CVE-2019-19083

CVE-2019-19083: In Linux kernel before 5.3.8, memory leaks in clock_source_create() under drivers/gpu/drm/amd/display/dc can cause memory exhaustion and DoS. Affects dce112_clock_source_create(), dce100_clock_source_create(), dcn10_clock_source_create(), dcn20_clock_source_create(), dce120_clock_...

CVE-2022-0171

CVE-2022-0171 affects the Linux kernel KVM SEV API and allows a non-root host-user application to crash the host kernel by creating a confidential guest VM on AMD SEV-capable CPUs. The issue is local in scope (AV:L, AC:L, PR:L) with a CVSSv3 base score of 5.5 (I:A/H). A fix is available in the Li...

CVE-2024-36883

CVE-2024-36883 is a Linux kernel vulnerability in the networking code, specifically a out-of-bounds access in the function path associated with pernet ops. The root cause is a sequence where net_alloc_generic reads max_gen_ptrs twice (before and after a potential race) while net_alloc runs withou...

CVE-2024-53057

CVE-2024-53057 affects Linux kernel net/sched: qdisc_tree_reduce_backlog can UAF when major handle ffff: exists (egress qdiscs). Root cause: ffff: assumed to be root/ingress, fixed by stopping at TC_H_ROOT; the fix updates to avoid iterating into an ingress qdisc and halts when parent is TC_H_ROO...

CVE-2024-56558

CVE-2024-56558 : In the Linux kernel, the nfsd export display path could trigger a use-after-free due to a reference-count issue on the exported access (exp) object. The fix ensures exp remains active by using cache_get_rcu before exp_get, preventing a UAF when e_show is called under RCU protecti...

CVE-2020-35519

CVE-2020-35519 is an out-of-bounds memory access in the Linux kernel, specifically in x25_bind() within net/x25/af_x25.c of v5.12-rc5. The bounds-check failure enables a local user to access out-of-bounds memory, potentially crashing the system or leaking kernel data. Connected advisories confirm...

CVE-2021-3635

CVE-2021-3635 affects the Linux kernel netfilter implementation. The described flaw exists in versions prior to 5.5-rc7, where a user with root privileges (CAP_SYS_ADMIN) can panic the system when issuing netfilter netflow commands. The included sources (e.g., Unity Linux and MiracleLinux Nessus ...

CVE-2022-0742

CVE-2022-0742: Memory leak in Linux kernel ICMPv6 implementation (Linux kernel 5.13+) can allow a remote attacker to cause a DoS by flooding with ICMPv6 packets of type 130/131, exhausting memory. The advisory references a fix via a commit: 2d3916f3189172d5c69d33065c3c21119fe539fc. Connected sour...

CVE-2022-49931

CVE-2022-49931 applies to the Linux kernel’s IB/hfi1 driver. The issue was an incorrect list-move in sc_disable(), which could trigger a kernel NULL pointer dereference/crash when a link goes down and there are waiters for a send to complete. The authoritative fix was to replace the faulty list-m...

CVE-2024-35886

CVE-2024-35886: Linux kernel vulnerability in IPv6 routing dump logic caused infinite recursion in fib6_dump_done() during netlink dump (AF_UNSPEC RTM_GETROUTE/more data). Logs show repeated fib6_dump_done() calls and a stack guard page hit due to recursive destructor behavior. The publicly repor...

CVE-2024-56631

Summary: CVE-2024-56631 affects the Linux kernel SCSI sg driver, fixed in sg_release() to avoid slab-use-after-free. The bug occurred when kref_put(&sfp->f_ref, sg_remove_sfp) was called before releasing the open_rel_lock mutex, potentially freeing sfp/sdp and then dereferencing them after unl...

CVE-2016-10088

CVE-2016-10088 affects the Linux kernel sg path (block/bsg.c, drivers/scsi/sg.c) and is tied to KERNEL_DS handling. A local user could read/write arbitrary kernel memory or trigger use-after-free via /dev/sg, due to an incomplete fix for CVE-2016-9576. Connected advisories confirm the issue acros...

CVE-2021-3760

The CVE-2021-3760 entry describes a use-after-free in the Linux kernel’s NFC (NCI) driver stack. The vulnerability could allow a local attacker to cause memory corruption or a crash, potentially enabling privilege escalation and affecting confidentiality, integrity, or availability. Public detail...

CVE-2022-49124

The CVE-2022-49124 entry concerns the Linux kernel x86 MCE workaround for an erratum in fast string copy instructions (REP; MOVS*). A rare kernel panic can occur when an uncorrected error is in the first cache line of a page and the kernel executes page_copy from the previous page, causing an MCE...

CVE-2023-1252

CVE-2023-1252 is a Linux kernel use-after-free in the Ext4 file system when overlayfs triggers multiple file operations. The vulnerability arises from a use-after-free in ovl_aio_req; if unpatched, the local attacker could crash or potentially escalate privileges. The fix is available in patch 9a...

CVE-2023-52597

The Linux kernel contains a vulnerability in the KVM: s390 module within the kvm_arch_vcpu_ioctl_set_fpu() function. The root cause is an insecure validation process where a guest CPU's floating-point control (fpc) register is temporarily loaded into the host's register. If an interrupt occurs du...

CVE-2023-52919

In CVE-2023-52919, the Linux kernel nfc: nci path fixes a NULL pointer dereference by handling memory allocation failure from nci_skb_alloc() (alloc_skb()). The fix addresses a possible NULL pointer dereference when sending acknowledge, mitigating local-execution risk. The vulnerability affects t...

CVE-2024-26640

CVE-2024-26640 — Linux kernel TCP rx zerocopy sanity checks (Mode C) Affects: Linux kernel TCP rx zerocopy path. Root cause: can_map_frag() lacked validation when mapping NIC-allocated pages, risking misuse of pages owned by filesystems. The patch adds two checks: (1) the page must not be a compo...

CVE-2024-44933

CVE-2024-44933 affects bnxt_en in the Linux kernel and describes a memory out-of-bounds risk in bnxt_fill_hw_rss_tbl() caused by an updated __bnxt_reserve_rings() flow. The bug arises on older firmware where RX ring reservations are not required and hw_resc->resv_rx_rings may not reflect the c...

CVE-2024-50058

CVE-2024-50058: Linux kernel serial subsystem vulnerability where uart_shutdown() could dereference a NULL uart_port (uport) after a patch added NULL checks. The commit af224ca2df29 added safety checks, but a call to uart_port_dtr_rts(uport, false) remained unprotected if HUPCL is set. The incons...

CVE-2024-50304

The CVE-2024-50304 entry concerns the Linux kernel IPv4 ip_tunnel subsystem. A suspicious RCU usage warning in ip_tunnel_find() was addressed by adding a lockdep check to hlist_for_each_entry_rcu(), validating that the RTNL mutex is held. The per-netns IP tunnel hash table is protected by the RTN...

CVE-2024-56600

CVE-2024-56600 (Linux kernel) : The issue arises in inet6_create() where sock_init_data() attaches an allocated sk to the sock, and if inet6_create() later fails, the sock keeps a dangling sk pointer, risking use-after-free. The fix, as described, is to clear the sock’s sk pointer on error to pre...

CVE-2017-7273

CVE-2017-7273 affects the Linux kernel, where cp_report_fixup in drivers/hid/hid-cypress.c (kernel 3.2 and 4.x before 4.9.4) allows physically proximate attackers to trigger a denial of service (integer underflow) via a crafted HID report. The issue is fixed in Linux kernel 4.9.4; remediation is ...

CVE-2019-14899

CVE-2019-14899 is a routing-path/kernel issue affecting macOS (and cited across Linux, FreeBSD, OpenBSD, iOS, Android). The root cause is a VPN-tunnel routing problem that allows a local/adjacent attacker to inject into active VPN connections, enabling data injection and potential VPN hijacking. ...

CVE-2020-12465

CVE-2020-12465: An array overflow in mt76_add_fragment (drivers/net/wireless/mediatek/mt76/dma.c) of the Linux kernel before 5.5.10 can cause memory corruption by an oversized packet with too many RX fragments. The issue is documented in the Uniti/Miracle Linux advisories referencing CVE-2020-124...

CVE-2021-28714

Concrete details: CVE-2021-28714 and CVE-2021-28715 pertain to the Linux kernel netback driver in guests. Incoming packets for a guest are buffered until processing, with a long default client-side RX queue stall timeout (60 seconds) that can be bypassed; on fast UDP interfaces this can accumulat...

CVE-2022-0812

CVE-2022-0812 affects the Linux kernel NFS over RDMA (net/sunrpc/xprtrdma/rpc_rdma.c) enabling an information leak under normal user privileges. Miracle Linux AXSA-2024-8651 notes xprtrdma fixes for incorrect header size calculations, which is the specified remediation. Unity Linux entries list t...

CVE-2022-2873

CVE-2022-2873 refers to an out-of-bounds memory access in the Linux kernel’s Intel iSMT SMBus 2.0 host controller driver, triggered by I2C_SMBUS_BLOCK_DATA with malicious input. The vulnerability allows a local attacker to crash the system (local denial of service); CVSSv3.1 base score 5.5 (Local...

CVE-2022-45886

CVE-2022-45886 : Linux kernel (through 6.0.9) has a race in drivers/media/dvb-core/dvb_net.c between .disconnect and dvb_device_open that leads to a Use-After-Free vulnerability. The Connected documents confirm the affected component and root cause but do not provide an explicit public remediatio...

CVE-2024-36917

CVE-2024-36917 : In the Linux kernel, a vulnerability in blk_ioctl_discard() allowed an overflow of start+len, potentially causing a hung task when a discard ioctl with start=0x80000000000ff000 and len=0x8000000000fff000 was submitted. A patch was added to validate the overflow, preventing the NU...

CVE-2024-56609

Technical details for CVE-2024-56609 are not publicly available in the provided Connected documents. The initial description mentions a kernel purge TX queue fix for rt w88, but no explicit affected products, versions, or remediation is given here. Monitor for updates.

CVE-2024-56653

CVE-2024-56653 is a Linux kernel vulnerability in the Bluetooth btmtk pathway that can cause a slab-use-after-free in btmtk_process_coredump when handling coredumps. The issue arises because hci_devcd_append may release an sk_buff, after which the code can still access the freed object; a KASAN r...

CVE-2024-56664

CVE-2024-56664 is a Linux kernel issue in bpf, sockmap where replacing an element (with a different socket) can race with the socket’s close(), causing sock_map_delete to unref the wrong element. The result is a potential use-after-free/refcount mismanagement during sock map deletions (as detaile...

CVE-2026-23268

CVE-2026-23268 is a Linux kernel AppArmor issue where an unprivileged local user can load, replace, and remove AppArmor profiles by abusing apparmorfs and passing a file descriptor to a privileged process. This enables a confused deputy attack, potentially letting the unprivileged user execute a ...

CVE-2017-2583

CVE-2017-2583 affects the Linux kernel’s KVM emulation for x86, where load of a null stack selector can be incorrectly handled in long mode. The flaw allows a guest-host user to crash the guest OS (DoS) or potentially escalate privileges within the guest on affected CPUs, due to improper emulatio...

CVE-2020-10720

CVE-2020-10720 : A local attacker can crash the system due to a flaw in the Linux kernel’s GRO implementation in versions older than 5.2. The issue is specifically in GRO handling in the kernel networking path, not a remote exploit. The connected advisories reiterate the same root cause and indic...

CVE-2023-1513

CVE-2023-1513: A flaw in KVM where, on 32-bit systems, uninitialized portions of the kvm_debugregs structure could be copied to userspace via KVM_GET_DEBUGREGS, causing an information leak. Astra Linux bulletin confirms the same KVM-based issue; no fix/version details are provided in the availabl...

CVE-2023-52606

CVE-2023-52606 affects the Linux kernel’s powerpc/lib path, where the sstep.c FP/VMX vector operation size assumption was not consistently enforced. The underlying issue: analyse_instr() determines operation size separately, risking kernel stack corruption when the assumption is violated. The fix...

CVE-2023-52628

CVE-2023-52628 : Linux kernel netfilter nftables exthdr fix for a 4-byte stack OOB write. If priv->len is a multiple of 4, dst[len/4] can overflow the destination array, causing stack corruption. The bug affected the kernel since the 4.1 cycle and was carried forward with tcp/sctp and IP optio...

CVE-2024-26641

CVE-2024-26641 concerns the Linux kernel. The vulnerability arises in ip6_tunnel, where __ip6_tnl_rcv() could access uninitialized data due to not pulling the inner header early enough. The fix, as noted in multiple advisories (e.g., Astra Linux security bulletins), is to call pskb_inet_may_pull(...

CVE-2024-33621

Technical details about CVE-2024-33621 are not present in the provided documents. The connected materials do not specify affected products, impact, or fixes for this CVE. Monitor for updates from official advisories.

CVE-2024-35896

CVE-2024-35896 concerns the Linux kernel’s netfilter/SockOpt path. The description shows a fix for validating user input length in nf_setsockopt, preventing a slab-out-of-bounds read traced to copy_from_sockptr_offset used during iptables/setsockopt handling. The issue manifested as a read of siz...

CVE-2024-36902

CVE-2024-36902 is a Linux kernel vulnerability: fib6_rules may dereference a NULL from ip6_dst_idev() in fib6_rule_action(), potentially enabling a crash (general protection fault). A fix has been applied in the Linux kernel; remediation is to update to a version containing the patch. Other conne...

CVE-2024-50138

CVE-2024-50138 concerns the Linux kernel BPF ringbuf handling. The issue arises when __bpf_ringbuf_reserve is invoked from a tracepoint with preemption disabled, where using spinlock_t could trigger a “sleep in atomic” warning on RT variants. The root cause is the use of a spinlock_t in the ringb...

CVE-2024-53687

CVE-2024-53687 – Linux kernel (RISC-V) vulnerability. The issue arises when flush_tlb_kernel_range() uses IPIs to flush TLBs on all cores, triggering a warning with IRQs disabled. The fix preserves only flushing the local TLB and delegates potential faults from stale protected PTEs to the lazy kf...

CVE-2011-1093

CVE-2011-1093 affects the Linux kernel’s Datagram Congestion Control Protocol (DCCP). The vulnerable code path is dccp_rcv_state_process in net/dccp/input.c, which mishandles packets for a CLOSED endpoint. An attacker can trigger a NULL pointer dereference and OOPS by sending a DCCP-Close packet ...

CVE-2022-1882

CVE-2022-1882: A use-after-free in Linux kernel pipes handling (pipes.post_one_notification after free_pipe_info) allows a local user to crash the system and potentially escalate privileges. Documented in CVE-2022-1882 with CVSS v3 base 7.8 (LOCAL, LOW complexity, user is not required to interact...

CVE-2022-49469

CVE-2022-49469 is a Linux kernel issue affecting the btrfs subsystem. The vulnerability arises in create_subvol() where, on failures of btrfs_qgroup_inherit(), btrfs_alloc_tree_block, or btrfs_insert_root(), anon_dev could leak because error handling did not free it. The fix reorganizes the error...

CVE-2023-1855

CVE-2023-1855 describes a use-after-free in xgene_hwmon_remove (drivers/hwmon/xgene-hwmon.c) of the Linux kernel hardware monitoring driver. The Astra Linux security bulletin mirrors this flaw and notes it could allow a local attacker to crash the system or leak kernel memory due to a race condit...

CVE-2024-42079

CVE-2024-42079 is a Linux kernel vulnerability in the gfs2 subsystem that could lead to a NULL pointer dereference during log flush operations. The root cause is a race between outstanding glock work and unmount, which could cause gfs2_log_flush() to dereference a freed or NULL sdp->sd_jdesc. ...