CVE-2026-46211

CVE-2026-46211 affects the Linux kernel drm/msm/gem component. The flaw in msm_ioctl_gem_info_get_metadata() can cause a NULL pointer dereference due to unchecked allocation (kmemdup()) and always returning 0 on errors, making userspace believe success. The issue is fixed by adding a NULL check f...

CVE-2026-46282

CVE-2026-46282 affects the Linux kernel IIO frequency driver (admv1013). Root cause: if device_property_read_string() fails, str can remain uninitialized and later is dereferenced in strcmp, causing a NULL/garbage pointer dereference. Mitigation in the patch set: replace manual read/strcmp with d...

CVE-2026-53059

The CVE-2026-53059 issue is a Linux kernel dm-log out-of-bounds write caused by an unsigned 32-bit region_count in create_log_context() overflowing when dm_sector_div_up() returns a 64-bit value. Large region_space can truncate bitset_size, causing clean_bits, sync_bits, and recovering_bits to be...

CVE-2026-53354

Technical details for CVE-2026-53354 are not provided in the connected documents. Monitor for updates.

CVE-2004-0058

The CVE-2004-0058 entry affects Antivir for Linux 2.0.9-9 and potentially earlier versions. It describes a local privilege issue where a symlink race on the temporary file .pid_antivir_$$ allows a local user to overwrite arbitrary files. The underlying cause is a symlink attack on a daemon-relate...

CVE-2012-0058

The CVE-2012-0058 issue affects the Linux kernel up to version 3.2.2, in the kiocb_batch_free function of fs/aio.c, caused by incorrect iocb management. It allows local attackers to cause a denial of service (OOPS). Impact is confined to local execution, with availability as the primary effect de...

CVE-2016-10284

CVE-2016-10284 is a vulnerability in the Qualcomm video driver that enables an elevated-privilege path: a local, privileged process could be exploited by a malicious local app to run arbitrary code in the kernel context on Android devices. The issue affects Android kernel versions 3.10 and 3.18, ...

CVE-2016-10290

CVE-2016-10290 is an elevation-of-privilege issue in the Qualcomm Shared Memory Driver used on Android. The vulnerability could allow a local malicious application to execute arbitrary code in the kernel context by exploiting the shared memory driver. The entry specifies that exploitation is loca...

CVE-2016-6162

CVE-2016-6162 affects the Linux kernel file net/core/skbuff.c (kernel 4.7-rc6). The issue allows local users to trigger a denial of service (kernel panic) or potentially other unspecified impact through certain IPv6 socket operations. Multiple advisories (SUse, Red Hat, Debian, Ubuntu OSV, CNVD, ...

CVE-2016-6757

CVE-2016-6757 describes an information-disclosure vulnerability affecting Qualcomm components used in Android devices, specifically the camera driver and video driver. The issue could allow a local malicious application to access data beyond its permissions after compromising a privileged process...

CVE-2016-6782

CVE-2016-6782 describes a local elevation-of-privilege in the MediaTek driver on Android (Kernel-3.10) that could allow a malicious local app to execute arbitrary code in kernel context. The issue requires compromising a privileged process first; no public exploit details or patches are provided ...

CVE-2016-6791

CVE-2016-6791 is an elevation-of-privilege vulnerability in the Qualcomm sound driver affecting Android devices. The issue allows a local malicious application to execute arbitrary code in the kernel context, requiring initial compromise of a privileged process. Affected components/versions inclu...

CVE-2016-8404

CVE-2016-8404 is an information-disclosure vulnerability in Android kernel components (ION subsystem, Binder, USB driver, and networking). A local malicious application could access data outside its permission levels after compromising a privileged process. Affected product/versions: Android kern...

CVE-2016-8410

CVE-2016-8410 is an information-disclosure vulnerability in the Qualcomm sound driver affecting Android devices. The issue could allow a local malicious application to access data outside its permission levels, and is rated Moderate because exploitation requires first compromising a privileged pr...

CVE-2016-8416

The CVE-2016-8416 entry concerns an information-disclosure vulnerability in the Qualcomm video driver on Android (kernel 3.18). A local malicious application could access data outside its permissions due to the driver’s handling, with impact described as data disclosure and requiring a privileged...

CVE-2016-8426

CVE-2016-8426 affects the NVIDIA GPU driver on Android (kernel-3.10). It is an elevation-of-privilege vulnerability that could let a local malicious app execute arbitrary code in kernel context, potentially causing a local permanent device compromise. The NVD entry cites CVSSv3: LOCAL access, hig...

CVE-2016-8437

CVE-2016-8437 describes an improper input validation in Android’s Access Control APIs, with the kernel 3.18 memory range check potentially mishandled. Affected product: Android (Kernel 3.18). Official description notes a memory-range check issue but does not provide exploit paths or a concrete fi...

CVE-2023-53197

CVE-2023-53197: Linux kernel USB UHCI memory leak when using debugfs_lookup() (dput() on result required). The fix is to replace with debugfs_lookup_and_remove(), which handles the logic and prevents leaks. Affected: Linux kernel USB UHCI code path; Impact states local, with availability impact a...

CVE-2023-53218

The CVE-2023-53218 entry concerns the Linux kernel rxrpc path. A call created by sendmsg() could be aborted only after a connection assignment, but interrupted scheduling could cause subsequent sendmsg() calls to fail with EBUSY until an assignment occurs. The fix ensures that such a waiting rxrp...

CVE-2023-53258

CVE-2023-53258 (Linux kernel) relates to drm/amd/display underflow when using displays with large vblank regions at low refresh rates. The issue was fixed by simplifying the vblank_nom calculation and increasing VBlankNomDefaultUS to 800µs. Public advisories indicate patches were applied in Linux...

CVE-2023-53331

Summary (CVE-2023-53331) : In the Linux kernel, the pstore/ram path could treat an empty prz as valid during init, allowing a start value equal to zero to bypass bounds checks and trigger out-of-bounds writes, potentially causing panics in multiple code paths (e.g., sysdump_panic_event, panic, do...

CVE-2023-53442

Technical details about CVE-2023-53442 are not present in the provided connected documents. The SUSE/Tenable entries reference kernel fixes in general but do not disclose affected products/versions or specific exploit vectors here. Monitor for official patch specifics.

CVE-2024-58000

CVE-2024-58000 affects the Linux kernel Io_uring reg-wait path. The root cause is speculative execution on a kernel array indexed by user input when using ENTER_EXT_ARG_REG, which could interpret an offset into a pre-mapped memory region as an argument. The documented fix is to prevent speculativ...

CVE-2025-38050

CVE-2025-38050 affects the Linux kernel hugetlb memory management. A race between __update_and_free_hugetlb_folio() and replace_free_hugepage_folios() can cause folio_hstate(folio) to see a NULL pointer, leading to a kernel NULL pointer dereference and crash. The description explains the root cau...

CVE-2025-38069

Technical details for CVE-2025-38069 are not provided in the connected documents. Monitor for updates from upstream advisories.

CVE-2025-38228

CVE-2025-38228: In the Linux kernel, a memory leak could occur in the media/imagination driver during e5010_probe(). The fix ensures memory allocated by video_device_alloc() is released if an error path is taken by adding video_device_release() in the failure handling path. This addresses leaked ...

CVE-2025-38254

The CVE-2025-38254 issue is in the Linux kernel (drm/amd/display) where drm_edid_raw() could return NULL or oversized EDID bytes, risking an Oops or memory corruption. The fix adds sanity checks for drm_edid_raw() and returns EDID_BAD_INPUT in those corner cases. It is related to EDID handling wh...

CVE-2025-38314

CVE-2025-38314 is a Linux kernel vulnerability affecting virtio-pci. The issue arises in virtio_pci_admin_dev_parts_get(), where the result_sg_size is filled with the length from virtqueue_get_buf(), inadvertently including an 8-byte status, causing oversized transfer data and potential kernel bu...

CVE-2025-38388

CVE-2025-38388 concerns the Linux kernel’s ARM Firmware Framework for ARMv8-A (FFA). The issue stems from using a mutex to protect the notifier hashtable accesses, which could sleep in atomic context and trigger warnings like “sleeping function called from invalid context.” Connected documents co...

CVE-2025-38407

CVE-2025-38407 (Linux kernel, RISC‑V) is addressed by replacing the dynamic percpu boot data area with a statically allocated array in the kernel image to fix boot on NUMA SMP configurations. The root cause was that, when percpu page allocation happens early with NUMA, percpu data could be placed...

CVE-2025-38454

CVE-2025-38454: In the Linux kernel, ALSA: ad1816a: Fix potential NULL pointer deref in snd_card_ad1816a_pnp(); switches to pr_warn() when 'pdev' is NULL to avoid NULL pointer dereference. The description indicates the fix is kernel-side and targets the ad1816A soundcard driver; no details on aff...

CVE-2025-38484

Technical details about CVE-2025-38484 are not provided in the supplied connected documents. The references list the CVE but do not describe affected components, impact, or fixes. Monitor vendor advisories for public details and remediation.

CVE-2025-38520

In CVE-2025-38520, the Linux kernel’s DRM/AMDKFD path could deadlock during MMU notifier callbacks when a process exits, potentially leaking VRAM. The root cause was calling mmput from the MMU notifier callback, risking release of the mm struct and exit_mmap/free_pgtable. The fix takes a non-zero...

CVE-2025-38537

CVE-2025-38537: Linux kernel vulnerability in net: phy: Don’t register LEDs for genphy. Root cause: when a PHY has no driver, the genphy driver is probed/removed via phy_attach/detach, and if the PHY node has a leds subnode, LEDs get (un)registered during genphy probe/remove, leading to a determi...

CVE-2025-38542

CVE-2025-38542 affects the Linux kernel net:appletalk code. The vulnerability is a device refcount leak in atrtr_create(): during route entry updates, the old device reference was not released before assigning the new one, leading to a leak. The fix releases the old reference with dev_put() befor...

CVE-2025-38668

CVE-2025-38668: In the Linux kernel regulator core, a NULL pointer dereference can occur on unbind if coupling data is stale because coupling_desc.n_coupled is not reset after freeing coupled_rdevs. This can affect runtime PM and other regulator operations that rely on coupling metadata, potentia...

CVE-2025-38718

CVE-2025-38718 affects the Linux kernel SCTP implementation. The issue arises when cloning head skbs with fraglists, causing use-after-likes from sharing frag skbs and leading to uninitialized-value bugs (KMSAN) in sctp_inq_pop and related code paths. The fix patches sctp_rcv() to linearize clone...

CVE-2025-39694

The CVE-2025-39694 entry concerns the Linux kernel component s390/sclp. The vulnerability arises from an improper NULL pointer check in the SCCB present check logic used during interrupt handling: the NULL check is performed after physical-to-virtual address translation, and if the kernel identit...

CVE-2025-39818

CVE-2025-39818: Linux kernel vulnerability in intel-thc-hid (Intel THC) where improper pointer arithmetic in I2C regs save could cause a slab-out-of-bounds read/write (KASAN). The fix replaces the secondary pointer usage with direct array indexing (&dev->i2c_subip_regs[i]) to ensure safe memor...

CVE-2026-23099

CVE-2026-23099 (bonding: limit BOND_MODE_8023AD to Ethernet devices) is addressed in the Linux kernel, preventing use of BOND_MODE_8023AD on non-Ethernet devices. The issue, observed in bonding/low-level MAC address handling, can cause out-of-bounds memory access when enslaving or configuring net...

CVE-2026-23110

CVE-2026-23110 relates to the Linux kernel SCSI core: Wake up the error handler when final completions race against each other. The description identifies two race conditions that can prevent the error handler from waking up, potentially leaving I/O in the error state. Root causes are memory-orde...

CVE-2026-23152

Technical details for CVE-2026-23152 are not publicly provided in the supplied connected docs. The materials only note patching/release status in OSV/SUSE advisories; no specifics on affected components, exploitability, or fixes are included here.

CVE-2026-23269

CVE-2026-23269 is an AppArmor/Linux kernel vulnerability where untrusted data is used as DFA start-state indices during unpack_pdb, enabling an out-of-bounds read in aa_dfa_next (via dfa->tables[YYTD_ID_BASE][start]). The issue is tied to the AppArmor LSM component and the root cause is readin...

CVE-2026-23278

CVE-2026-23278 (Linux kernel nf_tables catchall handling) The issue occurs in netfilter nf_tables where, during transaction processing, a map holding catchall elements being removed may require toggling all pending catchall elements, not just the first viable candidate. If the map is also being f...

CVE-2026-23452

CVE-2026-23452 refers to a race condition in the Linux kernel PM: runtime code during device removal. The root cause described is the potential dereference of the parent device pointer (parent->power) after the parent is freed within pm_runtime_work(), which could lead to a use-after-free scen...

CVE-2026-31677

The CVE-2026-31677 issue affects the Linux kernel af_alg path. The root cause is that af_alg_get_rsgl() could extract RX scatterlist data beyond the remaining receive budget, allowing a local attacker to trigger a DoS via recvmsg when there isn’t enough RX space for a chunk. The fix tightens budg...

CVE-2026-31717

In the Linux kernel ksmbd, a vulnerability allows an authenticated user to hijack an orphaned durable handle by reconnecting with a different security context. The issue stems from ksmbd not verifying that the requester’s SecurityContext matches the original opener when a durable handle is reconn...

CVE-2026-43036

Summary (CVE-2026-43036) : The issue resides in the Linux kernel networking path, where gso_features_check() read IPv4 header offsets (iph->frag_off) in a way that could dereference uninitialized data when packets are injected via PF_PACKET paths. The root cause is unsafe header dereferencing ...

CVE-2026-43128

Summary: CVE-2026-43128 affects the Linux kernel RDMA/umem subsystem. In ib_umem_dmabuf_get_pinned_with_dma_device(), if ib_umem_dmabuf_map_pages() fails, the code previously unpinned the dmabuf immediately while the umem_dmabuf->pinned flag remained set, causing a potential double dma_buf_unp...

CVE-2026-43185

In Linux kernel ksmbd, a signedness bug in smb_direct_prepare_negotiation() casts unsigned __u32 values from sp->max_recv_size and req->preferred_send_size to signed int before min_t(). A crafted preferred_send_size of 0x80000000 can be treated as smaller than max_recv_size, enabling a subs...