CVE-2025-38306

CVE-2025-38306 concerns the Linux kernel. It describes a race in fs/fhandle.c where may_decode_fh() can call has_locked_children() without holding locks, enabling an oopsable race. The fix renames has_locked_children() to __has_locked_children(), makes it static, and updates callers in fs/namespa...

CVE-2025-38333

CVE-2025-38333 affects the Linux kernel (f2fs) and is tied to get_new_segment() logic. The issue occurs when get_new_segment() detects inconsistent status between free_segmap and free_secmap, records the error in the superblock, and bails out instead of continuing to use the segment. The provided...

CVE-2025-38438

CVE-2025-38438 – Linux kernel ASoC: SOF: Intel: hda: devm_kstrdup() used to prevent memleak. The issue arises in sof_pdata->tplg_filename where memory allocated by kstrdup() could be overwritten, creating a memory leak detected by kmemleak. The vulnerability is specific to the SOF Intel HDA dr...

CVE-2025-38514

CVE-2025-38514 affects the Linux kernel RXRPC path. When an AF_RXRPC service socket is opened/bound and calls are preallocated, rxrpc_alloc_incoming_call() may oops if the rxrpc_backlog struct is not allocated yet. The fix returns NULL from rxrpc_alloc_incoming_call() when no backlog exists, caus...

CVE-2025-38538

CVE-2025-38538 : In the Linux kernel DMA engine nbpfaxi, memory corruption could occur due to out-of-bounds access in nbpf_probe() where nbpf->chan[] is allocated with num_channels elements but three loops could index one past the end. The second loop copies data from irqbuf[] to nbpf->chan...

CVE-2025-38614

The CVE CVE-2025-38614 affects the Linux kernel eventpoll/epoll component. The vulnerability stemmed from semi-unbounded recursion in ep_loop_check_proc() and related upwards/downwards path checks, enabling depths up to ~500 in certain graphs before a fix. The fix introduces subtree depth trackin...

CVE-2025-39697

Technical details about CVE-2025-39697 are not publicly provided in the supplied documents; information on affected products, impact, and fixes is limited to a general description. Monitor updates from vendor advisories.

CVE-2026-23074

CVE-2026-23074 is a Linux kernel vulnerability in net/sched teql where the teql queuing discipline may be used outside its intended root qdisc, allowing a crafted packet sequence to create a use-after-free scenario in the qfq/qos path due to queue length (qlen) handling. The root cause is that te...

CVE-2026-23210

In CVE-2026-23210, the Linux kernel ice driver experiences a NULL pointer dereference during VSI rebuild when PTP periodic work runs concurrently with VSI rebuild. The root cause is a race where ice_ptp_prepare_for_reset() cancels PTP work, ice_ptp_rebuild() queues it, and VSI rebuild occurs afte...

CVE-2026-31658

CVE-2026-31658 affects the Linux kernel net: altera-tse driver. The root cause is a memory leak: when dma_map_single() fails in tse_start_xmit(), the code returns NETDEV_TX_OK without freeing the skb, causing the skb to be leaked on every DMA mapping failure. The provided patches add dev_kfree_sk...

CVE-2001-1551

Summary: CVE-2001-1551 affects the Linux kernel 2.2.19. The issue arises because CAP_SYS_RESOURCE is enabled for setuid processes, allowing local users to exceed disk quota restrictions during execution of setuid programs. What’s affected: Linux kernel 2.2.19 (setuid/process context). Impact (as ...

CVE-2002-0704

The CVE-2002-0704 entry concerns Netfilter (iptables) NAT capability leaking translated IP addresses in ICMP error messages for versions 1.2.6a and earlier. Affected component: Netfilter (iptables) NAT feature. Root cause: NAT leaks internal addresses in ICMP error messages. Impact: potential exp...

CVE-2002-1573

CVE-2002-1573 refers to an unspecified vulnerability in the Linux kernel’s pcilynx ieee1394 (pcilynx.c) driver, affected in kernels before 2.4.20 and related to wrap handling. The initial description notes unknown impact and attack vectors; public detail is limited. Public references describe the...

CVE-2004-0228

CVE-2004-0228 refers to an integer signedness error in the cpufreq /proc handler (cpufreq_procctl) of the Linux 2.6 kernel, enabling local users to escalate privileges to kernel level. The issue is discussed in multiple advisories (e.g., SUSE, Gentoo GLSA 200407-02, Fedora 2004-111) as part of Li...

CVE-2005-0179

CVE-2005-0179 affects the Linux kernel 2.4.x and 2.6.x, allowing a local user to cause a denial of service (CPU/memory exhaustion) and bypass RLIM_MEMLOCK via mlockall. Connected advisories (RHSA-2005:663, CentOS/CESA-2005:663) document kernel updates that fix this and related flaws; remediation ...

CVE-2005-0916

CVE-2005-0916 affects the Linux kernel 2.6.11 on PPC64/IA64 with CONFIG_HUGETLB_PAGE enabled. A local user can trigger a denial of service (system panic) by running io_queue_init and exiting without io_queue_release, causing exit_aio and is_hugepage_only_range to fail. Connected sources confirm t...

CVE-2006-0554

CVE-2006-0554 affects the Linux kernel 2.6.x prior to 2.6.15.5. The vulnerability arises in the XFS ftruncate call, where a crafted operation can cause the kernel to return stale data, enabling local information disclosure. Reported as a local, user-privilege‑required issue, with no remote execut...

CVE-2007-0822

CVE-2007-0822 describes a local-denial crash in umount when run on Linux kernel 2.6.15 with Slackware 10.2, triggered by passing a pathname to a USB pen drive that was mounted and then removed; this can lead to a NULL dereference and potential exposure of sensitive data such as core contents. Mul...

CVE-2007-0997

CVE-2007-0997 describes a race condition in the Linux kernel 2.6.17 through 2.6.17.6 affecting the tee (sys_tee) system call. The issue could allow local users to cause a denial of service (system crash), obtain sensitive information (kernel memory contents), or gain privileges via unspecified ve...

CVE-2008-4410

CVE-2008-4410 affects Linux kernel 2.6.26.5: the vmi_write_ldt_entry function in arch/x86/kernel/vmi_32.c invokes write_idt_entry where write_ldt_entry was intended, enabling local users to trigger a denial of service (persistent application failure) through crafted function calls. The descriptio...

CVE-2010-2938

CVE-2010-2938 affects the Linux kernel 2.6.18 on Red Hat Enterprise Linux 5, specifically arch/x86/hvm/vmx/vmcs.c VMCS handling. The flaw occurs on Intel platforms without Extended Page Tables (EPT) where VMCS fields are accessed without confirming hardware support. Local users can cause a denial...

CVE-2010-5328

The CVE affects the Linux kernel, specifically signals targeting a process group ID of zero reaching the swapper due to a flaw in include/linux/init_task.h prior to 2.6.35. This allows a local user to trigger a denial of service (system crash). The vulnerability is caused by insufficient filterin...

CVE-2011-2906

The issue is an integer signedness error in the Linux kernel's pmcraid_ioctl_passthrough under drivers/scsi/pmcraid.c, affecting pre-3.1 kernels. It may allow local attackers to cause denial of service via a negative size value in an ioctl call, typically in environments with a privileged program...

CVE-2013-3233

CVE-2013-3233 affects the Linux kernel NFC subsystem: llcp_sock_recvmsg in net/nfc/llcp/sock.c does not initialize a length variable and a data structure, enabling local users to leak kernel-stack information via crafted recvmsg/recvfrom calls. The flaw is in kernels before 3.9-rc7. Impact is loc...

CVE-2016-8401

CVE-2016-8401 is an information-disclosure vulnerability in Android’s kernel components, including the ION subsystem, Binder, USB driver, and networking stack. The issue allows a local malicious application to access data outside its permission level, requiring compromise of a privileged process ...

CVE-2016-8406

CVE-2016-8406 describes a local information-disclosure vulnerability in Android kernel components (ION subsystem, Binder, USB driver, networking) that could allow a malicious local app to access data outside its permission levels. The issue is tied to Android kernels (3.10, 3.18) and is character...

CVE-2016-8428

CVE-2016-8428 affects NVIDIA Tegra kernel driver (NVMAP). The issue allows reading/writing memory outside the intended buffer boundary, potentially enabling a local attacker to escalate privileges or cause a denial of service. Impact is kernel context level on affected Android kernels; CVSS vecto...

CVE-2016-8454

Technical details for CVE-2016-8454 are not publicly available in the provided documents. Monitor for updates.

CVE-2016-8465

CVE-2016-8465 is an elevation-of-privilege vulnerability in the Broadcom Wi‑Fi driver that could let a local malicious app execute code in the kernel. Documents confirm the issue affects Android devices (kernel 3.10/3.18) and that exploitation requires a privileged process, with current mitigatio...

CVE-2016-8481

CVE-2016-8481 describes an elevation of privilege vulnerability in the Qualcomm sound driver on Android. A local malicious application could potentially execute arbitrary code in the kernel context if it first compromises a privileged process. The issue affects Android devices with affected kerne...

CVE-2017-0327

CVE-2017-0327 affects the NVIDIA crypto driver in the Android/Tegr­a kernel. The connected document notes that the vulnerability arises because an input buffer is copied to an output buffer without validating the input size, which may lead to memory corruption and a denial of service (the NVIDIA ...

CVE-2017-0437

CVE-2017-0437 is an elevation-of-privilege vulnerability in the Qualcomm Wi‑Fi driver on Android. The issue could allow a local malicious app to execute arbitrary code in the kernel context by exploiting the Qualcomm Wi‑Fi driver, with the Android kernel versions cited as Kernel-3.10 and Kernel-3...

CVE-2017-0441

CVE-2017-0441 is a Qualcomm Wi‑Fi driver elevation-of-privilege vulnerability affecting Android kernels (Kernel-3.10, Kernel-3.18). The connected documents describe a local attacker could run a malicious application to execute arbitrary code in the kernel context, after compromising a privileged ...

CVE-2017-0444

CVE-2017-0444 is a local elevation-of-privilege issue in the Realtek sound driver affecting Android devices (kernel 3.10). Connected sources (e.g., CNVD, NVD entries) describe exploitation that allows a locally executed, malicious application to run code in the kernel context via the Realtek driv...

CVE-2017-0528

CVE-2017-0528 is described as an elevation-of-privilege vulnerability in the Android kernel security subsystem (kernel 3.18) that could allow a local malicious application to run code in the context of a privileged process. The initial documentation specifies Android/Kernel-3.18 and Android ID A-...

CVE-2017-0573

CVE-2017-0573 describes an elevation of privilege in the Broadcom Wi‑Fi driver used by Android, enabling a local malicious application to execute arbitrary code in the kernel. Affected: Android on Kernel-3.10 and Kernel-3.18. Root cause: elevation of privilege via Broadcom Wi‑Fi driver; no specif...

CVE-2017-0583

CVE-2017-0583 describes an elevation of privilege vulnerability in the Qualcomm CP access driver on Android, enabling a local malicious application to execute arbitrary code in the kernel context. Affected components include the Qualcomm CP access driver within Android kernel versions such as 3.1...

CVE-2017-0606

CVE-2017-0606 is an elevation-of-privilege flaw in the Qualcomm sound driver affecting Android kernels 3.10 and 3.18. The vulnerability could allow a local malicious app to execute arbitrary code in the kernel context via the Qualcomm sound subsystem (e.g., /dev/voice_svc driver). The issue is cl...

CVE-2017-0608

CVE-2017-0608 is an elevation-of-privilege in the Qualcomm kernel sound driver for Android, enabling a local attacker to run arbitrary code in the kernel context. The flaw requires compromising a privileged process first. Affected software/versions include Android on Kernel-3.10 and Kernel-3.18. ...

CVE-2017-0651

CVE-2017-0651 is an information-disclosure vulnerability in the Android kernel ION subsystem (Kernel-3.18). A local malicious application could access data outside its permissions after compromising a privileged process. The issue is listed as Low severity in the 2017-06-05 patch level, with Andr...

CVE-2017-8071

CVE-2017-8071 affects the Linux kernel: the file drivers/hid/hid-cp2112.c in 4.9.x before 4.9.9 uses a spinlock that does not account for sleeping during a USB HID request callback, allowing a local attacker to cause a denial of service via deadlock. The vulnerability is specific to the HID CP210...

CVE-2022-3630

The CVE-2022-3630 entry concerns the Linux kernel, specifically the fs/fscache/cookie.c component used by IPsec. The vulnerability is described as a memory leak resulting from a manipulation in that code path. A patch is recommended to fix the issue, and the vulnerability is associated with VDB-2...

CVE-2022-49008

The CVE-2022-49008 issue affects the Linux kernel, specifically the can327 path: can327_feed_frame_to_netdev() failed to free the skb when the netdev is down, and all callers did not free allocated skbs, causing a potential skb leak. The patch adds kfree_skb() in can327_feed_frame_to_netdev() whe...

CVE-2022-49806

CVEsummary (CVE-2022-49806) In the Linux kernel (net: microchip: sparx5), a potential null-pointer dereference was fixed in sparx_stats_init() and sparx5_start(). The root cause: sparx_stats_init() called create_singlethread_workqueue() without validating its return value, which can be NULL, lead...

CVE-2022-50004

CVE-2022-50004 is a Linux kernel vulnerability in the xfrm policy path. A null pointer dereference can occur when transmitting an skb with metadata_dst where dst->dev is NULL, through the xfrm interface, due to a missing null check in xfrmi_xmit/xfrm_lookup_with_ifid. The impact is kernel cras...

CVE-2023-20679

CVE-2023-20679 affects MediaTek WLAN in which a missing bounds check allows an out-of-bounds read, enabling local escalation of privilege without user interaction. Impact: confidentiality impact listed as high; privilege requirement is high with local attack vector, no UI interaction needed. Root...

CVE-2023-20682

CVE-2023-20682 affects the MediaTek wlan component, describing an out-of-bounds write caused by an integer overflow that could enable local privilege escalation with system execution privileges required. User interaction is not needed. A patch is noted: ALPS07441605 (Issue ALPS07441605). Connecte...

CVE-2023-52942

CVE-2023-52942 affects the Linux kernel’s cgroup/cpuset subsystem. The root cause was an incorrect check in update_parent_subparts_cpumask() that could allow a parent cpuset to be left with no effective CPUs even when there are tasks in it, potentially causing a system panic. The fix alters the e...

CVE-2024-14027

CVE-2024-14027 in the Linux kernel: the fremovexattr() path leaks a file reference when strncpy_from_user() fails, due to missing fdput() after fdget(). This can allow an unprivileged local user to cause kernel memory exhaustion in multi-threaded contexts. The issue was inadvertently fixed by com...

CVE-2024-36976

MODE C CVE-2024-36976 concerns a Linux kernel issue that arose from a change in media: v4l2-ctrls related to log_status. The vulnerability is described as a deadlock risk introduced by the patch that attempted to show all owned controls in log_status, which has since been reverted. The provided d...