CVE-2002-1573

CVE-2002-1573 refers to an unspecified vulnerability in the Linux kernel’s pcilynx ieee1394 (pcilynx.c) driver, affected in kernels before 2.4.20 and related to wrap handling. The initial description notes unknown impact and attack vectors; public detail is limited. Public references describe the...

CVE-2002-1574

CVE-2002-1574 describes a buffer overflow in the ixj telephony card driver of Linux kernels prior to 2.4.20. Connected sources confirm the issue affects the ixj driver in Linux, and Red Hat advisories (RHSA-2004:044, RHSA-2004:106) reference this and indicate that updated kernel packages contain ...

CVE-2005-3753

CVE-2005-3753 affects the Linux kernel in the 2.6.x line, around versions near 2.6.12 up to 2.6.13.1. The issue could allow a denial of service (an Oops) via certain IPSec packets that trigger alignment problems in standard multi-block cipher processors. The description notes it is not clear whet...

CVE-2006-0554

CVE-2006-0554 affects the Linux kernel 2.6.x prior to 2.6.15.5. The vulnerability arises in the XFS ftruncate call, where a crafted operation can cause the kernel to return stale data, enabling local information disclosure. Reported as a local, user-privilege‑required issue, with no remote execut...

CVE-2006-2446

CVE-2006-2446 describes a race condition between kfree_skb and __skb_unlink in Linux kernel socket buffer handling (Linux kernel 2.6.9 and possibly others) that can allow remote attackers to cause a denial of service (crash) as demonstrated by TCP stress tests in the LTP suite. Connected document...

CVE-2007-3720

The CVE-2007-3720 entry describes a vulnerability in the Linux kernel 2.4 process scheduler that uses CPU billing from periodic sampling ticks. This design allows local users to cause a denial of service (CPU consumption) by calling voluntary nanosecond sleeps, making the process inactive during ...

CVE-2008-3911

The CVE-2008-3911 issue affects the Linux kernel 2.6.26.3, specifically the proc_do_xprt function in net/sunrpc/sysctl.c, which does not validate the length of a user-supplied buffer when reading /proc/sys/sunrpc/transports. This can allow local users to overflow a stack-based buffer and cause un...

CVE-2008-4410

CVE-2008-4410 affects Linux kernel 2.6.26.5: the vmi_write_ldt_entry function in arch/x86/kernel/vmi_32.c invokes write_idt_entry where write_ldt_entry was intended, enabling local users to trigger a denial of service (persistent application failure) through crafted function calls. The descriptio...

CVE-2009-1527

CVE-2009-1527 affects the Linux kernel prior to 2.6.30-rc4, where a race condition in ptrace_attach (kernel/ptrace.c) can let local users escalate privileges during an exec that launches a setuid process. The root cause is locking of an incorrect cred_exec_mutex object, enabling a PTRACE_ATTACH p...

CVE-2009-3043

The CVE-2009-3043 entry affects Linux kernel 2.6.31-rc before 2.6.31-rc8. The tty_ldisc_hangup function in drivers/char/tty_ldisc.c allows local users to trigger a denial of service (system crash, sometimes with a NULL pointer dereference) and may enable privilege escalation via certain pseudo-te...

CVE-2011-4112

CVE-2011-4112 affects the Linux kernel net subsystem prior to 3.1. The issue arises from improper restriction of the IFF_TX_SKB_SHARING flag, enabling local users with CAP_NET_ADMIN to access /proc/net/pktgen/pgctrl and, using the pktgen package with a bridge device for a VLAN interface, trigger ...

CVE-2012-4467

The vulnerability CVE-2012-4467 affects the Linux kernel (pre-3.5.4). The affected code paths are the do_siocgstamp and do_siocgstampns functions in net/socket.c, which use an incorrect argument order, enabling local users to either read sensitive kernel memory or trigger a denial of service (sys...

CVE-2013-3233

CVE-2013-3233 affects the Linux kernel NFC subsystem: llcp_sock_recvmsg in net/nfc/llcp/sock.c does not initialize a length variable and a data structure, enabling local users to leak kernel-stack information via crafted recvmsg/recvfrom calls. The flaw is in kernels before 3.9-rc7. Impact is loc...

CVE-2016-10293

CVE-2016-10293 is an information-disclosure flaw in the Qualcomm video driver on Android (Kernel-3.10). A local malicious app could access data beyond its permissions by exploiting the driver when a privileged process is compromised. The vulnerability is listed for Nexus 5X, Nexus 6P, and Android...

CVE-2016-8398

CVE-2016-8398 affects Android on kernels up to 3.18, where unauthenticated NAS messages can be processed by the UE when no EPS security context exists. This is a network-exploitable issue (no user interaction) with high impact to confidentiality, integrity, and availability (CVSSv3: AV:N/AC:L/PR:...

CVE-2016-8428

CVE-2016-8428 affects NVIDIA Tegra kernel driver (NVMAP). The issue allows reading/writing memory outside the intended buffer boundary, potentially enabling a local attacker to escalate privileges or cause a denial of service. Impact is kernel context level on affected Android kernels; CVSS vecto...

CVE-2016-8454

Technical details for CVE-2016-8454 are not publicly available in the provided documents. Monitor for updates.

CVE-2016-8458

The CVE-2016-8458 entry concerns an elevation-of-privilege vulnerability in the Synaptics touchscreen driver on Android. A local malicious application could execute arbitrary kernel code via the vulnerable Synaptics driver, with impact described as Kernel-level compromise. Affected components/ver...

CVE-2016-8460

CVE-2016-8460 : An information disclosure in the NVIDIA Tegra kernel driver (NVMAP) could leak uninitialized stack memory to a local user, enabling data exposure. Affected: Android on Kernel-3.10 (Nexus 9 cited). Impact per sources: information disclosure; CVSS v3 base 5.5 (medium). Remediation: ...

CVE-2016-8465

CVE-2016-8465 is an elevation-of-privilege vulnerability in the Broadcom Wi‑Fi driver that could let a local malicious app execute code in the kernel. Documents confirm the issue affects Android devices (kernel 3.10/3.18) and that exploitation requires a privileged process, with current mitigatio...

CVE-2017-0327

CVE-2017-0327 affects the NVIDIA crypto driver in the Android/Tegr­a kernel. The connected document notes that the vulnerability arises because an input buffer is copied to an output buffer without validating the input size, which may lead to memory corruption and a denial of service (the NVIDIA ...

CVE-2017-0333

CVE-2017-0333 : An elevation of privilege in the NVIDIA GPU driver could allow a local malicious Android process to run arbitrary code in the kernel context on devices with Kernel-3.18. This could lead to a local permanent compromise and may require reflashing the OS to repair the device. The pro...

CVE-2017-0573

CVE-2017-0573 describes an elevation of privilege in the Broadcom Wi‑Fi driver used by Android, enabling a local malicious application to execute arbitrary code in the kernel. Affected: Android on Kernel-3.10 and Kernel-3.18. Root cause: elevation of privilege via Broadcom Wi‑Fi driver; no specif...

CVE-2017-8070

CVE-2017-8070 affects the Linux kernel 4.9.x prior to 4.9.11. The issue is in drivers/net/usb/catc.c where interaction with CONFIG_VMAP_STACK allows a local user to trigger denial of service (system crash or memory corruption) by exploiting use of more than one virtual page for a DMA scatterlist....

CVE-2022-50058

CVE-2022-50058 affects the Linux kernel's vdpa_sim_blk: a missing initialization of nas and ngroups can cause a kernel NULL pointer dereference when creating a new vdpa_sim_blk device, leading to a panic in vhost_iotlb_add_range_ctx. The issue arises from commit changes adding nas/ngroups to vdpa...

CVE-2022-50224

CVE-2022-50224 is a Linux kernel/KVM issue where NX is treated as a valid SPTE bit for NPT, enabling a mismatch that can trigger a WARN when reserved SPTE bits are set. Concrete details come from the Linux kernel KVM/mmu path, including a traceback and a mitigation involving NX handling when the ...

CVE-2023-20659

CVE-2023-20659 concerns a local out-of-bounds write in the WLAN path of a MediaTek/ALPS component, caused by a missing bounds check. The issue can lead to local privilege escalation with System execution privileges needed; exploitation does not require user interaction. The patch reference provid...

CVE-2023-20662

The CVE-2023-20662 entry describes a vulnerability in the wlan component where an integer overflow causes an out-of-bounds write. This could enable local escalation of privilege with SYSTEM-level execution privileges and requires no user interaction. A patch is identified as ALPS07560765 (Issue A...

CVE-2023-20663

CVE-2023-20663 describes a potential out-of-bounds write in wlan due to an integer overflow, enabling local privilege escalation with System execution privileges required and no user interaction. The vulnerability is tied to a patch ID ALPS07560741 / Issue ID ALPS07560741. Connected sources menti...

CVE-2023-20676

CVE-2023-20676 is an out-of-bounds read vulnerability in the WLAN component of MediaTek devices (notably affecting Mediatek WLAN stacks such as MT5221 and similar chips). The underlying issue is a missing bounds check, enabling local information disclosure and, per the description, potentially al...

CVE-2023-53186

CVE-2023-53186 refers to a Linux kernel race in skbuff coalescing with page_pool fragments. The provided sources describe a race where cloning and in-flight coalescing can lead to inaccurate SKB frag reference counting, potentially causing use-after-free or double-free of page data when SKBs are ...

CVE-2023-53275

CVE-2023-53275: In Linux kernel ALSA HDA code, a data race around snd_hdac_regmap_sync() can lead to a null-pointer dereference of codec->regmap if it is NULL after an if check. The root cause is accessing codec->regmap without holding the regmap_lock, which could race with regcache_sync() ...

CVE-2023-53401

CVE-2023-53401 pertains to the Linux kernel memory.c mm subsystem. KCSAN detected a data race in obj_stock_flush_required() where stock->cached_objcg could be reset between a check and a dereference, potentially causing a NULL pointer dereference. The associated fix implemented in the kernel i...

CVE-2023-53442

Technical details about CVE-2023-53442 are not present in the provided connected documents. The SUSE/Tenable entries reference kernel fixes in general but do not disclose affected products/versions or specific exploit vectors here. Monitor for official patch specifics.

CVE-2024-57927

CVE-2024-57927 relates to the Linux kernel’s NFS write-to-cache path. The root cause was that nfs_netfs_init_request() could be invoked with a NULL file pointer when netfslib copied freshly read data into a write request for the cache, causing an oops via nfs_file_open_context(). The fix prevents...

CVE-2025-38069

Technical details for CVE-2025-38069 are not provided in the connected documents. Monitor for updates from upstream advisories.

CVE-2025-38281

Public technical details about CVE-2025-38281 are not provided in the connected documents. The available descriptions indicate a NULL check addition in mt7996_thermal_init for Linux kernel wifi mt76 mt7996, but no further specifics.

CVE-2025-38301

CVE-2025-38301 affects the Linux kernel nvmem driver for zynqmp_nvmem; root cause: the driver expected a device pointer in context but nvmem_config.priv is never set, causing NULL pointer dereferences when accessing the device. A fix was committed to restore correct context handling (commit 29be4...

CVE-2025-38511

CVE-2025-38511 affects the Linux kernel DRM/xe/pf LMEM handling: when provisioning VFs, LMEM PTEs beyond the actually provisioned LMEM range may remain stale, risking leakage to other VFs or PF pages. The fix is to explicitly clear all new LMTT pages on allocation to eliminate this gap. The chang...

CVE-2025-38535

CVE-2025-38535 relates to the Linux kernel on Tegra XUSB where regulator disable logic became unbalanced when leaving USB_ROLE_DEVICE. The fix moves regulator control into tegra186_xusb_padctl_id_override() and disables the regulator only when transitioning from USB_ROLE_HOST to USB_ROLE_NONE aft...

CVE-2025-38547

CVE-2025-38547 affects the Linux kernel IIO ADC driver for AXP717 (iio: adc: axp20x_adc). The issue is a missing sentinel entry in the AXP717 ADC channel maps, which can trigger a KASAN warning. The fix adds the missing sentinel entry to the channel maps. No exploitation details are provided in t...

CVE-2025-38569

CVE-2025-38569 (Linux kernel benet) arises from a bug in the be2net SR-IOV VF MAC address configuration flow where be_cmd_set_mac_list() calls dma_free_coherent() while still under spin_lock_bh, leading to a kernel crash (BUG at mm/vmalloc.c and OOPs) when SR-IOV VFs are created. The linked advis...

CVE-2025-38664

The CVE-2025-38664 entry is a Linux kernel issue affecting the ice driver: a null pointer dereference in ice_copy_and_init_pkg() could occur if devm_kmemdup() returns NULL. The advisory notes a fix by adding a NULL check for the return value of devm_kmemdup() to prevent the dereference, with the ...

CVE-2025-39683

CVE-2025-39683 (Linux kernel tracing vulnerability) The issue occurs when processing long strings in ftrace filters: trace_get_user may fail, but parser->buffer end is not zeroed, leading to a slab-out-of-bounds read in strsep/ftrace_process_regex and related release paths. The result is a loc...

CVE-2025-39813

CVE-2025-39813 concerns the Linux kernel ftrace subsystem. A race between ftrace_dump() and trace_pipe reads could trigger WARN_ON_ONCE in trace_printk_seq() when trace data is consumed by other readers, causing iter.seq to be mispopulated. The documented fix moves the trace_printk_seq() call ins...

CVE-2025-39851

CVE-2025-39851 relates to the Linux kernel VXLAN implementation. Affected scenario is when learning is enabled and an incoming packet attempts to refresh an FDB entry that points to an FDB nexthop group (not a remote destination). This could dereference a non-existent remote and trigger a NULL po...

CVE-2025-68340

The CVE-2025-68340 issue affects the Linux kernel team device driver (drivers/net/team). The root cause is a misordered type-change check in team_port_add: when adding a port device that is already UP, the operation succeeds until header_ops is changed from eth_header to ipgre_header inside team_...

CVE-2025-71094

CVE-2025-71094: In the Linux kernel, the ASIX USB Ethernet driver (net: usb: asix) could read an invalid PHY address from a USB device (address >= PHY_MAX_ADDR), triggering a warning in mdiobus_get_phy. The fix validates the PHY address in asix_read_phy_addr() and removes the now-redundant che...

CVE-2025-71306

CVE-2025-71306 is a Linux kernel vulnerability affecting the Integrity Measurement Architecture (IMA). The issue is a stack-out-of-bounds access in the function ima_appraise_measurement when processing bprm_creds for exec, traced to an incorrect offset calculation caused by using container_of on ...

CVE-2026-22979

CVE-2026-22979 is a Linux kernel vulnerability affecting memory accounting for GRO-fragmented SKBs. The issue arose because skb_segment_list() continued to add each fragment’s truesize to delta_truesize while subtracting it from the parent SKB, even though fragments are no longer charged to the s...