CVE-2021-45480

Mode C: CVE-2021-45480 affects the Linux kernel up to 5.15.10 (before 5.15.11). Root cause: memory leak in __rds_conn_create() in net/rds/connection.c under certain conditions. Impact: potential memory leak; CVE details state a leak rather than remote code execution. Public references note mitiga...

CVE-2022-42329

CVE-2022-42329 concerns the Linux xen-netback driver. The description shows a potential deadlock when freeing the SKB of a dropped packet under the XSA-392 handling (also tied to CVE-2022-42328) and also when dropping packets if netpoll is active on the connected interface, risking a deadlock in ...

CVE-2023-1195

CVE-2023-1195 is a Linux kernel use-after-free in reconn_set_ipaddr_from_hostname (fs/cifs/connect.c) where server->hostname is not cleared, enabling a denial-of-service condition via invalid pointer use. Connected advisories (e.g., RHSA entries, MiracleLinux AXSA banners) reference this CVE a...

CVE-2023-2002

CVE-2023-2002 affects the Linux kernel HCI sockets (net/bluetooth/hci_sock.c) due to a missing capability check. This can allow a local attacker to reconfigure Bluetooth interfaces and potentially leak information, disrupt connections, or spoof/deny service. Public documents confirm this CVE is l...

CVE-2023-2194

CVE-2023-2194 is an out-of-bounds write in the Linux kernel SLIMpro I2C driver. The userspace data->block[0] value was not capped to 0–255 and was used as the memcpy size, potentially writing beyond the end of dma_buffer. This could crash the host or, per some advisories, allow local privilege...

CVE-2023-52619

The CVE-2023-52619 issue affects the Linux kernel’s pstore/ram subsystem, where setting CPU count to an odd number causes zone_size to be odd, breaking address alignment and risking crashes when accessing zone memory. The documented fix uses ALIGN_DOWN() to ensure even zone sizes, preventing non‑...

CVE-2024-42223

CVE-2024-42223: Linux kernel vulnerability in media: dvb-frontends/tda10048 where state->xtal_hz (up to 16M) could overflow a 32-bit integer when multiplied by pll_mfactor. A 64-bit variable was introduced to hold the calculations, preventing overflow. The issue is resolved by this 64-bit calc...

CVE-2024-53174

CVE-2024-53174 concerns a Linux kernel SUNRPC use-after-free in the cache path: c_show could dereference a freed cache entry due to RC ul protection when reading via cache_show. The fix uses cache_get_rcu to ensure the cache entry (cp) remains active while accessed, preventing a refcount UAF. Aff...

CVE-2025-38001

The CVE-2025-38001 issue affects the Linux kernel HFSC scheduling path (net_sched) and is triggered by a flawed enqueue path. The root cause is a reentrancy problem in hfsc_enqueue where a class can be inserted twice into the eltree when HFSC_RSC is used, because the code only checks cl->cl_na...

CVE-2026-53361

The CVE-2026-53361 vulnerability affects the Linux kernel, specifically af_unix code in unix_gc() where gc_in_progress could be observed as false during scheduling, potentially allowing a sequence where gc_in_progress is not reliably set. The root cause is the race between unix_schedule_gc() and ...

CVE-2021-3732

CVE-2021-3732 is a local-privilege escalation/information-disclosure flaw in the Linux kernel OverlayFS subsystem affecting how TmpFS is mounted under OverlayFS, allowing a local user to reveal files hidden in the original mount. Connected docs corroborate the issue across multiple sources (Astra...

CVE-2021-45469

CVE-2021-45469 affects the Linux kernel’s f2fs file system implementation, specifically __f2fs_setxattr in fs/f2fs/xattr.c. When an inode’s last xattr entry is invalid, there is an out-of-bounds memory access. Documents indicate an attacker who can mount a crafted f2fs image could trigger denial ...

CVE-2022-45884

CVE-2022-45884: Linux kernel vulnerability in media/dvb-core/dvbdev.c that causes a use-after-free due to a race around dvb_register_device() when it dynamically allocates fops. The issue is local and could allow memory corruption or instability on affected kernels (through 6.0.9 as stated). Conn...

CVE-2024-27017

CVE-2024-27017 relates to the Linux kernel netfilter nft_set_pipapo backend. According to the provided sources, a vulnerability arises because the generation mask can be updated while a netlink dump is in progress, causing the pipapo set backend walk iterator to rely on an inconsistent view of th...

CVE-2024-35966

CVE-2024-35966 (Linux kernel) : A Bluetooth RFCOMM vulnerability where rfcomm_sock_setsockopt_old() could copy data beyond the input length, due to not validating user input in setsockopt. This caused KASAN slab-out-of-bounds access in copy_from_sockptr_offset and related code paths in net/blueto...

CVE-2024-45000

The CVE-2024-45000 entry concerns the Linux kernel component fs/netfs/fscache_cookie. Technical details in connected docs show a NULL pointer dereference caused by a data race when a non-zero n_accesses counter was present during concurrent cookie withdrawal and cache write preparation. The under...

CVE-2025-21683

CVE-2025-21683 affects the Linux kernel and patches a memory-leak in bpf_sk_select_reuseport() when using reuseport BPF programs. The underlying issue is that a sockmap lookup could return a TCP ESTABLISHED socket that previously had SO_ATTACH_REUSEPORT_EBPF, meaning a non-NULL sk_reuseport_cb di...

CVE-2013-4312

The CVE-2013-4312 issue affects the Linux kernel prior to 4.4.1, where a local attacker could bypass per-process file-descriptor limits by sending descriptors over a local UNIX domain socket before closing them, causing memory exhaustion and potential denial of service. The root cause is the hand...

CVE-2017-18216

CVE-2017-18216 affects the Linux kernel's OCFS2 nodemanager.c: a required mutex is not used, enabling local attackers to trigger a NULL pointer dereference/BUG and cause denial of service. The issue exists in kernel versions before 4.15. Exploitation is local; no remote vector noted in the provid...

CVE-2019-12456

CVE-2019-12456 : A local double-fetch vulnerability in the Linux kernel, affecting the MPT3COMMAND path of _ctl_ioctl_main in drivers/scsi/mpt3sas/mpt3sas_ctl.c. The issue arises from reading ioc_number between two kernel reads, allowing a local attacker to trigger a denial of service or potentia...

CVE-2021-4204

Technical details for CVE-2021-4204 are not publicly provided in the supplied documents. Please monitor for updates from connected sources; current materials mention a Linux kernel memory access flaw but do not specify affected versions or fixes here.

CVE-2022-25375

CVE-2022-25375 affects the Linux kernel rndis gadget: the RNDIS_MSG_SET size is not validated, allowing information disclosure from kernel memory. Affected: kernels prior to 5.16.10. Remediation: apply upstream patch in 5.16.10+; Debian advisories note fixes in stable branches (e.g., 5.10.x/Bulls...

CVE-2011-1083

The CVE-2011-1083 issue affects the Linux kernel epoll implementation (epoll_ctl/epoll_create) as shipped in 2.6.37.2 and earlier. Local attackers can cause CPU denial of service by crafting a user-space application that creates and manages epoll file descriptors, exploiting improper traversal of...

CVE-2017-1000255

The connected Nessus entries confirm CVE-2017-1000255 affects PowerPC Linux kernels on Power8+ where a user can craft a signal frame and sigreturn to corrupt the kernel stack by using the r1 value from the signal frame. This can overwrite arbitrary kernel memory, causing an oops and potential pan...

CVE-2019-12381

CVE-2019-12381 affects the Linux kernel (ip_ra_control in net/ipv4/ip_sockglue.c) up to version 5.1.5. It describes an unchecked kmalloc for new_ra, which could cause a NULL pointer dereference and system crash (DoS). NOTE: some sources dispute this because new_ra is not used if it is NULL. The c...

CVE-2019-15794

CVE-2019-15794 describes a refcount underflow in the overlayfs/shiftfs error path when used with aufs patches. Specifically, both the Overlayfs and shiftfs patches in the Ubuntu 5.0 and 5.3 kernel series replace vma->vm_file in mmap handlers, and on error do not restore the original value; the...

CVE-2019-19080

CVE-2019-19080 affects the Linux kernel (pre-5.3.4). The issue consists of four memory leaks in nfp_flower_spawn_phy_reprs() in drivers/net/ethernet/netronome/nfp/flower/main.c, leading to potential memory consumption and a denial of service. The public references confirm the vulnerable function ...

CVE-2021-46984

CVE-2021-46984 : Linux kernel kyber driver had an out-of-bounds read due to a race between blk_mq_get_ctx() calls when a thread is preempted, causing ctx->index_hw[hctx->type] to differ from hctx. The fix passes the request_queue to kyber_bio_merge() (via ->bio_merge()) so Kyber can map ...

CVE-2022-3523

CVE-2022-3523 (Linux kernel) is addressed in MiracleLinux AXSA-2023-7038: the issue is a use-after-free in mm/memory.c during memory fault handling (memory manager race on private device pages). The Nessus/Miracle advisory lists this as one of multiple kernel CVEs affected on kernel 5.14.x builds...

CVE-2023-52580

CVE-2023-52580 affects the Linux kernel net/core ETH_P_1588 flow dissector. When a PTP Ethernet raw frame larger than 256 bytes is followed by 0xff, the nhoff calculation uses hdr->message_length (0xffff) and may override nhoff, causing incorrect header length and a kernel crash. The disclosed...

CVE-2024-0582

A memory leak flaw exists in the Linux kernel's io_uring functionality, specifically involving how a user registers a buffer ring with IORING_REGISTER_PBUF_RING, mmap()s it, and subsequently frees it. This vulnerability allows a local user to crash the system or potentially escalate privileges. S...

CVE-2024-50047

CVE-2024-50047 affects the Linux kernel SMB client (CIFS) path: an issue in async decryption can cause a slab-use-after-free in the crypto API when performing large reads. Root cause: use of a single AEAD TFM in parallel for async decryption leads to UAF; fix allocates a new AEAD TFM for async de...

CVE-2024-56602

CVE-2024-56602 is confirmed by connected advisories as a Linux kernel issue in net: ieee802154: do not leave a dangling sk pointer in ieee802154_create(), where sock_init_data() attaches a sk to sock and on error the sk remains dangling, allowing use-after-free. The Astra Linux bulletin lists aff...

CVE-2024-56614

Summary: CVE-2024-56614 in the Linux kernel fixes an out-of-bounds write in xsk_map_delete_elem where a user-controlled signed integer can bypass bounds checks due to unsigned/signed comparison, enabling an invalid map_entry access and potential memory corruption via xchg and subsequent operation...

CVE-2019-16995

CVE-2019-16995 affects the Linux kernel prior to 5.0.3. The issue is a memory leak in hsr_dev_finalize() (net/hsr/hsr_device.c) that can occur if hsr_add_port fails to add a port, potentially leading to a denial of service. The vulnerability is not tied to a vendor product in the provided text be...

CVE-2020-25220

CVE-2020-25220 is a Linux kernel local-use-after-free vulnerability in the cgroup subsystem caused by not accounting for skcd->no_refcnt during a backport of CVE-2020-14356. Affects 4.9.x (before 4.9.233), 4.14.x (before 4.14.194), and 4.19.x (before 4.19.140). The issue originates from backpo...

CVE-2022-3619

CVE-2022-3619 is a memory-leak vulnerability in the Linux kernel Bluetooth subsystem (function l2cap_recv_acldata in net/bluetooth/l2cap_core.c). The Connected documents confirm the issue and its inclusion in kernel security advisories, and several sources list it among fixes in kernel updates. T...

CVE-2023-35823

CVE-2023-35823 is a use-after-free in the Linux kernel before 6.3.2, specifically in saa7134_finidev() within drivers/media/pci/saa7134/saa7134-core.c. Astra Linux and related entries confirm the same vulnerability class and location (saa7134-core.c). The risk is high (local attack vector, as per...

CVE-2024-27014

CVE-2024-27014 affects the Linux kernel component net/mlx5e, where a deadlock could occur when disabling accelerated Receive Flow Steering (aRFS). The issue arises because a scheduled aRFS work item cancels under priv->state_lock, but the work handler later tries to reacquire that same lock, c...

CVE-2024-50299

CVE-2024-50299 affects the Linux kernel SCTP code, where size validation was missing in sctp_sf_ootb() and could cause a crash. The fix mirrors the prior approach used in Commit 50619dbf8db7 (size validation when walking chunks) and addresses a KMSAN-triggered fault reported in syzbot. The vulner...

CVE-2017-7482

CVE-2017-7482 affects the Linux kernel prior to 4.12. When Kerberos 5 tickets are decoded using RXRPC keys, the code incorrectly assumes the size of a field, causing the size-remaining calculation to wrap and the data pointer to extend past the buffer end. This can lead to memory corruption and p...

CVE-2022-27223

The CVE-2022-27223 entry concerns Linux kernel code, specifically the udc-xilinx USB gadget driver (drivers/usb/gadget/udc/udc-xilinx.c). Affected are kernel builds before 5.16.12 where the endpoint index is not validated and can be manipulated by the host to trigger out-of-array access. The desc...

CVE-2024-1151

CVE-2024-1151 is described in connected sources as a Linux kernel vulnerability affecting the Open vSwitch (OVS) sub‑component. The flaw occurs when a recursive operation calls into the same code block without validating stack depth, allowing a stack overflow that can crash the kernel or cause re...

CVE-2024-26901

CVE-2024-26901 is a Linux kernel information-leak vulnerability identified by syzbot in do_sys_name_to_handle, where uninitialized bytes were observed during copy to userspace. The issue was mitigated by replacing a kmalloc path with kzalloc, addressing uninitialized memory (Bytes 18–19) and rela...

CVE-2024-50074

CVE-2024-50074 — Linux kernel parport out-of-bounds fix : The vulnerability concerns array bounds in the parallel port (parport) code. The fix replaces blind snprintf calls with scnprintf to ensure the written length reflects actual output, addressing potential overflows in length calculations. A...

CVE-2024-53173

CVE-2024-53173 — Linux kernel NFSv4.0 use-after-free fix . The vulnerability arises when two threads open files concurrently and abort before a reply is seen, leading to use-after-free of the defunct rpc task pointer due to nfs_release_seqid() in nfs4_opendata_free(). The patch ensures that if th...

CVE-2024-56558

CVE-2024-56558 : In the Linux kernel, the nfsd export display path could trigger a use-after-free due to a reference-count issue on the exported access (exp) object. The fix ensures exp remains active by using cache_get_rcu before exp_get, preventing a UAF when e_show is called under RCU protecti...

CVE-2026-52923

The CVE-2026-52923 issue affects the Linux kernel IPC ID allocation in the checkpoint/restore path. ipc_idr_alloc() forwards the next_id request to idr_alloc() with an open-ended upper bound, so if the valid SysV IPC id tail is full the allocation can spill past ipc_mni. The encoded id may then r...

CVE-2019-19082

CVE-2019-19082 : Memory leaks in the Linux kernel’s AMD display driver DC code allow memory exhaustion/DoS via multiple create_resource_pool() variants (dce120/dce110/dce100/dcn10/dce112_resource.c; CID-104c307147ad). Affects kernel up to 5.3.11; exploitation would be local and relies on resource...

CVE-2019-19083

CVE-2019-19083: In Linux kernel before 5.3.8, memory leaks in clock_source_create() under drivers/gpu/drm/amd/display/dc can cause memory exhaustion and DoS. Affects dce112_clock_source_create(), dce100_clock_source_create(), dcn10_clock_source_create(), dcn20_clock_source_create(), dce120_clock_...