CVE-2023-1073

CVE-2023-1073 is a memory corruption flaw in the Linux kernel HID subsystem triggered by inserting a malicious USB device. The impact is local: a nearby user can crash the system or potentially escalate privileges. Public documents confirm the issue is tracked across multiple advisories (e.g., AL...

CVE-2023-25012

CVE-2023-25012 is a Linux kernel use-after-free in the HID bigben driver (hid-bigbenff.c). A crafted USB device can leave LED controllers registered too long, enabling a local attacker with physical access to trigger a use-after-free in bigben_remove, potentially causing a denial of service or ar...

CVE-2023-52340

The CVE concerns the Linux kernel IPv6 implementation (net/ipv6/route.c) where a max_size threshold can be exhausted, enabling a denial-of-service condition (network is unreachable) when IPv6 packets loop via a raw socket. Affected: Linux kernel versions prior to 6.3. Impact is denial of service ...

CVE-2024-53123

CVE-2024-53123 affects the Linux kernel and is tied to MPTCP: the issue stems from racing disconnect handling. After a blamed commit, sk_wait_data() can return with an error while the underlying socket is already disconnected and the receive window (rcv_mss) is zero. The result is a potential use...

CVE-2019-18814

CVE-2019-18814 affects the Linux kernel up to version 5.3.9. The vulnerability is a use-after-free in aa_label_parse() when it fails inside aa_audit_rule_init() in security/apparmor/audit.c. The issue can lead to memory corruption via use-after-free, with potential impact to confidentiality, inte...

CVE-2021-20321

CVE-2021-20321 is a race-condition vulnerability in the Linux kernel OverlayFS subsystem affecting how file renames are performed, potentially allowing a local attacker to crash the system via OverlayFS misuse. Connected advisories corroborate that the issue resides in OverlayFS file object handl...

CVE-2020-12652

CVE-2020-12652 concerns the Linux kernel. The issue is in the function "__mptctl_ioctl" in drivers/message/fusion/mptctl.c, where an operation may hold an incorrect lock during an ioctl, enabling a local race condition (double fetch). The vulnerability affects Linux kernels prior to 5.4.14. Explo...

CVE-2026-46316

A vulnerability in Linux kernel KVM for ARM64 (vgic-its) is resolved. The issue stemmed from vgic_its_invalidate_cache() traversing the per-ITS translation cache with xa_for_each() and dropping the cache’s reference on each entry using vgic_put_irq(), but it dropped the reference of the pointer r...

CVE-2017-1000252

CVE-2017-1000252 : The Linux kernel KVM subsystem (arch/x86/kvm/vmx.c and virt/kvm/eventfd.c) is vulnerable to a denial of service caused by an out-of-bounds guest_irq value. The issue allows a local guest OS user to trigger an assertion failure, leading to a hypervisor hang or crash. The descrip...

CVE-2017-15129

CVE-2017-15129 describes a use-after-free in Linux kernel network namespaces: get_net_ns_by_id() may skip verifying net::count after locating a peer in netns_ids idr, enabling a double free and memory corruption. Affected: Linux kernel before 4.14.11; impact includes potential system crash and po...

CVE-2018-18559

CVE-2018-18559 affects the Linux kernel up to 4.19, caused by a use-after-free in a race between fanout_add from setsockopt and bind on AF_PACKET sockets. The issue stems from an incomplete fix (15fe076...) and a multithreaded sequence where a packet_do_bind unregister action followed by a packet...

CVE-2018-7566

CVE-2018-7566 is confirmed in the Connected documents as a Linux kernel 4.15 vulnerability. It describes a buffer overflow in ALSA/seq handling: an SNDRV_SEQ_IOCTL_SET_CLIENT_POOL ioctl write to /dev/snd/seq can be triggered by a local user. The affected component is the kernel’s sound/ALSA subsy...

CVE-2019-15924

CVE-2019-15924 : The issue is in the Linux kernel before 5.0.11, where fm10k_init_module in drivers/net/ethernet/intel/fm10k/fm10k_main.c can dereference NULL when an alloc_workqueue failure occurs due to missing -ENOMEM handling. This can lead to a crash or potential denial of service on affecte...

CVE-2019-19074

The CVE-2019-19074 entry describes a memory leak in the ath9k_wmi_cmd() function (drivers/net/wireless/ath/ath9k/wmi.c) of the Linux kernel up to version 5.3.11, which can be exploited to cause a denial of service via memory consumption. Root cause is a leak within ath9k_wmi_cmd() that enables me...

CVE-2021-3744

CVE-2021-3744 is a memory-leak DoS in the Linux kernel: the flaw occurs in the ccp_run_aes_gcm_cmd() function (drivers/crypto/ccp/ccp-ops.c), allowing memory consumption-based denial of service. Connected advisories (Astra Linux and Amazon Linux 2 kernel updates) confirm the same root cause and n...

CVE-2018-19824

CVE-2018-19824 is a local-use-after-free in the Linux kernel’s ALSA USB audio driver. A local attacker could trigger the flaw by attaching a malicious USB sound device (configured with zero interfaces), which is mishandled during usb_audio_probe in sound/usb/card.c. Affected software is the Linux...

CVE-2019-15218

CVE-2019-15218: Linux kernel before 5.1.8 contains a NULL pointer dereference in drivers/media/usb/siano/smsusb.c triggered by a malicious USB device. Affected is the Linux kernel version range up to 5.1.7; exploitation could lead to a crash or denial of service on affected systems. Remediation i...

CVE-2022-41858

The CVE-2022-41858 entry concerns a NULL pointer dereference in the Linux kernel slip driver path, specifically detaching in sl_tx_timeout (drivers/net/slip/slip.c). The connected Astra Linux bulletin reiterates the same description for the Linux kernel 5.x variant, confirming the vulnerability i...

CVE-2024-36905

Mode C: The connected Broadcom advisory lists CVE-2024-36905 as not affected for Brocade Fabric OS before 10.0.0, with inline mitigations already in place. No other connected document provides concrete product/version details for this CVE beyond that note. Therefore, no active vulnerability detai...

CVE-2015-1805

CVE-2015-1805 covers a local elevation/DoS flaw in the Linux kernel where the pipe_read/pipe_write paths in fs/pipe.c mishandle side effects from failed __copy_to_user_inatomic and __copy_from_user_inatomic calls. The issue permits a local user to crash the system or potentially gain privileges v...

CVE-2018-1092

CVE-2018-1092 : Linux kernel ext4 mounting a crafted ext4 image can trigger a NULL pointer dereference in ext4_iget, causing denial of service. This vulnerability is confirmed in multiple advisories (e.g., Debian/Ubuntu RedHat CLIs) and is addressed by applying vendor kernel updates to fixed vers...

CVE-2020-25670

CVE-2020-25670 is a Linux kernel vulnerability affecting the NFC LLCP protocol implementation. The issue is a refcount leak in llcp_sock_bind() that can cause a use-after-free, with the potential for privilege escalation. The connected documents confirm the vulnerability and its association with ...

CVE-2022-4543

CVE-2022-4543, described as EntryBleed, is a Linux kernel vulnerability in the Page Table Isolation (KPTI) path that could allow a local attacker to leak the KASLR base address via prefetch side-channels based on TLB timing on Intel CPUs. The connected sources confirm the issue’s existence and it...

CVE-2024-0193

CVE-2024-0193 is a Linux kernel netfilter NFT_TABLES use-after-free flaw. The issue arises when the catchall element is garbage-collected during removal of the pipapo set, enabling double deactivation of the element and a use-after-free on NFT_CHAIN or NFT_OBJECT. This could allow a local unprivi...

CVE-2015-8660

CVE-2015-8660 targets the ovl_setattr path in Linux overlayfs (fs/overlayfs/inode.c) up to kernel 4.3.3. The issue arises from attempting to merge distinct setattr operations, allowing local users to bypass access restrictions and modify attributes of arbitrary overlay files via a crafted applica...

CVE-2017-6214

CVE-2017-6214 affects the Linux kernel TCP splice/tcp_splice_read handling of urgent data (URG flag). The vulnerability can cause a denial of service via an infinite loop/soft lockup in the kernel when processing certain TCP packets. Affected are Linux kernels older than 4.9.11; patching to 4.9.1...

CVE-2018-8822

The CVE-2018-8822 issue affects the Linux kernel, specifically the ncp_read_kernel handling in fs/ncpfs/ncplib_kernel.c and the corresponding code in drivers/staging/ncpfs/ncplib_kernel.c. The root cause is incorrect buffer length handling, reported for Linux kernel versions up to 4.15.11 and for...

CVE-2023-44466

CVE-2023-44466 is described as a Linux kernel issue in net/ceph/messenger_v2.c (before 6.4.5) with a signedness error that enables a buffer overflow and remote code execution via HELLO or AUTH frames, caused by an untrusted length from a TCP packet in ceph_decode_32. The Connected documents reite...

CVE-2024-41010

The CVE-2024-41010 issue concerns the Linux kernel: a tcx_entry could be released too early, causing a use-after-free when an active old-style ingress or clsact qdisc with a shared tc block is replaced. The vulnerability path is tied to the tcx_entry lifecycle during qdisc creation, graft, and de...

CVE-2019-19066

CVE-2019-19066 is a memory-leak issue in the Linux kernel: bfad_im_get_stats() in drivers/scsi/bfa/bfad_attr.c (up to 5.3.11) can leak memory and enable denial-of-service via repeated bfa_port_get_stats() failures. Affected component: Linux kernel bfad_attr/bfad_attr. Root cause is a memory leak ...

CVE-2021-28972

CVE-2021-28972 affects the Linux kernel RPA PCI Hotplug driver (drivers/pci/hotplug/rpadlpar_sysfs.c) up to version 5.11.8. It is a user‑tolerable buffer overflow caused by improper handling of drc_name termination in add_slot_store/remove_slot_store, allowing userspace to write into the kernel s...

CVE-2021-38198

CVE-2021-38198 affects the Linux kernel’s KVM implementation for x86. The vulnerability resides in arch/x86/kvm/mmu/paging_tmpl.h where shadow page access permissions are computed incorrectly, leading to a missing guest protection page fault. This can undermine guest isolation and may enable inst...

CVE-2022-3108

CVE-2022-3108 is a Linux kernel vulnerability affecting kernels up to 5.16-rc6 where kfd_parse_subtype_iolink (drivers/gpu/drm/amd/amdkfd/kfd_crat.c) does not check the return value of kmemdup(). The issue is a missing return-value check in memory copy logic, which could enable memory corruption ...

CVE-2023-26545

CVE-2023-26545 affects the Linux kernel’s MPLS implementation: a double-free in net/mpls/af_mpls.c can occur on allocation failure when renaming a device during sysctl table relocation, prior to kernel 6.1.13. The issue enables local exploitation with impact on availability (denial of service) as...

CVE-2023-37453

CVE-2023-37453: Linux kernel USB subsystem contains an out-of-bounds read in read_descriptors() within drivers/usb/core/sysfs.c, which can crash the system when handling a crafted USB device. The connected documents provide description and impact but do not specify a public patch/version. Monitor...

CVE-2018-20854

CVE-2018-20854 affects the Linux kernel up to version 4.20, where an off-by-one error in drivers/phy/mscc/phy-ocelot-serdes.c can cause a ctrl->phys out-of-bounds read. The issue is rooted in a boundary condition in that SerDes driver, leading to potential information disclosure or instability...

CVE-2021-38166

CVE-2021-38166 affects the Linux kernel (bpf/hashtab.c) up to 5.13.8. An integer overflow can cause an out-of-bounds write when many elements occupy a single bucket, potentially enabling local denial-of-service or arbitrary-code execution. Exploitation is mitigated by CAP_SYS_ADMIN requirements; ...

CVE-2022-1786

CVE-2022-1786 is a use-after-free in the Linux kernel io_uring subsystem triggered when a ring is set up with IORING_SETUP_IOPOLL and more than one task completes submissions on that ring. The consequence is local privilege escalation or a crash. Public details in connected documents confirm the ...

CVE-2022-24448

CVE-2022-24448 affects the Linux kernel’s NFS path: in fs/nfs/dir.c, if an application opens a regular file with O_DIRECTORY set, nfs_atomic_open() does a regular lookup and returns uninitialized data in the file descriptor when a regular file is found instead of ENOTDIR. This issue is documented...

CVE-2022-2663

CVE-2022-2663 is a Linux kernel issue in nf_conntrack_irc where message handling can be confused, causing incorrect matching and potentially allowing a firewall bypass when users operate with unencrypted IRC with nf_conntrack_irc enabled. The primary affected component is nf_conntrack_irc within ...

CVE-2024-50081

CVE-2024-50081 is confirmed in connected advisory: the Linux kernel vulnerability in blk-mq was due to race where q->tag_set may not be initialized when the cpuhp handler runs, triggering an oops. The MiracleLinux AXSA advisory (kernel 5.14.0-570.12.1.el9_6) explicitly lists CVE-2024-50081 and...

CVE-2025-21756

CVE-2025-21756 affects the Linux kernel vsock subsystem. The issue arises from keeping socket bindings until destruction, preventing correct unbinding during transport reassignment. This leads to a use-after-free in the binding path, observed as a KASAN slab-use-after-free in __vsock_bind and rel...

CVE-2020-36516

CVE-2020-36516 : Linux kernel (through 5.16.11) contains a flaw in the mixed IPID assignment method with a hash-based IPID policy that allows an off-path attacker to inject data into or terminate a victim’s TCP session. The issue affects the kernel’s TCP/IP handling and is documented in multiple ...

CVE-2022-26490

CVE-2022-26490 affects the Linux kernel ST21NFCA NFC driver (st21nfca_connectivity_event_received in drivers/nfc/st21nfca/se.c) up to and including kernel versions prior to the patched releases. The issue is a buffer overflow caused by untrusted length parameters (EVT_TRANSACTION), which can lead...

CVE-2022-42721

CVE-2022-42721 is a local, WLAN-frame–triggered vulnerability in the Linux kernel mac80211/BSS handling (linked-list corruption in net/wireless/scan.c; cfg80211_add_nontrans_list) affecting 5.1–5.19.x prior to 5.19.16. Exploitation could enable code execution via crafted frames; patches exist in ...

CVE-2018-10878

CVE-2018-10878 is confirmed in the Linux kernel ext4 filesystem. The connected Nessus advisories reference a local attacker mounting a crafted ext4 image to trigger an out-of-bounds write, leading to denial of service and potential other impacts. Unity Linux UTSA advisories (e.g., UTSA-2026-00113...

CVE-2021-20177

CVE-2021-20177: Linux kernel flaw in string matching for packets; a privileged user (root or CAP_NET_ADMIN) inserting iptables rules can trigger a kernel panic. Affected kernels before 5.5-rc1. Mitigation is to apply a patch/upstream fix (5.5-rc1 or newer).

CVE-2021-3753

CVE-2021-3753 describes a race in the Linux kernel’s vt_k_ioctl() (vt_ioctl.c) that may cause an out-of-bounds read in vt as vc_mode write access is not protected by a lock. Impact is listed as data confidentiality; exploitation details are not provided in the supplied documents. Connected source...

CVE-2022-3628

CVE-2022-3628 is a buffer overflow in the Linux kernel Broadcom Full MAC Wi‑Fi driver (brcmfmac) that triggers when a user connects a malicious USB device. The linked documents consistently describe it as a local overflow that could crash the system or escalate privileges. Affected: Linux kernel ...

CVE-2022-42720

CVE-2022-42720 concerns the Linux kernel mac80211 WLAN stack. It describes refcounting bugs in multi-BSS handling that can trigger use-after-free when WLAN frames are injected, potentially enabling local code execution. Affected are kernel versions 5.1–5.19.x prior to 5.19.16; several distributio...