14999 matches found
CVE-2024-47678
The CVE-2024-47678 issue in the Linux kernel was fixed by reordering ICMP rate limiting: apply the per-destination check before the host-wide limit. The patch ensures icmp_global_allow() only checks quota (credits not consumed yet), then updates the per-destination rate via inetpeer (which may ad...
CVE-2024-53053
The CVE-2024-53053 issue affects the Linux kernel SCSI UFS core. The deadlock occurs when ufshcd_rtc_work calls ufshcd_rpm_put_sync() and the power management usage_count is 0, causing the runtime suspend callback to wait for ufshcd_rtc_work to flush, leading to a deadlock. The published fix repl...
CVE-2015-2925
The vulnerability CVE-2015-2925 affects the Linux kernel prior to 4.2.4, specifically the prepend_path function in fs/dcache.c. It allows a local attacker to bypass container protections by renaming a directory inside a bind mount, enabling a double-chroot-style escape. The impact is enabling pri...
CVE-2015-8839
CVE-2015-8839 is a Linux kernel ext4 race-condition vulnerability (before 4.5) that local users could exploit to cause denial of service or disk corruption by writing to pages belonging to other users after unsynchronized hole punching and page faults. Public documents confirm the affected compon...
CVE-2016-5829
CVE-2016-5829 is a Linux kernel vulnerability in the hiddev driver (hiddev_ioctl_usage in drivers/hid/usbhid/hiddev.c) that allows a local user to trigger heap-based buffer overflows by sending crafted ioctls (HIDIOCGUSAGES or HIDIOCSUSAGES). Affected kernels are up to 4.6.3 (through 4.6.3). The ...
CVE-2017-10911
Summary: CVE-2017-10911 affects the Linux kernel driver path drivers/block/xen-blkback/blkback.c, related to Xen block-interface responses (XSA-216). The vulnerability arises from copying uninitialized padding fields in Xen blkback response structures, which can let a guest OS user read host (or ...
CVE-2017-17558
Technical details about CVE-2017-17558 are not publicly provided in the supplied documents. Monitor for official advisories for affected products, impact, and mitigations; no concrete exploit information or patch details are available here.
CVE-2017-17806
CVE-2017-17806 affects the Linux kernel before 4.14.8. The HMAC implementation (crypto/hmac.c) does not validate that the underlying hash algorithm is unkeyed, allowing a local attacker who can use the AF_ALG-based hash interface (CONFIG_CRYPTO_USER_API_HASH) and SHA-3 (CONFIG_CRYPTO_SHA3) to tri...
CVE-2019-19061
CVE-2019-19061 is tied to a memory leak in the Linux kernel’s ADIS16400 IIO IMU driver: adis_update_scan_mode_burst() in drivers/iio/imu/adis_buffer.c before 5.3.9. The issue can cause denial of service via memory exhaustion. Affected component: Linux kernel (ADIS16400 IIO IMU driver). Root cause...
CVE-2019-19535
CVE-2019-19535 affects the Linux kernel up to 5.2.8 via the PCAN-USB FD driver (drivers/net/can/usb/peak_usb/pcan_usb_fd.c). A malicious USB device can trigger an info-leak in this driver (CID-30a8beeb3042), causing partial information disclosure. Affected product: Linux kernel before 5.2.9; vuln...
CVE-2019-19536
CVE-2019-19536 is an info-leak vulnerability in the Linux kernel (<5.2.9) caused by a faulty handling of a malicious USB device in drivers/net/can/usb/peak_usb/pcan_usb_pro.c (CID-ead16e53c2f0). Some public advisories (Unity Linux UTSA-2026-*) reference this CVE and note the issue affects kern...
CVE-2021-45402
CVE-2021-45402 affects the Linux kernel where check_alu_op() in kernel/bpf/verifier.c does not update bounds properly when handling mov32, enabling local attackers to leak potentially sensitive addresses (pointer leak). The description is consistently cited across multiple connected advisories (e...
CVE-2022-4696
CVE-2022-4696 is a use-after-free in the Linux kernel’s io_uring subsystem (IORING_OP_SPLICE). If IO_WQ_WORK_FILES is missing, a path including current->nsproxy can lead to reference counter mismanagement and a UAF. Affected component: io_uring/splice paths in kernel 5.10.x. Impact is local: p...
CVE-2023-42752
CVE-2023-42752 - Linux kernel integer overflow in skb_shared_info allocation . The vulnerability arises when the kernel’s overflow allows skb_shared_info to be allocated in userspace. This is exploitable on systems without SMAP protection because skb_shared_info may contain references to function...
CVE-2024-41020
CVE-2024-41020 is a Linux kernel vulnerability fixed by applying the same fcntl/close race recovery patch to the compat path for 32-bit kernels. The issue concerns a race condition in filelock handling during fcntl/close, resolved by ensuring reliable lock removal across both normal and 32-bit co...
CVE-2024-41064
CVE-2024-41064 concerns the Linux kernel: powerpc/eeh can crash if edev->pdev changes when a PCI device is removed during eeh_pe_report_edev(). The technical detail specified across connected sources is that the crash occurs due to improper handling of edev->pdev; the recommended remedy is ...
CVE-2024-46698
CVE-2024-46698 (Linux kernel) is resolved. The issue was in video/aperture handling where sysfb_disable() was only invoked for VGA-class boot devices, allowing a non‑VGA boot device to trigger a NULL pointer dereference when the non-primary GPU subsequently called sysfb_disable() after resources ...
CVE-2024-49860
CVE-2024-49860 relates to the Linux kernel ACPI subsystem, specifically the sysfs path and the _STR method. The vulnerability arises when the _STR method returns a value that is not a buffer object; only buffers are valid, and returning other data types can cause description_show() to access inva...
CVE-2024-49991
The CVE-2024-49991 issue affects the Linux kernel DRM/AMD stack: amdkfd_free_gtt_mem cleared the wrong pointer, causing a use-after-free when amdgpu_bo_unref resets the pointer. The patch passes the correct pointer reference to amdgpu_bo_unref to ensure the original pointer is NULL’d correctly. T...
CVE-2024-56767
CVE-2024-56767 affects the Linux kernel in dmaengine/at_xdmac where at_xdmac_memset_create_desc may return NULL, risking a null pointer dereference and a potential crash (availability impact). Connected sources confirm the issue in upstream kernel code and note patches/upgraded packages: e.g., De...
CVE-2025-21703
Affecting the Linux kernel netem/qdisc path: the issue stems from updating sch->q.qlen before qdisc_tree_reduce_backlog(), causing DRR to miss qlen_notify() and enabling a use-after-free in the active list. CVSS v3.1 indicates high impact (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). The Astra Linux ...
CVE-2025-21862
CVE-2025-21862 affects the Linux kernel drop_monitor path. Root cause: incorrect initialization order leading to a spinlock not being initialized if drop_monitor is loaded as a module, enabling a potential race during module loading. Impact: may cause instability or erroneous behavior in netlink/...
CVE-2016-10208
CVE-2016-10208 affects the Linux kernel ext4_fill_super(path) code: it fails to validate meta block groups when mounting an ext4 image, enabling a locally proximate attacker with physical access to trigger memory corruption via a crafted EXT4 image, resulting in an out-of-bounds read and system c...
CVE-2016-2069
CVE-2016-2069 describes a race condition in arch/x86/mm/tlb.c of the Linux kernel that could allow local privilege escalation by a process triggering access to a paging structure on another CPU. The connected Nessus advisories confirm affected Linux kernel lines and reference Kernel versions befo...
CVE-2017-14140
CVE-2017-14140 describes a Linux kernel vulnerability in the move_pages system call (mm/migrate.c): it does not validate the effective UID of the target process, allowing a local attacker to learn the memory layout of a setuid-executable despite ASLR. The issue is a local information disclosure r...
CVE-2017-17864
CVE-2017-17864 affects the Linux kernel up to version 4.14.8, specifically the BPF verifier code (kernel/bpf/verifier.c). The root cause is a mishandling of states_equal comparisons between the pointer data type and the UNKNOWN_VALUE data type, which can allow a local user to leak potentially sen...
CVE-2019-19813
CVE-2019-19813 is a Linux kernel use-after-free in __mutex_lock on Linux kernel 5.0.21 when mounting a crafted btrfs image, performing operations, and calling syncfs, related to mutex_can_spin_on_owner, __btrfs_qgroup_free_meta, and btrfs_insert_delayed_items. It is a local, user-interaction-requ...
CVE-2023-51780
CVE-2023-51780: Linux kernel before 6.6.8 contains a use-after-free in do_vcc_ioctl (net/atm/ioctl.c) caused by a vcc_recvmsg race, enabling local exploitation. Affected: Linux kernel versions prior to 6.6.8. Root cause: race between vcc_recvmsg and do_vcc_ioctl leading to use-after-free. Impact:...
CVE-2024-26717
CVE-2024-26717: Linux kernel HID I2C- HID OF driver fix for NULL pointer dereference on power-up failure. The OF driver did not initialize the client pointer, which is dereferenced when power-up fails, potentially leading to a NULL-deref. The entry documents a resolved issue in the HID i2c-hid-of...
CVE-2024-27015
CVE-2024-27015 affects the Linux kernel netfilter flowtable implementation. The issue is an incorrect pppoe tuple handling where the PPPoE header is expected at the network header offset, causing flowtable lookups to miss and PPPoE traffic to enter the classical forwarding path. Connected advisor...
CVE-2024-36015
In CVE-2024-36015, the Linux kernel exposes a flaw in ppdev: register_device does not validate the index returned by ida_simple_get, risking use of an invalid index. The fix is to check the index after ida_simple_get, and if abnormal, print a warning, drop the port, and record the value. Public a...
CVE-2024-36288
CVE-2024-36288 affects the Linux kernel SUNRPC path. The bug is in gss_free_in_token_pages(): the in_token->pages[] array is not NULL-terminated, which can trigger a KASAN memory access issue (wild-memory-access) and, per references, contributes to a high-severity impact. Connected advisories/...
CVE-2024-40998
CVE-2024-40998 — Normal (details provided) Affects Linux kernel ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super(). The root cause is registering sysfs before s_msg_ratelimit_state.lock is initialized, allowing concurrent updates to rs->interval (non-zero) to trigge...
CVE-2024-42271
CVE-2024-42271 affects the Linux kernel’s IUCV subsystem. The issue is a use-after-free in iucv_sock_close() and iucv_sever_path() caused by a race on severing the path, with iucv_path_sever being called from both process and bh contexts. Without atomic compare-and-swap, a window may exist where ...
CVE-2024-42294
CVE-2024-42294 : The Azure/MiracleLinux and Linux kernel records describe a fix for a deadlock in the Linux kernel caused by blocking ABBA between sd_remove and sd_release. The issue arises when a SCSI/USB device is disconnected while the block/SD stack is mutexp-locked during device removal, lea...
CVE-2024-46713
CVE-2024-46713 affects the Linux kernel perf/aux path. The root cause was that event->mmap_mutex alone was insufficient to serialize the AUX buffer, enabling race conditions. The fix adds a per-RB mutex to fully serialize AUX buffer access and corrects the previous lock order issue where perf_...
CVE-2024-50029
CVE-2024-50029 refers to a Linux kernel bug in Bluetooth handling. The issue is a use-after-free in hci_enhanced_setup_sync where the ACL connection can be destroyed while a cmd_sync is pending, leading to a KASAN slab-use-after-free in hci_enhanced_setup_sync. The description includes a trace sh...
CVE-2024-50151
Technical details about CVE-2024-50151 are not publicly provided in the connected documents. They mention an SMB2_IOCTL OOB issue in the CIFS client, but no affected versions, root-cause, or fix specifics are given here. Monitor for updates.
CVE-2024-53237
CVE-2024-53237 is a Linux kernel vulnerability describing a use-after-free in the Bluetooth device lifecycle, specifically in the function device_for_each_child. The issue was surfaced by KASAN and tied to a scenario where a parent device could be freed while a child device still holds a referenc...
CVE-2024-56748
CVE-2024-56748 affects the Linux kernel SCSI qedf driver (QLogic/QED) where memory allocated for sb (scsi block) was leaked on sb_init failure. The root cause was that the dma memory sb_virt allocated for the SB was not freed when qed_ops->common->sb_init failed, leading to a memory leak. T...
CVE-2024-56758
CVE-2024-56758 affects the Linux kernel (btrfs) and describes a race where, after folio unlock during relocation, another thread can modify the folio mapping before folio_lock() and lead to an invalid page, potentially causing a NULL pointer dereference during concurrent transaction aborts. The i...
CVE-2025-22121
CVE-2025-22121 – Linux kernel ext4 xattr check bypass (out-of-bounds read) What’s affected: Linux kernel ext4 filesystem code, specifically ext4_xattr_inode_dec_ref_all() and related xattr handling paths that can read beyond allocated buffers when inodes contain xattrs. What’s the issue: A read o...
CVE-2025-38000
CVE-2025-38000 affects the Linux kernel HFSC scheduler qlen accounting: when enqueuing the first packet, hfsc_enqueue() previously used child qdisc peek() before updating sch->q.qlen and sch->qstats.backlog, which could trigger a dequeue and leave the HFSC class in an inconsistent state (po...
CVE-2015-7515
CVE-2015-7515 affects the Linux kernel (pre-4.4) due to improper validation in the aiptek_probe path of drivers/input/tablet/aiptek.c. A physically proximate user can cause a NULL pointer dereference and system crash via a crafted USB device that lacks endpoints, leading to denial of service. The...
CVE-2018-20511
The CVE-2018-20511 vulnerability affects Linux kernel older than 4.18.11, where ipddp_ioctl in drivers/net/appletalk/ipddp.c allows local users with CAP_NET_ADMIN to read the ipddp_route and next fields via SIOCFINDIPDDPRT, leading to kernel address disclosure (information leakage). Unity/Linux a...
CVE-2018-7492
The CVE-2018-7492 entry affects the Linux kernel prior to 4.14.7, where a NULL pointer dereference in net/rds/rdma.c __rds_rdma_map() can be triggered by local attackers via RDS_GET_MR / RDS_GET_MR_FOR_DEST. This leads to a system panic and denial-of-service. Affected versions are exposed to loca...
CVE-2019-19048
CVE-2019-19048 corresponds to a memory leak in the Linux kernel’s crypto_reportstat() path inside drivers/virt/vboxguest/vboxguest_utils.c, before 5.3.9. The issue arises when copy_form_user() fails, enabling a denial of service via memory exhaustion. The connected Nessus advisories (Unity Linux ...
CVE-2021-3739
CVE-2021-3739 is a local NULL pointer dereference in the Linux kernel’s btrfs_rm_device() (fs/btrfs/volumes.c) that requires CAP_SYS_ADMIN to trigger. The issue can crash the system or leak kernel information, with impact to availability and, to a lesser extent, confidentiality. Multiple connecte...
CVE-2022-49058
In CVE-2022-49058, the Linux kernel CIFS subsystem is affected by a potential buffer overflow in handling symlinks. The root cause is that Smatch marks link_len as untrusted (originating from sscanf()) and may allow a length to exceed the destination buffer, risking a overflow in poly1305-related...