CVE-2021-47651

Summary : CVE-2021-47651 involves the Linux kernel driver path soc: qcom: rpmpd, where data->domains could be NULL if an allocation fails. The vulnerability stems from not validating a possible NULL return from devm_kcalloc, risking a NULL pointer dereference later. The public description indi...

CVE-2022-48648

Technical details (affected software, versions, root cause, impact, and fixes) for CVE-2022-48648 are not provided in the supplied documents. Monitor vendor advisories and CVE entries for updates.

CVE-2022-48712

CVE-2022-48712 affects the Linux kernel ext4 subsystem. The advisory states that ext4: fix error handling in ext4_fc_record_modified_inode() does not fully handle krealloc() error cases, which could lead to silent memory corruption or a kernel bug. The fix patches the error handling in ext4_fc_re...

CVE-2022-48793

CVE-2022-48793 affects the Linux kernel KVM/x86 nested migration path. The root cause is a NULL dereference caused by calling nested_svm_load_cr3 before Nested Page Tables (NPT) are enabled, preventing guest memory access and breaking mmu walk initialization. Red Hat and vendor advisories (RHSA-2...

CVE-2022-48846

CVE-2022-48846 affects the Linux kernel block layer. The root cause was a memory leak in rq QoS structures added by blkcg_init_queue() when a request queue could lack a disk (e.g., unpresent SCSI LUNs or NVMe admin queue) after a patch moved rq_qos_exit() into del_gendisk(). The fix restores prop...

CVE-2022-48850

CVE-2022-48850 concerns the Linux kernel vulnerability in net-sysfs, where speed_show could panic when a netdevice is in the process of being shut down or already removed. The root cause described is a missing check for the netdevice’s presence, which could lead to a NULL pointer dereference in d...

CVE-2022-48916

CVE-2022-48916 affects the Linux kernel IOMMU VT-d path when enabling Volume Management Device (VMD) in scalable mode. The issue manifests as a kernel panic during boot (Eagle Stream/Sapphire Rapids), traced to a double list_add in the VMD/IOMMU enable path. The connected documents reference upst...

CVE-2022-49092

CVE-2022-49092 is a Linux kernel vulnerability in the IPv4 routing path related to nexthop objects. FRR reported a kernel warning when deleting routes that point to a nexthop id without nhid while the route matched an interface. The root cause is in fib_nh_match in include/net/nexthop.h, which ca...

CVE-2022-49132

CVE-2022-49132 : Linux kernel vulnerability in ath11k PCI suspend handling where board file not found could crash the system. Connected documents confirm the issue arises because board file loading can occur after ath11k_pci_probe() returns and suspend handler remains active, causing a crash on s...

CVE-2022-49162

The CVE-2022-49162 issue affects the Linux kernel’s videoFbDev driver sm712fb (smtcfb_write). When the sm712fb driver attempted to write three bytes to the framebuffer, a page fault could crash the kernel. The root cause described across connected advisories is an endianness handling path that co...

CVE-2022-49166

Summary (grounded on provided documents): In the Linux kernel, a vulnerability related to NTFS mounting was addressed. Specifically, ntfs_read_inode_mount can call ntfs_malloc_nofs with a zero allocation size, triggering a BUG in the internal allocator (__ntfs_malloc). The fix implemented is a sa...

CVE-2022-49246

CVE-2022-49246 affects the Linux kernel, specifically ASoC: atmel: snd_proto_probe. The issue is a refcount leak: of_parse_phandle() returns a device_node with refcount incremented, but of_node_put() was only called in the regular path, not in error paths. The fix ensures of_node_put() is called ...

CVE-2022-49337

The CVE-2022-49337 issue affects the Linux kernel OCFS2 DLM: dlmfs user_dlm_destroy_lock error handling could leave flags set, causing unlink to remove inodes while a dlm lock remains linked, risking a user-after-free panic. The advisory states that USER_LOCK_IN_TEARDOWN must be reverted on failu...

CVE-2022-49473

The CVE-2022-49473 entry concerns the Linux kernel ASoC: ti: j721e-evm area. The issue is described as a refcount leak in j721e_soc_probe_* where of_parse_phandle() returns a node pointer with an incremented refcount; the fix adds a missing of_node_put() to release it when no longer needed. Conne...

CVE-2022-49518

The CVE-2022-49518 entry maps to a Linux kernel issue in ASoC SOF ipc3-topology where sof_get_control_data() could perform out-of-bounds access if the payload is not bytes. The fix adjusts control counting and data storage: for non-bytes controls, store a pointer to the data and its size (instead...

CVE-2022-49680

CVE-2022-49680 relates to the Linux kernel (ARM Exynos): a refcount leak in exynos_map_pmu was introduced by not releasing the of_node pointer after of_find_matching_node() yields it. The fix adds a missing of_node_put() (and clarifies that of_node_put() handles NULL). Impact described in sources...

CVE-2022-49763

Summary (CVE-2022-49763) In the Linux kernel NTFS code, the use-after-free issue in ntfs_attr_find() stems from missing bounds checks on the attrs_offset field after loading the first MFT record. The vulnerability was exposed by KASAN reports (use-after-free read) during NTFS attribute handling, ...

CVE-2022-49809

CVE-2022-49809 affects the Linux kernel in the x25 subsystem (net/x25). The vulnerability arises in x25_lapb_receive_frame() where skb_copy() is used to obtain a private copy of skb; if the new skb is not freed in the undersized/fragmented skb error handling path, a memory leak occurs. The provid...

CVE-2022-49825

CVE-2022-49825 — Linux kernel (libata-transport) In ata_tport_add(), the return value of transport_add_device() is not checked, which can lead to a NULL pointer dereference during module removal when transport_remove_device() is called for a device that was not added. The vulnerability is resolve...

CVE-2022-49832

Technical details about CVE-2022-49832 (pinctrl: devicetree: fix null pointer dereferencing in pinctrl_dt_to_map) are not publicly provided in the supplied connected documents. Monitor for updates.

CVE-2022-49850

CVE-2022-49850 affects the Linux kernel nilfs2 subsystem. A semaphore deadlock can occur when nilfs_get_block() detects metadata corruption during data-block allocation and a concurrent superblock writeback happens. The root cause involves a lock order: rwsem A (NILFS_MDT dat_inode mi_sem) read l...

CVE-2022-49865

The CVE-2022-49865 entry corresponds to a Linux kernel fix for an infoleak in IPv6 addrlabel. Root cause: when copying a struct ifaddrlblmsg to the network, the __ifal_reserved field was left uninitialized, enabling a 1-byte information leak. The patch initializes the reserved field to prevent le...

CVE-2022-49905

In the Linux kernel, the net/smc subsystem has a vulnerability disclosed as CVE-2022-49905 due to a missing error path in smc_init(). register_pernet_subsys(&smc_net_stat_ops) is called without proper rollback handling; if it fails, the registration of &smc_net_ops may not be reverted, and if smc...

CVE-2022-49913

CVE-2022-49913 concerns a memory leak in the Linux kernel’s btrfs backref walking code. During find_parent_nodes() on data extents, if an error occurs while resolving indirect backrefs (resolve_indirect_refs()) or while iterating direct refs in the rbtree, inode lists attached to direct refs not ...

CVE-2022-49935

CVE-2022-49935 affects the Linux kernel’s dma-buf/dma-resv code. The vulnerability arises from assuming a newly added fence is newer than all existing fences; with the explicit UAPI export/import, this assumption was removed, creating a path where userspace could force the kernel into a use-after...

CVE-2022-49971

Affected software/component: Linux kernel (drm/amd/pm subsystem). Root cause: memory leak where gpu_metrics_table is allocated in smu_v13_0_4_init_smc_tables() but not freed in smu_v13_0_4_fini_smc_tables(). Impact: potential memory leak; CVSS indicates availability impact HIGH with local/low pri...

CVE-2022-50088

CVE-2022-50088 affects the Linux kernel’s damon_reclaim_init() path. The function allocates a ctx via damon_new_ctx(); if damon_select_ops() fails, the ctx is not released, causing a memory leak. The documented fix releases the ctx with damon_destroy_ctx() when damon_select_ops() fails. Connected...

CVE-2022-50124

The CVE-2022-50124 entry concerns the Linux kernel ASoC driver mt6797-mt6351 (mt6797_mt6351_dev_probe). Technical detail: of_parse_phandle() returns a node pointer with a refcount increment; the correct remediation is to call of_node_put() when the node is no longer needed to avoid a refcount lea...

CVE-2022-50133

CVE-2022-50133 concerns the Linux kernel where a NULL dereference could occur in usb: xhci_plat_remove due to xhci->shared_hcd being NULL after a specific commit. The vulnerability manifests as an Oops during reboot when the USB xHCI host controller is removed, potentially causing a system cra...

CVE-2022-50135

Summary (CVE-2022-50135): In the Linux kernel, the RDMA/rxe path contains a bug where, during error handling in rxe_qp_from_init, the qp’s rcq and scq are set to NULL, but later in rxe_qp_do_cleanup they are dereferenced (qp->scq->num_wq and qp->rcq->num_wq). This results in a null-pt...

CVE-2022-50148

Consolidated details indicate CVE-2022-50148 is a Linux kernel issue affecting kernfs: __kernfs_remove may dereference NULL if lockdep is enabled, due to a dereference before checking kn (as noted in fs/kernfs/dir.c:1353). The vulnerability is mitigated by upstream fixes in kernel commits (e.g., ...

CVE-2022-50181

CVE-2022-50181 affects the Linux kernel’s virtio-gpu driver. The vulnerability arises from a missing NULL check in virtio_gpu_cmd_get_capset(), where a NULL-ified cache_ent could be dereferenced (ptr = cache_ent->caps_cache). This results in a NULL pointer dereference. The issue has been resol...

CVE-2022-50215

The CVE-2022-50215 entry refers to the Linux kernel SCSI sg subsystem issue: when a SCSI device is removed during active use, sg previously returned -ENODEV for waiting commands, risking memory corruption for READs and data corruption for WRITEs that rely on SG_FLAG_DIRECT_IO. The description and...

CVE-2023-23002

The CVE-2023-23002 issue affects Linux kernels before 5.16.3, where drivers/bluetooth/hci_qca.c misinterprets the return value of devm_gpiod_get_index_optional (treats an error pointer as NULL in error cases). This misinterpretation can lead to incorrect error handling, contributing to an availab...

CVE-2023-52695

CVE-2023-52695 concerns the Linux kernel, specifically the DRM/AMD display path. The connected Nessus entry states the vulnerability was resolved by the patch: drm/amd/display: Check writeback connectors in create_validate_stream_for_sink. The stated root cause is to verify the connector type to ...

CVE-2023-52702

CVE-2023-52702 corresponds to a Linux kernel issue in net: openvswitch where ovs_meter_cmd_set() can leak memory because old_meter is not freed after detachment if the new meter attach succeeds or fails. The publicly provided connected Astra Linux bulletin mirrors this vulnerability and confirms ...

CVE-2023-52768

CVE-2023-52768 is a Linux kernel wireless (wilc1000) vulnerability. The issue arises from how wilc_wlan_init allocates memory for vmm_table: the allocation size omits a multiplication by sizeof(u32), allowing a slab-out-of-bounds write in wilc_wlan_handle_txq (KASAN detects a write of 4 bytes at ...

CVE-2023-52826

CVE-2023-52826 : In the Linux kernel, a null pointer dereference in the DRM panel path was addressed. Specifically, in drm/panel/panel-tpo-tpg110, tpg110_get_modes() previously assigned the return value of drm_mode_duplicate() to mode and did not check for failure, risking an NP dereference on NU...

CVE-2023-52866

CVE-2023-52866 affects Linux kernel HID uclogic code. A user-memory-access path occurs when hid_test_uclogic_params_cleanup_event_hooks() invokes uclogic_params_ugee_v2_init_event_hooks() with a NULL first argument, causing hid_get_drvdata() to access hdev->dev with hdev=NULL. The fix introduc...

CVE-2023-52992

CVE-2023-52992 affects the Linux kernel; the vulnerability exists in BPF’s send_signal_common path where a task with pid=1 can trigger a kernel panic (kernel: “Attempted to kill init!”). A fix was applied to skip pid=1 in bpf_send_signal_common(), preventing this panic. Impact is local, with pote...

CVE-2023-53053

CVE-2023-53053 affects the Linux kernel: erspan handling relied on skb_mac_header() in ndo_start_xmit(), with drivers incorrectly assuming skb_mac_header(skb) == skb->data. The issue is fixed by using skb_network_offset() and skb_transport_offset() in erspan_fb_xmit() and ip6erspan_tunnel_xmit...

CVE-2023-53118

CVE-2023-53118 affects the Linux kernel SCSI subsystem: a regression in host procfs directory removal in the core SCSI layer. The vulnerable code path centers on scsi_proc_hostdir_rm(), which decreases a reference counter and must be invoked only once per host removal. The issue is resolved by th...

CVE-2024-26796

The CVE-2024-26796 vulnerability affects the Linux kernel perf subsystem on RISCV with the PMU legacy path. The root cause is that the ctr_get_width function was not defined for the legacy configuration (CONFIG_RISCV_PMU_LEGACY=y, CONFIG_RISCV_PMU_SBI=n), causing a NULL pointer dereference in per...

CVE-2024-26913

Mode C: The CVE-2024-26913 issue concerns the Linux kernel DRM/AMD display driver (dcn35 8k30) where odm calculation was missing for pipe-split policy, causing Underflow/Corruption. The fix adds the missing odm calculation. Public references in connected docs point to kernel commits addressing th...

CVE-2024-34777

CVE-2024-34777 affects the Linux kernel DMA mapping benchmark path. The issue occurs in the map_benchmark_ioctl() flow when validating node ids; node_possible() can receive an argument outside the valid [0, MAX_NUMNODES-1] range, enabling a KASAN wild-memory-access read in map_benchmark_ioctl (ke...

CVE-2024-35889

CVE-2024-35889 affects the Linux kernel, specifically the idpf driver. The vulnerability arises when the driver encounters an unknown packet type: idpf_rx_process_skb_fields may return early and fail to call eth_type_trans, so skb protocol/network-layer handling may not be set. This can lead to a...

CVE-2024-36888

CVE-2024-36888 : Linux kernel workqueue wake_cpu selection bug fixed by masking targeted CPU with cpu_online_mask via cpumask_any_and_distribute() to avoid arch_vcpu_is_preempted() on offline CPUs. Affected trace shows oops during multi-CPU bring-up when cpu_possible_mask=0-63 and cpu_online_mask...

CVE-2024-38572

CVE-2024-38572 concerns the Linux kernel wifi driver ath12k. The issue is a missing terminator entry in ath12k_qmi_msg_handlers, which can trigger a global out-of-bounds read in qmi_invoke_handler via KASAN. A fix adds a dummy terminator entry to allow qmi_invoke_handler to traverse to the termin...

CVE-2024-38620

Summary: Linux kernel Bluetooth stack removed HCI_AMP support; with BT_HS removed, AMP controllers are no longer used, leading to removal of AMP capability and hdev->dev_type. What changes: removal of HCI_AMP controllers, elimination of AMP vs Primary differentiation, and associated dev_type f...

CVE-2024-39466

CVE-2024-39466 affects the Linux kernel: the qcom lmh thermal driver did not check SCM availability at probe, which could cause NULL pointer dereferences. The patch adds the SCM availability check during probe to prevent this; exploitation details are not provided in the available documents. The ...