CVE-2022-50369

In CVE-2022-50369, the Linux kernel’s drm/vkms driver is affected by a null pointer dereference in vkms_release() when destroying the workqueue: vkms->output.composer_workq is destroyed after an OOM path allocates it later in vkms_crtc_init. The issue arises because vkms_release() can call des...

CVE-2022-50375

CVE-2022-50375 affects the Linux kernel: the fix ensures that in lpuart_dma_shutdown the flags for lpuart_dma_tx_use and lpuart_dma_rx_use are set to false. Without this, lpuart_flush_buffer could access DMA APIs after DMA teardown, causing aborts. The patch prevents DMA access after relinquishme...

CVE-2022-50376

CVE-2022-50376 is a Linux kernel security issue describing a memory leak in the orangefs driver (orangefs_kernel/orangefs_client_debug_init) when loading/unloading the module. The root cause is a kmemleak-related allocation path that leaks memory on module insert/remove. The fix uses a global buf...

CVE-2022-50380

Affected software: Linux kernel. Vulnerable component: mm: /proc/pid/smaps_rollup (show_smaps_rollup). Root cause: a null-deref when there are no VMAs in the task, introduced by commit 258f669e7e88 that converted to a single value seq_file. Impact stated: availability impact is HIGH in CVSS metri...

CVE-2022-50399

CVE-2022-50399 affects the Linux kernel media/atomisp path (sh_css_set_black_frame) where user-controlled height and width could cause a height*width integer overflow. Connected advisories report patches and fixed versions across distros: Root (rootio-linux package on Debian 11), SUSE SLES15 SP4/...

CVE-2022-50405

The CVE-2022-50405 entry describes a Linux kernel race in the vxlan path (net/tunnel) where deleting a vxlan device during packet reception can release a sock before sk_user_data readers finish. This leads to a NULL pointer dereference in vxlan_ecn_decapsulate() / vxlan_get_sk_family(). The repro...

CVE-2022-50482

CVE-2022-50482 is a Linux kernel vulnerability in the iommu/vt-d path. The issue is a memory leak of si_domain that occurs when init_dmars() fails, due to domain objects still lingering in the iommu_domain cache. The description states that this memory leak could occur in kernel builds prior to a...

CVE-2022-50503

CVE-2022-50503 affects the Linux kernel component mtd: lpddr2_nvm. The vulnerability is a possible null-ptr-deref in resource_size(add_range) when platform_get_resource() returns NULL. This is triggered in the lpddr2_nvm code path and can lead to a crash/local impact as described. The issue has b...

CVE-2023-53181

Technical details for CVE-2023-53181 are not provided in the supplied documents. The visible text references a Linux kernel dma-buf leak fix but lacks specific product/version/subcomponent data. Monitor for updates.

CVE-2023-53200

CVE-2023-53200 (Linux kernel) : The vulnerability is in netfilter: x_tables where a percpu counter block allocated for a new netns is leaked if xt_register_table() fails during table creation. The stack path shows allocation via __alloc_percpu → xt_percpu_counter_alloc → translate_table, then fai...

CVE-2023-53202

CVE-2023-53202 concerns the Linux kernel memory-leak issue from using debugfs_lookup() without releasing the acquired object. The mitigation implemented across connected advisories is to use debugfs_lookup_and_remove() (which handles the look-up and cleanup in one step) or to ensure dput() is cal...

CVE-2023-53206

CVE-2023-53206 : In the Linux kernel, a NULL pointer dereference in hwmon: (pmbus_core) was fixed by removing the assumption that a regulator device is passed. The fix involves passing the i2c_client to _pmbus_is_enabled to avoid dereferencing a NULL regulator during _pmbus_get_flags, addressing ...

CVE-2023-53209

CVE-2023-53209 : In the Linux kernel, the wifi mac80211_hwsim subsystem could dereference a NULL sta pointer in mac80211_hwsim_select_tx_link(), leading to a NULL pointer dereference. The vulnerability is fixed by explicitly checking that the sta pointer is not NULL before use. Affected component...

CVE-2023-53255

CVE-2023-53255 : Linux kernel vulnerability in firmware: stratix10-svc caused a potential resource leak in svc_create_memory_pool (invoked from stratix10_svc_drv_probe). The memremap() call was not paired with memunmap(), risking leakage. The fix switches to devm_memremap() to ensure proper resou...

CVE-2023-53273

In the Linux kernel vulnerability CVE-2023-53273, the issue lies in the vmbus driver’s channel handling. The function relid2channel() assumes the vmbus channel array is allocated, but in multi-kernel scenarios (e.g., kdump/kexec), not all relids are reset by the host. If a guest receives a vmbus ...

CVE-2023-53280

CVE-2023-53280 affects the Linux kernel’s scsi/qla2xxx path. The issue stems from removing the unused nvme_ls_waitq wait queue, which could lead to a NULL pointer dereference when qla2x00_start_sp returns an error and wake_up is invoked for an uninitialized sp->nvme_ls_waitq. The connected adv...

CVE-2023-53311

CVE-2023-53311 concerns a use-after-free in nilfs2 within the Linux kernel. The root cause is a UAF on the nilfs_root structure that can occur when inodes are freed from the “garbage_list” during unmount/dispose flows, specifically in a path triggered by iput()->mark_inode_dirty_sync() during ...

CVE-2023-53317

CVE-2023-53317 is a Linux kernel vulnerability in the ext4 subsystem, specifically the mb_find_extent path. The provided description shows a fix for a WARNING triggered in mb_find_extent and associated traces involving ext4_mb_complex_scan_group and ext4_ext_map_blocks, indicating a misbehavior i...

CVE-2023-53327

CVE-2023-53327 concerns a Linux kernel iommufd selftest issue where an overflow of uptr and length near UINTPTR_MAX could trigger a WARN_ON in drivers/iommu/iommufd/selftest.c. The vulnerability is described as resolved, with the notable consequence being user memory range checks that must not ov...

CVE-2023-53360

CVE-2023-53360: Technical details are not publicly provided in the supplied documents. No explicit affected products/versions, impact, or remediation are stated here. Monitor official advisories for concrete details and fixes.

CVE-2023-53362

CVE-2023-53362 : Linux kernel fix for bus: fsl-mc – do not assume all child devices are fsl-mc devices. The fix adds a device-type check when enumerating fsl-mc child devices to prevent a VFIO binding crash caused by a mis-created pseudo-device. Affected: Linux kernel (fsl-mc VFIO path); Root cau...

CVE-2023-53399

The connected documents confirm a Linux kernel vulnerability in ksmbd where a NULL pointer dereference could occur in smb2_get_info_filesystem() if share->path is NULL. A fix has been applied across affected kernels (Linux kernel 5.x line references appear in Astra Linux advisories and Debian/...

CVE-2023-53446

CVE-2023-53446 is a Linux kernel issue affecting PCI/ASPM handling for multi-function devices (MFD). The root cause is a use-after-free: pcie_link_state->downstream pointed to the function’s pci_dev and was not cleared when function 0 was removed, leading to dereference during ASPM policy chan...

CVE-2023-53461

CVE-2023-53461 pertains to the Linux kernel’s io_uring exit path. The vulnerability comes from io_ring_exit_work, invoked by kworker, waiting on request completions in a way that could interact with signal handling. The patch changes the wait state from TASK_UNINTERRUPTIBLE to TASK_INTERRUPTIBLE ...

CVE-2023-53518

CVE-2023-53518 — Linux kernel vulnerability fixed: leak in PM / devfreq path during devfreq_dev_release() and resources allocated by srcu_init_notifier_head() must be released via srcu_cleanup_notifier_head(). Connected advisories confirm the issue in the kernel and KMEMLEAK reporting. Exploitati...

CVE-2023-53564

CVE-2023-53564 affects the OCFS2 defragmentation code in the Linux kernel. The vulnerability arises when ocfs2_move_extents and __ocfs2_move_extent incorrectly invoke journal access/dirty pairs (via ocfs2_journal_access_di and ocfs2_journal_dirty) during defragmentation, allowing a crash caused b...

CVE-2023-53585

CVE-2023-53585 : In the Linux kernel, a bug in bpf_sk_assign could leak a refcount when a newly created unhashed UDP socket is bound after being added to a sockmap. The issue arises because bpf_sk_assign may be invoked in an RCU-critical section before the sk’s final state (SOCK_RCU_FREE) is appl...

CVE-2023-53605

CVE-2023-53605 refers to a Linux kernel issue in the DRM AMD display driver where a memory leak occurred in the dc_construct_ctx() path. The fix, as described in the initial document, is a commit that resolves the leak in that function. The entry indicates a local attack vector with low attack co...

CVE-2023-53621

CVE-2023-53621: Linux kernel memcg/memcontrol bug could cause a NULL pointer dereference during eviction if the memcg retrieved by the stored id is not the original one. Impact is local, with a high base score (7.8) and local access required. The issue stems from eviction recency checks in mem_cg...

CVE-2023-53635

CVE-2023-53635 affects the Linux kernel netfilter conntrack code. The issue arises from miscalculation of ct->timeout for unconfirmed connections: nfct_time_stamp was added twice when setting timeout and subtracted twice when dumping, due to ordering between setting ct->timeout and IPS_CONF...

CVE-2023-53679

CVE-2023-53679 affects the Linux kernel wifi driver mt7601u. The issue is an integer underflow in the RX path that can lead to a null pointer dereference in mt7601u_rx_skb_from_seg() when dma_len is manipulated, enabling seg_len underflow in mt7601u_rx_process_seg() and bypassing bad_frame checks...

CVE-2024-58241

CVE-2024-58241 concerns the Linux kernel Bluetooth subsystem (hci_core). The issue is described as Disable works on hci_unregister_dev, where submissions are not disarmable because hci_dev is freed, leading to potential use of disabled work. Connected OSV entries (e.g., ROOT-OS-UBUNTU-2204/2404, ...

CVE-2025-38247

CVE-2025-38247 concerns the Linux kernel: a leak of user namespaces and possibly mnt_idmap in open_tree_attr(2) due to not releasing ->mnt_userns after a positive result from want_mount_setattr(). The root cause is that finish_mount_kattr() must release the namespace, and if do_mount_setattr()...

CVE-2025-38309

CVE-2025-38309 affects the Linux kernel’s drm/xe/vm path. The root cause is that during vm creation, the code may call xe_svm_fini() on the error path before the SVM state is initialised, causing kernel splats and a fatal NPD. A fix moves xe_svm_init() earlier in xe_svm lifecycle to ensure proper...

CVE-2025-38398

CVE-2025-38398 affects the Linux kernel driver for spi-qpic-snand. Memory corruption arises from out-of-bounds access in BAM transaction handling: the BAM transaction structure is sized for one codeword during probe, but the required space depends on the NAND chip page size. As a result, flash op...

CVE-2025-38677

CVE-2025-38677 is a Linux kernel vulnerability related to F2FS. The issue arises from a corrupted image where a dnode shares the same node id as its inode, causing f2fs_get_dnode_of_data() to compute an invalid data block address and potentially access memory out of bounds. The root cause is trac...

CVE-2025-38696

CVE-2025-38696 (Linux kernel, MIPS) : The issue occurs in stack_top() for tasks without an ABI or vDSO mapping (e.g., kthreads). If such a task calls stack_top(), it can dereference a NULL ABI pointer and crash. Affected area is the MIPS support in the Linux kernel; the advisory notes the crash c...

CVE-2025-38723

CVE-2025-38723 concerns the Linux kernel, specifically LoongArch BPF tailcall handling. The issue arises in the tailcall jump offset calculation when bpf_int_jit_compile() fails to initialize the JIT context, leaving out_offset = -1. Consequently, the computed jmp_offset = (out_offset - cur_offse...

CVE-2025-39725

CVE-2025-39725 affects the Linux kernel, specifically the hwpoison handling path in mm/vmscan shrink_folio_list. The issue occurs when a hwpoisoned large folio (THP) cannot be mapped/unmapped properly; without TTU_SPLIT_HUGE_PMD, a null-ptr dereference can occur in pvmw.pte, and even with the fla...

CVE-2025-39727

The CVE-2025-39727 entry concerns a Linux kernel vulnerability in memory management swap code. The issue is a potential buffer overflow in setup_clusters() triggered when setup_swap_map() validates badpages only up to (0, last_page], and maxpages may be less than last_page, causing setup_clusters...

CVE-2025-39753

CVE-2025-39753 relates to the Linux kernel’s gfs2 code. The vulnerability is resolved by a patch that adds the .migrate_folio flag in gfs2_{rgrp,meta}_aops, addressing a warning: gfs2_meta_aops does not implement migrate_folio, triggering messages during xfstests. The described impact is the supp...

CVE-2025-39790

CVE-2025-39790 : In the Linux kernel, the bus: mhi: host implementation could mis-handle completion events when a device points a TRE pointer ahead of the host’s ring read pointer, enabling a window where a stale TRE is read and its buffer freed twice. The published description documents that thi...

CVE-2025-39794

CVE-2025-39794 affects the Linux kernel on ARM Tegra platforms. The root cause is an incorrect use of memcpy when writing to IRAM, causing Kasan to crash due to boundary checks failing under normal memcpy. The vulnerability is local with a high impact on availability, and the description notes th...

CVE-2025-39831

The CVE-2025-39831 entry describes a Linux kernel issue in the fbnic driver where phylink resume was invoked under an RTNL locking condition during PM resume, causing a locking assertion in phylink.c and a kernel warning. The root cause is moving phylink resume out of the service_task and into op...

CVE-2025-39961

CVE-2025-39961 (AMD IOMMU race in page tables) The Linux kernel AMD IOMMU host page table implementation could race when increasing page table levels. In iommu_v1_unmap_pages(), fetch_pte() could read pgtable->[root/mode] without a lock while increase_address_space() updates pgtable->[root/...

CVE-2025-71084

CVE-2025-71084 (Linux kernel) fixes a leak in the multicast GID table reference within RDMA/cm. If the CM ID is destroyed while the multicast creation event is queued, cancel_work_sync() can prevent the work from running and destroy ah_attr, causing a refcount leak and a WARN in kernel logs. Affe...

CVE-2025-71117

CVE-2025-71117 corresponds to a Linux kernel fix that removes queue freezing from several sysfs store callbacks to prevent deadlocks (notably with dm-multipath and the queue_if_no_path option). Affected sysfs attributes include io_poll_delay, io_timeout, nomerges, read_ahead_kb, and rq_affinity. ...

CVE-2025-71121

CVE-2025-71121 relates to the Linux kernel’s parisc/ASP chip handling: attempting to reprogram CPU affinity on HP 730 hardware could crash with an HPMC because registers aren’t at the expected location. The fix avoids the crash by checking the sversion, and notes that reprogramming isn’t needed f...

CVE-2025-71145

CVE-2025-71145 (Linux kernel) fixes a use-after-free-like race by correcting usb: phy: isp1301 to increment the I2C device reference count for non-OF (Open Firmware) paths as well as OF paths. The bug was a device reference imbalance in isp1301_get_client() where non-OF callers could not reliably...

CVE-2025-71162

CVE-2025-71162 describes a use-after-free in the Tegra ADMA driver within the Linux kernel, triggered when an audio DMA buffer is freed during XRUN handling before the vchan completion tasklet runs. The race occurs after a DMA transfer completes and schedules a completion tasklet, while tegra_adm...