Lucene search
+L
LinuxLinux Kernel

14999 matches found

CVE
CVE
added 2009/05/05 8:00 p.m.92 views

CVE-2009-1184

CVE-2009-1184 affects the Linux kernel’s SELinux subsystem: the function security/selinux/hooks.c (selinux_ip_postroute_iptables_compat) omits avc_has_perm checks for the node and port when compat_net is enabled, allowing local users to bypass certain network-traffic restrictions. Impact is parti...

4.4CVSS4.2AI score0.00349EPSS
Save
CVE
CVE
added 2024/05/21 3:31 p.m.92 views

CVE-2023-52795

Summary: CVE-2023-52795 affects the Linux kernel vhost-vdpa path. The vulnerability is a use-after-free/double-free in vhost_vdpa_probe() caused by put_device() calling vhost_vdpa_release_dev() which frees a device via ida_simple_remove(). This was resolved in the Linux kernel; the Astra Linux ad...

7.8CVSS6.9AI score0.00241EPSS
Save
CVE
CVE
added 2024/05/21 3:31 p.m.92 views

CVE-2023-52839

CVE-2023-52839 describes a Linux kernel vulnerability in perf where broadcasting to other CPUs when starting a counter was removed as part of a fix (commit 3fec323339a4). Root cause: unnecessary broadcast in perf code could lead to a warning and potential instability; fix eliminates the broadcast...

3.3CVSS6.5AI score0.00209EPSS
Save
CVE
CVE
added 2024/08/21 6:10 a.m.92 views

CVE-2023-52893

Summary: CVE-2023-52893 is a Linux kernel vulnerability where a call path using get_variable with a NULL attr triggers a null-deref/panic in the gsmi subsystem. Root cause: The patch accompanying the EFI varstore change (efi: pstore: Omit efivars caching EFI varstore access layer) added a new get...

5.5CVSS6.5AI score0.0024EPSS
Save
CVE
CVE
added 2024/08/21 6:10 a.m.92 views

CVE-2023-52911

CVE-2023-52911 is a Linux kernel issue in the DRM/MSM driver related to a NULL pointer dereference when the Adreno GPU runs in headless mode (e.g., on i.MX platforms). The crash occurs during reboot in the msm_atomic_commit_tail path, with an oops/NULL dereference involving slab kmalloc and relat...

5.5CVSS6.4AI score0.00208EPSS
Save
CVE
CVE
added 2025/03/27 4:37 p.m.92 views

CVE-2023-52930

The CVE-2023-52930 issue affects the Linux kernel’s i915 driver: a race between multiple threads calling I915_GEM_SET_TILING to switch tiling to I915_TILING_NONE could cause a double-free (or memory leak on transitions). The fix moves allocation/free’ing of the bit_17 mask inside the section prot...

7.8CVSS6.5AI score0.00279EPSS
Save
CVE
CVE
added 2025/03/27 4:43 p.m.92 views

CVE-2023-53029

The CVE-2023-53029 entry concerns the Linux kernel, specifically the octeontx2-pf driver. The vulnerability/issue arises from GFP_KERNEL usage in atomic contexts for the rt (real-time) kernel, triggering sleep warnings in atomic context (BUG: sleeping function called from invalid context) and rel...

5.5CVSS6.5AI score0.00145EPSS
Save
CVE
CVE
added 2025/03/27 4:43 p.m.92 views

CVE-2023-53030

CVE-2023-53030 affects the Linux kernel in octeontx2-pf where GFP_KERNEL was used in a context with preemption disabled, triggering a warning (CONFIG_DEBUG_ATOMIC_SLEEP) and potential sleeping in atomic context. The issue is resolved by avoiding GFP_KERNEL in atomic contexts and disabling preempt...

5.5CVSS6.6AI score0.00145EPSS
Save
CVE
CVE
added 2024/04/17 10:14 a.m.92 views

CVE-2024-26850

CVE-2024-26850 concerns the Linux kernel bug in mm/debug_vm_pgtable related to pud_advanced_tests for PUD entries on architectures such as powerpc. Affected code could trigger a kernel panic (BUG_ON) when debug checks are active (CONFIG_DEBUG_VM), with traces pointing to radix_pgtable.c and pgtab...

5.5CVSS6.6AI score0.00222EPSS
Save
CVE
CVE
added 2024/06/08 1:01 p.m.92 views

CVE-2024-36970

CVE-2024-36970 : In the Linux kernel, the issue affects the iwlwifi subsystem and has been resolved by changing the module load path to use request_module_nowait, which is described as a workaround for a deadlock regression introduced during LED merging in 6.9. The deadlock is observed in systems...

5.5CVSS6.5AI score0.00141EPSS
Save
CVE
CVE
added 2024/06/19 1:37 p.m.92 views

CVE-2024-38584

In CVE-2024-38584, the Linux kernel net: ti: icssg_prueth prueth_probe() dereferenced a NULL pointer when emac_phy_connect() failed and of_phy_connect() returned NULL, leading to NULL pointer dereference in phy_attached_info(). The public fix is to check the return code of emac_phy_connect and fa...

5.5CVSS7.1AI score0.00225EPSS
Save
CVE
CVE
added 2024/06/25 2:25 p.m.92 views

CVE-2024-39465

CVE-2024-39465 affects the Linux kernel's media: mgb4 path. A double removal of debugfs entries (debugfs_remove_recursive)—removing a parent directory and then its child—could trigger a kernel panic. The connected documents confirm a fix was applied in the Linux kernel to prevent this double-remo...

5.5CVSS6.9AI score0.00184EPSS
Save
CVE
CVE
added 2024/07/10 7:14 a.m.92 views

CVE-2024-39492

CVE-2024-39492 : The Linux kernel fix targets mailbox: mtk-cmdq where pm_runtime_get_sync() could warn during mbox shutdown. Root cause: return value of pm_runtime_get_sync() could be 1 when runtime is active, leading to a WARN_ON() trigger. The patch changes the conditional to treat WARN_ON() ca...

7CVSS7.8AI score0.00191EPSS
Save
CVE
CVE
added 2024/07/12 12:31 p.m.92 views

CVE-2024-40949

CVE-2024-40949 is a Linux kernel vulnerability affecting shmem folios in mm/memcontrol.c. The issue occurred when replacing an old shmem folio with a new one during swapin, causing mem_cgroup_migrate() to clear the old folio’s memcg data and preventing the old folio from obtaining the correct mem...

7.8CVSS7AI score0.00221EPSS
Save
CVE
CVE
added 2024/08/17 9:21 a.m.92 views

CVE-2024-43838

CVE-2024-43838 affects the Linux kernel BPF path. The root cause is an incorrect overflow check in adjust_jmp_off(), where insn->imm was used for all overflow checks instead of insn->off for the general jump case. The issue is resolved by using insn->off for the overflow check in the gen...

5.5CVSS6.9AI score0.00182EPSS
Save
CVE
CVE
added 2024/09/11 3:13 p.m.92 views

CVE-2024-45024

CVE-2024-45024 relates to a Linux kernel Hugetlb PT locking issue fixed by aligning huge page table locking with core-mm PT walkers. The root cause: during GUP’s shared page-table walking, hugetlb folios spanning multiple PTEs could be locked using PTE table locks (pte_offset_map_lock) while core...

7.8CVSS5.2AI score0.00146EPSS
Save
CVE
CVE
added 2024/09/18 7:12 a.m.92 views

CVE-2024-46789

CVE-2024-46789 (Linux kernel) details from connected documents show a concrete fix: in mm/slub, the tagging logic now checks s->flags in alloc_tagging_slab_free_hook to avoid calling alloc_tag_add when SLAB_NO_OBJ_EXT or SLAB_NOLEAKTRACE are set. This prevents the NULL ref (ref->ct) and the...

5.5CVSS5.1AI score0.00177EPSS
Save
CVE
CVE
added 2025/02/27 2:07 a.m.92 views

CVE-2024-57985

CVE-2024-57985: Linux kernel SCM driver (qcom_scm) probe-failure cleanup fixed. If the SCM driver probe fails, the global __scm must not remain assigned, else users may dereference __scm_smc_call() or access __scm->mempool. The fix ensures __scm is cleared on probe failure, addressing a theore...

7CVSS6.5AI score0.00202EPSS
Save
CVE
CVE
added 2025/02/27 8:06 p.m.92 views

CVE-2025-21824

Technical details about CVE-2025-21824 are not publicly available in the provided connected documents; no vendor/product specifics or mitigations are provided. Monitor for updates.

5.5CVSS6.6AI score0.00197EPSS
Save
CVE
CVE
added 2025/04/01 3:26 p.m.92 views

CVE-2025-21901

CVE-2025-21901 : In the Linux kernel’s RDMA bnxt_re driver, there are missing sanity checks for rdev validity. If ulp_irq_stop and ulp_irq_start callbacks are invoked while a device is in a detached state, a NULL pointer dereference can occur because the rdev may already be freed, potentially cau...

7.8CVSS7AI score0.0021EPSS
Save
CVE
CVE
added 2025/06/18 9:28 a.m.92 views

CVE-2025-38025

The CVE-2025-38025 issue affects the Linux kernel IIO ADC driver for the ad7606 bus. The root cause is a NULL dereference when calling sw_mode_config() because the callback may not be defined on all buses. The vulnerability can lead to a crash via NULL-pointer dereference in vulnerable configurat...

5.5CVSS6.5AI score0.00148EPSS
Save
CVE
CVE
added 2025/07/03 8:35 a.m.92 views

CVE-2025-38114

CVE-2025-38114 : In the Linux kernel, a deadlock could occur in the e1000 path due to e1000_down calling cancel_work_sync for the e1000_reset_task while RTNL is held. The fix moves cancel_work_sync to happen when the device is being removed (not during normal down), and makes e1000_reset_task a n...

5.5CVSS7.1AI score0.00107EPSS
Save
CVE
CVE
added 2025/07/03 8:35 a.m.92 views

CVE-2025-38141

CVE-2025-38141 is a Linux kernel use-after-free vulnerability in the device mapper reporting path. The issue stems from a race around reading md->zone_revalidate_map and the lifetime of zone resources during blk_revalidate_disk_zones() and dm_blk_report_zones() calls, potentially freeing resou...

7.8CVSS7.1AI score0.00169EPSS
Save
CVE
CVE
added 2025/07/25 1:09 p.m.92 views

CVE-2025-38404

CVE-2025-38404 affects the Linux kernel USB Type-C/displayport subsystem. The issue is a potential deadlock caused by recursive locking of cros_typec_altmode_data::mutex when a mutex-protected path calls typec_altmode_exit() from within the same context. The documented fix defers the typec_altmod...

5.5CVSS6.3AI score0.00132EPSS
Save
CVE
CVE
added 2025/08/22 4:00 p.m.92 views

CVE-2025-38623

The CVE-2025-38623 entry describes a Linux kernel fix in PCI: pnv_php hotplug handling. The vulnerability stemmed from improper handling of surprise plug events, enabling a PE bridge to freeze MSI interrupt paths and leaving PHB/PE in a frozen state after removal. Consequences include stalled plu...

5.5CVSS6.7AI score0.00161EPSS
Save
CVE
CVE
added 2026/02/04 4:07 p.m.92 views

CVE-2026-23064

CVE-2026-23064 affects the Linux kernel’s net/sched implementation, specifically the act_ife action. The vulnerability is a NULL pointer dereference in tcf_ife_encode()/ife_encode() that could trigger a general protection fault/oops when a NULL is encountered. The provided trace shows the fault p...

5.5CVSS5.1AI score0.00128EPSS
Save
CVE
CVE
added 2026/02/04 4:07 p.m.92 views

CVE-2026-23074

CVE-2026-23074 is a Linux kernel vulnerability in net/sched teql where the teql queuing discipline may be used outside its intended root qdisc, allowing a crafted packet sequence to create a use-after-free scenario in the qfq/qos path due to queue length (qlen) handling. The root cause is that te...

7.8CVSS5.2AI score0.00139EPSS
Save
CVE
CVE
added 2026/05/27 12:56 p.m.92 views

CVE-2026-46037

The CVE-2026-46037 issue affects the Linux kernel IPv4 ICMP component. Extended echo replies could use ICMP_EXT_ECHOREPLY outside the icmp_pointers[] range; the fix avoids icmp_pointers[] lookups for out-of-range types and uses array_index_nospec() for in-range lookups. Multiple OS feeds report p...

8.2CVSS5.7AI score0.00443EPSS
Save
CVE
CVE
added 2026/07/10 11:55 a.m.92 views

CVE-2026-53363

CVE-2026-53363 (Linux kernel xfrm/iptfs): The vulnerability arises because iptfs_consume_frags() does not propagate the SKBFL_SHARED_FRAG flag when transferring paged fragments, mirroring the flaw fixed in skb_try_coalesce() for CVE-2026-46300. As a result, ESP could make incorrect in-place encry...

9.8CVSS6AI score0.00411EPSS
Save
CVE
CVE
added 2004/04/17 4:00 a.m.91 views

CVE-2004-0181

The CVE-2004-0181 issue is an information leak in the Linux 2.4.x JFS code where in-memory data could be written to the device, allowing a local user to read sensitive information from the raw device. The relevant connected advisories (RHSA-2005:663, CentOS/CESA-2005:663) document this flaw as ad...

2.1CVSS5.1AI score0.00423EPSS
Save
CVE
CVE
added 2005/01/20 5:00 a.m.91 views

CVE-2004-1237

CVE-2004-1237 : A vulnerability in the system call filtering code of the Red Hat Enterprise Linux 3 audit subsystem could allow a local user to cause a denial of service (system crash) when auditing is enabled. The issue is addressed in the Red Hat kernel security advisory RHSA-2005:043, which up...

2.1CVSS6.3AI score0.00358EPSS
Save
CVE
CVE
added 2005/09/14 4:00 a.m.91 views

CVE-2005-2492

CVE-2005-2492 affects the Linux kernel 2.6 series prior to 2.6.13.1. The raw_sendmsg function can be exploited by a local user to cause a denial of service (change hardware state) or read from arbitrary memory via crafted input. Documented in multiple advisories (e.g., Mandriva MDKSA-2005:235; SU...

3.6CVSS5.6AI score0.00454EPSS
Save
CVE
CVE
added 2005/09/09 4:00 a.m.91 views

CVE-2005-2872

The CVE pertains to the ipt_recent kernel module (ipt_recent.c) in Linux kernels before 2.6.12. On 64-bit CPUs (e.g., AMD64), remote attackers can trigger a kernel panic (DoS) via SSH brute-force-style inputs, due to a length argument based on u_int32_t operating on an array of unsigned long elem...

5CVSS7.1AI score0.03906EPSS
Save
CVE
CVE
added 2005/10/20 4:00 a.m.91 views

CVE-2005-3271

CVE-2005-3271 affects the Linux kernel 2.6 series. Description and multiple advisories (SUSE, Debian, Mandriva) show exec() does not properly clear posix-timers in multi-threaded environments, causing a resource leak. This can enable a large number of local users to cause a denial of service by e...

2.1CVSS5.5AI score0.00421EPSS
Save
CVE
CVE
added 2006/01/23 10:00 p.m.91 views

CVE-2005-3356

CVE-2005-3356 is a kernel vulnerability in Linux 2.6.x where the mq_open system call can be tricked into decrementing an internal counter twice, potentially leading to a kernel panic and local denial of service. The connected documents describe the root cause as a faulty sequence in mntput/dentry...

2.1CVSS4.5AI score0.00437EPSS
Save
CVE
CVE
added 2006/03/21 6:00 p.m.91 views

CVE-2006-1343

The connected Debian advisory (DSA-1184-2) confirms CVE-2006-1343 as a local information-leak in the Linux 2.6.8 kernel (kernel-source-2.6.8), caused by an information leak in the getsockopt system call that can let a local user leak potentially sensitive memory to userspace. Affected architectur...

2.1CVSS7AI score0.00431EPSS
Save
CVE
CVE
added 2006/09/19 7:00 p.m.91 views

CVE-2006-4535

CVE-2006-4535 describes a local denial-of-service in the Linux kernel SCTP implementation where a socket with a specific SO_LINGER value can crash the kernel. Affected are kernel versions 2.6.17.10, 2.6.17.11 and 2.6.18-rc5 (and older kernels backported CVE-2006-3745 patches). Public sources (Red...

4.9CVSS7.1AI score0.00447EPSS
Save
CVE
CVE
added 2006/10/03 11:00 p.m.91 views

CVE-2006-5158

CVE-2006-5158 affects the Linux kernel’s NFS lockd (nlmclnt_mark_reclaim in clntlock.c). The connected advisories (RHSA-2007-0488, CESAs for RHEL/CentOS, SL) describe a vulnerability in NFS locking daemon that can cause a denial of service (deadlock) or kernel oops via NULL dereference, allowing ...

7.5CVSS7.1AI score0.03582EPSS
Save
CVE
CVE
added 2007/01/30 7:00 p.m.91 views

CVE-2006-5753

The CVE-2006-5753 issue concerns the Linux kernel: a flaw in the listxattr system call that can be exploited when a bad inode is present. Local users may cause a denial of service (data corruption) and potentially escalate privileges. Supported documents indicate this vulnerability was addressed ...

7.2CVSS5.9AI score0.00389EPSS
Save
CVE
CVE
added 2007/03/28 10:00 a.m.91 views

CVE-2007-1730

CVE-2007-1730 is a local kernel vulnerability due to an integer signedness error in the DCCP path (do_dccp_getsockopt) affecting Linux kernels 2.6.20 and later. The flaw allows a local user to read kernel memory or trigger a denial of service via a negative optlen. This is confirmed by Red Hat CV...

6.6CVSS5.7AI score0.00773EPSS
Save
CVE
CVE
added 2007/08/13 7:00 p.m.91 views

CVE-2007-3851

CVE-2007-3851 affects the Linux kernel’s i915 DRM path on Intel 965-era chipsets. The flaw lets a local user with access to an X11 session and DRM write to arbitrary memory via a crafted batchbuffer, enabling privilege escalation. The issue is tied to the DRM/i915 driver before kernel 2.6.22.2. P...

6CVSS6AI score0.00313EPSS
Save
CVE
CVE
added 2009/02/27 5:00 p.m.91 views

CVE-2009-0746

The CVE-2009-0746 entry concerns the Linux kernel ext4 code: make_indexed_dir in fs/ext4/namei.c fails to validate a rec_len field, allowing a local attacker to trigger a denial of service (OOPS) by mounting a crafted ext4 filesystem. Affected is kernel 2.6.27 up to 2.6.27.19 and 2.6.28 up to 2.6...

4.9CVSS6.7AI score0.0075EPSS
Save
CVE
CVE
added 2010/02/15 6:00 p.m.91 views

CVE-2010-0623

The CVE-2010-0623 issue affects the Linux kernel versions prior to 2.6.33-rc7, where futex_lock_pi in kernel/futex.c mishandles a reference count. This allows local users to trigger a denial of service (OOPS) by exploiting an unmount of an ext3 filesystem. The SUSE entry confirms the same descrip...

4.9CVSS6.2AI score0.00404EPSS
Save
CVE
CVE
added 2010/12/29 5:27 p.m.91 views

CVE-2010-4343

CVE-2010-4343 affects the Linux kernel, where drivers/scsi/bfa/bfa_core.c may fail to initialize a port data structure in fc_host, enabling a local user to crash the system by reading the fc_host statistics file. This is fixed in kernel versions starting with 2.6.35 (i.e., patched in 2.6.35+). Ev...

5.5CVSS4.9AI score0.00391EPSS
Save
CVE
CVE
added 2011/07/28 10:00 p.m.91 views

CVE-2011-2695

CVE-2011-2695 involves multiple off-by-one errors in the Linux kernel ext4 subsystem (before 3.0-rc5). Local users can cause a denial of service (BUG_ON and system crash) by performing a write operation to a sparse file in extent format where the block number equals the maximum 32-bit unsigned va...

4.9CVSS6.7AI score0.00451EPSS
Save
CVE
CVE
added 2013/03/14 8:00 p.m.91 views

CVE-2012-6541

The CVE-2012-6541 flaw affects the Linux kernel prior to version 3.6. The vulnerability resides in ccid3_hc_tx_getsockopt within net/dccp/ccids/ccid3.c, where an internal structure is not initialized, enabling local attackers to read sensitive information from kernel stack memory via a crafted ap...

1.9CVSS6.1AI score0.00354EPSS
Save
CVE
CVE
added 2013/02/28 7:00 p.m.91 views

CVE-2013-1772

CVE-2013-1772 affects the Linux kernel 3.x prior to 3.4.33. The vulnerability stems from the log_prefix function in kernel/printk.c, which fails to correctly remove a prefix from the syslog header, enabling a local attacker with /dev/kmsg write access to trigger call_console_drivers and cause a d...

4CVSS6.1AI score0.00377EPSS
Save
CVE
CVE
added 2013/11/12 1:00 a.m.91 views

CVE-2013-4513

Buffer overflow in the oz_cdev_write function of drivers/staging/ozwpan/ozcdev.c in the Linux kernel before 3.12 allows local users to cause a denial of service or possibly other impact via a crafted write. A fix is provided by Linux kernel 3.12+ (patches referenced in the linked advisory), so up...

4.9CVSS8.6AI score0.00507EPSS
Save
CVE
CVE
added 2016/07/11 1:00 a.m.91 views

CVE-2016-2068

The CVE-2016-2068 issue affects the MSM QDSP6 (sound) driver in the Linux kernel 3.x, used in Qualcomm QuIC Android contributions. The vulnerability arises in the driver when handling AUDIO_EFFECTS_WRITE (or AUDIO_EFFECTS_READ) operations, due to integer overflow and potential buffer overflow or ...

7.8CVSS7.6AI score0.00739EPSS
Save
CVE
CVE
added 2017/06/28 6:00 a.m.91 views

CVE-2017-9986

The CVE-2017-9986 issue affects the Linux kernel’s sound/oss/msnd_pinnacle.c: the intr function is vulnerable to a double-fetch scenario when the message queue head pointer is read between two kernel reads, up to kernel versions through 4.11.7. This local condition allows a unprivileged user to c...

7.8CVSS7.6AI score0.00362EPSS
Save
Total number of security vulnerabilities14999