CVE-2024-56779

Mode C: The CVE-2024-56779 issue concerns the Linux kernel nfsd when handling concurrent nfsd4_open operations. The description shows a leak: during open processing, two rpc_task instances may be created for the same file, and if an nfs4_openowner is found that is not marked NFS4_OO_CONFIRMED, it...

CVE-2016-6197

CVE-2016-6197 affects the OverlayFS implementation (fs/overlayfs/dir.c) in the Linux kernel before 4.6. The flaw allows a local user to cause a denial of service (system crash) by a rename that specifies a self-hardlink, due to incomplete verification of the upper dentry during unlink/rename. Exp...

CVE-2019-15117

CVE-2019-15117 affects the Linux kernel component parse_audio_mixer_unit in sound/usb/mixer.c. The issue arises when processing a short USB descriptor, resulting in out-of-bounds memory access. The vulnerability is local in scope with potential memory corruption as the impact. The initial entry s...

CVE-2019-19081

CVE-2019-19081 is a memory-leak/DoS vulnerability in the Linux kernel at drivers/net/ethernet/netronome/nfp/flower/main.c: nfp_flower_spawn_vnic_reprs() leaks memory, enabling denial of service via memory consumption. Affected: Linux kernel versions prior to 5.3.4. Reportedly remediated by Linux ...

CVE-2022-0494

CVE-2022-0494 is a Linux kernel information-leak flaw in scsi_ioctl.c that could let a local attacker with CAP_SYS_ADMIN or CAP_SYS_RAWIO extract kernel information, affecting confidentiality. The associated documents confirm the vulnerability and provide CVSS context (local access, high confiden...

CVE-2022-1734

CVE-2022-1734 affects the Linux kernel nfcmrvl NFC driver (drivers/nfc/nfcmrvl/main.c). The flaw is a use-after-free caused by a race between the cleanup path and firmware download, allowing memory corruption with local access (read/write) and potentially denial of service or privilege escalation...

CVE-2023-4387

CVE-2023-4387 affects VMware’s vmxnet3 Ethernet NIC driver in the Linux kernel. A use-after-free in vmxnet3_rq_alloc_rx_buf can lead to a double-free during vmxnet3_rq_cleanup_all, causing a system crash and, per advisory text, kernel information leakage. The issue is publicly documented in Nessu...

CVE-2024-53141

CVE-2024-53141 affects the Linux kernel netfilter ipset bitmap_ip_uadt logic. When tb[IPSET_ATTR_IP_TO] is absent but tb[IPSET_ATTR_CIDR] is present, the ip and ip_to values can be swapped, causing a missing range check for ip. The fix adds the missing range checks and removes unnecessary ones. C...

CVE-2011-4127

The CVE-2011-4127 entry is supported by connected advisory data that details the vulnerability in the Linux kernel prior to 3.2.2. Affected component: SG_IO ioctl handling in the kernel (SG_IO ioctls not properly restricted). Root cause: insufficient restriction of SG_IO commands, allowing a loca...

CVE-2018-5814

CVE-2018-5814 : Linux Kernel before 4.16.11, 4.14.43, 4.9.102, and 4.4.133 has race condition vulnerabilities in USB handling (probe, disconnect, rebind) that can trigger use-after-free or NULL dereference via multiple USB over IP packets. Fixes were released in kernel updates: 4.16.11, 4.14.43, ...

CVE-2017-7889

CVE-2017-7889 affects the Linux kernel mm subsystem (up to 3.2); a local attacker with access to /dev/mem can read/write kernel memory due to CONFIG_STRICT_DEVMEM not being properly enforced in arch/x86/mm/init.c and drivers/char/mem.c. Public details: Debian security advisories show fixes (e.g.,...

CVE-2019-10140

Technical details for CVE-2019-10140 are not provided in the connected documents. The initial description contains the vulnerability specifics, but no additional technical data appears here. Monitor for updates from the CNA and vendor advisories.

CVE-2019-15213

CVE-2019-15213: Linux kernel before 5.2.3 contains a use-after-free in the DVB‑USB driver (drivers/media/usb/dvb-usb/dvb-usb-init.c) triggered by a malicious USB device. The issue is limited to the kernel plasma stack in this component and is mitigated by upgrading to kernel 5.2.3 or newer, per t...

CVE-2021-29648

CVE-2021-29648 affects the Linux kernel up to version 5.11.11, with the BPF subsystem failing to treat resolved_ids and resolved_sizes as intentionally uninitialized in the vmlinux BTF. The consequence is a system crash on an unexpected access (in map_create and check_btf_info), caused by CID-350...

CVE-2023-6356

CVE-2023-6356 is a Linux kernel vulnerability in the NVMe driver affecting NVMe over TCP. The connected Nessus entries enumerate the issue as a NULL pointer dereference in the NVMe target path (nvmet_tcp_build_iovec/nvmet_tcp_execute_request/__nvmet_req_complete), which can lead to kernel panic a...

CVE-2023-28328

CVE-2023-28328: A NULL pointer dereference in the az6027 driver (drivers/media/usb/dev-usb/az6027.c) of the Linux kernel, caused by not validating the user-space message before transfer. Local users could crash the system or potentially cause a denial of service. Connected Astra Linux bulletin re...

CVE-2023-52922

CVE-2023-52922 affects the Linux kernel can/bcm: Fix UAF in bcm_proc_show(). The issue arises when bcm_op is freed before the corresponding procfs entry is removed in bcm_release(), which may allow bcm_proc_show() to read a freed bcm_op. Connected advisories confirm the root cause and mention a p...

CVE-2021-3764

Summary: CVE-2021-3764 is a memory-leak DoS in the Linux kernel related to the ccp_run_aes_gcm_cmd() function in the CCP crypto path (ccp-ops). Connected sources (Astra Linux advisories and Amazon Linux advisories) corroborate a memory-leak/DoS impact similar to CVE-2019-18808, with the highest t...

CVE-2022-2503

CVE-2022-2503 affects Linux kernels using Dm-verity/LoadPin. A device-mapper table reload can swap the target to an equivalent dm-linear target, bypassing verification until reboot and allowing root to load untrusted/unsigned kernel modules and firmware. This can enable arbitrary kernel execution...

CVE-2023-0045

The CVE-2023-0045 entry concerns the Linux kernel Spectre v2 mitigation for prctl-based task toggling. The underlying issue is that IBPB is not issued immediately during the prctl syscall; ib_prctl_set updates TIFs and SPEC_CTRL MSR, but IBPB is only emitted on the next schedule after TIF checks....

CVE-2023-1076

CVE-2023-1076 describes a Linux kernel flaw in tun/tap initialisation where the socket uid is hardcoded to 0 due to a type confusion. The result can cause tun/tap sockets to be treated as if they have root privileges when filtering/routing decisions are made, potentially bypassing network filters...

CVE-2023-3141

CVE-2023-3141 : A use-after-free in the Linux kernel memstick driver (drivers/memstick/host/r592.c, function r592_remove) can crash the system on device disconnect and may lead to kernel information leaks. Affected tracked advisories confirm this issue across multiple vendor/distro kernels (e.g.,...

CVE-2015-3288

CVE-2015-3288 affects the Linux kernel prior to 4.1.4. It arises from mishandling anonymous pages in mm/memory.c, allowing a local user to gain privileges or cause a denial of service by writing to page zero. The issue is fixed in 4.1.4 (per ChangeLog-4.1.4 and related advisories referenced in th...

CVE-2017-7184

The CVE-2017-7184 issue affects the Linux kernel xfrm subsystem, where xfrm_replay_verify_len in net/xfrm/xfrm_user.c up to 4.10.6 does not validate certain size data after an XFRM_MSG_NEWAE update, enabling a local attacker with CAP_NET_ADMIN to cause a heap-based out-of-bounds access and potent...

CVE-2019-17351

CVE-2019-17351 affects the Linux kernel prior to 5.2.3 in drivers/xen/balloon.c (Xen up to 4.12.x). The issue allows a guest OS user to cause a denial of service by unrestricted resource consumption during the mapping of guest memory. The connected advisories (Unity Linux, EulerOS, OpenVAS/USN re...

CVE-2019-9003

CVE-2019-9003 affects the Linux kernel prior to 4.20.5. The issue is a use-after-free in drivers/char/ipmi/ipmi_msghandler.c that can trigger an oops under certain concurrent execution, demonstrated by a service ipmievd restart loop. Impact is availability disruption (HIGH) with no confidentialit...

CVE-2023-2513

CVE-2023-2513 is a use-after-free in the Linux kernel ext4 filesystem related to handling extra inode size for extended attributes. The flaw could let a privileged local user crash the system or trigger undefined behavior. The Astra Linux bulletin confirms the same issue in Linux kernel (linux-5....

CVE-2023-52809

CVE-2023-52809 : Linux kernel vulnerability in scsi: libfc where fc_lport_ptp_setup() could dereference a NULL pointer if fc_rport_create() returns NULL. The fix adds a check on fc_rport_create()’s return value and logs an error when it fails. Affects the kernel’s SCSI/FC path; local access requi...

CVE-2024-53088

The CVE-2024-53088 entry concerns a race condition in the Linux kernel i40e driver related to MAC/VLAN filter handling under heavy load. Affected component is the i40e NIC firmware/driver stack; the issue arises when multiple threads concurrently modify filters, leading to memory corruption when ...

CVE-2017-7542

CVE-2017-7542 is a Linux kernel vulnerability described as an integer overflow in ip6_find_1stfragopt() (net/ipv6/output_core.c) that can be triggered by a local attacker who can open a raw socket, potentially causing a denial of service via an infinite loop. The initial description cites Linux k...

CVE-2017-7558

CVE-2017-7558 describes a kernel data leak (out-of-bounds read) in the Linux kernel inet_diag_msg_sctp{,l}addr_fill() and sctp_get_sctp_info() that could leak up to 100 bytes of slab data to userspace. Affected: Linux kernel (4.7-rc1 through 4.13). Root cause: filling sockaddr data structures wit...

CVE-2018-16862

CVE-2018-16862 : Linux kernel cleancache clears an inode after the final truncation, allowing a new file with the same inode to read leftover pages from the old file. The connected doc confirms a local attacker could use this to expose sensitive information. No patch/fix details are provided in t...

CVE-2019-18683

CVE-2019-18683 affects the Linux kernel’s V4L2 vivid driver (drivers/media/platform/vivid). The issue arises from wrong mutex locking in functions vivid_stop_generating_vid_cap(), vivid_stop_generating_vid_out(), sdr_cap_stop_streaming(), and related kthreads, causing multiple race conditions dur...

CVE-2022-36280

CVE-2022-36280: An out-of-bounds memory access in the vmwgfx GPU driver (vmwgfx_kms.c) of the Linux kernel’s vmwgfx component, affecting devices using /dev/dri/renderD128. Reported as a local privilege escalation leading to DoS. Public details in connected docs confirm the vulnerability and its p...

CVE-2023-6915

CVE-2023-6915 is a NULL pointer dereference in ida_free() within lib/idr.c of the Linux kernel leading to potential denial of service. Connected advisories show affected kernels across distributions: Astra Linux lists linux-5.10, 5.15, 6.1; CloudLinux notes ida_free in kernel (CVE-2023-6915) for ...

CVE-2024-26976

CVE-2024-26976 is a Linux kernel KVM vulnerability described in Astra Linux advisory as resolved. It concerns ensuring that the per-vCPU async #PF workqueue is not racing with module unload during VM/vCPU destruction. Root cause: gifting a reference to the VM (kvm_put_kvm) could deadlock because ...

CVE-2024-44989

CVE-2024-44989 is a Linux kernel vulnerability affecting bonding with xfrm offload, caused by setting real_dev to NULL (callbacks assume real_dev is always set). This can lead to a null-pointer dereference in offload/add SA paths (notably bond_ipsec_offload_ok/nsim_ipsec_offload_ok) when SA setup...

CVE-2017-7541

CVE-2017-7541 affects the Broadcom WLAN driver in the Linux kernel (brcmf_cfg80211_mgmt_tx in cfg80211.c). A crafted NL80211_CMD_FRAME Netlink packet can cause kernel memory corruption, leading to DoS or possible privilege escalation. Public details in connected CentOS security advisories confirm...

CVE-2018-1000004

CVE-2018-1000004 affects the Linux kernel with a race condition in the sound subsystem that can cause a deadlock and denial of service. The description notes affected versions as 4.12, 3.10, 2.6 and possibly earlier, with no explicit exploit details provided in the included documents. Connected a...

CVE-2018-5750

Technical details beyond the initial description are not present in the connected documents. The CVE-2018-5750 issue in the Linux kernel (via acpi_smbus_hc_add and SBS HC printk) is described in the Initial document as a local information disclosure; no additional public exploit/vendor-specific d...

CVE-2022-4744

CVE-2022-4744 describes a local, double-free flaw in the Linux kernel’s TUN/TAP device driver during register_netdevice failure, potentially crashing the host or enabling privilege escalation. Connected Astra Linux bulletin corroborates a Linux-5.10 kernel context with the same double-free issue ...

CVE-2023-40283

CVE-2023-40283 affects the Linux kernel before 6.4.10. It stems from a use-after-free in l2cap_sock_release (net/bluetooth/l2cap_sock.c) where the children of an sk are mishandled. The vulnerability allows a local attacker to run arbitrary code or cause a denial of service by crafting a targeted ...

CVE-2015-7872

CVE-2015-7872 affects the Linux kernel (security/keys/gc.c: key_gc_unused_keys) up to version 4.2.6. A local attacker can trigger a DoS (OOPS) using crafted keyctl commands. Connected documents reference upstream kernel commits (f05819df10d7b09f6d1eb6f8534a8f68e5a4fe61 and ce1fad2740c648a4340f6f6...

CVE-2016-8399

CVE-2016-8399 affects the Linux kernel networking subsystem. The issue arises from the ICMP header length not being properly validated, enabling a local attacker to trigger an out-of-bounds memory access. With CAP_NET_ADMIN, this could lead to privilege escalation or information disclosure, as de...

CVE-2017-11600

CVE-2017-11600 affects the Linux kernel xfrm subsystem (net/xfrm/xfrm_policy.c) where, when CONFIG_XFRM_MIGRATE is enabled, the dir value of xfrm_userpolicy_id is not constrained to XFRM_POLICY_MAX. This can allow a local user (CAP_NET_ADMIN) to cause a denial of service (out-of-bounds access) an...

CVE-2019-19077

CVE-2019-19077 is a Linux kernel vulnerability affecting bnxt_re (InfiniBand) where a memory leak in bnxt_re_create_srq() in drivers/infiniband/hw/bnxt_re/ib_verbs.c can be triggered by copy to udata failures, leading to denial of service via memory exhaustion. The issue is present in kernels up ...

CVE-2023-1074

CVE-2023-1074 is a memory-leak flaw in the Linux kernel SCTP implementation that can allow a local attacker to exhaust resources and cause a denial of service when a malicious networking service connects. The issue is described across multiple connected sources (e.g., Debian/AlmaLinux advisories ...

CVE-2017-9077

CVE-2017-9077 : The Linux kernel's tcp_v6_syn_recv_sock in net/ipv6/tcp_ipv6.c mishandles inheritance, enabling a local attacker to cause a denial of service via crafted system calls. The connected CentOS/CSA entries corroborate kernel-level impact and note security updates; no remote exploit det...

CVE-2022-3707

CVE-2022-3707 is a double-free in the Intel GVT-g graphics support within the Linux kernel, specifically in the intel_gvt_dma_map_guest_page path. The flaw can be triggered by a local attacker and may crash the system due to memory corruption. Connected advisories confirm the issue affecting the ...

CVE-2022-4139

CVE-2022-4139 describes an incorrect TLB flush in the Linux kernel’sGPU i915 driver, potentially causing random memory corruption or data leaks. The issue could allow a local user to crash the system or escalate privileges. The available connected documents consistently present the same descripti...