CVE-2022-48933

CVE-2022-48933 affects the Linux kernel nf_tables stateful object update path. The issue arises when updating stateful objects from the control plane: a temporary object is created, but its destruction path leaks resources because the update flow does not increment the module refcount. The fix is...

CVE-2022-49050

CVE-2022-49050 maps to a Linux kernel issue in memory: renesas-rpc-if where a flash platform-device leak could occur in the error path if registration fails during probe. The fixed code ensures the flash platform device is freed on probe error. The vulnerability is local in scope with a medium ba...

CVE-2022-49077

CVE-2022-49077 — Linux kernel : A vulnerability where an mremap(old_size=0) path could reach move_page_tables() and trigger unnecessary invalidate_range_start()/invalidate_range_end() on an empty range, causing a WARN in KVM mmu_notifier. The published fix is to short‑circuit with an early return...

CVE-2022-49088

CVE-2022-49088 affects the Linux kernel: a refcount leak in dpaa2_ptp_probe where the of_find_compatible_node() result is returned with an incremented refcount. The fix is to call of_node_put() to release the reference and avoid the leak. References point to kernel patches that implement this cor...

CVE-2022-49252

Technical details for CVE-2022-49252 are not present in the provided documents. The connected Astra/SUSE/EUVD entries reference kernel issues but do not disclose specifics for this CVE. Monitor for updates in the supplied feeds.

CVE-2022-49400

CVE-2022-49400 concerns a Linux kernel RAID subsystem issue where in reshape the code path freed the mddev and set mddev->private to NULL, causing NULL dereference when a new raid tried to reuse mddev. The fix is to remove the code path that sets mddev->private to NULL in raid0_free, preven...

CVE-2022-49450

CVE-2022-49450 relates to the Linux kernel AF_RXRPC listen() backlog handling. The underlying issue is that the backlog can be configured up to 32, but the preallocation ring has 32 slots and one slot is always dead due to the ring using CIRC_CNT(). This caused an oops on socket close when listen...

CVE-2022-49477

CVE-2022-49477 affects the Linux kernel’s ASoC Samsung code for aries_audio_probe. The vulnerability arises from a refcount leak: of_parse_phandle() returns a node pointer with an incremented refcount, and of_node_put() must be called on it when done. If extcon_find_edev_by_node() fails, of_node_...

CVE-2022-49485

CVE-2022-49485 describes a Linux kernel issue in drm/v3d: a null pointer dereference of pointer perfmon where WARN_ON happens after the pointer has been dereferenced. The fix is to dereference perfmon only after it has been null-checked. Affected component: Linux kernel (drm/v3d path). Impact, pe...

CVE-2022-49509

CVE-2022-49509 : In the Linux kernel, the vulnerability arises when removing the max9286 I2C driver, causing a kernel oops due to the I2C client data potentially pointing to a freed v4l2_subdev instead of max9286_priv. The fix updates max9286_remove/max9286_probe/max9286_init so that the driver n...

CVE-2022-49676

CVE-2022-49676 refers to a Linux kernel issue for the Samsung Exynos5422 DMC memory controller where a refcount leak in of_get_dram_timings could occur due to missing of_node_put() in error paths. The bug stems from of_parse_phandle() returning a node pointer with an incremented refcount that was...

CVE-2022-49696

CVE-2022-49696 is a Linux kernel use-after-free in tipc_named_reinit, triggered by a race with workqueue finalization. The issue arises because cancel_work_sync() ordering could allow a destroyed TipC namespace to be accessed by a work item enqueuing later, leading to a read of freed memory (KASA...

CVE-2022-49786

The CVE-2022-49786 issue affects the Linux kernel’s blk-cgroup subsystem. Root cause: blkcg_css_online incorrectly pinned the parent after a 397c9f46 refactor, pinning the css instead of the parent blkcg, which leads to extra pins and leakage of blkcgs and cgroups. Impact stated: leakage of blkcg...

CVE-2022-49807

CVE-2022-49807 affects the Linux kernel nvmet subsystem, addressing a memory leak in nvmet_auth_set_key when changing dhchap secrets. The fix releases the old secrets to prevent unreferenced memory leaks (kmemleak). Impact details in the provided sources indicate a local issue within nvmet key ma...

CVE-2022-49810

The CVE-2022-49810 issue affects the Linux kernel netfs/xarray iteration under RCUp where missing xas_retry() checks could cause a NULL-pointer dereference in netfs_rreq_unlock and related code paths. Connected documents confirm the root cause in netfslib’s xarray iteration under RCU read lock an...

CVE-2022-49814

CVE-2022-49814 affects the Linux kernel KCM (kernel-based communications) sockets. The issue is a race on sk_receive_queue where the RX path for KCM sockets uses mux->rx_lock to protect more than just the skb queue, but kcm_recvmsg() only reuses the skb queue lock, leaving a window for race co...

CVE-2022-49891

CVE-2022-49891 concerns a Linux kernel memory-leak in tracing/kprobe handling. The root cause is that test_gen_kprobe_cmd() frees buf only on the fail path, causing a leak when no failure occurs; the patch moves kfree(buf) from the fail path to the common path, and applies the same fix to test_ge...

CVE-2022-50000

CVE-2022-50000 affects the Linux kernel netfilter flowtable cleanup. The vulnerability arises when cleaning up the flowtable: if a flow entry already has pending HW stats/add work, the sequence may skip queuing HW del work, causing a stall on teardown and a potential use-after-free during flowtab...

CVE-2022-50070

CVE-2022-50070 affects the Linux kernel and relates to the mptcp datapath: a transmit could race with mptcp_close(), causing a closed subflow (ssk) to be re-transmitted. The root cause is a subflow-state check performed before acquiring the socket lock, enabling re-transmission on an already clos...

CVE-2022-50074

CVE-2022-50074 is a Linux kernel vulnerability related to apparmor memleak in aa_simple_write_to_buffer. The issue arises when copy_from_user fails: memory is freed by kvfree, but the management struct and data blob are allocated independently, so freeing only the data via kvfree leaks the memory...

CVE-2022-50086

The CVE CVE-2022-50086 concerns a Linux kernel issue where concurrent writes to io cost qos (rq_qos) could cause the same rq_qos type to be added twice to a disk, leading to list walk corruption and potential crashes. Connected advisories (EulerOS/Nessus entries) reference the same description an...

CVE-2022-50157

CVE-2022-50157 affects the Linux kernel PCI subsystem (PCI: microchip: Fix refcount leak in mc_pcie_init_irq_domains). The issue arises because of_get_next_child() returns a node pointer with the refcount incremented, and mc_pcie_init_irq_domains() fails to call of_node_put() in some error paths,...

CVE-2023-52570

CVE-2023-52570 affects the Linux kernel vfio/mdev path. The vulnerability is a NULL pointer dereference that can occur in mdev_unregister_parent() during module removal of the mdpy.mdpy (mdpy.ko), traced to probing/initialization flow (kobject_add_internal/kobject_init_and_add) and mdev_type_add(...

CVE-2023-52792

Summary (CVE-2023-52792) The Linux kernel cxl/region cleanup path incorrectly reused resources when cxl_region_setup_targets() failed, risking -EBUSY on decoder region and possible resource leakage. The fix short-circuits cleanup on initialization failure (return immediately) and adds a guard to ...

CVE-2023-53040

CVE-2023-53040 (Linux kernel) is a local-bypass buffer-overflow vulnerability caused by the ca8210 patch: it fixes a negative mac_len array access that could overflow skb->data when ieee802154_hdr_peek_addrs() fails. Affected: Linux kernel code handling ieee802.154 headers. Impact per provided...

CVE-2023-53092

The CVE-2023-53092 entry concerns a Linux kernel interconnect driver (exynos) where a node leak could occur in the PM QoS error path during probe. The documented fix ensures that the newly allocated interconnect node is added to the provider before the PM QoS request is applied, so that the node ...

CVE-2023-53099

CVE-2023-53099 concerns a Linux kernel issue where a sleepable memory allocation was performed from an atomic context in the Xilinx firmware driver, triggering a lockdep-detected “sleeping function called from invalid context” condition. The advisory notes the root cause is in firmware: xilinx an...

CVE-2024-27409

CVE-2024-27409 concerns the Linux kernel’s dmaengine: dw-edma HDMA. The linked list element and pointer may not be stored with the HDMA controller register; if the doorbell is toggled before the full write of the linked list, a race condition can occur. In remote setup, only a memory read (readl)...

CVE-2024-33619

CVE-2024-33619 affects the Linux kernel EFI support code, specifically the libstub path. The issue arises because priv.runtime_map is allocated only when efi_novamap is not set; otherwise it remains uninitialized. In error paths, priv.runtime_map could be freed unconditionally, potentially passin...

CVE-2024-35873

CVE-2024-35873 is a Linux kernel vulnerability affecting the RISC-V vector state handling during rt_sigreturn. A bug in the restoration path with vector state discard could cause the live vector state and vstate to diverge, and when the vectorized path of user_from_copy() is chosen (CONFIG_RISCV_...

CVE-2024-35985

CVE-2024-35985 concerns the Linux kernel vulnerability where the eevdf scheduler could yield an out-of-bounds vlag and a NULL-deref in certain edge cases. The connected Astra/Nessus documents reiterate that reweight_eevdf() could compute vlag beyond the intended bound, since the vlag is used with...

CVE-2024-38390

CVE-2024-38390 affects the Linux kernel DRM/MSM a6xx path. The vulnerability arises when speedbin setting fails, causing a null pointer dereference during cleanup if msm_gpu_init() did not complete (gpu->pdev is only assigned in a6xx_gpu_init -> adreno_gpu_init -> msm_gpu_init). The cano...

CVE-2024-38539

CVE-2024-38539 — Linux kernel (RDMA/cma) kmemleak issue Summary: The kmemleak memory-leak issue observed during blktests nvme/rdma involving siw was fixed in the RDMA/cma code path of the Linux kernel. The root cause was that rdma_put_gid_attr is not called when sgid_attr is set to ERR_PTR(-ENODE...

CVE-2024-42146

CVE-2024-42146: Linux kernel DRM/XE vulnerability fixed by adding outer runtime PM protection to xe_live_ktest@xe_dma_buf. The issue arose because kunit tests performing memory access did not use outer runtime_pm protections, leaving inner callers unprotected. Root cause: missing outer runtime PM...

CVE-2024-56655

CVE-2024-56655 affects the Linux kernel nf_tables path under netfilter. The root cause is deferred destruction of rules via call_rcu, where nf_tables_chain_destroy can sleep and the to-be-destroyed rule could be exposed to datapath/dumps without a required synchronize_rcu() in between. nf_table_r...

CVE-2025-21965

CVE-2025-21965 affects the Linux kernel sched_ext path used with BPF schedulers. If a BPF scheduler provides an invalid CPU (outside nr_cpu_ids) as prev_cpu to scx_bpf_select_cpu_dfl(), it can crash the kernel. The fix validates prev_cpu in scx_bpf_select_cpu_dfl() and triggers an scx error for i...

CVE-2025-37762

CVE-2025-37762 affects the Linux kernel DRM virtio, where prepare_fb() error handling missed dmabuf unpinning, causing resource leaks on error paths. The vulnerability is fixed by correcting error handling in prepare_fb(), as noted in multiple sources (e.g., Astra Linux advisory citing the same d...

CVE-2025-37848

The CVE-2025-37848 fix applies to the Linux kernel accel/ivpu MS IOCTLs path. It resolves a PM-related deadlock where runtime resume/suspend can be blocked while MS IOCTLs are in progress; a failed suspend would trigger ivpu_ms_cleanup() which attempts to acquire file_priv->ms_lock that is alr...

CVE-2025-37981

CVE-2025-37981 – Linux kernel (scsi: smartpqi) vulnerability : The smartpqi driver used the reset_devices flag to detect kdump, causing inappropriate adjustments after a regular kexec reboot. This led to abnormally low parameters (e.g., max_transfer_size) and, more seriously, memory corruption fr...

CVE-2025-38098

The CVE-2025-38098 issue affects the Linux kernel DRM AMD display stack. It centers on treating a wb (writeback) connector as physical in create_validate_stream_for_sink, and incorrect handling when operating on a drm_wb_connector as an amdgpu_dm_connector. The description notes that dereferencin...

CVE-2025-38124

CVE-2025-38124 pertains to the Linux kernel UDP/GSO path. The vulnerability arises when UDP GSO fragments within a frag_list are not correctly linearized after a pull from frag_list, causing invalid geometry for skb_segment. The fix, as described in commit a1e40ac5b5e9, redirects and then lineari...

CVE-2025-38136

The CVE-2025-38136 issue in the Linux kernel concerns Renesas USBHS on the RZ/V2H platform. Vulnerable path: in usbhs_probe(), clocks are sometimes not enabled before memory-mapped register access (iowrite16), causing a synchronous external abort. Root cause: initialization sequence in usbhs_prob...

CVE-2025-38151

Technical details about CVE-2025-38151 are not publicly provided in the supplied documents; no explicit information on affected kernel versions, root cause, impact, or patch is included. Monitor for updates.

CVE-2025-38165

The CVE-2025-38165 vulnerability affects the Linux kernel’s bpf/sockmap path, causing a kernel panic when skb_linearize() is called. The root cause is a race-related interaction between backlog skb handling and skb release in the recvmsg path, previously mitigated by skb_get() in the backlog, whi...

CVE-2025-38204

CVE-2025-38204 affects the Linux kernel’s JFS filesystem. The issue is an array-index-out-of-bounds read in add_missing_indices, where stbl (s8) must map to offsets 0–127. A bound check was added and -EIO is returned if the check fails; jfs_readdir is also updated to propagate errors from add_mis...

CVE-2025-38246

CVE-2025-38246 affects the bnxt Ethernet driver in the Linux kernel. The vulnerability stems from an incorrect handling of XDP redirect lists that could corrupt a linked list (list_add) and trigger a crash when XDP_REDIRECT is used, as described in the initial CVE note and echoed in connected adv...

CVE-2025-38256

CVE-2025-38256 involves io_uring/rsrc folio unpinning in the Linux kernel. The issue arises when pinning a folio’s tail page and then unpinning the head page via unpin_user_page*, which can trigger a debug warning in mm/gup.c. The provided connected Astra Linux bulletin confirms the root cause an...

CVE-2025-38265

The CVE-2025-38265 issue affects the Linux kernel in the serial/jsm path (jsm_uart_port_init). The root cause is a NULL pointer dereference in serial_base_ctrl_add when no device is set, leading to a crash in serial_core_register_port during probe. The provided data notes a fix and references ker...

CVE-2025-38275

The CVE-2025-38275 entry concerns the Linux kernel, fixing a NULL vs IS_ERR() bug in the qcom-qmp-usb driver. The qmp_usb_iomap() helper previously returned devm_ioremap() results directly for non-exclusive mappings, which could be NULL. If callers only checked IS_ERR(), a NULL pointer could bypa...

CVE-2025-38315

CVE-2025-38315 concerns a Linux kernel Bluetooth driver issue (btintel). The root cause is a mismatch between the EFI variable size and the known struct btintel_dsbr size, which could lead to a stack overflow if the EFI variable is larger than expected. The fix alters the check to rely on the kno...