CVE-2022-50549

CVE-2022-50549 describes an ABBA deadlock in the Linux kernel’s dm-thin path where concurrent drop_caches and dm thin worker activity can cause a deadlock between shrink_slab (holding shrinker_rwsem) and dm_pool_abort_metadata (holding dm_block/root locks). The result is a hung task as shown by t...

CVE-2023-53462

Summary: The CVE concerns the Linux kernel HID/HSR driver (net/hsr/hsr_forward.c). A KMSAN-uninitialized-value access is reported in fill_frame_info() when VLAN (ETH_P_8021Q) is encountered, due to VLAN not being supported in the hsr driver. The issue is resolved by returning an error from fill_f...

CVE-2026-64121

CVE-2026-64121 affects the Linux kernel’s ifb (virtual Ethernet back-end) device. The vulnerability arises from a miswalk of per-queue ethtool statistics: the code allocates per-queue tx_private entries based on dev->num_tx_queues, but ethtool/statistics callbacks use real_num_rx_queues/real_n...

CVE-2026-64143

CVE-2026-64143 affects the Linux kernel's platform/x86: uniwill-laptop driver. On certain older Uniwill laptop models (~2020), enabling the battery charging limit feature via the force module parameter can cause permanent battery damage . The root cause is that some devices do not properly implem...

CVE-2026-64146

The Linux kernel's EROFS filesystem has a memory leak in erofs_init_inode_xattrs(): after commit bb88e8da0025 converted xattr operations to on-stack erofs_buf instances, certain error paths after erofs_read_metabuf() exit through out_unlock without dropping the metabuf, leaking folio references. ...

CVE-2026-64163

CVE-2026-64163 targets the Linux kernel kprobes test module. The issue arises from leftover data in kprobes/kretprobes between test runs, causing register_kprobe to fail with -22 and potentially crashing the kernel. The fix moves all kprobe/kretprobe cleanup into kprobes_test_init, which runs bef...

CVE-2026-64181

In Linux kernel CVE-2026-64181, the issue on 32-bit x86 with THP enabled stems from __vm_normal_page failing to account for missing implementation of pmd_special()/pud_special(). This can cause warnings and later kernel state bugs (Bad rss-counter state, Bad page state) during memory reclaim when...

CVE-2026-64234

The CVE-2026-64234 entry concerns the Linux kernel tty/serial driver pch_uart. The root cause is a missing check of the return value from dma_alloc_coherent(), which could yield a NULL pointer, triggering a crash in dma_handle_rx(). The fix adds a guard for dma_alloc_coherent() failure and ensure...

CVE-2026-64236

The CVE-2026-64236 issue affects the Linux kernel i2c/davinci driver: if the device-tree clock-frequency is missing, the driver falls back to DAVINCI_I2C_DEFAULT_BUS_FREQ. The macro was defined in kHz (100), but the property is in Hz, causing the probe to divide by 1000 and produce dev->bus_fr...

CVE-2026-64297

Summary (CVE-2026-64297): The Linux kernel vuln arises from not checking the return value of module_extend_max_pages() inside the decompression path. When initial allocation fails, info->pages is NULL and info->max_pages is 0. Subsequent calls to module_get_next_page() may call module_exten...

CVE-2026-64325

CVE-2026-64325 is a NULL pointer dereference in the Linux kernel's mt76 Wi-Fi driver , affecting mt7921 and mt7925 chipsets. When a channel-switch announcement (CSA) beacon is received, a queued work item may execute after the station has disconnected, at which point the driver's dev->new_ctx ...

CVE-2026-64346

CVE-2026-64346 is a Use-After-Free (UAF) in the Linux kernel's USB gadget UDC subsystem. A race condition allows usb_del_gadget() to free the udc management structure (e.g., via a mode-switch workqueue) while gadget_match_driver() concurrently accesses it through configfs, triggering a NULL point...

CVE-2026-64351

CVE-2026-64351 affects the kalmia USB network driver in the Linux kernel. In kalmia_rx_fixup(), usb_packet_length is computed as a u16 by subtracting two header lengths from skb->len. A device delivering a short bulk-IN frame (length 6–11) or a short trailing remainder causes an underflow to ~...

CVE-2026-64361

CVE-2026-64361 affects the Linux kernel’s hfs/hfsplus code. The vulnerability arises in check_and_correct_requested_length, where a comparison uses 32‑bit arithmetic (off + len) against node_size. If a large len is supplied (e.g., due to underflow in hfs_brec_remove), off + len may wrap around 2^...

CVE-2026-64433

CVE-2026-64433 is a Use-After-Free in the Linux kernel's Bluetooth MGMT subsystem (net/bluetooth/mgmt.c). The function add_device_complete() calls hci_conn_params_lookup() and reads params->flags without holding hci_dev_lock, allowing a concurrent MGMT_OP_REMOVE_DEVICE to free the underlying o...

CVE-2022-49996

CVE-2022-49996 is a Linux kernel issue affecting the btrfs subsystem. The vulnerability arises when btrfs_get_dev_args_from_path() calls btrfs_get_bdev_and_sb() with an invalid path, causing the function to return without freeing previously allocated memory for args->uuid and args->fsid, wh...

CVE-2022-50063

CVE-2022-50063 is a Linux kernel issue affecting the DSA felix driver, where dsa_tree_notify handling can cause repeated tagging-protocol changes and lead to a kernel crash. The root cause is described as suppressing non-changes to the tagging protocol in felix_change_tag_protocol(), which can tr...

CVE-2022-50122

CVE-2022-50122 covers a Linux kernel vulnerability in the ASoC Mediatek MT8173-rt5650 driver. The root cause is a refcount leak where of_parse_phandle() returns a node pointer with an incremented refcount; the correct fix is to call of_node_put() when the reference is no longer needed. The provid...

CVE-2022-50268

CVE-2022-50268 affects the Linux kernel mmap/moxart MMC host handling. The issue is in mmc_add_host(): if the function returns an error and the return value is not checked, memory allocated by mmc_alloc_host() could be leaked, potentially causing a kernel crash when removing an unreliably added d...

CVE-2022-50343

CVE-2022-50343 is a Linux kernel vulnerability in the rapid io (rapidio) subsystem. The issue is a memory-leak in error handling: when rio_add_device() returns an error, the name allocated by dev_set_name() was not freed, potentially leaking memory. The patch series “rapidio: fix three possible m...

CVE-2022-50360

The CVE-2022-50360 entry concerns a Linux kernel flaw in drm/msm/dp where device-managed resources allocated after component binding could outlive the aggregate DRM device, risking resource leaks or failed binding if binding is retried. The root cause is improper lifetime management: EP (DP AUX) ...

CVE-2022-50389

CVE-2022-50389 : In the Linux kernel, tpm_crb memory leak fix involves adding a call to acpi_put_table() in crb_acpi_add() after retrieving TPM2 table info. This prevents leaking the TPM2 ACPI table after init. The connected advisory explicitly states the root cause and the remediation (acpi_put_...

CVE-2022-50420

CVE-2022-50420 affects the Linux kernel crypto driver crypto: hisilicon/hpre. The root cause is in hpre_remove(): if the disable operation of qm sriov fails, the function previously returned early, causing resource leakage. The fix ensures the remaining resources allocated are released (preventin...

CVE-2022-50424

CVE-2022-50424 affects the Linux kernel WiFi driver for MT7921 (mt76/mt7921). The issue is a resource leak in mt7921_check_offload_capability() where a fw/allocated storage goes out of scope, leaking memory. The vulnerability is described as resolved/fixed via a Coverity-related fix (Addresses-Co...

CVE-2022-50434

CVE-2022-50434: Technical details (affected product/component, root cause, impact, versions, fix) are not present in the connected documents. Monitor for updates.

CVE-2022-50445

Summary: CVE-2022-50445 is a Linux kernel vulnerability where an attacker could trigger reinjection of transport-mode packets through a workqueue in the XFRM path, potentially leading to system instability. The issue is associated with the 6.x kernel series (example shown: 6.0.0-rc6+ #39) and is ...

CVE-2022-50452

CVE-2022-50452 describes a null-pointer dereference in the Linux kernel net:sched: cake path during cake_init() failure. If the default qdisc is cake and mqprio_init() fails, cake_reset() clears resources but q->tins remains NULL, leading to a NULL dereference in cake_dequeue_one(). The connec...

CVE-2022-50454

CVE-2022-50454 affects the Linux kernel’s DRM Nouveau driver. The vulnerability arises in nouveau_gem_prime_import_sg_table() due to a use-after-free: on failure of nouveau_bo_init(), the associated gem object is released by ttm_bo_init(), but the code later calls nouveau_bo_ref() which dereferen...

CVE-2022-50471

CVE-2022-50471 affects the Linux kernel’s xen/gntdev mapping when using paravirtual Xen domains. The root cause was improper handling of VMAs during VMA splitting, where a gntdev mapping could involve multiple VMAs. This could lead to a Bad Page Table condition and kernel messages about a bad pte...

CVE-2022-50474

CVE-2022-50474 is a Linux kernel issue affecting the macintosh/macio path, where a device name allocated dynamically after a driver-core change was not freed on of_device_register() failure, causing a memory leak. The fix introduces a put_device() reference release to balance device_initialize() ...

CVE-2022-50493

CVE-2022-50493 is a Linux kernel vulnerability affecting the scsi/qla2xxx path where a crash can occur during CPU hotplug when an I/O abort times out. The issue stems from abort completion being issued without ensuring the I/O was still outstanding, potentially triggering a crash in the nvme/fabr...

CVE-2022-50522

The CVE-2022-50522 entry corresponds to a Linux kernel issue in mcb-parse (chameleon_parse_gdd). When mcb_device_register() returns an error, the refcount for the bus and device name is leaked. The fix adds a put_device() to relinquish the reference so resources can be released during mcb_release...

CVE-2023-53167

CVE-2023-53167: In the Linux kernel, tracing_err_log_open() can dereference file->private_data if opened with write permissions and then lseek is used, causing a kernel panic via mutex_lock -> seq_lseek. A fix was applied to tracing: Fix null pointer dereference in tracing_err_log_open() fo...

CVE-2023-53244

In Linux kernel, the media: pci: tw68 driver vulnerability CVE-2023-53244 fixes a null pointer dereference in buffer handling: if dma_alloc_coherent fails during tw68_risc_buffer(), buf->cpu may be null and later accesses/free could crash. The fix adds checks on the return value of tw68_risc_b...

CVE-2023-53274

Technical details about CVE-2023-53274 are not provided in the connected documents; no product/vendor/version specifics or exploit information are included. Monitor for updates.

CVE-2023-53278

CVE-2023-53278 affects the Linux kernel in the ubifs subsystem, specifically a memory leak in ubifs_sysfs_init() that occurs when insmod ubifs.ko is loaded. The entry states the vulnerability has been resolved via a fix for the memory leak, with the observable kmemleak report and backtrace indica...

CVE-2023-53341

CVE-2023-53341 refers to a Linux kernel memory initialization fix: the function early_init_dt_scan_memory now returns 1 when memory is found and 0 if none, allowing other memory setup paths to run. This changes the control flow after the ramips plat_mem_setup call, addressing scenarios where memo...

CVE-2023-53457

CVE-2023-53457 : In Linux kernel, JFS txBegin can NULL-deref when called on a read-only superblock; fix adds a read-only filesystem check before txBegin and returns an appropriate error code. Exploitation status and exact patch details beyond this description are not provided in the supplied docu...

CVE-2023-53479

In CVE-2023-53479, the Linux kernel cxl driver had a use-after-free in cxl_parse_cfmws() during cxl_decoder_add() fail path. KASAN/KFENCE observed a slab-use-after-free where a released cxld was accessed in a later dev_err() path. The root cause was dereferencing freed memory; the fix replaces th...

CVE-2023-53500

CVE-2023-53500 concerns the Linux kernel xfrm path. The issue is a slab-use-after-free in decode_session6 that can occur when an xfrm device is enqueued on a qdisc of type sfb, where the skb cb field may be modified during transmission. This leads to a use-after-free on the skb’s memory during IP...

CVE-2023-53506

CVE-2023-53506 : Linux kernel udf merging long extents. The merge logic that pushes as much length as possible to the first extent caused risk of extents corruption; the patch resolves the behavior by not merging overly long extents. Reported impact is high (local attack, no user interaction) wit...

CVE-2023-53521

CVE-2023-53521 affects the Linux kernel as reported by EulerOS advisories: scsi: ses: Fix slab-out-of-bounds in ses_intf_remove(). The bug occurs when edev->components is zero, causing reads from edev->component[0] to access invalid memory, resulting in a slab-out-of-bounds condition (read ...

CVE-2023-53563

CVE-2023-53563 relates to the Linux kernel amd-pstate-ut driver. The root cause is that after calling amd_pstate_ut_check_perf() and amd_pstate_ut_check_freq(), the code uses cpufreq_cpu_get() to obtain the CPU policy but fails to release it with cpufreq_policy_put, causing the policy to remain b...

CVE-2023-53573

CVE-2023-53573 affects the Linux kernel (clk: rs9) and was resolved by enabling the flat cache again during suspend/resume. The issue occurred when disabling the cache in the commit for clk: rs9: Fix I2C accessors without removing cache synchronization in the resume path, causing a kernel panic b...

CVE-2023-53575

In CVE-2023-53575, the Linux kernel wifi driver (iwlwifi, mvm) fixes a potential array out-of-bounds access by accounting for IWL_SEC_WEP_KEY_OFFSET when verifying key_len in iwl_mvm_sec_key_add(). The fix is implemented in the kernel code referenced in the stable commits: https://git.kernel.org/...

CVE-2023-53584

CVE-2023-53584 pertains to the Linux kernel ubifs_releasepage path, where an assertion ubifs_assert(0) can fail during page release, potentially triggering UBIFS read-only mode and faulting I/O. Public docs show this was fixed in vendor-specific patches: Root:Ubuntu-22.04 advised patches (ROOT-OS...

CVE-2023-53590

CVE-2023-53590 affects the Linux kernel SCTP scheduler code. The root cause was a missing reference counter in sctp_stream_priorities, which could cause a nested loop when freeing a stream priority (potential heavy CPU usage). The advisory notes that a refcnt is now added in sctp_stream_prioritie...

CVE-2023-53593

CVE-2023-53593 – Linux kernel (CIFS): The issue arises in the CIFS readpath when fscache cache hits occur, leaking a folio lock. The fix releases the folio lock after read completion in cifs_readpage_worker. The problem occurred because the callee was expected to unlock the folio, but in certain ...

CVE-2023-53594

CVE-2023-53594 is a Linux kernel driver-core resource leak in device_add(): if kobject_add() fails, dev->kobj.parent is set to NULL, causing a leak in resource cleanup and potentially insmod failure for mac80211_hwsim. The initial description and EulerOS/SUSE advisories confirm the vulnerabili...

CVE-2023-53603

CVE-2023-53603 affects the Linux kernel SCSI QLA2XXX path. The issue is a potential NULL pointer dereference where a fcport pointer may be dereferenced if sa_ctl is NULL and fcport is allocated after an exit path. The documented fix is to exit the routine when sa_ctl is NULL, preventing the NULL ...