CVE-2026-64410

The CVE-2026-64410 entry concerns the Linux kernel netfilter flowtable for IPIP tunnels where hardware offload is not yet supported. The provided descriptions indicate that no driver supports IPIP tunnels for offload, and a stub has been added to handle unsupported configurations by enqueueing wo...

CVE-2022-50113

The connected sources indicate CVE-2022-50113 affects the Linux kernel ASoc audio-graph-card2 component, where a refcount leak occurred in __graph_get_type() due to not calling of_node_put() before replacement and before return. The root cause is improper refcount management related to of_get_par...

CVE-2022-50182

CVE-2022-50182 concerns a Linux kernel issue in the media: imx-jpeg driver. The flaw involved aligning upwards the buffer size for both encoder and decoder, allowing arbitrary image dimensions (WxH) while leaving the picture resolution unchanged. The documented impact indicates the decoder risk o...

CVE-2022-50234

CVE-2022-50234 concerns the Linux kernel’s io_uring/af_unix subsystem. The vulnerability arises from deferring the garbage-collection of registered files to the io_uring release path rather than performing it via unix_gc(), coupled with using these registered files for cycle-detection without act...

CVE-2022-50278

CVE-2022-50278 : In the Linux kernel, a memory leak was introduced in the PNP path by deferring the dynamic allocation of the device name until after pnp_add_id() (the fix was to move dev_set_name() after pnp_add_id()) following commit 1fa5ae857bb1. The vulnerability affects the PNP device naming...

CVE-2022-50283

In the Linux kernel, CVE-2022-50283 is due to a missing of_node_get() in the dynamic partitions code, causing an unbalanced of_node_put() and a use-after-free in refcount handling during MTD partition parsing on gpmi-nand. The issue manifested in traces such as refcount_t: addition on 0; use-afte...

CVE-2022-50294

CVE-2022-50294 affects the Linux kernel’s libertas wifi driver (lbs_init_adapter). The root cause is a memory leak when kfifo_alloc() fails, where the cmd buffer is not freed, with remediation by adding memory free handling in the error path. The vulnerability yields a local attacker against a de...

CVE-2022-50295

CVE-2022-50295: In the Linux kernel io_uring/msg_ring path, a NULL pointer dereference occurs in io_msg_send_fd() when file_ptr is NULL, causing src_file to be NULL and get_file() to dereference a NULL pointer and trigger a crash. The issue was fixed by adding a NULL check in io_msg_send_fd(), pr...

CVE-2022-50301

CVE-2022-50301: Linux kernel iommu/omap debugfs vulnerability causing a buffer overflow in omap2_iommu_dump_ctx when bytes

CVE-2022-50304

CVE-2022-50304 affects the Linux kernel mtd/core with a resource leak in init_mtd() that could impact systems registering MTD devices. The issue was fixed in the kernel code (references include commits such as 26c304a3f136009c5a2a04e2bf3ac6aa25aabcb4 and 1aadf01e5076b9ab6bf294b9622335c651314895)....

CVE-2022-50358

The CVE-2022-50358 issue affects the Linux kernel driver brcmfmac. When the dongle reports an invalid max_flowrings value (greater than 256) during firmware initialization, the host may read an abnormal number and trigger a kernel panic when performing iowrite to initialize the dongle ring. The v...

CVE-2022-50359

CVE-2022-50359 affects Linux kernel media driver cx88: null-ptr-deref in buffer_prepare() when cx88_risc_buffer() fails, leading to empty buffer and null-ptr-deref in buffer_queue(). The issue is fixed by validating the return value of cx88_risc_buffer() before use. Affected reports in connected ...

CVE-2022-50425

CVE-2022-50425 is a Linux kernel vulnerability in the x86/fpu path. The issue occurs in copy_xstate_to_uabi() when an extended state component exists in init_fpstate but not fpstate, causing a NULL pointer dereference during XSAVE state handling in KVM/KVM-related ioctl paths. The mitigation desc...

CVE-2022-50427

CVE-2022-50427 is confirmed as fixed in the provided connected documents. The issue was in the Linux kernel ALSA: ac97 path, where in snd_ac97_dev_register() a failure of device_register() could leak the name allocated by dev_set_name() if put_device() was not invoked to drop the reference. The d...

CVE-2022-50486

The CVE-2022-50486 issue affects the Linux kernel TI Ethernet driver (net: ethernet: ti) where netcp_ndo_start_xmit() returns int but the net_device_ops field .ndo_start_xmit expects netdev_tx_t. This mismatch can trigger runtime failures (kernel panic or thread termination) when kCFI (clang, CON...

CVE-2022-50506

The CVE-2022-50506 entry is supported by multiple connected documents showing a Linux kernel issue in DRBD code: during drbd_req_new, a bio is conditionally allocated based on backing device, but device->ldev->backing_bdev was not NULL-checked, causing a NULL pointer dereference when the DR...

CVE-2022-50517

CVE-2022-50517 : A Linux kernel issue in mm/huge_memory could clobber swp_entry_t during THP split, related to THP tail pages using page->private for swp_entry_t when folio_test_swapcache() is involved. The problem was observed during stress-ng mmap workloads after commit b653db77350c (“mm: Cl...

CVE-2022-50525

The CVE-2022-50525 issue affects the Linux kernel, specifically the iommu/fsl_pamu path. The root cause was in fsl_pamu_probe(): on create_csd() failure, the function returned early, leaving IRQs and memory unreleased. The patch fixes this by jumping to an error-handling path when create_csd() fa...

CVE-2022-50545

CVE-2022-50545 concerns the Linux kernel where kmemleak reported leaks during the r6040 driver probe/remove flow. The root cause was a phy_device not being disconnected when removing an r6040 device or during error handling after a successful r6040_mii_probe, causing reference counts to stay elev...

CVE-2022-50555

CVE-2022-50555 : Linux kernel Tipc topsrv accept crashes due to a null pointer dereference when srv->listener is null (set by tipc_topsrv_stop). Root cause: concurrent use of a potentially null listener inside tipc_topsrv_accept; protection via srv->idr_lock, and a missing check allowed der...

CVE-2023-53189

In CVE-2023-53189, the Linux kernel IPv6 addrconf subsystem has a fix for a potential refcount underflow affecting idev in addrconf_mod_rs_timer. The root cause is a timing gap where rs_timer may activate without holding idev, risking a refcount mismanagement. The fix is to hold idev when mod_tim...

CVE-2023-53190

CVE-2023-53190 relates to a Linux kernel issue: a memory leak in the vxlan error path due to missing vxlan_vnigroup_uninit() when completion fails in vxlan_vnigroup_init(). The vulnerability affects vxlan initialization under certain error-injection/recovery scenarios, leading to memory leaks and...

CVE-2023-53214

Summary (CVE-2023-53214) The issue is in the Linux kernel (F2FS) where __update_iostat_latency() can corrupt memory due to a mixup between META_FLUSH and NR_PAGE_TYPE, leading to a potential buffer/memory corruption. The connected documents indicate a fix that adds an iotype sanity check to preve...

CVE-2023-53265

CVE-2023-53265 : In the Linux kernel, the ubi code fixes a slab out-of-bounds condition by ensuring that the VID header offset plus VID header size does not exceed the allocation. The advisory indicates a KASAN slab-OOB read in crc32 paths during VID header handling, with the fix preventing write...

CVE-2023-53289

The CVE-2023-53289 issue affects the Linux kernel, specifically the media/bdisp component. The root cause is a missing check for the return value of create_workqueue, which could lead to a NULL pointer dereference. The publicly available connected documents confirm a fix that adds the necessary c...

CVE-2023-53295

CVE-2023-53295 affects the Linux kernel, specifically the UDF module. The issue occurs when writing to inline files fails (or is only partially successful); the kernel wrongly updates the file length as if the entire write had succeeded. Root cause: updating length of inline data on failed writes...

CVE-2023-53302

CVE-2023-53302 affects the Linux kernel wifi iwl4965 driver. The vulnerability stems from a missing check of the return value of create_singlethread_workqueue(), which can lead to a NULL pointer dereference. The provided connected documents confirm the fix was applied in the kernel to add the nec...

CVE-2023-53305

The CVE-2023-53305 entry refers to a Linux kernel vulnerability in Bluetooth L2CAP that fixes a use-after-free condition in l2cap_le_command_rej. The issue is described as a use-after-free (UAF) in Bluetooth code, leading to potential impact with a CVSSv3.1 score of 7.8 (HIGH) and a LOCAL attack ...

CVE-2023-53323

CVE-2023-53323 affects the Linux kernel ext2 with DAX on pmem: ext2/dax: Fix ext2_setsize when len is page aligned. The bug arises when PAGE_ALIGN(x) returns x for already-aligned x, causing dax_zero_range() to pass length 0 to iomap_begin(), which makes ext2_get_blocks() see max_blocks = 0 and t...

CVE-2023-53330

CVE-2023-53330 : In the Linux kernel, memory leak in cfctrl_linkup_request() can occur when linktype is unknown or kzalloc() fails, as pkt is not released on error. The resolution adds a release path to the error flow, mitigating a potential memory leak in affected code paths. Connected advisorie...

CVE-2023-53333

CVE-2023-53333 affects the Linux kernel netfilter/conntrack for DCCP. The root cause is that nf_conntrack_dccp_packet() copies the full DCCP header into a stack buffer (via skb_header_pointer) rather than only the basic header, allowing a read past the allocated buffer (OOB read). The vulnerabili...

CVE-2023-53340

Linux kernel: net/mlx5 vulnerability where DEVX can issue a general, unknown command; if such a command fails, mlx5 may collect failure data without a storage for it, causing an array-index-out-of-bounds error. The fix adds a check to verify the command is known before collecting failure data. Af...

CVE-2023-53348

The CVE-2023-53348 issue affects the Linux kernel's Btrfs relocation workflow. Specifically, when relocating a block group, the scrub operation is paused during relocation and may deadlock if a transactional commit enters the critical section with a paused scrub. The vulnerability is resolved by ...

CVE-2023-53390

CVE-2023-53390 affects the Linux kernel (drivers: base: dd) where a call to debugfs_lookup() leaked memory because the result wasn’t dput()-ed. The fix uses debugfs_lookup_and_remove() to handle lookup and cleanup atomically, preventing the leak. Impact described: potential unbounded memory growt...

CVE-2023-53395

The CVE-2023-53395 entry refers to ACPICA: Add AML_NO_OPERAND_RESOLVE flag to Timer. The issue arises from ASL Timer instructions that require no argument; without AML_NO_OPERAND_RESOLVE, interpreting the Timer instruction could produce an error, and the fix adds AML_NO_OPERAND_RESOLVE to the Tim...

CVE-2023-53398

The CVE-2023-53398 entry describes a Linux kernel vulnerability in the mlx5 driver where fifo pop operations did not validate indices, enabling a potential use-after-free when popping from an empty queue during resync. The root cause was out-of-order CQEs that could drain the FIFO, allowing a SKB...

CVE-2023-53403

CVE-2023-53403: Linux kernel vulnerability in time/debug causing potential memory leak when using debugfs_lookup(). The issue arises because the result of debugfs_lookup() must be dput()-ed; if not, memory leaks occur over time. The documented mitigation is to replace the call with debugfs_lookup...

CVE-2023-53428

CVE-2023-53428 affects the Linux kernel powercap subsystem, specifically the arm_scmi implementation. The issue arises when powercap zones are retrieved from platforms and registered in a hierarchical tree; the current recursive walk can cause kernel stack overflow for large trees. The fix replac...

CVE-2023-53437

CVE-2023-53437 affects the Linux kernel media: uvcvideo driver. The vulnerability arises when handling cameras with invalid descriptors, potentially enabling local attacker access due to improper link handling when a source entity has no pads. Public docs (OpenVAS/Nessus summaries) list updates t...

CVE-2023-53470

CVE-2023-53470 – Linux kernel issue : The vulnerability arises from a missing NULL check after devlink_alloc(), risking kernel panic when devlink_priv() is called on a NULL result. A fix adds the NULL check; as a result, driver load may fail but the kernel will not panic. Documents show the issue...

CVE-2023-53475

CVE-2023-53475 affects the Linux kernel USB xHCI Tegra implementation. Root cause: sleep/alloc that can sleep (kasprintf) is invoked from an atomic context via tegra_xusb_padctl_get_usb3_companion -> tegra_xusb_find_port -> kasprintf, which is invalid in atomic contexts. Impact: potential c...

CVE-2023-53480

CVE-2023-53480 : In the Linux kernel, a o bject-level NULL-dereference can occur when registering a kset if its embedded kobject’s ktype is not initialized. The described scenario initializes a kset and its kobject name but omits kset.kobj.ktype, leading to a NULL pointer dereference in kobject_a...

CVE-2023-53508

Technical details for CVE-2023-53508 are not provided in the supplied documents. Monitor for official updates from vendors/advisories; current sources only reiterate a kernel fix without specifics.

CVE-2023-53532

CVE-2023-53532 concerns the Linux kernel/ath11k on AHB WLAN hardware. The issue arises during deinitialization of firmware resources for chipsets with non-fixed firmware memory when TrustZone is not present. The code path unmapped memory that was never mapped during initialization, leading to a k...

CVE-2023-53539

CVE-2023-53539 affects the Linux kernel RDMA/rxe subsystem, specifically the rxe_requester path. The root cause is incomplete state save/restore of the wqe, notably the dma struct used to process the sge table, which is not preserved when a send packet is dropped and a retransmit is attempted. Th...

CVE-2023-53574

CVE-2023-53574 affects the Linux kernel wifi/rtw88 driver. The issue arises when unloading the driver, where the TX purge timer is not properly deleted and the C2H queue is not freed, risking a crash and a memory leak. The documented root cause is improper cleanup in the rtw_core_deinit() path, w...

CVE-2023-53604

CVE-2023-53604: In the Linux kernel, the dm_integrity component may leak journal_io_cache if dm_register_target() fails due to an error path that calls kmem_cache_destroy() in dm_integrity_init(). This root cause is documented in the initial report as a resolution for the leak in journal_io_cache...

CVE-2023-53625

CVE-2023-53625 : In the Linux kernel, the vgpu debugfs cleanup path for drm/i915/gvt could dereference a null or destroyed debugfs root while destroying a virtual GPU, causing a kernel NULL pointer dereference and an oops. The issue occurs in remove paths where the drm minor’s debugfs root may al...

CVE-2023-53666

CVE-2023-53666 relates to the Linux kernel ASoC codecs (snd_soc_wcd_mbhc, wcd938x) where MBHC initialisation could fail and lead to a NULL/error pointer dereference while configuring the jack. The patch fixes missing error handling to prevent dereferencing an error pointer, addressing an issue th...

CVE-2023-53674

CVE-2023-53674 affects the Linux kernel clk subsystem. The issue is a memory leak in devm_clk_notifier_register(): the devres resource for the clk notifier was allocated but not registered with the device, causing the notifier/resource to leak on device detach. The fix is to register the resource...