CVE-2021-47393

Summary for CVE-2021-47393 (Linux kernel): The mlxreg_fan hardware monitor driver (mlxsw_core) contains a defect where returning a non-zero error when the fan current state is enforced via sysfs prevents thermal statistics updates. This occurs in scenarios where a minimum fan speed is requested v...

CVE-2022-3646

CVE-2022-3646 is a Linux kernel vulnerability affecting the nilfs_attach_log_writer function in fs/nilfs2/segment.c (BPF component). The issue enables a memory leak and may be exploitable remotely. A patch is recommended to fix this issue (VDB-211961).

CVE-2023-22998

CVE-2023-22998 affects the Linux kernel prior to 6.0.3. The vulnerability stems from drivers/gpu/drm/virtio/virtgpu_object.c misinterpreting the drm_gem_shmem_get_sg_table return value (treating an error pointer as NULL). This can allow a remote authenticated attacker on the local network to caus...

CVE-2024-26665

CVE-2024-26665 (Linux kernel) fixes a out-of-bounds access when constructing IPv6 PMTU ICMP errors in tunnels, triggered if the ICMPv6 error is built from a non-linear skb. The root cause is a slab-out-of-bounds read/write in the path that sums skb data (read of size 4) during PMTU error handling...

CVE-2024-26759

The CVE-2024-26759 issue is a Linux kernel race in swap caching. Two threads swapping the same entry with SWP_SYNCHRONOUS_IO can end up installing different pages (A and B), causing ABA and possible data corruption when the entry is freed and reused. The fix uses swapcache_prepare to pin the swap...

CVE-2024-35967

CVE-2024-35967: Linux Bluetooth SCO path vulnerable to not validating setsockopt input. syzbot reports copying data without input length check, causing slab-out-of-bounds reads via copy_from_sockptr_offset in include/linux/sockptr.h and an observed slab-out-of-bounds in sco_sock_setsockopt+0xc0b/...

CVE-2024-40997

CVE-2024-40997 involves a Linux kernel vulnerability where a memory leak in the amd-pstate cpufreq path was fixed. The issue was that kzalloc() allocated cpudata during amd_pstate_epp_cpu_init() but could not be freed in the corresponding exit path, leading to a leak on CPU EPP exit. The primary ...

CVE-2024-41014

The CVE CVE-2024-41014 affects the Linux kernel (xfs) and is caused by insufficient bounds checking in xlog_recover_process_data, specifically verifying the space for fixed members of xlog_op_header. A crafted XFS image can trigger an out-of-bounds read by altering the xlog_op_header and xlog_rec...

CVE-2024-43899

CVE-2024-43899 affects the Linux kernel’s DRM AMD display path. The vulnerability is a NULL pointer dereference in dcn20_resource.c that can cause a hang when MPV runs on a DCN401 dGPU, specifically during fullscreen playback after enabling fullscreen (double click). Affected component/function c...

CVE-2024-50304

The CVE-2024-50304 entry concerns the Linux kernel IPv4 ip_tunnel subsystem. A suspicious RCU usage warning in ip_tunnel_find() was addressed by adding a lockdep check to hlist_for_each_entry_rcu(), validating that the RTNL mutex is held. The per-netns IP tunnel hash table is protected by the RTN...

CVE-2024-53069

CVE-2024-53069 affects the Linux kernel firmware driver for Qualcomm SCM. The vulnerability is a NULL-pointer dereference when SCM calls are made with __scm set to NULL (driver may not be probed due to absent SCM entry in device-tree). The fix prevents dereferencing a NULL pointer, addressing pot...

CVE-2025-37785

The CVE-2025-37785 issue affects the Linux kernel ext4 filesystem. A corrupted directory containing a '.' entry with rec_len equal to a full block could cause an out-of-bounds read when ext4_empty_dir() loads the '.' entry and derives '..' location, due to incorrect handling of directory entries ...

CVE-2019-19318

The CVE-2019-19318 issue affects Linux kernel 5.3.11. Root cause: mounting a crafted btrfs image twice can trigger a use-after-free in rwsem_down_write_slowpath because rwsem_can_spin_on_owner’s rwsem_owner_flags returns an already freed pointer. Documented impact per sources indicates an availab...

CVE-2023-2007

CVE-2023-2007 affects the DPT I2O Controller driver in the Linux kernel. The issue arises from missing locking during object operations, enabling a local attacker to escalate privileges and execute arbitrary code in kernel context. Public references in Unity Linux (UTSA-2026-004778) and multiple ...

CVE-2024-33621

Technical details about CVE-2024-33621 are not present in the provided documents. The connected materials do not specify affected products, impact, or fixes for this CVE. Monitor for updates from official advisories.

CVE-2024-35853

CVE-2024-35853 affects the Linux kernel mlxsw spectrum_acl_tcam rehash path. The vulnerability arises from memory leaks during the rehash operation when migrating filters between regions. The current migration logic uses two chunks (vchunk->chunk and vchunk->chunk2) and can incorrectly assu...

CVE-2024-35937

CVE-2024-35937 affects the Linux kernel wifi stack: cfg80211 A-MSDU handling can read data out of bounds if a subframe header appears but is not fully present. The vulnerability root cause is insufficient validation of A-MSDU subframes; the fix tightens checks to ensure a subframe header can actu...

CVE-2024-41020

CVE-2024-41020 (Linux kernel) is addressed in IBM Storage Scale bulletin as part of a broader set of kernel fixes. The entry notes a filelock race involving fcntl/close that was backported to the compat path for 32-bit kernels, mirroring an earlier patch for the normal path. The connected IBM bul...

CVE-2024-42294

CVE-2024-42294 : The Azure/MiracleLinux and Linux kernel records describe a fix for a deadlock in the Linux kernel caused by blocking ABBA between sd_remove and sd_release. The issue arises when a SCSI/USB device is disconnected while the block/SD stack is mutexp-locked during device removal, lea...

CVE-2024-53053

The CVE-2024-53053 issue affects the Linux kernel SCSI UFS core. The deadlock occurs when ufshcd_rtc_work calls ufshcd_rpm_put_sync() and the power management usage_count is 0, causing the runtime suspend callback to wait for ufshcd_rtc_work to flush, leading to a deadlock. The published fix repl...

CVE-2024-53078

In CVE-2024-53078, Linux kernel vulnerability exists in drm/tegra: probe() where the code checked for NULL after calling iommu_paging_domain_alloc(). The function does not return NULL pointers; it returns error pointers. The fix updates the check to treat error pointers correctly, aligning the pr...

CVE-2024-53156

CVE-2024-53156: In the Linux kernel’s ath9k wireless driver, insufficient verification of conn_rsp_epid in htc_connect_service() can trigger an UBSAN array-out-of-bounds in htc_hst.c (index 255 out of range for htc_endpoint[22]). Astra Linux and related advisories confirm the issue and its fix: a...

CVE-2014-9940

CVE-2014-9940 affects the Linux kernel regulator_ena_gpio_free function in drivers/regulator/core.c, with exploitation possible through local access to gain privileges or cause a denial of service via a use-after-free. Affected condition is kernel versions before 3.19. Impact per sources is high ...

CVE-2015-2150

CVE-2015-2150 affects Xen 3.3.x–4.5.x and the Linux kernel up to 3.19.1, where access to PCI command registers is not properly restricted. This can allow a local guest OS user to cause a denial of service (unexpected NMI, host crash) by disabling memory or I/O decoding for a PCI Express device an...

CVE-2016-4565

CVE-2016-4565 affects the Linux kernel InfiniBand (IB) stack prior to 4.5.3, where certain IB interfaces improperly rely on write() semantics via a uAPI interface. This could allow a local unprivileged user to cause a denial of service (kernel memory write) and potentially other impact/escalation...

CVE-2017-5577

CVE-2017-5577 affects the Linux kernel VideoCore DRM vc4 driver. The vc4_get_bcl function in vc4_gem.c can encounter overflow while handling size values in VC4_SUBMIT_CL, and does not set an errno value, which can lead to an incorrect pointer dereference and a kernel OOPS, causing a denial of ser...

CVE-2017-7477

CVE-2017-7477 affects the Linux kernel MACsec driver (drivers/net/macsec.c) up to version 4.10.12. It is a heap-based buffer overflow triggered by using MAX_SKB_FRAGS+1 with NETIF_F_FRAGLIST, causing denial of service and potentially other unspecified impacts via skb_to_sgvec. Public details in c...

CVE-2017-7616

CVE-2017-7616 affects the Linux kernel (mm/mempolicy.c) where incorrect error handling in set_mempolicy/mbind compat syscalls can leak uninitialized stack data to local attackers. The issue is documented across multiple advisories (e.g., Debian, CentOS, Cloud Foundry) and is mitigated by updating...

CVE-2022-1516

CVE-2022-1516: A NULL pointer dereference in the Linux kernel’s X.25 protocol stack allows a local attacker to crash the system during session termination via a simulated Ethernet card. Connected sources consistently describe this flaw as a local (LOCAL) impact with no remote vector provided; no ...

CVE-2023-52683

CVE-2023-52683: Linux kernel ACPI LPIT integer-overflow in lpit_update_residency() (tsc_khz > UINT_MAX/1000) fixed by replacing a u32 multiplication with mul_u32_u32(). The MiracleLinux advisories (AXSA entries) reference this CVE among affected Linux kernel series and note remediation via ker...

CVE-2024-26638

CVE-2024-26638 affects Linux kernel nbd: the patch fixes a KMSAN warning by always zero-initializing the msghdr structure (preventing uninitialized fields like msg_get_inq from leaking into recv paths). The issue arises because several recent msghdr fields could be left with indeterminate values,...

CVE-2024-26675

CVE-2024-26675 (Linux kernel) affects the ppp_async path. The issue arises from MRU (Maximum Receive Unit) limits not being enforced for PPP async messages, which can trigger a warning in __alloc_pages via a memory/page allocation path when handling large skb allocations during PPP input. The des...

CVE-2024-26840

CVE-2024-26840 affects the Linux kernel cachefiles subsystem. The available technical details show a memory leak in cachefiles_add_cache() after unbinding /dev/cachefiles, fixed by releasing/adjusting the cache_cred reference count. The documented fix paths include: (1) increase reference handlin...

CVE-2024-27436

CVE-2024-27436 — Linux kernel ALSA: usb-audio issue Root cause: ALSA usb-audio parsing channels bits could overrun the map array if a device reports more bits than channels, allowing a write beyond bounds. Synopsis in connected sources: the vulnerability was resolved in the Linux kernel by stoppi...

CVE-2024-36288

CVE-2024-36288 affects the Linux kernel SUNRPC code. The issue is a loop termination condition in gss_free_in_token_pages, where the in_token->pages[] array is not NULL terminated, causing a KASAN memory access warning. Impact is described as memory access issues with potentially exploitable b...

CVE-2024-39503

CVE-2024-39503 : Linux kernel netfilter ipset race in the list:set type (namespace cleanup vs. gc) has a confirmed fix. The issue was a race that could cause use-after-free by GC data being accessed after the set is destroyed. The patch changes destruction order: when destroying all sets, first r...

CVE-2024-41064

CVE-2024-41064 is a Linux kernel vulnerability affecting the powerpc/eeh path. Root cause: during eeh_pe_report_edev(), edev->pdev can change if a PCI device is removed, risking a crash. The documented fix is to hold the PCI rescan/remove lock while taking a copy of edev->pdev->bus to pr...

CVE-2024-42245

CVE-2024-42245 is a Linux kernel vulnerability resolved by reverting the patch that changed load balancing in sched/fair. The original change caused an O(n) detachment scan in detach_tasks() when many tasks on a CPU were pinned, and the load-balancer code runs with rq lock held (often in softirq ...

CVE-2024-42283

The CVE-2024-42283 issue in the Linux kernel concerns net/nexthop: two reserved fields in the nexthop_grp were not initialized by nla_put_nh_group(), allowing garbage to leak from the kernel. The public description notes these fields are reserved and currently unused, but their non‑zero values ca...

CVE-2024-46698

CVE-2024-46698 (Linux kernel) is resolved. The issue was in video/aperture handling where sysfb_disable() was only invoked for VGA-class boot devices, allowing a non‑VGA boot device to trigger a NULL pointer dereference when the non-primary GPU subsequently called sysfb_disable() after resources ...

CVE-2024-49883

In CVE-2024-49883, the Linux kernel ext4 ext4_ext_insert_extent() is vulnerable to use-after-free when a path is reallocated in ext4_ext_create_new_leaf(), leaving a stale path in ext4_ext_insert_extent() and triggering UAF (KASAN) during map/write paths. The issue is reproduced via a realloc of ...

CVE-2024-53131

CVE-2024-53131 concerns the Linux kernel nilfs2 subsystem. The issue manifests as a NULL pointer dereference when the tracepoint block_touch_buffer is exercised from __nilfs_get_folio_block() via touch_buffer(), which accesses bh->b_bdev->bd_dev even if the buffer head lacks a valid block_d...

CVE-2024-53134

CVE-2024-53134 affects the Linux kernel, specifically the pmdomain: imx93-blk-ctrl path. The root cause is a faulty loop condition in the remove path: it used bc->onecell_data.num_domains instead of i onecell_data.num_domains, which can cause an infinite loop and kernel panic. The advisory ind...

CVE-2024-56623

CVE-2024-56623 : In the Linux kernel, the qla2xxx SCSI driver contains a use-after-free during unload, causing a system crash with a stack trace in SLUB. The root cause is a double-thread termination signal: an UNLOADING flag may race with kthread_stop, leading to use-after-free on cleanup. The f...

CVE-2025-21703

Affecting the Linux kernel netem/qdisc path: the issue stems from updating sch->q.qlen before qdisc_tree_reduce_backlog(), causing DRR to miss qlen_notify() and enabling a use-after-free in the active list. CVSS v3.1 indicates high impact (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). The Astra Linux ...

CVE-2011-1495

CVE-2011-1495 affects the Linux kernel up to 2.6.38, in drivers/scsi/mpt2sas/mpt2sas_ctl.c. The issue arises because length and offset values are not validated before memory copy operations, potentially allowing a local user to gain privileges, cause memory corruption (DoS), or read sensitive ker...

CVE-2015-8543

CVE-2015-8543 affects the Linux kernel networking stack (up to version 4.3.3 as used in Android and others). The issue: the networking implementation does not validate protocol identifiers for certain protocol families, enabling local users to cause a NULL pointer dereference and system crash, wi...

CVE-2016-7425

CVE-2016-7425 affects the Linux kernel component arcmsr_iop_message_xfer in drivers/scsi/arcmsr/arcmsr_hba.c. The vulnerability arises because a length field is not properly restricted, enabling a local user to trigger a heap-based buffer overflow via the ARCMSR_MESSAGE_WRITE_WQBUFFER control cod...

CVE-2017-13695

CVE-2017-13695 affects the Linux kernel up to 4.12.9. The vulnerability stems from acpi_ns_evaluate() in drivers/acpi/acpica/nseval.c not flushing the operand cache, which can cause a kernel memory disclosure via a crafted ACPI table and may bypass KASLR (kernel

CVE-2018-13096

CVE-2018-13096 : A vulnerability in the Linux kernel (fs/f2fs/super.c) up to version 4.14 allows a denial of service via out-of-bounds memory access when mounting a crafted f2fs image. The issue occurs on abnormal bitmap sizes and can trigger a BUG. The connected Nessus advisories reiterate this ...