14998 matches found
CVE-2022-49048
CVE-2022-49048 : In the Linux kernel, a panic was reported in ip6_forward() when the input interface has no in6 dev, which has been fixed. The description/refs indicate the issue arises during IPv6 forwarding and can trigger a kernel panic; reproduction used tc qdisc commands on vxlan100. The con...
CVE-2022-49146
The CVE-2022-49146 entry describes a Linux kernel issue in virtio handling where drivers bypass the enable_cbs callback during virtio_device_restore(), causing suspend-resume traces and potential interrupt handling problems. The root cause is failure to call virtio_device_ready() in restore, so i...
CVE-2022-49198
CVE-2022-49198 targets the Linux kernel’s mptcp path. According to multiple sources, the vulnerability stems from a race in __mptcp_alloc_tx_skb where skb->tcp_tsorted_anchor is initialized before the skb release path under memory pressure, causing kfree_skb to release the destination twice an...
CVE-2022-49452
The CVE-2022-49452 issue concerns the Linux kernel DPAA2 Ethernet driver (dpaa2-eth). The vulnerability arises when the virtual address is retrieved after DMA unmapped in TSO path, leading to an invalid address being used in kfree. A fix was implemented to call dpaa2_iova_to_virt() before the dma...
CVE-2022-49461
CVE-2022-49461 concerns the Linux kernel where the gateway’s handling of an advertising message fails to free relay information after extraction, causing a memory leak. The root cause is in the advertisement handler not freeing allocated relay data, leading to local memory exhaustion. Multiple co...
CVE-2022-49654
CVE-2022-49654 pertains to the Linux kernel, specifically the net: dsa: qca8k component. The issue occurs when MAX_FRAME_SIZE (MTU) is changed while the CPU port is enabled, causing the switch to panic and stop sending packets, which can render the device unreachable; a switch reset may be requir...
CVE-2022-49884
CVE-2022-49884 relates to Linux kernel KVM: gfn_to_pfn_cache lock initialization, which was moved to a dedicated helper during VM/vCPU creation to address race conditions that could occur if kvm_gfn_to_pfn_cache_init() re-initializes locks. The description includes a race scenario involving kvm_x...
CVE-2022-49896
CVE-2022-49896 relates to the Linux kernel’s cxl/pmem subsystem. The issue: when a cxl_nvdimm object is removed, associated regions were not consistently disabled, because the driver tracked only one region per nvdimm device. This could leak regions and cause cxl_memdev reference leaks. The vulne...
CVE-2022-50005
The CVE-2022-50005 issue concerns Linux kernel NFC code for pn533 devices. The root cause is a use-after-free caused by a timer (cmd_timeout) not being canceled during pn532_uart_remove(), allowing a concurrent use path to dereference freed memory. The fix adds del_timer_sync() in pn532_uart_remo...
CVE-2022-50059
CVE-2022-50059 is documented as a Linux kernel vulnerability affecting the Ceph integration: when handle_cap_grant is called on an IMPORT operation, the snap_rwsem is held and not reliably released, which could lead to a deadlock. The issue is described across multiple vendor advisories (EulerOS,...
CVE-2022-50123
CVE-2022-50123 affects the Linux kernel ASoC Mediatek mt8173 stack (mt8173_rt5650_rt5676_dev_probe). Root cause: of_parse_phandle() returns a node pointer with an incremented refcount and missing of_node_put() in error paths, leading to a potential refcount leak. The connected advisories document...
CVE-2022-50155
CVE-2022-50155 concerns the Linux kernel MTDi parsing code: a refcount leak in bcm4908_partitions_fw_offset was fixed by ensuring of_node_put() is called after of_find_node_by_path() returns a node. The vulnerability affects the kernel component responsible for partition parsing (mtd: parsers: of...
CVE-2022-50183
Summary: CVE-2022-50183 affects the Linux kernel’s DRM Meson encoder_cvbs path. The issue is a refcount leak in the initialization flow of meson_encoder_cvbs_init, caused by not calling of_node_put() on the remote node obtained via of_graph_get_remote_node(). This leads to a local leak in the ref...
CVE-2022-50189
CVE-2022-50189 relates to a Linux kernel turbostat issue where a FILE pointer leak occurs if fscanf fails, causing an open file pointer to be leaked on an early return. The fix closes the file before returning (turbostat.c:2039) to remediate the resource leak. Affected component: Linux kernel tur...
CVE-2022-50199
Mode C: The CVE-2022-50199 issue affects the Linux kernel on ARM (OMAP2+). The root cause is a refcount leak in omapdss_init_of: omapdss_find_dss_of_node() calls of_find_compatible_node() which returns a node with a refcount incremented, but of_node_put() is not always called. The fix adds missin...
CVE-2022-50204
CVE-2022-50204 concerns a Linux kernel issue affecting ARM OMAP2+ where pdata-quirks leaked a refcount in pdata_quirks_init_clocks due to a missing of_node_put() after using of_find_node_by_name() in a loop. The vulnerability is mitigated by a kernel fix that corrects the refcount handling, preve...
CVE-2023-52909
CVE-2023-52909 affects the Linux kernel NFSD, specifically the nfsd4_open codepath and cached open file handling. The issue arises from a race where a newly created nfsd_file can have its nf_file pointer cleared while hashing, leading to oops if nf_file is NULL, and from a hash-lookup scenario wh...
CVE-2023-52914
The CVE-2023-52914 entry concerns a Linux kernel issue in the io_uring/poll path. The vulnerability arises when a ready poll request cannot complete inline, so a hash is not added, which can lead to loss of access to the poll request and a subsequent request leak, potentially stalling the ring ex...
CVE-2024-37026
CVE-2024-37026 is a Linux kernel vulnerability affecting the DRM/xe path: the GuC context scheduling queue can deadlock when a migration job is queued behind a fault due to shared engines with user jobs. The issue arises because the migrate exec queue could be serviced behind non-reserved BCS ins...
CVE-2024-41052
CVE-2024-41052 : In the Linux kernel, the VFIO PCI subsystem misused an uninitialized local variable named count during collection of hot-reset devices, causing device-counting mistakes and possible userspace crashes when invoking the hot‑reset info path. The issue has been resolved by initializi...
CVE-2024-43815
CVE-2024-43815 affects the Linux kernel crypto/mxs-dcp path. The vulnerability could leak stack memory via the AES payload field when using a hardware key from a key slot; the fix sets the payload field to 0 in these cases. The common path, where the key comes from main memory via the descriptor ...
CVE-2025-21777
CVE-2025-21777 affects the Linux kernel ring-buffer metadata validation. The vulnerability stems from the subbuf index array (reader page and subbuffer order) potentially containing duplicates, which the validator did not check. If duplicates exist on the writer side, the ring buffer link list co...
CVE-2025-37939
CVE-2025-37939 affects the Linux kernel in the libbpf component, specifically the BTF.ext core_relo header handling. The issue arises when btf_ext_parse_info() reads fields of the core_relo header without confirming its presence, potentially triggering a buffer read overflow as reported by OSS-Fu...
CVE-2025-38175
The CVE-2025-38175 entry concerns a use-after-free in the Linux kernel binder subsystem (binder_devices) that could occur when a binder device is released without first being removed from the binder_devices list. The Astra Linux bulletin documents the root cause in binder_remove_device within bin...
CVE-2025-38205
The CVE CVE-2025-38205 affects the Linux kernel’s DRM AMD display path. The root cause is a divide-by-zero risk in downstream code caused by uninitialized dummy pitch values in populate_dummy_dml_surface_cfg(); the fix initializes the dummy pitch to 1 to prevent division by zero in CalculateVMAnd...
CVE-2025-38270
CVE-2025-38270: In the Linux kernel, netdevsim with netpoll could trigger a napi_complete-related issue if napi_complete() is called from netpoll. The fix disables napi_complete() in netpoll paths for netdevsim to prevent premature SCHED state handling, addressing a warning observed in napi_compl...
CVE-2025-38274
The CVE-2025-38274 issue affects the Linux kernel FPGA subsystem, specifically fpga_mgr_test_img_load_sgt(). The root cause was an allocation of sgt with kunit_kzalloc() without verifying success; later __sg_alloc_table() called memset() on sgt, causing a NULL pointer dereference if allocation fa...
CVE-2025-38284
CVE-2025-38284 affects the Linux kernel wifi driver rtW89 via PCI config DAC handling. The issue: 36-bit DMA support depends on a chip‑proprietary bit accessible through PCI config API or DBI; when mmap is NULL, a page fault occurs and the kernel trace shows a BUG in rtw89_pci_ops_write16 leading...
CVE-2025-38330
CVE-2025-38330 affects the Linux kernel, specifically a KUnit test path in firmware: cs_dsp_ctl_cache_init_multiple_offsets that could trigger an out-of-bounds read. root cause: mock_coeff_template.length_bytes used for register value allocations, later overridden to 8 bytes, causing incorrect te...
CVE-2025-38590
CVE-2025-38590: In the Linux kernel mlx5e IPsec offload path, if the decrypted xfrm state is not found, the secpath on the skb may remain and be dereferenced by __xfrm_policy_check(), causing a crash. The documented fix explicitly removes the skb secpath when the xfrm state lookup fails after har...
CVE-2025-71120
CVE-2025-71120 affects the Linux kernel SUNRPC svcauth_gss: gss_read_proxy_verf can dereference NULL when a zero-length gss_token is present. The issue occurs because code paths copy data from in_token->pages[0] unconditionally; the patch guards the initial memcpy to only run if length > 0,...
CVE-2026-23231
CVE-2026-23231 affects the Linux kernel nf_tables code. The root cause is a use-after-free in nf_tables_addchain(), where a new chain is published to a table via list_add_tail_rcu() before hooks are registered; on failure the error path frees the chain without an RCU grace period, creating use-af...
CVE-2026-46241
CVE-2026-46241 concerns the SPI driver for the MPC52xx in the Linux kernel, where a use-after-free can occur if controller registration fails because interrupts are not properly disabled and freed. The issue is resolved by a fix that ensures interrupts are disabled and resources freed on registra...
CVE-2026-46294
CVE-2026-46294 affects the Linux kernel device-mapper (dm-ioctl) in the retrieve_status path. A buffer-overflow could occur after aligning a pointer to an 8-byte boundary if the remaining length calculation wraps past the output buffer, potentially allowing writes beyond the buffer. The advisory ...
CVE-2026-52976
The CVE-2026-52976 issue affects the Linux kernel drm/xe driver. Two error-handling paths in xe_exec_queue_create_ioctl() can lead to memory corruption: (1) on xe_hw_engine_group_add_exec_queue() failure, the cleanup jumps to cleanup without xe_exec_queue_kill(), potentially leaving a queue in th...
CVE-2026-53243
CVE-2026-53243 affects the Linux kernel component related to RSEQ (rseq_exit_user_update). The issue is an uninitialized stack variable used in the initialization of the struct rseq_ids, where ids.node_id is derived from ids.cpu_id before it is initialized, enabling potential information leakage....
CVE-1999-0720
The set of connected records confirms a Linux-specific vulnerability in the pt_chown utility: local attackers can modify TTY terminal devices that belong to other users, indicating a local privilege/permission misuse at the device level. The description across sources is consistent (pt_chown affe...
CVE-2004-0415
The CVE-2004-0415 issue affects the Linux kernel where 64-bit file offset pointers are not reliably converted to 32 bits, enabling a local unprivileged user to access portions of kernel memory. An attacker can leverage this through file I/O paths that manipulate 32/64-bit offset conversions, pote...
CVE-2005-0530
CVE-2005-0530 is a signedness error in the copy_from_read_buf function in n_tty.c of the Linux kernel (affected: 2.6.10 and 2.6.11rc1) that allows local users to read kernel memory via a negative argument. The vulnerability is documented across multiple advisories, including Red Hat (RHSA-2005:36...
CVE-2005-1265
CVE-2005-1265 relates to the mmap weakness in Linux kernel 2.6.x (notably around 2.6.10) that allows a local attacker to create memory maps starting beyond the end address, causing a kernel crash (denial of service) and potentially enabling arbitrary code execution. Connected advisories confirm t...
CVE-2005-4618
CVE-2005-4618 corresponds to a Linux kernel local-denial-of-service issue caused by a buffer overflow in sysctl writes. Affected are Linux kernel 2.6.x before 2.6.15; exploitation could corrupt user memory or cause a denial of service via a long string, with the caveat that the vulnerability may ...
CVE-2006-0741
CVE-2006-0741 affects the Linux kernel before 2.6.15.5 on Intel EM64T/Intel processors. The issue enables a local denial of service via an endlessly recursive fault caused by a bad ELF entry address. The vulnerability is exploited locally (no authentication required). The documented fixes indicat...
CVE-2006-1855
The CVE-2006-1855 case concerns Linux kernel code (choose_new_parent) containing obsolete debugging paths that can be exploited locally to cause a kernel panic/Denial of Service. The vulnerability is described as a local issue in the kernel prior to a fixed release (notably reflected across multi...
CVE-2007-3513
CVE-2007-3513 : In the Linux kernel, the lcd_write function in drivers/usb/misc/usblcd.c does not limit memory used by a caller, allowing a local user to exhaust memory and cause a denial of service. Affected until 2.6.22-rc7; remediation is upgrading to 2.6.22-rc7 or later where the issue is fix...
CVE-2009-2287
CVE-2009-2287 affects the Linux kernel’s KVM on x86, where KVM_SET_SREGS does not validate the page-table root (cr3). This can allow a local attacker to crash or hang the host (denial of service) via a crafted cr3 value, triggering a NULL pointer dereference in gfn_to_rmap. The issue is documente...
CVE-2009-2768
The vulnerability CVE-2009-2768 affects the Linux kernel flat subsystem (fs/binfmt_flat.c: load_flat_shared_library). It allows local users to trigger a NULL pointer dereference by executing a shared flat binary, potentially causing a denial of service and system crash, via an uninitialized cred ...
CVE-2011-2493
The CVE-2011-2493 entry affects the Linux kernel, specifically the ext4_fill_super function in fs/ext4/super.c, with vulnerability present in versions prior to 2.6.39. The issue arises from improper initialization of an error-report data structure, enabling local users to cause a denial of servic...
CVE-2013-2546
CVE-2013-2546 concerns the Linux kernel 3.8.2 era: the crypto report API in the crypto user configuration API uses an incorrect string-copy function, enabling a local attacker with CAP_NET_ADMIN to leak information from kernel stack memory. The vulnerability is scoped to the report API in the ker...
CVE-2013-6763
CVE-2013-6763 : The Linux kernel function uio_mmap_physical (drivers/uio/uio.c) is vulnerable in all versions before 3.12 due to missing validation of the mmaped memory block size. This can enable local users to trigger memory corruption and potentially gain privileges through crafted mmap operat...