CVE-2026-53263

CVE-2026-53263 is reported in OSV entries as affecting the rootio-linux package in Ubuntu/Debian environments, with patches available in multiple fixed versions (e.g., Root:Ubuntu:22.04 and Root:Ubuntu:24.04; Debian 11/12 tracks). The Debian/Ubuntu Nessus OSV entries note patches for these distri...

CVE-2026-53348

CVE-2026-53348 affects the Linux kernel ASoC SDCA component. The root cause is a NULL pointer dereference in sdca_dev_unregister_functions where func_dev entries may be NULL if a registration failed early or a deferral race occurs during cleanup, leading to a kernel oops (device_del). The issue i...

CVE-2026-53403

The CVE-2026-53403 issue is a Linux kernel framebuffer (fbdev) risk fixed by correcting fb_new_modelist to preserve the current mode in info->var when the modelist is replaced. Root cause: info->var must have a matching entry in info->modelist; if store_modes() or fb_new_modelist() chang...

CVE-2022-50089

CVE-2022-50089 affects the Linux kernel with the btrfs file system. The issue occurs when cow_file_range() fails mid-allocation (unlock=0) and may leave pages locked, potentially causing a hung task in zoned btrfs setups (as described in the provided reports). The included details show that the f...

CVE-2022-50106

The CVE-2022-50106 issue affects the Linux kernel, specifically powerpc/cell/axon_msi: a refcount leak in setup_msi_msg_address caused by of_get_next_parent() returning a node pointer with an incremented refcount. The root cause is missing of_node_put() in the error path, leading to leaking refer...

CVE-2022-50244

CVE-2022-50244 affects the Linux kernel code path in cxl_pci_init_afu|adapter() where a failed device_register() leaves a not-added device and leads to a potential null pointer dereference if device_unregister() is called in the error path. The fix splits unregister logic into device_del() and pu...

CVE-2022-50272

CVE-2022-50272 affects the Linux kernel’s media: dvb-usb az6027 driver. In az6027_i2c_xfer(), a null-ptr-deref can occur when an I2C message has addr 0x99 with len=0 and buf=NULL, allowing a kernel crash. The fix is to validate msg[i].len before accessing msg[i].buf. Unity Linux advisories (UTSA-...

CVE-2022-50284

CVE-2022-50284 affects the Linux kernel (init_mqueue_fs). If setup_mq_sysctls() fails, the mqueue_inode_cachep was not released, causing a memory leak. The issue was fixed by reordering the release path in init_mqueue_fs; upstream kernel patches exist to address this, with no explicit exploit det...

CVE-2022-50289

CVE-2022-50289 concerns the Linux kernel OCFS2 subsystem. The provided advisories describe a memory leak in ocfs2_stack_glue_init() where ocfs2_table_header must be freed if ocfs2_sysfs_init() fails, to prevent a kmemleak-detected memleak. The root cause is the missing free path during initializa...

CVE-2022-50310

Summary: CVE-2022-50310 affects the Linux kernel and describes a use-after-free (UAF) in ip6mr_sk_done() when addrconf_init_net() fails during net initialization. The vulnerability arises because devconf_all is freed during addrconf_init_net() failure, but ip6mr_sk_done() later accesses devconf-&...

CVE-2022-50335

Summary: CVE-2022-50335 relates to the 9p protocol in the Linux kernel. A race/initialization bug could leave a request with an uninitialized refcount when newly allocated from slab and added to idr, risking use-after-free of the request data structure (e.g., during p9_read_work/p9_client_walk fl...

CVE-2022-50344

CVE-2022-50344 - Linux kernel ext4 null-ptr-deref Affects: Linux kernel ext4 subsystem (ext4_write_info) in quota handling during umount/shutdown paths. Root cause: A null pointer dereference can occur in ext4_write_info when the superblock root inode is no longer valid during unmount, leading to...

CVE-2022-50364

The CVE-2022-50364 issue in the Linux kernel concerns i2c mux: reg: an IPv4? actually resource handling in platform_get_resource() returning NULL leading to NULL pointer dereference in resource_size(). The documented fix moves the call to resource_size() to after devm_ioremap_resource() which che...

CVE-2022-50380

Affected software: Linux kernel. Vulnerable component: mm: /proc/pid/smaps_rollup (show_smaps_rollup). Root cause: a null-deref when there are no VMAs in the task, introduced by commit 258f669e7e88 that converted to a single value seq_file. Impact stated: availability impact is HIGH in CVSS metri...

CVE-2022-50382

CVE-2022-50382 refers to a Linux kernel fix for a deadlock involving padata parallelization when BHs are enabled during the serial path. The issue occurs in padata_do_serial where a spin_lock on reorder->lock could be taken with BHs still on, enabling a deadlock on overload. The fix ensures BH...

CVE-2022-50416

CVE-2022-50416 concerns the Linux kernel’s irqchip/wpcm450 module. The vulnerability is a memory leak in wpcm450_aic_of_init(): if of_iomap() fails, the allocated memory for 'aic' must be freed before return. The issue is resolved in the provided documents; the root cause is the missing free path...

CVE-2022-50439

CVE-2022-50439 is a Linux kernel vulnerability in ASoC: mediatek mt8173 where IRQs could fire before pdata is ready, causing memory read errors and kernel instability. Connected advisories (SUSE, Astra Linux, OSV) indicate the issue was resolved in the kernel by enabling IRQ once pdata is ready. ...

CVE-2022-50505

CVE-2022-50505 (Linux kernel) fixes a refcount leak in iommu/amd by correcting usage of pci_get_domain_bus_and_slot() which increments the PCI device refcount. The caller must call pci_dev_put() when finished; the patch ensures pci_dev_put() is invoked before returning from ppr_notifier() to avoi...

CVE-2023-53168

In the Linux kernel, CVE-2023-53168 affects the usb: ucsi_acpi timeout handling. The root cause was an increased command completion timeout (5s -> 60s) during alternate mode discovery, which was later reduced to 1s after switching to polled mode, causing issues on Lenovo ThinkPad X1 Yoga gen7 ...

CVE-2023-53180

Technical specifics (affected versions, exploit details, patch) are not provided in the connected documents. Monitor for updates regarding CVE-2023-53180 and its kernel fix for ath12k NULL pointer handling in management transmit cleanup.

CVE-2023-53187

CVE-2023-53187 pertains to the Linux kernel’s btrfs code. The vulnerability arises when a task creates a new block group that later becomes unused during the creation window. In btrfs_create_pending_block_groups(), if btrfs_mark_bg_unused() runs and moves the group out of the ‘new’ list into ‘unu...

CVE-2023-53220

CVE-2023-53220 affects the Linux kernel, specifically the media/az6007 driver. The vulnerability arises in az6007_i2c_xfer where user-controlled msg[i].buf could be dereferenced if msg[i].buf is null and msg[i].len is zero, bypassing previous checks and potentially crashing. The root cause is mis...

CVE-2023-53222

CVE-2023-53222 pertains to the Linux kernel, specifically the JFS filesystem code (jfs_dmap). The issue is a mounting-time validation flaw in db_l2nbperpage: BLKTODMAP uses db_l2nbperpage to shift, and an unchecked large value can trigger a shift-out-of-bounds crash. The root cause is that db_l2n...

CVE-2023-53223

The CVE-2023-53223 issue affects the Linux kernel component drm/msm/dsi where alloc_ordered_workqueue may return NULL. The vulnerability arises from a missing check of the return value, potentially leading to a NULL pointer dereference. A patch addressing this check has been published (Patchwork:...

CVE-2023-53243

CVE-2023-53243 : In the Linux kernel’s btrfs code, the function btrfs_reduce_alloc_profile was not updated to include new allocation flags (DUP, RAID1C34); it can return multiple flags when blocks have mixed/unknown profiles, risking a WARN_ON and a remount-ro during new block allocations. The is...

CVE-2023-53255

CVE-2023-53255 : Linux kernel vulnerability in firmware: stratix10-svc caused a potential resource leak in svc_create_memory_pool (invoked from stratix10_svc_drv_probe). The memremap() call was not paired with memunmap(), risking leakage. The fix switches to devm_memremap() to ensure proper resou...

CVE-2023-53286

CVE-2023-53286 affects the Linux kernel’s RDMA mlx5 path. The issue is: when destroying QP/RQ, the firmware destruction result was ignored, so upper layers could proceed as if destruction succeeded, potentially triggering kernel WARNs. The description specifies that the kernel now returns the fir...

CVE-2023-53297

CVE-2023-53297 affects the Linux kernel Bluetooth L2CAP path, where conn->chan_lock was not held before l2cap_get_chan_by_scid; if that call returns NULL, a “bad unlock balance” condition is triggered. Multiple connected advisories (Astra Linux, MiracleLinux, RHEL kernels) document the fix as ...

CVE-2023-53311

CVE-2023-53311 concerns a use-after-free in nilfs2 within the Linux kernel. The root cause is a UAF on the nilfs_root structure that can occur when inodes are freed from the “garbage_list” during unmount/dispose flows, specifically in a path triggered by iput()->mark_inode_dirty_sync() during ...

CVE-2023-53317

CVE-2023-53317 is a Linux kernel vulnerability in the ext4 subsystem, specifically the mb_find_extent path. The provided description shows a fix for a WARNING triggered in mb_find_extent and associated traces involving ext4_mb_complex_scan_group and ext4_ext_map_blocks, indicating a misbehavior i...

CVE-2023-53318

CVE-2023-53318 affects the Linux kernel and is associated with memory leaks in the recordmcount flow, specifically in the uwrite function. The vulnerability’s impact is listed as local access with medium base severity (CVSSv3.1: AV Local, AC Low, PR Low, UI None, S Unchanged, C None, I None, A Hi...

CVE-2023-53335

CVE-2023-53335 is a Linux kernel vulnerability affecting the RDMA/cxgb4 path where a null-pointer dereference could occur if get_ep_from_tid() does not return a non-NULL ep. The fix adds a sanity check to prevent dereferencing an empty ep in pass_establish(). The initial description and connected...

CVE-2023-53339

CVE-2023-53339 : In the Linux kernel’s Btrfs code, a race between pausing and balancing can cause a BUG_ON panic in btrfs_cancel_balance due to an unaccounted race. The race has no other side effects, and a fix has been applied in the upstream patch set. The vulnerability affects local attackers ...

CVE-2023-53346

The CVE-2023-53346 entry concerns a memory-leak in the Linux kernel’s kernel/fail_function logic. The issue occurs when using debugfs_lookup(): the returned object must be released with dput(), otherwise memory leaks accrue over time. The associated advisories indicate a straightforward remediati...

CVE-2023-53365

CVE-2023-53365 is documented across multiple advisories as a Linux kernel vulnerability affecting IPv6 multicast report handling. The issue arises in the ip6mr_cache_report path, where skb_push may move data backwards by a signed length (skb_network_offset(pkt) equals 4), leading to an invalid sk...

CVE-2023-53396

The CVE-2023-53396 issue affects the Linux kernel ubifs: memory leak in do_rename when renaming a file in an encrypted directory. The leak stems from fscrypt_setup_filename allocating memory for the file name, which is never used and is not freed before returning. kmemleak shows the unreferenced ...

CVE-2023-53405

CVE-2023-53405 concerns the Linux kernel USB gadget gr_udc: a memory leak that occurs when debugfs_lookup() is used without proper cleanup. The vulnerability arises because the result of debugfs_lookup() must be released with dput(), else memory leaks accumulate over time. The fixed approach in t...

CVE-2023-53412

The CVE-2023-53412 issue affects the Linux kernel USB gadget bcm63xx_udc where memory leaks occur when using debugfs_lookup() because the result is not dput()’d. The mitigated pattern is to call debugfs_lookup_and_remove() which handles the lookup and cleanup in one step, preventing leaks. Eviden...

CVE-2023-53418

The CVE-2023-53418 issue affects the Linux kernel USB gadget driver, specifically the lpc32xx_udc in the USB subsystem. The root cause was a memory leak when using debugfs_lookup() because the returned object was not paired with a dput(), leaving memory allocated over time. The provided fixes sim...

CVE-2023-53452

Observation: CVE-2023-53452 concerns a race condition in the Linux kernel affecting the wifi driver path for rtW89. When a netdev is registered but NAPI isn’t initialized yet, a race can occur if user space opens the netdev and enables NAPI, causing a kernel BUG at net/core/dev.c:6423 and an inva...

CVE-2023-53488

CVE-2023-53488 (Linux kernel) : The vulnerability affects the IB/hfi1 InfiniBand driver. During hotplug removal, a pending update-counters work could run after memory is freed, causing a possible kernel panic. The fix cancels the update-counters work before freeing memory. Evidence in the securit...

CVE-2023-53679

CVE-2023-53679 affects the Linux kernel wifi driver mt7601u. The issue is an integer underflow in the RX path that can lead to a null pointer dereference in mt7601u_rx_skb_from_seg() when dma_len is manipulated, enabling seg_len underflow in mt7601u_rx_process_seg() and bypassing bad_frame checks...

CVE-2023-54285

CVE-2023-54285 : In the Linux kernel, a vulnerability in iomap_write_delalloc_scan could overflow when folio_next_index() (unsigned long) is left shifted by PAGE_SHIFT on 32-bit systems. The fix replaces the overflow-prone calculation with folio_pos(folio) + folio_size(folio), ensuring correct ov...

CVE-2025-38247

CVE-2025-38247 concerns the Linux kernel: a leak of user namespaces and possibly mnt_idmap in open_tree_attr(2) due to not releasing ->mnt_userns after a positive result from want_mount_setattr(). The root cause is that finish_mount_kattr() must release the namespace, and if do_mount_setattr()...

CVE-2025-38366

Summary: CVE-2025-38366 pertains to the Linux kernel (LoongArch KVM) where the number of CPUs requested from user space could exceed the supported limit, risking an array pointer overflow. The fixed condition adds validation for the cpu number in the LoongArch KVM path, aligning the checked range...

CVE-2025-38554

CVE-2025-38554 in the Linux kernel describes a use-after-free (UAF) involving VMAs: if vma->mm is freed after vma->vm_refcnt has dropped, a recycled VMA could be mishandled, leading to UAF. The race can occur when VMAs are recycled under RCU (with SLAB_TYPESAFE_BY_RCU) and lock_vma_under_rc...

CVE-2025-38567

The CVE-2025-38567 vulnerability affects the Linux kernel NFS server (nfsd) where racing calls to nfsd_open_local_fh() can cause an extra reference to the net to be leaked if both calls succeed in nfsd_file_acquire_local(). One instance will fail to store the file reference yet keep the extra net...

CVE-2025-38722

CVE-2025-38722: Linux kernel HABANA Labs export_dmabuf() UAF due to race between descriptor table fd_install() and object destruction in ->release(). Root cause: a descriptor in dma_buf_fd() may be installed and used while the referenced file/object could be freed, leading to use-after-free. M...

CVE-2025-39674

CVE-2025-39674 affects the Linux kernel scsi: ufs: ufs-qcom path. Root cause: a regression from removing MSI descriptor abuse caused a NULL pointer dereference when Platform MSI allocation fails while configuring ESI, due to cleanup using __free() on resources that were never allocated. The issue...

CVE-2025-39699

CVE-2025-39699 affects the Linux kernel (iommu/riscv) with a fix to prevent NULL dereference in iova_to_phys. The issue arises because riscv_iommu_pte_fetch() may return NULL for unmapped/never-mapped IO virtual addresses, and riscv_iommu_iova_to_phys() did not handle NULL, leading to a potential...