CVE-2023-53369

CVE-2023-53369 affects the Linux kernel’s DCB BCN parsing (net: dcb) where dcbnl_bcn_setcfg erroneously parsed tb[DCB_ATTR_BCN] attributes using the dcbnl_pfc_up_nest policy. This mismatch could cause parsing to overflow the intended policy bounds and read attributes (DCB_BCN_ATTR_BCNA_0..DCB_BCN...

CVE-2023-53381

CVE-2023-53381 (Linux kernel, NFSD) : The vulnerability arises from a leaked reference count for nfsd4_ssc_umount_item in NFSv4 server code; the refcount is not decremented on error, which prevents laundromat unmounting of the source vfsmount. The patch decrements the reference count on error pat...

CVE-2023-53390

CVE-2023-53390 affects the Linux kernel (drivers: base: dd) where a call to debugfs_lookup() leaked memory because the result wasn’t dput()-ed. The fix uses debugfs_lookup_and_remove() to handle lookup and cleanup atomically, preventing the leak. Impact described: potential unbounded memory growt...

CVE-2023-53395

The CVE-2023-53395 entry refers to ACPICA: Add AML_NO_OPERAND_RESOLVE flag to Timer. The issue arises from ASL Timer instructions that require no argument; without AML_NO_OPERAND_RESOLVE, interpreting the Timer instruction could produce an error, and the fix adds AML_NO_OPERAND_RESOLVE to the Tim...

CVE-2022-50554

CVE-2022-50554 affects the Linux kernel's blk-mq subsystem. The vulnerability arises from a race around IO request queuing, where an in-flight ->queue_rq() may be double-called due to an timeout occurring after blk_mq_start_request() but before completion, potentially causing a kernel panic. T...

CVE-2023-53147

The CVE-2023-53147 entry maps to a Linux kernel vulnerability in the IPsec XFRM subsystem: a NULL pointer dereference via xfrm_new_ae that could crash the kernel. The root cause is a missing NULL check when updating AE parameters; xfrm_update_ae_params could dereference a NULL x->replay_esn/x-...

CVE-2023-53166

CVE-2023-53166 is a Linux kernel race in the bq25890 charger driver. The external_power_changed callback dereferenced bq->charger before it was guaranteed to be set during power_supply_init, creating a potential NULL pointer dereference in early boot when the extcon power is detected. The vuln...

CVE-2023-53174

CVE-2023-53174 is a Linux kernel local vulnerability affecting the SCSI core: memory leak on the error path from device_add() when allocation of the device name fails. The root cause is that the name allocated by dev_set_name() is not freed and reference counting is mishandled; the fix adds a put...

CVE-2023-53177

CVE-2023-53177 affects the Linux kernel, specifically the media: hi846 driver, where pm_runtime_get_if_in_use() can return -EAGAIN during system resume, risking a refcount underflow after a subsequent pm_runtime_put(). The issue is mitigated by the patch that fixes system-resume handling for -EAG...

CVE-2023-53182

Technical details about CVE-2023-53182 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2023-53205

CVE-2023-53205 affects the Linux kernel KVM on s390, specifically the diag 9c handler where a race exists around the target CPU value (-1). The fix stores the physical target CPU in a local variable to prevent out-of-bounds accesses to CPU arrays. The CVE’s risk is described as high (CVSS v3.1: A...

CVE-2023-53217

Summary (CVE-2023-53217): Linux kernel vulnerability affecting the nubus subsystem where reading files under /proc/bus/nubus could segfault. The issue stems from a regression introduced during the conversion of proc_create_single_data() usage, making single_open() calls with nubus_proc_rsrc_show(...

CVE-2023-53265

CVE-2023-53265 : In the Linux kernel, the ubi code fixes a slab out-of-bounds condition by ensuring that the VID header offset plus VID header size does not exceed the allocation. The advisory indicates a KASAN slab-OOB read in crc32 paths during VID header handling, with the fix preventing write...

CVE-2023-53309

CVE-2023-53309 affects the Linux kernel’s drm/radeon path. The vulnerability stems from an overflow in radeon_cs_parser_init: the size field is unsigned, and if size equals 0x40000000, the calculation size *= sizeof(uint32_t) overflows, causing size to wrap to zero and leading to use of uninitial...

CVE-2023-53325

Technical details for CVE-2023-53325 are not provided in the supplied documents. Monitor for updates in connected sources.

CVE-2023-53448

CVE-2023-53448 is a Linux kernel issue in fbdev/imxfb where an unnecessary release_mem_region was removed on the error path to prevent releasing the mem region twice, which could lead to a resource leak or other issues. The connected advisories confirm that the Linux kernel has been updated to ad...

CVE-2023-53453

The CVE-2023-53453 issue affects the Linux kernel’s Radeon driver (drm/radeon/atombios) where iio objects allocated during atom_index_iio() were not freed on driver shutdown, causing a kmemleak reference and a potential leak. The fix releases the iio in radeon_atombios_fini() to prevent the kmeml...

CVE-2023-53455

CVE-2023-53455 concerns the Linux kernel DRM vc4 deadlock: vc4_hdmi_reset_link() returning -EDEADLK may deadlock in the locking context. The accepted fix is to drop held locks and back off using drm_modeset_backoff(), per the cited kernel DRM-KMS guidance. The vulnerability entry provides example...

CVE-2023-53483

CVE-2023-53483 affects the Linux kernel, specifically the ACPI processor code. The vulnerability arises in fch_misc_setup() where devm_kzalloc() may return NULL and lead to a NULL pointer dereference if clk_data->name is NULL. The CVE entry indicates this issue has been resolved in the Linux k...

CVE-2023-53503

In the Linux kernel, the vulnerability CVE-2023-53503 affects ext4: ext4_get_group_info() could underflow when computing a block group if s_first_data_block is set to an extremely large value due to a malicious attacker with write access to the block device while the filesystem is mounted. This c...

CVE-2023-53507

CVE-2023-53507 affects the Linux kernel mlx5 driver. When an interface is down, the mlx5 driver did not unregister its devlink parameters, which could trigger a kernel WARN during shutdown. The fix unregisters devlink params in the interface-down path as well, mitigating the WARN and potential in...

CVE-2023-53519

CVE-2023-53519 affects the Linux kernel media/v4l2-mem2mem path. The issue is a data race in v4l2_m2m_buf_queue when reading the parameter num_rdy, mitigated by introducing a lock to protect that parameter (as described in the OSV and SUSE advisories). Affected component: media: v4l2-mem2mem. Roo...

CVE-2023-53528

CVE-2023-53528 affects the Linux kernel RDMA/rxe subsystem. The vulnerability arises from an unsafe drain-work-queue path in qp cleanup when create_qp does not fully complete; cleanup could attempt to drain send/recv queues before the queues exist, leading to a segfault. The fixed patch adds a gu...

CVE-2023-53540

CVE-2023-53540 affects the Linux kernel wifi cfg80211: it rejects authentication/association attempts to an AP when the AP uses our own address as MLD/BSSID to avoid later failures. The issue’s root cause is improper handling of APs that spoof our address; it is mitigated by patches in the Linux ...

CVE-2023-53582

Concrete details found: CVE-2023-53582 affects the Linux kernel’s brcmfmac wifi driver. The issue is a stack-out-of-bounds read that occurs when a CLM version string, filled via memcpy() in brcmf_fil_iovar_data_get(), is passed as an argument to strreplace() in brcmf_c_preinit_dcmds() without bei...

CVE-2023-53584

CVE-2023-53584 pertains to the Linux kernel ubifs_releasepage path, where an assertion ubifs_assert(0) can fail during page release, potentially triggering UBIFS read-only mode and faulting I/O. Public docs show this was fixed in vendor-specific patches: Root:Ubuntu-22.04 advised patches (ROOT-OS...

CVE-2023-53594

CVE-2023-53594 is a Linux kernel driver-core resource leak in device_add(): if kobject_add() fails, dev->kobj.parent is set to NULL, causing a leak in resource cleanup and potentially insmod failure for mac80211_hwsim. The initial description and EulerOS/SUSE advisories confirm the vulnerabili...

CVE-2023-53596

In CVE-2023-53596, the Linux kernel patch fixes a resource leak by ensuring devm resources are released on device_del() even for bus-less/driver-less devices. The current code only calls devres_release_all() when the device has a bus and has been probed, which could leave device-managed resources...

CVE-2023-53603

CVE-2023-53603 affects the Linux kernel SCSI QLA2XXX path. The issue is a potential NULL pointer dereference where a fcport pointer may be dereferenced if sa_ctl is NULL and fcport is allocated after an exit path. The documented fix is to exit the routine when sa_ctl is NULL, preventing the NULL ...

CVE-2023-53606

CVE-2023-53606 affects the Linux kernel NFSD COPY path. Two flavors of nfsd4_copy (embedded in the compound, and a dynamically allocated, refcounted variant) allow potential nfsd_file refcount leaks if kthread_create fails, leaking src/dst nfsd_files. The cleanup was previously inconsistent (and ...

CVE-2023-53622

Summary of CVE-2023-53622 (Linux kernel, gfs2): A data race can occur in gfs2_show_options() when accessing fields of gfs2_tune (eg, gt_logd_secs) without holding the gt_spin lock, allowing concurrent execution with gfs2_reconfigure() to race. The fix acquires the lock (sdp->sd_tune.gt_spin) b...

CVE-2023-53662

CVE-2023-53662 affects the Linux kernel ext4 filesystem. The issue is a memory leak in ext4_fname_setup_filename() and ext4_fname_prepare_lookup() when filename casefolding fails, leaking fscrypt_name.name. The patch adds freeing of the allocated memory in the error paths of both functions. Affec...

CVE-2023-53665

CVE-2023-53665 : Linux kernel vulnerability in md/mdadm handling where after export_rdev(), mddev may be dereferenced via rdev->kobject; if the last rdev is freed, mddev might be invalid. This is caused by mddev->kobject being referenced by rdev->kobject and using mddev after export_rdev...

CVE-2023-53667

CVE-2023-53667 affects the Linux kernel net/cdc_ncm path. The vulnerability arises when dwNtbOutMaxSize is lower than the calculated minimum but greater than zero, causing skb allocation in cdc_ncm_fill_tx_frame() to run out of space and potentially panic due to skb bounds checks. The patch/clamp...

CVE-2023-53683

Summary of CVE-2023-53683 (Linux kernel, fs/hfsplus) : The vulnerability concerns the Apple HFS+ support in the Linux kernel. It arises from a problematic WARN_ON() in hfsplus_cat_read_inode() and hfsplus_cat_write_inode(), which could trigger under crafted filesystem images with bogus lengths. T...

CVE-2025-38397

CVE-2025-38397 is a Linux kernel vulnerability related to a suspicious RCU usage warning in nvme_mpath_add_sysfs_link() during NVMe over TCP tests. The connected SUSE/OpenSUSE advisories confirm a kernel fix addressing this RCU warning (nvme-multipath) in the Linux kernel, and indicate an updated...

CVE-2025-38592

CVE-2025-38592 affects the Linux kernel Bluetooth subsystem. The issue arises in hci_devcd_dump where dev_coredumpv and skb_put_data both use hdev->dump.head, allowing a freed vmalloc buffer to be accessed and causing vmalloc-out-of-bounds access. The documented root cause is that dev_coredump...

CVE-2025-38633

The CVE-2025-38633 entry concerns the Linux kernel clock framework: the spacemit clock PLL1_d8, which is a dependency for multiple clocks (including APB/AXI). Root cause: during a -EPROBE_DEFER handling for a reset controller, the CLK_DMA path was enabled, then temporarily disabled, causing the P...

CVE-2025-39740

The CVE-2025-39740 entry concerns a Linux kernel vulnerability in the DRM XE migration path. It describes a potential use-after-free (UAF) scenario if a fence_wait is performed after the previous fence has already been put(), on the error path. The fix changes the control flow so that the put() i...

CVE-2025-39796

CVE-2025-39796 affects the Linux kernel (net: lapbether: ignore ops-locked netdevs). According to connected sources, Syzkaller-triggered lock dependency via xsk_notify and register_netdevice could occur for notifier chains, with the fix skipping lapbeth for ops-locked devices to break the depende...

CVE-2025-39874

CVE-2025-39874 - Linux kernel macsec feature synchronization race : The issue occurs in macsec feature updates where lower (real) and upper device feature states can become out of sync during ETHTOOL_SFEATURES handling, potentially causing a lock in the lower device while updating features. The r...

CVE-2025-39919

The CVE-2025-39919 issue affects the Linux kernel’s wifi mt76 mt7996 driver. A missing validation check for RX wcid entries allowed non-station WCID entries to be passed to RX paths; in the case of the global wcid entry, this could lead to corruption of the WCID array due to a pointer being cast ...

CVE-2025-39940

CVE-2025-39940 concerns the Linux kernel’s dm-stripe component. A potential integer overflow can occur in stripe_io_hints when the chunk size is too large. The fix tests for an overflow and, if detected, avoids setting limits->io_min and limits->io_opt. This mitigates a local-privilege vect...

CVE-2025-71076

Technical details for CVE-2025-71076 are not publicly provided in the supplied documents. Monitor for updates for affected products, versions, exploitability, and remediation specifics.

CVE-2025-71108

CVE-2025-71108 refers to a Linux kernel vulnerability in the USB Type-C UCSI handling. The underlying issue is that the 8th bit of the num_connectors field is reserved and should be zero, but some buggy firmware sets it, which can cause a system to fail to boot. The description notes that the ker...

CVE-2025-71136

CVE-2025-71136 affects the Linux kernel’s media: adv7842 path. The vulnerability arises when cp_read() or hdmi_read() return -EIO and these values are used as indexes in arrays within adv7842_cp_log_status(), causing possible out-of-bounds accesses. The issue is resolved by adding checks on retur...

CVE-2025-71146

The CVE-2025-71146 entry concerns Linux kernel netfilter nf_conncount, where a ct (connection tracking) reference could be leaked on some error paths because the refcounted check was skipped. The published description states the issue and that it is resolved by ensuring the check is always perfor...

CVE-2025-71237

CVE-2025-71237 corresponds to a Linux kernel nilfs2 issue where an underflow during FITRIM end_block calculation can produce a negative nblocks, turning into a large positive value and causing the block layer to hang while processing a discard. The description and connected advisories confirm the...

CVE-2026-23022

The CVE-2026-23022 issue affects the Linux kernel’s idpf driver. It fixes a memory leak in idpf_vc_core_deinit() where hw->lan_regs was not freed, reported by kmemleak during reset. The root cause is a missing free in the deinitialization path of idpf_vc_core, leading to unreferenced memory be...

CVE-2026-23223

CVE-2026-23223 relates to the Linux kernel where the XFS filesystem code exhibits a use-after-free in xchk_btree_check_block_owner. The issue arises from dereferencing bs->cur after it (or related pointers) may have been freed, leading to incorrect aliasing checks for bs->sc->sa.{bno,rma...