CVE-2021-31440

CVE-2021-31440 affects the Linux kernel, with the vulnerability in the eBPF verifier: improper validation of user-supplied eBPF programs can allow a local attacker to escalate privileges and execute code in kernel context. The issue is rooted in the handling/verification of eBPF programs, leading...

CVE-2021-4157

CVE-2021-4157 concerns the Linux kernel NFS subsystem and a memory-bound write flaw. The description in the initial document states an out-of-bounds write of 1–2 bytes could be triggered when using mirroring/replication over NFS, potentially allowing a user with NFS mount access to crash the syst...

CVE-2018-7757

The CVE-2018-7757 issue affects the Linux kernel (up to version 4.15.7) and is caused by a memory leak in the sas_smp_get_phy_events function located at drivers/scsi/libsas/sas_expander.c. The vulnerability can lead to a denial of service due to memory consumption when a local attacker performs m...

CVE-2019-19059

CVE-2019-19059 affects the Linux kernel’s iwlwifi PCIe ctxt-info-gen3 code path (drivers/net/wireless/intel/iwlwifi/pcie/ctxt-info-gen3.c). The issue is described as multiple memory leaks in iwl_pcie_ctxt_info_gen3_init() that can be triggered when iwl_pcie_init_fw_sec() or dma_alloc_coherent() f...

CVE-2019-3460

CVE-2019-3460 affects the Linux kernel and is a heap data information leak in multiple locations, including L2CAP_PARSE_CONF_RSP, reported as present in builds before 5.1-rc1. The issue arises from a heap information leak in L2CAP handling; the advisory notes updates to address it in kernel relea...

CVE-2022-3424

CVE-2022-3424 is a local-use-after-free in the Linux kernel SGI GRU driver (gru_file_unlocked_ioctl/gru_check_chiplet_assignment). A local user could crash the system or potentially escalate privileges. Debian-LTS entries confirm the flaw exists in SGI GRU, with testing notes that the driver is n...

CVE-2022-3623

CVE-2022-3623 refers to a Linux Kernel issue in the BPF path where a race condition in follow_page_pte (mm/gup.c) can be exploited remotely. Connected sources corroborate the root cause as a race in follow_page_pte and list the affected component as Linux Kernel with the BPF involvement. The Astr...

CVE-2023-4459

CVE-2023-4459 is rejected/not used; this CVE record does not represent an active vulnerability entry.

CVE-2024-42230

In CVE-2024-42230, the Linux kernel on pseries PowerPC is affected by a scv instruction crash when kexec is used. The root cause is that kexec on pseries disables AIL (reloc_on_exc), required for scv instruction support, before all CPUs have been shut down, allowing scv instructions to execute af...

CVE-2016-10905

CVE-2016-10905: A use-after-free in Linux kernel fs/gfs2/rgrp.c (pre-4.8) is caused by gfs2_clear_rgrpd and read_rindex_entry. Several Nessus/OpenVAS/SUSE/F5 advisories reference this CVE and map it to vulnerable kernel versions and affected distributions; the public text confirms the flaw but do...

CVE-2019-12455

CVE-2019-12455 affects the Linux kernel code path sunxi_divs_clk_setup in sunxi/clk-sunxi.c (through 5.1.5). The issue is an unchecked kstrndup of derived_name, which could lead to a NULL pointer dereference and system crash (DoS). A vendor/field note in the description mentions the problem is di...

CVE-2019-19075

The CVE-2019-19075 entry maps to a memory leak in the Linux kernel ca8210_probe() implementation (drivers/net/ieee802154/ca8210.c) that can cause memory exhaustion and DoS by triggering ca8210_get_platform_data() failures. Affected is the kernel before 5.3.8; mitigation is upgrading to kernel 5.3...

CVE-2019-19534

Summary: CVE-2019-19534 affects the Linux kernel before 5.3.11, enabling a local info-leak via the Peak USB CAN driver (drivers/net/can/usb/peak_usb/pcan_usb_core.c) when a malicious USB device is connected. The root cause is missing initialization of certain structures in the peak_usb CAN driver...

CVE-2019-20095

CVE-2019-20095 affects the Linux kernel mwifiex driver (drivers/net/wireless/marvell/mwifiex/cfg80211.c). The description states that certain error-handling paths do not free allocated hostcmd memory, causing a memory leak that can lead to a denial of service. The issue is fixed in kernel version...

CVE-2020-14305

Mode C: CVE-2020-14305 is a Linux kernel vulnerability described in connected documents as an out-of-bounds memory write affecting the Voice Over IP H.323 connection tracking for ipv6 port 1720. An unauthenticated remote attacker could crash the system, causing DoS, with high impact on confidenti...

CVE-2020-36312

CVE-2020-36312 affects the Linux kernel up to version 5.8.9, where in virt/kvm/kvm_main.c a kmalloc failure can trigger a memory leak in kvm_io_bus_unregister_dev. The connected Nessus advisories confirm the issue as a kernel-level leak and reference the fixed patch in 5.8.10 (ChangeLog-5.8.10; c...

CVE-2023-45871

CVE-2023-45871 affects the Linux kernel IGB driver (drivers/net/ethernet/intel/igb/igb_main.c) before version 6.5.3. The vulnerability stems from an inadequate buffer size that can fail to accommodate frames larger than the MTU, potentially leading to a buffer overrun. Public documents in connect...

CVE-2024-53130

CVE-2024-53130 affects the Linux kernel nilfs2 code. The issue is a NULL pointer dereference in the block_dirty_buffer tracepoint when using mark_buffer_dirty(), caused by bh->b_bdev->bd_dev being dereferenced even if the buffer head lacks a block_device pointer. The kernel fix makes nilfs_...

CVE-2016-3137

CVE-2016-3137 affects the Linux kernel driver, specifically drivers/usb/serial/cypress_m8.c, with exploitation possible via a USB device lacking interrupt endpoints. The vulnerability allows a NULL pointer dereference leading to a denial of service (system crash) and is fixed in kernel 4.5.1 (and...

CVE-2019-20636

CVE-2019-20636 affects the Linux kernel prior to 5.4.12. The vulnerability is an out-of-bounds write in drivers/input/input.c via a crafted keycode table in input_set_keycode, enabling a local attacker with root privileges to corrupt memory and potentially execute arbitrary code or cause a denial...

CVE-2019-20908

CVE-2019-20908 affects the Linux kernel up to 5.3: in drivers/firmware/efi/efi.c, efivar_ssdt ACPI variable permissions can be too permissive, enabling local attackers to bypass lockdown or secure boot restrictions. Affected: Linux kernels prior to 5.4 (as referenced by Unity Linux and MiracleLin...

CVE-2023-2985

CVE-2023-2985 describes a use-after-free in hfsplus_put_super (fs/hfsplus/super.c) of the Linux kernel, enabling a local attacker to cause a denial of service. Connected documents confirm the flaw and its local impact, but do not provide a vendor-specific fix or patch details. No additional explo...

CVE-2024-42229

CVE-2024-42229 concerns a Linux kernel cryptography hardening issue in the AEAD/cipher path. The description states that after cryptographic operations, the key buffer must be zeroized, in line with I.G 9.7.B for FIPS 140-3 guidance. The fix involves zeroizing buffers that previously held private...

CVE-2018-10322

CVE-2018-10322 affects the Linux kernel (up to 4.16.3) via the XFS inode verification path: xfs_dinode_verify in fs/xfs/libxfs/xfs_inode_buf.c can trigger an xfs_ilock_attr_map_shared invalid pointer dereference, allowing a local attacker to cause a denial of service. Exploitation status is not d...

CVE-2019-15118

CVE-2019-15118 affects the Linux kernel up to version 5.2.9. The vulnerability arises from the function check_input_term in sound/usb/mixer.c , which mishandles recursion and can cause a kernel stack exhaustion leading to a crash. The connected Nessus entries corroborate the issue and reference U...

CVE-2019-15921

CVE-2019-15921 : In the Linux kernel prior to 5.0.6, a memory leak occurs in genl_register_family() when idr_alloc() fails (net/netlink/genetlink.c). This can lead to resource leakage in affected systems. Root cause is a failure path not freeing partial allocations; impact is limited to memory/re...

CVE-2020-36310

CVE-2020-36310 affects the Linux kernel prior to 5.8, specifically arch/x86/kvm/svm/svm.c, where set_memory_region_test can infinite-loop on certain nested page faults (CID-e72436bc3a52). The connected Nessus/OSS documents confirm this exact issue in Unity Linux kernels and Debian/openSUSE adviso...

CVE-2021-41073

The CVE-2021-41073 issue affects the Linux kernel (affected versions 5.10 to 5.14.6) where loop_rw_iter in fs/io_uring.c can be abused via IORING_OP_PROVIDE_BUFFERS to trigger a use-after-free of a kernel buffer, enabling local privilege escalation. Exploitation relies on reading /proc//maps and ...

CVE-2022-39189

CVE-2022-39189 affects the Linux kernel KVM/x86, where unprivileged guest users can compromise the guest kernel due to mishandled TLB flushes in certain KVM_VCPU_PREEMPTED situations. The issue is documented across multiple advisories (e.g., Debian, Amazon Linux ALAS2KERNEL, Astra Linux) and is m...

CVE-2022-43945

CVE-2022-43945 affects the Linux kernel NFSD: in versions prior to 5.19.17 and 6.0.2, an RPC message over TCP can cause the send buffer to be oversized, leading NFSD to write beyond allocated space and crash (DoS). The issue is caused by combining receive and send buffers into a single page array...

CVE-2022-4662

CVE-2022-4662 is a Linux kernel USB core subsystem vulnerability describing improper access control when a user attaches a USB device. A local attacker could trigger a crash by exploiting the flawed USB device handling. The connected IBM bulletin for Spectrum Protect Plus notes a remediation: fix...

CVE-2024-0641

CVE-2024-0641 describes a denial-of-service vulnerability in the Linux kernel’s TIPC subsystem, specifically in tipc_crypto_key_revoke in net/tipc/crypto.c. The flaw allows guests with local user privileges to trigger a deadlock, potentially crashing the system. Connected sources (Astra Linux bul...

CVE-2024-44935

CVE-2024-44935: In the Linux kernel SCTP, a null pointer dereference can occur in reuseport_add_sock() when concurrent close operations clear sk_reuseport_cb. The issue stems from insufficient synchronization among reuseport_alloc(), reuseport_add_sock(), and reuseport_detach_sock() across socket...

CVE-2026-46300

The CVE-2026-46300 issue affects the Linux kernel's net: skbuff code: skb_try_coalesce() can transfer paged frags from one skb to another while losing the SKBFL_SHARED_FRAG marker, breaking the invariant relied on by ESP decryption logic. This can allow an in-place decrypt path to operate on page...

CVE-2016-8666

CVE-2016-8666 affects the Linux kernel’s IP GRO path handling for tunneled/stacked packets. Public sources in connected docs show the issue in kernels before certain fixes, with Unity advisories citing fixes up to kernel 4.8.2 and earlier references noting vulnerability through 4.6 in other conte...

CVE-2019-14895

CVE-2019-14895 is a heap-based buffer overflow in the Marvell WiFi chip driver (mwifiex) of the Linux kernel. Affected: Linux kernel 3.x and 4.x prior to 4.18.0; vulnerability can occur when a station negotiates a connection while handling remote country settings. Impact stated in public sources ...

CVE-2021-42008

The CVE-2021-42008 entry concerns the Linux kernel 6pack driver (drivers/net/hamradio/6pack.c). It describes a slab out-of-bounds write in decode_data up to kernel versions before 5.13.13, enabling a local attacker with CAP_NET_ADMIN to achieve root access. Connected documents corroborate the aff...

CVE-2023-1095

CVE-2023-1095 refers to a Linux kernel issue in the nf_tables_updtable path. When nf_tables_table_enable returns an error, nft_trans_destroy frees the transaction object by calling list_del(), but the transaction was never placed on a list (the list head is zeroed), resulting in a NULL pointer de...

CVE-2023-23559

CVE-2023-23559 affects the Linux kernel rndis_wlan.c (rndis_query_oid) up to version 6.1.5. The vulnerability arises from an integer overflow in an addition, which may lead to a buffer overflow. Connected sources corroborate the issue and reference updates/mitigations in related advisories (e.g.,...

CVE-2021-4028

CVE-2021-4028 is a Linux kernel use-after-free in the RDMA communications manager listener path. Local attackers could crash the system or potentially escalate privileges by exploiting a high-port socket listen use-after-free. The vulnerability is documented across multiple connected sources (Deb...

CVE-2022-24958

CVE-2022-24958 relates to the Linux kernel USB gadget subsystem, specifically drivers/usb/gadget/legacy/inode.c up to version 5.16.8, where dev->buf release is mishandled. The consequence is a use‑after‑free condition in the USB gadget legacy path, which can lead to a local denial of service a...

CVE-2024-0646

CVE-2024-0646 describes an out-of-bounds memory write in the Linux kernel’s Transport Layer Security path, occurring when a user calls a splice function with a ktls socket as the destination. The issue could allow a local user to crash the system or potentially escalate privileges. Connected advi...

CVE-2021-26931

CVE-2021-26931 is a Linux kernel issue in Xen PV backend handling. Affected: kernel 2.6.39–5.10.16 when running Xen PV; vulnerable components include block/xen-blkback/blkback.c and xen-scsiback.c. Root cause: grant-mapping error handling could be treated as a plain bug, leading to a kernel crash...

CVE-2021-29264

The CVE-2021-29264 issue affects the Linux kernel’s Freescale Gianfar Ethernet driver (drivers/net/ethernet/freescale/gianfar.c). A negative fragment size is computed in scenarios with an RX queue overrun when jumbo packets are used and NAPI is enabled, enabling a network attacker to crash the sy...

CVE-2021-35039

The CVE-2021-35039 issue affects the Linux kernel up to version 5.12.14 where module signature verification can be bypassed if CONFIG_MODULE_SIG is not set and a module.sig_enforce=1 argument is used during init_module loading. Affected component: kernel/module.c. Root cause: mishandling of signa...

CVE-2022-3545

CVE-2022-3545: Linux Kernel use-after-free in area_cache_get (drivers/net/ethernet/netronome/nfp/nfpcore/nfp_cppcore.c, IPsec). Affects local attacker within LAN via area_cache_get manipulation; initial description notes a patch exists to fix the issue. Connected Astra Linux bulletin provides con...

CVE-2023-52447

CVE-2023-52447 is a Linux kernel issue where deferral of freeing inner BPF maps could lead to use-after-free if an inner map is accessed after removal from the outer map. The fix defers the inner-map free via bpf_map_free_deferred() and enforces two RCUs (RCU grace period and task-RCU grace perio...

CVE-2023-52817

CVE-2023-52817: Linux kernel DRM/AMDGPU fix for a NULL pointer dereference when the smc_rreg pointer is NULL while reading amdgpu_regs_smc (VEGA20). The patch adds a NULL check to amdgpu_debugfs_regs_smc_read path, preventing a kernel NULL pointer dereference when users read /sys/kernel/debug/dri...

CVE-2022-45885

CVE-2022-45885 : The Linux kernel (up to version 6.0.9) has a race in drivers/media/dvb-core/dvb_frontend.c that can cause a use-after-free when a device is disconnected. The vulnerability affects the DVB core frontend path and is rated high severity (CVSS 3.1: AV=L/AC=H/PR=L/UI=N/S=U/C=H/I=H/A=H...

CVE-2017-8824

CVE-2017-8824 affects the Linux kernel DCCP implementation. The bug is a use-after-free in dccp_disconnect (net/dccp/proto.c) that can be triggered by an AF_UNSPEC connect while in the DCCP_LISTEN state, allowing a local user to escalate privileges or cause a denial of service. Public advisories ...