CVE-2001-1244

Technical details such as affected products, versions, and root cause are not publicly provided in the connected documents. Monitor CVE-2001-1244 updates for concrete details.

CVE-2001-1392

The supplied documents confirm CVE-2001-1392 affects the Linux kernel prior to 2.2.19, due to missing unregister calls for CPUID and MSR drivers, which could crash the system on unloading/loading (local DoS). Remediation is to upgrade to kernel 2.2.19 or later (as noted in Mandrake/Debian/NVD ref...

CVE-2001-1398

The CVE-2001-1398 issue affects the Linux kernel prior to 2.2.19, arising from the masquerading code where packet length checks were lax, potentially enabling kernel memory writes via the CPIA driver off-by-one bug. Confirmed in multiple advisories (Mandrake MDKSA-2001:037 and Debian/Debian DSA-0...

CVE-2003-0956

CVE-2003-0956 describes race conditions in the Linux kernel’s O_DIRECT handling prior to 2.4.22. Affected component: kernel I/O path for direct I/O (O_DIRECT) on 2.4.x. Impact: local users could read data from previously deleted files or see data during reads of truncated files, potentially expos...

CVE-2004-0812

CVE-2004-0812 describes a local privilege/denial-of-service issue in the Linux kernel before 2.4.23 on AMD64 and Intel EM64T architectures, related to how TSS limits are set up. The vulnerability could allow a local user to crash the system and, in some scenarios, potentially execute arbitrary co...

CVE-2004-1151

CVE-2004-1151 involves multiple buffer overflows in the Linux 2.6.x kernel, specifically in sys32_ni_syscall() and sys32_vm86_warning() within sys_ia32.c. Exploitation could allow a local attacker to modify kernel memory and escalate privileges (root). Several advisories confirm affected kernels ...

CVE-2005-2098

The CVE-2005-2098 issue affects the Linux 2.6 kernel up to but before 2.6.12.5, where the KEYCTL_JOIN_SESSION_KEYRING error path fails to release the session management semaphore. This can allow local users or remote attackers to cause a denial of service (semaphore hang) by creating a new sessio...

CVE-2005-4886

The CVE-2005-4886 entry concerns the Linux kernel prior to 2.6.12-rc4, where the selinux_parse_skb_ipv6 function in security/selinux/hooks.c can be triggered by an incorrect call to ipv6_skip_exthdr, enabling remote attackers to cause a denial of service (OOPS). Connected advisories (RHSA-2005:51...

CVE-2006-0454

The CVE-2006-0454 issue affects the Linux kernel (2.6.x) where icmp_send mishandles failures in ip_options_echo, enabling remote attackers to crash the host via crafted ICMP options (record-route, timestamp with needaddr and truncated value). Public advisories from SUSE, Red Hat, Fedora, Ubuntu d...

CVE-2006-5331

CVE-2006-5331 affects the Linux kernel on 64-bit PowerPC systems. The altivec_unavailable_exception function mishandles the path where CONFIG_ALTIVEC is defined and the CPU supports Altivec, but Altivec support was not detected by the kernel, enabling a local user to trigger an Altivec instructio...

CVE-2007-4311

The CVE-2007-4311 issue affects the Linux kernel random driver (drivers/char/random.c) where reseed operations reuse only the first bytes of a buffer due to incorrect use of sizeof, reducing entropy and potentially making RNG output more predictable. It is described for Linux 2.4.x builds prior t...

CVE-2007-4774

CVE-2007-4774 concerns the Linux kernel prior to 2.4.36-rc1, where a race condition can bypass systrace policies by flooding a ptraced process with SIGCONT signals, potentially waking a PTRACED process. The documentation consistently describes this as a policy bypass rather than a broader impact ...

CVE-2007-6733

CVE-2007-6733 affects the Linux kernel 2.6.9, where the nfs_lock function in fs/nfs/file.c fails to properly remove POSIX locks on files that are setgid without group-execute permission. This can allow local users to cause a denial of service (BUG and system crash) by locking a file on an NFS fil...

CVE-2010-5329

The CVE-2010-5329 issue affects Linux kernels (video_usercopy in drivers/media/video/v4l2-ioctl.c) before 2.6.39. The flaw is that it relies on the count value of a v4l2_ext_controls data structure to determine a kmalloc size, which could allow local users to trigger memory exhaustion (DoS). The ...

CVE-2011-2211

CVE-2011-2211 concerns the Linux kernel on the Alpha architecture. The vulnerability lies in the osf_wait4 function (arch/alpha/kernel/osf_sys.c), where an incorrect pointer is used in versions prior to 2.6.39.4. This can allow local users to gain elevated privileges by writing a specific integer...

CVE-2012-6536

CVE-2012-6536 affects the Linux kernel (up to version 3.6) in net/xfrm/xfrm_user.c. The vulnerability stems from not verifying that the Netlink message length matches a header field, enabling local users with CAP_NET_ADMIN to read sensitive kernel heap memory by supplying a (1) new or (2) updated...

CVE-2013-3237

CVE-2013-3237 affects the Linux kernel’s vsock_stream_sendmsg in net/vmw_vsock/af_vsock.c, where a length variable is not initialized prior to use. This can allow local users to read sensitive data from kernel stack memory via crafted recvmsg/recvfrom syscalls. The issue is linked to the kernel v...

CVE-2013-4129

The CVE-2013-4129 issue affects the Linux kernel up to version 3.10.3, in the bridge multicast code (net/bridge/br_mdb.c and net/bridge/br_multicast.c). The underlying flaw is a timer state check: a timer’s timeout value can be modified without confirming whether the timer is armed, enabling a lo...

CVE-2013-4220

The CVE-2013-4220 entry concerns the Linux kernel (ARM64) and the bad_mode handler in arch/arm64/kernel/traps.c. The vulnerability arises when a local user triggers a register access path that yields an unexpected ESR value, enabling a Denial of Service via a system crash on affected ARM64 kernel...

CVE-2016-10154

CVE-2016-10154 affects Linux kernel 4.9.x prior to 4.9.1. The smbhash function in fs/cifs/smbencrypt.c interacts incorrectly with CONFIG_VMAP_STACK, enabling local users to trigger a denial of service (system crash or memory corruption) or other unspecified impacts by exploiting use of more than ...

CVE-2016-6775

Summary: CVE-2016-6775 is a vulnerability in the NVIDIA Tegra kernel driver (NVMAP) where referencing memory after it has been freed may lead to a denial of service or a local privilege escalation. The issue arises from a use-after-free condition in the NVMAP memory handling, enabling a local att...

CVE-2017-0448

CVE-2017-0448 is an information-disclosure vulnerability in the NVIDIA Tegra NVHOST kernel driver. The root cause is a memory handling flaw (use-after-free/memory after free) that can allow a local attacker to access data outside the process permissions. Affected stack: Android devices using Kern...

CVE-2017-0451

CVE-2017-0451 describes an information-disclosure vulnerability in the Qualcomm sound driver on Android. The issue enables a local malicious application to access data outside its granted permissions after compromising a privileged process. Affected components include Android kernels around 3.10 ...

CVE-2017-0455

CVE-2017-0455 is an information-disclosure vulnerability in the Qualcomm bootloader that could allow a local malicious app to execute arbitrary code within the bootloader context on affected Android devices (Kernel 3.18). CNVD/OSV entries tie it to Google Pixel devices (Pixel/Pixel XL); Nessus no...

CVE-2017-0461

CVE-2017-0461 is an information-disclosure vulnerability in the Qualcomm Wi‑Fi driver affecting Android (kernel 3.10/3.18). The issue could allow a locally malicious app to access data outside its permissions, because exploitation requires compromising a privileged process. The connected document...

CVE-2017-0462

CVE-2017-0462 describes an elevation-of-privilege vulnerability in the Qualcomm Seemp driver that could allow a local malicious Android application to execute arbitrary code in the kernel context. Affected product is Android with Kernel-3.18; Android ID A-33353601. The base impact is high, requir...

CVE-2017-0465

CVE-2017-0465 describes an elevation of privilege vulnerability in the Qualcomm ADSPRPC driver that could allow a local attacker to execute arbitrary code in the kernel context on Android devices. Affected components/versions in the public records include the Android kernel (Kernel-3.10, Kernel-3...

CVE-2017-0534

CVE-2017-0534 describes an information disclosure in the Qualcomm video driver for Android, enabling a local malicious application to access data outside its permission levels. Connected CNVD/NVD entries reiterate the issue and affected component (Qualcomm video driver) but do not provide explici...

CVE-2017-0570

CVE-2017-0570 concerns a local elevation-of-privilege flaw in the Broadcom Wi‑Fi driver used by Android. The connected Seebug entry details a heap overflow in the wl_iw_get_essid ioctl path (SIOCGIWESSID): the driver allocates a 33-byte extras buffer and copies ssid.SSID_len bytes from the dongle...

CVE-2017-0575

An elevation of privilege vulnerability exists in the Qualcomm Wi‑Fi driver on Android. CVE-2017-0575 can allow a local attacker to execute arbitrary code in the kernel context after compromising a privileged process. Affected products/versions include Android with the kernel versions 3.10 and 3....

CVE-2017-13686

The CVE-2017-13686 entry concerns Linux kernel versions 4.13-rc1 through 4.13-rc6, where net/ipv4/route.c does not correctly check the fi field when RTM_F_FIB_MATCH is set. This can allow a local attacker to trigger a NULL pointer dereference (denial of service) or potentially other unspecified i...

CVE-2022-48871

In CVE-2022-48871, the Linux kernel fix targets tty: serial: qcom-geni-serial slab-out-of-bounds on the RX FIFO buffer. The probe allocates port->rx_fifo using a default depth (e.g., 16); during serial startup, port->rx_fifo_depth is updated to match device capabilities (e.g., 32). The RX U...

CVE-2022-48940

CVE-2022-48940 affects the Linux kernel’s BPF map handling. When a map value contains both bpf_spin_lock and bpf_timer, copy_map_value fails to set both s_off and t_off, allowing an overwrite and a user-memory crash during copy/updates (as illustrated by the kernel BUG/KASAN trace in the descript...

CVE-2022-49745

The CVE-2022-49745 issue relates to the Linux kernel, specifically the fpga: m10bmc-sec component. The vulnerability centers on improper handling of probe error rollbacks, with the fix designed to prevent leaks during probe rollback paths. Public documents confirm the issue was resolved by addres...

CVE-2022-49838

In CVE-2022-49838, the Linux kernel SCTP code was fixed to clear out_curr when all fragments of the current message are pruned, preventing a NULL pointer dereference during dequeue. The issue manifested as list_del corruption and a crash traced through sctp_sched_fcfs_dequeue and related SCTP pat...

CVE-2022-49847

CVE-2022-49847 concerns a segmentation fault in the Linux kernel's ti_am65 cpsw Ethernet driver (am65_cpsw_nuss) during module removal. The fix changes the cleanup sequence: am65_cpsw_nuss_phylink_cleanup() is moved to run after am65_cpsw_nuss_cleanup_ndev(), ensuring phylink remains valid while ...

CVE-2022-49851

CVE-2022-49851 — Linux kernel (RISC-V) reserved memory setup Vulnerability context: The issue arises in how RISC-V sets up reserved memory using the early device-tree copy. The pointer to reserved memory regions can be an early, pre-virtual-memory address when accessed via of_reserved_mem_lookup(...

CVE-2022-49883

CVE-2022-49883 is a Linux kernel KVM x86 vulnerability related to SMM handling. The issue arises because the number of general purpose registers (GPRs) used for the SMRAM image depends on the image format. On 64‑bit hosts, if the guest lacks X86_FEATURE_LM, KVM may access 16 GPRs for a 32‑bit SMR...

CVE-2023-20716

CVE-2023-20716 concerns the wlan component in MediaTek chips, where an out-of-bounds write occurs due to a missing bounds check in the WLAN driver. This can lead to local escalation of privileges with System execution rights, and no user interaction is required. Reported patch: ALPS07796883 (Issu...

CVE-2023-52684

CVE-2023-52684 affects the Linux kernel’s Qualcomm QSEE communication driver (qseecom). The issue involves memory leaks in error paths where memory allocated for SCM calls could fail to be freed. The root cause was returning error codes directly instead of jumping to the cleanup labels that relea...

CVE-2024-38626

CVE-2024-38626 affects the Linux kernel’s FUSE subsystem (fs/fuse/dev.c). The issue arises from not clearing the FR_SENT flag when re-adding requests from the processing list to the pending list after a FUSE_NOTIFY_RESEND, which can cause a use-after‑read scenario and trigger a warning in fuse_re...

CVE-2024-57877

The CVE is a Linux kernel arm64 flaw in ptrace NT_ARM_POE handling (poe_set): a temporary ctrl value is not initialized, so a zero-length SETREGSET can write an uninitialized value into target->thread.por_el0, potentially leaking up to 64 bits from the kernel stack. The patch fixes this by ini...

CVE-2024-57987

CVE-2024-57987 is a Linux kernel Bluetooth vulnerability in the btrtl driver. When inserting a USB dongle whose Realtek chip isn’t in ic_id_table, a NULL dereference could trigger a kernel oops. The fix adds a NULL check in btrtl_setup_realtek() to prevent the NULL pointer access. Affected: Linux...

CVE-2024-57995

CVE-2024-57995 affects the Linux kernel’s wifi ath12k driver. In ath12k_mac_assign_vif_to_vdev(), if arvif is created on a different radio it is later freed via ath12k_mac_unassign_link_vif(), and a subsequent check on arvif could read freed memory (read-after-free). The fix relocates the check t...

CVE-2025-21769

CVE-2025-21769 affects the Linux kernel: the vmclock misc device lacked the .owner field, allowing a module unload while /dev/vmclock0 is open and causing an oops. The fix adds the .owner field to vmclock_miscdev_fops to prevent unloading during access. Public references indicate the vulnerabilit...

CVE-2025-21813

CVE-2025-21813 affects the Linux kernel timers/migration code. The root cause is an off-by-one mis-count during the migration of the top CPU group to a new root, where the old root is pre-accounted as a child of the new root. After attaching the upcoming CPU’s top group, the expected children cou...

CVE-2025-21933

CVE-2025-21933: In the Linux kernel (ARM), a NULL pointer dereference can occur in pgtable when update_mmu_cache_range() is invoked with a NULL vmf, causing a NULL dereference in adjust_pte(). The issue is triggered by how PTE locks are acquired; the fix changes the lock decision to be based on w...

CVE-2025-21942

CVE-2025-21942 affects the Linux kernel btrfs zoned code. A hang can occur in cow_file_range() when unlocking extents if there is no active zone finish path or after partial allocations, due to unlock code being moved outside the loop by a commit. The fix sets the end to the end of the allocated ...

CVE-2025-38021

CVE-2025-38021 affects the Linux kernel in the DRM AMD Display path (drm/amd/display), where update_dchubp_dpp and related code could dereference a null pipe_ctx->plane_state. The issue is a missing null check in the update path that could lead to a null pointer dereference; it is stated to be...

CVE-2025-38408

CVE-2025-38408 pertains to the Linux kernel’s genirq/irq_sim component. The issue arises from improper initialization of the simulation work context pointers in the ops structure, where pointers were allocated with kmalloc() and could contain random content, risking invalid dereferencing. The doc...