CVE-2017-17741

CVE-2017-17741 affects the Linux kernel KVM implementation through 4.14.7, enabling a write_mmio stack-based out-of-bounds read that can reveal potentially sensitive information from kernel memory. Affected code paths are in arch/x86/kvm/x86.c and include/trace/events/kvm.h. The supplied document...

CVE-2020-25639

CVE-2020-25639: A NULL pointer dereference in the Linux kernel’s GPU Nouveau driver (prior to 5.12-rc1) via DRM_IOCTL_NOUVEAU_CHANNEL_ALLOC allows local users to crash the system. Affected: Linux kernel/Nouveau driver; Root cause: NULL pointer dereference in channel allocation path; Impact: local...

CVE-2023-1380

CVE-2023-1380 is referenced in the Connected documents as a slab-out-of-bounds read vulnerability in the Linux kernel, specifically in brcmf_get_assoc_ies() within the brcmfmac CFG80211 path. The underlying issue is when assoc_info->req_len exceeds the buffer size (WL_EXTRA_BUF_MAX), enabling ...

CVE-2023-1989

CVE-2023-1989 affects the Linux kernel, in particular the bluetooth driver path drivers/bluetooth/btsdio.c, function btsdio_remove. A call to btsdio_remove with an unfinished job can create a race condition that leads to a use-after-free (UAF) on hdev devices. Connected Astra Linux bulletin mirro...

CVE-2023-4244

CVE-2023-4244 is a Linux kernel use-after-free in nf_tables/netfilter. A race between the netlink control plane transaction and nft_set element garbage collection can underflow a reference counter, enabling local privilege escalation. Affected: Linux kernel nf_tables/netfilter. Root cause: refere...

CVE-2023-52821

CVE-2023-52821 affects the Linux kernel’s DRM panel code. In versatile_panel_get_modes(), the return value of drm_mode_duplicate() can be NULL on failure and is not checked, causing a NULL pointer dereference. The fix adds a check to prevent NP dereference. The vulnerability is local and may cras...

CVE-2018-1000004

CVE-2018-1000004 affects the Linux kernel with a race condition in the sound subsystem that can cause a deadlock and denial of service. The description notes affected versions as 4.12, 3.10, 2.6 and possibly earlier, with no explicit exploit details provided in the included documents. Connected a...

CVE-2018-20784

CVE-2018-20784 affects the Linux kernel prior to 4.20.2, where kernel/sched/fair.c mishandles leaf cfs_rq’s, allowing a denial of service via an infinite loop in update_blocked_averages and potentially other impact from induced high load. The publicly documented fix is in kernel version 4.20.2 (C...

CVE-2018-6927

CVE-2018-6927 concerns the Linux kernel futex_requeue implementation in kernel/futex.c. Multiple connected documents confirm a flaw where triggering a negative wake or requeue value can cause a denial of service via an integer overflow. Affected are kernel versions prior to 4.14.15 (and related u...

CVE-2020-11884

CVE-2020-11884 affects the Linux kernel on s390x (versions 4.19–5.6.7). The issue is a race in enable_sacf_uaccess (arch/s390/lib/uaccess.c) that fails to protect against a concurrent page table upgrade (CID-3f777e19d171), potentially allowing code execution or a crash. The initial documents do n...

CVE-2020-25668

CVE-2020-25668 is a Linux kernel vulnerability in the TTY subsystem (con_font_op) caused by unsynchronized access to fg_console, leading to a use-after-free. According to Debian, this can cause a crash or memory corruption and may enable privilege escalation; CloudLinux notes a fix was applied in...

CVE-2022-2961

CVE-2022-2961 concerns the Linux kernel’s PLP Rose functionality. The vulnerability is a use-after-free flaw caused by a race: a local user can trigger a race between calling bind and the rose_bind() function, potentially crashing the kernel or escalating privileges. Impact is described as local ...

CVE-2023-6356

CVE-2023-6356 is a Linux kernel vulnerability in the NVMe driver affecting NVMe over TCP. The connected Nessus entries enumerate the issue as a NULL pointer dereference in the NVMe target path (nvmet_tcp_build_iovec/nvmet_tcp_execute_request/__nvmet_req_complete), which can lead to kernel panic a...

CVE-2024-42231

CVE-2024-42231 affects the Linux kernel, specifically the btrfs filesystem in zoned mode. The issue is in calc_available_free_space(): the code incorrectly loops zone handling, treating each zone as a single chunk and not permitting partial allocations. This can yield a non-zone-aligned avail val...

CVE-2017-12192

CVE-2017-12192 affects the Linux kernel Key Management subcomponent: keyctl_read_key in security/keys/keyctl.c may be read on negatively instantiated keys, enabling a local attacker to cause a denial of service (kernel oops and crash). Affected: kernel before 4.13.5; fix implemented in 4.13.5 (Ch...

CVE-2019-15212

CVE-2019-15212 describes a vulnerability in the Linux kernel prior to 5.1.8 where a malicious USB device can trigger a double-free in drivers/usb/misc/rio500.c. This is a local/physical-access issue with potential impact to availability as per CVSS metrics shown. The connected Unity Nessus adviso...

CVE-2020-27825

CVE-2020-27825: A use-after-free in Linux kernel kernel/trace/ring_buffer.c (before 5.10-rc1) enables a race between trace_open and cpu-buffer resize, allowing local DOS and potential information leaks. Affected: Linux kernel’s tracing ring buffer; root cause is a race on parallel CPU access. Mit...

CVE-2022-3643

CVE-2022-3643: Linux kernel netback driver vulnerability allowing a guest to trigger NIC interface reset/abort/crash by sending packets with split headers. Root cause is an assumption that packet protocol headers reside in the SKB's linear section; certain NICs (e.g., Cisco ENIC, Broadcom NetXtre...

CVE-2022-39188

CVE-2022-39188 describes a race in include/asm-generic/tlb.h in the Linux kernel up to version 5.18/5.19 where unmap_mapping_range races with munmap for VM_PFNMAP VMAs can free a page still holding stale TLB entries. This can cause a page to be freed while TLBs still cache old mappings, potential...

CVE-2023-52814

CVE-2023-52814 : Linux kernel has fixed a potential NULL pointer dereference in the AMDGPU driver. The function amdgpu_ras_get_context may return NULL if the device does not support ras, and the code now checks for NULL before dereferencing. This (local) vulnerability could crash the kernel if NU...

CVE-2024-56779

Mode C: The CVE-2024-56779 issue concerns the Linux kernel nfsd when handling concurrent nfsd4_open operations. The description shows a leak: during open processing, two rpc_task instances may be created for the same file, and if an nfs4_openowner is found that is not marked NFS4_OO_CONFIRMED, it...

CVE-2009-2692

CVE-2009-2692 stems from uninitialized proto_ops in the Linux kernel (SOCKOPS_WRAP), allowing local users to trigger a NULL pointer dereference via mmap of page zero and gain privileges by invoking an unavailable operation (e.g., sock_sendpage on PF_PPPOX). Public details reference local privileg...

CVE-2021-3506

CVE-2021-3506 : An out-of-bounds memory access in fs/f2fs/node.c of the Linux kernel (f2fs module) allows a local attacker to read/write out-of-bounds memory, leading to a system crash or leakage of kernel information. Affected are kernel versions before 5.12.0-rc4. The description notes the high...

CVE-2022-0850

CVE-2022-0850 affects the Linux kernel’s ext4 filesystem by an information leak via the ext4_extent_header to userspace. The connected sources corroborate a kernel information leak (information disclosure) in ext4_extent_header and note fixes in various distributions:CloudLinux/CSLAs reference “e...

CVE-2022-3567

CVE-2022-3567 is a Linux Kernel vulnerability affecting the IPv6 stack, specifically the inet6_stream_ops/inet6_dgram_ops in the IPv6 Handler. The issue is a race condition introduced in the kernel code (as described in the provided sources). A patch is recommended to fix the issue. The connected...

CVE-2022-39842

CVE-2022-39842 affects the Linux kernel up to version 5.19, specifically in drivers/video/fbdev/pxa3xx-gcu.c (pxa3xx_gcu_write). The count parameter has a type conflict of size_t versus int, causing an integer overflow and bypassing the size check; this value is then passed as the third argument ...

CVE-2023-33951

The CVE-2023-33951 entry affects the vmwgfx driver in the Linux kernel, where a race condition in handling GEM objects due to improper locking can lead to information disclosure in kernel context. Connected advisories (MiracleLinux AXSA-2023-7038/AXSA:2023-7038:31) explicitly reference a vmwgfx i...

CVE-2023-52922

CVE-2023-52922 affects the Linux kernel can/bcm: Fix UAF in bcm_proc_show(). The issue arises when bcm_op is freed before the corresponding procfs entry is removed in bcm_release(), which may allow bcm_proc_show() to read a freed bcm_op. Connected advisories confirm the root cause and mention a p...

CVE-2011-4127

The CVE-2011-4127 entry is supported by connected advisory data that details the vulnerability in the Linux kernel prior to 3.2.2. Affected component: SG_IO ioctl handling in the kernel (SG_IO ioctls not properly restricted). Root cause: insufficient restriction of SG_IO commands, allowing a loca...

CVE-2020-12657

CVE-2020-12657 affects the Linux kernel before 5.6.5 due to a use-after-free in bfq_idle_slice_timer_body within bfq-iosched.c. The connected advisories (Unity Linux UTSA-2026-00x, Red Hat RHSA/CESA entries, CentOS plugin references) confirm kernel versions impacted and reference the 5.6.5 patch/...

CVE-2021-29265

CVE-2021-29265 affects the Linux kernel prior to 5.11.7. The vulnerability is in the usbip_sockfd_store function (drivers/usb/usbip/stub_dev.c) where the stub-up sequence has race conditions during updates of local and shared status, enabling a local attacker to trigger a denial of service (kerne...

CVE-2022-3594

CVE-2022-3594 is a Linux kernel vulnerability in the BPF component: the intr_callback in drivers/net/usb/r8152.c can cause logging of excessive data. It is exploitable remotely as described; a patch/update is recommended. Connected advisories (Astra Linux, Amazon Linux livepatch) mirror these det...

CVE-2018-16862

CVE-2018-16862 : Linux kernel cleancache clears an inode after the final truncation, allowing a new file with the same inode to read leftover pages from the old file. The connected doc confirms a local attacker could use this to expose sensitive information. No patch/fix details are provided in t...

CVE-2022-1852

CVE-2022-1852 concerns a NULL pointer dereference in the Linux kernel’s KVM module during x86 emulation (x86_emulate_insn) when the guest executes an illegal instruction on Intel CPUs, which can lead to a denial of service. The vulnerability is in the KVM emulation path (arch/x86/kvm/emulate.c) a...

CVE-2022-42722

CVE-2022-42722 affects Linux kernels 5.8–5.19.x (pre-5.19.16). Local attackers can inject WLAN frames into the mac80211 stack, triggering a NULL pointer dereference and a denial-of-service against beacon protection for P2P devices. Affected products reference Linux kernel/mac80211 internals and e...

CVE-2022-45869

CVE-2022-45869 is a Linux kernel issue describing a race condition in the x86 KVM subsystem that can be triggered when nested virtualization and the TDP MMU are enabled. The vulnerability affects the Linux kernel up to version 6.1-rc6 as described in the Astra Linux security bulletin, which mirro...

CVE-2023-1077

CVE-2023-1077A: Linux kernel scheduling: In pick_next_rt_entity(), a type confusion can occur where a non-NULL, non-entry object (a list_head) is misinterpreted as a sched_rt_entity, bypassing BUG_ON checks and causing memory corruption. Public docs (Astra Linux page) mirror this description for ...

CVE-2024-50087

Technical details for CVE-2024-50087 are not publicly provided in the supplied documents. No concrete exploit/victim specifics are given here; monitor connected sources for patches, affected products, and suggested mitigations as updates emerge.

CVE-2017-7541

CVE-2017-7541 affects the Broadcom WLAN driver in the Linux kernel (brcmf_cfg80211_mgmt_tx in cfg80211.c). A crafted NL80211_CMD_FRAME Netlink packet can cause kernel memory corruption, leading to DoS or possible privilege escalation. Public details in connected CentOS security advisories confirm...

CVE-2018-15471

CVE-2018-15471 affects the Linux kernel Xen netback driver: the xenvif_set_hash_mapping function in drivers/net/xen-netback/hash.c handles request queue mapping with insufficient input validation (e.g., for integer overflow), causing out-of-bounds memory access. This can allow a malicious or bugg...

CVE-2018-5750

Technical details beyond the initial description are not present in the connected documents. The CVE-2018-5750 issue in the Linux kernel (via acpi_smbus_hc_add and SBS HC printk) is described in the Initial document as a local information disclosure; no additional public exploit/vendor-specific d...

CVE-2019-15211

CVE-2019-15211 : Linux kernel before 5.2.6 contains a use-after-free in drivers/media/v4l2-core/v4l2-dev.c triggered by a malicious USB device; the issue is tied to memory allocation in drivers/media/radio/radio-raremono.c. Evidence from multiple Nessus/SUSE/OpenOpen advisories confirms the descr...

CVE-2022-25265

CVE-2022-25265 is a Linux kernel issue affecting binaries built around 2003 (e.g., GCC 3.2.2 with Linux 2.4.20) that can allow local attackers to execute code by exploiting exec-all attribute in non-executable regions. Connected advisories show the vulnerability being addressed as part of kernel/...

CVE-2022-49731

CVE-2022-49731 affects the Linux kernel’s ata_libata-core. The flaw is a NULL pointer dereference in ata_host_alloc_pinfo() if the ppi array starts with NULL, causing a kernel oops. The fix initializes the local pi variable to &ata_dummy_port_info to prevent the oops. This vulnerability is addres...

CVE-2022-3524

CVE-2022-3524 affects the Linux kernel IPv6 Handler’s ipv6_renew_options, causing a memory leak. The vulnerability can be triggered remotely per some sources; a patch is available and applies to mitigate the issue. Review the Linux kernel patches referenced in the CVE details and apply the approp...

CVE-2019-15919

CVE-2019-15919 affects the Linux kernel before 5.0.10. The vulnerability is in SMB2_write (fs/cifs/smb2pdu.c) due to a use-after-free in the SMB2 write path, with partial confidentiality impact (I: partial) and no explicit exploitation details provided. Remediation: upgrade to kernel 5.0.10 or la...

CVE-2019-19054

CVE-2019-19054: A memory leak in the Linux kernel cx23888_ir_probe() function (drivers/media/pci/cx23885/cx23888-ir.c) through version 5.3.11 can lead to denial of service via memory consumption when kfifo_alloc() fails. Connected Nessus advisories (UNITY_LINUX_UTSA-2026-004170 and related entrie...

CVE-2019-19530

CVE-2019-19530 affects the Linux kernel prior to 5.2.10, with a use-after-free in the USB CDC-ACM driver (drivers/usb/class/cdc-acm.c) triggered by a malicious USB device. The issue could lead to a denial of service through memory corruption if exploited locally via USB hardware interfaces; CVSS ...

CVE-2021-29648

CVE-2021-29648 affects the Linux kernel up to version 5.11.11, with the BPF subsystem failing to treat resolved_ids and resolved_sizes as intentionally uninitialized in the vmlinux BTF. The consequence is a system crash on an unexpected access (in map_create and check_btf_info), caused by CID-350...

CVE-2021-38201

The CVE affects the Linux kernel, specifically net/sunrpc/xdr.c, where an out-of-bounds slab access (xdr_set_page_base) could be triggered by many NFS 4.2 READ_PLUS operations, allowing remote denial-of-service. Affected: Linux kernel versions prior to 5.13.4. Root cause: slab-out-of-bounds acces...