CVE-2022-48850

CVE-2022-48850 concerns the Linux kernel vulnerability in net-sysfs, where speed_show could panic when a netdevice is in the process of being shut down or already removed. The root cause described is a missing check for the netdevice’s presence, which could lead to a NULL pointer dereference in d...

CVE-2022-48916

CVE-2022-48916 affects the Linux kernel IOMMU VT-d path when enabling Volume Management Device (VMD) in scalable mode. The issue manifests as a kernel panic during boot (Eagle Stream/Sapphire Rapids), traced to a double list_add in the VMD/IOMMU enable path. The connected documents reference upst...

CVE-2022-49052

Summary (CVE-2022-49052) : The Linux kernel memory management path mm/page_io.c with zram swap could expose zeroed data to a process during CLONE_VM cloning, leading to potential data corruption. The root cause was the bogus swap_slot_free_notify in the CLONE_VM scenario, which didn’t correctly t...

CVE-2022-49064

CVE-2022-49064 affects the Linux kernel's cachefiles code. The issue is an in-use flag leakage in error paths: in cachefiles_open_file(), an in-use flag could leak and cause the system to log “Inode already in use” on subsequent lookups; in cachefiles_create_tmpfile() this leakage could occur wit...

CVE-2022-49082

CVE-2022-49082 in the Linux kernel: a use-after-free in mpt3sas during _scsih_expander_node_remove() was caused by freeing the port field via mpt3sas_transport_port_remove(), leading to a use-after-free when ioc_info() runs (e.g., during rmmod). The fix adds a local variable port_id to capture th...

CVE-2022-49121

CVE-2022-49121 involves the Linux kernel SCSI pm8001 driver and is resolved in the kernel updates. The issue is a tag leak in error paths where tags allocated by pm8001_mpi_build_cmd() may not be freed when cmd building fails, and similarly when the chip task abort path fails, a missing call to p...

CVE-2022-49157

CVE-2022-49157 affects the Linux kernel scsi/qla2xxx driver. After a recoverable PCI error is detected and recovered, the qla2xxx driver may perform premature hardware access if the error condition persists or resume signaling is not yet received. The description and logs show a PCI disconnect an...

CVE-2022-49217

CVE-2022-49217 (Linux kernel) : In the PM8001 SCSI path, the n_elem field of the CCB used in abort/read paths can be left uninitialized (n_elem not set to 0). This can cause the task completion path to observe a non‑zero n_elem, triggering invalid dma_unmap_sg() calls in pm8001_ccb_task_free() an...

CVE-2022-49246

CVE-2022-49246 affects the Linux kernel, specifically ASoC: atmel: snd_proto_probe. The issue is a refcount leak: of_parse_phandle() returns a device_node with refcount incremented, but of_node_put() was only called in the regular path, not in error paths. The fix ensures of_node_put() is called ...

CVE-2022-49551

The CVE-2022-49551 issue in the Linux kernel relates to usb: isp1760, where a loop over HC_FIELD_MAX reads regmap fields causing a global out-of-bounds access. The dynamically sized arrays isp1760_hc_reg_fields[], isp1763_hc_reg_fields[], isp1763_hc_volatile_ranges[], and isp1763_dc_volatile_rang...

CVE-2022-49680

CVE-2022-49680 relates to the Linux kernel (ARM Exynos): a refcount leak in exynos_map_pmu was introduced by not releasing the of_node pointer after of_find_matching_node() yields it. The fix adds a missing of_node_put() (and clarifies that of_node_put() handles NULL). Impact described in sources...

CVE-2022-49718

CVE-2022-49718 concerns a Linux kernel issue in the irqchip/apple-aic path. The root cause is a refcount leak in aic_of_ic_init: of_get_child_by_name() returns a node pointer with an incremented refcount, and the patch adds a missing of_node_put() to release it when no longer needed. The connecte...

CVE-2022-49772

CVE-2022-49772 affects the Linux kernel’s ALSA USB audio driver (snd_usbmidi_output_open). The vulnerability arises from a NULL port check that used snd_BUG_ON(); although the check is valid for unexpected NULL ports, this scenario can occur when a device reports an invalid endpoint during descri...

CVE-2022-49917

CVE-2022-49917 affects the Linux kernel IPVS subsystem (ip_vs_app_net_cleanup and ip_vs_app_net_init). If ip_vs_app fails to be created during init, removal still proceeds, causing the ip_vs_app entry to be missing and a WARNING in fs/proc/generic.c: remove_proc_entry. The issue is demonstrated b...

CVE-2022-49948

CVE-2022-49948 affects the Linux kernel VT subsystem. When changing the console font via ioctl(KDFONTOP), the new font size may exceed the previous screen, potentially making a prior selection fall outside the new viewport and cause out-of-bounds accesses to graphics memory if the selection is re...

CVE-2022-49965

Summary: CVE-2022-49965 pertains to the Linux kernel component drm/amd/pm, where missing fini interfaces for some SMU13 ASICs could allow a memory leak. The issue is described as resolved in the Linux kernel, with references to upstream code changes and multiple advisories. What’s affected: Linux...

CVE-2022-49991

CVE-2022-49991 concerns the Linux kernel memory management subsystem, specifically the hugetlb path. In the MCOPY_ATOMIC_CONTINUE path for a non-shared VMA, pages from the page cache can be installed into ptes, but hugepage_add_new_anon_rmap is erroneously invoked for these pages, corrupting page...

CVE-2022-49998

The CVE-2022-49998 issue concerns the Linux kernel’s RxRPC sendmsg path (net/rxrpc/sendmsg.c). The described vulnerability fixes three bugs in rxrpc’s sendmsg implementation: (1) rxrpc_new_client_call() should release the socket lock when returning from rxrpc_get_call_slot(); (2) rxrpc_wait_for_t...

CVE-2022-50054

The CVE-2022-50054 entry concerns a Linux kernel vulnerability in the iavf driver: a NULL pointer dereference in iavf_get_link_ksettings when vf_res has been freed in iavf_init_get_resources. The issue arises after a regression that could allow netdev to call ethtool_ops while vf_res is gone, lea...

CVE-2022-50135

Summary (CVE-2022-50135): In the Linux kernel, the RDMA/rxe path contains a bug where, during error handling in rxe_qp_from_init, the qp’s rcq and scq are set to NULL, but later in rxe_qp_do_cleanup they are dereferenced (qp->scq->num_wq and qp->rcq->num_wq). This results in a null-pt...

CVE-2022-50154

CVE-2022-50154 (Linux kernel limit): The issue is a refcount leak in the Mediatek Gen3 PCI IRQ domain initialization. Specifically, of_get_child_by_name() returns a node pointer with a bumped refcount; the fix is to call of_node_put() when the node is no longer needed. Affected area: PCI subsyste...

CVE-2023-52682

CVE-2023-52682 is a Linux kernel vulnerability affecting the f2fs file system. The issue occurs when an inode is compressed but not encrypted, where the code misses calling f2fs_wait_on_block_writeback() to wait for GCed page writeback in the IPU write path, allowing out-of-order GC and IO to cau...

CVE-2023-52702

CVE-2023-52702 corresponds to a Linux kernel issue in net: openvswitch where ovs_meter_cmd_set() can leak memory because old_meter is not freed after detachment if the new meter attach succeeds or fails. The publicly provided connected Astra Linux bulletin mirrors this vulnerability and confirms ...

CVE-2023-52746

CVE-2023-52746 concerns a Spectre v1 gadget in the Linux kernel’s xfrm_xlate32_attr() path. The vulnerability arises from using the user-provided nla_type as an array index when type > XFRMA_MAX, potentially leaking kernel memory. The patch set introduces array_index_nospec() use to prevent sp...

CVE-2023-52750

The CVE-2023-52750 entry concerns the Linux kernel on arm64 where CPU_BIG_ENDIAN must be restricted to using a trusted assembler (GNU as or LLVM IAS 15.x or newer). Before LLVM 15, LLVM’s integrated assembler could byte-swap NOPs for big-endian targets, causing a sequence of bytes that matched th...

CVE-2023-52790

CVE-2023-52790 affects the swiotlb subsystem in the Linux kernel. The issue arises from out-of-bounds slot allocations in swiotlb_area_find_slots() when CONFIG_SWIOTLB_DYNAMIC is involved, potentially allowing allocations past a transient IO TLB buffer end. The fix limits the free list length to ...

CVE-2023-52872

The CVE-2023-52872 vulnerability affects the Linux kernel tty/n_gsm subsystem. A race in gsm_cleanup_mux() during the cleanup of GSM DLCIs can spuriously change virtual modem status lines while data/timers are being torn down, risking a kernel panic when resources have already been removed. The f...

CVE-2023-53128

CVE-2023-53128 affects the Linux kernel via a memory-leak in the SCSI mpi3mr driver (throttle_groups). The issue is resolved by adding a missing kfree(), as documented in multiple sources (Linux kernel patch notes and related advisories). The provided materials do not specify affected kernel vers...

CVE-2024-23196

CVE-2024-23196 : Astra Linux security bulletin reports a race condition in the Linux kernel sound/hda driver, in snd_hdac_regmap_sync(), which can trigger a NULL pointer dereference and may lead to a kernel panic or denial of service. This mirrors the initial description. The connected documents ...

CVE-2024-26637

CVE-2024-26637 is a Linux kernel vulnerability affecting the wifi/ath11k path where mac80211 debugfs entries could be mishandled, causing ath11k to crash when entries are deleted. The root cause, per the description, is that mac80211 started deleting debugfs entries in certain cases and the code ...

CVE-2024-26658

Consolidated details from multiple connected sources confirm CVE-2024-26658 affects the bcachefs Linux kernel module and describes a deadlock risk during snapshot creation. The root cause is the unconditional acquisition of s_umount during subvolume snapshot operations, which can deadlock with ex...

CVE-2024-26692

CVE-2024-26692 affects the Linux kernel SMB write path. The non-standard maximum write size negotiated with the server (or mount option wsize) could cause the netfs write path to skip the end of the final page when performing large sequential writes, leading to data corruption. This regression or...

CVE-2024-26730

The CVE-2024-26730 entry concerns the Linux kernel hwmon/nct6775 driver. The vulnerability arises from a mismatch between the number of temperature configuration registers and the total temperature registers, which can trigger out-of-bounds access (KASAN) in nct6775_probe/nct6775_core. The issue ...

CVE-2024-26841

Exposed CVE-2024-26841 affecting LoongArch Linux kernels: when disabling nonboot CPUs, cpu_sibling_map is not updated, risking negative jump-label counts on SMT systems. A fix defines and calls clear_cpu_sibling_map() to refresh the mapping, mitigating a potential kernel instability (jump_label w...

CVE-2024-33847

The CVE-2024-33847 issue concerns the Linux kernel F2FS file system where compressed inodes could be corrupted after unaligned or partial truncation. The vulnerability arises when a released compress inode with reserved blocks undergoes truncation that changes valid_block_count without updating i...

CVE-2024-35836

CVE-2024-35836 affects the Linux kernel's dpll/pin handling logic. When a kernel module is unbound but pin resources for the same PCI device persist in memory, rebinding can leave the prop pointer stale to deallocated module memory. Invoking a pin-dump in this state crashes the kernel. The fix st...

CVE-2024-35948

In the Linux kernel (bcachefs), a missing bounds check in superblock validation allowed journal entries to overrun the end of the clean section. The issue has been fixed with a bounds-check in the superblock validation path. No repair code for individual items is available; the entire superblock ...

CVE-2024-38554

CVE-2024-38554 describes a Linux kernel AX25 driver issue where a reference-count leak in the net_device object can occur in ax25_dev_device_down when shutting down the device. The leak happens because the reference count may be dropped one or zero times depending on control flow, leading to memo...

CVE-2024-38557

CVE-2024-38557 affects the Linux kernel mlx5/YAML path handling. The issue arises in net/mlx5 when a lag (Link Aggregation) disable/enable sequence reloads representors: the code reloads all representors for the bond’s slaves, and a failure during slave representor load can unload all representor...

CVE-2024-38571

CVE-2024-38571 affects the Linux kernel tsens (thermal/drivers/tsens). Root cause: compute_intercept_slope(priv, p1, NULL, ONE_PT_CALIB) is invoked from calibrate_8960() (tsens-8960.c), which can dereference a NULL pointer if DEBUG or DYNAMIC_DEBUG is set. The bug is fixed by adding a NULL pointe...

CVE-2024-38613

CVE-2024-38613 affects the Linux kernel on the m68k architecture, where a race in kernel thread creation can cause a spinlock recursion warning. Root cause: during context switch to a newly created thread, the status register may enable interrupts too early, since interrupts are not reliably disa...

CVE-2024-39464

CVE-2024-39464 (Linux kernel) : The vulnerability lies in media: v4l: async: Fix notifier list entry init. The v4l2_async_notifier struct contains several list_head members, but notifier_entry was left zeroed while waiting_list and done_list were initialized, causing an uninitialized list_head. T...

CVE-2024-40969

CVE-2024-40969 (Linux kernel, f2fs) is confirmed to affect the f2fs shutdown path. The root cause is that shutdown does not verify the thaw error when the filesystem is read-only, which can lead to a deadlock during shutdown (via s b_start_write, set RO, and then thaw). The available connected do...

CVE-2024-42128

Technical details about CVE-2024-42128 are not publicly provided in the supplied documents. Monitor for official advisories or vendor patches for affected products.

CVE-2024-45017

CVE-2024-45017 affects the Linux kernel mlx5 IPsec RoCE MPV handling. The issue arises when IPsec creation over a slave is attempted while the master device does not support IPsec, risking a kernel call trace (potential local DoS). Patches in the Linux kernel fix net/mlx5: Fix IPsec RoCE MPV trac...

CVE-2024-46833

CVE-2024-46833 is a Linux kernel vulnerability in the net:hns3 driver where SSU reg info reads loop up to tnl_num, which is hw-derived and not the array length, causing an out-of-bounds read. The description states the fix is to bound the loop so it does not exceed the array length. The connected...

CVE-2024-50212

The CVE-2024-50212 vulnerability in the Linux kernel concerns the lib/alloc_tag_module_unload path, where nf_nat module unload may trigger a warning because kfree_rcu operations are still pending when unload checks run. The issue arises from nf_nat’s module exit calling kfree_rcu on addresses tha...

CVE-2024-57918

The CVE-2024-57918 fix targets the Linux kernel’s DRM/AMD display (DC) driver. Root cause: a surface-definition mismatch between MAX_SURFACES and MAX_SURFACE_NUM caused a page fault when updating surfaces (affecting Cosmic users with two overlay planes after cursor overlay introduction). The patc...

CVE-2025-21778

CVE-2025-21778 (Linux kernel) involves a crash when mmap() is used on a persistent tracing ring buffer that is attached to reserve_mem. The root cause is that the code maps ring buffer pages using virt_to_page() on memory that is vmap()’d, which is invalid for that memory type and can trigger a p...

CVE-2025-37825

CVE-2025-37825 – Linux kernel (nvmet): A vulnerability in nvmet_enable_port can cause a global out-of-bounds access when enabling a port with no transport configured yet. The code queried the transports array using NVMF_TRTYPE_MAX (255), leading to an out-of-bounds read. The fix prevents this by ...