CVE-2021-4157

CVE-2021-4157 concerns the Linux kernel NFS subsystem and a memory-bound write flaw. The description in the initial document states an out-of-bounds write of 1–2 bytes could be triggered when using mirroring/replication over NFS, potentially allowing a user with NFS mount access to crash the syst...

CVE-2018-8781

CVE-2018-8781 affects the Linux kernel udl_fb_mmap() in udl_fb.c, with an integer overflow from kernel 3.4 up to 4.15. It allows a local user with udldrmfb driver access to obtain full read/write permissions on kernel physical pages, enabling kernel-space code execution. No patch/version remediat...

CVE-2019-3896

CVE-2019-3896 is described in connected documents as a kernel flaw: a double-free can occur in idr_remove_all() inside lib/idr.c of the Linux kernel 2.6 branch. An unprivileged local attacker could exploit this for privilege escalation or to crash the system (DoS). The affected component is the L...

CVE-2022-3424

CVE-2022-3424 is a local-use-after-free in the Linux kernel SGI GRU driver (gru_file_unlocked_ioctl/gru_check_chiplet_assignment). A local user could crash the system or potentially escalate privileges. Debian-LTS entries confirm the flaw exists in SGI GRU, with testing notes that the driver is n...

CVE-2023-4208

CVE-2023-4208 is a Linux kernel net/sched: cls_u32 use-after-free vulnerability. When u32_change() updates an existing filter, tcf_result may be copied into the new filter instance, and tcf_unbind_filter() runs on the old instance, lowering the referenced class’s filter_cnt and enabling a use-aft...

CVE-2024-42230

In CVE-2024-42230, the Linux kernel on pseries PowerPC is affected by a scv instruction crash when kexec is used. The root cause is that kexec on pseries disables AIL (reloc_on_exc), required for scv instruction support, before all CPUs have been shut down, allowing scv instructions to execute af...

CVE-2014-2523

CVE-2014-2523 applies to the Linux kernel code path net/netfilter/nf_conntrack_proto_dccp.c up to version 3.13.6. The vulnerability arises from incorrect handling of a DCCP header pointer, which could allow remote attackers to cause a system crash ( denial of service ) or potentially execute arbi...

CVE-2019-3460

CVE-2019-3460 affects the Linux kernel and is a heap data information leak in multiple locations, including L2CAP_PARSE_CONF_RSP, reported as present in builds before 5.1-rc1. The issue arises from a heap information leak in L2CAP handling; the advisory notes updates to address it in kernel relea...

CVE-2020-25645

Summary: CVE-2020-25645 describes a confidentiality flaw in the Linux kernel’s GENEVE tunnel code when IPsec is used to encrypt traffic for the tunnel’s UDP port. In kernels before 5.9-rc7, traffic between two Geneve endpoints may be left unencrypted, allowing an attacker between the endpoints to...

CVE-2024-0646

CVE-2024-0646 describes an out-of-bounds memory write in the Linux kernel’s Transport Layer Security path, occurring when a user calls a splice function with a ktls socket as the destination. The issue could allow a local user to crash the system or potentially escalate privileges. Connected advi...

CVE-2018-7757

The CVE-2018-7757 issue affects the Linux kernel (up to version 4.15.7) and is caused by a memory leak in the sas_smp_get_phy_events function located at drivers/scsi/libsas/sas_expander.c. The vulnerability can lead to a denial of service due to memory consumption when a local attacker performs m...

CVE-2019-12455

CVE-2019-12455 affects the Linux kernel code path sunxi_divs_clk_setup in sunxi/clk-sunxi.c (through 5.1.5). The issue is an unchecked kstrndup of derived_name, which could lead to a NULL pointer dereference and system crash (DoS). A vendor/field note in the description mentions the problem is di...

CVE-2020-14305

Mode C: CVE-2020-14305 is a Linux kernel vulnerability described in connected documents as an out-of-bounds memory write affecting the Voice Over IP H.323 connection tracking for ipv6 port 1720. An unauthenticated remote attacker could crash the system, causing DoS, with high impact on confidenti...

CVE-2021-3715

CVE-2021-3715 affects the Linux kernel Traffic Control routing classifier. The flaw is a use-after-free in route4_change() within net/sched/cls_route.c, triggered by changes to classification filters, enabling a local unprivileged user to escalate privileges. The issue is addressed by a kernel fi...

CVE-2024-53130

CVE-2024-53130 affects the Linux kernel nilfs2 code. The issue is a NULL pointer dereference in the block_dirty_buffer tracepoint when using mark_buffer_dirty(), caused by bh->b_bdev->bd_dev being dereferenced even if the buffer head lacks a block_device pointer. The kernel fix makes nilfs_...

CVE-2019-20095

CVE-2019-20095 affects the Linux kernel mwifiex driver (drivers/net/wireless/marvell/mwifiex/cfg80211.c). The description states that certain error-handling paths do not free allocated hostcmd memory, causing a memory leak that can lead to a denial of service. The issue is fixed in kernel version...

CVE-2020-36312

CVE-2020-36312 affects the Linux kernel up to version 5.8.9, where in virt/kvm/kvm_main.c a kmalloc failure can trigger a memory leak in kvm_io_bus_unregister_dev. The connected Nessus advisories confirm the issue as a kernel-level leak and reference the fixed patch in 5.8.10 (ChangeLog-5.8.10; c...

CVE-2021-42008

The CVE-2021-42008 entry concerns the Linux kernel 6pack driver (drivers/net/hamradio/6pack.c). It describes a slab out-of-bounds write in decode_data up to kernel versions before 5.13.13, enabling a local attacker with CAP_NET_ADMIN to achieve root access. Connected documents corroborate the aff...

CVE-2022-4662

CVE-2022-4662 is a Linux kernel USB core subsystem vulnerability describing improper access control when a user attaches a USB device. A local attacker could trigger a crash by exploiting the flawed USB device handling. The connected IBM bulletin for Spectrum Protect Plus notes a remediation: fix...

CVE-2023-45871

CVE-2023-45871 affects the Linux kernel IGB driver (drivers/net/ethernet/intel/igb/igb_main.c) before version 6.5.3. The vulnerability stems from an inadequate buffer size that can fail to accommodate frames larger than the MTU, potentially leading to a buffer overrun. Public documents in connect...

CVE-2019-19059

CVE-2019-19059 affects the Linux kernel’s iwlwifi PCIe ctxt-info-gen3 code path (drivers/net/wireless/intel/iwlwifi/pcie/ctxt-info-gen3.c). The issue is described as multiple memory leaks in iwl_pcie_ctxt_info_gen3_init() that can be triggered when iwl_pcie_init_fw_sec() or dma_alloc_coherent() f...

CVE-2019-19075

The CVE-2019-19075 entry maps to a memory leak in the Linux kernel ca8210_probe() implementation (drivers/net/ieee802154/ca8210.c) that can cause memory exhaustion and DoS by triggering ca8210_get_platform_data() failures. Affected is the kernel before 5.3.8; mitigation is upgrading to kernel 5.3...

CVE-2019-20636

CVE-2019-20636 affects the Linux kernel prior to 5.4.12. The vulnerability is an out-of-bounds write in drivers/input/input.c via a crafted keycode table in input_set_keycode, enabling a local attacker with root privileges to corrupt memory and potentially execute arbitrary code or cause a denial...

CVE-2019-20908

CVE-2019-20908 affects the Linux kernel up to 5.3: in drivers/firmware/efi/efi.c, efivar_ssdt ACPI variable permissions can be too permissive, enabling local attackers to bypass lockdown or secure boot restrictions. Affected: Linux kernels prior to 5.4 (as referenced by Unity Linux and MiracleLin...

CVE-2023-4459

CVE-2023-4459 is rejected/not used; this CVE record does not represent an active vulnerability entry.

CVE-2018-10322

CVE-2018-10322 affects the Linux kernel (up to 4.16.3) via the XFS inode verification path: xfs_dinode_verify in fs/xfs/libxfs/xfs_inode_buf.c can trigger an xfs_ilock_attr_map_shared invalid pointer dereference, allowing a local attacker to cause a denial of service. Exploitation status is not d...

CVE-2021-41073

The CVE-2021-41073 issue affects the Linux kernel (affected versions 5.10 to 5.14.6) where loop_rw_iter in fs/io_uring.c can be abused via IORING_OP_PROVIDE_BUFFERS to trigger a use-after-free of a kernel buffer, enabling local privilege escalation. Exploitation relies on reading /proc//maps and ...

CVE-2022-3566

CVE-2022-3566 affects the Linux kernel TCP handler (tcp_getsockopt/tcp_setsockopt) with a race condition. The connected documents show multiple vendor/OS advisories (ALAS2KERNEL-5.15-2024-053, ALAS2KERNEL-5.4-2024-084, ALAS2KERNEL-5.10-2024-066, ALAS-2024-2622, ALAS2KERNEL-5.15-2024-053, ALAS2KER...

CVE-2024-42229

CVE-2024-42229 concerns a Linux kernel cryptography hardening issue in the AEAD/cipher path. The description states that after cryptographic operations, the key buffer must be zeroized, in line with I.G 9.7.B for FIPS 140-3 guidance. The fix involves zeroizing buffers that previously held private...

CVE-2024-44935

CVE-2024-44935: In the Linux kernel SCTP, a null pointer dereference can occur in reuseport_add_sock() when concurrent close operations clear sk_reuseport_cb. The issue stems from insufficient synchronization among reuseport_alloc(), reuseport_add_sock(), and reuseport_detach_sock() across socket...

CVE-2019-14895

CVE-2019-14895 is a heap-based buffer overflow in the Marvell WiFi chip driver (mwifiex) of the Linux kernel. Affected: Linux kernel 3.x and 4.x prior to 4.18.0; vulnerability can occur when a station negotiates a connection while handling remote country settings. Impact stated in public sources ...

CVE-2019-19534

Summary: CVE-2019-19534 affects the Linux kernel before 5.3.11, enabling a local info-leak via the Peak USB CAN driver (drivers/net/can/usb/peak_usb/pcan_usb_core.c) when a malicious USB device is connected. The root cause is missing initialization of certain structures in the peak_usb CAN driver...

CVE-2021-4028

CVE-2021-4028 is a Linux kernel use-after-free in the RDMA communications manager listener path. Local attackers could crash the system or potentially escalate privileges by exploiting a high-port socket listen use-after-free. The vulnerability is documented across multiple connected sources (Deb...

CVE-2016-3137

CVE-2016-3137 affects the Linux kernel driver, specifically drivers/usb/serial/cypress_m8.c, with exploitation possible via a USB device lacking interrupt endpoints. The vulnerability allows a NULL pointer dereference leading to a denial of service (system crash) and is fixed in kernel 4.5.1 (and...

CVE-2019-15118

CVE-2019-15118 affects the Linux kernel up to version 5.2.9. The vulnerability arises from the function check_input_term in sound/usb/mixer.c , which mishandles recursion and can cause a kernel stack exhaustion leading to a crash. The connected Nessus entries corroborate the issue and reference U...

CVE-2020-36310

CVE-2020-36310 affects the Linux kernel prior to 5.8, specifically arch/x86/kvm/svm/svm.c, where set_memory_region_test can infinite-loop on certain nested page faults (CID-e72436bc3a52). The connected Nessus/OSS documents confirm this exact issue in Unity Linux kernels and Debian/openSUSE adviso...

CVE-2021-29264

The CVE-2021-29264 issue affects the Linux kernel’s Freescale Gianfar Ethernet driver (drivers/net/ethernet/freescale/gianfar.c). A negative fragment size is computed in scenarios with an RX queue overrun when jumbo packets are used and NAPI is enabled, enabling a network attacker to crash the sy...

CVE-2022-39189

CVE-2022-39189 affects the Linux kernel KVM/x86, where unprivileged guest users can compromise the guest kernel due to mishandled TLB flushes in certain KVM_VCPU_PREEMPTED situations. The issue is documented across multiple advisories (e.g., Debian, Amazon Linux ALAS2KERNEL, Astra Linux) and is m...

CVE-2022-43945

CVE-2022-43945 affects the Linux kernel NFSD: in versions prior to 5.19.17 and 6.0.2, an RPC message over TCP can cause the send buffer to be oversized, leading NFSD to write beyond allocated space and crash (DoS). The issue is caused by combining receive and send buffers into a single page array...

CVE-2023-23559

CVE-2023-23559 affects the Linux kernel rndis_wlan.c (rndis_query_oid) up to version 6.1.5. The vulnerability arises from an integer overflow in an addition, which may lead to a buffer overflow. Connected sources corroborate the issue and reference updates/mitigations in related advisories (e.g.,...

CVE-2023-2985

CVE-2023-2985 describes a use-after-free in hfsplus_put_super (fs/hfsplus/super.c) of the Linux kernel, enabling a local attacker to cause a denial of service. Connected documents confirm the flaw and its local impact, but do not provide a vendor-specific fix or patch details. No additional explo...

CVE-2023-52447

Technical details about CVE-2023-52447 are not provided in the supplied documents; monitor for updates.

CVE-2016-8666

CVE-2016-8666 affects the Linux kernel’s IP GRO path handling for tunneled/stacked packets. Public sources in connected docs show the issue in kernels before certain fixes, with Unity advisories citing fixes up to kernel 4.8.2 and earlier references noting vulnerability through 4.6 in other conte...

CVE-2021-26708

CVE-2021-26708 describes a local privilege-escalation in the Linux kernel prior to 5.10.13 caused by race conditions in AF_VSOCK (net/vmw_vsock/af_vsock.c) related to wrong locking during VSOCK multi-transport changes. The vulnerability can be exploited via use-after-free primitives in the vsock_...

CVE-2023-1095

CVE-2023-1095 refers to a Linux kernel issue in the nf_tables_updtable path. When nf_tables_table_enable returns an error, nft_trans_destroy frees the transaction object by calling list_del(), but the transaction was never placed on a list (the list head is zeroed), resulting in a NULL pointer de...

CVE-2024-0641

CVE-2024-0641 describes a denial-of-service vulnerability in the Linux kernel’s TIPC subsystem, specifically in tipc_crypto_key_revoke in net/tipc/crypto.c. The flaw allows guests with local user privileges to trigger a deadlock, potentially crashing the system. Connected sources (Astra Linux bul...

CVE-2019-15921

CVE-2019-15921 : In the Linux kernel prior to 5.0.6, a memory leak occurs in genl_register_family() when idr_alloc() fails (net/netlink/genetlink.c). This can lead to resource leakage in affected systems. Root cause is a failure path not freeing partial allocations; impact is limited to memory/re...

CVE-2021-28688

CVE-2021-28688 relates to the Linux kernel fix for XSA-365. The patch initialized pointers to avoid cleanup issues, but under certain conditions it could overwrite pointers that need cleanup, causing persistence leaks and, consequently, incomplete host cleanup after a guest dies, leaving zombie d...

CVE-2022-24958

CVE-2022-24958 relates to the Linux kernel USB gadget subsystem, specifically drivers/usb/gadget/legacy/inode.c up to version 5.16.8, where dev->buf release is mishandled. The consequence is a use‑after‑free condition in the USB gadget legacy path, which can lead to a local denial of service a...

CVE-2023-52443

CVE-2023-52443 affects the Linux kernel AppArmor parser. A packed profile containing a name like ":samba-dcerpcd" can be treated as only a namespace, causing tmpname to be NULL while tmpns remains non-NULL, which leads to a NULL dereference in aa_alloc_profile during unpack_profile/a a_unpack pat...