CVE-2023-53184

The CVE-2023-53184 entry concerns a Linux kernel vulnerability in arm64 SME (SVE state handling). The root cause is that the vector length is updated after allocating the SVE state, causing allocation with the old length and potential memory corruption from an undersized buffer. The fix moves the...

CVE-2023-53205

CVE-2023-53205 affects the Linux kernel KVM on s390, specifically the diag 9c handler where a race exists around the target CPU value (-1). The fix stores the physical target CPU in a local variable to prevent out-of-bounds accesses to CPU arrays. The CVE’s risk is described as high (CVSS v3.1: A...

CVE-2023-53237

Summary: CVE-2023-53237 relates to the AMDGPU driver in the Linux kernel, where an improper call to amdgpu_irq_put during gmc_v11_0_hw_fini led to an unnecessary call trace. The root cause is that gmc.ecc_irq is enabled by firmware via IFWI, and the host driver isn’t privileged to enable/disable ...

CVE-2023-53238

In MODE C: The CVE-2023-53238 issue affects the Linux kernel’s Hisilicon Inno PHY code. The flaw is an out-of-bounds write in the probe path: priv->ports[] has size INNO_PHY_PORT_NUM, but the loop uses i with a comparison that allows i == INNO_PHY_PORT_NUM; this requires the check to be i >...

CVE-2023-53239

CVE-2023-53239 affects the Linux kernel component drm/msm/mdp5. The vulnerability arises because kzalloc() may return NULL and code did not reliably handle this, risking a NULL pointer dereference. The advisories indicate a patch was added to validate the kzalloc return value to avoid dereferenci...

CVE-2023-53277

CVE-2023-53277 is a Linux kernel vulnerability in the wifi iwl3945 driver. The issue arises from missing validation of the return value of create_singlethread_workqueue, which can lead to a NULL pointer dereference. Public advisories (Unity Linux UTSA-2025-992797/992386/992212; SUSE-SU-2025:03615...

CVE-2023-53284

The CVE-2023-53284 issue occurs in the Linux kernel DRM MSM DPU code path: if devm_kzalloc() fails during dpu_writeback_init(), dpu_wb_conn may become NULL and trigger a null pointer dereference later. The connected Astra Linux and SUSE advisories reproduce the same description and confirm the un...

CVE-2023-53298

CVE-2023-53298 – Linux kernel : The issue is a memory leak in the NFC subsystem. The se_io callback context allocated inside nfc_genl_se_io is not always freed on several error paths, risking a leak. The patch adds explicit cb_context freeing on those error paths. No exploit details are provided ...

CVE-2023-53306

CVE-2023-53306 involves the Linux kernel fsdax path used by XFS for CoW on non-shared extents. The issue arises when a previous non-shared extent is mwrited and its dax entry is left dirty, which produced a WARN at dax_insert_entry. The connected documents consistently describe this as a resolved...

CVE-2023-53312

CVE-2023-53312 : In the Linux kernel, a trace-event interaction with skb_transport_offset() in net_dev_start_xmit could lead to unsafe skb_transport_offset usage. The issue arises after a blamed commit and is fixed by the kernel remediation described in the initial document (commit references inc...

CVE-2023-53329

The CVE-2023-53329 entry concerns a data race in the Linux kernel workqueue code (pwq->stats[] increment) reported by KCSAN. The vulnerability involves concurrent writes/reads to pwq->stats entries inside process_one_work, traced to kernel/workqueue.c:2598–2606, and is mitigated by moving t...

CVE-2023-53336

The CVE-2023-53336 vulnerability in the Linux kernel affects the media: ipu-bridge code. It causes a NULL pointer dereference in ipu_bridge_parse_rotation() or ipu_bridge_parse_orientation() when sensor->adev is not yet set, triggered by dev_warn() warnings about unknown values. The root cause...

CVE-2023-53342

In CVE-2023-53342, the Linux kernel vulnerable path is in net: marvell: prestera handling IPv4 routes that reference a nexthop via its id. The root cause is calling fib_info_nh() for nexthop lookups instead of fib_info_nhc(), which triggers warnings when adding routes that use nhid (for example: ...

CVE-2023-53455

CVE-2023-53455 concerns the Linux kernel DRM vc4 deadlock: vc4_hdmi_reset_link() returning -EDEADLK may deadlock in the locking context. The accepted fix is to drop held locks and back off using drm_modeset_backoff(), per the cited kernel DRM-KMS guidance. The vulnerability entry provides example...

CVE-2023-53494

CVE-2023-53494 affects the Linux kernel xts code. Root cause: EBUSY is not consistently treated like EINPROGRESS for MAY_BACKLOG callers, risking use-after-free on backlogged requests. Public advisories (EulerOS/MiracleLinux/OpenVAS/Nessus) reference this CVE; no patched version or remediation de...

CVE-2023-53514

CVE-2023-53514 concerns the Linux kernel gpu: host1x memory leak of device names. Root cause: device names allocated by dev_set_name() were not freed because the kobject refcount set in device_initialize() wasn’t decreased to 0; cleanup relied on put_device() and device_del() semantics, but freei...

CVE-2023-53522

CVE-2023-53522 concerns the Linux kernel, specifically the cgroup/freezer path. The data show a circular locking dependency between cpu_hotplug_lock and freezer_mutex triggered by a rewrite of core freezer logic (commit f5d39b020809) that replaced atomic_inc() with static_branch_inc() in freezer_...

CVE-2023-53528

CVE-2023-53528 affects the Linux kernel RDMA/rxe subsystem. The vulnerability arises from an unsafe drain-work-queue path in qp cleanup when create_qp does not fully complete; cleanup could attempt to drain send/recv queues before the queues exist, leading to a segfault. The fixed patch adds a gu...

CVE-2023-53537

Summary: CVE-2023-53537 concerns a Linux kernel F2FS use-after-free involving a cached IPU bio. Root cause: after cp_error is set, f2fs_submit_merged_ipu_write() failed to validate the bio parameter in f2fs_write_single_data_page(), leading to submission of a random cached bio from another IO con...

CVE-2023-53548

CVE-2023-53548 affects the Linux kernel USB networking stack, specifically the usbnet driver. The issue arises when usbnet trusts the bulk endpoint addresses reported by the probe routine in the driver_info structure and does not verify that the endpoints exist and have the correct type/direction...

CVE-2023-53567

CVE-2023-53567 – Linux kernel : The issue affects the kernel SPI QUP driver. The root cause is returning early from a platform driver’s remove callback, which prevents releasing DMA resources in the error path, causing a permanent resource leak. The fix ensures proper cleanup by not skipping hard...

CVE-2023-53571

The CVE-2023-53571 entry concerns the Linux kernel DRM/I915: the fix changes intel_get_crtc_new_encoder() to fetch the dev pointer from the atomic state instead of relying on a potentially NULL encoder, avoiding a WARN that could lead to an oops when a connector for the CRTC isn’t found in the at...

CVE-2023-53602

CVE-2023-53602 affects the Linux kernel driver stack for wifi (ath11k). The issue is a memory leak where firmware statistics for pdev, vdev and beacon were allocated but not released on module removal, prompting a fix implemented by calling ath11k_fw_stats_free() before hardware unregister. Addit...

CVE-2023-53603

CVE-2023-53603 affects the Linux kernel SCSI QLA2XXX path. The issue is a potential NULL pointer dereference where a fcport pointer may be dereferenced if sa_ctl is NULL and fcport is allocated after an exit path. The documented fix is to exit the routine when sa_ctl is NULL, preventing the NULL ...

CVE-2023-53606

CVE-2023-53606 affects the Linux kernel NFSD COPY path. Two flavors of nfsd4_copy (embedded in the compound, and a dynamically allocated, refcounted variant) allow potential nfsd_file refcount leaks if kthread_create fails, leaking src/dst nfsd_files. The cleanup was previously inconsistent (and ...

CVE-2023-53608

CVE-2023-53608 affects the Linux kernel nilfs2 subsystem. The issue is a potential use-after-free in nilfs_segctor_thread() where finalization can race with nilfs_segctor_kill_thread() terminating the thread, possibly freeing the nilfs_sc_info structure before the notification occurs. The race ha...

CVE-2023-53614

Summary: CVE-2023-53614 affects the Linux kernel in the mm/ksm path, where exit_mmap() may teardown VMAs and the maple tree while mmap_lock is held, risking a destroyed maple tree being dereferenced. The fix ensures maple tree validity by checking ksm_test_exit() after obtaining mmap_lock in read...

CVE-2023-53620

The issue CVE-2023-53620 affects the Linux kernel md (mdadm) status_resync logic. status_resync() reads curr_resync and recovery_active concurrently, which can cause an overflow in the expression curr_resync - recovery_active and lead to an extremely long loop that results in a soft lockup. The f...

CVE-2023-53626

CVE-2023-53626 : In the Linux kernel, the vulnerability is in the ext4 code and is caused by a possible double unlock when moving a directory. Affected component is ext4 within the kernel, with fixes committed in the upstream kernel (see references to stable kernel patches). The EulerOS/OSS advis...

CVE-2023-53642

The CVE-2023-53642 entry relates to the Linux kernel (x86) where the clear_user_rep_good() exception handling annotation was fixed. The issue stemmed from an incorrect exception-table annotation that pointed to the wrong instruction, which could turn a user-space fault into a kernel oops rather t...

CVE-2023-53660

The CVE describes a Linux kernel issue in the bpf/cpumap path where ptr_ring cleanup does not correctly handle skb-mode SKBs as XDP frames, causing incorrect memory-type usage warnings when xdp_redirect_cpu runs with skb-mode and stress-mode. The root cause, per the Astra Linux advisory, is twofo...

CVE-2023-53676

The CVE-2023-53676 vulnerability affects the Linux kernel’s iSCSI target (lio_target_nacl_info_show) where printf-style buffer handling in a loop could overflow a configfs buffer. Root cause: sprintf() used without bounds checking for each iSCSI connection, enabling memory corruption with many co...

CVE-2023-53683

Summary of CVE-2023-53683 (Linux kernel, fs/hfsplus) : The vulnerability concerns the Apple HFS+ support in the Linux kernel. It arises from a problematic WARN_ON() in hfsplus_cat_read_inode() and hfsplus_cat_write_inode(), which could trigger under crafted filesystem images with bogus lengths. T...

CVE-2023-53685

The CVE-2023-53685 issue affects the Linux kernel tun driver when a TUN device is configured with IFF_TUN, IFF_NAPI, and IFF_MULTI_QUEUE and the queue is detached while a write happens. A memory leak can occur by enqueuing skbs into tfile->sk_write_queue after the queue is detached, due to a r...

CVE-2025-38327

The CVE-2025-38327 issue concerns the Linux kernel function graph tracing (fgraph) when the funcgraph-args option is used. The root cause described across provided documents is that if function_graph tracing is enabled while funcgraph-args is set, it may be incorrectly re-enabled and then unregis...

CVE-2025-39774

CVE-2025-39774 affects the Linux kernel driver iio: adc: rzg2l_adc. The issue arises when a loop unbinds/binds the ADC (which may serve another device like a thermal block) and the ADC is resumed by runtime PM before drvdata is set, causing a crash in runtime PM callbacks that rely on drvdata. Th...

CVE-2025-39941

CVE-2025-39941 relates to the Linux kernel zram subsystem. The vulnerability arises from a race in slot write handling where parallel writes to the same zram index can leak zsmalloc handles because zs_free() is executed too early. The documented fix is to reset the zram entry and assign the new h...

CVE-2025-39947

Affected software: Linux kernel with mlx5e uplink netdev handling. Issue: mlx5_uplink_netdev_get() may return a NULL pointer when the uplink netdevice is removed during unbind, leading to a kernel panic. Root cause: the uplink netdev pointer can be cleared while in use. Impact: potential kernel p...

CVE-2025-39960

Concrete details from connected sources show CVE-2025-39960 affecting the Linux kernel gpiolib/acpi path. The root cause is uninitialized acpi_gpio_info passed to __acpi_find_gpio(), leading to info->quirks usage in acpi_populate_gpio_lookup and breaking i2c_hid_cpi HID over I2C probes. The fi...

CVE-2025-68823

CVE-2025-68823: Linux kernel ublk deadlock when reading partition table. If a process (e.g., udev) opens a ublk block device to read the partition table via bdev_open(), a deadlock can occur because blkdev_release() re-acquires disk->open_mutex in the same context. The fix disables bottom halv...

CVE-2025-71129

The CVE-2025-71129 entry documents a LoongArch kernel issue where kfunc calls did not sign-extend their arguments properly, risking kernel panic. The fix introduces a new emit_abi_ext() helper that performs in-place extension (distinct from sign_extend()) to ensure LoongArch calling conventions a...

CVE-2025-71136

CVE-2025-71136 affects the Linux kernel’s media: adv7842 path. The vulnerability arises when cp_read() or hdmi_read() return -EIO and these values are used as indexes in arrays within adv7842_cp_log_status(), causing possible out-of-bounds accesses. The issue is resolved by adding checks on retur...

CVE-2025-71236

CVE-2025-71236 is documented in connected sources as a Linux kernel vulnerability affecting the SCSI driver path for qla2xxx. The issue centers on a potential NULL pointer dereference when freeing memory associated with an SP (scsi request) in error paths, which can cause a system crash. The prov...

CVE-2025-71237

CVE-2025-71237 corresponds to a Linux kernel nilfs2 issue where an underflow during FITRIM end_block calculation can produce a negative nblocks, turning into a large positive value and causing the block layer to hang while processing a discard. The description and connected advisories confirm the...

CVE-2025-71312

CVE-2025-71312 concerns a Linux kernel NTFS3 file system leak. The issue occurs in ntfs_fill_super() when fc->fs_private is set to NULL without freeing the memory it points to, causing ntfs_fs_free() to skip freeing the ntfs_mount_options structure. A resulting kmemleak report (unreferenced ob...

CVE-2026-23251

The CVE-2026-23251 issue affects the Linux kernel XFS code: destructors xfarray/xfblob were invoked on possibly-invalid pointers. The patch ensures xf{array,blob}_destroy is only called for a valid pointer and clears it afterwards, improving memory safety. The fix was merged in commits between 6....

CVE-2026-23306

The CVE-2026-23306 issue affects Linux kernel SCSI pm8001 code. A refactor of pm8001_queue_command() to return -ENODEV in phy-down/device-gone states could inadvertently free the SAS task twice: pm8001_queue_command() would free the underlying SAS task, then libsas sas_ata_qc_issue() would attemp...

CVE-2026-23309

CVE-2026-23309 refers to a Linux kernel vulnerability in the tracing subsystem. The issue was a NULL pointer dereference in trigger_data_free() when data->cmd_ops->set_filter is evaluated after a failed trigger_data_alloc() and returning NULL. The root cause was that trigger_data_free() did...

CVE-2026-23310

Summary: CVE-2026-23310 affects the Linux kernel bonding/kern XDP path. If a bond is in 802.3ad or balance-xor mode and an XDP program is loaded, changing xmit_hash_policy to vlan+srcmac can escape the existing guard, leaving bond->xdp_prog set and causing an incompatible state during tear-dow...

CVE-2026-23328

CVE-2026-23328 – Linux kernel (accel/amdxdna): The vulnerability is a NULL pointer dereference in mgmt_chann when the firmware returns an unexpected error in aie2_send_mgmt_msg_wait(), which may set mgmt_chann to NULL and cause a later NULL dereference in aie2_hw_stop(). The fixed patch introduce...