CVE-2021-47647

CVE-2021-47647 relates to the Linux kernel on Qualcomm IPQ8074 PCIe clock driver. The root cause is a missing clock parent setup in pcie0_rchng_clk_src: there were two declared parents but only one was actually provided via parent_hws, and the fix introduces the use of clk_parent_data to supply t...

CVE-2021-47651

Summary : CVE-2021-47651 involves the Linux kernel driver path soc: qcom: rpmpd, where data->domains could be NULL if an allocation fails. The vulnerability stems from not validating a possible NULL return from devm_kcalloc, risking a NULL pointer dereference later. The public description indi...

CVE-2022-1943

CVE-2022-1943 describes an out-of-bounds memory write in the Linux kernel UDF file system, triggered by user-initiated file operations that invoke udf_write_fi(). The flaw could allow a local attacker to crash the system (and, per connected advisories, is associated with Ubuntu and other mappings...

CVE-2022-48689

CVE-2022-48689 pertains to a Linux kernel issue in TCP zerocopy where pfmemalloc status could be misinterpreted by page_is_pfmemalloc() in certain paths. The Astra Linux note confirms the advisory and reiterates the same vulnerability in the kernel and notes a prereq backport: 84ce071e38a6 (net: ...

CVE-2022-48693

CVE-2022-48693 affects the Linux kernel’s brcmstb PM subsystem (soc: brcmstb: pm-arm). The two leak bugs are in brcmstb_pm_probe() and include: (1) missing of_node_put() when for_each__matching_node() breaks, and (2) missing iounmap() for each iomap in the failure path. Public information in conn...

CVE-2022-48716

CVE-2022-48716 affects the Linux kernel under the ASoC codecs path for wcd938x SDW. The root cause is an incorrect use of portid versus port id in mixer controls, where the channel id was used to index port-related structures. This can lead to out-of-bounds access to the port_map array and potent...

CVE-2022-48720

The CVE-2022-48720 entry concerns the Linux kernel net/macsec offload path. The vulnerability arose because the macsec netdev notify handler did not inform the underlay driver on NETDEV_UNREGISTER, leaking macsec offload resources when HW offload is used. The fix moves offload handling from macse...

CVE-2022-48728

CVE-2022-48728 corresponds to a Linux kernel flaw in IB/hfi1: Fix AIP early init panic. The issue is a NULL pointer dereference triggered by an early failure in hfi1_ipoib_setup_rn(), causing a NULL dereference in hfi1_ipoib_txreq_deinit() during netdev destruction. The root cause is a NULL deref...

CVE-2022-48763

CVE-2022-48763 relates to the Linux kernel KVM/x86 nested virtualization when SMM state is toggled. The issue occurs if userspace forces a vCPU out of SMM during post-VMXON and injects an SMI, causing vmx_enter_smm() to overwrite vmx->nested.smm.vmxon and leave vmxon and smm.vmxon false while ...

CVE-2022-48826

Mode C: CVE-2022-48826 affects the Linux kernel drm/vc4, where a deadlock can occur during DSI device attach error when the host device lock is held. Specifically, in the device attach error path, un-registering the host can deadlock with a call trace involving device_del/unregister, mipi_dsi_hos...

CVE-2022-48846

CVE-2022-48846 affects the Linux kernel block layer. The root cause was a memory leak in rq QoS structures added by blkcg_init_queue() when a request queue could lack a disk (e.g., unpresent SCSI LUNs or NVMe admin queue) after a patch moved rq_qos_exit() into del_gendisk(). The fix restores prop...

CVE-2022-49062

The CVE-2022-49062 issue affects the Linux kernel component cachefiles, specifically a KASAN slab-out-of-bounds in cachefiles_set_volume_xattr. The bug arose when the code did not use the actual length of volume coherency data while setting the xattr, leading to an out-of-bounds write (noted in K...

CVE-2022-49148

The CVE-2022-49148 entry concerns a Linux kernel vulnerability where, during dismantling of watch_queue, the page array was not freed, leaving a memory leak. The issue was addressed by a patch sequence that first frees the alloc bitmap when tearing down watch_queue (commit 7ea1a0124b6d) and then ...

CVE-2022-49162

The CVE-2022-49162 issue affects the Linux kernel’s videoFbDev driver sm712fb (smtcfb_write). When the sm712fb driver attempted to write three bytes to the framebuffer, a page fault could crash the kernel. The root cause described across connected advisories is an endianness handling path that co...

CVE-2022-49171

CVE-2022-49171 is a Linux kernel issue in the mm/gup.c path affecting ext4. The race causes [un]pin_user_pages_remote to dirty pages without proper pre-notification to ext4, which can lead to data loss. While the root cause is classed as a bug in mm/gup.c, ext4 is particularly fragile: if another...

CVE-2022-49317

CVE-2022-49317 relates to the Linux kernel’s f2fs code, where an infinite loop could occur while flushing node pages, triggered by certain xfstests/generic/475 scenarios that could yield sustained EIO. The provided documents indicate a resolved issue in f2fs: avoid infinite loop to flush node pag...

CVE-2022-49384

CVE-2022-49384 is a Linux kernel vulnerability in the md (memory descriptor) subsystem where io_acct_set bioset could be freed twice. The fix relocates allocation/free of io_acct_set to the personality path and removes freeing in md_free and md_stop. Connected advisories (Astra Linux SUSE securit...

CVE-2022-49435

CVE-2022-49435 concerns the Linux kernel, in the mfd: davinci_voicecodec path. It fixes a potential null-pointer dereference in the davinci_vc_probe() flow if platform_get_resource() returns NULL. The workaround changes the code to use the resource only after devm_ioremap_resource() performs a NU...

CVE-2022-49436

CVE-2022-49436 affects the Linux kernel (powerpc/papr_scm) due to leaking nvdimm_events_map elements and mismatched stat_id handling (NULL termination vs 8-byte identifiers). The fix allocates space for stat_id entries in papr_scm_priv.nvdimm_events_map to prevent leaks and reconcile string sizin...

CVE-2022-49528

CVE-2022-49528 pertains to the Linux kernel: the dw9714 I2C regulator driver regression during probe could leave the regulator enabled, triggering a warning path in regulator core and a failed probe. The vulnerability arises from not disabling the regulator in error handling, which can lead to a ...

CVE-2022-49570

CVE-2022-49570 affecting the Linux kernel gpio-xilinx driver. The issue is an integer overflow/overflow-prone data type that prevents configuring more than 32 pins; the fix casts to unsigned long to handle larger pin counts. Public references point to kernel stable tree patches (e.g., git.kernel....

CVE-2022-49618

In CVE-2022-49618, the Linux kernel pinctrl: aspeed driver fixes a potential NULL pointer dereference in aspeed_pinmux_set_mux() where pdesc could be null but dereferenced pdesc->name. The patch adds a null check before dereferencing, preventing null pointer access. Connected Astra Linux advis...

CVE-2022-49677

In CVE-2022-49677, the Linux kernel ARM CNS3xxx codefix resolves a refcount leak in cns3xxx_init. The issue arises because of_find_compatible_node() returns a node pointer with its refcount incremented, and the patch adds a call to of_node_put() when finished to avoid leaking references. This vul...

CVE-2022-49769

CVE-2022-49769 corresponds to a Linux kernel fix for the gfs2 filesystem: after reading a superblock, the sb_bsize_shift field is now validated to match the expected value, preventing shift/out-of-bounds and related mount errors. The available details describe the root cause (unchecked sb_bsize_s...

CVE-2022-49777

CVE-2022-49777 affects the Linux kernel where a leaking of the i8042 platform device could occur on module removal. The fix prevents resetting the module-wide i8042_platform_device pointer in i8042_probe() or i8042_remove(), so the device can be properly destroyed by i8042_exit() during module un...

CVE-2022-49832

Technical details about CVE-2022-49832 (pinctrl: devicetree: fix null pointer dereferencing in pinctrl_dt_to_map) are not publicly provided in the supplied connected documents. Monitor for updates.

CVE-2022-50091

CVE-2022-50091 concerns the Linux kernel where the boot-time parameter csdlock_debug was parsed via early_param, enabling static_branch in a manner that could dereference NULL under specific sparse memory configurations (arm64 with CONFIG_SPARSEMEM and SPARSEMEM_VMEMMAP settings, and powerpc due ...

CVE-2022-50148

Consolidated details indicate CVE-2022-50148 is a Linux kernel issue affecting kernfs: __kernfs_remove may dereference NULL if lockdep is enabled, due to a dereference before checking kn (as noted in fs/kernfs/dir.c:1353). The vulnerability is mitigated by upstream fixes in kernel commits (e.g., ...

CVE-2023-52655

The CVE-2023-52655 issue affects the Linux kernel usb aqc111 driver. Root cause: when a device sends a packet with a length between 0 and sizeof(u64), the length passed to skb_trim() wraps to a very large value due to an incorrect check against 0. The driver currently validates against 0 instead ...

CVE-2023-52681

Summary (CVE-2023-52681) : In the Linux kernel, efivarfs allocated a s_fs_info on filesystem context creation but did not Free it when the superblock is unmounted, leading to a potential resource lifecycle issue. The vulnerability is resolved by ensuring proper cleanup of the s_fs_info structure ...

CVE-2023-52838

CVE-2023-52838 – Linux kernel fbdev: imsttfb resource leak (probe) . The issue arises when init_imstt() fails and the code does not call iounmap(par->cmap_regs), leading to a resource leak in probe. The vulnerability is addressed by rewriting the error handling to ensure iounmap(par->cmap_r...

CVE-2023-52928

CVE-2023-52928 concerns the Linux kernel’s BPF verifier. According to connected sources, the issue arises from the verifier’s handling of invalid kfunc calls in backtrack_insn, where such an instruction could be captured by fixup_kfunc_call() and, if not eliminated by DCE, trigger a warning in ba...

CVE-2024-26753

CVE-2024-26753 is a Linux kernel vulnerability in crypto: virtio/akcipher where a stack overflow occurs when copying from a stack-allocated virtio_crypto_akcipher_session_para into the union in virtio_crypto_op_ctrl_req. The issue is caused by sizeof(struct virtio_crypto_akcipher_session_para) be...

CVE-2024-26789

CVE-2024-26789 concerns the Linux kernel crypto path for ARM64 AES-CTR. The bit-sliced NEON implementation could perform out-of-bounds reads when processing short inputs or tail blocks that do not align to 128-byte blocks, because it would jump into the plain NEON helper which handles memory in 1...

CVE-2024-36888

CVE-2024-36888 : Linux kernel workqueue wake_cpu selection bug fixed by masking targeted CPU with cpu_online_mask via cpumask_any_and_distribute() to avoid arch_vcpu_is_preempted() on offline CPUs. Affected trace shows oops during multi-CPU bring-up when cpu_possible_mask=0-63 and cpu_online_mask...

CVE-2024-36943

CVE-2024-36943 involves the Linux kernel’s fs/proc/task_mmu code. The race condition occurs in make_uffd_wp_pte() where ptep modifications could race with concurrent accesses, risking loss of the young/dirty bits during pagemap scanning. The incorrect sequence (pte = ptep_get(ptep); ptep_modify_p...

CVE-2024-36958

In CVE-2024-36958, the vulnerability resides in the Linux kernel’s NFSD path, specifically the nfsd4_encode_fattr4() function in fs/nfsd/nfs4xdr.c. The root cause is an initialization omission: args.acl is not initialized early, leading to an unconditional kfree() on exit of nfsd4_encode_fattr4()...

CVE-2024-40918

CVE-2024-40918 affects PA-RISC Linux kernels (PA8800/PA8900) where large L2 caches and non‑equivalent aliasing made random segmentation faults possible due to memory corruption in mmap/malloc; root cause centers on cache move-in and racy PTE bits. The fix modernizes parisc code to flush via tmpal...

CVE-2024-41018

CVE-2024-41018 affects the Linux kernel NTFS-3 driver (fs/ntfs3). The issue is an out-of-bounds condition triggered by ATTR_NAME_ENTRY during attr_names/oatbl processing, leading to potential memory access issues. A patch adds out-of-bounds checking for the *ane entry, and commits referenced in c...

CVE-2024-41067

CVE-2024-41067 affects the Linux kernel with the btrfs filesystem scrub path. The bug occurs when forced RST mode causes bbio submissions to be empty because btrfs_map_block() can fail after bbio allocation, leading scrub_read_endio() to fail to locate a matching sector and trigger an out-of-rang...

CVE-2024-42088

CVE-2024-42088 affects Linux kernel ASoC: Mediatek mt8195, where a platform entry for ETDM1_OUT_BE dai link was removed inadvertently, causing a KASAN OOB warning in mtk_soundcard_common_probe() due to an empty platforms array. The fix adds a COMP_EMPTY() entry to ensure dai_link->platforms ha...

CVE-2024-42242

In CVE-2024-42242, the Linux kernel mmc: sdhci driver had a mismatch between two checks for max_segment_size. max_size was forced to PAGE_SIZE by blk_queue_max_segment_size() when it was below PAGE_SIZE, while blk_validate_limits() treated a max_segment_size below PAGE_SIZE as an error (returning...

CVE-2024-43881

CVE-2024-43881 : In the Linux kernel, the ath12k driver used by wifi in fragmented packets reinjects fragments as normal packets. The DMA direction must be DMA_TO_DEVICE when reinjecting fragments; using DMA_FROM_DEVICE can cause an invalid payload to be reinjected and delivered to the host, enab...

CVE-2024-44968

The connected Nessus entry for CVE-2024-44968 confirms a Linux kernel tick/broadcast timer regression where per-CPU pointer access was taken in a preemptible region due to compiler behavior. The fix moves the per-CPU pointer retrieval to the actual usage site, which is in a non-preemptible region...

CVE-2024-44979

CVE-2024-44979 affects the Linux kernel: drm/xe component (xe_gt_pagefault) mishandled workqueue destruction, leading to potential memory retention on driver reload. A fix was applied to destroy the pagefault and access-counter workqueues, cherry-picked from commit 7586fc52b14e0b8edd0d1f8a434e0de...

CVE-2024-46833

CVE-2024-46833 is a Linux kernel vulnerability in the net:hns3 driver where SSU reg info reads loop up to tnl_num, which is hw-derived and not the array length, causing an out-of-bounds read. The description states the fix is to bound the loop so it does not exceed the array length. The connected...

CVE-2025-21798

CVE-2025-21798 concerns the Linux kernel FireWire kunit test. The vulnerability arises when kunit_kzalloc() returns NULL and test_state is dereferenced without a NULL check, potentially causing a NULL pointer dereference. A fix adds a NULL check for test_state to prevent dereferencing a NULL poin...

CVE-2025-22099

CVE-2025-22099 affects the Linux kernel (drm: xlnx: zynqmp_dpsub) where devm_kasprintf() can return NULL and the NULL result wasn’t checked in zynqmp_audio_init(), risking a NULL dereference. The fix adds a NULL check in zynqmp_audio_init() to avoid dereferencing null pointers. Astra Linux securi...

CVE-2025-37779

CVE-2025-37779 concerns the Linux kernel’s lib/iov_iter.c and arises from an incorrect refcount fix for non-slab folio pages used in EROFS/v9fs p9 read paths. The root cause is that pages in a bvec can be coalesced across folio boundaries, and the non-slab folio refcount was not increased suffici...

CVE-2025-37843

CVE-2025-37843 : In the Linux kernel, a race between parent and child PCI hotplug ports can deadlock during nested PCI hotplug removal. A fix was implemented to avoid extra checks when the hotplug port itself was hot-removed, preventing the deadlock (particularly when removing multiple Thunderbol...