CVE-2017-8831

The CVE-2017-8831 issue affects the Linux kernel, specifically the saa7164_bus_get function in drivers/media/pci/saa7164/saa7164-bus.c, with impact up to kernel version 4.11.5. It is a local, potentially privilege-escalating vulnerability described as a “double fetch” vulnerability caused by re-r...

CVE-2017-14156

Summary: CVE-2017-14156 affects the Linux kernel up to 4.12.10. The atyfb_ioctl function in drivers/video/fbdev/aty/atyfb_base.c does not initialize a certain data structure, allowing local attackers to read padding bytes from kernel stack memory and disclose sensitive information. Impact: inform...

CVE-2017-16538

CVE-2017-16538 refers to a vulnerability in the Linux kernel (drivers/media/usb/dvb-usb-v2/lmedm04.c) up to version 4.13.11. A local user can cause a denial of service (general protection fault and system crash) or potentially other impact by plugging a crafted USB device. The root cause is a mis...

CVE-2017-16994

The CVE-2017-16994 vulnerability affects the Linux kernel’s walk_hugetlb_range function in mm/pagewalk.c, where holes in hugetlb ranges are mishandled. This allows a local attacker to obtain sensitive information from uninitialized kernel memory via a crafted mincore() call. Public sources attrib...

CVE-2017-6346

CVE-2017-6346 affects the Linux kernel net/packet/af_packet.c, describing a race condition in the PACKET_FANOUT fanout path that can cause a use-after-free in multithreaded user apps. The connected sources confirm this is a local vulnerability with potential denial of service and possible unspeci...

CVE-2017-6951

CVE-2017-6951 : A local denial-of-service in the Linux kernel is caused by a NULL pointer dereference in keyring_search_aux in security/keys/keyring.c when a request_key is used on the dead type. Exploitation could crash the system (OOPS). Affected: Linux kernel up to 3.14.79; impact is local, wi...

CVE-2017-7294

The CVE-2017-7294 issue affects the Linux kernel up to 4.10.6, specifically vmwgfx vmw_surface_define_ioctl() in drivers/gpu/drm/vmwgfx/vmwgfx_surface.c. A crafted ioctl to /dev/dri/renderD* can trigger an integer overflow and out-of-bounds write, causing denial of service (system hang/crash) and...

CVE-2017-7495

CVE-2017-7495 affects the Linux kernel’s ext4 inode handling (inode.c) in data=ordered mode, where a mishandled needs-flushing-before-commit list leaks sensitive data from other users’ files under opportunistic conditions. The cited sources specify this is a local vulnerability: an attacker with ...

CVE-2017-15299

CVE-2017-15299 affects the Linux kernel KEYS subsystem: adding a key that already exists but is uninstantiated can cause a NULL pointer dereference, leading to a system crash (local DoS) or other impact. The issue is documented for kernels up to at least 4.13.7; remediation is to apply the kernel...

CVE-2017-7487

The CVE-2017-7487 issue is in the Linux kernel net/ipx/af_ipx.c ipxitf_ioctl: reference count mishandling causes a use-after-free via a failed SIOCGIFADDR on an IPX interface, enabling local denial of service. Evidence in connected Nessus advisories confirms the vulnerability and that it affects ...

CVE-2017-11473

CVE-2017-11473 describes a buffer overflow in the Linux kernel, specifically in arch/x86/kernel/acpi/boot.c::mp_override_legacy_irq(), up to version 3.2. An attacker with local access can escalate privileges by presenting a crafted ACPI table. Exploitation is local and does not require user inter...

CVE-2017-16525

The CVE-2017-16525 entry affects the Linux kernel: usb_serial_console_disconnect in drivers/usb/serial/console.c allows local users to trigger a denial of service (use-after-free and system crash) via a crafted USB device, with impact on confidentiality/integrity/availability as per the advisory....

CVE-2017-7346

The CVE-2017-7346 issue is a Linux kernel vulnerability in vmwgfx where vmw_gb_surface_define_ioctl in drivers/gpu/drm/vmwgfx/vmwgfx_surface.c fails to validate certain levels data, enabling a local attacker to cause a denial of service (system hang) via a crafted ioctl to /dev/dri/renderD* on ke...

CVE-2016-10277

CVE-2016-10277 : An elevation-of-privilege in the Motorola bootloader allows a local app to run arbitrary code in the bootloader context by exploiting kernel command-line injection, leading to potential full device compromise. Affected: Android with Kernel-3.10 and Kernel-3.18. Exploitation evide...

CVE-2017-5669

The vulnerability CVE-2017-5669 affects the Linux kernel’s do_shmat() in ipc/shm.c up to and including 4.9.12, where the rounding operation on the mapped address is not restricted. This allows local (privileged) users to map page zero and bypass the mmap protection mechanism via crafted shmget/sh...

CVE-2017-16535

CVE-2017-16535 affects the Linux kernel up to version 4.13.9, where usb_get_bos_descriptor in drivers/usb/core/config.c improperly handles crafted USB devices, enabling a local attacker to trigger an out-of-bounds read that can cause denial of service or a system crash. The issue stems from readi...

CVE-2017-16647

CVE-2017-16647 affects the Linux kernel driver: drivers/net/usb/asix_devices.c, up to version 4.13.11. The issue arises from a NULL pointer dereference when a crafted USB device is connected, enabling local attackers to trigger a denial of service (system crash) and potentially other impact. The ...

CVE-2017-8797

CVE-2017-8797 affects the Linux kernel NFSv4 server. A remote attacker can send NFSv4 pNFS GETDEVICEINFO or LAYOUTGET operands in UDP; an uninitialized layout type is used as an array index, causing an OOPS and potentially a system DoS via knfsd soft-lockup. Affected: Linux kernel versions prior ...

CVE-2017-16645

CVE-2017-16645 affects the Linux kernel’s ims_pcu_get_cdc_union_desc in drivers/input/misc/ims-pcu.c. According to the provided sources, the vulnerability exists in kernels up to 4.13.11 and can be triggered by a crafted USB device, allowing a local user with LOW privileges and physical access to...

CVE-2017-6353

CVE-2017-6353 affects the Linux kernel up to 4.10.1. It arises from net/sctp/socket.c not properly restricting association peel-off operations during certain wait states, enabling a local attacker to cause a denial of service via an invalid unlock and a double free (linked to an incorrect fix for...

CVE-2016-10147

CVE-2016-10147 affects the Linux kernel’s crypto/mcryptd.c. An local attacker can cause a denial of service by using an AF_ALG socket with an incompatible algorithm (demonstrated by mcryptd(md5)), triggering a NULL pointer dereference and system crash. The description notes the issue exists in ke...

CVE-2017-16649

CVE-2017-16649 affects the Linux kernel up to version 4.13.11. The vulnerable code is usbnet_generic_cdc_bind in drivers/net/usb/cdc_ether.c. Exploitation requires local access and a crafted USB device, which can trigger a divide-by-zero error and system crash, with possible other impact. The con...

CVE-2010-5321

CVE-2010-5321 affects the Linux kernel videobuf subsystem (videobuf-core.c and related via videobuf-vmalloc.c) with a memory-leak vulnerability that can be exploited by local users via /dev/video mmap calls to trigger memory allocations and cause a denial of service. Public sources in the connect...

CVE-2017-16526

CVE-2017-16526 affects the Linux kernel driver code drivers/uwb/uwbd.c up to version 4.13.5; a crafted USB device could trigger a general protection fault and system crash via local access, potentially causing denial of service or other impact. The connected Unity Linux advisories (UTSA-2026-0016...

CVE-2017-8925

Technical details beyond the description are not provided in the supplied documents. The provided materials confirm CVE-2017-8925 affects the Linux kernel omninet_open and describes a local denial of service due to reference-count mishandling; no further specifics are available here. Monitor for ...

CVE-2017-0561

CVE-2017-0561 is a Broadcom Wi‑Fi firmware flaw in Android that affects Broadcom Wi‑Fi devices and enables remote code execution in the Wi‑Fi SoC via the TDLS implementation. Debian LTS advisory and Mageia/Chrome advisories summarize the issue as a Broadcom TDLS flaw that could let an attacker on...

CVE-2017-16533

CVE-2017-16533 affects the Linux kernel’s usbhid_parse() in drivers/hid/usbhid/hid-core.c up to and including version 4.13.7; a crafted USB device can cause an out-of-bounds read, leading to local denial of service or a crash. Affected component: HID USB host controller driver (usbhid). Root caus...

CVE-2017-2584

CVE-2017-2584 affects arch/x86/kvm/emulate.c in the Linux kernel up to version 4.9.3, enabling local users to read kernel memory or cause a use-after-free DoS via a crafted instruction-emulation application targeting fxrstor, fxsave, sgdt, and sidt. Remediation is not specified in the provided do...

CVE-2017-6347

The CVE-2017-6347 entry describes a vulnerability in the Linux kernel (net/ipv4/ip_sockglue.c: ip_cmsg_recv_checksum) when built before version 4.10.1. The flaw arises from incorrect assumptions about skb data layout, allowing a local attacker to trigger a denial of service via a buffer over-read...

CVE-2017-6348

CVE-2017-6348 affects the Linux kernel: the hashbin_delete function in net/irda/irqueue.c improperly handles lock dropping, enabling a local user to trigger a denial of service through crafted IrDA device operations. The issue exists in kernels before 4.9.13 and is fixed by upgrading to 4.9.13 or...

CVE-2017-15116

CVE-2017-15116 affects the Linux kernel rngapi_reset() in crypto/rng.c, vulnerable before version 4.2. The issue allows a local attacker to trigger a NULL pointer dereference, causing a denial of service. Connected Nessus advisories (Unity Linux and EulerOS entries) reiterate the same description...

CVE-2017-7374

CVE-2017-7374 is a use-after-free in the Linux kernel fs/crypto/ subsystem prior to 4.10.7, where revoking keyring keys used for ext4, f2fs, or ubifs encryption can free cryptographic transform objects prematurely. This enables local attackers to cause a denial of service via a NULL pointer deref...

CVE-2017-13693

CVE-2017-13693 affects Linux kernels up to 4.12.9. The acpi_ds_create_operands() function in drivers/acpi/acpica/dsutils.c does not flush the operand cache, enabling a crafted ACPI table to trigger a kernel memory disclosure and bypass KASLR. This is a local, user‑space–driven information leak/pr...

CVE-2017-16532

CVE-2017-16532: A vulnerability in the Linux kernel ≤ 4.13.11 affects the get_endpoints function in drivers/usb/misc/usbtest.c, enabling local users to trigger a denial of service via a crafted USB device, through a NULL pointer dereference and potential system crash. The issue is triggered by a ...

CVE-2017-9150

CVE-2017-9150 affects the Linux kernel prior to 4.11.1, where the function do_check in kernel/bpf/verifier.c fails to expose the allow_ptr_leaks setting to constrain the output of print_bpf_insn. This omission enables local attackers to leak sensitive address information through crafted bpf syste...

CVE-2017-9605

CVE-2017-9605 affects the Linux kernel (up to and including 4.11.4) via the vmw_gb_surface_define_ioctl path (DRM_IOCTL_VMW_GB_SURFACE_CREATE) in vmwgfx_surface.c. The defect is that backup_handle is defined but not initialized, so when creating a GB surface with a previously allocated DMA buffer...

CVE-2016-3695

CVE-2016-3695 in the Linux kernel relates to the einj_error_inject function (drivers/acpi/apei/einj.c). The issue allows a local user to simulate hardware errors and cause a denial of service by failing to disable APEI error injection via EINJ when securelevel is set. The connected documents show...

CVE-2017-15537

The CVE-2017-15537 issue affects the x86 FPU state handling in the Linux kernel prior to 4.13.5. If a CPU supports xsave but not xsaves, ptrace() or rt_sigreturn() mishandles reserved xstate header bits, enabling local users to read other processes’ FPU registers. A fix is provided in Linux kerne...

CVE-2017-16529

CVE-2017-16529 affects the Linux kernel’s snd_usb_create_streams in sound/usb/card.c, allowing a local attacker to trigger an out-of-bounds read and system crash via a crafted USB device, with impact described as a denial of service and potentially other effects. The issue is present in kernels p...

CVE-2017-16530

CVE-2017-16530 affects the Linux kernel uas driver (drivers/usb/storage/uas.c; uas-detect.h). The issue allows a local user to trigger a denial of service or potentially other impact via a crafted USB device, caused by an out-of-bounds read. Affected condition is the uas driver in the kernel prio...

CVE-2017-16643

CVE-2017-16643 affects the Linux kernel, specifically the parse_hid_report_descriptor function in drivers/input/tablet/gtco.c, with exploitation possible via a crafted USB device. It allows a local user to trigger an out-of-bounds read and system crash (DoS) and potentially other impacts. The iss...

CVE-2017-7261

CVE-2017-7261 affects the Linux kernel driver vmwgfx. The vmw_surface_define_ioctl function in drivers/gpu/drm/vmwgfx/vmwgfx_surface.c does not check for a zero value of certain levels data, allowing a local user to cause a denial of service (ZERO_SIZE_PTR dereference, GP fault, and potentially a...

CVE-2017-11472

CVE-2017-11472 affects the Linux kernel via the acpi_ns_terminate() path in drivers/acpi/acpica/nsutils.c. The flaw does not flush the operand cache, enabling a local user to dump kernel memory and bypass KASLR by crafting an ACPI table, with impact described for kernels before 4.12 (and through ...

CVE-2017-16527

CVE-2017-16527 affects the Linux kernel component sound/usb/mixer.c, vulnerable before version 4.13.8. A crafted USB device can trigger a snd_usb_mixer_interrupt use-after-free, causing denial of service or system crash. Exploitation vectors are local to physical USB device interaction. The conne...

CVE-2017-16531

CVE-2017-16531 affects the Linux kernel before 4.13.6, where the driver/usb/core/config.c path allows a local user to trigger an out-of-bounds read via a crafted USB device, related to the USB_DT_INTERFACE_ASSOCIATION descriptor. Exploitation could cause a denial of service (kernel crash) and pot...

CVE-2017-6345

CVE-2017-6345 targets the LLC subsystem of the Linux kernel prior to 4.9.13, where a destructor is not guaranteed to exist in certain paths, enabling local users to trigger a denial-of-service (BUG_ON) or potentially other impact via crafted system calls. The vulnerability is fixed by the kernel ...

CVE-2017-8064

The CVE refers to Linux kernel 4.9.x and 4.10.x before 4.10.12 where the DVB-USB core (drivers/media/usb/dvb-usb-v2/dvb_usb_core.c) interacts incorrectly with CONFIG_VMAP_STACK. This can allow a local attacker to cause a denial of service (system crash or memory corruption) or other impact by abu...

CVE-2016-8405

CVE-2016-8405 is an information disclosure vulnerability affecting Android kernels (Kernel-3.10 and Kernel-3.18) via multiple subsystems (ION, Binder, USB, networking). It allows a local malicious process to access data outside its permissions after exploiting a privileged process; CVSS data in t...

CVE-2017-8924

CVE-2017-8924 affects Linux kernel

CVE-2017-14991

Consolidated details from connected advisories show CVE-2017-14991 affects the Linux kernel sg_ioctl path (drivers/scsi/sg.c) with vulnerable code in sg_get_request_table handling for /dev/sg0. The flaw exists in kernels before 4.13.4, allowing local attackers to read uninitialized kernel heap me...