CVE-2011-1083

The CVE-2011-1083 issue affects the Linux kernel epoll implementation (epoll_ctl/epoll_create) as shipped in 2.6.37.2 and earlier. Local attackers can cause CPU denial of service by crafting a user-space application that creates and manages epoll file descriptors, exploiting improper traversal of...

CVE-2013-4312

The CVE-2013-4312 issue affects the Linux kernel prior to 4.4.1, where a local attacker could bypass per-process file-descriptor limits by sending descriptors over a local UNIX domain socket before closing them, causing memory exhaustion and potential denial of service. The root cause is the hand...

CVE-2019-15794

CVE-2019-15794 describes a refcount underflow in the overlayfs/shiftfs error path when used with aufs patches. Specifically, both the Overlayfs and shiftfs patches in the Ubuntu 5.0 and 5.3 kernel series replace vma->vm_file in mmap handlers, and on error do not restore the original value; the...

CVE-2020-29373

CVE-2020-29373 affects the Linux kernel (pre-5.6) in fs/io_uring.c, where the root directory is unsafely handled during path lookups inside a mount namespace, allowing a process to escape to unintended filesystem locations. The issue is confirmed by the CVE description and linked ChangeLog-5.6 an...

CVE-2021-20268

The CVE-2021-20268 entry is confirmed to affect the Linux kernel eBPF verifier, where an out-of-bounds access via dev_map_init_map or sock_map_alloc could crash the system or enable local privilege escalation. Affected are kernel implementations before fixes in public advisories; mitigation is to...

CVE-2021-45469

CVE-2021-45469 affects the Linux kernel’s f2fs file system implementation, specifically __f2fs_setxattr in fs/f2fs/xattr.c. When an inode’s last xattr entry is invalid, there is an out-of-bounds memory access. Documents indicate an attacker who can mount a crafted f2fs image could trigger denial ...

CVE-2024-42223

CVE-2024-42223: Linux kernel vulnerability in media: dvb-frontends/tda10048 where state->xtal_hz (up to 16M) could overflow a 32-bit integer when multiplied by pll_mfactor. A 64-bit variable was introduced to hold the calculations, preventing overflow. The issue is resolved by this 64-bit calc...

CVE-2024-50064

CVE-2024-50064 refers to a Linux kernel ZRAM issue: on reset of a zram device with multi-streams, the code failed to free memory by kfree()ing secondary algorithm names, causing a memory leak. The connected Azure Linux advisory and Miracle Linux Nessus entries confirm the vulnerability and refere...

CVE-2025-21683

CVE-2025-21683 affects the Linux kernel and patches a memory-leak in bpf_sk_select_reuseport() when using reuseport BPF programs. The underlying issue is that a sockmap lookup could return a TCP ESTABLISHED socket that previously had SO_ATTACH_REUSEPORT_EBPF, meaning a non-NULL sk_reuseport_cb di...

CVE-2019-12456

CVE-2019-12456 : A local double-fetch vulnerability in the Linux kernel, affecting the MPT3COMMAND path of _ctl_ioctl_main in drivers/scsi/mpt3sas/mpt3sas_ctl.c. The issue arises from reading ioc_number between two kernel reads, allowing a local attacker to trigger a denial of service or potentia...

CVE-2023-1195

CVE-2023-1195 is a Linux kernel use-after-free in reconn_set_ipaddr_from_hostname (fs/cifs/connect.c) where server->hostname is not cleared, enabling a denial-of-service condition via invalid pointer use. Connected advisories (e.g., RHSA entries, MiracleLinux AXSA banners) reference this CVE a...

CVE-2023-2002

CVE-2023-2002 affects the Linux kernel HCI sockets (net/bluetooth/hci_sock.c) due to a missing capability check. This can allow a local attacker to reconfigure Bluetooth interfaces and potentially leak information, disrupt connections, or spoof/deny service. Public documents confirm this CVE is l...

CVE-2023-2194

CVE-2023-2194 is an out-of-bounds write in the Linux kernel SLIMpro I2C driver. The userspace data->block[0] value was not capped to 0–255 and was used as the memcpy size, potentially writing beyond the end of dma_buffer. This could crash the host or, per some advisories, allow local privilege...

CVE-2024-36920

CVE-2024-36920 relates to a Linux kernel SCSI MPI3MR warning: a 128-byte memcpy was written into a 1-byte array (replay_buf[1]) in mpi3mr_bsg_in_reply_buf, triggering a field-spanning write warning. The description states the array is intended as a flexible length and the warning is a false posit...

CVE-2019-19082

CVE-2019-19082 : Memory leaks in the Linux kernel’s AMD display driver DC code allow memory exhaustion/DoS via multiple create_resource_pool() variants (dce120/dce110/dce100/dcn10/dce112_resource.c; CID-104c307147ad). Affects kernel up to 5.3.11; exploitation would be local and relies on resource...

CVE-2019-19083

CVE-2019-19083: In Linux kernel before 5.3.8, memory leaks in clock_source_create() under drivers/gpu/drm/amd/display/dc can cause memory exhaustion and DoS. Affects dce112_clock_source_create(), dce100_clock_source_create(), dcn10_clock_source_create(), dcn20_clock_source_create(), dce120_clock_...

CVE-2021-3732

CVE-2021-3732 is a local-privilege escalation/information-disclosure flaw in the Linux kernel OverlayFS subsystem affecting how TmpFS is mounted under OverlayFS, allowing a local user to reveal files hidden in the original mount. Connected docs corroborate the issue across multiple sources (Astra...

CVE-2022-45884

CVE-2022-45884: Linux kernel vulnerability in media/dvb-core/dvbdev.c that causes a use-after-free due to a race around dvb_register_device() when it dynamically allocates fops. The issue is local and could allow memory corruption or instability on affected kernels (through 6.0.9 as stated). Conn...

CVE-2023-52580

CVE-2023-52580 affects the Linux kernel net/core ETH_P_1588 flow dissector. When a PTP Ethernet raw frame larger than 256 bytes is followed by 0xff, the nhoff calculation uses hdr->message_length (0xffff) and may override nhoff, causing incorrect header length and a kernel crash. The disclosed...

CVE-2024-26901

CVE-2024-26901 is a Linux kernel information-leak vulnerability identified by syzbot in do_sys_name_to_handle, where uninitialized bytes were observed during copy to userspace. The issue was mitigated by replacing a kmalloc path with kzalloc, addressing uninitialized memory (Bytes 18–19) and rela...

CVE-2024-27017

CVE-2024-27017 relates to the Linux kernel netfilter nft_set_pipapo backend. According to the provided sources, a vulnerability arises because the generation mask can be updated while a netlink dump is in progress, causing the pipapo set backend walk iterator to rely on an inconsistent view of th...

CVE-2024-46740

CVE-2024-46740 affects the Linux kernel binder subsystem. The issue arises when copying raw data between binder objects during transactions: there is no bounds check for data outside the target data section, so excess raw data can overwrite the offsets section. This can corrupt object indices dur...

CVE-2019-19080

CVE-2019-19080 affects the Linux kernel (pre-5.3.4). The issue consists of four memory leaks in nfp_flower_spawn_phy_reprs() in drivers/net/ethernet/netronome/nfp/flower/main.c, leading to potential memory consumption and a denial of service. The public references confirm the vulnerable function ...

CVE-2023-52619

The CVE-2023-52619 issue affects the Linux kernel’s pstore/ram subsystem, where setting CPU count to an odd number causes zone_size to be odd, breaking address alignment and risking crashes when accessing zone memory. The documented fix uses ALIGN_DOWN() to ensure even zone sizes, preventing non‑...

CVE-2024-50154

The CVE-2024-50154 vulnerability is in the Linux kernel. Root cause: a use-after-free can occur in reqsk_timer_handler() when a race around timer_pending() in reqsk_queue_unlink() allows a timer to fire after the socket is closed. The fix prevents del_timer_sync() from being missed by removing ti...

CVE-2020-35519

CVE-2020-35519 is an out-of-bounds memory access in the Linux kernel, specifically in x25_bind() within net/x25/af_x25.c of v5.12-rc5. The bounds-check failure enables a local user to access out-of-bounds memory, potentially crashing the system or leaking kernel data. Connected advisories confirm...

CVE-2021-28714

Concrete details: CVE-2021-28714 and CVE-2021-28715 pertain to the Linux kernel netback driver in guests. Incoming packets for a guest are buffered until processing, with a long default client-side RX queue stall timeout (60 seconds) that can be bypassed; on fast UDP interfaces this can accumulat...

CVE-2021-3635

CVE-2021-3635 affects the Linux kernel netfilter implementation. The described flaw exists in versions prior to 5.5-rc7, where a user with root privileges (CAP_SYS_ADMIN) can panic the system when issuing netfilter netflow commands. The included sources (e.g., Unity Linux and MiracleLinux Nessus ...

CVE-2022-3619

CVE-2022-3619 is a memory-leak vulnerability in the Linux kernel Bluetooth subsystem (function l2cap_recv_acldata in net/bluetooth/l2cap_core.c). The Connected documents confirm the issue and its inclusion in kernel security advisories, and several sources list it among fixes in kernel updates. T...

CVE-2023-3090

CVE-2023-3090 is a Linux kernel vulnerability affecting the ipvlan driver. It causes a heap out-of-bounds write due to missing skb->cb initialization, and is exploitable when CONFIG_IPVLAN is enabled. The issue enables local privilege escalation as described in multiple sources (e.g., Astra Li...

CVE-2024-35966

CVE-2024-35966 (Linux kernel) : A Bluetooth RFCOMM vulnerability where rfcomm_sock_setsockopt_old() could copy data beyond the input length, due to not validating user input in setsockopt. This caused KASAN slab-out-of-bounds access in copy_from_sockptr_offset and related code paths in net/blueto...

CVE-2024-56614

Summary: CVE-2024-56614 in the Linux kernel fixes an out-of-bounds write in xsk_map_delete_elem where a user-controlled signed integer can bypass bounds checks due to unsigned/signed comparison, enabling an invalid map_entry access and potential memory corruption via xchg and subsequent operation...

CVE-2011-4621

The CVE-2011-4621 entry concerns the Linux kernel prior to 2.6.37, where a clock-update optimization is flawed, allowing a local user to cause a denial of service (system hang) by running code in a loop. Affected software is the Linux kernel up to version before 2.6.37; the description does not s...

CVE-2017-1000255

The connected Nessus entries confirm CVE-2017-1000255 affects PowerPC Linux kernels on Power8+ where a user can craft a signal frame and sigreturn to corrupt the kernel stack by using the r1 value from the signal frame. This can overwrite arbitrary kernel memory, causing an oops and potential pan...

CVE-2017-7482

CVE-2017-7482 affects the Linux kernel prior to 4.12. When Kerberos 5 tickets are decoded using RXRPC keys, the code incorrectly assumes the size of a field, causing the size-remaining calculation to wrap and the data pointer to extend past the buffer end. This can lead to memory corruption and p...

CVE-2019-16995

CVE-2019-16995 affects the Linux kernel prior to 5.0.3. The issue is a memory leak in hsr_dev_finalize() (net/hsr/hsr_device.c) that can occur if hsr_add_port fails to add a port, potentially leading to a denial of service. The vulnerability is not tied to a vendor product in the provided text be...

CVE-2022-27223

The CVE-2022-27223 entry concerns Linux kernel code, specifically the udc-xilinx USB gadget driver (drivers/usb/gadget/udc/udc-xilinx.c). Affected are kernel builds before 5.16.12 where the endpoint index is not validated and can be manipulated by the host to trigger out-of-array access. The desc...

CVE-2024-27014

CVE-2024-27014 affects the Linux kernel component net/mlx5e, where a deadlock could occur when disabling accelerated Receive Flow Steering (aRFS). The issue arises because a scheduled aRFS work item cancels under priv->state_lock, but the work handler later tries to reacquire that same lock, c...

CVE-2024-50047

CVE-2024-50047 affects the Linux kernel SMB client (CIFS) path: an issue in async decryption can cause a slab-use-after-free in the crypto API when performing large reads. Root cause: use of a single AEAD TFM in parallel for async decryption leads to UAF; fix allocates a new AEAD TFM for async de...

CVE-2016-10088

CVE-2016-10088 affects the Linux kernel sg path (block/bsg.c, drivers/scsi/sg.c) and is tied to KERNEL_DS handling. A local user could read/write arbitrary kernel memory or trigger use-after-free via /dev/sg, due to an incomplete fix for CVE-2016-9576. Connected advisories confirm the issue acros...

CVE-2016-8650

CVE-2016-8650 affects the Linux kernel: the mpi_powm function in lib/mpi/mpi-pow.c can fail to allocate memory for limb data, permitting a local attacker to trigger a denial of service (stack memory corruption/panic) via an add_key RSA operation with a zero exponent. Public advisories (F5) confir...

CVE-2017-7273

CVE-2017-7273 affects the Linux kernel, where cp_report_fixup in drivers/hid/hid-cypress.c (kernel 3.2 and 4.x before 4.9.4) allows physically proximate attackers to trigger a denial of service (integer underflow) via a crafted HID report. The issue is fixed in Linux kernel 4.9.4; remediation is ...

CVE-2021-4202

CVE-2021-4202 is a use-after-free in the NFC Controller Interface (NCI) path of the Linux kernel (nci_request in net/nfc/nci/core.c). A local attacker with user privileges could trigger a data race while the device is being removed, leading to privilege escalation. Connected advisories confirm th...

CVE-2022-0812

CVE-2022-0812 affects the Linux kernel NFS over RDMA (net/sunrpc/xprtrdma/rpc_rdma.c) enabling an information leak under normal user privileges. Miracle Linux AXSA-2024-8651 notes xprtrdma fixes for incorrect header size calculations, which is the specified remediation. Unity Linux entries list t...

CVE-2024-26640

CVE-2024-26640 — Linux kernel TCP rx zerocopy sanity checks (Mode C) Affects: Linux kernel TCP rx zerocopy path. Root cause: can_map_frag() lacked validation when mapping NIC-allocated pages, risking misuse of pages owned by filesystems. The patch adds two checks: (1) the page must not be a compo...

CVE-2024-44933

CVE-2024-44933 affects bnxt_en in the Linux kernel and describes a memory out-of-bounds risk in bnxt_fill_hw_rss_tbl() caused by an updated __bnxt_reserve_rings() flow. The bug arises on older firmware where RX ring reservations are not required and hw_resc->resv_rx_rings may not reflect the c...

CVE-2025-38001

The CVE-2025-38001 issue affects the Linux kernel HFSC scheduling path (net_sched) and is triggered by a flawed enqueue path. The root cause is a reentrancy problem in hfsc_enqueue where a class can be inserted twice into the eltree when HFSC_RSC is used, because the code only checks cl->cl_na...

CVE-2018-13094

CVE-2018-13094 affects the Linux kernel’s XFS code: a NULL bp passed to xfs_da_shrink_inode() can trigger an OOPS in fs/xfs/libxfs/xfs_attr_leaf.c for images up to kernel 4.17.3. Public docs confirm the underlying issue is a NULL pointer dereference that can cause a crash; Debian/CentOS/Red Hat a...

CVE-2020-12465

CVE-2020-12465: An array overflow in mt76_add_fragment (drivers/net/wireless/mediatek/mt76/dma.c) of the Linux kernel before 5.5.10 can cause memory corruption by an oversized packet with too many RX fragments. The issue is documented in the Uniti/Miracle Linux advisories referencing CVE-2020-124...

CVE-2022-0171

CVE-2022-0171 affects the Linux kernel KVM SEV API and allows a non-root host-user application to crash the host kernel by creating a confidential guest VM on AMD SEV-capable CPUs. The issue is local in scope (AV:L, AC:L, PR:L) with a CVSSv3 base score of 5.5 (I:A/H). A fix is available in the Li...