CVE-2022-48758

The CVE-2022-48758 issue affects the Linux kernel SCSI/fibre channel path, specifically the bnx2fc driver. The root cause is that the bnx2fc_destroy() path removes the interface before destroying its workqueue, causing repeated sysfs_remove_group() WARNs about the rport attributes being removed t...

CVE-2025-38289

The CVE-2025-38289 entry concerns the Linux kernel SCSI lpfc driver. It describes a potential use-after-free of an ndlp object in dev_loss_tmo_callbk during driver unload or fatal error handling, leading to a Denial of Service if triggered. The fix reorders code to avoid use-after-free when the i...

CVE-2025-38463

CVE-2025-38463: Linux kernel TCP skb remaining space calculation contains a signedness bug in skb->len vs size_goal, allowing sk_forward_alloc overflow in certain write-path conditions. Root cause: copy = size_goal - skb->len is computed with mismatched signed/unsigned types, producing a la...

CVE-2026-23112

CVE-2026-23112 affects the Linux kernel nvmet-tcp implementation. The issue in nvmet_tcp_build_pdu_iovec allows walking past cmd->req.sg when a PDU length/offset exceeds sg_cnt, causing bogus sg->length/offset usage and leading to _copy_to_iter() GPF/KASAN. The fix adds guards for sg_idx, r...

CVE-2026-23274

CVE-2026-23274 : In the Linux kernel, a bug in netfilter xt_IDLETIMER allows rev0 rules to reuse timers labeled as ALARM if a prior timer exists. This can cause mod_timer() to run on an uninitialized timer_list, triggering debug warnings and potentially a panic when panic_on_warn=1. The fix rejec...

CVE-2026-46124

CVE-2026-46124 affects the Linux kernel isofs filesystem. The vulnerability arises because isofs_fh_to_dentry/isofs_fh_to_parent pass an attacker-controlled block number from an NFS file handle to isofs_export_iget(), which only rejects block == 0 before calling isofs_iget and sb_bread. A crafted...

CVE-2004-0186

CVE-2004-0186 is a local privilege-escalation in Samba (2.x/3.x) on Linux 2.6 where the setuid-smounted utility smbmnt can be exploited: when a setuid root binary is present on a mounted share, a local user can execute it to gain root privileges. The underlying issue is that setuid attributes are...

CVE-2004-0535

CVE-2004-0535 relates to the Linux kernel's e1000 NIC driver (2.4.x and earlier) where memory used by the driver was not properly initialized before access. This could permit a local attacker to read portions of kernel memory. The issue is documented and linked to several vendor advisories (e.g.,...

CVE-2004-0883

CVE-2004-0883 concerns multiple vulnerabilities in the Samba filesystem (smbfs) within the Linux kernel (versions 2.4 and 2.6). The description states that remote Samba servers could cause a denial of service (kernel crash) or information disclosure by triggering one of several flawed packet-hand...

CVE-2004-1017

Technical details (affected product/version, root cause, impact, remediation) are not publicly provided in the supplied documents. The CVE entry lacks concrete information here; monitor for updates.

CVE-2006-4538

CVE-2006-4538 describes a vulnerability in Linux kernel 2.6.17 and earlier on Itanium (IA64) and SPARC where a malformed ELF image can trigger cross-region memory mappings, allowing a local attacker to crash the system (denial of service). The root cause is in ELF handling that permits cross-regi...

CVE-2006-4997

CVE-2006-4997 involves the Linux kernel ATM subsystem (clip_mkip in net/atm/clip.c). The issue allows a remote attacker to trigger a denial of service (panic) by causing the ATM subsystem to dereference memory of socket buffers after they have been freed. This is triggered by memory access patter...

CVE-2007-2172

CVE-2007-2172 affects the Linux kernel 2.6 (before 2.6.21-rc6) and 2.4 (before 2.4.35). A typo causes RTA_MAX to be used as an array size instead of RTN_MAX, leading to out-of-bounds access in dn_fib_props (dn_fib.c, DECNet) and fib_props (fib_semantics.c, IPv4). Connected advisories corroborate ...

CVE-2007-2875

CVE-2007-2875 concerns an Integer underflow in cpuset_tasks_read of the Linux kernel when the cpuset filesystem is mounted. The issue affects kernels prior to 2.6.20.13 and 2.6.21.x prior to 2.6.21.4, allowing a local attacker to read kernel memory contents by supplying a large offset while readi...

CVE-2008-2826

The vulnerability CVE-2008-2826 is present in the Linux kernel prior to 2.6.25.9, where an integer overflow in sctp_getsockopt_local_addrs_old (net/sctp/socket.c) allows local users to trigger a denial of service through a large addr_num in the sctp_getaddrs_old structure. The issue is mitigated ...

CVE-2008-3276

The CVE-2008-3276 flaw is an integer overflow in the Linux kernel’s DCCP stack (dccp_setsockopt_change in net/dccp/proto.c) affecting kernel versions 2.6.17-rc1 through 2.6.26.2. It allows remote attackers to trigger a denial of service (panic) via crafted Change L/Change R options when dccpsf_va...

CVE-2008-4554

CVE-2008-4554 affects the Linux kernel in the do_splice_from function (fs/splice.c). Before 2.6.27, it does not reject file descriptors with the O_APPEND flag, allowing a local attacker to bypass append mode and make arbitrary changes to other parts of a file. The vulnerability is tied to the ker...

CVE-2009-1961

CVE-2009-1961 is a local-denial-of-service vulnerability in the Linux kernel related to the inode double-locking path in fs/ocfs2/file.c. A sequence of splice system calls can deadlock between generic_file_splice_write, splice_from_pipe, and ocfs2_file_splice_write, preventing file creation/remov...

CVE-2009-4021

CVE-2009-4021 affects the fuse_direct_io function in fs/fuse/file.c of the Linux kernel (fuse subsystem) prior to 2.6.32-rc7, enabling a potential denial of service via invalid pointer dereference possibly tied to memory consumption. Affected environment examples in connected documents include Mi...

CVE-2010-5332

CVE-2010-5332 affects the Linux kernel before 2.6.37, where an out-of-bounds array access can occur in drivers/net/mlx4/port.c. During searches for a free entry in mlx4_register_vlan() or mlx4_register_mac(), if no free entry exists, the loop may terminate without updating the local variable free...

CVE-2011-4348

Technical details for CVE-2011-4348 are not publicly provided in the connected documents. The material references the CVE in advisories but does not describe affected products, versions, root causes, or fixes. Monitor for updates.

CVE-2012-2137

CVE-2012-2137 describes a buffer overflow in virt/kvm/irq_comm.c within the Linux kernel's KVM subsystem, exploitable by local users on kernel versions before 3.2.24. The flaw enables denial of service (crash) and potentially arbitrary code execution via vectors involving Message Signaled Interru...

CVE-2012-4530

Technical details for CVE-2012-4530 are not publicly provided in the connected documents. Monitor for updates; current sources list this CVE among others but do not disclose product/version/root-cause/fix specifics.

CVE-2013-3234

The vulnerability CVE-2013-3234 affects the Linux kernel’s rose_recvmsg function (net/rose/af_rose.c) prior to 3.9-rc7. It does not initialize a certain data structure, allowing local attackers to read sensitive information from kernel stack memory via crafted recvmsg/recvfrom calls. The issue im...

CVE-2014-2039

CVE-2014-2039 affects the Linux kernel on s390 where arch/s390/kernel/head64.S mishandles attempts to use the linkage stack, enabling local users to crash the system (denial of service) by executing a crafted instruction. The linked Nessus/MiracleUnity/EulerOS advisories confirm the issue exists ...

CVE-2014-3535

CVE-2014-3535 affects the Linux kernel prior to 2.6.36, specifically the include/linux/netdevice.h logging macros. The root cause is incorrect use of macros for netdev_printk, enabling a remote attacker to trigger a NULL pointer dereference and system crash by sending invalid packets to a VxLAN i...

CVE-2014-4322

CVE-2014-4322 affects the Linux kernel 3.x QSEECOM driver. The qseecom.c ioctl logic does not validate certain offset, length, and base values, enabling a crafted application to escalate privileges or trigger memory corruption. Affected component: drivers/misc/qseecom.c in the QSEECOM driver used...

CVE-2016-6156

CVE-2016-6156 is a local-denial-of-service race in the Linux kernel Chrome EC driver (ec_device_ioctl_xcmd) implemented in drivers/platform/chrome/cros_ec_dev.c. It allows a local user to trigger an out-of-bounds array access by tampering with a size value, in kernels before 4.7; a fix was applie...

CVE-2018-14615

CVE-2018-14615 concerns a buffer overflow in the Linux kernel up to version 4.17.10, triggered in truncate_inline_inode() within fs/f2fs/inline.c when unmounting an f2fs image because a length value may be negative. The connected Nessus entries repeat the same description and tie the issue to the...

CVE-2019-19378

Technical details are not provided in the connected documents. CVE-2019-19378 is described as a slab-out-of-bounds write in fs/btrfs/raid56.c for Linux kernel 5.0.21 when mounting crafted images; no patch/version specifics or exploit info are present.

CVE-2021-4441

Technical details such as affected products, exact root cause, impact, and patch versions are not publicly provided in the provided documents. Monitor for updates.

CVE-2021-47114

Technical details about CVE-2021-47114 are not publicly provided in the supplied documents. The sources reference the ocfs2 fallocate data corruption fix but do not specify affected versions, root cause specifics, exploit details, or remediation steps beyond the general description. Monitor for u...

CVE-2021-47145

CVE-2021-47145 affects the Linux kernel (btrfs) where a BUG_ON in link_to_fixup_dir can trigger a kernel panic during error paths in log recovery. The description shows a replay/recover flow (replay_one_buffer, btrfs_recover_log_trees, open_ctree) panicking with an invalid opcode in fs/btrfs/tree...

CVE-2021-47197

CVE-2021-47197 – Linux kernel mlx5e/mx5_core destroy cq crash. The issue occurs in the mlx5e path during CQ destruction: if mlx5_core_destroy_cq() fails, destroy operations may run again, and a subsequent mlx5_debug_cq_remove() could be invoked while cq->dbg is not cleared, leading to a crash ...

CVE-2021-47226

CVE-2021-47226 describes a Linux kernel issue where an XRSTOR on a user-buffered FPU state could fail with a page fault yet modify the destination task’s FPU state. The root cause is that during __fpu__restore_sig(), XRSTOR could run with preserved registers for a different task (fpu_fpregs_owner...

CVE-2021-47399

Technical details about CVE-2021-47399 (ixgbe NULL pointer dereference) are not provided in the supplied documents. Monitor for updates from vendors; no concrete technical details are included here.

CVE-2021-47433

CVE-2021-47433 concerns the Linux kernel’s btrfs subsystem, specifically a faulty abort logic in the function replace_file_extents that could corrupt a filesystem by leaving a missing extent in the middle of a file. The issue arises because the abortion condition was incorrect, causing aborts to ...

CVE-2021-47446

The CVE-2021-47446 issue affects the Linux kernel DRM MSM MSM Adreno a4xx GPU driver, specifically in a4xx_gpu_init(). The vulnerability arises from error handling that returned 1 on error instead of a negative error code, causing an Oops in the caller. A second problem was that the check for if ...

CVE-2021-47450

CVE-2021-47450 affects the Linux kernel KVM arm64 when running in protected mode. The issue was in the host stage-2 page-table (PGD) refcount: the KVM page-table library refcounts concatenated stage-2 PGD pages individually, but in EL2 the host stage-2 PGD could be a single high-order compound pa...

CVE-2021-47462

CVE-2021-47462 affects the Linux kernel mempolicy/memory policy handling. The root cause was an invalid combination check for MPOL_MODE_FLAGS: MPOL_F_NUMA_BALANCING may only pair with MPOL_BIND, but the check existed only in do_set_mempolicy(). The patch moves this validation into sanitize_mpol_f...

CVE-2021-47494

The CVE-2021-47494 relates to the Linux kernel cfg80211 management registrations locking. The disclosed issue was that cfg80211_mgmt_registrations_update() could iterate the per-wdev list without holding the correct global spinlocks, risking list corruption. The mitigation implemented in the refe...

CVE-2021-47540

CVE-2021-47540 is a Linux kernel vulnerability in the mt7915/mt76 driver stack that causes a NULL pointer dereference when adding an IBSS interface via the mt7915_get_phy_mode path. The issue can trigger a kernel oops (as shown in the crash trace) in the MT7622-based platforms when the driver pro...

CVE-2021-47616

CVE-2021-47616 affects the Linux kernel RDMA code. On error handling in rxe_qp_from_init(), the SQ queue is freed but a last reference drop occurs in rxe_create_qp(), risking a use-after-free. The fixed patch zeroes the qp->sq.queue pointer after freeing the queue in rxe_qp_from_init() to prev...

CVE-2021-47636

CVE-2021-47636 relates to the Linux kernel ubifs_wbuf_write_nolock() reading beyond buf bounds, causing a slab-out-of-bounds read in KASAN/ubifs paths. The vulnerability arises when len is not 8-byte aligned and the function writes via ubifs_leb_write(), potentially reading past the end of the bu...

CVE-2022-48635

CVE-2022-48635 : In the Linux kernel, the dax_iomap_rw() path can enter an infinite loop when a tail read is issued with count=0 (as with tail reading via read()), causing a persistent WARNING from iomap_iter. The vulnerability is fixed by adding an explicit check for a 0 count in dax_iomap_rw(),...

CVE-2022-48705

CVE-2022-48705 concerns the Linux kernel WiFi driver mt76 mt7921e. When a device driver fails during a chip reset, the reset sequence may loop, leaving tx_napi disabled/waiting for a state change and potentially causing a system crash. The fix changes the reset flow to avoid waiting on napi state...

CVE-2022-48709

CVE-2022-48709 : In the Linux kernel, the ice switch path could leak memory if ice_add_special_words() failed, because the error path did not release the remaining resources before exiting. The fix adds the proper cleanup path by jumping to the err_unroll label to ensure the rm is released. The v...

CVE-2022-48802

CVE-2022-48802 affects the Linux kernel component involved in /proc task memory reporting. The vulnerability arises from reading the page mapcount during smaps accounting when a THP (huge page) may be split concurrently with MADV_FREE, creating a race that could trigger a kernel BUG in PageDouble...

CVE-2022-48825

CVE-2022-48825 concerns the Linux kernel fix for scsi: qedf: Add stag_work to all the vports. The issue manifested as a call trace when NPIV ports are created, with only 32 of 64 ports online because stag work was not initialized for vports. The provided Linux kernel data shows a 4.18.0-348.el8.x...

CVE-2022-48830

CVE-2022-48830 : Linux kernel fix for a CAN bus race in isotp_rcv() that could race with concurrent CAN frame reception, causing skb_over_panic when skb length changes during isotp_rcv_cf()/isotp_rcv_ff(). The patch adds a spin_lock around isotp_rcv() to ensure state synchronization and data-stru...