CVE-2024-56787

CVE-2024-56787 documents a Linux kernel issue where imx8m SoC code probed as a driver caused -EPROBE_DEFER when clock driver wasn’t probed yet. The fix converts the SoC code to a platform driver and instantiates it in current device_initcall, propagating -EPROBE_DEFER through the .probe retry mec...

CVE-2011-4127

The CVE-2011-4127 entry is supported by connected advisory data that details the vulnerability in the Linux kernel prior to 3.2.2. Affected component: SG_IO ioctl handling in the kernel (SG_IO ioctls not properly restricted). Root cause: insufficient restriction of SG_IO commands, allowing a loca...

CVE-2018-5750

Technical details beyond the initial description are not present in the connected documents. The CVE-2018-5750 issue in the Linux kernel (via acpi_smbus_hc_add and SBS HC printk) is described in the Initial document as a local information disclosure; no additional public exploit/vendor-specific d...

CVE-2019-10220

CVE-2019-10220 affects the Linux kernel CIFS implementation when using kernel version 4.9.0, which is vulnerable to a relative path injection in directory entry lists. The connected Nessus advisories corroborate that this CVE is referenced in multiple advisory plugins, describing the affected com...

CVE-2019-15919

CVE-2019-15919 affects the Linux kernel before 5.0.10. The vulnerability is in SMB2_write (fs/cifs/smb2pdu.c) due to a use-after-free in the SMB2 write path, with partial confidentiality impact (I: partial) and no explicit exploitation details provided. Remediation: upgrade to kernel 5.0.10 or la...

CVE-2019-19054

CVE-2019-19054: A memory leak in the Linux kernel cx23888_ir_probe() function (drivers/media/pci/cx23885/cx23888-ir.c) through version 5.3.11 can lead to denial of service via memory consumption when kfifo_alloc() fails. Connected Nessus advisories (UNITY_LINUX_UTSA-2026-004170 and related entrie...

CVE-2020-35508

CVE-2020-35508 is a Linux kernel issue describing a race condition and incorrect initialization of the child/parent process ID handling when filtering signal handlers. The flaw permits a local attacker to bypass checks and send signals to a privileged process. Multiple Nessus/MiracleLinux Unity a...

CVE-2019-17075

CVE-2019-17075 affects the Linux kernel cxgb4 InfiniBand driver. The issue arises in mem.c: the driver calls DMA mapping (dma_map_single) from a stack variable, which can be triggered to cause a Denial of Service on architectures where stack/DMA interaction is relevant. Connected Nessus advisorie...

CVE-2021-29648

CVE-2021-29648 affects the Linux kernel up to version 5.11.11, with the BPF subsystem failing to treat resolved_ids and resolved_sizes as intentionally uninitialized in the vmlinux BTF. The consequence is a system crash on an unexpected access (in map_create and check_btf_info), caused by CID-350...

CVE-2022-1852

CVE-2022-1852 concerns a NULL pointer dereference in the Linux kernel’s KVM module during x86 emulation (x86_emulate_insn) when the guest executes an illegal instruction on Intel CPUs, which can lead to a denial of service. The vulnerability is in the KVM emulation path (arch/x86/kvm/emulate.c) a...

CVE-2022-3594

CVE-2022-3594 is a Linux kernel vulnerability in the BPF component: the intr_callback in drivers/net/usb/r8152.c can cause logging of excessive data. It is exploitable remotely as described; a patch/update is recommended. Connected advisories (Astra Linux, Amazon Linux livepatch) mirror these det...

CVE-2022-49562

CVE-2022-49562 concerns the Linux kernel KVM/x86 path, where guest PTE A/D bits were updated using a risky mapping approach. The fix switches to __try_cmpxchg_user() to update guest PTE A/D bits instead of mapping the PTE into kernel space, and highlights VM_PFNMAP addressing being conceptually w...

CVE-2023-3610

The CVE-2023-3610 issue is a use-after-free in the Linux kernel nf_tables (netfilter) logic, specifically in the NFT_MSG_NEWRULE abort path, caused by flawed error handling of bound chains. This vulnerability can enable local privilege escalation for an attacker possessing CAP_NET_ADMIN, within a...

CVE-2023-42755

CVE-2023-42755 affects the IPv4 RSVP classifier in the Linux kernel. The xprt pointer can reference beyond the skb’s linear area, causing an out-of-bounds read in rsvp_classify, which may allow a local user to crash the system and trigger denial of service. Connected advisories (Debian, Red Hat-b...

CVE-2018-14646

CVE-2018-14646 path: Linux kernel contains a NULL pointer dereference in __netlink_ns_capable() (net/netlink/af_netlink.c). A local attacker with netnsid assigned to a net namespace can trigger a kernel panic, causing a denial of service. Connected advisories (e.g., Red Hat RHSA entries and Euler...

CVE-2018-7191

CVE-2018-7191 affects the Linux kernel tun subsystem prior to 4.13.14. Root cause: dev_get_valid_name is not called before register_netdevice, enabling a local user to trigger a NULL pointer dereference via ioctl(TUNSETIFF) with a device name containing a “/” character, potentially causing a deni...

CVE-2019-15920

CVE-2019-15920 affects the Linux kernel prior to 5.0.10, with a use-after-free in SMB2_read (fs/cifs/smb2pdu.c). The issue was not fixed in 5.0.10; the 5.0.11 ChangeLog documents a memory leak related to this area. Connected advisories (Unity Linux Nessus plugins) reference the same root cause an...

CVE-2020-11669

CVE-2020-11669 affects the Linux kernel before 5.2 on the powerpc platform. The issue is in arch/powerpc/kernel/idle_book3s.S where save/restore for PNV_POWERSAVE_AMR, PNV_POWERSAVE_UAMOR, and PNV_POWERSAVE_AMOR is missing (CID-53a712bae5dd). This can impact availability (per CVSS 3.1: Availabili...

CVE-2022-36280

CVE-2022-36280: An out-of-bounds memory access in the vmwgfx GPU driver (vmwgfx_kms.c) of the Linux kernel’s vmwgfx component, affecting devices using /dev/dri/renderD128. Reported as a local privilege escalation leading to DoS. Public details in connected docs confirm the vulnerability and its p...

CVE-2022-4744

CVE-2022-4744 describes a local, double-free flaw in the Linux kernel’s TUN/TAP device driver during register_netdevice failure, potentially crashing the host or enabling privilege escalation. Connected Astra Linux bulletin corroborates a Linux-5.10 kernel context with the same double-free issue ...

CVE-2023-2124

CVE-2023-2124 is an out-of-bounds memory access flaw in the Linux kernel XFS image restore path after failure with a dirty log journal. It can crash a local user or potentially escalate privileges when mounting/correcting a corrupted XFS disk image. Public advisories (e.g., Debian DSA-5448-1 and ...

CVE-2023-1076

CVE-2023-1076 describes a Linux kernel flaw in tun/tap initialisation where the socket uid is hardcoded to 0 due to a type confusion. The result can cause tun/tap sockets to be treated as if they have root privileges when filtering/routing decisions are made, potentially bypassing network filters...

CVE-2024-53088

The CVE-2024-53088 entry concerns a race condition in the Linux kernel i40e driver related to MAC/VLAN filter handling under heavy load. Affected component is the i40e NIC firmware/driver stack; the issue arises when multiple threads concurrently modify filters, leading to memory corruption when ...

CVE-2024-56783

CVE-2024-56783 : Linux kernel netfilter nft_socket vulnerability. Root cause: a WARN_ON_ONCE could be reached from userspace due to the default cgroup maximum depth being INT_MAX; a toggle exists to cap this depth to a safer value, and the code path unneededly warned instead of securely handling ...

CVE-2018-5814

CVE-2018-5814 : Linux Kernel before 4.16.11, 4.14.43, 4.9.102, and 4.4.133 has race condition vulnerabilities in USB handling (probe, disconnect, rebind) that can trigger use-after-free or NULL dereference via multiple USB over IP packets. Fixes were released in kernel updates: 4.16.11, 4.14.43, ...

CVE-2020-12656

CVE-2020-12656 affects the Linux kernel (up to 5.6.10) where gss_mech_free in net/sunrpc/auth_gss/gss_mech_switch.c of rpcsec_gss_krb5 fails to call domain_release, causing a memory leak when unloading a kernel module. The issue is triggered by privileged module loading/unloading; memory could be...

CVE-2022-3114

CVE-2022-3114 affects the Linux kernel up to 5.16-rc6. The issue is in imx_register_uart_clocks (drivers/clk/imx/clk.c): it does not check the return value of kcalloc(), which can lead to a null pointer dereference and a potential crash. This is a local issue with low to moderate complexity and a...

CVE-2023-4015

CVE-2023-4015 describes a use-after-free in the Linux kernel nf_tables component of netfilter, enabling local privilege escalation. The issue arises when building a nftables rule: deactivating immediate expressions in nft_immediate_deactivate() can unbind a chain and deactivate objects that are l...

CVE-2019-19081

CVE-2019-19081 is a memory-leak/DoS vulnerability in the Linux kernel at drivers/net/ethernet/netronome/nfp/flower/main.c: nfp_flower_spawn_vnic_reprs() leaks memory, enabling denial of service via memory consumption. Affected: Linux kernel versions prior to 5.3.4. Reportedly remediated by Linux ...

CVE-2019-19530

CVE-2019-19530 affects the Linux kernel prior to 5.2.10, with a use-after-free in the USB CDC-ACM driver (drivers/usb/class/cdc-acm.c) triggered by a malicious USB device. The issue could lead to a denial of service through memory corruption if exploited locally via USB hardware interfaces; CVSS ...

CVE-2021-33656

CVE-2021-33656 affects the Linux kernel: setting a font with malicious data via the PIO_FONT ioctl can cause a memory out-of-bounds write. Affected: kernel font handling path; root cause: out-of-bounds write in ioctl processing. Impact: local code execution is not explicitly stated; exploitation ...

CVE-2022-24959

CVE-2022-24959 affects the Linux kernel before 5.16.5, via a memory leak in yam_siocdevprivate() in drivers/net/hamradio/yam.c. This can lead to denial of service due to memory exhaustion. The issue is addressed in the 5.16.5 kernel release; related advisories (e.g., Debian security updates) note...

CVE-2022-3565

CVE-2022-3565 — Linux Kernel Bluetooth vulnerability (del_timer use-after-free) : The issue affects the Linux kernel, specifically the del_timer path in drivers/isdn/mISDN/l1oip_core.c within the Bluetooth component. The root cause is a use-after-free in the timer code, enabling a remote attacker...

CVE-2023-45863

The CVE-2023-45863 issue affects the Linux kernel prior to 6.2.3 and is triggered by a race condition in lib/kobject.c that causes a fill_kobj_path out-of-bounds write when run with root privileges. Public sources in connected documents (Astra Linux bulletin and IBM advisories) describe the same ...

CVE-2024-0607

The CVE-2024-0607 entry concerns the Linux kernel netfilter/nft_tables vulnerability in nft_byteorder_eval(). A loop writes 8 bytes per iteration into a dst array of u32 elements, causing out-of-bounds writes and corruption of the dst array. This can enable a local user to cause a Denial of Servi...

CVE-2018-10881

CVE-2018-10881 is an ext4-related Linux kernel vulnerability: out-of-bounds access in ext4_get_group_info when mounting/operating on a crafted ext4 image, leading to denial of service or system crash. Connected sources (e.g., USN-3752-2) confirm this CVE is among kernel/ext4 issues addressed; rem...

CVE-2019-19528

CVE-2019-19528: Linux kernel pre-5.3.7 contains a use-after-free in the iowarrior USB driver (drivers/usb/misc/iowarrior.c) triggered by a malicious USB device. Public advisories (MiracleLinux AXSA:2021-2148:12 and Unity Linux UTSA references) confirm this CVE and map it to kernel builds up to 5....

CVE-2024-41012

In the Linux kernel, CVE-2024-41012 pertains to a fcntl/close race in file locking where an LSM could allow the first do_lock_file_wait() to acquire a lock while denying the second removal, and POSIX lock removal could fail due to GFP_KERNEL allocation during range splitting. The issue can lead t...

CVE-2024-41013

CVE-2024-41013 : The Linux kernel vulnerability in xfs: don't walk off the end of a directory data block has been fixed. The issue was caused by insufficient bounds checks for xfs_dir2_data_unused and xfs_dir2_data_entry, which could allow an out-of-bounds read during directory traversal if a cra...

CVE-2024-56780

Technical details about CVE-2024-56780 are not provided in the connected documents. The initial description outlines a quota writeback flush race in Linux kernel/ext4 but lacks vendor/version/product mapping or patch specifics in these sources. Monitor for updates.

CVE-2022-3344

CVE-2022-3344 is a vulnerability in the Linux kernel related to KVM AMD nested virtualization (SVM). The issue allows a malicious L1 guest to fail to intercept the shutdown of a cooperative nested L2 guest, which can cause a page fault and kernel panic on the host. Public sources in Connected doc...

CVE-2023-1382

The CVE-2023-1382 issue is a data race in the Linux kernel TIPC path where con is allocated before con->sock is set, causing a NULL pointer dereference when accessing con->sock->sk in net/tipc/topsrv.c. This is a local vulnerability with MEDIUM severity (CVSS 4.7). The connected document...

CVE-2024-26976

CVE-2024-26976 is a Linux kernel KVM vulnerability described in Astra Linux advisory as resolved. It concerns ensuring that the per-vCPU async #PF workqueue is not racing with module unload during VM/vCPU destruction. Root cause: gifting a reference to the VM (kvm_put_kvm) could deadlock because ...

CVE-2016-6197

CVE-2016-6197 affects the OverlayFS implementation (fs/overlayfs/dir.c) in the Linux kernel before 4.6. The flaw allows a local user to cause a denial of service (system crash) by a rename that specifies a self-hardlink, due to incomplete verification of the upper dentry during unlink/rename. Exp...

CVE-2017-7645

The CVE-2017-7645 issue affects the Linux kernel NFSv2/v3 server (nfsd) and is triggered by processing long RPC replies. The root cause is an out-of-bounds memory access in the NFS server paths (net/sunrpc/svc.c, fs/nfsd/nfs3xdr.c, fs/nfsd/nfsxdr.c) that can lead to a system crash (DoS). Affected...

CVE-2018-18021

CVE-2018-18021 affects arch/arm64/kvm/guest.c in the Linux kernel before 4.18.12. The KVM_SET_ON_REG ioctl is mishandled, allowing a local attacker who can create VMs to arbitrarily redirect the hypervisor flow of control (full register control) and potentially cause a hypervisor panic via an ill...

CVE-2020-16119

CVE-2020-16119 is a Linux kernel use-after-free vulnerability in DCCP where a socket reused as a listener after release (with an attached dccps_hc_tx_ccid) can be exploited locally. Affected: Linux kernel variants affected by upstream fixes; the issue allows local escalation to execute code or ca...

CVE-2023-1074

CVE-2023-1074 is a memory-leak flaw in the Linux kernel SCTP implementation that can allow a local attacker to exhaust resources and cause a denial of service when a malicious networking service connects. The issue is described across multiple connected sources (e.g., Debian/AlmaLinux advisories ...

CVE-2023-28328

CVE-2023-28328: A NULL pointer dereference in the az6027 driver (drivers/media/usb/dev-usb/az6027.c) of the Linux kernel, caused by not validating the user-space message before transfer. Local users could crash the system or potentially cause a denial of service. Connected Astra Linux bulletin re...

CVE-2015-3288

CVE-2015-3288 affects the Linux kernel prior to 4.1.4. It arises from mishandling anonymous pages in mm/memory.c, allowing a local user to gain privileges or cause a denial of service by writing to page zero. The issue is fixed in 4.1.4 (per ChangeLog-4.1.4 and related advisories referenced in th...