disconnect because bus_interface is set to NULL; previously NULL checks existed only in select paths. The fix adds a NULL check for bus_interface across all interf...

CVE-2025-22099

CVE-2025-22099 affects the Linux kernel (drm: xlnx: zynqmp_dpsub) where devm_kasprintf() can return NULL and the NULL result wasn’t checked in zynqmp_audio_init(), risking a NULL dereference. The fix adds a NULL check in zynqmp_audio_init() to avoid dereferencing null pointers. Astra Linux securi...

CVE-2025-37855

The CVE-2025-37855 entry concerns the Linux kernel drm/amd/display component, where a null pointer dereference could occur when dc->res_pool is NULL. The fix implemented guards against this by checking the pointer before dereferencing it. The vulnerability is described as a local issue with a ...

CVE-2025-37877

CVE-2025-37877 : Linux kernel iommu-dma cleanup after iommu_device_register() errors may leave devices connected to iommu-dma, risking crashes in iommu-dma. The fix adds cleaning of the dev->dma_iommu flag along with other cleanup when probe/registration fails. Affected component: kernel IOMMU...

CVE-2025-38095

CVE-2025-38095 affects the Linux kernel dma-buf path. The issue arises from inserting a memory barrier before updating num_fences: smp_store_mb() currently inserts the barrier after the storing operation, which can reorder memory updates contrary to the original intent, potentially triggering a N...