CVE-2008-4445

CVE-2008-4445 affects the Linux kernel SCTP implementation prior to 2.6.26.4. The vulnerability resides in sctp_auth_ep_set_hmacs (net/sctp/auth.c) where the identifier index is not validated against SCTP_AUTH_HMAC_ID_MAX when SCTP-AUTH is enabled. This can allow local users to obtain sensitive i...

CVE-2010-4565

CVE-2010-4565 affects the Linux kernel CAN implementation (bcm_connect in net/can/bcm.c) on 2.6.36 and earlier, where a publicly accessible file is created with a filename containing a kernel memory address. This filename exposure can allow local attackers to glean potentially sensitive informati...

CVE-2012-0055

CVE-2012-0055 concerns OverlayFS in the Linux kernel, affected in versions before 3.0.0-16.28 (as used in Ubuntu 10.04 LTS and 11.10). The vulnerability stems from missing inode security checks in OverlayFS, enabling an attacker to bypass security restrictions and perform unauthorized actions. Th...

CVE-2013-0216

CVE-2013-0216 refers to the Xen netback vulnerability in the Linux kernel prior to 3.7.8. Guest OS users could trigger ring-pointer corruption to cause a denial of service (loop). The linked connected documents ( MiracleLinux AXSA-2013-452:04 and Unity Linux advisories) explicitly list CVE-2013-0...

CVE-2013-4515

The CVE-2013-4515 issue affects the Linux kernel (pre-3.12) in the bcm_char_ioctl path (drivers/staging/bcm/Bcmchar.c). The root cause is failure to initialize a data structure, enabling local attackers to read sensitive kernel memory via the IOCTL_BCM_GET_DEVICE_DRIVER_INFO interface. Impact is ...

CVE-2013-7268

The CVE-2013-7268 vulnerability affects the Linux kernel up to version 3.12.3, where ipx_recvmsg in net/ipx/af_ipx.c writes a length value without confirming the associated data structure is initialized. This can allow local attackers to read kernel memory via recvfrom/recvmmsg/recvmsg. The issue...

CVE-2013-7269

The CVE-2013-7269 vulnerability affects the Linux kernel (affected area: net/netrom/af_netrom.c) before 3.12.4. The issue arises when nr_recvmsg updates a length value without ensuring the associated data structure is initialized, enabling local attackers to read kernel memory via recvfrom, recvm...

CVE-2014-3631

The CVE-2014-3631 issue affects the Linux kernel before 3.16.3, specifically the assoc_array_gc path in lib/assoc_array.c. A bug in the garbage collection allows a local attacker to trigger a NULL pointer dereference, leading to a denial of service (system crash). Affected component: kernel garba...

CVE-2014-6416

CVE-2014-6416 describes a buffer overflow in net/ceph/auth_x.c used by Ceph within the Linux kernel prior to 3.16.3. An unencrypted, long auth ticket can be exploited remotely to trigger memory corruption and a kernel panic (DoS). Connected advisories reiter the same root cause and impact. Remedi...

CVE-2016-3135

CVE-2016-3135 is an integer overflow in xt_alloc_table_info (net/netfilter/x_tables.c) of the Linux kernel up to 4.5.2 on 32-bit platforms, enabling local privilege escalation or heap corruption leading to DoS via IPT_SO_SET_REPLACE. Connected documents corroborate the 32-bit overflow in xt_alloc...

CVE-2016-6156

CVE-2016-6156 is a local-denial-of-service race in the Linux kernel Chrome EC driver (ec_device_ioctl_xcmd) implemented in drivers/platform/chrome/cros_ec_dev.c. It allows a local user to trigger an out-of-bounds array access by tampering with a size value, in kernels before 4.7; a fix was applie...

CVE-2017-6874

The CVE-2017-6874 entry corresponds to a Linux kernel race condition in kernel/ucount.c (through 4.10.2). The vulnerability allows local users to trigger a denial of service (use-after-free and system crash) via crafted system calls that affect the interaction between put_ucounts and get_ucounts....

CVE-2018-11412

CVE-2018-11412 affects the Linux kernel versions 4.13–4.16.11, where ext4_read_inline_data() in fs/ext4/inline.c copies data with a length that can be untrusted in certain crafted filesystem layouts (storing system.data in a dedicated inode). This can enable out-of-bounds memory access leading to...

CVE-2021-47089

In the Linux kernel, the following vulnerability has been resolved: kfence: fix memory leak when cat kfence objects Hulk robot reported a kmemleak problem: unreferenced object 0xffff93d1d8cc02e8 (size 248): comm "cat", pid 23327, jiffies 4624670141 (age 495992.217s) hex dump (first 32 bytes): 00 ...

CVE-2021-47106

CVE-2021-47106 concerns a Linux kernel nf_tables use-after-free in nft_set_catchall_destroy, caused by accessing catchall after kfree_rcu(). The fix requires using a safe iterator (list_for_each_entry_safe) to walk the set elements. Syzbot reported KASAN use-after-free in nft_set_catchall_destroy...

CVE-2021-47184

The CVE-2021-47184 issue affects the Linux kernel i40e VSI filter synchronization. The vulnerability stemmed from a NULL pointer dereference in the VSI filter sync path that could occur when updating the VSI filter list after a VSI resource was removed, potentially causing a kernel oops. A patch ...

CVE-2021-47206

CVE-2021-47206 is a Linux kernel vulnerability in the usb: host: ohci-tmio path. The root cause is a missing check of the return value from platform_get_resource(), which can lead to a NULL pointer dereference and a potential crash (availability impact). The vulnerability is resolved in the kerne...

CVE-2021-47209

The CVE-2021-47209 vulnerability affects the Linux kernel sched/fair subsystem, where a race can let cfs_rq structures be re-added to a dying task group and freed while still linked. Concrete details in connected docs show the root cause lies with tg_unthrottle_up() invoked from sched_cfs_period_...

CVE-2021-47216

CVE-2021-47216 affects the Linux kernel SCSI AdvanSys driver. The root cause is a kernel pointer leak caused by printing pointers cast to unsigned long with %lx instead of using %p/%px. A patch fixes the issue by changing pointer printing format from %lx to %p, effectively printing the hashed poi...

CVE-2021-47270

CVE-2021-47270 entry is rejected/not used; not an active vulnerability.

CVE-2021-47276

The CVE-2021-47276 issue affects the Linux kernel’s ftrace on arm64, where -EINVAL could trigger ftrace_bug() to read the instruction pointer value from an invalid address, causing a kernel panic. The root cause was reading the ip address directly from memory when reporting the error. The remedy ...

CVE-2021-47333

The Linux kernel contains a NULL pointer dereference vulnerability in the alcor_pci module, specifically within the alcorpci_init_check_aspm() function. The issue occurs when a device is attached directly to the root complex, causing bus->self(bridge) to be NULL and subsequently making priv-&g...

CVE-2021-47365

The CVE-2021-47365 issue affects Linux kernel afs: a loop in afs_extend_writeback() could leak pages when expanding a writeback, due to removing the cleanup loop after switching from find_get_pages_contig() to xarray scanning. The fix adds an early-break handling that places the page on a referen...

CVE-2021-47371

The Linux kernel contains a memory leak vulnerability in the nexthop notification chain listeners . The issue occurs because mlxsw will not receive notifications for nexthops using netdevs that are not dismantled during the reload flow, specifically affecting nexthops like a blackhole using the l...

CVE-2021-47525

CVE-2021-47525 affects the Linux kernel, specifically the serial liteuart driver. The issue is a use-after-free and memory leak that occurs on unbind, where the port may remain registered after driver data is released, leading to potential use after free and serial-core memory leaks. The publishe...

CVE-2022-2785

CVE-2022-2785 affects the Linux kernel BPF subsystem. The vulnerability arises because constants used to fill pointers in structs passed to bpf_sys_bpf are not verified, allowing an attacker with CAP_BPF to read memory anywhere on the system. Affected systems can face arbitrary memory reads, with...

CVE-2022-48689

CVE-2022-48689 pertains to a Linux kernel issue in TCP zerocopy where pfmemalloc status could be misinterpreted by page_is_pfmemalloc() in certain paths. The Astra Linux note confirms the advisory and reiterates the same vulnerability in the kernel and notes a prereq backport: 84ce071e38a6 (net: ...

CVE-2022-48693

CVE-2022-48693 affects the Linux kernel’s brcmstb PM subsystem (soc: brcmstb: pm-arm). The two leak bugs are in brcmstb_pm_probe() and include: (1) missing of_node_put() when for_each__matching_node() breaks, and (2) missing iounmap() for each iomap in the failure path. Public information in conn...

CVE-2022-48712

CVE-2022-48712 affects the Linux kernel ext4 subsystem. The advisory states that ext4: fix error handling in ext4_fc_record_modified_inode() does not fully handle krealloc() error cases, which could lead to silent memory corruption or a kernel bug. The fix patches the error handling in ext4_fc_re...

CVE-2022-48751

CVE-2022-48751 pertains to the Linux kernel net/smc code, where a race on clcsock could allow access to a window where clcsock had been released, causing a NULL pointer dereference in smc_setsockopt. The documented fix introduces clcsock_release_lock protection and checks that clcsock is not rele...

CVE-2022-48834

CVE-2022-48834 refers to a Linux kernel issue in the usb: usbtmc driver where usbtmc_ioctl_request incorrectly used usb_rcvctrlpipe() for all transfers (in or out). The fix separates control transfers by direction. The vulnerability impact described is a local issue tied to incorrect control pipe...

CVE-2022-48902

CVE-2022-48902 is a Linux kernel issue in the btrfs extent_io path where a warned-on condition could occur when a page with PageError is encountered during extent buffer ops. The vulnerability arises from using assert_eb_page_uptodate() on non-uptodate pages, potentially exposing instability warn...

CVE-2022-49062

The CVE-2022-49062 issue affects the Linux kernel component cachefiles, specifically a KASAN slab-out-of-bounds in cachefiles_set_volume_xattr. The bug arose when the code did not use the actual length of volume coherency data while setting the xattr, leading to an out-of-bounds write (noted in K...

CVE-2022-49132

CVE-2022-49132 : Linux kernel vulnerability in ath11k PCI suspend handling where board file not found could crash the system. Connected documents confirm the issue arises because board file loading can occur after ath11k_pci_probe() returns and suspend handler remains active, causing a crash on s...

CVE-2022-49157

CVE-2022-49157 affects the Linux kernel scsi/qla2xxx driver. After a recoverable PCI error is detected and recovered, the qla2xxx driver may perform premature hardware access if the error condition persists or resume signaling is not yet received. The description and logs show a PCI disconnect an...

CVE-2022-49166

Summary (grounded on provided documents): In the Linux kernel, a vulnerability related to NTFS mounting was addressed. Specifically, ntfs_read_inode_mount can call ntfs_malloc_nofs with a zero allocation size, triggering a BUG in the internal allocator (__ntfs_malloc). The fix implemented is a sa...

CVE-2022-49475

The connected advisories confirm CVE-2022-49475 affects the Linux kernel in the spi-fsl-qspi driver, where a missing check of the resource returned by platform_get_resource_byname() can lead to a NULL pointer dereference. The root cause is not validating the resource handle before use, causing a ...

CVE-2022-49480

Technical details for CVE-2022-49480 are not publicly available in the provided documents; no affected products, root cause, impact, or remediation details are given here. Monitor for updates.

CVE-2022-49738

Summary (CVE-2022-49738) : In the Linux kernel’s f2fs subsystem, a sanity check missing for .i_extra_isize in is_alive() leads to a potential slab-out-of-bounds access in data_blkaddr during garbage collection, as observed in the f2fs_gc path (gc_data_segment -> is_alive -> data_blkaddr -&g...

CVE-2022-49764

CVE-2022-49764 (Linux kernel) : A vulnerability in BPF raw tracepoint handling allows a BPF program to recursion-trigget the same tracepoint via bpf_trace_printk, causing spinlock contention paths to recurse and potentially affecting tracing by taking the slow path. Root cause: a BPF program atta...

CVE-2022-49772

CVE-2022-49772 affects the Linux kernel’s ALSA USB audio driver (snd_usbmidi_output_open). The vulnerability arises from a NULL port check that used snd_BUG_ON(); although the check is valid for unexpected NULL ports, this scenario can occur when a device reports an invalid endpoint during descri...

CVE-2022-49784

CVE-2022-49784 affects the Linux kernel perf/x86/amd/uncore subsystem. The issue is a memory leak where the events array in per-CPU NB/LLC uncore contexts is freed late, after the uncore context is freed when a CPU comes online. The documented fix is to free the events array before freeing the un...

CVE-2022-49825

CVE-2022-49825 — Linux kernel (libata-transport) In ata_tport_add(), the return value of transport_add_device() is not checked, which can lead to a NULL pointer dereference during module removal when transport_remove_device() is called for a device that was not added. The vulnerability is resolve...

CVE-2022-49826

CVE-2022-49826 — Linux kernel (ata: libata-transport) The vulnerability arises in the error path of ata_tport_add() where put_device() followed by ata_tport_release() can cause an extra decrement of the refcount on ap->host, leading to a NULL pointer dereference during unbind/stop (as ports ar...

CVE-2022-49832

Technical details about CVE-2022-49832 (pinctrl: devicetree: fix null pointer dereferencing in pinctrl_dt_to_map) are not publicly provided in the supplied connected documents. Monitor for updates.

CVE-2022-49916

CVE-2022-49916 covers a NULL pointer dereference in the Linux kernel’s Rose protocol path (rose_send_frame). The issue surfaces when rose_loopback_neigh's neigh->dev is NULL, causing access to neigh->dev->dev_addr and triggering a NULL dereference in rose_send_frame (rose_link.c: rose_se...

CVE-2022-49962

CVE-2022-49962 affects the Linux kernel xHCI driver: the remove path could dereference a null pointer when xHC has only one roothub, attempting to remove both main and shared hcds even if the shared_hcd doesn’t exist. This could trigger a NULL pointer dereference during reboot for affected contro...

CVE-2022-49964

CVE-2022-49964 affects the Linux kernel arm64 cacheinfo path. The root cause was assigning a signed error value (-ENOENT) returned by acpi_find_last_cache_level() to an unsigned fw_level, causing the number of cache leaves to become an enormous value and triggering a warning in __alloc_pages. The...

CVE-2022-49998

The CVE-2022-49998 issue concerns the Linux kernel’s RxRPC sendmsg path (net/rxrpc/sendmsg.c). The described vulnerability fixes three bugs in rxrpc’s sendmsg implementation: (1) rxrpc_new_client_call() should release the socket lock when returning from rxrpc_get_call_slot(); (2) rxrpc_wait_for_t...

CVE-2022-50135

Summary (CVE-2022-50135): In the Linux kernel, the RDMA/rxe path contains a bug where, during error handling in rxe_qp_from_init, the qp’s rcq and scq are set to NULL, but later in rxe_qp_do_cleanup they are dereferenced (qp->scq->num_wq and qp->rcq->num_wq). This results in a null-pt...