CVE-2022-3565

CVE-2022-3565 — Linux Kernel Bluetooth vulnerability (del_timer use-after-free) : The issue affects the Linux kernel, specifically the del_timer path in drivers/isdn/mISDN/l1oip_core.c within the Bluetooth component. The root cause is a use-after-free in the timer code, enabling a remote attacker...

CVE-2023-39189

CVE-2023-39189 is documented in connected sources as affecting the Linux kernel Netfilter component, specifically the nftables path nf_osf_match_one(), which can trigger an out-of-bounds read leading to a crash or information disclosure. The vulnerability is reported across multiple advisories (e...

CVE-2019-19072

The CVE-2019-19072 issue is a Linux kernel memory leak in the predicate_parse() function (kernel/trace/trace_events_filter.c) that affects kernels up to 5.3.11, potentially enabling local attackers to cause a denial of service via memory consumption. The connected Nessus entries confirm the same ...

CVE-2019-19530

CVE-2019-19530 affects the Linux kernel prior to 5.2.10, with a use-after-free in the USB CDC-ACM driver (drivers/usb/class/cdc-acm.c) triggered by a malicious USB device. The issue could lead to a denial of service through memory corruption if exploited locally via USB hardware interfaces; CVSS ...

CVE-2020-12656

CVE-2020-12656 affects the Linux kernel (up to 5.6.10) where gss_mech_free in net/sunrpc/auth_gss/gss_mech_switch.c of rpcsec_gss_krb5 fails to call domain_release, causing a memory leak when unloading a kernel module. The issue is triggered by privileged module loading/unloading; memory could be...

CVE-2021-33656

CVE-2021-33656 affects the Linux kernel: setting a font with malicious data via the PIO_FONT ioctl can cause a memory out-of-bounds write. Affected: kernel font handling path; root cause: out-of-bounds write in ioctl processing. Impact: local code execution is not explicitly stated; exploitation ...

CVE-2022-0850

CVE-2022-0850 affects the Linux kernel’s ext4 filesystem by an information leak via the ext4_extent_header to userspace. The connected sources corroborate a kernel information leak (information disclosure) in ext4_extent_header and note fixes in various distributions:CloudLinux/CSLAs reference “e...

CVE-2023-2124

CVE-2023-2124 is an out-of-bounds memory access flaw in the Linux kernel XFS image restore path after failure with a dirty log journal. It can crash a local user or potentially escalate privileges when mounting/correcting a corrupted XFS disk image. Public advisories (e.g., Debian DSA-5448-1 and ...

CVE-2023-46813

CVE-2023-46813 affects the Linux kernel before 6.5.9. The issue arises from incorrect access checking in the #VC handler and SEV-ES MMIO instruction emulation, allowing a race where an attacker with userspace MMIO access can replace an instruction before the #VC handler reads it. This can lead to...

CVE-2018-18021

CVE-2018-18021 affects arch/arm64/kvm/guest.c in the Linux kernel before 4.18.12. The KVM_SET_ON_REG ioctl is mishandled, allowing a local attacker who can create VMs to arbitrarily redirect the hypervisor flow of control (full register control) and potentially cause a hypervisor panic via an ill...

CVE-2019-19927

CVE-2019-19927 affects Linux kernel 5.0.0-rc7 (as in ubuntu/linux.git) where mounting a crafted f2fs image and performing certain operations can cause slab-out-of-bounds read access in ttm_put_pages (ttm_page_alloc.c). The issue is linked to vmwgfx/ttm modules and may enable local, non-privileged...

CVE-2023-1077

CVE-2023-1077A: Linux kernel scheduling: In pick_next_rt_entity(), a type confusion can occur where a non-NULL, non-entry object (a list_head) is misinterpreted as a sched_rt_entity, bypassing BUG_ON checks and causing memory corruption. Public docs (Astra Linux page) mirror this description for ...

CVE-2017-17741

CVE-2017-17741 affects the Linux kernel KVM implementation through 4.14.7, enabling a write_mmio stack-based out-of-bounds read that can reveal potentially sensitive information from kernel memory. Affected code paths are in arch/x86/kvm/x86.c and include/trace/events/kvm.h. The supplied document...

CVE-2019-15920

CVE-2019-15920 affects the Linux kernel prior to 5.0.10, with a use-after-free in SMB2_read (fs/cifs/smb2pdu.c). The issue was not fixed in 5.0.10; the 5.0.11 ChangeLog documents a memory leak related to this area. Connected advisories (Unity Linux Nessus plugins) reference the same root cause an...

CVE-2022-49562

CVE-2022-49562 affects the Linux kernel KVM on x86. The fix changes A/D bit updates for guest PTEs to use __try_cmpxchg_user() instead of mapping PTEs into kernel space, addressing an incorrect VM_PFNMAP-based approach that could expose the kernel to unintended pfns. The issue is rooted in how vm...

CVE-2023-1382

The CVE-2023-1382 issue is a data race in the Linux kernel TIPC path where con is allocated before con->sock is set, causing a NULL pointer dereference when accessing con->sock->sk in net/tipc/topsrv.c. This is a local vulnerability with MEDIUM severity (CVSS 4.7). The connected document...

CVE-2023-6531

CVE-2023-6531 is a Linux kernel use-after-free race in the unix garbage collector where deletion of SKB races with unix_stream_read_generic() on the socket the SKB is queued on. The issue enables local privilege escalation as described in multiple advisories. Public documents consistently identif...

CVE-2020-12657

CVE-2020-12657 affects the Linux kernel before 5.6.5 due to a use-after-free in bfq_idle_slice_timer_body within bfq-iosched.c. The connected advisories (Unity Linux UTSA-2026-00x, Red Hat RHSA/CESA entries, CentOS plugin references) confirm kernel versions impacted and reference the 5.6.5 patch/...

CVE-2020-27825

CVE-2020-27825: A use-after-free in Linux kernel kernel/trace/ring_buffer.c (before 5.10-rc1) enables a race between trace_open and cpu-buffer resize, allowing local DOS and potential information leaks. Affected: Linux kernel’s tracing ring buffer; root cause is a race on parallel CPU access. Mit...

CVE-2020-28915

CVE-2020-28915 is a Linux kernel vulnerability in the fbcon framebuffer code, where a buffer over-read before 5.8.15 could allow a local attacker to read kernel memory. The issue is caused by improper bounds handling in the framebuffer font-related path used by fbcon. Affected fix: upstream patch...

CVE-2022-3344

CVE-2022-3344 is a vulnerability in the Linux kernel related to KVM AMD nested virtualization (SVM). The issue allows a malicious L1 guest to fail to intercept the shutdown of a cooperative nested L2 guest, which can cause a page fault and kernel panic on the host. Public sources in Connected doc...

CVE-2022-49731

CVE-2022-49731 affects the Linux kernel’s ata_libata-core. The flaw is a NULL pointer dereference in ata_host_alloc_pinfo() if the ppi array starts with NULL, causing a kernel oops. The fix initializes the local pi variable to &ata_dummy_port_info to prevent the oops. This vulnerability is addres...

CVE-2023-42755

CVE-2023-42755 affects the IPv4 RSVP classifier in the Linux kernel. The xprt pointer can reference beyond the skb’s linear area, causing an out-of-bounds read in rsvp_classify, which may allow a local user to crash the system and trigger denial of service. Connected advisories (Debian, Red Hat-b...

CVE-2018-16882

CVE-2018-16882 is a use-after-free in the Linux kernel KVM hypervisor when handling posted interrupts with nested virtualization. In nested_get_vmcs12_pages(), an error while processing the posted interrupt address can leave pi_desc_page unmapped without resetting the pi_desc descriptor, which is...

CVE-2019-19073

CVE-2019-19073 is supported by connected docs: memory leaks in Linux kernel drivers/net/wireless/ath/ath9k/htc_hst.c through 5.3.11 allow local attackers to trigger wait_for_completion_timeout() failures and cause memory-based DoS. The issue involves multiple functions (htc_config_pipe_credits(),...

CVE-2022-3114

CVE-2022-3114 affects the Linux kernel up to 5.16-rc6. The issue is in imx_register_uart_clocks (drivers/clk/imx/clk.c): it does not check the return value of kcalloc(), which can lead to a null pointer dereference and a potential crash. This is a local issue with low to moderate complexity and a...

CVE-2022-42722

CVE-2022-42722 affects Linux kernels 5.8–5.19.x (pre-5.19.16). Local attackers can inject WLAN frames into the mac80211 stack, triggering a NULL pointer dereference and a denial-of-service against beacon protection for P2P devices. Affected products reference Linux kernel/mac80211 internals and e...

CVE-2016-6197

CVE-2016-6197 affects the OverlayFS implementation (fs/overlayfs/dir.c) in the Linux kernel before 4.6. The flaw allows a local user to cause a denial of service (system crash) by a rename that specifies a self-hardlink, due to incomplete verification of the upper dentry during unlink/rename. Exp...

CVE-2018-10881

CVE-2018-10881 is an ext4-related Linux kernel vulnerability: out-of-bounds access in ext4_get_group_info when mounting/operating on a crafted ext4 image, leading to denial of service or system crash. Connected sources (e.g., USN-3752-2) confirm this CVE is among kernel/ext4 issues addressed; rem...

CVE-2019-15117

CVE-2019-15117 affects the Linux kernel component parse_audio_mixer_unit in sound/usb/mixer.c. The issue arises when processing a short USB descriptor, resulting in out-of-bounds memory access. The vulnerability is local in scope with potential memory corruption as the impact. The initial entry s...

CVE-2019-19081

CVE-2019-19081 is a memory-leak/DoS vulnerability in the Linux kernel at drivers/net/ethernet/netronome/nfp/flower/main.c: nfp_flower_spawn_vnic_reprs() leaks memory, enabling denial of service via memory consumption. Affected: Linux kernel versions prior to 5.3.4. Reportedly remediated by Linux ...

CVE-2019-19448

CVE-2019-19448 is a use-after-free in Linux kernel’s Btrfs code (try_merge_free_space in fs/btrfs/free-space-cache.c). It can be triggered by mounting a crafted Btrfs image and performing operations followed by a syncfs, due to a pointer alias between left and right data structures. Affected: Lin...

CVE-2022-3435

CVE-2022-3435 affects the Linux kernel: an out-of-bounds read in fib_nh_match (net/ipv4/fib_semantics.c) could be exploited remotely by a remote, unauthenticated/partially privileged actor per the CVSS vector. The issue is rated CVSS v3.1 base 4.3 (Medium) with low impact to confidentiality and n...

CVE-2023-4387

CVE-2023-4387 affects VMware’s vmxnet3 Ethernet NIC driver in the Linux kernel. A use-after-free in vmxnet3_rq_alloc_rx_buf can lead to a double-free during vmxnet3_rq_cleanup_all, causing a system crash and, per advisory text, kernel information leakage. The issue is publicly documented in Nessu...

CVE-2024-56783

CVE-2024-56783 : Linux kernel netfilter nft_socket vulnerability. Root cause: a WARN_ON_ONCE could be reached from userspace due to the default cgroup maximum depth being INT_MAX; a toggle exists to cap this depth to a safer value, and the code path unneededly warned instead of securely handling ...

CVE-2022-3567

CVE-2022-3567 is a Linux Kernel vulnerability affecting the IPv6 stack, specifically the inet6_stream_ops/inet6_dgram_ops in the IPv6 Handler. The issue is a race condition introduced in the kernel code (as described in the provided sources). A patch is recommended to fix the issue. The connected...

CVE-2023-0210

CVE-2023-0210 affects the Linux kernel ksmbd NTLMv2 authentication. The issue is that a bug in ksmbd NTLMv2 handling can crash the OS on Linux-based systems (immediate disruption). The description in the sources states the crash, and connected advisories/cves confirm the inclusion of this CVE amo...

CVE-2011-4127

The CVE-2011-4127 entry is supported by connected advisory data that details the vulnerability in the Linux kernel prior to 3.2.2. Affected component: SG_IO ioctl handling in the kernel (SG_IO ioctls not properly restricted). Root cause: insufficient restriction of SG_IO commands, allowing a loca...

CVE-2017-7889

CVE-2017-7889 affects the Linux kernel mm subsystem (up to 3.2); a local attacker with access to /dev/mem can read/write kernel memory due to CONFIG_STRICT_DEVMEM not being properly enforced in arch/x86/mm/init.c and drivers/char/mem.c. Public details: Debian security advisories show fixes (e.g.,...

CVE-2018-5333

This CVE affects Linux kernel up to 4.14.13, specifically the rds_cmsg_atomic() path in net/rds/rdma.c. The root cause is that rm->atomic.op_active is not cleared, causing rds_atomic_free_op() to dereference a null page link via set_page_dirty(), leading to a NULL pointer dereference. The vuln...

CVE-2019-10140

Technical details for CVE-2019-10140 are not provided in the connected documents. The initial description contains the vulnerability specifics, but no additional technical data appears here. Monitor for updates from the CNA and vendor advisories.

CVE-2022-1734

CVE-2022-1734 affects the Linux kernel nfcmrvl NFC driver (drivers/nfc/nfcmrvl/main.c). The flaw is a use-after-free caused by a race between the cleanup path and firmware download, allowing memory corruption with local access (read/write) and potentially denial of service or privilege escalation...

CVE-2023-4244

CVE-2023-4244 is a Linux kernel use-after-free in nf_tables/netfilter. A race between the netlink control plane transaction and nft_set element garbage collection can underflow a reference counter, enabling local privilege escalation. Affected: Linux kernel nf_tables/netfilter. Root cause: refere...

CVE-2009-2692

CVE-2009-2692 stems from uninitialized proto_ops in the Linux kernel (SOCKOPS_WRAP), allowing local users to trigger a NULL pointer dereference via mmap of page zero and gain privileges by invoking an unavailable operation (e.g., sock_sendpage on PF_PPPOX). Public details reference local privileg...

CVE-2018-5814

CVE-2018-5814 : Linux Kernel before 4.16.11, 4.14.43, 4.9.102, and 4.4.133 has race condition vulnerabilities in USB handling (probe, disconnect, rebind) that can trigger use-after-free or NULL dereference via multiple USB over IP packets. Fixes were released in kernel updates: 4.16.11, 4.14.43, ...

CVE-2019-15213

CVE-2019-15213: Linux kernel before 5.2.3 contains a use-after-free in the DVB‑USB driver (drivers/media/usb/dvb-usb/dvb-usb-init.c) triggered by a malicious USB device. The issue is limited to the kernel plasma stack in this component and is mitigated by upgrading to kernel 5.2.3 or newer, per t...

CVE-2019-19965

CVE-2019-19965 is a vulnerability in the Linux kernel (affecting the SAS SAS discover path) where a NULL pointer dereference occurs in drivers/scsi/libsas/sas_discover.c due to mishandling of port disconnection during discovery, related to a PHY down race condition (CID-f70267f379b5). The Unity L...

CVE-2024-56780

Technical details about CVE-2024-56780 are not provided in the connected documents. The initial description outlines a quota writeback flush race in Linux kernel/ext4 but lacks vendor/version/product mapping or patch specifics in these sources. Monitor for updates.

CVE-2024-56787

CVE-2024-56787 documents a Linux kernel issue where imx8m SoC code probed as a driver caused -EPROBE_DEFER when clock driver wasn’t probed yet. The fix converts the SoC code to a platform driver and instantiates it in current device_initcall, propagating -EPROBE_DEFER through the .probe retry mec...

CVE-2019-17351

CVE-2019-17351 affects the Linux kernel prior to 5.2.3 in drivers/xen/balloon.c (Xen up to 4.12.x). The issue allows a guest OS user to cause a denial of service by unrestricted resource consumption during the mapping of guest memory. The connected advisories (Unity Linux, EulerOS, OpenVAS/USN re...