CVE-2026-53376

CVE-2026-53376 fixes an upper bound check in drm/amdkfd (kfd_ioctl_get_process_apertures_new) in the Linux kernel, preventing potential out-of-bounds access. The patch sequence is noted as cherry-picked from commit 98ff46a5ea090c14d2cdb4f5b993b05d74f3949f and has been applied to stable kernels fo...

CVE-2026-53378

CVE-2026-53378 – Linux kernel DRM colorop blob reference handling fix Affects: Linux kernel DRM colorop component (drm/colorop) across affected kernel releases as described in multiple sources (NVD, Red Hat, Debian, UBUNTU OSV records). Root cause: The colorop state blob property handling leaked ...

CVE-2026-53394

CVE-2026-53394 describes a Linux kernel vulnerability in nfsd where pre-allocated openowner state is leaked during an unconfirmed retry race. The issue occurs in find_or_alloc_open_stateowner(): if an unconfirmed owner is encountered, the code frees the previous state only partially and then unco...

CVE-2026-64181

In Linux kernel CVE-2026-64181, the issue on 32-bit x86 with THP enabled stems from __vm_normal_page failing to account for missing implementation of pmd_special()/pud_special(). This can cause warnings and later kernel state bugs (Bad rss-counter state, Bad page state) during memory reclaim when...

CVE-2026-64208

Summary : CVE-2026-64208 affects the Linux kernel’s crypto/krb5 and AF_RXRPC path. The root cause was missing pre-decrypt/pre-verify length checks, now fixed by updating the krb5 crypto library to provide facilities for prechecking message length and by applying this in AF_RXRPC to validate DATA ...

CVE-2022-50428

CVE-2022-50428 affects the Linux kernel ext4 fast-commit journaling, caused by multiple off-by-one errors in filling tlv blocks. The issues constrain where tlvs start and end within a block, risking replay problems and memory leakage in last-byte handling. The fixed patch corrects block-filling o...

CVE-2022-50434

CVE-2022-50434: Technical details (affected product/component, root cause, impact, versions, fix) are not present in the connected documents. Monitor for updates.

CVE-2022-50452

CVE-2022-50452 describes a null-pointer dereference in the Linux kernel net:sched: cake path during cake_init() failure. If the default qdisc is cake and mqprio_init() fails, cake_reset() clears resources but q->tins remains NULL, leading to a NULL dereference in cake_dequeue_one(). The connec...

CVE-2022-50469

Technical details about CVE-2022-50469 (affected product/component/impact/remediation) are not provided in the supplied connected documents. Monitor for updates from vendors and security advisories.

CVE-2022-50475

CVE-2022-50475 : In the Linux kernel, the RDMA/core path fixes an issue where the ib_port structure could be invalid when accessing a sysfs node. The vulnerability arises if ib_port is not properly set before adding the sysfs kobject and not reset after its removal, which could lead to a NULL poi...

CVE-2022-50484

CVE-2022-50484 affects the Linux kernel ALSA USB audio driver. The vulnerability is a memory leak when -ENOMEM occurs during URB/buffer allocation inside the sync EP URB loop, where ep->nurbs remained 0 and partially allocated URBs could be left unreleased. The fix initializes ep->nurbs ear...

CVE-2022-50488

CVE-2022-50488 is a Linux kernel issue in the block BFQ (BFQ scheduler) where bfqq objects could end up pointing to the same bic after cgroup moves, enabling a use-after-free scenario for bfqq->bic. The described sequence shows two processes sharing BICs, merging bfqq entries, and after a casc...

CVE-2022-50491

Technical details about CVE-2022-50491 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2022-50528

The connected documents confirm a concrete detail for CVE-2022-50528: in the Linux kernel, the amdgpu/amdkfd driver’s _gpuvm_import_dmabuf() path suffers a memory leak (and potential segfault) which has been fixed by a patch addressed to memory leakage in that function. The patch targets potentia...

CVE-2022-50535

CVE-2022-50535 affects the Linux kernel DRM/AMD display code. It is a potential NULL pointer dereference in dm_resume within drm/amd/display, caused by assuming 'aconnector->dc_link' is non-null. The fix adds a null check at the loop's start to avoid dereferencing a NULL dc_link. Reported CVSS...

CVE-2022-50544

In CVE-2022-50544, the Linux kernel USB host xHCI code (xhci_alloc_stream_info) allocates a stream_ctx_array via xhci_alloc_stream_ctx and fails to free stream_info->stream_ctx_array on certain error paths, causing a memory leak. The documented fix releases stream_info->stream_ctx_array wit...

CVE-2022-50550

CVE-2022-50550 affects the Linux kernel’s blk-iolatency component. The flaw arises when a gendisk is initialized but add_disk() fails; iolatency is initialized during init but not cleaned up in error handling, causing a memory leak. The root cause is that cleanup previously relied on del_gendisk(...

CVE-2023-53457

CVE-2023-53457 : In Linux kernel, JFS txBegin can NULL-deref when called on a read-only superblock; fix adds a read-only filesystem check before txBegin and returns an appropriate error code. Exploitation status and exact patch details beyond this description are not provided in the supplied docu...

CVE-2023-53459

CVE-2023-53459 relates to the Linux kernel vulnerability HID: mcp-2221, which can cause a use-after-free in delayed work if a device is unplugged before mcp_init_work() completes. The issue is addressed by cancel_delayed_work_sync, which prevents the delayed_work item from requeueing. Affected co...

CVE-2023-53498

In the provided documents, CVE-2023-53498 is described as a Linux kernel vulnerability in the AMD display driver (drm/amd/display). The issue arises when amdgpu_dm_fini() may dereference adev->dm.dc if the pointer is NULL, allowing a NULL pointer dereference. The remediation is a code fix that...

CVE-2023-53533

CVE-2023-53533 is reported as resolved in the Linux kernel, addressing a refcount leak in the raspberrypi-ts driver during rpi_ts_probe. The root cause involves a reference taken by rpi_firmware_get() that is not released in error paths; the patch adds the use of devm_rpi_firmware_get() to manage...

CVE-2023-53542

The CVE-2023-53542 issue affects the Linux kernel (ARM/Exynos) where the MIPI video PHY support for Exynos5420 was not using the correct Exynos5420 compatible, leading to a kernel panic. The description states that the fix is to use the proper compatible for Exynos5420, effectively patching the d...

CVE-2023-53553

CVE-2023-53553 is a Linux kernel issue tied to Hyper-V HID handling. The vulnerability arises from a fortify memcpy-related codepath in HID Hyper-V (mousevsc_on_receive) where a __write_overflow_field warning could be triggered, prompting a patch to rework the code to avoid the warning. Connected...

CVE-2023-53557

CVE-2023-53557 affects the Linux kernel fprobe path used for kernel tracing. The root cause is releasing fp->rethook while fp->ops may still be used by other CPUs, leading to a general protection fault during bpf selftests. The fix is to move the rethook release to occur after the ftrace_op...

CVE-2023-53592

In CVE-2023-53592, the Linux kernel GPIO driver for sifive contains a refcount leak in sifive_gpio_probe. Specifically, of_irq_find_parent() returns a node pointer with an incremented refcount, and the bug fixes by ensuring of_node_put() is called when the pointer is no longer needed. The fix pre...

CVE-2023-53596

In CVE-2023-53596, the Linux kernel patch fixes a resource leak by ensuring devm resources are released on device_del() even for bus-less/driver-less devices. The current code only calls devres_release_all() when the device has a bus and has been probed, which could leave device-managed resources...

CVE-2023-53603

CVE-2023-53603 affects the Linux kernel SCSI QLA2XXX path. The issue is a potential NULL pointer dereference where a fcport pointer may be dereferenced if sa_ctl is NULL and fcport is allocated after an exit path. The documented fix is to exit the routine when sa_ctl is NULL, preventing the NULL ...

CVE-2023-53613

CVE-2023-53613 : Local, kernel-level use-after-free in the dax subsystem of the Linux kernel (dax_mapping_release) during removal of a device-dax region. The issue arises from freeing ida objects and releasing a parent object, risking use-after-free on dax_mapping_release timing. A fix is provide...

CVE-2023-53618

The CVE-2023-53618 entry corresponds to a Linux kernel issue affecting Btrfs reloc trees. The problem was an invalid reloc tree root key being present for quota-related reloc trees, which could lead to a crash via an ASSERT() in prepare_to_merge() when the reloc tree is not properly referenced by...

CVE-2023-53632

Technical details for CVE-2023-53632 are not provided in the supplied documents. The connected sources reference other CVEs/advisories but do not include product/version/root-cause or fixes for this CVE. Monitor for updates.

CVE-2023-53633

CVE-2023-53633 pertains to the Linux kernel where the leak occurs in accel/qaic’s map_user_pages() path. If get_user_pages_fast() allocates some pages but not as many as requested, the current code fails to release the pages, causing a leak. The root cause is improper page accounting in the get_u...

CVE-2023-53639

Technical details about CVE-2023-53639 are not publicly provided in the supplied documents. Monitor for updates from vendors and security advisories to obtain affected products, versions, and remediation information.

CVE-2023-53652

CVE-2023-53652 is tied to the Linux kernel vulnerability where the vdpa_nl_policy lacked a proper nla_policy validation for the vdpa features attribute, creating a risk of parsing an invalid nlattr and potential OOB reads as described in related CVEs (e.g., CVE-2023-3773). The connected documents...

CVE-2023-53655

CVE-2023-53655 (Linux kernel) is a stack overflow vulnerability caused by registering a kprobe on __rcu_irq_enter_check_tick(). The issue can trigger kernel panics/stack overflow when NO_HZ_FULL is enabled and the system boots with nohz_full=, leading to a tree of stack traces and a kernel panic,...

CVE-2023-53669

The CVE-2023-53669 entry concerns the Linux kernel where skb_copy_ubufs() crashes when BIG TCP allows large skbs (up to ~512 KB) and zerocopy is used with hugepages. The root cause is skb_copy_ubufs() assuming payload could be copied using up to MAX_SKB_FRAGS order-0 pages; this breaks when BIG T...

CVE-2023-53682

CVE-2023-53682 affects the Linux kernel hwmon xgene driver. The root cause is that ioremap() and memremap() were not released in xgene_hwmon_probe(), creating a potential resource leak through ctx->pcc_comm_addr. The fix replaces ioremap and memremap with devm_ioremap and devm_memremap, ensuri...

CVE-2025-39690

The CVE-2025-39690 issue affects the Linux kernel: iio: accel: sca3300, where uninitialized iio scan data could leak via the channels array. The root cause is that the channels array was not zeroed before use, potentially exposing stack data to userspace. A fix was applied in the Linux kernel (公开...

CVE-2025-39820

CVE-2025-39820 affects the Linux kernel DRM MSM DPU path (drm/msm/dpu). Root cause: drm_atomic_get_new_connector_state() may return NULL if the connector isn’t part of the atomic state, risking a NULL pointer dereference. The fix adds a NULL check in dpu_encoder_needs_modeset (mirroring the patte...

CVE-2025-39837

The CVE-2025-39837 entry concerns the Linux kernel, specifically the platform/x86 asus-wmi subsystem. The issue stems from racey driver registrations where asus_wmi_register_driver() could be invoked concurrently by multiple drivers, causing unsafe list operations and potential memory corruption ...

CVE-2025-39919

The CVE-2025-39919 issue affects the Linux kernel’s wifi mt76 mt7996 driver. A missing validation check for RX wcid entries allowed non-station WCID entries to be passed to RX paths; in the case of the global wcid entry, this could lead to corruption of the WCID array due to a pointer being cast ...

CVE-2025-39954

The CVE-2025-39954 issue concerns the Linux kernel (clk: sunxi-ng: mp) where the P divider offset was omitted in the .recalc_rate readback for dual-divider clocks, causing the reported clock rate to be bogus or zero. The COMMITs in the connected sources indicate that the problem arises specifical...

CVE-2025-39960

Concrete details from connected sources show CVE-2025-39960 affecting the Linux kernel gpiolib/acpi path. The root cause is uninitialized acpi_gpio_info passed to __acpi_find_gpio(), leading to info->quirks usage in acpi_populate_gpio_lookup and breaking i2c_hid_cpi HID over I2C probes. The fi...

CVE-2025-71105

CVE-2025-71105 documents a Linux kernel issue in f2fs where two slab caches (f2fs_xattr_entry-7:3 and f2fs_xattr_entry-7:7) with identical slab sizes cause kmem_cache_sanity_check warnings during mount operations. The root cause is using per-sb slab caches instead of a single global slab, leading...

CVE-2025-71114

CVE-2025-71114 relates to the VIA watchdog driver in the Linux kernel. The driver uses allocate_resource() to reserve a MMIO region for the watchdog control register, but the resource lacked a name, causing the kernel resource tree to contain a entry under /proc/iomem on x86. During boot, this u...

CVE-2025-71129

The CVE-2025-71129 entry documents a LoongArch kernel issue where kfunc calls did not sign-extend their arguments properly, risking kernel panic. The fix introduces a new emit_abi_ext() helper that performs in-place extension (distinct from sign_extend()) to ensure LoongArch calling conventions a...

CVE-2025-71134

CVE-2025-71134: In the Linux kernel, mm/page_alloc: when coalescing pages, the migrate type of all pageblocks is not updated, updating only the first pageblock causes inconsistency between the page and its pageblocks. This triggers warnings in expand() and related paths. The issue is resolved in ...

CVE-2025-71155

CVE-2025-71155 concerns the Linux kernel KVM on s390 where gmap_helper_zap_one_page() had missing checks that could lead to memory corruption in a guest under specific circumstances. The connected documents confirm the vulnerability and describe the root cause as incomplete validation within that...

CVE-2025-71272

The CVE-2025-71272 entry concerns a Linux kernel resource-leak in most_register_interface(). When initialization fails before device registration, memory for the interface could be leaked. The fix initializes the device early with device_initialize(), calls put_device() on all error paths, and sw...

CVE-2025-71301

CVE-2025-71301 affects the Linux kernel DRM shmem test code. The root cause is that the GEM object reservation lock was not consistently held during vmap and vunmap, which led to warnings and potential instability. The published fixes acquire and release the reservation lock around vmap and vunma...

CVE-2025-71307

In the Linux kernel drm/panthor driver, CVE-2025-71307 is a NULL pointer dereference that occurred in panthor_fw_unplug when the MCU could be in various states or the FW was not loaded/initialized. The fix removes the MCU halt-and-wait during unplug, since waiting for halt may be unsafe if the MC...