CVE-2019-19543

CVE-2019-19543: In the Linux kernel up to 5.1.5/5.1.6, there is a use-after-free in serial_ir_init_module() in drivers/media/rc/serial_ir.c. A local attacker could trigger this UAF via the serial IR device support, with the impact described as potential denial of service or instability once the f...

CVE-2022-0480

CVE-2022-0480 is a Linux kernel vulnerability in filelock_init (fs/locks.c) where memory exhaustion can occur because memcg does not limit the number of POSIX file locks. Connected documents confirm the issue across multiple Linux distributions (Astra Linux, AlmaLinux, IBM Power PowerVM advisory)...

CVE-2023-37453

CVE-2023-37453: Linux kernel USB subsystem contains an out-of-bounds read in read_descriptors() within drivers/usb/core/sysfs.c, which can crash the system when handling a crafted USB device. The connected documents provide description and impact but do not specify a public patch/version. Monitor...

CVE-2024-50081

CVE-2024-50081 is confirmed in connected advisory: the Linux kernel vulnerability in blk-mq was due to race where q->tag_set may not be initialized when the cpuhp handler runs, triggering an oops. The MiracleLinux AXSA advisory (kernel 5.14.0-570.12.1.el9_6) explicitly lists CVE-2024-50081 and...

CVE-2018-10675

The CVE-2018-10675 issue affects the Linux kernel prior to 4.12.9, where the do_get_mempolicy function in mm/mempolicy.c allows a local attacker to trigger a use-after-free, leading to denial of service and potentially other impact. Affected versions include kernels compiled into Linux-based prod...

CVE-2018-15594

CVE-2018-15594 affects the Linux kernel arch/x86/paravirt.c, where mishandling of certain indirect calls weakens Spectre-v2 mitigations for paravirtual guests. The issue is addressed in kernel updates up to 4.18.1 (ChangeLog-4.18.1, commit 5800dc5c…). In practice, vulnerable systems running affec...

CVE-2020-27673

CVE-2020-27673 is described in connected advisories as a Linux kernel race-condition bug in Xen event handling, permitting a guest (domU) to cause a denial of service or host hang in dom0 when exposed to high event rates. Affected scope: Linux kernel up to 5.9.1, used with Xen through 4.14.x. The...

CVE-2022-2153

CVE-2022-2153 is a vulnerability in the Linux kernel’s KVM related to setting a SynIC IRQ. The issue allows a misbehaving VMM to write to SYNIC/STIMER MSRs, which can cause a NULL pointer dereference and a kernel oops, enabling an unprivileged local attacker on the host to trigger a denial of ser...

CVE-2023-1118

CVE-2023-1118 is a use-after-free in the Linux kernel’s infrared (ene_ir) remote-control driver. The flaw occurs when a user detaches an rc device, enabling a local user to crash the system and potentially escalate privileges. The description appears consistently across sources (e.g., Astra Linux...

CVE-2018-13053

CVE-2018-13053 affects the Linux kernel alarm_timer_nsleep path (kernel/time/alarmtimer.c) through 4.17.3, due to an integer overflow when handling large relative timeouts because ktime_add_safe is not used. This is confirmed by multiple connected advisories (e.g., F5 security advisory summarizin...

CVE-2018-18445

CVE-2018-18445 affects the Linux kernel in 4.14.x–4.18.x; prior to 4.18.13, the BPF verifier’s adjust_scalar_min_max_vals mishandles 32-bit right shifts, enabling out-of-bounds memory accesses. Several advisories confirm the issue and reference the fix in 4.18.13 (and backported patches for earli...

CVE-2019-14898

CVE-2019-14898 refers to an incomplete fix for CVE-2019-11599 in the Linux kernel prior to 5.0.10. The issue allows a local attacker to trigger a race between mmget_not_zero() and get_task_mm(), which can lead to information disclosure, denial of service, or other unspecified impacts as described...

CVE-2023-31084

The CVE-2023-31084 issue affects Linux kernel 6.2 in drivers/media/dvb-core/dvb_frontend.c. The root cause is a blocking operation when a task is not TASK_RUNNING: in dvb_frontend_get_event wait_event_interruptible checks dvb_frontend_test_event(fepriv, events) and, if false, down(&fepriv->sem...

CVE-2018-18281

CVE-2018-18281 is a Linux kernel local vulnerability due to a race in mremap() where TLB flushes can occur too late, potentially allowing a process to access memory after it has been freed. The issue stems from moving page tables during mremap(), where stale TLB entries may remain until after the...

CVE-2019-20810

CVE-2019-20810 affects the Linux kernel’s go7007 driver: go7007_snd_init in drivers/media/usb/go7007/snd-go7007.c fails to call snd_card_free on a failure path, causing a memory leak (CID-9453264ef586). Public docs specify this vulnerability exists in kernels before 5.6. The described remediation...

CVE-2022-1679

CVE-2022-1679 is a use-after-free flaw in the Linux kernel’s Atheros ath9k_htc driver. Connected advisories specify a use-after-free in ath9k_htc_wait_for_target (and related notes) that can allow a local user to crash or escalate privileges. Affected component: Linux kernel wireless driver (ath9...

CVE-2022-3640

CVE-2022-3640 is a Linux Kernel issue affecting the Bluetooth layer. The vulnerability stems from a use-after-free in the l2cap_conn_del function in net/bluetooth/l2cap_core.c. The Astra Linux bulletin confirms the same flaw and notes affected kernel lines (linux-5.10, linux-5.15), indicating the...

CVE-2022-41222

CVE-2022-41222 : A use-after-free in mm/mremap.c of the Linux kernel (prior to 5.13.3) enables stale TLB access due to an rmap lock not being held during a PUD move. Impact is described as potential denial of service, memory corruption, privilege escalation, or information leak when a local user ...

CVE-2022-42719

Summary of CVE-2022-42719 : A use-after-free in the mac80211 wireless stack when parsing a multi-BSSID element in the Linux kernel (versions 5.2–5.19.14) could allow a remote attacker who can inject WLAN frames to crash the kernel and potentially execute code. The vulnerability impacts the Linux ...

CVE-2017-1000364

CVE-2017-1000364 affects the Linux kernel stack guard page (4k) so the stack-pointer can jump over the guard, enabling local privilege escalation. Affected: Linux kernel 4.11.5 and earlier. Impact: privilege escalation via stack-clash-like behavior; no remote vector described. Root cause: insuffi...

CVE-2019-12454

The CVE-2019-12454 vulnerability affects the Linux kernel up to version 5.1.5 in wcd9335_codec_enable_dec (sound/soc/codecs/wcd9335.c). The issue arises because kstrndup is used instead of kmemdup_nul, which could enable an unspecified impact via unknown vectors. The vendor disputes this as a vul...

CVE-2023-39198

CVE-2023-39198 describes a race condition in the Linux kernel’s QXL driver. The qxl_mode_dumb_create() path dereferences the qxl_gem_object_create_with_handle() result while the handle is the sole reference, enabling a caller to guess the handle value and trigger a use-after-free. This can lead t...

CVE-2024-25744

In CVE-2024-25744, Linux kernel versions before 6.6.7 are vulnerable: an untrusted VMM can trigger int80 syscall handling at any point due to code in arch/x86/coco/tdx/tdx.c and arch/x86/mm/mem_encrypt_amd.c. This is a local-privilege impact condition as described by the advisory, with a base sco...

CVE-2017-7184

The CVE-2017-7184 issue affects the Linux kernel xfrm subsystem, where xfrm_replay_verify_len in net/xfrm/xfrm_user.c up to 4.10.6 does not validate certain size data after an XFRM_MSG_NEWAE update, enabling a local attacker with CAP_NET_ADMIN to cause a heap-based out-of-bounds access and potent...

CVE-2023-6610

CVE-2023-6610 is an out-of-bounds read in Linux kernel’s smb2_dump_detail() (fs/smb/client/smb2ops.c). The vulnerability can allow a local attacker to crash the kernel or leak internal kernel information. Connected advisories (e.g., MiracleLinux/Tencent/Tenable Nessus entries) confirm the issue a...

CVE-2024-26934

CVE-2024-26934: Linux kernel USB core deadlock in usb_deauthorize_interface() when sysfs attribute callbacks hold a parent device lock. Affected: drivers/usb/core/sysfs.c (interface_authorized_store) acquiring parent device lock; fix uses sysfs_break_active_protection() to avoid waiting for the c...

CVE-2015-8660

CVE-2015-8660 targets the ovl_setattr path in Linux overlayfs (fs/overlayfs/inode.c) up to kernel 4.3.3. The issue arises from attempting to merge distinct setattr operations, allowing local users to bypass access restrictions and modify attributes of arbitrary overlay files via a crafted applica...

CVE-2019-15807

CVE-2019-15807 : In the Linux kernel prior to 5.1.13, there is a memory leak in drivers/scsi/libsas/sas_expander.c when SAS expander discovery fails, which can cause a BUG and result in a denial of service. The issue is addressed in kernel 5.1.13 as indicated by ChangeLog-5.1.13. Affected product...

CVE-2020-12652

CVE-2020-12652 concerns the Linux kernel. The issue is in the function "__mptctl_ioctl" in drivers/message/fusion/mptctl.c, where an operation may hold an incorrect lock during an ioctl, enabling a local race condition (double fetch). The vulnerability affects Linux kernels prior to 5.4.14. Explo...

CVE-2023-52429

CVE-2023-52429 affects the Linux kernel driver path drivers/md/dm-table.c. The issue arises in dm_table_create’s alloc_targets path where, due to a missing check for struct dm_ioctl.target_count, it can allocate more than INT_MAX bytes and crash. Public sources in connected Nessus plugins confirm...

CVE-2023-6535

CVE-2023-6535 affects the Linux kernel NVMe driver. A crafted TCP packet sequence over NVMe over TCP may cause a NULL pointer dereference in the NVMe driver, leading to a kernel panic and denial of service. Connected documents confirm the same vulnerability text and its presence in multiple advis...

CVE-2017-1000405

CVE-2017-1000405 affects Linux kernel THP handling in versions 2.6.38–4.14. A flawed use of pmd_mkdirty() in touch_pmd() can be reached via get_user_pages(), allowing pmds to become dirty without a COW cycle. This enables overwriting read‑only huge pages (including zero pages and sealed SHMEM map...

CVE-2019-3819

CVE-2019-3819 : In the Linux kernel HID subsystem, hid_debug_events_read() may enter an infinite loop under certain user-supplied parameters, causing a denial of service via system lockup. The issue is accessible to root (local) and affects Linux kernels from 4.18 onward in affected lines. Public...

CVE-2022-2663

CVE-2022-2663 is a Linux kernel issue in nf_conntrack_irc where message handling can be confused, causing incorrect matching and potentially allowing a firewall bypass when users operate with unencrypted IRC with nf_conntrack_irc enabled. The primary affected component is nf_conntrack_irc within ...

CVE-2017-7533

CVE-2017-7533 describes a race condition in the Linux kernel where inotify_handle_event and vfs_rename concurrently executing can be exploited by a local attacker to cause memory corruption, a denial of service, or privilege escalation. It affects Linux kernel versions up to 4.12.4; exploitation ...

CVE-2018-1066

CVE-2018-1066 affects the Linux kernel prior to 4.11, where a NULL pointer dereference in fs/cifs/cifsencrypt.c:setup_ntlmv2_rsp() can cause a kernel panic on clients mounting a CIFS server, due to mishandling of an empty TargetInfo field in NTLMSSP during session recovery. Connected documents co...

CVE-2019-15218

CVE-2019-15218: Linux kernel before 5.1.8 contains a NULL pointer dereference in drivers/media/usb/siano/smsusb.c triggered by a malicious USB device. Affected is the Linux kernel version range up to 5.1.7; exploitation could lead to a crash or denial of service on affected systems. Remediation i...

CVE-2021-35477

The CVE-2021-35477 vulnerability affects the Linux kernel (through 5.13.7): an unprivileged BPF program can read sensitive kernel memory via a Speculative Store Bypass side-channel due to a preempting store not reliably ordering before an attacker-controlled store. The issue is rooted in the eBPF...

CVE-2023-40283

CVE-2023-40283 affects the Linux kernel before 6.4.10. It stems from a use-after-free in l2cap_sock_release (net/bluetooth/l2cap_sock.c) where the children of an sk are mishandled. The vulnerability allows a local attacker to run arbitrary code or cause a denial of service by crafting a targeted ...

CVE-2024-35877

Technical details about CVE-2024-35877 are not provided in the connected documents. Public disclosures in the MiracleLinux advisory reference this CVE but do not include kernel-level root causes, impact specifics, or remediation details.

CVE-2024-43907

CVE-2024-43907 relates to Linux kernel: in the DRM AMDGPU driver, a null pointer could be dereferenced in drm/amdgpu/pm during apply_state_adjust_rules. The fix adds a pointer check to avoid dereferencing NULL, addressing a potential crash. The initial description shows a concrete fix for null de...

CVE-2017-17807

CVE-2017-17807 : Linux kernel KEYS subsystem vulnerability where the request_key() path can bypass access control when adding a key to the current task’s default request-key keyring. An unpatched kernel (pre-4.14.6) could allow a local attacker to craft a sequence of system calls to insert keys i...

CVE-2018-19824

CVE-2018-19824 is a local-use-after-free in the Linux kernel’s ALSA USB audio driver. A local attacker could trigger the flaw by attaching a malicious USB sound device (configured with zero interfaces), which is mishandled during usb_audio_probe in sound/usb/card.c. Affected software is the Linux...

CVE-2019-15924

CVE-2019-15924 : The issue is in the Linux kernel before 5.0.11, where fm10k_init_module in drivers/net/ethernet/intel/fm10k/fm10k_main.c can dereference NULL when an alloc_workqueue failure occurs due to missing -ENOMEM handling. This can lead to a crash or potential denial of service on affecte...

CVE-2019-19066

CVE-2019-19066 is a memory-leak issue in the Linux kernel: bfad_im_get_stats() in drivers/scsi/bfa/bfad_attr.c (up to 5.3.11) can leak memory and enable denial-of-service via repeated bfa_port_get_stats() failures. Affected component: Linux kernel bfad_attr/bfad_attr. Root cause is a memory leak ...

CVE-2019-19074

The CVE-2019-19074 entry describes a memory leak in the ath9k_wmi_cmd() function (drivers/net/wireless/ath/ath9k/wmi.c) of the Linux kernel up to version 5.3.11, which can be exploited to cause a denial of service via memory consumption. Root cause is a leak within ath9k_wmi_cmd() that enables me...

CVE-2021-3753

CVE-2021-3753 describes a race in the Linux kernel’s vt_k_ioctl() (vt_ioctl.c) that may cause an out-of-bounds read in vt as vc_mode write access is not protected by a lock. Impact is listed as data confidentiality; exploitation details are not provided in the supplied documents. Connected source...

CVE-2021-38166

CVE-2021-38166 affects the Linux kernel (bpf/hashtab.c) up to 5.13.8. An integer overflow can cause an out-of-bounds write when many elements occupy a single bucket, potentially enabling local denial-of-service or arbitrary-code execution. Exploitation is mitigated by CAP_SYS_ADMIN requirements; ...

CVE-2021-38205

CVE-2021-38205 affects the xilinx_emaclite driver in the Linux kernel. The vulnerability arises because the driver prints a real IOMEM/kernel pointer, which can aid attackers in bypassing ASLR and facilitate information disclosure. Affected state is Linux kernels before 5.13.3; remediation is to ...

CVE-2022-42720

CVE-2022-42720 concerns the Linux kernel mac80211 WLAN stack. It describes refcounting bugs in multi-BSS handling that can trigger use-after-free when WLAN frames are injected, potentially enabling local code execution. Affected are kernel versions 5.1–5.19.x prior to 5.19.16; several distributio...