CVE-2022-4269

CVE-2022-4269 : Linux kernel Traffic Control (TC) vulnerability. When using the mirred action to redirect egress to ingress, a local unprivileged user may trigger a CPU soft lockup (ABBA deadlock) during TCP/SCTP retransmission, causing denial of service. Affected: Linux kernel TC subsystem. Root...

CVE-2022-49543

CVE-2022-49543 documents a Linux kernel issue in the ath11k/mhi PM wake path. The root cause is a mismatch between mhi_deassert_dev_wake() and __mhi_device_get_sync() during recovery, where pm_state is not normal and dev_wake may remain non-zero, triggering a warning in mhi_pm_disable_transition(...

CVE-2023-28466

Summary: CVE-2023-28466 affects the Linux kernel up to 6.2.6, where do_tls_getsockopt in net/tls/tls_main.c can race due to a missing lock_sock, causing a use-after-free or NULL pointer dereference. The condition is a local, kernel‑level issue with potential crashes or memory corruption as descri...

CVE-2023-3777

CVE-2023-3777 is a use-after-free in Linux kernel nf_tables (netfilter). When nf_tables_delrule() flushes table rules, it may release objects if the chain is bound, enabling local privilege escalation. Mitigation: upgrade past commit 6eaf41e87a223ae6f8e7a28d6e78384ad7e407f8 (Linux kernel versions...

CVE-2023-52815

The connected Astra Linux advisory confirms the CVE affects the Linux kernel DRM amdgpu/vkms path. In amdgpu_vkms_conn_get_modes(), the code previously assigned the return value of drm_cvt_mode() to mode and could dereference NULL on failure. The fix adds a NULL check to prevent dereference, miti...

CVE-2019-19051

CVE-2019-19051 : A memory leak in the Linux kernel function i2400m_op_rfkill_sw_toggle() (drivers/net/wimax/i2400m/op-rfkill.c) prior to 5.3.11 can allow a local attacker to cause memory exhaustion and denial of service. The issue is fixed in 5.3.11 (ChangeLog-5.3.11). References include related ...

CVE-2019-19077

CVE-2019-19077 is a Linux kernel vulnerability affecting bnxt_re (InfiniBand) where a memory leak in bnxt_re_create_srq() in drivers/infiniband/hw/bnxt_re/ib_verbs.c can be triggered by copy to udata failures, leading to denial of service via memory exhaustion. The issue is present in kernels up ...

CVE-2022-42895

CVE-2022-42895: Infoleak in Linux kernel (net/bluetooth/l2cap_core.c: l2cap_parse_conf_req) can leak kernel pointers remotely. Affected: Linux kernel (including versions cited by Astra Linux bulletin; e.g., linux-5.10/5.15 per connected docs). Root cause: information disclosure in L2CAP config re...

CVE-2023-0468

CVE-2023-0468 : A use-after-free race in the Linux kernel’s io_uring/poll.c (io_poll_check_events, io_uring subcomponent) is triggered by a race on poll_refs, potentially causing a NULL pointer dereference. Impact: local attacker could cause a system crash/denial of service; CVSS indicates LOCAL ...

CVE-2023-2269

The CVE-2023-2269 entry concerns a denial-of-service vulnerability in the Linux kernel Device Mapper-Multipathing, caused by a possible recursive locking scenario that can deadlock in table_clear() in drivers/md/dm-ioctl.c. Affected component: Linux kernel’s DM‑multipath subsystem. Impact per the...

CVE-2025-21759

CVE-2025-21759: In the Linux kernel, ipv6 mcast path igmp6_send() could be invoked without RTNL/RCU held, risking use-after-free of the net pointer. The fix extends RCU protection to safely fetch the net pointer and avoid UAF, and replaces sock_alloc_send_skb usage with alloc_skb under RCU protec...

CVE-2016-8399

CVE-2016-8399 affects the Linux kernel networking subsystem. The issue arises from the ICMP header length not being properly validated, enabling a local attacker to trigger an out-of-bounds memory access. With CAP_NET_ADMIN, this could lead to privilege escalation or information disclosure, as de...

CVE-2018-14625

The CVE-2018-14625 entry describes a Linux kernel vulnerability in the vsock (AF_VSOCK) implementation. A race condition between connect() and close() can lead to a use-after-free that may enable a local attacker running inside a guest VM to read kernel memory (information leak) or potentially in...

CVE-2018-16658

The CVE-2018-16658 entry concerns the Linux kernel prior to 4.18.6, where a vulnerability in cdrom_ioctl_drive_status() in drivers/cdrom/cdrom.c allows a local attacker to read kernel memory due to an unsafe cast from unsigned long to int that bypasses bounds checks. The issue is mitigated by upg...

CVE-2020-29370

CVE-2020-29370 (Linux kernel): An issue in kmem_cache_alloc_bulk (mm/slub.c) before 5.5.11 where the slowpath path does not increment the TID as required (CID-fd4d9c7d0c71). Affected: Linux kernel prior to 5.5.11. Impact described in connected advisories as a vulnerability in the kernel memory al...

CVE-2023-1079

The CVE-2023-1079 issue is a Linux kernel use-after-free involving asus_kbd_backlight_set. A malicious USB device advertising as an Asus device can trigger a use-after-free through the LED controller, when the device is disconnecting, which may schedule a work_struct and free the struct asus_kbd_...

CVE-2023-2162

Astra Linux security bulletin mirrors CVE-2023-2162, documenting a use-after-free in Linux kernel (iscsi_sw_tcp_session_create in drivers/scsi/iscsi_tcp.c) that could allow a local attacker to leak kernel internal information. The Astra Linux entry identifies the affected kernel subcomponent (SCS...

CVE-2024-42227

CVE-2024-42227 affects the Linux kernel's drm/amd/display: fix overlapping copy within dml_core_mode_programming. The issue arises when &mode_lib->mp.Watermark and &locals->Watermark reference the same address, leading to unsafe memcpy behavior. The vulnerability is mitigated by replacing m...

CVE-2024-56785

CVE-2024-56785 affects the Linux kernel lifecycle on MIPS Loongson64 platforms (ls7a). The issue centers on DTS/PCIe port node handling: incorrect PCIe port node definitions in ls7a DTS files caused dtc/interpreter warnings and a runtime warning related to address-cell/interrupt-provider mappings...

CVE-2025-21638

CVE-2025-21638 affects the Linux kernel SCTP sysctl: auth_enable. Root cause: using current->nsproxy can be NULL or inconsistently reflect netns, causing potential issues; remediation fixes rely on obtaining net from table->data via container_of() rather than current. Affected advisories in...

CVE-2017-16644

The CVE-2017-16644 entry affects the Linux kernel: hdpvr_probe in drivers/media/usb/hdpvr/hdpvr-core.c (through kernel 4.13.11). The vulnerability allows local users to cause a denial of service or possibly other impact via a crafted USB device, due to improper error handling in hdpvr_probe. A fi...

CVE-2018-13406

CVE-2018-13406 affects the Linux kernel’s uvesafb_setcmap() in drivers/video/fbdev/uvesafb.c, where an integer overflow before kernel 4.17.4 could crash the kernel or allow privilege elevation because kmalloc_array is not used. A fix is available in kernel 4.17.4 (ChangeLog-4.17.4), so upgrading ...

CVE-2015-8104

The KVM subsystem in the Linux kernel (through version 4.2.6) and Xen (4.3.x through 4.6.x) contains a vulnerability related to svm.c . A guest OS user can trigger an infinite stream of #DB (Debug) exceptions , causing the processor microcode to enter an infinite loop. This results in a denial of...

CVE-2016-9555

The CVE-2016-9555 issue affects the Linux kernel SCTP implementation. The sctp_sf_ootb function in net/sctp/sm_statefuns.c lacks chunk-length checking for the first SCTP chunk, and resides in kernel versions before 4.8.8. This can permit remote attackers to cause a denial of service via out-of-bo...

CVE-2017-1000380

CVE-2017-1000380 affects the Linux kernel ALSA sound timer driver. A race between read and ioctl on /dev/snd/timer can disclose uninitialized memory to local users. Affected: kernels prior to 4.11.5. Remediation: upgrade to Linux kernel 4.11.5 or later (upstream fix referenced by ChangeLog-4.11.5...

CVE-2017-18208

CVE-2017-18208 affects the Linux kernel prior to 4.14.4. The vulnerability lies in the MADVISE_WILLNEED handling in mm/madvise.c, where triggering MADVISE_WILLNEED for a DAX mapping allows a local attacker to cause a denial of service via an infinite loop. The issue is local in scope and is tied ...

CVE-2017-18241

CVE-2017-18241 affects Linux kernel fs/f2fs/segment.c prior to 4.13. Local users can cause a denial of service via a NULL pointer dereference in a flush_cmd_control when using the noflush_merge option, leading to a panic. No exploitation details are provided in the documents. Remediation: upgrade...

CVE-2019-16232

CVE-2019-16232 affects the Linux kernel driver file drivers/net/wireless/marvell/libertas/if_sdio.c. The root cause is failure to check the return value of alloc_workqueue, which can lead to a NULL pointer dereference and a potential crash when the kernel uses that workqueue. Public references in...

CVE-2021-3178

CVE-2021-3178 affects the Linux kernel NFSv3 export path: when exporting a subdirectory, READDIRPLUS can leak the parent directory file handle, allowing a client to access files outside the exported subtree. Descriptions note this through kernel 5.10.8; some advisories reference fixes in patched ...

CVE-2024-43902

CVE-2024-43902 is a Linux kernel vulnerability in drm/amd/display where a null pointer could be dereferenced. The fix adds a null checker before passing variables to functions, addressing three NULL_RETURNS issues reported by Coverity. Connected documents confirm the root cause and the remediatio...

CVE-2024-49568

CVE-2024-49568 affects the Linux kernel, specifically the net/smc path. When a server receives a proposal message, fields v2_ext_offset, eid_cnt, and ism_gid_cnt come from the remote client and may not be trusted. If v2_ext_offset exceeds the maximum value, there is a risk of accessing an incorre...

CVE-2024-56551

Summary (CVE-2024-56551) : In the Linux kernel, the drm/amdgpu driver fixes a use-after-free in the slab allocator. The vulnerability is triggered by a use-after-free in the GPU scheduling path, specifically involving drm_sched_entity_flush, where a 8-byte read could occur after an object had bee...

CVE-2025-38352

CVE-2025-38352: In the Linux kernel, a TOCTOU race affects posix-cpu-timers between handle_posix_cpu_timers() and posix_cpu_timer_del() when an exiting non-autoreaping task runs from IRQ. The fix adds a tsk->exit_state check into run_posix_cpu_timers() to prevent misdetection of timer->it.c...

CVE-2015-1350

CVE-2015-1350 is confirmed in the Connected documents as a vulnerability in the Linux kernel VFS subsystem (3.x) where setattr operations underspecify removal of extended privilege attributes. This can allow local users to cause a denial of service by stripping capabilities from specific processe...

CVE-2016-8633

CVE-2016-8633 affects the Linux kernel due to a vulnerability in drivers/firewire/net.c that can allow remote code execution when processing crafted fragmented packets on certain hardware. The connected Unity Linux advisories (UTSA-2026-003327 and related Nessus plugins) state the issue exists in...

CVE-2019-19036

CVE-2019-19036 affects the Linux kernel's Btrfs code: btrfs_root_node in fs/btrfs/ctree.c may dereference root->node via rcu_dereference even when it is zero, causing a NULL pointer dereference in kernels up to 5.3.12. The issue is confirmed in Nessus/Unity Linux advisory UTSA-2026-003667, whi...

CVE-2020-15393

CVE-2020-15393 : The Linux kernel contains a memory leak in usbtest_disconnect (drivers/usb/misc/usbtest.c) affecting 4.4–5.7.6, CID-28ebeb8db770. Connected sources confirm this CVE across multiple distributions and advisories (Debian LTS entries, Amazon Linux advisories, Mageia, etc.). The vulne...

CVE-2020-28588

The CVE-2020-28588 information disclosure exists in the Linux Kernel /proc/pid/syscall interface for 5.1 Stable through 5.4.66, introduced in v5.1-rc4 (commit 631b7abacd02b88f4b0795c08b54ad4fc3e7c7c0) and still present in 5.10-rc4. An attacker can read /proc/pid/syscall to trigger memory contents...

CVE-2022-0487

CVE-2022-0487 is a use-after-free in the MOXART SD/MMC Host Controller support driver (memstick) in the Linux kernel. The flaw arises in the driver path rtsx_usb_ms_drv_remove and affects kernel versions older than 5.14-rc1. Local users with limited privileges could exploit this to impact confide...

CVE-2022-3303

CVE-2022-3303 is a race-condition vulnerability in the Linux kernel sound subsystem (SNDCTL_DSP_SYNC ioctl) that can cause a NULL pointer dereference and denial of service via a locally privileged user. The issue affects the Linux kernel’s sound code path and can crash the system, potentially ena...

CVE-2023-3773

The CVE-2023-3773 entry describes a flaw in the Linux kernel’s XFRM (IP framework) where parsing netlink attributes can trigger a 4-byte out-of-bounds read of XFRMA_MTIMER_THRESH. This could allow a malicious user with CAP_NET_ADMIN to leak sensitive heap data to userspace. The provided descripti...

CVE-2024-0443

CVE-2024-0443 : Linux kernel flaw in the blkgs destruction path (block/blk-cgroup.c) causes a cgroup blkio memory leak during destruction. The leak stems from cgroup_rstat_flush() being invoked only from css_release_work_fn() when the blkcg refcount reaches 0, creating a circular dependency that ...

CVE-2024-26852

CVE-2024-26852 (Linux kernel) : A use-after-free in IPv6 route multipath logic was fixed. The root cause was a read-after-free in ip6_route_mpath_notify invoked during multipath route updates, leading to potential UAF on fib6_info objects. The patch defers fib6_info_release() to the cleanup phase...

CVE-2024-41012

In the Linux kernel, CVE-2024-41012 pertains to a fcntl/close race in file locking where an LSM could allow the first do_lock_file_wait() to acquire a lock while denying the second removal, and POSIX lock removal could fail due to GFP_KERNEL allocation during range splitting. The issue can lead t...

CVE-2018-10877

CVE-2018-10877 describes a vulnerability in the Linux kernel ext4 filesystem where an out-of-bounds access in ext4_ext_drop_refs() can be triggered by operating on a crafted ext4 image. The connected sources indicate a local attacker could mount or otherwise interact with a crafted ext4 image to ...

CVE-2019-19057

CVE-2019-19057 affects the Linux kernel mwifiex PCIe wireless driver (drivers/net/wireless/marvell/mwifiex/pcie.c). Two memory leaks in mwifiex_pcie_init_evt_ring() can occur through failures in mwifiex_map_pci_memory(), allowing a local attacker to trigger memory consumption and a denial of serv...

CVE-2020-8835

CVE-2020-8835 affects Linux kernel 5.5.0 and newer, with backports to 5.4.x. The issue is in the BPF verifier (kernel/bpf/verifier.c): it truncates 64-bit values to 32-bit for 32-bit operations, causing the verifier’s checked bounds to diverge from actual execution. This can lead to out-of-bounds...

CVE-2022-33981

CVE-2022-33981 affects the Linux kernel’s floppy driver (drivers/block/floppy.c) up to version 5.17.6. The issue is a concurrency use-after-free after deallocating raw_cmd in the raw_cmd_ioctl function, leading to a local denial-of-service. Public documents confirm the vulnerable code path and th...

CVE-2022-4095

CVE-2022-4095 affects the Linux kernel; a use-after-free in cmd_hdl_filter (drivers/staging/rtl8712/rtl8712_cmd.c) allows a local attacker to cause DoS and escalate privileges. Affected: Linux kernel before 5.19.2. Impact is local/privilege escalation with high severity. Mitigation: upgrade to ke...

CVE-2022-41850

CVE-2022-41850 affects the Linux kernel driver: roccat_report_event in drivers/hid/hid-roccat.c up to version 5.19.12. It describes a race condition that can lead to a use-after-free when a report is received while copying report->value, enabling local attacker impact such as denial of service...