CVE-2017-11176

CVE-2017-11176 is a local vulnerability in the Linux kernel’s Netlink mq_notify path. The issue arises because mq_notify does not set the sock pointer to NULL when entering retry logic, enabling a use-after-free scenario during a user-space close of a Netlink socket. Public sources describe poten...

CVE-2019-7222

The CVE-2019-7222 issue affects the KVM component of the Linux kernel up to version 4.20.5, where a vulnerability allowed information leakage by exposing uninitialized kernel stack contents to a guest. Connected documents explicitly refer to “KVM: leak of uninitialized stack contents to guest (CV...

CVE-2022-1158

The CVE-2022-1158 issue affects Linux kernel KVM: updating a guest page table entry can use vm_pgoff as the offset to the page frame number, and since vaddr and vm_pgoff are user-controlled, an unprivileged host user could write outside the guest’s region and potentially corrupt the kernel, causi...

CVE-2021-29647

CVE-2021-29647 affects the Linux kernel (qrtr_recvmsg in net/qrtr/qrtr.c). The issue is an information disclosure via a partially uninitialized data structure, enabling a local attacker to read kernel memory. Root cause: partially uninitialized data in QRTR IPC router handling. Public references ...

CVE-2023-2156

CVE-2023-2156 is a Linux kernel networking flaw in the RPL protocol handling that stems from improper processing of user-supplied data. The description in the initial document states that an unauthenticated remote attacker could cause a denial of service by triggering an assertion failure. Connec...

CVE-2018-10323

CVE-2018-10323 relates to the Linux kernel where the function xfs_bmap_extents_to_btree in fs/xfs/libxfs/xfs_bmap.c can trigger a NULL pointer dereference in xfs_bmapi_write when processing crafted XFS images. The vulnerability affects kernels up to 4.16.3 and can lead to denial of service via lo...

CVE-2018-17182

Summary : CVE-2018-17182 is a Linux kernel use-after-free vulnerability in the vmacache subsystem. The root cause is that the function vmacache_flush_all mishandles sequence number overflows, allowing a local attacker to trigger a use-after-free via certain thread creation/map/unmap/invalidation/...

CVE-2019-18660

CVE-2019-18660 affects: Linux kernel on PowerPC. Summary: Information exposure due to Spectre-RSB mitigation not being active on all applicable CPUs, related to arch/powerpc/kernel/entry_64.S and arch/powerpc/kernel/security.c. Impact: potential partial leakage of sensitive data through side chan...

CVE-2020-28974

CVE-2020-28974 is a slab-out-of-bounds read in the Linux kernel’s fbcon driver, fixed in kernel 5.9.7. The flaw arises in KD_FONT_OP_COPY within drivers/tty/vt/vt.c and could allow a local attacker to read privileged kernel memory or cause a kernel crash. Several connected documents describe the ...

CVE-2022-2196

The CVE-2022-2196 entry concerns a regression in Linux kernel KVM/nVMX where speculative execution could leak from an L2 guest to the host L1 due to inadequate Spectre v2 mitigations (retpolines/IBPB/eIBRS context). The description states an L2 attacker with code execution can influence indirect ...

CVE-2010-3873

CVE-2010-3873 affects the Linux kernel X.25 implementation prior to 2.6.36.2. The vulnerability arises from improper parsing of facilities, allowing a remote attacker to trigger heap memory corruption and a kernel panic (partial availability) via malformed X25_FAC_CALLING_AE or X25_FAC_CALLED_AE ...

CVE-2016-1583

CVE-2016-1583 affects the Linux kernel: ecryptfs_privileged_open (fs/ecryptfs/kthread.c) allows a local attacker to gain privileges or cause a denial of service via crafted mmap calls for /proc pathnames, triggering recursive pagefault handling. Affects kernels prior to 4.6.3; patch released in 4...

CVE-2017-1000379

The CVE-2017-1000379 entry concerns the Linux kernel (AMD64) where the kernel may map PIE/heap/ld.so contents to the stack, enabling stack manipulation. Documents indicate affected version: Linux kernel 4.11.5. Nessus-derived items (Unity Linux UTSA advisories) reiterate the same description but ...

CVE-2019-19769

CVE-2019-19769 refers to a use-after-free (read) in the Linux kernel 5.3.10 within perf_trace_lock_acquire (related to include/trace/events/lock.h). The connected Nessus/OpenSUSE/SUSE advisories corroborate the same issue across multiple distributions and kernel bundles, but none of the provided ...

CVE-2019-13233

CVE-2019-13233 affects Linux kernel arch/x86/lib/insn-eval.c with a use-after-free in LDT entry access caused by a race between modify_ldt() and a #BR exception for an MPX bounds violation. F5 advisory notes the vulnerability in Linux kernel before 5.1.9 and cites the ChangeLog-5.1.9 as the fix. ...

CVE-2022-1012

CVE-2022-1012 affects the Linux kernel TCP source port generation (net/ipv4/tcp.c) due to a small table perturb size, enabling information leakage and potential denial of service. Multiple connected advisories reiterate the memory-leak flaw in the TCP source port algorithm and indicate a patched ...

CVE-2022-45934

The CVE-2022-45934 issue affects the Linux kernel up to version 6.0.10, in the Bluetooth subsystem’s l2cap_config_req function (net/bluetooth/l2cap_core.c) where an integer wraparound can occur via L2CAP_CONF_REQ packets. The available connected documents confirm the root cause as an integer wrap...

CVE-2023-31248

CVE-2023-31248 is a Linux kernel nf_tables (nftables) use-after-free vulnerability. The issue occurs in nf_tables when using nft_chain_lookup_byid, where a chain’s active state wasn’t properly checked, enabling a local attacker with CAP_NET_ADMIN in any user or network namespace to escalate privi...

CVE-2018-10853

CVE-2018-10853: A security flaw in the Linux kernel KVM hypervisor (pre-4.18) where emulation of certain unprivileged instructions (sgdt, sidt, fxsave, fxrstor) did not check CPL, potentially allowing an unprivileged guest process to escalate privileges inside the guest. The CVE is linked to comm...

CVE-2019-16231

CVE-2019-16231 affects Linux kernel 5.2.14 through a NULL pointer dereference caused by failing to check the return value of alloc_workqueue in drivers/net/fjes/fjes_main.c. The description specifies this root cause and the potential impact (remote kernel crash) but does not provide details on af...

CVE-2019-19067

Summary (CVE-2019-19067) Four memory leaks in the acp_hw_init() function of amdgpu/acp.c in the Linux kernel (before 5.3.8) can cause memory consumption and denial of service when mfd_add_hotplug_devices() or pm_genpd_add_device() fail. The issue is reported as exploitable by a local attacker wit...

CVE-2019-3874

CVE-2019-3874 concerns the SCTP socket buffer not being accounted by the cgroups subsystem, enabling a denial-of-service against affected systems. The vulnerability is described in Unity Linux advisories referencing kernel SCTP handling and states that “Kernel 3.10.x and 4.18.x branches are belie...

CVE-2021-4002

CVE-2021-4002 describes a memory-leak flaw in the Linux kernel hugetlbfs memory usage caused by mappings being created twice (via shmget) for regions aligned to PUD, enabling a local user to access data that should be protected. The connected documents confirm this vulnerability across multiple L...

CVE-2022-34918

CVE-2022-34918 affects the Linux kernel up to 5.18.9 in the Netfilter nf_tables subsystem. A type confusion in nft_set_elem_init can trigger a heap/buffer overflow in nft_set_elem_init, allowing a local attacker who already has an unprivileged user namespace to escalate to root by gaining CAP_NET...

CVE-2023-52449

The CVE refers to a Linux kernel issue where, if both ftl.ko and gluebi.ko are loaded, the ftl notifier may dereference gluebi->desc during gluebi_read(), causing a NULL pointer dereference in the MTD/UBI gluebi flow. Root cause described: gluebi_get_device() is not invoked early enough in the...

CVE-2020-12771

CVE-2020-12771 involves the Linux kernel component drivers/md/bcache/btree.c , where the function btree_gc_coalesce may deadlock if a coalescing operation fails. The connected Unity/Nessus entries reproduce: an issue in the kernel up to 5.6.11 with deadlock in the btree GC coalescing path, impact...

CVE-2024-0565

CVE-2024-0565 affects the Linux kernel CIFS (SMB) client: receive_encrypted_standard in fs/smb/client/smb2ops.c contains an out-of-bounds read caused by an integer underflow in memcpy length, leading to denial of service. Connected advisories consistently reference this CVE in kernel CIFS decrypt...

CVE-2021-43975

CVE-2021-43975 is described in connected material as a Linux kernel vulnerability up to version 5.15.2 where the hw_atl_utils_fw_rpc_wait() function in the aQuantia AQtion Ethernet driver (drivers/net/ethernet/aquantia/atlantic/hw_atl/hw_atl_utils.c) allows a local attacker who can introduce a cr...

CVE-2022-28356

CVE-2022-28356 is a Linux kernel vulnerability describing a refcount leak in net/llc/af_llc.c that affects kernels before 5.17.1. Connected docs confirm the issue and reference a fix in 5.17.1 (and advisories in Debian DSA 5127-1/DSA-5173-1, Astra/Linux bulletins). The CVSS v3.1 base score is 5.5...

CVE-2019-12380

CVE-2019-12380 is documented in multiple advisories referencing the Linux kernel EFI handling code. The connected sources specify that the vulnerability arises from how the EFI subsystem handles memory allocation failures in the x86 EFI path: phys_efi_set_virtual_address_map in arch/x86/platform/...

CVE-2019-3459

The CVE-2019-3459 entry concerns a heap address information leak in the Linux kernel, occurring before version 5.1-rc1 when using the L2CAP_GET_CONF_OPT path. Affected software is the Linux kernel (pre-5.1-rc1); the underlying issue is an information exposure vulnerability in this Bluetooth-relat...

CVE-2020-15436

The CVE-2020-15436 entry is confirmed by connected sources as a Linux kernel local-use-after-free vulnerability in fs/block_dev.c (pre-5.8). It enables a local attacker to gain elevated privileges or cause a denial of service by abusing improper access to a particular error field. The Linux kerne...

CVE-2022-28390

CVE-2022-28390 is a Linux kernel vulnerability: a double-free in ems_usb_start_xmit() implemented in drivers/net/can/usb/ems_usb.c, affecting kernels up to 5.17.1. Connected advisories (Astra Linux, ALMAS/AL2, Debian DSA) reference this CVE and include it among kernel fixes; they indicate patchin...

CVE-2021-45868

CVE-2021-45868: Linux kernel before 5.15.3 does not validate the on-disk quota_tree block number in quota_tree.c, which can lead to a use-after-free in kernel/locking/rwsem.c if a quota file is corrupted. Affected: Linux kernel up to 5.15.2 (and older) with quota support. Impact: potential kernel...

CVE-2022-1015

CVE-2022-1015: A local out-of-bounds write in Linux kernel nf_tables_api.c (netfilter/nf_tables) is reported. Connected Astra/Linux documents confirm the vulnerability and recommend updating to a later kernel version (e.g., via vendor/KMS updates) to mitigate. Exploitation details are not provide...

CVE-2019-15214

CVE-2019-15214 refers to a use-after-free in the Linux kernel sound subsystem (before 5.0.10), triggered when a card is disconnected and data structures are deleted too early. Affected components: sound/core/init.c and sound/core/info.c. Impact described in sources: local attacker could potential...

CVE-2019-19768

CVE-2019-19768 is a Linux kernel use-after-free in the blktrace debugging path (function __blk_add_trace in kernel/trace/blktrace.c) that can occur during removal of block devices. Public documents describe this as a local exploitation risk that could enable a denial of service or privilege escal...

CVE-2026-46316

A vulnerability in Linux kernel KVM for ARM64 (vgic-its) is resolved. The issue stemmed from vgic_its_invalidate_cache() traversing the per-ITS translation cache with xa_for_each() and dropping the cache’s reference on each entry using vgic_put_irq(), but it dropped the reference of the pointer r...

CVE-2022-36946

The CVE-2022-36946 issue affects nfqnl_mangle in net/netfilter/nfnetlink_queue.c of the Linux kernel (through 5.18.14). When nf_queue verdicts include a one-byte nfta_payload attribute, skb_pull can encounter a negative skb->len, enabling a remote attacker to trigger a denial of service (panic...

CVE-2023-1998

CVE-2023-1998 affects the Linux kernel. Root cause: when using legacy IBRS, the IBRS bit is cleared on returning to userspace, disabling implicit STIBP and leaving some spectre-BTI protections ineffective; attackers on a local machine could exploit cross-thread branch target injection despite mit...

CVE-2020-11565

CVE-2020-11565: Linux kernel through 5.6.2 contains a stack-based out-of-bounds write in mpol_parse_str (mm/mempolicy.c) when an empty nodelist is encountered during mount option parsing. Affected by a disclosed mitigation note (some security community members dispute it as a vulnerability). Conn...

CVE-2020-13974

CVE-2020-13974 affects the Linux kernel in drivers/tty/vt/keyboard.c, caused by a signed integer overflow in k_ascii when invoked repeatedly. Connected docs confirm impacted products include Linux kernel 4.4–5.7.1 and note potential local code execution risk (IBM bulletin and MSRC description) th...

CVE-2020-14390

CVE-2020-14390 affects the Linux kernel (pre-5.9-rc6). A change in screen size can trigger an out-of-bounds memory write, causing memory corruption or denial of service; the possibility of privilege escalation is not ruled out. Affected component is the kernel’s frame/ framebuffer-related handlin...

CVE-2020-25672

The CVE-2020-25672 entry refers to a memory-leak vulnerability in the Linux kernel NFC LLCP path (llcp_sock_connect). The issue is described as a memory leak in the NFC LLCP implementation, which can lead to resource exhaustion and denial of service when non-blocking socket operations trigger the...

CVE-2023-6240

CVE-2023-6240 is documented as a Marvin vulnerability side-channel leakage in the Linux kernel RSA decryption operation. The connected Nessus entries confirm this CVE is listed among multiple advisories, referencing the same vulnerability block and associating it with Linux Kernel RSA decryption ...

CVE-2019-20934

CVE-2019-20934 affects the Linux kernel prior to 5.2.6. On NUMA systems, the scheduler’s show_numa_stats() contains a use-after-free when freeing NUMA fault statistics, CID-16d51a590a8c. The vulnerability is acknowledged in vendor advisories (e.g., Unity Linux UTSA advisories referencing CVE-2019...

CVE-2022-41674

CVE-2022-41674 affects the Linux kernel (pre-5.19.16) and is triggered by injecting WLAN frames, causing a buffer overflow in ieee80211_bss_info_update() within net/mac80211/scan.c. Reported impact includes high confidentiality and high availability risk (I=None, A=High, C=High) with adjacent att...

CVE-2016-3672

CVE-2016-3672 affects the Linux kernel before 4.5.3 where arch_pick_mmap_layout in arch/x86/mm/mmap.c fails to properly randomize the legacy base address. This defeats ADDR_NO_RANDOMIZE protections and can bypass ASLR for setuid/setgid programs by disabling stack-consumption resource limits. Affe...

CVE-2018-1000199

The CVE-2018-1000199 entry concerns the Linux kernel (v3.18) where modify_user_hw_breakpoint() contains a ptrace-related handling flaw. This flaw can allow a local attacker to crash the kernel and, per other sources, may enable memory corruption or local code execution via ptrace. The issue is ro...

CVE-2018-1120

CVE-2018-1120 affects the Linux kernel prior to 4.17. By mmap()ing a FUSE-backed file into a process’s memory that contains command line arguments or environment strings, a local attacker can cause utilities that read /proc//cmdline or /proc//environ (e.g., ps, w) to block indefinitely or for a b...