CVE-2025-38344

CVE-2025-38344 relates to ACPICA in the Linux kernel where ACPI cache leaks were fixed. Technical details in connected docs show memory leaks in Acpi-State, Acpi-Parse, and Acpi-parse_ext caches due to merging of slabs and use of KMEM cache flags (SLAB_NEVER_MERGE). The root cause was leaks in ea...

CVE-2025-38364

CVE-2025-38364 pertains to Linux kernel Maple_tree: MA_STATE_PREALLOC handling in mas_preallocate. The flaw prevented allocations when MA_STATE_PREALLOC was set; preallocation checks could undercount, leading to a WARN_ON() and a subsequent null pointer dereference on larger future requests (e.g....

CVE-2025-38376

CVE-2025-38376 concerns the Linux kernel USB gadget: udc suspend/resume hang when the host continues data transfer while the bus is active and the controller is gated off. The root cause is that the USB device controller is suspended but the USB bus remains active, causing pending USB requests an...

CVE-2025-38403

Summary (CVE-2025-38403) : In the Linux kernel, the vmci transport path (vsock/vmci) had a fix to clear the vmci_transport_packet before populating fields in vmci_transport_packet_init to avoid leaving uninitialised data. This change addresses an information leakage/contamination risk related to ...

CVE-2025-38422

CVE-2025-38422 affects the Linux kernel lan743x PCI1xxxx device support. The fix modifies EEPROM and OTP size handling: maximum OTP size is now 8 KB and EEPROM size 64 KB for hearthstone PCI1xxxx devices, updates max size definitions, and ensures the correct EEPROM length is returned depending on...

CVE-2025-38458

The CVE-2025-38458 entry concerns the Linux kernel vulnerability in atm/clip: a NULL pointer dereference in vcc_sendmsg(), which can lead to a kernel crash (OOPS) when atmarpd_dev_ops does not implement the send method. The provided trace shows a NULL address dereference and a call path through v...

CVE-2025-38463

CVE-2025-38463: Linux kernel TCP skb remaining space calculation contains a signedness bug in skb->len vs size_goal, allowing sk_forward_alloc overflow in certain write-path conditions. Root cause: copy = size_goal - skb->len is computed with mismatched signed/unsigned types, producing a la...

CVE-2025-38493

CVE-2025-38493 concerns the Linux kernel vulnerability in tracing/osnoise, specifically timerlat_dump_stack(). The root cause is a faulty memcpy that uses a size field containing garbage from the ring buffer, which can trigger a buffer overflow and kernel panic when stack data is dumped. The vuln...

CVE-2025-38497

CVE-2025-38497 (Linux kernel) affects usb gadget configfs: writing an empty string to the qw_sign or landingPage sysfs attributes can dereference page[l-1] before length validation, causing an OOB read. The fix adds an early length check in os_desc_qw_sign_store() and webusb_landingPage_store() t...

CVE-2026-23243

CVE-2026-23243 is a Linux kernel vulnerability involving RDMA/umad_write, where user-controlled MAD header size mismatch could yield a negative data_len, leading to an out-of-bounds memset in alloc_send_rmpp_list. The issue has a concrete upstream fix that rejects negative data_len before creatin...

CVE-2026-31709

In the Linux kernel SMB client (cifsacl), CVE-2026-31709 arises from insufficient validation of a server-provided DACL when rewriting security descriptors. The fix extends structural validation to ensure the DACL header, size, and per-ACE bounds are checked before any rewrite paths (replace_sids_...

CVE-2026-46090

CVE-2026-46090 affects the Linux kernel ALSA aloop driver. A use-after-free in loopback_check_format() can occur when playback starts with parameters that no longer match a running capture stream, while a concurrent close may detach or free the runtime. The issue arises after a patch that moved t...

CVE-1999-0128

CVE-1999-0128 refers to a historic Ping of Death, where oversized ICMP echo packets can cause a denial of service. The initial entry and connected Red Hat/RedHat advisory records reiterate the same description without listing affected products, versions, root cause details, or exploitable vectors...

CVE-2004-0535

CVE-2004-0535 relates to the Linux kernel's e1000 NIC driver (2.4.x and earlier) where memory used by the driver was not properly initialized before access. This could permit a local attacker to read portions of kernel memory. The issue is documented and linked to several vendor advisories (e.g.,...

CVE-2004-0883

CVE-2004-0883 concerns multiple vulnerabilities in the Samba filesystem (smbfs) within the Linux kernel (versions 2.4 and 2.6). The description states that remote Samba servers could cause a denial of service (kernel crash) or information disclosure by triggering one of several flawed packet-hand...

CVE-2004-1017

Technical details (affected product/version, root cause, impact, remediation) are not publicly provided in the supplied documents. The CVE entry lacks concrete information here; monitor for updates.

CVE-2004-1070

Technical details (affected kernel versions, vulnerable component, impact, or remediation) are not publicly available in the provided documents. Monitor for updates.

CVE-2005-2458

CVE-2005-2458 affects the Linux kernel where inflate.c in the zlib routines used by the kernel before 2.6.12.5 can be exploited by remote attackers to crash the kernel via a crafted compressed file (improper tables). The connected advisories confirm this vulnerability across multiple distribution...

CVE-2005-3784

CVE-2005-3784 concerns the Linux kernel 2.6.x series: auto-reap of child processes can include ptrace-attached children, causing a dangling ptrace reference that leads to local denial of service (crash) and potential root privileges. The description specifies the vulnerable condition is present i...

CVE-2006-3468

CVE-2006-3468 affects the Linux kernel 2.6.x when NFS and EXT3 are used. A remote attacker can trigger a denial of service by sending a crafted UDP packet containing a V2 lookup procedure that specifies a bad file handle (inode number). This triggers an error and causes the exported directory to ...

CVE-2009-1883

CVE-2009-1883 affects the Linux kernel z90crypt driver, where a missing capability check in the z90crypt_unlocked_ioctl for the Z90QUIESCE operation can let a local user with an effective UID of 0 bypass restrictions, potentially forcing a driver outage and enabling privilege escalation. The issu...

CVE-2010-1086

The CVE-2010-1086 entry concerns the Linux kernel (dvb-core) ULE decapsulation code in dvb_net.c. A vulnerability in the ULE Payload Pointer handling allows an attacker to induce an infinite-loop denial of service via a crafted MPEG-2 TS frame, affecting kernel 2.6.33 and earlier. Connected advis...

CVE-2010-3298

CVE-2010-3298 affects the Linux kernel. The hso_get_count function in drivers/net/usb/hso.c, in kernel builds before 2.6.36-rc5, does not initialize a certain structure member, which allows local users to read potentially sensitive information from kernel stack memory via the TIOCGICOUNT ioctl. T...

CVE-2011-1771

CVE-2011-1771 affects the Linux kernel up to version 2.6.38, specifically the cifs_close function in fs/cifs/file.c. If a local user opens a CIFS file with the O_DIRECT flag, it can trigger a NULL pointer dereference (and BUG), causing a denial of service or unspecified impact. Mitigation: upgrad...

CVE-2011-2497

CVE-2011-2497 is a Linux kernel Bluetooth L2CAP underflow/overflow issue. The vulnerability arises from an integer underflow in l2cap_config_req in net/bluetooth/l2cap_core.c, enabling remote attackers to trigger a heap memory corruption or buffer overflow via a small command-size value in an L2C...

CVE-2012-4530

Technical details for CVE-2012-4530 are not publicly provided in the connected documents. Monitor for updates; current sources list this CVE among others but do not disclose product/version/root-cause/fix specifics.

CVE-2013-1928

CVE-2013-1928 affects the Linux kernel prior to 3.6.5. The do_video_set_spu_palette function in fs/compat_ioctl.c lacks an error check, potentially enabling local attackers to read sensitive kernel stack memory via a crafted VIDEO_SET_SPU_PALETTE ioctl on a /dev/dvb device. The issue is addressed...

CVE-2014-8173

CVE-2014-8173 affects the Linux kernel before 3.13 on NUMA systems. The function pmd_none_or_trans_huge_or_clear_bad in include/asm-generic/pgtable.h fails to correctly identify PMD entries as transparent huge-table entries, allowing a local user to trigger a NULL pointer dereference and system c...

CVE-2015-8966

CVE-2015-8966 affects the Linux kernel — specifically arch/arm/kernel/sys_oabi-compat.c — where, in versions before 4.4, a local user can gain privileges by crafting an fcntl64 call (F_OFD_GETLK, F_OFD_SETLK, or F_OFD_SETLKW). The connected Nessus advisories corroborate the kernel file and vulner...

CVE-2018-7754

CVE-2018-7754 affects the Linux kernel via aoedisk_debugfs_show in drivers/block/aoe/aoeblk.c. The function can be triggered by reading a debugfs file, allowing local users to obtain sensitive address information (ffree: lines). The issue is described as exploitable locally with kernel up to 4.16...

CVE-2021-4440

The Linux kernel is affected by a vulnerability in the x86/xen paravirt support. The issue stems from the USERGS_SYSRET64 paravirt call, which is used to return from a syscall via SYSRET. However, because there is no sysret PV hypercall defined, a Xen PV guest will still use the IRET hypercall. T...

CVE-2021-4441

Technical details such as affected products, exact root cause, impact, and patch versions are not publicly provided in the provided documents. Monitor for updates.

CVE-2021-47123

CVE-2021-47123 concerns a Linux kernel use-after-free risk caused by an io_uring timeout path: a double free can occur if a linked timeout is not removed from the master request link list, potentially leading to use-after-free scenarios. The description states the fix is to always remove linked t...

CVE-2021-47187

CVE-2021-47187 concerns arm64: dts: qcom: msm8998 in the Linux kernel. The issue was a miscalculation of min-residency-us and conflicting idle-time parameters between CPU sleep and L2 power-collapse timings, which could cause SoC instability (random reboots/lockups) when CPU scaling is enabled. A...

CVE-2021-47192

The Linux kernel contains a vulnerability in the scsi: core: sysfs component where a regression in commit f0f82e2476f6 can cause a deadlock . The issue occurs during iSCSI recovery when iscsid attempts to set the device state to running . Because scsi_rescan_device() is called while holding the s...

CVE-2021-47197

CVE-2021-47197 – Linux kernel mlx5e/mx5_core destroy cq crash. The issue occurs in the mlx5e path during CQ destruction: if mlx5_core_destroy_cq() fails, destroy operations may run again, and a subsequent mlx5_debug_cq_remove() could be invoked while cq->dbg is not cleared, leading to a crash ...

CVE-2021-47258

CVE-2021-47258 affects the Linux kernel scsi subsystem. The vulnerability arises from incorrect error handling in scsi_host_alloc, leading to a leaked device name if the device is not freed after initialization or when its name is set via dev_set_name. The published fixes replace kfree() with put...

CVE-2021-47297

The Linux kernel contains an uninitialized value vulnerability in the caif_seqpkt_sendmsg function within the net/caif/caif_socket.c module. When nr_segs equals zero during iovec_from_user, the object msg->msg_iter.iov points to uninitialized stack memory , which is subsequently used by caif_s...

CVE-2021-47319

CVE-2021-47319 concerns a memory leak in the Linux kernel’s virtio-blk driver during suspend/resume. The root cause is that the vblk->vqs were not freed before calling init_vqs() in virtblk_restore(), and a fix was applied to free the vqs prior to reinitialization. Connected advisories confirm...

CVE-2021-47334

CVE-2021-47334 affects the Linux kernel’s misc/libmasm/module in the ibmasm_init_one path. The issue is two use-after-free defects arising from ibmasm_init_one/ibmasm_init_remote_input_dev: mouse_dev and keybd_dev allocated by input_allocate_device() are freed in err_free_devices, then ibmasm_fre...

CVE-2021-47375

The Linux kernel contains a use-after-free (UAF) vulnerability in the blktrace component (specifically within the blk_trace access after removal by sysfs). The flaw occurs when the blkTraceRemoveQueue function is called, potentially leading to a NULL pointer dereference and a kernel Oops during t...

CVE-2021-47389

The Linux kernel contains a vulnerability in the KVM: SVM virtualization subsystem within the arch/x86/kvm/svm/sev.c module. The issue stems from a missing sev_decommission call during the sev_receive_start operation. According to AMD's SEV API, RECEIVE_START generates a new guest context and mus...

CVE-2021-47399

Technical details about CVE-2021-47399 (ixgbe NULL pointer dereference) are not provided in the supplied documents. Monitor for updates from vendors; no concrete technical details are included here.

CVE-2021-47477

CVE-2021-47477 is documented in connected advisories as a Linux kernel issue affecting comedi: dt9812. The root cause is DMA buffers being allocated on the stack for USB transfers; the fix allocates proper transfer buffers in the command helpers and returns an error on short transfers instead of ...

CVE-2021-47480

CVE-2021-47480 affects the Linux kernel SCSI subsystem. The issue arises when releasing a SCSI host: the low-level device driver (LLD) module could be unloaded before the SCSI host is fully released, because shost->hostt is needed during release, leading to a kernel panic (BUG: unable to handl...

CVE-2021-47588

CVE-2021-47588 affects the Linux kernel SIT (IPv6 over SIT) functionality. The vulnerability stems from calling ipip6_dev_free() from sit_init_net(), where ipip6_dev_free is a dev->priv_destructor that has already been invoked by register_netdevice() if an error occurs. The issue arises becaus...

CVE-2021-47619

CVE-2021-47619 concerns the i40e Linux kernel XDP path. A PF queue pile fragmentation caused by placing a flow director VSI immediately after the main VSI could prevent the main VSI from resizing its queue allocation when XDP is enabled on systems with many CPUs and an X722 NIC, leading to a NULL...

CVE-2021-47651

Summary : CVE-2021-47651 involves the Linux kernel driver path soc: qcom: rpmpd, where data->domains could be NULL if an allocation fails. The vulnerability stems from not validating a possible NULL return from devm_kcalloc, risking a NULL pointer dereference later. The public description indi...

CVE-2022-48694

CVE-2022-48694 concerns the Linux kernel RDMA/irdma component. The root cause was that SW-generated completions for outstanding WRs posted on a Send Queue (SQ) could be targeted to the wrong Completion Queue (CQ) after a QP enters an error state, causing ib_drain_sq to hang without a completion. ...

CVE-2022-48720

The CVE-2022-48720 entry concerns the Linux kernel net/macsec offload path. The vulnerability arose because the macsec netdev notify handler did not inform the underlay driver on NETDEV_UNREGISTER, leaking macsec offload resources when HW offload is used. The fix moves offload handling from macse...