CVE-2022-50362

CVE-2022-50362 is a Linux kernel issue in dmaengine for Hisilicon DMA channels. The vulnerability arises when a DMA channel is used concurrently across multiple threads, causing an oops and system hang due to a data race in descriptor handling. The root cause is described as threads rewriting the...

CVE-2022-50364

The CVE-2022-50364 issue in the Linux kernel concerns i2c mux: reg: an IPv4? actually resource handling in platform_get_resource() returning NULL leading to NULL pointer dereference in resource_size(). The documented fix moves the call to resource_size() to after devm_ioremap_resource() which che...

CVE-2022-50365

CVE-2022-50365 is a Linux kernel issue where tail adjustment during pull operations could cause side effects when using helpers like BPF_FUNC_skb_pull_data. The vulnerability affects the handling of sk_buff tail growth in gso fragment scenarios and could lead to crashes if not mitigated. The publ...

CVE-2022-50371

CVE-2022-50371 concerns the Linux kernel, specifically the qcom-lpg LED driver. The issue arises because lpg_brighness_set() could sleep while the brightness_set() callback for the LED must be non-blocking, leading to sleeping in atomic context (as shown by the stack trace and in_atomic/irq state...

CVE-2022-50465

The CVE-2022-50465 issue is a Linux kernel ext4 fast-commit journal memory-leak: when the end of fast-commit journal blocks is unfinished, the unused tail space could leak uninitialized memory to disk. The published description states the fix is to zero out that unused space to prevent leakage. T...

CVE-2022-50500

CVE-2022-50500 – Linux kernel (netdevsim): The vulnerability is a memory leak in nsim_drv_probe() when nsim_dev_resources_register() fails, as reported in the initial document. Unreferenced object and backtrace indicate leak of 128-byte allocation in that failure path. The issue is fixed in the L...

CVE-2022-50536

CVE-2022-50536 affects the Linux kernel’s BPF sockmap path. In tcp_bpf_send_verdict() redirection, the eval variable is set to __SK_REDIRECT after sending apply_bytes data; if msg.has_more_data, sock_put() can be called multiple times, risking a use-after-free via refcount misuse. The issue is fi...

CVE-2023-53164

CVE-2023-53164 concerns a Linux kernel issue in the TI-SCI IRQ domain handling. The vulnerability arises from a refcount leak in ti_sci_intr_irq_domain_probe: of_irq_find_parent() returns a node pointer with an incremented refcount, and a missing of_node_put() could prevent proper release. The pr...

CVE-2023-53180

Technical specifics (affected versions, exploit details, patch) are not provided in the connected documents. Monitor for updates regarding CVE-2023-53180 and its kernel fix for ath12k NULL pointer handling in management transmit cleanup.

CVE-2023-53190

CVE-2023-53190 relates to a Linux kernel issue: a memory leak in the vxlan error path due to missing vxlan_vnigroup_uninit() when completion fails in vxlan_vnigroup_init(). The vulnerability affects vxlan initialization under certain error-injection/recovery scenarios, leading to memory leaks and...

CVE-2023-53211

The CVE-2023-53211 issue affects the Linux kernel’s driver core, where a struct acpi_pld_info *pld was not freed before returning on allocation failure, risking a memory leak. The fix adds ACPI_FREE() calls to release the allocated memory before the function exits. Connected documents confirm thi...

CVE-2023-53220

CVE-2023-53220 affects the Linux kernel, specifically the media/az6007 driver. The vulnerability arises in az6007_i2c_xfer where user-controlled msg[i].buf could be dereferenced if msg[i].buf is null and msg[i].len is zero, bypassing previous checks and potentially crashing. The root cause is mis...

CVE-2023-53268

The CVE-2023-53268 entry concerns the Linux kernel ASoC: fsl_mqs component. A use-after-success reference leak occurred due to of_node_put() not being invoked at the correct point after mqs_priv->regmap = syscon_node_to_regmap(gpr_np). The fix moves of_node_put() to the proper location and con...

CVE-2023-53270

Technical details about CVE-2023-53270 are not publicly provided in the supplied documents. Monitor upstream advisories and vendor notices for updates.

CVE-2023-53271

CVE-2023-53271 concerns the Linux kernel UBI layer. The issue arises from a mismatch between create and destroy interfaces where the object created by ubi_eba_create_table() is freed via kfree(), leaving ubi_eba_table->entries potentially not freed, leading to a kmemleak-reported unreferenced ...

CVE-2023-53300

The CVE-2023-53300 issue is in the Linux kernel media hi846 driver: hi846_init_controls allocated a ctrl_hdlr but failed to free it on error, causing a memory leak. The fix adds v4l2_ctrl_handler_free to properly release the allocated resources when initialization fails. Affected area: kernel med...

CVE-2023-53330

CVE-2023-53330 : In the Linux kernel, memory leak in cfctrl_linkup_request() can occur when linktype is unknown or kzalloc() fails, as pkt is not released on error. The resolution adds a release path to the error flow, mitigating a potential memory leak in affected code paths. Connected advisorie...

CVE-2023-53332

CVE-2023-53332: In the Linux kernel, a missing NULL pointer check in ipi_send_verify() can allow NULL dereference in irq_data_get_affinity_mask() when ipi_send_{mask|single}() is called with an invalid interrupt number, causing a kernel oops. The fix adds the NULL pointer check in ipi_send_verify...

CVE-2023-53355

The CVE-2023-53355 entry concerns the Linux kernel (staging: pi433) where a memory leak occurs when using debugfs_lookup() because the returned object is not paired with dput(). The recommended fix is to use debugfs_lookup_and_remove(), which handles the necessary dput() logic and related cleanup...

CVE-2023-53409

The CVE-2023-53409 issue concerns the Linux kernel: when using debugfs_lookup(), the returned object must be released with dput() to prevent a memory leak. The advisories state a fix by using debugfs_lookup_and_remove(), which handles the necessary logic in one step, mitigating the memory leak. A...

CVE-2023-53410

CVE-2023-53410 (Linux kernel) : The issue is a memory leak in USB ULPI related to using debugfs_lookup() without proper dput() on the result. The recommended remediation is to replace the call with debugfs_lookup_and_remove(), which handles lookup and cleanup in one step. Affected context and ref...

CVE-2023-53411

CVE-2023-53411 affects the Linux kernel. The issue is a memory leak when using debugfs_lookup(), because the returned object must be released with dput(). The documented fix is to use debugfs_lookup_and_remove() which handles the required cleanup in one step. Exploitation details are not provided...

CVE-2023-53412

The CVE-2023-53412 issue affects the Linux kernel USB gadget bcm63xx_udc where memory leaks occur when using debugfs_lookup() because the result is not dput()’d. The mitigated pattern is to call debugfs_lookup_and_remove() which handles the lookup and cleanup in one step, preventing leaks. Eviden...

CVE-2023-53434

In the Linux kernel, CVE-2023-53434 concerns remoteproc: imx_dsp_rproc. The fix adds a custom memory copy implementation (and memset) for the i.MX DSP cores because the HiFi DSP IRAM requires 32‑bit writes; violating this can trigger a Kernel panic. The vulnerability is mitigated by the patched m...

CVE-2023-53436

CVE-2023-53436 : In the Linux kernel, the scsi: snic path had a memory leak when device_add() fails because the name allocated by dev_set_name() wasn’t freed. The fix releases the reference in the error path by calling put_device(), allowing kobject_cleanp() to free the name. The vulnerability’s ...

CVE-2023-53488

CVE-2023-53488 (Linux kernel) : The vulnerability affects the IB/hfi1 InfiniBand driver. During hotplug removal, a pending update-counters work could run after memory is freed, causing a possible kernel panic. The fix cancels the update-counters work before freeing memory. Evidence in the securit...

CVE-2023-53539

CVE-2023-53539 affects the Linux kernel RDMA/rxe subsystem, specifically the rxe_requester path. The root cause is incomplete state save/restore of the wqe, notably the dma struct used to process the sge table, which is not preserved when a send packet is dropped and a retransmit is attempted. Th...

CVE-2023-53556

CVE-2023-53556 is a Linux kernel use-after-free in the iavf driver (free_netdev) when removing virtual functions during SR-IOV handling. The connected Nessus/SUSE advisories enumerate this CVE among a large set of kernel issues and indicate the vulnerability is addressed by kernel updates in Eule...

CVE-2023-53562

CVE-2023-53562 affects the Linux kernel DRM MSM driver. The issue is a VRAM leak that occurs when a subcomponent fails to bind, and the fix releases the VRAM buffer on bind errors. The vulnerability is mitigated by applying the patch that adds VRAM release on error paths (patch reference: patchwo...

CVE-2023-53597

CVE-2023-53597 affects the Linux kernel CIFS reconnection path. The bug caused a mid and credits leak when STATUS_IO_TIMEOUT responses exceed a threshold, allowing server->in_flight to become inaccurate. The patch moves the check to occur after response decryption (including transform-header r...

CVE-2023-53600

CVE-2023-53600 : In the Linux kernel, a bug in tunnel PMTU handling caused a KASAN slab-out-of-bounds crash when emitting an IPv4 ICMP error in response to a non-linear skb. The root cause was that ip_compute_csum() cannot handle nonlinear skbs, leading to a crash trace including kasan_report and...

CVE-2023-53658

CVE-2023-53658 affects the Linux kernel BCM-QSPI SPI driver (spi/bcm-qspi). If neither hif_mspi nor mspi resources exist, probe may succeed while doing nothing, then removal dereferences a NULL drvdata pointer. The fix unconditionally calls devm_ioremap_resource(), which handles NULL resources an...

CVE-2023-53666

CVE-2023-53666 relates to the Linux kernel ASoC codecs (snd_soc_wcd_mbhc, wcd938x) where MBHC initialisation could fail and lead to a NULL/error pointer dereference while configuring the jack. The patch fixes missing error handling to prevent dereferencing an error pointer, addressing an issue th...

CVE-2023-53672

CVE-2023-53672 affects the Linux kernel's btrfs code. When inserting a new inline backref, a WARN_ON() can trigger if the inline backref cannot be found, which is only possible in insert scenarios. The fix enhances debugging by dumping all parameters and the extent tree leaf after the WARN_ON(). ...

CVE-2023-53674

CVE-2023-53674 affects the Linux kernel clk subsystem. The issue is a memory leak in devm_clk_notifier_register(): the devres resource for the clk notifier was allocated but not registered with the device, causing the notifier/resource to leak on device detach. The fix is to register the resource...

CVE-2025-38358

CVE-2025-38358 relates to a race in Linux kernel’s btrfs async reclaim path. The bug occurs when an ordered iput is delayed while BTRFS_FS_STATE_NO_DELAYED_IPUT is already set, triggering an assertion in btrfs_add_delayed_iput during close_ctree. The described scenario: async reclaim schedules wr...

CVE-2025-38366

Summary: CVE-2025-38366 pertains to the Linux kernel (LoongArch KVM) where the number of CPUs requested from user space could exceed the supported limit, risking an array pointer overflow. The fixed condition adds validation for the cpu number in the LoongArch KVM path, aligning the checked range...

CVE-2025-38411

The CVE-2025-38411 issue is in the Linux kernel’s netfs handling. A netfs request finishing during the pause loop could have its IN_PROGRESS ref removed, and if it proceeded to the final wait loop, the code could incorrectly call the collector again because it sees IN_PROGRESS as cleared. The doc...

CVE-2025-38504

Summary: CVE-2025-38504 relates to the Linux kernel, specifically the io_uring/zcrx component. The connected documents describe a code-level fix in the destruction path for page pools, where a misplaced warning could trigger during destruction and affect niovs handling. The root cause is that nio...

CVE-2025-38726

CVE-2025-38726 affects the Linux kernel driver net ftgmac100. The issue arises in ftgmac100_phy_disconnect: after phy_disconnect(), netdev->phydev is reset to NULL, which could cause fixed_phy_unregister() to be invoked with a NULL pointer. The connected documents confirm this NULL-pointer use...

CVE-2025-39722

The CVE-2025-39722 issue is in the Linux kernel crypto/caam suspend path for iMX8QM/iMX8ULP SoCs. Root cause: CAAM register access during suspend is reserved by SECO/OPTEE, causing suspend-time crashes unless page 0 is protected; a new state variable no_page0 tracks external reservations, and sus...

CVE-2025-39750

Technical details for CVE-2025-39750 are not provided in the supplied documents. No affected products, root cause, or fixes are disclosed here. Monitor for updates in forthcoming advisories or vendor bulletins.

CVE-2025-39791

CVE-2025-39791 affects the Linux kernel’s dm-crypt targeting zoned devices. The vulnerability arises when a write BIO to a dm-crypt target is split according to max_read_size/max_write_size (default 128 KB); for zoned targets, the split occurs but is not parallelized, risking ordering issues and ...

CVE-2025-39905

The CVE-2025-39905 issue affects the Linux kernel phylink path: the race arises from phylink_resolve() manipulating pl->phydev under pl->state_mutex, creating a lock-order inversion with pl->phydev->lock. The fix introduces an explicit lock to serialize concurrent writes to pl->phy...

CVE-2025-71159

CVE-2025-71159 — Linux kernel btrfs use-after-free in delayed inode . Affected: the btrfs_get_or_create_delayed_node() path in fs/btrfs/delayed-inode.c. Root cause: the delayed_node refcount was set before acquiring root->delayed_nodes, creating a missing memory barrier and allowing stores to ...

CVE-2025-71230

CVE-2025-71230 in Linux kernel concerns a leak of filesystem-specific data (sb->s_fs_info) when using the new mount API for hfs. The root cause is that if setup_bdev_super() fails after a new superblock is allocated by sget_fc() but before hfs_fill_super() takes ownership, sb->s_fs_info cou...

CVE-2025-71269

CVE-2025-71269: The Linux kernel Btrfs fallback path for inline extents could free reserved qgroup data incorrectly when ENOSPC occurred. The fix ensures that reserved qgroup data is freed in __cow_file_range_inline() only if the fallback path is not taken (ret > 0). This change prevents freei...

CVE-2025-71285

Summary of the CVE-2025-71285 cluster: The Linux kernel’s net/qrtr MHI auto_queue feature for IPCR DL channels is being removed. The race occurs when the MHI stack can call the DL path callback before the QRTR client driver is fully initialized, risking NULL pointer dereferences. The fix disables...

CVE-2026-23065

CVE-2026-23065 is a Linux kernel issue affecting the x86/amd platform where a tmp buffer allocated in wbrf_record() is leaked on error in acpi_evaluate_dsm(). The vulnerability’s root cause is a memory leak in the error path, fixed by explicitly freeing the tmp buffer in the error handling path o...

CVE-2026-23076

CVE-2026-23076 affects the Linux kernel ALSA ctxfi driver: a potential out-of-bounds access in the audio mixer handling due to using conj as a loop index and referencing it in amixer_index() and sum_index(). The issue stems from lack of proper re-initialization of conj, enabling OOB reads at ctam...