CVE-2019-19769

CVE-2019-19769 refers to a use-after-free (read) in the Linux kernel 5.3.10 within perf_trace_lock_acquire (related to include/trace/events/lock.h). The connected Nessus/OpenSUSE/SUSE advisories corroborate the same issue across multiple distributions and kernel bundles, but none of the provided ...

CVE-2020-11565

CVE-2020-11565: Linux kernel through 5.6.2 contains a stack-based out-of-bounds write in mpol_parse_str (mm/mempolicy.c) when an empty nodelist is encountered during mount option parsing. Affected by a disclosed mitigation note (some security community members dispute it as a vulnerability). Conn...

CVE-2019-18660

CVE-2019-18660 affects: Linux kernel on PowerPC. Summary: Information exposure due to Spectre-RSB mitigation not being active on all applicable CPUs, related to arch/powerpc/kernel/entry_64.S and arch/powerpc/kernel/security.c. Impact: potential partial leakage of sensitive data through side chan...

CVE-2023-4273

CVE-2023-4273 affects the Linux kernel exFAT driver. The vulnerability arises from how file name reconstruction copies file name data into a stack variable, enabling a local privileged attacker to overflow the kernel stack. Connected advisories confirm real-world impact and list affected kernels;...

CVE-2023-6606

CVE-2023-6606 is an out-of-bounds read in smbCalcSize of the Linux kernel SMB client (fs/smb/client/netmisc.c). It allows a local attacker to crash the system or leak internal kernel information. Public advisories note fixes via kernel updates/livepatches (e.g., Amazon Linux 2 ALAS advisories and...

CVE-2024-0646

CVE-2024-0646 describes an out-of-bounds memory write in the Linux kernel’s Transport Layer Security path, occurring when a user calls a splice function with a ktls socket as the destination. The issue could allow a local user to crash the system or potentially escalate privileges. Connected advi...

CVE-2019-19065

CVE-2019-19065 corresponds to a memory leak in the Linux kernel’s sdma_init() (drivers/infiniband/hw/hfi1/sdma.c). The condition is triggered by rhashtable_init() failures during sdma_init(), leading to memory consumption and potential DoS. The root cause is that the call path invokes sdma_init()...

CVE-2019-3874

CVE-2019-3874 concerns the SCTP socket buffer not being accounted by the cgroups subsystem, enabling a denial-of-service against affected systems. The vulnerability is described in Unity Linux advisories referencing kernel SCTP handling and states that “Kernel 3.10.x and 4.18.x branches are belie...

CVE-2021-28971

The CVE-2021-28971 vulnerability affects the Linux kernel: specifically, intel_pmu_drain_pebs_nhm in arch/x86/events/intel/ds.c can mishandle PEBS status on Haswell-era CPUs, potentially causing a system crash when userspace tools (e.g., perf-fuzzer) access performance events. The issue exists in...

CVE-2021-3715

CVE-2021-3715 affects the Linux kernel Traffic Control routing classifier. The flaw is a use-after-free in route4_change() within net/sched/cls_route.c, triggered by changes to classification filters, enabling a local unprivileged user to escalate privileges. The issue is addressed by a kernel fi...

CVE-2019-15214

CVE-2019-15214 refers to a use-after-free in the Linux kernel sound subsystem (before 5.0.10), triggered when a card is disconnected and data structures are deleted too early. Affected components: sound/core/init.c and sound/core/info.c. Impact described in sources: local attacker could potential...

CVE-2019-19537

CVE-2019-19537 is a race condition in the Linux kernel USB stack (drivers/usb/core/file.c and related USB character device layer) triggered by a malicious USB device. The vulnerability could allow a local attacker to cause a denial of service by making the kernel stop responding. Public reference...

CVE-2019-19768

CVE-2019-19768 is a Linux kernel use-after-free in the blktrace debugging path (function __blk_add_trace in kernel/trace/blktrace.c) that can occur during removal of block devices. Public documents describe this as a local exploitation risk that could enable a denial of service or privilege escal...

CVE-2023-0597

CVE-2023-0597 describes a memory-leak flaw in the Linux kernel CPU entry_area mapping for X86 CPU data, enabling a local user to guess memory locations of exception stacks and other data. Connected documents (Astra Linux bulletin and IBM page) corroborate the general description but do not provid...

CVE-2026-43500

Summary: CVE-2026-43500 affects the Linux kernel RXRPC path for DATA/RESPONSE packets. The issue occurs when skb fragments are externally owned (e.g., via splice() or frag lists) and the code path decrypts in place, binding frag pages into the AEAD/skcipher SGL. The fix extends the gate to unshar...

CVE-2019-20934

CVE-2019-20934 affects the Linux kernel prior to 5.2.6. On NUMA systems, the scheduler’s show_numa_stats() contains a use-after-free when freeing NUMA fault statistics, CID-16d51a590a8c. The vulnerability is acknowledged in vendor advisories (e.g., Unity Linux UTSA advisories referencing CVE-2019...

CVE-2019-3459

The CVE-2019-3459 entry concerns a heap address information leak in the Linux kernel, occurring before version 5.1-rc1 when using the L2CAP_GET_CONF_OPT path. Affected software is the Linux kernel (pre-5.1-rc1); the underlying issue is an information exposure vulnerability in this Bluetooth-relat...

CVE-2026-23111

CVE-2026-23111 (Linux kernel) : A bug in netfilter nf_tables nft_map_catchall_activate() inverted the genmask check, causing catchall elements to be processed incorrectly during abort of a DELSET operation. The function skipped inactive elements and processed active ones, leading to a use-after-f...

CVE-2019-12380

CVE-2019-12380 is documented in multiple advisories referencing the Linux kernel EFI handling code. The connected sources specify that the vulnerability arises from how the EFI subsystem handles memory allocation failures in the x86 EFI path: phys_efi_set_virtual_address_map in arch/x86/platform/...

CVE-2021-45868

CVE-2021-45868: Linux kernel before 5.15.3 does not validate the on-disk quota_tree block number in quota_tree.c, which can lead to a use-after-free in kernel/locking/rwsem.c if a quota file is corrupted. Affected: Linux kernel up to 5.15.2 (and older) with quota support. Impact: potential kernel...

CVE-2020-15436

The CVE-2020-15436 entry is confirmed by connected sources as a Linux kernel local-use-after-free vulnerability in fs/block_dev.c (pre-5.8). It enables a local attacker to gain elevated privileges or cause a denial of service by abusing improper access to a particular error field. The Linux kerne...

CVE-2022-1786

CVE-2022-1786 is a use-after-free in the Linux kernel io_uring subsystem triggered when a ring is set up with IORING_SETUP_IOPOLL and more than one task completes submissions on that ring. The consequence is local privilege escalation or a crash. Public details in connected documents confirm the ...

CVE-2022-41674

CVE-2022-41674 affects the Linux kernel (pre-5.19.16) and is triggered by injecting WLAN frames, causing a buffer overflow in ieee80211_bss_info_update() within net/mac80211/scan.c. Reported impact includes high confidentiality and high availability risk (I=None, A=High, C=High) with adjacent att...

CVE-2023-45871

CVE-2023-45871 affects the Linux kernel IGB driver (drivers/net/ethernet/intel/igb/igb_main.c) before version 6.5.3. The vulnerability stems from an inadequate buffer size that can fail to accommodate frames larger than the MTU, potentially leading to a buffer overrun. Public documents in connect...

CVE-2019-19067

Summary (CVE-2019-19067) Four memory leaks in the acp_hw_init() function of amdgpu/acp.c in the Linux kernel (before 5.3.8) can cause memory consumption and denial of service when mfd_add_hotplug_devices() or pm_genpd_add_device() fail. The issue is reported as exploitable by a local attacker wit...

CVE-2019-20636

CVE-2019-20636 affects the Linux kernel prior to 5.4.12. The vulnerability is an out-of-bounds write in drivers/input/input.c via a crafted keycode table in input_set_keycode, enabling a local attacker with root privileges to corrupt memory and potentially execute arbitrary code or cause a denial...

CVE-2020-13974

CVE-2020-13974 affects the Linux kernel in drivers/tty/vt/keyboard.c, caused by a signed integer overflow in k_ascii when invoked repeatedly. Connected docs confirm impacted products include Linux kernel 4.4–5.7.1 and note potential local code execution risk (IBM bulletin and MSRC description) th...

CVE-2023-1998

CVE-2023-1998 affects the Linux kernel. Root cause: when using legacy IBRS, the IBRS bit is cleared on returning to userspace, disabling implicit STIBP and leaving some spectre-BTI protections ineffective; attackers on a local machine could exploit cross-thread branch target injection despite mit...

CVE-2019-16233

CVE-2019-16233 affects the Linux kernel, specifically drivers/scsi/qla2xxx/qla_os.c, where the alloc_workqueue return value is not checked, leading to a NULL pointer dereference. The Initial Description states this is a Linux kernel 5.2.14 issue. Connected documents corroborate the CVE entry and ...

CVE-2020-25645

Summary: CVE-2020-25645 describes a confidentiality flaw in the Linux kernel’s GENEVE tunnel code when IPsec is used to encrypt traffic for the tunnel’s UDP port. In kernels before 5.9-rc7, traffic between two Geneve endpoints may be left unencrypted, allowing an attacker between the endpoints to...

CVE-2021-20317

The connected documents confirm CVE-2021-20317 as a Linux kernel timerqueue race condition: a corrupted timer tree in timerqueue_add can cause wakeups to be missed, enabling a local attacker with special privileges to cause a denial of service (system hang/crash) while the system runs. No explici...

CVE-2023-25012

CVE-2023-25012 is a Linux kernel use-after-free in the HID bigben driver (hid-bigbenff.c). A crafted USB device can leave LED controllers registered too long, enabling a local attacker with physical access to trigger a use-after-free in bigben_remove, potentially causing a denial of service or ar...

CVE-2016-3672

CVE-2016-3672 affects the Linux kernel before 4.5.3 where arch_pick_mmap_layout in arch/x86/mm/mmap.c fails to properly randomize the legacy base address. This defeats ADDR_NO_RANDOMIZE protections and can bypass ASLR for setuid/setgid programs by disabling stack-consumption resource limits. Affe...

CVE-2025-21756

CVE-2025-21756 affects the Linux kernel vsock subsystem. The issue arises from keeping socket bindings until destruction, preventing correct unbinding during transport reassignment. This leads to a use-after-free in the binding path, observed as a KASAN slab-use-after-free in __vsock_bind and rel...

CVE-2017-1000407

CVE-2017-1000407 affects the Linux kernel when built with KVM support, where an attacker can flood the diagnostic port 0x80 and trigger a kernel crash. Root cause: improper validation of user-supplied input at the diagnostic port, enabling denial of service via port flooding. Impact per public ad...

CVE-2021-3483

CVE-2021-3483 refers to a vulnerability in the Linux kernel Nosy driver where a device can be inserted twice into a doubly-linked list, causing a use-after-free when one is removed. This affects versions before 5.12-rc6 and impacts confidentiality, integrity, and availability. The incident is loc...

CVE-2022-0168

CVE-2022-0168 is a Linux kernel local DoS in smb2_ioctl_query_info in fs/cifs/smb2ops.c caused by an incorrect return from memdup_user, allowing a privileged (CAP_SYS_ADMIN) local attacker to crash the system. Public details in connected sources reaffirm the same kernel-level flaw affecting CIFS ...

CVE-2022-25258

The CVE-2022-25258 issue affects the Linux kernel USB Gadget subsystem, specifically drivers/usb/gadget/composite.c, where interface OS descriptor requests with large indices or NULL function pointer handling were not properly validated, enabling memory corruption. It affects kernels before 5.16....

CVE-2022-2639

CVE-2022-2639 affects the Linux kernel openvswitch module. The root cause is an integer coercion error in reserve_sfa_size() that can fail to return -EMSGSIZE under heavy action counts, risking an out-of-bounds write and local privilege escalation or denial of service. Public details in connected...

CVE-2024-53163

The CVE refers to a Linux kernel crypto/qat/qat_420xx path where an off-by-one in uof_get_name() can cause an out-of-bounds access via the fw_objs[] array. The bug is triggered in uof_get_name_420xx() when computing the number of objects and using a comparison that should be >= instead of >...

CVE-2017-8824

CVE-2017-8824 affects the Linux kernel DCCP implementation. The bug is a use-after-free in dccp_disconnect (net/dccp/proto.c) that can be triggered by an AF_UNSPEC connect while in the DCCP_LISTEN state, allowing a local user to escalate privileges or cause a denial of service. Public advisories ...

CVE-2019-14897

CVE-2019-14897 affects the Linux kernel (kernel-2.6.32) Marvell WiFi chip driver. A stack-based buffer overflow in this driver can allow a remote attacker to cause a denial of service (system crash) or possibly execute arbitrary code when a STA operates in IBSS mode and connects to another STA. T...

CVE-2021-31440

CVE-2021-31440 affects the Linux kernel, with the vulnerability in the eBPF verifier: improper validation of user-supplied eBPF programs can allow a local attacker to escalate privileges and execute code in kernel context. The issue is rooted in the handling/verification of eBPF programs, leading...

CVE-2021-3743

CVE-2021-3743 is an out-of-bounds memory read flaw in the Linux kernel’s Qualcomm IPC router protocol. The issue arises from a missing sanity check, allowing a local attacker to read out-of-bounds kernel memory, potentially causing system crashes or information leakage. Documents consistently des...

CVE-2024-26587

The CVE-2024-26587 issue in Linux kernel netdevsim could crash when destroying a netdevsim with VFs instantiated. The root cause was that PHC gets initialised in nsim_init_netdevsim() (only called for PF ports), but mock_phc_destroy() was not placed there, leading to a NULL pointer dereference du...

CVE-2019-19534

Summary: CVE-2019-19534 affects the Linux kernel before 5.3.11, enabling a local info-leak via the Peak USB CAN driver (drivers/net/can/usb/peak_usb/pcan_usb_core.c) when a malicious USB device is connected. The root cause is missing initialization of certain structures in the peak_usb CAN driver...

CVE-2022-43945

CVE-2022-43945 affects the Linux kernel NFSD: in versions prior to 5.19.17 and 6.0.2, an RPC message over TCP can cause the send buffer to be oversized, leading NFSD to write beyond allocated space and crash (DoS). The issue is caused by combining receive and send buffers into a single page array...

CVE-2020-25671

CVE-2020-25671 is a Linux kernel vulnerability in the NFC LLCP implementation where a refcount leak in llcp_sock_connect() can cause a use-after-free, potentially enabling privilege escalation or system crash via local access. Affected: Linux kernel NFC LLCP path; impact parameter: local attacker...

CVE-2020-36312

CVE-2020-36312 affects the Linux kernel up to version 5.8.9, where in virt/kvm/kvm_main.c a kmalloc failure can trigger a memory leak in kvm_io_bus_unregister_dev. The connected Nessus advisories confirm the issue as a kernel-level leak and reference the fixed patch in 5.8.10 (ChangeLog-5.8.10; c...

CVE-2022-3566

CVE-2022-3566 affects the Linux kernel TCP handler (tcp_getsockopt/tcp_setsockopt) with a race condition. The connected documents show multiple vendor/OS advisories (ALAS2KERNEL-5.15-2024-053, ALAS2KERNEL-5.4-2024-084, ALAS2KERNEL-5.10-2024-066, ALAS-2024-2622, ALAS2KERNEL-5.15-2024-053, ALAS2KER...