14650 matches found
CVE-2026-53123
Technical details for CVE-2026-53123 are not provided in the supplied documents. Monitor for updates.
CVE-2026-53132
CVE-2026-53132 affects the Linux kernel vsock/virtio, where receiving zero-length packets with VIRTIO_VSOCK_SEQ_EOM could cause an unbounded skb queue growth, exhausting memory. The root cause is a miscalculation of backlog: vvs->rx_bytes + len > vvs->buf_alloc allows large queues when l...
CVE-2026-53145
Summary of CVE-2026-53145 (Linux kernel drm/gem change_handle race) : A race between gem_close and gem_change_handle ioctls in the DRM GEM subsystem was addressed but not cleanly fixed initially. The root cause involved confusion around the local handle variable (which is the new handle) and seve...
CVE-2026-53149
CVE-2026-53149 affects the Linux kernel Thunderbolt code path, where __tb_property_parse_dir() may read beyond the root directory block due to missing bounds checks on content_offset/content_len. The issue could allow reading past a directory block, with high impact to confidentiality and availab...
CVE-2026-53173
Summary (concrete details from provided docs): The Linux kernel component accel/ethosu contains an OOB write in ethosu_gem_cmdstream_copy_and_validate(). A local user can trigger by supplying a crafted command stream, causing memory corruption and potential instability. The issue arises in a pars...
CVE-2026-53184
The CVE-2026-53184 issue affects the Linux kernel UDP sockmap path. On UDP receive, skb->dev is repurposed as dev_scratch; when a SK_SKB verdict program uses BPF socket-lookup helpers (bpf_sk_lookup_tcp/udp, bpf_skc_lookup_tcp), skb->dev may still hold the dev_scratch value, and dev_net(skb...
CVE-2026-53196
In the Linux kernel USB: serial: io_ti driver, CVE-2026-53196 describes a heap overflow in get_manuf_info() caused by reading rom_desc->Size bytes from an I2C EEPROM into a 10-byte buffer (kmalloc_obj()). Size is only checked against TI_MAX_I2C_SIZE (16384), allowing a malicious device to set ...
CVE-2026-53207
The CVE-2026-53207 issue affects the Linux kernel mm/memory-failure path, where concurrent MADV_HWPOISON calls on the same hugetlb page can deadlock the non-recursive hugetlb_lock. The root cause is a sequence where a GUP reference is dropped under the hugetlb_lock, allowing free_huge_folio to re...
CVE-2026-53217
The CVE-2026-53217 issue affects the Linux kernel MVPP2 driver: RX data was synchronized at the hardware packet offset, leaving end-of-frame data possibly stale on non‑coherent DMA. Root cause is incorrect DMA sync range (starting at dma_addr and not covering the actual written packet tail). The ...
CVE-2026-53248
In Linux kernel, the airoha net driver has a use-after-free in metadata_dst teardown (CVE-2026-53248). The airoha_metadata_dst_free() function frees the metadata_dst with kfree() immediately, bypassing the RCU grace period, while the RX path may hold a non-refcounted pointer from skb to the dst v...
CVE-2026-53278
CVE-2026-53278 affects the Linux kernel arm_mpam component. The vulnerability arises when __destroy_component_cfg() is invoked from mpam_disable() before the configuration array has been allocated, causing a NULL pointer dereference. The function frees the configuration array and mbwu_state; sinc...
CVE-2026-53286
CVE-2026-53286 affects the Linux kernel IDPF driver: when auxiliary_device_add() fails in idpf_plug_vport_aux_dev() or idpf_plug_core_aux_dev(), the error path uninitializes the auxiliary device in a way that can trigger a use-after-free and a double free of the iadev object. The issue arises bec...
CVE-2026-53295
The CVE-2026-53295 entry covers a Linux kernel vulnerability in the mailbox subsystem: a missing sanity check for the mailbox channel array can lead to a dereference and an OOPS if no channel array is attached. The publicly provided connected sources confirm a patch/fix was applied in kernels and...
CVE-2026-53305
CVE-2026-53305 affects the Linux kernel USB Type-C ps883x driver. A NULL pointer dereference Oops occurs when unbinding a device for vfio-platform binding (example using unbind on bc0000.geniqup), caused by ps883x_retimer_remove() reading driver data via i2c_get_clientdata() that was never set du...
CVE-2026-53308
The CVE-2026-53308 issue concerns the Linux kernel max77705 power supply driver. The root cause is improper management of a workqueue and interrupt handlers during device removal, which could lead to use-after-free of memory after the workqueue is destroyed but before the interrupt is freed via t...
CVE-2026-53377
CVE-2026-53377 affects the Linux kernel DRM MSM driver. The GPU recovery path (Recover_worker) could fail to trigger recovery when no new work is submitted, leaving the GPU hung and potentially causing timeouts or unavailability. The fix changes Recover_worker to always recover the GPU (increment...
CVE-2026-64217
The CVE-2026-64217 entry affects the Linux kernel netfs subsystem. The vulnerability arises in the function netfs_extract_user_iter() where iov_iter_extract_pages() can overfill pages[]; overfilled pages are not supposed to be included in the final iterator, but memory corruption can already occu...
CVE-2022-50063
CVE-2022-50063 is a Linux kernel issue affecting the DSA felix driver, where dsa_tree_notify handling can cause repeated tagging-protocol changes and lead to a kernel crash. The root cause is described as suppressing non-changes to the tagging protocol in felix_change_tag_protocol(), which can tr...
CVE-2022-50122
CVE-2022-50122 covers a Linux kernel vulnerability in the ASoC Mediatek MT8173-rt5650 driver. The root cause is a refcount leak where of_parse_phandle() returns a node pointer with an incremented refcount; the correct fix is to call of_node_put() when the reference is no longer needed. The provid...
CVE-2022-50235
CVE-2022-50235 affects the Linux kernel’s NFS server (NFSD) by allowing a buffer overflow via the NFSv2 READDIR path. The underlying issue is a sender buffer overrun when processing the @count argument, and the fix restores the previous limit on that parameter to prevent the overflow. The vulnera...
CVE-2022-50239
CVE-2022-50239 refers to a Linux kernel issue in the cpufreq: qcom driver where a string literal stored in read-only memory was used as a destination for snprintf, causing an oops by writing into RO memory. The root cause was using a char *pvs_name pointing to a RO string and attempting snprintf(...
CVE-2022-50252
CVE-2022-50252 affects the Linux kernel igb driver. The issue arises when memory pressure triggers kzalloc() failure: q_vector is freed but not cleared from adapter->q_vector[v_idx], risking a use-after-free. The available connected advisories confirm the fix was implemented to ensure that q_v...
CVE-2022-50278
CVE-2022-50278 : In the Linux kernel, a memory leak was introduced in the PNP path by deferring the dynamic allocation of the device name until after pnp_add_id() (the fix was to move dev_set_name() after pnp_add_id()) following commit 1fa5ae857bb1. The vulnerability affects the PNP device naming...
CVE-2022-50279
CVE-2022-50279 affects the Linux kernel wifi rtlwifi driver (rtl8821ae/rtl8812ae). Root cause: _rtl8812ae_eq_n_byte() compared prate_section from tail to head, causing a global-out-of-bounds read when the value is HT, per KASAN. The fix: remove _rtl8812ae_eq_n_byte() and use strcmp() instead; thi...
CVE-2022-50313
Summary: CVE-2022-50313 affects the Linux kernel (EROF S subsystem). The root cause is that the i_size field is signed; crafted negative i_size can be interpreted as a fast symlink, triggering an order = MAX_ORDER warning. The fix changes the handling to fall back to the generic path for such unu...
CVE-2022-50324
CVE-2022-50324 — The Linux kernel contains a fix in the mtd: maps: pxa2xx-flash subsystem to address a memory leak during probe/remapping. The issue is triggered during probe when remapping an area and could leak memory if not handled properly; the fix frees the ‘info’ structure upon remapping er...
CVE-2022-50328
CVE-2022-50328 affects the Linux kernel component jbd2. It describes a use-after-free in jbd2_fc_wait_bufs caused by using bh after releasing the buffer head reference, with the recommended fix: validate uptodate status of the buffer before putting the buffer head reference count. The incident is...
CVE-2022-50353
The CVE-2022-50353 issue is in the Linux kernel driver mmc/wmt-sdmmc: the return value of mmc_add_host() was not checked. If mmc_add_host() returns an error, allocated memory from mmc_alloc_host() could be leaked, leading to a kernel crash when removing the device. The advisory states the fix is ...
CVE-2022-50362
CVE-2022-50362 is a Linux kernel issue in dmaengine for Hisilicon DMA channels. The vulnerability arises when a DMA channel is used concurrently across multiple threads, causing an oops and system hang due to a data race in descriptor handling. The root cause is described as threads rewriting the...
CVE-2022-50366
CVE-2022-50366 affects the Linux kernel powercap subsystem (intel_rapl). Root cause: UBSAN shift-out-of-bounds when ilog2() is computed with a value
CVE-2022-50398
The CVE-2022-50398 entry affects the Linux kernel DRM MSM display path (drm/msm/dp). A race in commit_tail/drm_release could allow an extra frame to be pushed downstream when the display interface is down, causing dp_bridge_disable() to access the main link register with clocks disabled and trigg...
CVE-2022-50409
CVE-2022-50409 is a Linux kernel vulnerability affecting networking code. The issue occurs when a socket is dead but code paths access the socket’s wait queue (sk_wq) during sk_stream_wait_memory, which can lead to a NULL dereference or use-after-free scenario when the socket is released while me...
CVE-2022-50425
CVE-2022-50425 is a Linux kernel vulnerability in the x86/fpu path. The issue occurs in copy_xstate_to_uabi() when an extended state component exists in init_fpstate but not fpstate, causing a NULL pointer dereference during XSAVE state handling in KVM/KVM-related ioctl paths. The mitigation desc...
CVE-2022-50427
CVE-2022-50427 is confirmed as fixed in the provided connected documents. The issue was in the Linux kernel ALSA: ac97 path, where in snd_ac97_dev_register() a failure of device_register() could leak the name allocated by dev_set_name() if put_device() was not invoked to drop the reference. The d...
CVE-2022-50457
CVE-2022-50457 : In the Linux kernel, the vulnerability is in mtd: core where del_mtd_device() calls of_node_put() on mtd_get_of_node(mtd) after memset(&mtd->dev, 0), clearing mtd->dev first and causing a refcount leak. The fix caches the pointer to the device_node to avoid unbalanced of_no...
CVE-2022-50476
The CVE-2022-50476 issue concerns ntb_netdev in the Linux kernel where TX/RX callback handlers can run in interrupt context via the DMA framework. The root cause was calling the interrupt-unsafe dev_kfree_skb() from ntb_netdev_tx_handler() and ntb_netdev_rx_handler(); the fix uses the interrupt-c...
CVE-2022-50482
CVE-2022-50482 is a Linux kernel vulnerability in the iommu/vt-d path. The issue is a memory leak of si_domain that occurs when init_dmars() fails, due to domain objects still lingering in the iommu_domain cache. The description states that this memory leak could occur in kernel builds prior to a...
CVE-2022-50500
CVE-2022-50500 – Linux kernel (netdevsim): The vulnerability is a memory leak in nsim_drv_probe() when nsim_dev_resources_register() fails, as reported in the initial document. Unreferenced object and backtrace indicate leak of 128-byte allocation in that failure path. The issue is fixed in the L...
CVE-2022-50517
CVE-2022-50517 : A Linux kernel issue in mm/huge_memory could clobber swp_entry_t during THP split, related to THP tail pages using page->private for swp_entry_t when folio_test_swapcache() is involved. The problem was observed during stress-ng mmap workloads after commit b653db77350c (“mm: Cl...
CVE-2022-50521
The CVE-2022-50521 issue affects the Linux kernel (platform/x86 mxm-wmi) with a memleak in mxm_wmi_call_mx[ds|mx]. The ACPI buffer (out.pointer) returned by wmi_evaluate_method() was not freed after the call, causing a memory leak. The patch fixes this by passing NULL to wmi_evaluate_method(), pr...
CVE-2022-50529
CVE-2022-50529 refers to a Linux kernel memory-leak in the test_firmware path. When misc_register() failed in test_firmware_init(), the memory pointed by test_fw_config->name was not released. The leak evidence shows an unreferenced object and a backtrace ending at test_firmware initialization...
CVE-2022-50536
CVE-2022-50536 affects the Linux kernel’s BPF sockmap path. In tcp_bpf_send_verdict() redirection, the eval variable is set to __SK_REDIRECT after sending apply_bytes data; if msg.has_more_data, sock_put() can be called multiple times, risking a use-after-free via refcount misuse. The issue is fi...
CVE-2022-50537
CVE-2022-50537 affects the Linux kernel through a memory-leak in the Raspberry Pi firmware path. The flaw occurs in rpi_firmware_probe(): when mbox_request_channel() fails, the allocated fw was not freed, leading to a leak. The fix, as described in the vulnerability notes, frees the fw via kfree(...
CVE-2023-53153
The CVE-2023-53153 entry describes a Linux kernel flaw in wifi cfg80211 (wext) where key data in wext.connect isn’t reset on (re)connect, allowing data from a prior connection to linger and potentially enable use-after-free during driver/mac80211 handling. The issue is fixed in the Linux kernel b...
CVE-2023-53164
CVE-2023-53164 concerns a Linux kernel issue in the TI-SCI IRQ domain handling. The vulnerability arises from a refcount leak in ti_sci_intr_irq_domain_probe: of_irq_find_parent() returns a node pointer with an incremented refcount, and a missing of_node_put() could prevent proper release. The pr...
CVE-2023-53172
CVE-2023-53172 concerns the Linux kernel fsverity feature. A change to FS_IOC_ENABLE_VERITY made it read data via __kernel_read() instead of direct pagecache, which made the WARN_ON_ONCE path reachable when the FD was opened with ioctl-only mode (mode 3). The fix is to reject FS_IOC_ENABLE_VERITY...
CVE-2023-53200
CVE-2023-53200 (Linux kernel) : The vulnerability is in netfilter: x_tables where a percpu counter block allocated for a new netns is leaked if xt_register_table() fails during table creation. The stack path shows allocation via __alloc_percpu → xt_percpu_counter_alloc → translate_table, then fai...
CVE-2023-53303
CVE-2023-53303 affects the Linux kernel in the net: microchip: vcap API. The vulnerability is a memory leak in vcap_dup_rule() when kmemdup() fails after kzalloc() succeeds under CONFIG_VCAP_KUNIT_TEST. The leak can leave allocated resources (duprule, ckf, caf) unreleased, as shown by the unrefer...
CVE-2023-53308
The CVE-2023-53308 issue is in the Linux kernel net: fec driver handling of pm_runtime_get() failures during removal. When pm_runtime_get() (as pm_runtime_resume_and_get()) fails, the remove callback may return an error, but the driver core ignores it and continues removing the device, causing a ...