14999 matches found
CVE-2023-42756
CVE-2023-42756 is a Linux kernel vulnerability in the Netfilter/IPSET subsystem caused by a race between IPSET_CMD_ADD and IPSET_CMD_SWAP that can lead to a kernel panic and local system crash. The description indicates a local attacker may crash the machine due to calling __ip_set_put on a wrong...
CVE-2024-26735
CVE-2024-26735 concerns the Linux kernel IPv6 SR subsystem. The issue is a use-after-free and a null pointer dereference in the ipv6/sr path, caused by registering the pernet operations structure for the subsystem after the generic netlink family, i.e., the pernet ops are not registered in the co...
CVE-2019-18805
CVE-2019-18805 affects the Linux kernel prior to 5.0.11. A signed integer overflow occurs in net/ipv4/sysctl_net_ipv4.c and in tcp_input.c (tcp_ack_update_rtt()) when a very large value is written to /proc/sys/net/ipv4/tcp_min_rtt_wlen, potentially causing a denial of service or other impact. Con...
CVE-2019-19526
The vulnerability CVE-2019-19526 affects the Linux kernel prior to 5.3.9, caused by a use-after-free in the drivers/nfc/pn533/usb.c USB NFC driver. A malicious USB device can trigger the bug, potentially impacting availability (high impact) while confidentiality/integrity remain unaffected. Affec...
CVE-2019-3701
CVE-2019-3701 affects the Linux kernel CAN subsystem (can_can_gw_rcv in net/can/gw.c) up to version 4.19.13. The CAN frame modification rules can apply bitwise logic to can_dlc, enabling a privileged user with CAP_NET_ADMIN to create a can-gw rule that makes the DLC larger than the frame data. Wh...
CVE-2019-8912
CVE-2019-8912 affects the Linux kernel up to version 4.20.11. The vulnerability stems from af_alg_release() in crypto/af_alg.c not setting a needed NULL value for a member of a structure, which enables a use-after-free in sockfs_setattr. The supplied documents describe the affected component and ...
CVE-2020-16120
The CVE-2020-16120 issue concerns Overlayfs in the Linux kernel where permission checks during copy-up were inadequate when used inside a user namespace. It was introduced in kernel 4.19 (ovl: stack file ops) and fixed in kernel 5.8 by patches that verify permissions in ovl_path_open(), switch to...
CVE-2021-20292
CVE-2021-20292 affects the Linux kernel up to version
CVE-2023-2235
CVE-2023-2235 describes a local privilege-escalation use-after-free in the Linux Kernel Performance Events subsystem. The flaw stems from perf_group_detach not checking siblings’ attach_state before add_event_to_groups(), coupled with remove_on_exec allowing list_del_event() on the event before d...
CVE-2023-4732
The CVE-2023-4732 issue affects the Linux Kernel memory management path, specifically pfn_swap_entry_to_page in the page table handling. It states that a local user could trigger a denial of service by exploiting a BUG referencing pmd_t x, leading to a DoS condition. The root cause is described a...
CVE-2023-52446
CVE-2023-52446 affects the Linux kernel BPF subsystem. A race between btf_put() and map_free() can cause a slab-use-after-free in bpf_rb_root_free, as shown by the kasan trace. The impact is described as a use-after-free condition that can lead to a kernel crash or memory corruption. A fix has be...
CVE-2017-10810
CVE-2017-10810: Linux kernel memory leak in virtio_gpu_object_create (drivers/gpu/drm/virtio/virtgpu_object.c) up to 4.11.8 can cause memory exhaustion and denial of service when object initialisation fails. Connected Nessus advisories (Unity Linux UTSA-2026-002867/002763/000604) reproduce the sa...
CVE-2018-1118
CVE-2018-1118 affects the Linux kernel vhost path used by /dev/vhost-net. The issue is improper memory initialization in vhost/vhost.c:vhost_new_msg(), enabling a local unprivileged user to read kernel memory contents. The vulnerability arises from memory not being initialized before being passed...
CVE-2018-9363
CVE-2018-9363 is a Linux-kernel vulnerability in the HIDP Bluetooth driver: hidp_process_report can overflow a buffer due to incorrect length handling, potentially causing memory corruption and DoS, with possible remote code execution. Public documents across Debian/Ubuntu/CentOS‑related advisori...
CVE-2021-45095
CVE-2021-45095 affects the Linux kernel PhoNet (pep_sock_accept in net/phonet/pep.c). Root cause: reference-count leak in certain error paths, enabling memory exhaustion. Affected: Linux kernel up to 5.15.x (examples cite 5.15.8); remediation: patch released, kernels updated to 5.15.18.1-1 (Marin...
CVE-2024-25739
CVE-2024-25739 affects Linux kernel up to 6.7.4, where create_empty_lvol in drivers/mtd/ubi/vtbl.c may allocate zero bytes due to a missing check for ubi->leb_size, causing a crash (local, to crash an attacker-controlled workload). The issue is mapped to the ubi/VTBL path in the kernel; a fix ...
CVE-2024-50134
CVE-2024-50134 affects the Linux kernel driver drm/vboxvideo (vbva_mouse_pointer_shape). The issue stems from a fake VLA at the end of vbva_mouse_pointer_shape triggering a field-spanning memcpy write in hgsmi_base.c:154. The patch replaces the fake VLA with a real VLA to fix the warning and pote...
CVE-2017-14106
CVE-2017-14106 affects the Linux kernel TCP stack: the divide-by-zero in tcp_disconnect (net/ipv4/tcp.c) can be triggered by a local attacker via a specific tcp_recvmsg path, potentially causing a system crash (DoS). Connected advisories confirm the issue across multiple vendors (IBM IMM2 bulleti...
CVE-2019-19049
CVE-2019-19049 corresponds to a memory leak in the Linux kernel preprocessing path: the unittest_data_add() function in drivers/of/unittest.c can leak memory when of_fdt_unflatten_tree() fails, leading to potential denial of service due to memory consumption. The affected line is in the kernel pr...
CVE-2022-42328
Technical details about CVE-2022-42328 (and related CVEs) are not provided in the connected documents. Monitor the cited Xen/XenServer advisories and AWS Amazon/Linux advisories for updates and fixes.
CVE-2025-21631
CVE-2025-21631 is a Linux kernel UAF issue in the bfq I/O scheduler. The vulnerability arises from a use-after-free involving waker_bfqq after bfq_split_bfqq, leading to slab-use-after-free in bfq_init_rq as shown by the KASAN report. Affected code paths include bfq-iosched.c: bfq_init_rq/bfq_ins...
CVE-2016-7042
CVE-2016-7042: Linux kernel vulnerability where proc_keys_show (security/keys/proc.c) uses an incorrect buffer size for certain timeout data when built with gcc stack protector, enabling local denial of service by reading /proc/keys. Affects kernels up to 4.8.2; exploitation could cause stack mem...
CVE-2023-52594
CVE-2023-52594 (Linux kernel) involves a potential array-index-out-of-bounds read in the ath9k_htc_txstatus() path of the wifi/ath9k driver. The issue occurs when txs->cnt (data from a URB from a USB device) exceeds HTC_MAX_TX_STATUS (12); UBSAN reports index 13 out of range. The code path lac...
CVE-2023-52595
CVE-2023-52595 is reported in MiracleLinux advisories as affecting MiracleLinux 8 with kernel 4.18.0-553.5.1.el8_10 (AXSA:2024-8481:17). The issue is in wifi: rt2x00: restart beacon queue when hardware reset, where a hardware reset can deadlock the beacon queue if mac80211 does not stop queues, p...
CVE-2023-5717
CVE-2023-5717 describes a heap out-of-bounds write in the Linux kernel’s perf subsystem (Perf events) caused by improper handling of event groups. When perf_read_group() runs and an event’s sibling_list is smaller than its child’s, memory writes can occur outside the allocated buffer, enabling lo...
CVE-2025-21684
CVE-2025-21684 affects the Linux kernel GPIO xilinx driver. Root cause: irq_chip locking used gpio_lock (a normal spinlock) in contexts that may run under raw spinlock requirements. The fix: convert gpio_lock to a raw spinlock and apply it in the xilinx GPIO code path (e.g., xgpio_irq_unmask), ad...
CVE-2020-36558
CVE-2020-36558 refers to a race condition in the Linux kernel before 5.5.7 involving VT_RESIZEX that can cause a NULL pointer dereference and a general protection fault. The vulnerability is triggered locally within the kernel, with impact described as high availability risk if exploited, and the...
CVE-2022-45887
CVE-2022-45887 affects the Linux kernel up to 6.0.9. The issue is a memory leak in drivers/media/usb/ttusb-dec/ttusb_dec.c caused by the absence of a dvb_frontend_detach call. Impact is potential denial of service via memory exhaustion (CVSS indicates HIGH availability impact). No remediation det...
CVE-2023-6932
CVE-2023-6932 is a Linux kernel vulnerability affecting the ipv4: igmp component. The issue is described as a use-after-free condition with a race that can cause a timer to be registered on an RCU read-locked object that is freed by another thread, enabling local privilege escalation. Connected d...
CVE-2016-8655
CVE-2016-8655 describes a race condition in the Linux kernel AF_PACKET path (net/packet/af_packet.c) that, up to version 4.8.12, could allow a local user with CAP_NET_RAW to change a socket version via packet_set_ring/packet_setsockopt, leading to use-after-free, privilege escalation or DoS. Conn...
CVE-2017-17448
CVE-2017-17448 affects the Linux kernel’s netfilter nfnetlink_cthelper.c: CAP_NET_ADMIN is not required for new/get/del operations, because nfnl_cthelper_list is shared across all net namespaces. This enables local attackers to bypass access restrictions. Impact is local privilege/access restrict...
CVE-2018-10876
A confirmed vulnerability in the Linux kernel ext4 filesystem: CVE-2018-10876 is a use-after-free in ext4_ext_remove_space() when mounting a crafted ext4 image, allowing a local attacker to crash the system and, per some sources, potentially execute arbitrary code. Public references in the connec...
CVE-2018-13093
CVE-2018-13093 relates to a NULL pointer dereference in Linux kernel fs/xfs/xfs_icache.c during pathwalks on a corrupted XFS image, caused by missing validation that cached inodes are freed during allocation. Impact: potential crash/DoS. Remediation: Debian LTS advisory DLA-2114-1 lists this CVE ...
CVE-2024-50082
CVE-2024-50082 affects the Linux kernel’s blk-rq-qos subsystem. The issue is a race where rq_qos_wake_function() may wake a waiter after its waitqueue entry has been deleted, causing wake_up_process() to reference a deallocated task and fault when spinning locks. The root cause is a deletion-afte...
CVE-2022-3625
CVE-2022-3625 affects the Linux kernel, specifically the devlink subsystem. The issue is a use-after-free in the functions devlink_param_set and devlink_param_get in net/core/devlink.c, enabling a remote authenticated attacker on the local network to cause a denial of service. A patch is availabl...
CVE-2023-52444
CVE-2023-52444 : In Linux kernel f2fs, a dirent corruption risk during cross-directory rename (dir/.. links) was fixed. The issue arose in f2fs_rename() when the sourceDir and targetDir differ and a whiteout is not present; a missing f2fs_set_link() could fail to update the ".." inumber, causing ...
CVE-2023-6622
CVE-2023-6622 : A null pointer dereference in nft_dynset_init() of net/netfilter/nft_dynset.c (nf_tables) allows a local attacker with CAP_NET_ADMIN to trigger a denial of service. Affected: Linux kernel nf_tables/nft_dynset; impact: local DoS; exploitability: LOCAL, requires privileges, no user ...
CVE-2011-2189
Summary (CVE-2011-2189): The Linux kernel (2.6.32 and earlier) has a flaw in net_namespace.c that mishandles a high rate of network-namespace creation/cleanup. This can allow remote attackers to cause a denial of service via memory consumption in a daemon that creates a separate namespace per con...
CVE-2015-5157
CVE-2015-5157 affects the Linux kernel prior to 4.1.6 on x86_64. The issue is in arch/x86/entry/entry_64.S where IRET faults during NMIs that occur in userspace are mishandled, potentially allowing a local user to gain privileges. The vulnerability is described in several connected advisories as ...
CVE-2016-5696
Technical details about CVE-2016-5696 are not publicly provided in the supplied connected documents; monitor for updates.
CVE-2018-14734
CVE-2018-14734 affects the Linux kernel before 4.17.11, where ucma_leave_multicast can access a data structure after cleanup in ucma_process_join, enabling a use-after-free that leads to DoS. The vulnerability is in drivers/infiniband/core/ucma.c. Exploitation status is not provided in the suppli...
CVE-2020-29371
CVE-2020-29371 affects Linux kernel romfs_dev_read (fs/romfs/storage.c) prior to 5.8.4, where uninitialized memory leaks to userspace. The vulnerability stems from uninitialized memory paths, enabling leakage to user space. Affected component is the ROMFS code in the kernel; no exploit details ar...
CVE-2021-44879
CVE-2021-44879 affects the Linux kernel’s f2fs implementation: in gc_data_segment (fs/f2fs/gc.c) zeroing out or moving pages does not treat special files, causing a NULL pointer dereference in move_data_page and potentially a crash. The issue is fixed in Linux 5.16.3 (ChangeLog-5.16.3). Affected ...
CVE-2022-1652
CVE-2022-1652 is a Linux kernel local-use-after-free fault in bad_flp_intr that could allow a local attacker to execute arbitrary code or cause a denial of service. Multiple connected advisories confirm the issue resides in the Linux kernel and that mitigation is to apply patched kernel updates (...
CVE-2022-26966
CVE-2022-26966 affects the Linux kernel up to 5.16.12, via the drivers/net/usb/sr9700.c component. A local attacker can attach a specially crafted USB device and cause information disclosure by leaking heap memory from the device, as described in multiple connected documents (upstream kernel note...
CVE-2022-49610
The CVE-2022-49610 entry concerns the Linux kernel KVM VMX path. The vulnerability description states a theoretical RSB underflow could occur on VMX when there is a gap between the guest SPEC_CTRL write and vmenter, potentially triggered by an NMI with a deep call stack. The mitigation is to disa...
CVE-2023-3268
CVE-2023-3268 : An out-of-bounds memory access in Linux kernel relayfs (relay_file_read_start_pos in kernel/relay.c) could allow a local attacker to crash the system or leak kernel information. Connected advisories confirm this vulnerability and its remediation in multiple kernels: CloudLinux not...
CVE-2023-52918
CVE-2023-52918 – Linux kernel (media: pci: cx23885) The vulnerability concerns the cx23885 video device initialization in the Linux kernel’s media: pci subsystem. cx23885_vdev_init() can return a NULL pointer, but the caller previously used that pointer without checking it. The fix adds a NULL po...
CVE-2024-26987
CVE-2024-26987 refers to a Linux kernel issue where a deadlock could occur in memory failure handling when hugetlb_optimize_vmemmap is enabled. The vulnerability is described with a deadlock scenario involving memory_failure/hard_offline_page_store and a dependency chain between cpu_hotplug_lock ...