CVE-2022-28389

CVE-2022-28389 : In the Linux kernel up to version 5.17.1, mcba_usb_start_xmit implemented in drivers/net/can/usb/mcba_usb.c has a double free vulnerability. The issue is documented in multiple advisories linked to this CVE, including Astra Linux and Amazon Linux 2 ALAS advisories, which explicit...

CVE-2023-2162

Astra Linux security bulletin mirrors CVE-2023-2162, documenting a use-after-free in Linux kernel (iscsi_sw_tcp_session_create in drivers/scsi/iscsi_tcp.c) that could allow a local attacker to leak kernel internal information. The Astra Linux entry identifies the affected kernel subcomponent (SCS...

CVE-2023-3161

CVE-2023-3161 : Linux Kernel fbcon has a shift-out-of-bounds in fbcon_set_font when font->width/height > 32, causing undefined behavior and potential denial of service. Connected documents corroborate the same fbcon font handling issue in the Linux kernel. The Astra Linux bulletin mentions ...

CVE-2018-5344

CVE-2018-5344 : The Linux kernel vulnerability affects the driver code at drivers/block/loop.c, where improper lo_release serialization can lead to a use-after-free in __lock_acquire. This can cause a local denial of service (system crash) and may have unspecified other impact. The description in...

CVE-2021-28715

CVE-2021-28715 concerns the Linux kernel netback driver in Xen guests. The Xen netback path buffers incoming guest data until the guest processes it, and although there are safeguards to limit buffering, an attacker running in a guest can bypass them. Specifically, when using UDP on a fast interf...

CVE-2022-3625

CVE-2022-3625 affects the Linux kernel, specifically the devlink subsystem. The issue is a use-after-free in the functions devlink_param_set and devlink_param_get in net/core/devlink.c, enabling a remote authenticated attacker on the local network to cause a denial of service. A patch is availabl...

CVE-2022-40768

CVE-2022-40768 affects the Linux kernel (through 5.19.9) where stex_queuecommand_lck does not memset for the PASSTHRU_CMD path, enabling local users to read kernel memory. Affected: drivers/scsi/stex.c in the kernel. Impact: information disclosure from kernel memory; local, low complexity, no use...

CVE-2023-28772

Summary of CVE-2023-28772 : The Linux kernel prior to 5.13.3 contains a vulnerability in lib/seq_buf.c: seq_buf_putmem_hex exploitable via a buffer overflow in the seq_buf_putmem_hex path. This could allow a local attacker to overflow a buffer and potentially crash or corrupt kernel memory, with ...

CVE-2023-52446

CVE-2023-52446 affects the Linux kernel BPF subsystem. A race between btf_put() and map_free() can cause a slab-use-after-free in bpf_rb_root_free, as shown by the kasan trace. The impact is described as a use-after-free condition that can lead to a kernel crash or memory corruption. A fix has be...

CVE-2025-21638

CVE-2025-21638 - Linux kernel SCTP sysctl auth_enable is fixed. The issue arises from using the current task’s nsproxy via the net structure (current->nsproxy) when reading sctp. sysctl settings, leading to potential NULL pointer dereference if current task is exiting. The fix replaces direct ...

CVE-2017-18208

CVE-2017-18208 affects the Linux kernel prior to 4.14.4. The vulnerability lies in the MADVISE_WILLNEED handling in mm/madvise.c, where triggering MADVISE_WILLNEED for a DAX mapping allows a local attacker to cause a denial of service via an infinite loop. The issue is local in scope and is tied ...

CVE-2018-10877

CVE-2018-10877 describes a vulnerability in the Linux kernel ext4 filesystem where an out-of-bounds access in ext4_ext_drop_refs() can be triggered by operating on a crafted ext4 image. The connected sources indicate a local attacker could mount or otherwise interact with a crafted ext4 image to ...

CVE-2019-18811

CVE-2019-18811 : A memory leak in the Linux kernel’s sound/soc/sof/ipc.c function sof_set_get_large_ctrl_data() (triggered by sof_get_ctrl_copy_params() failures) can cause memory consumption leading to Denial of Service. Affected versions are up to 5.3.9; the root cause is a memory leak in sof_s...

CVE-2019-19078

CVE-2019-19078 refers to a memory leak in the ath10k_usb_hif_tx_sg() function (drivers/net/wireless/ath/ath10k/usb.c) of the Linux kernel up to 5.3.11. An attacker can cause denial of service via memory consumption by triggering usb_submit_urb() failures. The vulnerability is scoped to the kernel...

CVE-2020-14416

CVE-2020-14416 is a Linux kernel issue fixed in 5.4.16. A race condition in tty->disc_data handling for slip and slcan line disciplines can cause a use-after-free, affecting drivers/net/slip/slip.c and drivers/net/can/slcan.c. The connected Nessus advisories reproduce the vulnerability across ...

CVE-2020-28941

CVE-2020-28941 affects the Linux kernel’s Speakup screen reader (drivers/accessibility/spk_ttyio.c) up to version 5.9.9. Local attackers could trigger a denial of service by an invalid free when the line discipline is used more than once, leading to a system crash. The issue is confirmed in multi...

CVE-2021-29646

CVE-2021-29646 involves the Linux kernel, where the function tipc_nl_retrieve_key in net/tipc/node.c shows insufficient validation of data sizes. Connected docs confirm concrete details: affected component is the kernel tipc subsystem, with a fix implemented in kernel 5.11.11 (and Fedora/Mariner ...

CVE-2023-1079

The CVE-2023-1079 issue is a Linux kernel use-after-free involving asus_kbd_backlight_set. A malicious USB device advertising as an Asus device can trigger a use-after-free through the LED controller, when the device is disconnecting, which may schedule a work_struct and free the struct asus_kbd_...

CVE-2023-3268

CVE-2023-3268 : An out-of-bounds memory access in Linux kernel relayfs (relay_file_read_start_pos in kernel/relay.c) could allow a local attacker to crash the system or leak kernel information. Connected advisories confirm this vulnerability and its remediation in multiple kernels: CloudLinux not...

CVE-2023-52595

CVE-2023-52595 is reported in MiracleLinux advisories as affecting MiracleLinux 8 with kernel 4.18.0-553.5.1.el8_10 (AXSA:2024-8481:17). The issue is in wifi: rt2x00: restart beacon queue when hardware reset, where a hardware reset can deadlock the beacon queue if mac80211 does not stop queues, p...

CVE-2023-6817

CVE-2023-6817 is a use-after-free in the Linux kernel nf_tables netfilter component (PIPAPO: Pile Packet Policies). The issue arises from nft_pipapo_walk not skipping inactive elements during a set walk, which can cause double deactivations of PIPAPO elements and lead to use-after-free. Evidence ...

CVE-2024-49568

CVE-2024-49568 affects the Linux kernel net/smc implementation. The issue arises when receiving a proposal message: fields v2_ext_offset, eid_cnt, and ism_gid_cnt from the remote client are not fully trustworthy; if v2_ext_offset exceeds the max value, it can trigger an out-of-bounds access and a...

CVE-1999-0061

CVE-1999-0061 concerns the BSD line printer daemon (lpd). Multiple sources confirm a vulnerability in lpd related to file creation and deletion and remote execution. Affected software is BSD-derived lpd implementations; the root cause is not explicitly detailed in the provided documents. Reported...

CVE-2012-0056

No public technical details about CVE-2012-0056 are present in the connected documents; the Fedora announcements do not expose affected products, versions, or fixes. Monitor for updates.

CVE-2017-2636

CVE-2017-2636 details (NORMAL mode) : A race condition in the Linux kernel N_HLDC driver (n_hdlc) can lead to a double free. A local, unprivileged user who sets the HDLC line discipline on a tty device could exploit this to escalate privileges or cause a denial of service (system crash). Exploita...

CVE-2019-18805

CVE-2019-18805 affects the Linux kernel prior to 5.0.11. A signed integer overflow occurs in net/ipv4/sysctl_net_ipv4.c and in tcp_input.c (tcp_ack_update_rtt()) when a very large value is written to /proc/sys/net/ipv4/tcp_min_rtt_wlen, potentially causing a denial of service or other impact. Con...

CVE-2022-1116

CVE-2022-1116 is a Linux kernel local‑privilege‑escalation issue due to an integer overflow in io_uring. Affected: Linux kernel versions prior to 5.4.189; and 5.4.24 and later versions (per the entry). Root cause: overflow/wraparound in io_uring handling that can lead to memory corruption. Impact...

CVE-2023-26242

CVE-2023-26242 concerns an integer overflow in afu_mmio_region_get_by_offset located in drivers/fpga/dfl-afu-region.c of the Linux kernel, reported to be vulnerable through kernel version 6.1.12. The connected Nessus plugin notes Linux distros unpatched for CVE-2023-26242, indicating there is no ...

CVE-2016-6828

The vulnerability CVE-2016-6828 affects the Linux kernel and is triggered by a local attacker exploiting a use-after-free in the TCP transmit path. Specifically, the tcp_check_send_head path in include/net/tcp.h leaves SACK state in an inconsistent condition after a failed data copy, enabling a l...

CVE-2022-1263

CVE-2022-1263 is a Linux kernel KVM NULL pointer dereference bug that triggers when releasing a vCPU with dirty ring support enabled. An unprivileged local attacker on the host can issue specific ioctl calls to cause a kernel oops and DoS. Public advisories (e.g., Amazon Linux 2 ALAS2KERNEL-5.15-...

CVE-2024-50133

CVE-2024-50133 (LoongArch Linux kernel) : The issue occurs when a task without a vDSO mapping (e.g., kthreads) calls stack_top(), dereferencing a NULL vdso pointer and crashing. Reported in the Linux kernel with a concrete path, including kunit-related stack traces, indicating the root cause is a...

CVE-2017-17449

CVE-2017-17449 affects the Linux kernel: the __netlink_deliver_tap_skb function in net/netlink/af_netlink.c can allow local attackers with CAP_NET_ADMIN to sniff Netlink activity across all net namespaces when CONFIG_NLMON is enabled. This results in information disclosure (exposure of kernel Net...

CVE-2017-9076

CVE-2017-9076 is a Linux kernel issue reported in the CentOS/Red Hat advisory set (CESA-2018:1854) tied to the IPv6 DCCP implementation. The vulnerability arises from mishandling of inheritance in the IPv6 DCCP code, allowing a local attacker to cause a denial of service or possibly other unspeci...

CVE-2018-14625

The CVE-2018-14625 entry describes a Linux kernel vulnerability in the vsock (AF_VSOCK) implementation. A race condition between connect() and close() can lead to a use-after-free that may enable a local attacker running inside a guest VM to read kernel memory (information leak) or potentially in...

CVE-2018-6554

CVE-2018-6554 describes a memory leak in the Linux kernel’s irda_bind path (net/irda/af_irda.c and later staging/irda/net/af_irda.c). A local user can cause memory exhaustion by repeatedly binding an AF_IRDA socket, leading to denial of service. The vulnerability exists in kernels prior to 4.17 a...

CVE-2022-1195

CVE-2022-1195 describes a use-after-free in the Linux kernel driver for hamradio (drivers/net/hamradio), specifically involving the mkiss and sixpack paths. The flaw allows a local attacker with user privileges to trigger a denial of service when the mkiss/sixpack device is detached and resources...

CVE-2022-3303

CVE-2022-3303 is a race-condition vulnerability in the Linux kernel sound subsystem (SNDCTL_DSP_SYNC ioctl) that can cause a NULL pointer dereference and denial of service via a locally privileged user. The issue affects the Linux kernel’s sound code path and can crash the system, potentially ena...

CVE-2023-0458

CVE-2023-0458 describes a speculative pointer dereference in the Linux kernel’s do_prlimit() path. The vulnerable path uses a controlled resource argument in pointer arithmetic for the rl im variable, enabling leakage of kernel contents when exploited. The Astra Linux security bulletin corroborat...

CVE-2023-52594

CVE-2023-52594 (Linux kernel) involves a potential array-index-out-of-bounds read in the ath9k_htc_txstatus() path of the wifi/ath9k driver. The issue occurs when txs->cnt (data from a URB from a USB device) exceeds HTC_MAX_TX_STATUS (12); UBSAN reports index 13 out of range. The code path lac...

CVE-2023-6040

CVE-2023-6040 is an out-of-bounds access in the Linux kernel netfilter nf_tables code. The issue arises when creating a new nf_tables table with an invalid nf_tables family value (pf), leading to out-of-bounds access in nf_tables_newtable. The vulnerability is classified as LOCAL with high impact...

CVE-2024-56782

Technical details about CVE-2024-56782 are not provided in the supplied documents. The materials reference the patch description but do not include product/version/impact specifics or exploitation context.

CVE-2015-9289

Mode C: CVE-2015-9289 affects the Linux kernel (drivers/media/dvb-frontends/cx24116.c). A buffer overflow can occur when validating userspace parameters for DiSEqC commands: the API specifies a maximum of 6, but code accepts values up to 23. This is in kernels before 4.1.4; the fix is in Linux 4....

CVE-2017-10810

CVE-2017-10810: Linux kernel memory leak in virtio_gpu_object_create (drivers/gpu/drm/virtio/virtgpu_object.c) up to 4.11.8 can cause memory exhaustion and denial of service when object initialisation fails. Connected Nessus advisories (Unity Linux UTSA-2026-002867/002763/000604) reproduce the sa...

CVE-2019-15222

CVE-2019-15222 entry is rejected/not used and not an active vulnerability.

CVE-2019-19807

CVE-2019-19807 affects the Linux kernel before 5.3.11, due to a use-after-free in sound/core/timer.c (snd_timer_open/snd_timer_close_locked). The timeri variable was repurposed during a refactor, leading to a faulty lifecycle for a new timer instance. Connected sources confirm an upstream fix imp...

CVE-2019-3901

CVE-2019-3901 describes a race condition in perf_event_open() that can leak data from setuid processes. The root cause is that cred_guard_mutex is not held during the ptrace_may_access() check, allowing a target task to execve() with setuid execution before perf_event_alloc() attaches, bypassing ...

CVE-2023-28466

Summary: CVE-2023-28466 affects the Linux kernel up to 6.2.6, where do_tls_getsockopt in net/tls/tls_main.c can race due to a missing lock_sock, causing a use-after-free or NULL pointer dereference. The condition is a local, kernel‑level issue with potential crashes or memory corruption as descri...

CVE-2023-6622

CVE-2023-6622 : A null pointer dereference in nft_dynset_init() of net/netfilter/nft_dynset.c (nf_tables) allows a local attacker with CAP_NET_ADMIN to trigger a denial of service. Affected: Linux kernel nf_tables/nft_dynset; impact: local DoS; exploitability: LOCAL, requires privileges, no user ...

CVE-2024-46781

CVE-2024-46781 : Linux kernel nilfs2 use-after-free during rollforward recovery error. If recovery logs are partially written (dsync) and an error occurs before the log writer starts, inodes with recovered data may remain in ns_dirty_files and not be freed. The patch adds cleanup of inodes that h...

CVE-2019-15794

CVE-2019-15794 describes a refcount underflow in the overlayfs/shiftfs error path when used with aufs patches. Specifically, both the Overlayfs and shiftfs patches in the Ubuntu 5.0 and 5.3 kernel series replace vma->vm_file in mmap handlers, and on error do not restore the original value; the...