CVE-2024-53055

The CVE-2024-53055 issue affects the Linux kernel’s wifi: iwlwifi mvm 6 GHz scanning. It was caused by a loop variable of type u8 in the 6 GHz scan construction, which could loop forever when more than 255 colocated APs are found during 2.4/5 GHz scanning. The code was changed to use a u32 loop v...

CVE-2019-19602

CVE-2019-19602 – Linux kernel fpregs_state_valid cache issue : In arch/x86/include/asm/fpu/internal.h, the fpu_fpregs_owner_ctx caching can mishandle signal-based preemption when compiling with GCC 9, on amd64, leading to context-dependent attackers causing a memory corruption DoS and potentially...

CVE-2020-14416

CVE-2020-14416 is a Linux kernel issue fixed in 5.4.16. A race condition in tty->disc_data handling for slip and slcan line disciplines can cause a use-after-free, affecting drivers/net/slip/slip.c and drivers/net/can/slcan.c. The connected Nessus advisories reproduce the vulnerability across ...

CVE-2022-33743

CVE-2022-33743 maps to a Xen netfront memory-handling issue in the Linux kernel where SKBs with retained references can be freed, caused by a label move while adding XDP support. This can lead to use-after-free in the network backend and a potential Denial of Service when interacting with the Xen...

CVE-2023-1281

CVE-2023-1281 is a Linux kernel use-after-free in the traffic control index filter (tcindex) that permits local privilege escalation to root. The vulnerability stems from updating an imperfect hash area while packets traverse; a use-after-free occurs when tcf_exts_exec() accesses a destroyed tcf_...

CVE-2024-26777

CVE-2024-26777 concerns Linux kernel fbdev drivers (sis and savage) where pixclock may be used as a divisor before being validated, enabling a divide-by-zero error via user-supplied ioctl values. The root cause is that pixclock is used in calculations (e.g., drate) before a zero check, with fixes...

CVE-2016-6828

The vulnerability CVE-2016-6828 affects the Linux kernel and is triggered by a local attacker exploiting a use-after-free in the TCP transmit path. Specifically, the tcp_check_send_head path in include/net/tcp.h leaves SACK state in an inconsistent condition after a failed data copy, enabling a l...

CVE-2017-6001

CVE-2017-6001 is a Linux kernel race condition in the perf_events subsystem. The initial description notes a race between concurrent perf_event_open calls for moving a software group into a hardware context, allowing local privilege escalation and tied to an incomplete fix for CVE-2016-6786. Conn...

CVE-2018-6554

CVE-2018-6554 describes a memory leak in the Linux kernel’s irda_bind path (net/irda/af_irda.c and later staging/irda/net/af_irda.c). A local user can cause memory exhaustion by repeatedly binding an AF_IRDA socket, leading to denial of service. The vulnerability exists in kernels prior to 4.17 a...

CVE-2019-19078

CVE-2019-19078 refers to a memory leak in the ath10k_usb_hif_tx_sg() function (drivers/net/wireless/ath/ath10k/usb.c) of the Linux kernel up to 5.3.11. An attacker can cause denial of service via memory consumption by triggering usb_submit_urb() failures. The vulnerability is scoped to the kernel...

CVE-2023-1838

The CVE-2023-1838 entry centers on a use-after-free flaw in the Linux kernel’s vhost_net_set_backend (drivers/vhost/net.c, virtio network subcomponent) caused by a double fget. This can allow a local attacker to crash the system and potentially leak kernel information. Connected documents (Astra ...

CVE-2024-0841

CVE-2024-0841 : A null pointer dereference in the Linux kernel hugetlbfs (HugeTLB pages) causes local crash and could potentially enable privilege escalation via hugetlbfs_fill_super. Connected sources confirm the flaw is in the hugetlbfs path of the kernel. The available documents do not provide...

CVE-2024-26808

The CVE-2024-26808 issue affects the Linux kernel netfilter nft_chain_filter logic. When NETDEV_UNREGISTER is reported, the fix removes the netdevice from the inet/ingress basechain to prevent a stale reference in the hook list. The vulnerability is exploitable locally (attack vector LOCAL) with ...

CVE-2024-26984

A race condition in the nouveau kernel component allows a NULL pointer dereference when accessing the pt->memory->ptrs field. This occurs during the nv50_instobj_acquire function call (initiated by nvkm_kmap) because the refcount_set operation is unordered, potentially allowing a concurrent...

CVE-2024-45000

The CVE-2024-45000 entry concerns the Linux kernel component fs/netfs/fscache_cookie. Technical details in connected docs show a NULL pointer dereference caused by a data race when a non-zero n_accesses counter was present during concurrent cookie withdrawal and cache write preparation. The under...

CVE-2024-53096

CVE-2024-53096: Linux kernel patch resolves faulty mmap_region() error path. Key changes move core logic into __mmap_region(), perform upfront validations, and unwind writable/ seal checks earlier. Effects include preallocating iterator state before file-backed hooks, early handling of mapping_ma...

CVE-2015-9289

Mode C: CVE-2015-9289 affects the Linux kernel (drivers/media/dvb-frontends/cx24116.c). A buffer overflow can occur when validating userspace parameters for DiSEqC commands: the API specifies a maximum of 6, but code accepts values up to 23. This is in kernels before 4.1.4; the fix is in Linux 4....

CVE-2017-18174

In Linux kernel before 4.7, the amd_gpio_remove function in drivers/pinctrl/pinctrl-amd.c calls pinctrl_unregister, leading to a double free. Affected: kernels prior to 4.7 (various distributions). The issue was addressed in later kernel updates (e.g., commits from Linus Torvalds’ tree referenced...

CVE-2017-18249

CVE-2017-18249 affects the Linux kernel’s f2fs implementation: the add_free_nid function in fs/f2fs/node.c fails to properly track an allocated nid, enabling local attackers to cause a denial of service via a race condition (and potentially other impact) when multiple threads run concurrently. Af...

CVE-2018-18690

CVE-2018-18690 pertains to the Linux kernel before 4.17 where a local attacker able to set attributes on an xfs filesystem could render the filesystem non-operational until remount by triggering an unchecked error during an xfs attribute change. The root cause is mishandling of ATTR_REPLACE in xf...

CVE-2019-15222

CVE-2019-15222 entry is rejected/not used and not an active vulnerability.

CVE-2019-19807

CVE-2019-19807 affects the Linux kernel before 5.3.11, due to a use-after-free in sound/core/timer.c (snd_timer_open/snd_timer_close_locked). The timeri variable was repurposed during a refactor, leading to a faulty lifecycle for a new timer instance. Connected sources confirm an upstream fix imp...

CVE-2022-40307

CVE-2022-40307 is a Linux kernel issue in drivers/firmware/efi/capsule-loader.c that creates a race condition with a resulting use-after-free . Connections show multiple references: Debian’s LTS advisory for linux-5.10 includes CVE-2022-40307 among the listed fixes, indicating affected kernel ser...

CVE-2022-42329

CVE-2022-42329 concerns the Linux xen-netback driver. The description shows a potential deadlock when freeing the SKB of a dropped packet under the XSA-392 handling (also tied to CVE-2022-42328) and also when dropping packets if netpoll is active on the connected interface, risking a deadlock in ...

CVE-2023-1476

CVE-2023-1476 refers to a Linux kernel vulnerability affecting the mm/mremap path. A use-after-free occurs due to a race between rmap walk and mremap, enabling a local user to crash the system and potentially escalate privileges by exploiting a stale TLB during a PUD move. Connected documents ide...

CVE-2023-3212

CVE-2023-3212 affects the Linux kernel gfs2 file system. A NULL pointer dereference occurs on corrupt gfs2 filesystems when the evict path references the journal descriptor structure after it has been freed, enabling a local privileged user to trigger a kernel panic. Affected: Linux kernel with g...

CVE-2023-3640

CVE-2023-3640 – summary (Linux kernel x86 per-CPU entry area leak) A local memory leakage flaw was identified in the Linux kernel’s cpu_entry_area mapping for X86, enabling a local user to infer addresses of exception stacks and other kernel data. The vulnerability stems from partial randomness o...

CVE-2024-36013

CVE-2024-36013 affects the Linux kernel Bluetooth L2CAP path (l2cap_connect). The issue is a slab-use-after-free in the l2cap_connect() path where a chan can be freed while still referenced, causing use-after-free in the chan_conf_state. The fix extends the critical section around chan lifecycle ...

CVE-2014-8559

CVE-2014-8559 is tied to the Linux kernel up to version 3.17.2, where the d_walk function in fs/dcache.c fails to properly preserve the semantics of rename_lock. This can allow a local attacker to cause a denial of service via a deadlock and system hang. The connected advisories state that the is...

CVE-2018-5332

CVE-2018-5332 affects the Linux kernel up to version 3.2, where rds_message_alloc_sgs() does not validate a value used during DMA page allocation, causing a heap-based out-of-bounds write in net/rds/rdma.c (via rds_rdma_extra_size). Exploitation would rely on local access to trigger DMA-related a...

CVE-2019-3901

CVE-2019-3901 describes a race condition in perf_event_open() that can leak data from setuid processes. The root cause is that cred_guard_mutex is not held during the ptrace_may_access() check, allowing a target task to execve() with setuid execution before perf_event_alloc() attaches, bypassing ...

CVE-2023-4015

CVE-2023-4015 describes a use-after-free in the Linux kernel nf_tables component of netfilter, enabling local privilege escalation. The issue arises when building a nftables rule: deactivating immediate expressions in nft_immediate_deactivate() can unbind a chain and deactivate objects that are l...

CVE-2024-49974

CVE-2024-49974 : In the Linux kernel NFSD, there was no limit on concurrent async COPY operations, enabling potential DoS as each async COPY could create many 4MB chunks and run long. A fix introduces a simple per-namespace restriction to bound concurrent background COPY operations. When the limi...

CVE-2024-53162

Linux kernel vulnerability CVE-2024-53162 in crypto: qat/qat_4xxx driver. Off-by-one in uof_get_name() can trigger out-of-bounds read when iterating fw_objs[] (/fw_objs has num_objs elements). The fix changes a comparison from > to >= to prevent reading beyond the array. No exploitation det...

CVE-2025-21866

CVE-2025-21866 : In the Linux kernel, PowerPC text patching infrastructure allocated a virtual area and marked it VM_ALLOC, which is inappropriate since that memory is not vmalloc’d and isn’t initialized until __vmalloc_node_range() is called. This caused KASAN: vmalloc-out-of-bounds when booting...

CVE-2016-9793

The CVE-2016-9793 issue affects the Linux kernel 4.8.x lineage prior to 4.8.14. The sock_setsockopt implementation in net/core/sock.c mishandles negative values for sk_sndbuf and sk_rcvbuf, enabling a local attacker with CAP_NET_ADMIN to trigger memory corruption and a potential denial of service...

CVE-2017-18216

CVE-2017-18216 affects the Linux kernel's OCFS2 nodemanager.c: a required mutex is not used, enabling local attackers to trigger a NULL pointer dereference/BUG and cause denial of service. The issue exists in kernel versions before 4.15. Exploitation is local; no remote vector noted in the provid...

CVE-2019-12381

CVE-2019-12381 affects the Linux kernel (ip_ra_control in net/ipv4/ip_sockglue.c) up to version 5.1.5. It describes an unchecked kmalloc for new_ra, which could cause a NULL pointer dereference and system crash (DoS). NOTE: some sources dispute this because new_ra is not used if it is NULL. The c...

CVE-2019-19816

CVE-2019-19816 affects the Linux kernel 5.0.21: mounting a crafted btrfs image can trigger a slab-out-of-bounds write in __btrfs_map_block in fs/btrfs/volumes.c due to mishandling of the data stripes value = 1. The connected Nessus advisory blocks (Unity Linux UTSA-2026-004332 and related plugin ...

CVE-2021-45480

Mode C: CVE-2021-45480 affects the Linux kernel up to 5.15.10 (before 5.15.11). Root cause: memory leak in __rds_conn_create() in net/rds/connection.c under certain conditions. Impact: potential memory leak; CVE details state a leak rather than remote code execution. Public references note mitiga...

CVE-2022-25375

CVE-2022-25375 affects the Linux kernel rndis gadget: the RNDIS_MSG_SET size is not validated, allowing information disclosure from kernel memory. Affected: kernels prior to 5.16.10. Remediation: apply upstream patch in 5.16.10+; Debian advisories note fixes in stable branches (e.g., 5.10.x/Bulls...

CVE-2024-26772

CVE-2024-26772: In the Linux kernel, the fix prevents allocating blocks from a corrupted ext4 group. The patch moves the block bitmap integrity check under the group lock in ext4_mb_find_by_goal(), ensuring blocks are not allocated from a group with a corrupted bitmap. This mitigates a local-priv...

CVE-2015-3636

CVE-2015-3636 affects the Linux kernel up to 4.0.2, in the ping_unhash path of net/ipv4/ping.c. The issue arises because a certain list data structure is not initialized during an unhash operation, enabling a local user with ping socket access to crash the system or potentially gain privileges by...

CVE-2016-3134

The CVE-2016-3134 issue affects the Linux kernel netfilter/ip_tables.c, where the mark_source_chains() path can process an IPT_SET_REPLACE entry with an unvalidated next_offset. This can lead to out-of-bounds writes that enable local privilege escalation or cause a denial of service (heap memory ...

CVE-2020-25220

CVE-2020-25220 is a Linux kernel local-use-after-free vulnerability in the cgroup subsystem caused by not accounting for skcd->no_refcnt during a backport of CVE-2020-14356. Affects 4.9.x (before 4.9.233), 4.14.x (before 4.14.194), and 4.19.x (before 4.19.140). The issue originates from backpo...

CVE-2021-4204

Technical details for CVE-2021-4204 are not publicly provided in the supplied documents. Please monitor for updates from connected sources; current materials mention a Linux kernel memory access flaw but do not specify affected versions or fixes here.

CVE-2022-33740

Summary: The CVE-2022-33740 issue concerns the Linux Block and Network PV device frontends leaking data to the backend. The root cause described in the sources is that memory regions are not zeroed before sharing with the backend, and the grant-table granularity (4K pages) means data from differe...

CVE-2023-35823

CVE-2023-35823 is a use-after-free in the Linux kernel before 6.3.2, specifically in saa7134_finidev() within drivers/media/pci/saa7134/saa7134-core.c. Astra Linux and related entries confirm the same vulnerability class and location (saa7134-core.c). The risk is high (local attack vector, as per...

CVE-2024-26633

In the Linux kernel, the following vulnerability has been resolved: ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim() syzbot pointed out [1] that NEXTHDR_FRAGMENT handling is broken. Reading frag_off can only be done if we pulled enough bytesto skb->head. Currently we mi...

CVE-2011-1083

The CVE-2011-1083 issue affects the Linux kernel epoll implementation (epoll_ctl/epoll_create) as shipped in 2.6.37.2 and earlier. Local attackers can cause CPU denial of service by crafting a user-space application that creates and manages epoll file descriptors, exploiting improper traversal of...