CVE-2017-15265

CVE-2017-15265 is a race condition in the ALSA sequencer subsystem of the Linux kernel, up to version 4.13.8. A local attacker can trigger a use-after-free via crafted /dev/snd/seq ioctl calls, leading to denial of service (crash) or potentially other impacts. The vulnerability is fixed in the up...

CVE-2018-9363

CVE-2018-9363 is a Linux-kernel vulnerability in the HIDP Bluetooth driver: hidp_process_report can overflow a buffer due to incorrect length handling, potentially causing memory corruption and DoS, with possible remote code execution. Public documents across Debian/Ubuntu/CentOS‑related advisori...

CVE-2019-19036

CVE-2019-19036 affects the Linux kernel's Btrfs code: btrfs_root_node in fs/btrfs/ctree.c may dereference root->node via rcu_dereference even when it is zero, causing a NULL pointer dereference in kernels up to 5.3.12. The issue is confirmed in Nessus/Unity Linux advisory UTSA-2026-003667, whi...

CVE-2020-25673

CVE-2020-25673 is described in connected documents as a Linux kernel vulnerability where a non-blocking socket in llcp_sock_connect() can cause a memory leak and eventually hang the system. The Unity Linux UTSA-2026-001467 advisory and related Nessus plugins reiterate this issue, referencing a vu...

CVE-2022-33981

CVE-2022-33981 affects the Linux kernel’s floppy driver (drivers/block/floppy.c) up to version 5.17.6. The issue is a concurrency use-after-free after deallocating raw_cmd in the raw_cmd_ioctl function, leading to a local denial-of-service. Public documents confirm the vulnerable code path and th...

CVE-2023-45863

The CVE-2023-45863 issue affects the Linux kernel prior to 6.2.3 and is triggered by a race condition in lib/kobject.c that causes a fill_kobj_path out-of-bounds write when run with root privileges. Public sources in connected documents (Astra Linux bulletin and IBM advisories) describe the same ...

CVE-2017-14106

CVE-2017-14106 affects the Linux kernel TCP stack: the divide-by-zero in tcp_disconnect (net/ipv4/tcp.c) can be triggered by a local attacker via a specific tcp_recvmsg path, potentially causing a system crash (DoS). Connected advisories confirm the issue across multiple vendors (IBM IMM2 bulleti...

CVE-2017-18241

CVE-2017-18241 affects Linux kernel fs/f2fs/segment.c prior to 4.13. Local users can cause a denial of service via a NULL pointer dereference in a flush_cmd_control when using the noflush_merge option, leading to a panic. No exploitation details are provided in the documents. Remediation: upgrade...

CVE-2018-19407

CVE-2018-19407 affects the Linux kernel’s KVM x86 code path: the function vcpu_scan_ioapic in arch/x86/kvm/x86.c can trigger a NULL pointer dereference when the IOAPIC is uninitialized, leading to local denial of service. Affected scope is Linux kernels up to 4.19.2 (no explicit exploit details p...

CVE-2019-19528

CVE-2019-19528: Linux kernel pre-5.3.7 contains a use-after-free in the iowarrior USB driver (drivers/usb/misc/iowarrior.c) triggered by a malicious USB device. Public advisories (MiracleLinux AXSA:2021-2148:12 and Unity Linux UTSA references) confirm this CVE and map it to kernel builds up to 5....

CVE-2019-3701

CVE-2019-3701 affects the Linux kernel CAN subsystem (can_can_gw_rcv in net/can/gw.c) up to version 4.19.13. The CAN frame modification rules can apply bitwise logic to can_dlc, enabling a privileged user with CAP_NET_ADMIN to create a can-gw rule that makes the DLC larger than the frame data. Wh...

CVE-2019-8912

CVE-2019-8912 affects the Linux kernel up to version 4.20.11. The vulnerability stems from af_alg_release() in crypto/af_alg.c not setting a needed NULL value for a member of a structure, which enables a use-after-free in sockfs_setattr. The supplied documents describe the affected component and ...

CVE-2020-16120

The CVE-2020-16120 issue concerns Overlayfs in the Linux kernel where permission checks during copy-up were inadequate when used inside a user namespace. It was introduced in kernel 4.19 (ovl: stack file ops) and fixed in kernel 5.8 by patches that verify permissions in ovl_path_open(), switch to...

CVE-2022-42328

Technical details about CVE-2022-42328 (and related CVEs) are not provided in the connected documents. Monitor the cited Xen/XenServer advisories and AWS Amazon/Linux advisories for updates and fixes.

CVE-2022-4095

CVE-2022-4095 affects the Linux kernel; a use-after-free in cmd_hdl_filter (drivers/staging/rtl8712/rtl8712_cmd.c) allows a local attacker to cause DoS and escalate privileges. Affected: Linux kernel before 5.19.2. Impact is local/privilege escalation with high severity. Mitigation: upgrade to ke...

CVE-2022-4269

CVE-2022-4269 : Linux kernel Traffic Control (TC) vulnerability. When using the mirred action to redirect egress to ingress, a local unprivileged user may trigger a CPU soft lockup (ABBA deadlock) during TCP/SCTP retransmission, causing denial of service. Affected: Linux kernel TC subsystem. Root...

CVE-2024-43902

CVE-2024-43902 is a Linux kernel vulnerability in drm/amd/display where a null pointer could be dereferenced. The fix adds a null checker before passing variables to functions, addressing three NULL_RETURNS issues reported by Coverity. Connected documents confirm the root cause and the remediatio...

CVE-2024-50134

CVE-2024-50134 affects the Linux kernel driver drm/vboxvideo (vbva_mouse_pointer_shape). The issue stems from a fake VLA at the end of vbva_mouse_pointer_shape triggering a field-spanning memcpy write in hgsmi_base.c:154. The patch replaces the fake VLA with a real VLA to fix the warning and pote...

CVE-2017-7645

The CVE-2017-7645 issue affects the Linux kernel NFSv2/v3 server (nfsd) and is triggered by processing long RPC replies. The root cause is an out-of-bounds memory access in the NFS server paths (net/sunrpc/svc.c, fs/nfsd/nfs3xdr.c, fs/nfsd/nfsxdr.c) that can lead to a system crash (DoS). Affected...

CVE-2021-45095

CVE-2021-45095 affects the Linux kernel PhoNet (pep_sock_accept in net/phonet/pep.c). Root cause: reference-count leak in certain error paths, enabling memory exhaustion. Affected: Linux kernel up to 5.15.x (examples cite 5.15.8); remediation: patch released, kernels updated to 5.15.18.1-1 (Marin...

CVE-2022-45887

CVE-2022-45887 affects the Linux kernel up to 6.0.9. The issue is a memory leak in drivers/media/usb/ttusb-dec/ttusb_dec.c caused by the absence of a dvb_frontend_detach call. Impact is potential denial of service via memory exhaustion (CVSS indicates HIGH availability impact). No remediation det...

CVE-2023-4147

CVE-2023-4147 is a local-privilege-escalation use-after-free in the Linux kernel nf_tables/netfilter code. The flaw occurs when adding a rule with NFTA_RULE_CHAIN_ID, where nft_tables_delrule or related NFT rule handling can release objects in a way that leaves a dangling pointer, enabling local ...

CVE-2024-53142

CVE-2024-53142: Linux kernel initramfs fix for filename buffer overrun. Root cause: during initramfs cpio extraction, the do_name() path passed a non-zero-terminated filename to kernel file operations, allowing trailing bytes from uninitialized memory to be incorporated into a created path. Impac...

CVE-2025-21669

CVE-2025-21669 concerns the Linux kernel’s vsock/virtio transport: when a socket is de-assigned or reassigned to another transport, incoming packets must be discarded to avoid accessing vsk->transport in an inconsistent state. The advisory notes a scenario where a connect() interrupted by a si...

CVE-2020-29370

CVE-2020-29370 (Linux kernel): An issue in kmem_cache_alloc_bulk (mm/slub.c) before 5.5.11 where the slowpath path does not increment the TID as required (CID-fd4d9c7d0c71). Affected: Linux kernel prior to 5.5.11. Impact described in connected advisories as a vulnerability in the kernel memory al...

CVE-2020-8835

CVE-2020-8835 affects Linux kernel 5.5.0 and newer, with backports to 5.4.x. The issue is in the BPF verifier (kernel/bpf/verifier.c): it truncates 64-bit values to 32-bit for 32-bit operations, causing the verifier’s checked bounds to diverge from actual execution. This can lead to out-of-bounds...

CVE-2022-36123

The CVE-2022-36123 entry pertains to the Linux kernel prior to 5.18.13, where an unclear clear operation for the .bss block may allow Xen PV guests to trigger a denial of service or privilege escalation. Affected component: Linux kernel (xen pv guest context) up to version 5.18.12; fixed in 5.18....

CVE-2023-39191

The CVE-2023-39191 issue affects the Linux kernel eBPF subsystem: improper validation of dynamic pointers in user-supplied eBPF programs can be exploited by a user with CAP_BPF privileges to escalate privileges and run code in kernel context. Multiple connected advisories (e.g., Red Hat RHSA entr...

CVE-2020-36558

CVE-2020-36558 refers to a race condition in the Linux kernel before 5.5.7 involving VT_RESIZEX that can cause a NULL pointer dereference and a general protection fault. The vulnerability is triggered locally within the kernel, with impact described as high availability risk if exploited, and the...

CVE-2021-20292

CVE-2021-20292 affects the Linux kernel up to version

CVE-2021-3659

CVE-2021-3659 is a local NULL pointer dereference in the Linux kernel’s IEEE 802.15.4 LR-WPAN subsystem. The specific code path cited in connected sources is a NULL pointer dereference in llsec_key_alloc() within net/mac802154/llsec.c, which can be triggered during LR-WPAN connection closure and ...

CVE-2021-38207

CVE-2021-38207 affects the Linux kernel driver: drivers/net/ethernet/xilinx/ll_temac_main.c. It allows remote attackers to cause a denial of service (buffer overflow and lockup) by sending heavy network traffic for about ten minutes. The issue is in the ll_temac_main.c path, and the vulnerability...

CVE-2022-26966

CVE-2022-26966 affects the Linux kernel up to 5.16.12, via the drivers/net/usb/sr9700.c component. A local attacker can attach a specially crafted USB device and cause information disclosure by leaking heap memory from the device, as described in multiple connected documents (upstream kernel note...

CVE-2023-52444

CVE-2023-52444 : In Linux kernel f2fs, a dirent corruption risk during cross-directory rename (dir/.. links) was fixed. The issue arose in f2fs_rename() when the sourceDir and targetDir differ and a whiteout is not present; a missing f2fs_set_link() could fail to update the ".." inumber, causing ...

CVE-2024-25739

CVE-2024-25739 affects Linux kernel up to 6.7.4, where create_empty_lvol in drivers/mtd/ubi/vtbl.c may allocate zero bytes due to a missing check for ubi->leb_size, causing a crash (local, to crash an attacker-controlled workload). The issue is mapped to the ubi/VTBL path in the kernel; a fix ...

CVE-2011-2189

Summary (CVE-2011-2189): The Linux kernel (2.6.32 and earlier) has a flaw in net_namespace.c that mishandles a high rate of network-namespace creation/cleanup. This can allow remote attackers to cause a denial of service via memory consumption in a daemon that creates a separate namespace per con...

CVE-2020-28588

The CVE-2020-28588 information disclosure exists in the Linux Kernel /proc/pid/syscall interface for 5.1 Stable through 5.4.66, introduced in v5.1-rc4 (commit 631b7abacd02b88f4b0795c08b54ad4fc3e7c7c0) and still present in 5.10-rc4. An attacker can read /proc/pid/syscall to trigger memory contents...

CVE-2023-3773

The CVE-2023-3773 entry describes a flaw in the Linux kernel’s XFRM (IP framework) where parsing netlink attributes can trigger a 4-byte out-of-bounds read of XFRMA_MTIMER_THRESH. This could allow a malicious user with CAP_NET_ADMIN to leak sensitive heap data to userspace. The provided descripti...

CVE-2023-52446

CVE-2023-52446 affects the Linux kernel BPF subsystem. A race between btf_put() and map_free() can cause a slab-use-after-free in bpf_rb_root_free, as shown by the kasan trace. The impact is described as a use-after-free condition that can lead to a kernel crash or memory corruption. A fix has be...

CVE-2023-52595

CVE-2023-52595 is reported in MiracleLinux advisories as affecting MiracleLinux 8 with kernel 4.18.0-553.5.1.el8_10 (AXSA:2024-8481:17). The issue is in wifi: rt2x00: restart beacon queue when hardware reset, where a hardware reset can deadlock the beacon queue if mac80211 does not stop queues, p...

CVE-2023-6817

CVE-2023-6817 is a use-after-free in the Linux kernel nf_tables netfilter component (PIPAPO: Pile Packet Policies). The issue arises from nft_pipapo_walk not skipping inactive elements during a set walk, which can cause double deactivations of PIPAPO elements and lead to use-after-free. Evidence ...

CVE-2024-49568

CVE-2024-49568 affects the Linux kernel, specifically the net/smc path. When a server receives a proposal message, fields v2_ext_offset, eid_cnt, and ism_gid_cnt come from the remote client and may not be trusted. If v2_ext_offset exceeds the maximum value, there is a risk of accessing an incorre...

CVE-2016-5696

Technical details about CVE-2016-5696 are not publicly provided in the supplied connected documents; monitor for updates.

CVE-2018-14734

CVE-2018-14734 affects the Linux kernel before 4.17.11, where ucma_leave_multicast can access a data structure after cleanup in ucma_process_join, enabling a use-after-free that leads to DoS. The vulnerability is in drivers/infiniband/core/ucma.c. Exploitation status is not provided in the suppli...

CVE-2020-29369

CVE-2020-29369 is a real Linux kernel vulnerability described in the connected docs. It is a race condition in mm/mmap.c (expand_downwards vs. expand_upwards) that can occur during munmap page-table free operations, present in Linux kernels before 5.7.11 (CID-246c320a8cfe). The issue is triggered...

CVE-2020-29371

CVE-2020-29371 affects Linux kernel romfs_dev_read (fs/romfs/storage.c) prior to 5.8.4, where uninitialized memory leaks to userspace. The vulnerability stems from uninitialized memory paths, enabling leakage to user space. Affected component is the ROMFS code in the kernel; no exploit details ar...

CVE-2022-1116

CVE-2022-1116 is a Linux kernel local‑privilege‑escalation issue due to an integer overflow in io_uring. Affected: Linux kernel versions prior to 5.4.189; and 5.4.24 and later versions (per the entry). Root cause: overflow/wraparound in io_uring handling that can lead to memory corruption. Impact...

CVE-2022-28389

CVE-2022-28389 : In the Linux kernel up to version 5.17.1, mcba_usb_start_xmit implemented in drivers/net/can/usb/mcba_usb.c has a double free vulnerability. The issue is documented in multiple advisories linked to this CVE, including Astra Linux and Amazon Linux 2 ALAS advisories, which explicit...

CVE-2025-21638

CVE-2025-21638 affects the Linux kernel SCTP sysctl: auth_enable. Root cause: using current->nsproxy can be NULL or inconsistently reflect netns, causing potential issues; remediation fixes rely on obtaining net from table->data via container_of() rather than current. Affected advisories in...

CVE-2016-9794

CVE-2016-9794 is a local, use-after-free race in ALSA’s snd_pcm_period_elapsed() in the Linux kernel before 4.7. A crafted SNDRV_PCM_TRIGGER_START can trigger memory corruption, enabling a local attacker to cause a denial of service (and possibly other impact) on affected systems. Public write-up...