CVE-2017-12190

CVE-2017-12190 affects the Linux kernel before 4.13.8. The issue arises in the SCSI I/O path where bio_map_user_iov and bio_unmap_user perform unbalanced refcounting when a SCSI I/O vector has small consecutive buffers belonging to the same page. The bio_add_pc_page function merges them into one,...

CVE-2017-2583

CVE-2017-2583 affects the Linux kernel’s KVM emulation for x86, where load of a null stack selector can be incorrectly handled in long mode. The flaw allows a guest-host user to crash the guest OS (DoS) or potentially escalate privileges within the guest on affected CPUs, due to improper emulatio...

CVE-2017-14051

CVE-2017-14051 : An integer overflow in the Linux kernel’s qla2x00_sysfs_write_optrom_ctl (drivers/scsi/qla2xxx/qla_attr.c) up to version 4.12.10 enables a local user with root privileges to cause memory corruption and a system crash (DoS). Affected components/versions: Linux kernel ≤ 4.12.10. Mi...

CVE-2017-9074

Affected software: Linux kernel IPv6 fragmentation code. Root cause: nexthdr field may be associated with an invalid option, leading to an out-of-bounds read/BUG via crafted socket and send calls. Impact: local denial of service and potential unspecified effects (information leakage/compromise as...

CVE-2017-5986

CVE-2017-5986 affects the Linux kernel SCTP implementation (net/sctp/socket.c). A race condition in sctp_wait_for_sndbuf during certain buffer-full/wait states allows a local attacker to peel off an association with another thread, leading to an assertion failure or a crash (DoS). The issue was t...

CVE-2017-7273

CVE-2017-7273 affects the Linux kernel, where cp_report_fixup in drivers/hid/hid-cypress.c (kernel 3.2 and 4.x before 4.9.4) allows physically proximate attackers to trigger a denial of service (integer underflow) via a crafted HID report. The issue is fixed in Linux kernel 4.9.4; remediation is ...

CVE-2017-7472

CVE-2017-7472 affects the KEYS subsystem of the Linux kernel prior to version 4.10.13. A local attacker can exhaust memory by repeatedly invoking keyctl_set_reqkey_keyring on KEY_REQKEY_DEFL_THREAD_KEYRING, leading to a denial of service. The vulnerability is triggered by a sequence of calls in t...

CVE-2017-7618

CVE-2017-7618 affects the Linux kernel crypto/ahash.c, enabling denial of service by triggering EBUSY on a full request queue and causing infinite recursion in the AHASH path. The issue is referenced across multiple connected advisories (Cloud Foundry USN-3312-2, CNVD-2017-05429, Debian DLA-922-1...

CVE-2017-2647

CVE-2017-2647 affects the Linux kernel KEYS subsystem (keyring_search_iterator in keyring.c) and allows a local, authenticated user to trigger a NULL pointer dereference, enabling a crash or possible privilege escalation. The vulnerability is documented across multiple advisories; remediation is ...

CVE-2017-2671

CVE-2017-2671 affects the Linux kernel ping_unhash in net/ipv4/ping.c. The issue is that a lock is obtained too late, failing to guarantee safety for disconnect calls, enabling a local attacker to trigger a denial of service (panic) by leveraging IPPROTO_ICMP in a socket syscall. Public reference...

CVE-2017-12153

CVE-2017-12153 refers to a security flaw in the Linux kernel where nl80211_set_rekey_data() in net/wireless/nl80211.c does not validate required Netlink attributes, enabling a local attacker with CAP_NET_ADMIN to trigger a NULL pointer dereference and system crash. The vulnerability is described ...

CVE-2014-9940

CVE-2014-9940 affects the Linux kernel regulator_ena_gpio_free function in drivers/regulator/core.c, with exploitation possible through local access to gain privileges or cause a denial of service via a use-after-free. Affected condition is kernel versions before 3.19. Impact per sources is high ...

CVE-2016-10208

CVE-2016-10208 affects the Linux kernel ext4_fill_super(path) code: it fails to validate meta block groups when mounting an ext4 image, enabling a locally proximate attacker with physical access to trigger memory corruption via a crafted EXT4 image, resulting in an out-of-bounds read and system c...

CVE-2017-12146

The CVE-2017-12146 issue affects the Linux kernel driver_override in drivers/base/platform.c prior to 4.12.1. A race between reads and stores of different overrides can allow a local user to gain privileges. Evidence from connected Nessus advisories (Unity Linux, EulerOS, OracleVM) confirms the v...

CVE-2017-5970

Summary (CVE-2017-5970): The Linux kernel (ipv4_pktinfo_prepare in net/ipv4/ip_sockglue.c) up to version 4.9.9 is affected. A flaw can cause a denial of service (system crash) when triggered by (1) crafted system calls from an application or (2) IPv4 traffic carrying invalid IP options. The root ...

CVE-2017-17806

CVE-2017-17806 affects the Linux kernel before 4.14.8. The HMAC implementation (crypto/hmac.c) does not validate that the underlying hash algorithm is unkeyed, allowing a local attacker who can use the AF_ALG-based hash interface (CONFIG_CRYPTO_USER_API_HASH) and SHA-3 (CONFIG_CRYPTO_SHA3) to tri...

CVE-2017-10911

Summary: CVE-2017-10911 affects the Linux kernel driver path drivers/block/xen-blkback/blkback.c, related to Xen block-interface responses (XSA-216). The vulnerability arises from copying uninitialized padding fields in Xen blkback response structures, which can let a guest OS user read host (or ...

CVE-2017-17450

CVE-2017-17450 affects the Linux kernel up to 4.14.4 in net/netfilter/xt_osf.c, where add_callback/remove_callback do not require CAP_NET_ADMIN, allowing local users to bypass intended access controls because xt_osf_fingers is shared across net namespaces. The vulnerability is rooted in privilege...

CVE-2017-17558

Technical details about CVE-2017-17558 are not publicly provided in the supplied documents. Monitor for official advisories for affected products, impact, and mitigations; no concrete exploit information or patch details are available here.

CVE-2017-14140

CVE-2017-14140 describes a Linux kernel vulnerability in the move_pages system call (mm/migrate.c): it does not validate the effective UID of the target process, allowing a local attacker to learn the memory layout of a setuid-executable despite ASLR. The issue is a local information disclosure r...

CVE-2017-17712

Technical details about CVE-2017-17712 are not publicly available in the provided connected documents. Monitor for updates from vendor advisories and upstream kernel patches.

CVE-2017-9242

CVE-2017-9242 affects the Linux kernel prior to a fix that corrects an out-of-order overwrite check in the IPv6 stack. The vulnerability stems from the __ip6_append_data function in net/ipv6/ip6_output.c, where the overwrite check is performed too late, allowing a local attacker to crash the syst...

CVE-2017-12154

The CVE-2017-12154 entry describes a Linux kernel KVM/vmx issue (arch/x86/kvm/vmx.c: prepare_vmcs02) present through kernel 4.13.3. Root cause: it does not ensure that the CR8-load exiting and CR8-store exiting vmcs02 controls exist when L1 omits the use_TPR_shadow VMCS12 control, enabling a KVM ...

CVE-2017-5551

CVE-2017-5551 affects the Linux kernel; the simple_set_acl function in fs/posix_acl.c does not clear the setgid bit during a setxattr call on tmpfs, enabling a local user to gain group privileges if a setgid program exists with restricted execute permissions. This is tied to an incomplete fix of ...

CVE-2017-12193

CVE-2017-12193 affects the Linux kernel: the function assoc_array_insert_into_terminal_node in lib/assoc_array.c mishandles node splitting, leading to a NULL pointer dereference and kernel panic via a crafted application. The vulnerability is in kernels prior to 4.13.11, enabling local attackers ...

CVE-2017-16537

CVE-2017-16537 affects the Linux kernel: the imon_probe function in drivers/media/rc/imon.c up to version 4.13.11 allows a local user to trigger a NULL pointer dereference via a crafted USB device, leading to a denial of service (system crash) and potentially other impact. The connected Nessus en...

CVE-2017-17864

CVE-2017-17864 affects the Linux kernel up to version 4.14.8, specifically the BPF verifier code (kernel/bpf/verifier.c). The root cause is a mishandling of states_equal comparisons between the pointer data type and the UNKNOWN_VALUE data type, which can allow a local user to leak potentially sen...

CVE-2017-13695

CVE-2017-13695 affects the Linux kernel up to 4.12.9. The vulnerability stems from acpi_ns_evaluate() in drivers/acpi/acpica/nseval.c not flushing the operand cache, which can cause a kernel memory disclosure via a crafted ACPI table and may bypass KASLR (kernel

CVE-2017-1000363

CVE-2017-1000363: Linux kernel lp driver bounds-check flaw in lp.c allows a local attacker with write access to kernel command line arguments to overflow parport_nr and execute arbitrary code. Root cause: missing bounds check in arg handling. Public disclosures include Debian security advisories ...

CVE-2017-17862

CVE-2017-17862 affects the Linux kernel up to 4.14.8. The issue stems from kernel/bpf/verifier.c mis-pruning of unreachable code, which could be mishandled by JITs and enable a local denial-of-service by unprivileged users. Connected advisories and patches indicate this was addressed via kernel f...

CVE-2017-5577

CVE-2017-5577 affects the Linux kernel VideoCore DRM vc4 driver. The vc4_get_bcl function in vc4_gem.c can encounter overflow while handling size values in VC4_SUBMIT_CL, and does not set an errno value, which can lead to an incorrect pointer dereference and a kernel OOPS, causing a denial of ser...

CVE-2017-7477

CVE-2017-7477 affects the Linux kernel MACsec driver (drivers/net/macsec.c) up to version 4.10.12. It is a heap-based buffer overflow triggered by using MAX_SKB_FRAGS+1 with NETIF_F_FRAGLIST, causing denial of service and potentially other unspecified impacts via skb_to_sgvec. Public details in c...

CVE-2017-7616

CVE-2017-7616 affects the Linux kernel (mm/mempolicy.c) where incorrect error handling in set_mempolicy/mbind compat syscalls can leak uninitialized stack data to local attackers. The issue is documented across multiple advisories (e.g., Debian, CentOS, Cloud Foundry) and is mitigated by updating...

CVE-2016-10200

CVE-2016-10200 describes a race condition in the Linux kernel’s L2TPv3 IP Encapsulation feature that can allow a local user to escalate privileges or cause a denial of service via repeated bind() calls without correctly checking SOCK_ZAPPED status. The issue affects Linux kernels prior to 4.8.14,...

CVE-2017-12188

CVE-2017-12188 affects arch/x86/kvm/mmu.c in the Linux kernel up to 4.13.5 where nested virtualization can mis-traverse guest page tables, enabling L1 guests to run arbitrary host code or trigger host denial of service. Connected advisories ( MiracleLinux AXSA-2018-2625, Unity Linux UTSA advisori...

CVE-2017-15649

CVE-2017-15649 affects the Linux kernel’s AF_PACKET path (net/packet/af_packet.c) up to version before 4.13.6. A race between fanout_add and packet_do_bind can mishandle packet_fanout data structures, causing a use-after-free condition. A local user with CAP_NET_RAW can trigger this to obtain pri...

CVE-2017-5967

CVE-2017-5967 affects the Linux kernel: when CONFIG_TIMER_STATS is enabled, the time subsystem through kernel 4.9.9 allows a local attacker to reveal real PID values (outside of PID namespaces) by reading /proc/timer_list, via the print_timer path in kernel/time/timer_list.c and the __timer_stats...

CVE-2017-14489

CVE-2017-14489 affects the Linux kernel iSCSI transport (drivers/scsi/scsi_transport_iscsi.c: iscsi_if_rx). The root cause is incorrect length validation, enabling a local authenticated attacker to trigger a denial of service (kernel panic) or memory corruption. Affected as of kernel versions up ...

CVE-2017-1000365

CVE-2017-1000365 affects the Linux kernel where size limits for arguments and environment strings passed via RLIMIT_STACK/RLIMIT_INFINITY do not properly account for the argument/environment pointers, enabling a local attacker to potentially execute arbitrary code. The issue is described as a lim...

CVE-2017-2596

CVE-2017-2596 affects the Linux kernel’s KVM VMX handling. The nested_vmx_check_vmptr function in arch/x86/kvm/vmx.c through kernel 4.9.8 incorrectly emulates the VMXON instruction, enabling a local L1 guest user to cause host memory exhaustion and a denial of service by abusing mishandled page r...

CVE-2017-1000370

CVE-2017-1000370 affects the Linux kernel (4.11.5 and earlier) on i386. The offset2lib patch vulnerability lets a PIE binary be execve’d with an enormous 1 GB argument/environment list, causing the stack to occupy 0x80000000 and the PIE binary to be mapped above 0x40000000, bypassing the patch’s ...

CVE-2016-10044

CVE-2016-10044 is supported by connected advisories: the Linux kernel up to version 4.7.7 contains a vulnerability in the aio_mount path. Specifically, the aio_mount function in fs/aio.c did not properly restrict execute access, enabling local users to bypass SELinux W^X policy and gain privilege...

CVE-2017-14340

CVE-2017-14340 affects the Linux kernel prior to 4.13.2. The XFS_IS_REALTIME_INODE macro in fs/xfs/xfs_linux.h does not verify that a filesystem has a realtime device, enabling a local user to trigger a NULL pointer dereference and OOPS when setting the RHINHERIT flag on a directory. The issue re...

CVE-2017-15274

CVE-2017-15274 affects the Linux kernel K ey Management subsystem: security/keys/keyctl.c fails to handle a NULL payload with a nonzero length, allowing local users to trigger a NULL pointer dereference and OOPS via crafted add_key or KEYCTL calls, resulting in DoS. The issue is chained to the ke...

CVE-2017-5897

CVE-2017-5897 involves an out-of-bounds read in the Linux kernel’s IPv6 GRE handling (ip6_gre.c, ip6gre_err). Connected sources (Debian DSA-3791-1 and Cloud Foundry USN-3265-2) confirm the issue and note mitigation via kernel updates (e.g., Debian Jessie fix in linux 3.16.39-1+deb8u1; vendor advi...

CVE-2017-16646

CVE-2017-16646 affects the Linux kernel driver for USB DVB devices: specifically drivers/media/usb/dvb-usb/dib0700_devices.c, with the vulnerability present in kernels up to 4.13.11. A crafted USB device can trigger a local-denial-of-service (BUG and system crash) or possibly other unspecified im...

CVE-2017-16536

CVE-2017-16536 affects the Linux kernel cx231xx USB card driver (cx231xx_usb_probe in drivers/media/usb/cx231xx/cx231xx-cards.c) up to version 4.13.11. The issue allows a local attacker to trigger a NULL pointer dereference leading to a denial of service or system crash via a crafted USB device. ...

CVE-2017-6264

CVE-2017-6264 is an elevation-of-privilege vulnerability in the NVIDIA GPU driver used on Android, specifically within the gm20b_clk_throt_set_cdev_state path. An out-of-bounds memory read can be used as a function pointer, potentially allowing a local attacker to execute arbitrary code in kernel...

CVE-2017-17975

CVE-2017-17975: Use-after-free in Linux kernel’s usbtv_probe (drivers/media/usb/usbtv/usbtv-core.c) up to kernel 4.14.10 can allow local attackers to trigger audio registration failure, potentially causing a denial of service (system crash) or other unspecified impact due to improper handling of ...

CVE-2017-7187

The CVE-2017-7187 issue affects the Linux kernel sg_ioctl in drivers/scsi/sg.c, where a large SG_NEXT_CMD_LEN ioctl can trigger a stack-based buffer overflow, leading to a DoS or potentially other impact via out-of-bounds writes in sg_write. Descriptions across connected sources (CNVD-2017-03858)...