CVE-2018-1094

CVE-2018-1094 affects the Linux kernel ext4 subsystem: the ext4_fill_super routine in fs/ext4/super.c up to version 4.15.15 does not reliably initialize the crc32c checksum driver, enabling a crafted ext4 image to trigger a NULL pointer dereference in ext4_xattr_inode_hash and cause a denial of s...

CVE-2020-10781

CVE-2020-10781 affects the Linux kernel ZRAM module: a local attacker who can read /sys/class/zram-control/hot_add can create ZRAM device nodes in /dev, and repeated reads can allocated memory and trigger OOM killer, potentially making the system inoperable. Connected advisories (e.g., ALAS2KERNE...

CVE-2020-29371

CVE-2020-29371 affects Linux kernel romfs_dev_read (fs/romfs/storage.c) prior to 5.8.4, where uninitialized memory leaks to userspace. The vulnerability stems from uninitialized memory paths, enabling leakage to user space. Affected component is the ROMFS code in the kernel; no exploit details ar...

CVE-2022-45919

The CVE-2022-45919 entry affects the Linux kernel (through 6.0.10), specifically the DVB core driver path drivers/media/dvb-core/dvb_ca_en50221.c, where a use-after-free can occur after a disconnect following an open due to lack of a wait_event. Connected Astra Linux bulletin confirms the same ro...

CVE-2023-6040

CVE-2023-6040 is an out-of-bounds access in the Linux kernel netfilter nf_tables code. The issue arises when creating a new nf_tables table with an invalid nf_tables family value (pf), leading to out-of-bounds access in nf_tables_newtable. The vulnerability is classified as LOCAL with high impact...

CVE-2024-50133

CVE-2024-50133 (LoongArch Linux kernel) : The issue occurs when a task without a vDSO mapping (e.g., kthreads) calls stack_top(), dereferencing a NULL vdso pointer and crashing. Reported in the Linux kernel with a concrete path, including kunit-related stack traces, indicating the root cause is a...

CVE-2017-7518

CVE-2017-7518: In the Linux kernel before 4.12, the KVM module mishandles the trap-flag TF in EFLAGS during syscall emulation, causing a debug exception (#DB) on the guest stack. This could allow a user/process inside a guest to escalate privileges within the guest (Linux guests only; host kernel...

CVE-2020-26088

CVE-2020-26088 affects the Linux kernel up to version 5.8.2, where a missing CAP_NET_RAW check in NFC socket creation (net/nfc/rawsock.c) could let a local attacker create raw sockets and bypass security mechanisms. This is demonstrated in multiple Nessus advisories (Unity Linux/OpenSUSE/EulerOS ...

CVE-2021-29646

CVE-2021-29646 involves the Linux kernel, where the function tipc_nl_retrieve_key in net/tipc/node.c shows insufficient validation of data sizes. Connected docs confirm concrete details: affected component is the kernel tipc subsystem, with a fix implemented in kernel 5.11.11 (and Fedora/Mariner ...

CVE-2024-46781

In the Linux kernel, CVE-2024-46781 concerns nilfs2: a use-after-free could occur during rollforward recovery if an error happens before the log writer starts and recovered inodes are left in the ns_dirty_files list. The fix cleans up inodes that have recovered data when the recovery path fails m...

CVE-2012-0056

No public technical details about CVE-2012-0056 are present in the connected documents; the Fedora announcements do not expose affected products, versions, or fixes. Monitor for updates.

CVE-2020-28941

CVE-2020-28941 affects the Linux kernel’s Speakup screen reader (drivers/accessibility/spk_ttyio.c) up to version 5.9.9. Local attackers could trigger a denial of service by an invalid free when the line discipline is used more than once, leading to a system crash. The issue is confirmed in multi...

CVE-2020-29369

CVE-2020-29369 is a real Linux kernel vulnerability described in the connected docs. It is a race condition in mm/mmap.c (expand_downwards vs. expand_upwards) that can occur during munmap page-table free operations, present in Linux kernels before 5.7.11 (CID-246c320a8cfe). The issue is triggered...

CVE-2021-3428

CVE-2021-3428 describes a Linux kernel flaw in ext4: crafting an ext4 extent can overflow an integer in fs/ext4/extents.c (ext4_es_cache_extent), potentially allowing a local attacker with a privileged user to crash the system and cause an availability impact. Connected Nessus entry (UNITY_LINUX_...

CVE-2023-0458

CVE-2023-0458 describes a speculative pointer dereference in the Linux kernel’s do_prlimit() path. The vulnerable path uses a controlled resource argument in pointer arithmetic for the rl im variable, enabling leakage of kernel contents when exploited. The Astra Linux security bulletin corroborat...

CVE-2016-2384

The CVE-2016-2384 issue affects the Linux kernel (snd_usbmidi_create in sound/usb/midi.c) prior to 4.5, caused by a double-free when handling an invalid USB descriptor. This can enable physically proximate attackers to trigger a denial of service (panic) or potentially other unspecified impacts. ...

CVE-2018-13095

CVE-2018-13095 affects the Linux kernel up to 4.17.3 in fs/xfs/libxfs/xfs_inode_buf.c. A corrupted XFS image with an inode in extent format that has more extents than fit in the inode fork can trigger memory corruption and a bug (DoS). The connected advisories (Unity Linux, various Nessus plugins...

CVE-2019-18811

CVE-2019-18811 : A memory leak in the Linux kernel’s sound/soc/sof/ipc.c function sof_set_get_large_ctrl_data() (triggered by sof_get_ctrl_copy_params() failures) can cause memory consumption leading to Denial of Service. Affected versions are up to 5.3.9; the root cause is a memory leak in sof_s...

CVE-2021-28715

CVE-2021-28715 concerns the Linux kernel netback driver in Xen guests. The Xen netback path buffers incoming guest data until the guest processes it, and although there are safeguards to limit buffering, an attacker running in a guest can bypass them. Specifically, when using UDP on a fast interf...

CVE-2023-26242

CVE-2023-26242 concerns an integer overflow in afu_mmio_region_get_by_offset located in drivers/fpga/dfl-afu-region.c of the Linux kernel, reported to be vulnerable through kernel version 6.1.12. The connected Nessus plugin notes Linux distros unpatched for CVE-2023-26242, indicating there is no ...

CVE-2023-28772

Summary of CVE-2023-28772 : The Linux kernel prior to 5.13.3 contains a vulnerability in lib/seq_buf.c: seq_buf_putmem_hex exploitable via a buffer overflow in the seq_buf_putmem_hex path. This could allow a local attacker to overflow a buffer and potentially crash or corrupt kernel memory, with ...

CVE-2024-27012

CVE-2024-27012 is a Linux kernel nf_tables issue (nft_mapelem_deactivate) where restore of refcounts and next-generation bits during abort/delete paths could misbehave, potentially enabling local impact. Connected advisories confirm this is addressed in patched kernel releases across distros (e.g...

CVE-2024-42154

CVE-2024-42154 : In the Linux kernel, the vulnerability is in tcp_metrics: validate source addr length. The issue is that TCP_METRICS_ATTR_SADDR_IPV4 may be stored with fewer than 4 bytes and the policy lacks an entry for this attribute (IPv6 similarly manually validated). Root cause: missing len...

CVE-2017-15868

The CVE-2017-15868 vulnerability affects the Linux kernel up to version 3.18 (pre-3.19). The issue lies in bnep_add_connection() in net/bluetooth/bnep/core.c, which does not ensure an l2cap socket is available, enabling local users to gain privileges through a crafted application. Affected compon...

CVE-2018-10938

CVE-2018-10938 is a DoS in the Linux kernel (present since v4.0-rc1 to v4.13-rc4) where a crafted remote network packet can force an infinite loop in cipso_v4_optptr() (net/ipv4/cipso_ipv4.c). Exploitation requires a non-default LSM/NetLabel configuration. The issue is triggered by network packet...

CVE-2018-5344

CVE-2018-5344 : The Linux kernel vulnerability affects the driver code at drivers/block/loop.c, where improper lo_release serialization can lead to a use-after-free in __lock_acquire. This can cause a local denial of service (system crash) and may have unspecified other impact. The description in...

CVE-2022-1263

CVE-2022-1263 is a Linux kernel KVM NULL pointer dereference bug that triggers when releasing a vCPU with dirty ring support enabled. An unprivileged local attacker on the host can issue specific ioctl calls to cause a kernel oops and DoS. Public advisories (e.g., Amazon Linux 2 ALAS2KERNEL-5.15-...

CVE-2022-32296

CVE-2022-32296 affects the Linux kernel where, prior to 5.17.9, the TCP source port selection (Algorithm 4, Double-Hash Port Selection from RFC 6056) can allow a remote or local observer to identify clients by observed source ports. Connected advisories confirm the issue in kernel ments and note ...

CVE-2022-48627

The Linux kernel contains a memory overlapping vulnerability in the vt component when deleting characters from a buffer. This occurs because scr_memcpyw can be optimized to memcpy , which does not guarantee safe behavior when the source and destination buffers overlap, potentially leading to data...

CVE-2023-1390

CVE-2023-1390 is a remote DoS in the Linux kernel TIPC module. The advisory describes a flaw in tipc_link_xmit() where a loop encounters an unknown state while parsing SKBs not in the queue, and sending two small UDP packets to a system with a UDP bearer can cause CPU utilization to spike to 100%...

CVE-2024-53122

CVE-2024-53122 affects the Linux kernel mptcp subsystem. A race during subflow creation in mptcp_rcv_space_adjust could cause a racing recvmsg() to trigger tcp_cleanup_rbuf() on all current subflows, potentially leading to a divide-by-zero in newly created subflows. The fix explicitly checks subf...

CVE-2017-18203

The vulnerability CVE-2017-18203 affects the Linux kernel in the DM (device-mapper) path: dm_get_from_kobject() in drivers/md/dm.c is vulnerable to a race with __dm_destroy during creation/removal of DM devices. Exploitation from a local attacker could cause a Denial of Service. Affected are kern...

CVE-2023-1652

CVE-2023-1652 refers to a use-after-free in nfsd4_ssc_setup_dul (fs/nfsd/nfs4proc.c) of the Linux kernel’s NFS subsystem that can let a local attacker crash the system or leak kernel information. Connected advisories confirm the issue exists in the Linux kernel and indicate remediation via kernel...

CVE-2023-2598

The CVE-2023-2598 issue arises from a flaw in Linux kernel io_uring buffer registration (io_sqe_buffer_register) that can trigger out-of-bounds access to physical memory beyond the end of the buffer, enabling local privilege escalation. Public discussions and PoC-like exploits demonstrate local e...

CVE-2023-52827

CVE-2023-52827 concerns the Linux kernel’s wifi ath12k code. The issue is a potential out-of-bounds read in ath12k_htt_pull_ppdu_stats(), caused by len being extracted from an HTT message without sufficient validation; an unexpected value could occur during message iteration/parsing. The same ris...

CVE-2024-56595

CVE-2024-56595 concerns the Linux kernel JFS (Journaling File System) code path in dbAdjTree. The issue is an array-index-out-of-bounds that can occur when lp is 0 at the start of a for loop, which may become negative on the next assignment if not bailed out. The available connected documents con...

CVE-2024-50055

In CVE-2024-50055, the vulnerability is in the Linux kernel's driver core: bus_register() can double-free @priv after kset_register() if an error occurs, freeing it twice. The fix is to set @priv to NULL after the first free to prevent a second free. This mode C entry is supported by connected do...

CVE-2024-50264

CVE-2024-50264 affects the Linux kernel, specifically the vsock/virtio path where a dangling pointer can be created in vsk->trans during loopback, enabling a Use-After-Free as described. The issue is resolved by initializing vsk->trans to NULL. Connected advisories (Astra Linux, ALAS2LIVEPA...

CVE-2026-43037

CVE-2026-43037 affects the Linux kernel; vulnerability arises from ip4ip6_err() using a cloned skb where the IPv6 receive path writes cb[] as inet6_skb_parm, which is then misinterpreted as IPv4 inet_skb_parm by __ip_options_echo(), causing a potential data leak/compromise. The fix includes clear...

CVE-1999-0061

CVE-1999-0061 concerns the BSD line printer daemon (lpd). Multiple sources confirm a vulnerability in lpd related to file creation and deletion and remote execution. Affected software is BSD-derived lpd implementations; the root cause is not explicitly detailed in the provided documents. Reported...

CVE-2010-4249

CVE-2010-4249 affects the Linux kernel before 2.6.37-rc3-next-20101125: the wait_for_unix_gc routine in net/unix/garbage.c does not properly select times for garbage-collecting inflight sockets, enabling local users to cause a denial of service (system hang) by crafting socketpair and sendmsg cal...

CVE-2021-20239

CVE-2021-20239 describes a flaw in the Linux kernel prior to 5.4.92 within the BPF protocol. A local attacker can leak information about kernel internal addresses, impacting confidentiality. The issue is tied to the BPF verifier/run-time handling and does not require remote access. Affected produ...

CVE-2022-1195

CVE-2022-1195 describes a use-after-free in the Linux kernel driver for hamradio (drivers/net/hamradio), specifically involving the mkiss and sixpack paths. The flaw allows a local attacker with user privileges to trigger a denial of service when the mkiss/sixpack device is detached and resources...

CVE-2022-3586

CVE-2022-3586 : A use-after-free in the Linux kernel networking path (sch_sfb enqueue function using SKB cb field after enqueueing/freeding into a child qdisc) allows a local, unprivileged user to crash the system, causing a denial of service. Affected component: kernel networking code; root caus...

CVE-2022-3649

CVE-2022-3649 affects the Linux kernel (nilfs_new_inode in fs/nilfs2/inode.c, component BPF). The issue is a use-after-free in nilfs_new_inode that can be triggered remotely, per the initial document and connected advisories. A patch exists to fix this issue (references include a kernel commit ID...

CVE-2022-40768

CVE-2022-40768 affects the Linux kernel (through 5.19.9) where stex_queuecommand_lck does not memset for the PASSTHRU_CMD path, enabling local users to read kernel memory. Affected: drivers/scsi/stex.c in the kernel. Impact: information disclosure from kernel memory; local, low complexity, no use...

CVE-2023-3161

CVE-2023-3161 : Linux Kernel fbcon has a shift-out-of-bounds in fbcon_set_font when font->width/height > 32, causing undefined behavior and potential denial of service. Connected documents corroborate the same fbcon font handling issue in the Linux kernel. The Astra Linux bulletin mentions ...

CVE-2023-33203

The CVE-2023-33203 entry concerns the Linux kernel prior to version 6.2.9, where a race condition can lead to a use-after-free in drivers/net/ethernet/qualcomm/emac/emac.c when a physically proximate attacker unplugs an emac device. Affected software: Linux kernel up to 6.2.9 (including distribut...

CVE-2024-27013

CVE-2024-27013 affects the Linux kernel tun subsystem. When vhost_worker calls tun callbacks to receive packets, excessive illegal packets trigger tun_do_read to dump packet contents, causing high CPU usage and potential soft lockups. The advisory notes using the net_ratelimit mechanism to cap su...

CVE-2024-36016

CVE-2024-36016 is a Linux kernel vulnerability affecting the tty n_gsm path (gsm0_receive, gsm1_receive). The advisory details a possible out-of-bounds write when switching between basic/advanced option modes and not resetting state, length, or MRU across reconfigurations. The fixed code changes ...