CVE-2024-36281

CVE-2024-36281 affects the Linux kernel net/mlx5/IPsec rules. The vulnerability arises from rx_create and improper mlx5_modify_header_dealloc usage, which could lead to a NULL pointer dereference and an earlier rule-leak when two status rules are populated. The fix switches to mlx5_ipsec_rx_statu...

CVE-2022-50076

CVE-2022-50076 concerns the Linux kernel CIFS implementation: a memory leak in the deferred close path has been fixed. The description from multiple sources (NVD entry and connected advisories) shows the issue manifests as a kmemleak report during SMB2/xfstests (xfstests on smb21 report kmemleak)...

CVE-2022-50111

CVE-2022-50111 concerns a Linux kernel issue in the ASoC mt6359 driver where a refcount leak occurs. The root cause is that in mt6359_parse_dt() and mt6359_accdet_parse_dt(), a reference returned by of_get_child_by_name() is not balanced with of_node_put(), leaving a leaked reference. The availab...

CVE-2022-50116

The CVE refers to a Linux kernel flaw in tty n_gsm where deadlocks and link starvation could occur in the outgoing data path under ldisc congestion. The fix adds an additional control-channel data queue and processes it before the user-channel queue in gsm_data_kick(), moving this work to a dedic...

CVE-2022-50139

CVE-2022-50139 affects the Linux kernel’s usb: aspeed-vhub component. The root cause is a refcount leak in ast_vhub_init_desc() caused by not releasing a reference from of_get_child_by_name(). The fix is to call of_node_put() on that reference. This remediation prevents the refcount from being in...

CVE-2022-50201

CVE-2022-50201 affects the Linux kernel SELinux path: memleak in security_read_state_kernel() where the function returns the result of __security_read_policy without freeing allocated memory in *data. This memory leak occurs when __security_read_policy fails. The issue is addressed by freeing the...

CVE-2023-52559

CVE-2023-52559 concerns the Linux kernel iommu/vt-d suspension path. The issue arises because iommu_suspend() is called with IRQs disabled and memory could be allocated with GFP_KERNEL during the suspend callback, potentially re-enabling IRQs and causing intermittent suspend/hibernate problems. O...

CVE-2023-52636

CVE-2023-52636 involves a flaw in the Linux kernel libceph messenger (net/ceph/messenger_v1.c) where a short read of a socket footer may lead to read_partial_sparse_msg_data() not bailing as intended. When the socket is ready for a subsequent read, the sparse-read state machine can misinterpret p...

CVE-2023-52901

The CVE-2023-52901 entry affects the Linux kernel USB xHCI host controller handling. The vulnerability arises when URBs are queued to all endpoints while the host is unresponsive, risking a NULL pointer dereference and kernel panic if an endpoint is dereferenced after becoming invalid. The fix ad...

CVE-2023-53043

CVE-2023-53043 concerns the Linux kernel on arm64, specifically the qcom sc7280 PCIe dts. The issue arises if the PCIe controller is not marked as cache/dma-coherent, which can cause the kernel to coherency during dma-ops and potentially lead to data corruption. The concrete detail found in conne...

CVE-2023-53074

CVE-2023-53074 relates to Linux kernel AMDGPU code: a calltrace warning in ttm_bo during psp_hw_fini when amdgpu is removed after mode1 reset. The issue arises because the ta firmware buffer reinitialization is unnecessary during mode1 reset, causing an extra bo pin_count increment. The vulnerabi...

CVE-2023-53099

CVE-2023-53099 concerns a Linux kernel issue where a sleepable memory allocation was performed from an atomic context in the Xilinx firmware driver, triggering a lockdep-detected “sleeping function called from invalid context” condition. The advisory notes the root cause is in firmware: xilinx an...

CVE-2023-53133

CVE-2023-53133 affects the Linux kernel’s BPF sockmap path (tcp_bpf_recvmsg_parser) where a 0-length recvmsg can loop indefinitely. The description and connected advisories confirm the root cause is an infinite loop when len is 0 and that the fix is to return 0 for length 0 in tcp_bpf_recvmsg_par...

CVE-2024-26911

The CVE-2024-26911 entry refers to the Linux kernel DRM buddy component, specifically alloc_range() in drivers/gpu/drm/drm_buddy.c. The root cause was that, in corner cases where required memory blocks couldn’t be found, alloc_range() sometimes returned SUCCESS instead of signaling failure. The d...

CVE-2024-35786

The CVE-2024-35786 issue affects the Linux kernel’s DRM Nouveau driver, specifically a stale locked mutex in nouveau_gem_ioctl_pushbuf that can cause a deadlock if VM_BIND is enabled and a legacy submission ioctl is attempted. The vulnerability is resolved by a kernel fix; the provided connected ...

CVE-2024-38574

CVE-2024-38574 affects the Linux kernel’s libbpf/bpf loading flow. The root cause is a NULL dereference: in bpf_object_load_prog(), obj->btf may be NULL when passed to btf_fd(), and the code path does not guard against NULL. This can cause segmentation faults (e.g., bpftool failing to load pro...

CVE-2024-38636

CVE-2024-38636 (Linux kernel, f2fs multi-device support) : The issue occurs when using multiple block devices with F2FS where reads on the non-primary device are mapped to the first block (address 0). This causes f2fs_map_blocks() to return a valid zero block address, but f2fs_iomap_begin() treat...

CVE-2024-42064

Technical details for CVE-2024-42064 are not provided in connected documents; the initial description has some specifics, but no corroborating technical particulars (affected kernel component, versions, or patch references) are present in the connected sources. Monitor for updates.

CVE-2024-42293

The CVE-2024-42293 entry concerns the Linux kernel (arm64) vulnerability in the memory management code related to lockless walking with static/dynamic page-table folding. The issue arises when 16K pages with a 4-level page-table fold at runtime; the generic p4d_offset_lockless() would return a po...

CVE-2024-45014

In CVE-2024-45014, Linux kernel s390/boot exposes a memory-muncertainty issue: when the kernel image is allocated, extra memory for offsetting the image start to align with the lower 20 bits of the KASLR base address was not accounted for, potentially allowing the kernel to access memory beyond i...

CVE-2024-46790

CVE-2024-46790 concerns the Linux kernel: when freeing PG_hwpoison pages they are isolated rather than released, leading to a warning: “alloc_tag was not set.” The Astra Linux bulletin confirms the issue and states the fix is to “clear the page tag reference after the page got isolated and accoun...

CVE-2024-47729

CVE-2024-47729 affects the Linux kernel DRM-XE path. Affected component: user binds mapping to engines that can fault; the completion order can cause a deadlock between user binds and faulting devices. Root cause: binding to engines on faulting devices can deadlock due to how fault handling inter...

CVE-2024-58074

Technical details and impact for CVE-2024-58074 are not publicly provided in the supplied documents; monitor for updates.

CVE-2024-58089

CVE-2024-58089 affects the Linux kernel: a double accounting race in btrfs_run_delalloc_range() can occur when 4K block size is smaller than 64K page size (aarch64), potentially leading to kernel panics and oops during delalloc handling (as seen in the provided trace: can_finish_ordered_extent, b...

CVE-2024-58239

The CVE-2024-58239 issue affects the Linux kernel TLS path: if a non-DATA record is present in the rx_list and another of the same type remains in the queue, records can be merged and processing may exit mid-loop. The fix, described in the advisory, is to check the record type and jump to the end...

CVE-2025-21644

CVE-2025-21644: Linux kernel DRM/xe tlb_invalidation bug. Root cause: GuC load failure could leave initialization incomplete, leading to NULL pointer dereference during wedging. Fix: move xe_gt_tlb_invalidation_init() to xe_gt_init_early() so locks/seqno are initialized early (software-only init)...

CVE-2025-38071

CVE-2025-38071 affects the Linux kernel (x86/mm). Root cause: memblock_phys_alloc_range() may return 0 on failure when CONFIG_PHYSICAL_START=0x100000, causing memblock_phys_free() to mis-handle the first 4 MiB of memory and crash. The vulnerability is resolved in the kernel by checking the return...

CVE-2025-38088

CVE-2025-38088 affects the Linux kernel’s memtrace mmap in the PowerPC powernv memory tracing path. The root cause is an out-of-bounds issue when mmap-ing within the memtrace region. The patch fixes this by validating that the requested mapping size does not exceed the allocated memtrace region, ...

CVE-2025-38160

CVE-2025-38160 affects the Linux kernel due to a NULL pointer dereference in the Raspberry Pi clock registration path. Specifically, raspberrypi_clk_register() does not handle a NULL return from devm_kasprintf(), which can occur if memory allocation fails. A fix has added a NULL check after devm_...

CVE-2025-38222

Summary : CVE-2025-38222 refers to a Linux kernel vulnerability in ext4 inline data handling. When inline_data is enabled, a length parameter (len) is incorrectly treated as an unsigned int, causing a truncation of pos+len in ext4_prepare_inline_data. This leads to an incorrect len being passed t...

CVE-2025-38263

The CVE-2025-38263 issue in the Linux kernel affects the bcache subsystem, specifically a NULL pointer dereference in cache_set_flush() that could occur during error handling in register_cache_set()/bch_cache_set_alloc(). The crash path can lead to kernel oops and a NULL dereference when cache se...

CVE-2025-38265

The CVE-2025-38265 issue affects the Linux kernel in the serial/jsm path (jsm_uart_port_init). The root cause is a NULL pointer dereference in serial_base_ctrl_add when no device is set, leading to a crash in serial_core_register_port during probe. The provided data notes a fix and references ker...

CVE-2025-38273

CVE-2025-38273 affects the Linux kernel TIPC net subsystem. The root cause was a refcount handling issue where get_net() could be invoked on a network namespace already being destroyed, triggering a use-after-free warning when a TIPC discovery timer fires during namespace cleanup. The fix replace...

CVE-2025-38312

CVE-2025-38312 concerns the Linux kernel fbdev path: fbcvt. In fb_find_mode_cvt(), if mode->refresh equals 0x80000000, cvt.f_refresh overflows when doubled, and is subsequently used as a divider in fb_cvt_hperiod(), causing a division by zero and potential kernel oops. The vulnerability is res...

CVE-2025-38324

CVE-2025-38324 : The Linux kernel fix addresses a race in mpls_route_input_rcu() that could be triggered when called from mpls_getroute() under RTNL, where net->mpls.platform_label is updated under RTNL. The patch switches to rcu_dereference_rtnl() to silence the spurious lockdep warning and e...

CVE-2025-38418

CVE-2025-38418 affects the Linux kernel remoteproc subsystem. The root cause is a failure path in rproc_attach() where, if rproc_handle_resources() fails while the remote processor is in state RPROC_DETACHED, rproc->clean_table is not released, leading to a memory leak (observed in a kworker t...

CVE-2025-38430

This CVE-2025-38430 affects the Linux kernel and is addressed by a patch that makes nfsd4_spo_must_allow() verify that the RPC procedure is NFSPROC4_COMPOUND. If the request is not a v4 compound, examining cstate could yield undefined results; the patch enforces the proper rq_procinfo for v4 comp...

CVE-2025-71131

CVE-2025-71131 is a Linux kernel crypto issue in crypto/seqiv.c. The bug arises when performing crypto_aead_encrypt: after the async completion, the underlying request may be freed, so dereferencing req->iv post-return is invalid. The fix creates a new local variable, unaligned_info, and uses ...

CVE-2026-31629

The CVE-2026-31629 vulnerability affects the Linux kernel NFC LLCP subsystem. Specifically, in nfc_llcp_recv_hdlc() and nfc_llcp_recv_disc(), when the socket state is LLCP_CLOSED, the code correctly releases resources but lacks an early return, causing fall-through to subsequent release calls. Th...

CVE-2026-45942

Summary of CVE-2026-45942 : A race condition in the Linux kernel ext4 bitmap handling enables inconsistent bitmap reporting due to concurrent page migration and bitmap modification in the load_buddy path. The root cause is that the fast load_buddy path only increments the folio refcount and can o...

CVE-2005-0815

CVE-2005-0815 affects the Linux kernel iso9660 filesystem handler in versions up to 2.6.11 (and earlier). The issue is described as multiple range-checking flaws in the ISO-9660 file system code, which could be triggered by mounting a crafted/corrupted ISO image on CD-ROM. Impact stated in connec...

CVE-2006-3745

CVE-2006-3745 affects the SCTP implementation in Linux 2.6.x (before 2.6.17.10) and 2.4.x (up to 2.4.33). The vulnerability resides in sctp_make_abort_user and allows a local user to cause a denial of service (panic) and potentially gain root privileges via unspecified attack vectors. Connected s...

CVE-2006-5823

CVE-2006-5823 is a Linux kernel issue affecting the cramfs file system in 2.6.x where malformed compressed data can trigger memory corruption, leading to a local-denial crash. Connected advisories (RHSA-2007:0436, RHSA-2007:0014, and corresponding openvas entries) enumerate the cramfs memory corr...

CVE-2007-0771

CVE-2007-0771 concerns the Linux kernel utrace support (notably in 2.6.18 and related 2.6.x lines) where local attackers can trigger a DoS via a race/spin failure between utrace_attach and related code paths when using ptrace (as exemplified by the ptrace-thrash scenario). The vulnerability manif...

CVE-2007-4571

CVE-2007-4571 affects the ALSA portion of the Linux kernel before 2.6.22.8. The snd_mem_proc_read function in sound/core/memalloc.c does not return the correct write size, enabling a local user to read kernel memory contents via a small count argument (demonstrated by reading /proc/driver/snd-pag...

CVE-2008-1294

Mode C: CVE-2008-1294 affects the Linux kernel 2.6.x line (notably 2.6.17 and earlier than 2.6.22). The issue is that RLIMIT_CPU is not validated when a user sets it to 0 until after the change is applied, allowing a local user to bypass CPU time limits. Multiple connected advisories cite this CV...

CVE-2012-2119

CVE-2012-2119 : A buffer overflow in the Linux kernel macvtap device driver (before 3.4.5) can be triggered in certain configurations by a long descriptor with a long vector length, enabling privileged KVM guest users to crash the host (DoS). Affected component: macvtap driver in the Linux kernel...

CVE-2012-2669

CVE-2012-2669 affects the Linux kernel up to 3.4.5 in hv_kvp_daemon (tools/hv/hv_kvp_daemon.c) where Netlink message origin is not validated, allowing a local user to spoof Netlink communication via a crafted connector message. The issue is addressed by a patch included in Linux kernel 3.4.5 (via...

CVE-2012-5375

Vulnerability CVE-2012-5375 affects the Linux kernel’s Btrfs CRC32C feature. Local users can cause a denial of service (blocking file creation) by writing to a victim’s directory and creating a file whose name hashes to a specific CRC32C value, with impact noted as CVE-2012-5375 in multiple advis...

CVE-2013-1848

Affected software: Linux kernel (fs/ext3/super.c) before 3.8.4. Root cause: incorrect arguments to functions related to printk input, enabling local users to perform format-string attacks and potentially gain privileges via a crafted application. Impact: local privilege escalation. Remediation: p...