CVE-2025-21962

CVE-2025-21962 affects the Linux kernel CIFS mount option closetimeo, where user-provided closetimeo (u32) is converted to jiffies before validation, allowing an integer overflow. Connected sources (Astra Linux, ALAS AWS advisories, Debian/Red Hat references) confirm this as a kernel-level issue ...

CVE-2010-2521

CVE-2010-2521 affects the Linux kernel NFS server (fs/nfsd/nfs4xdr.c) prior to 2.6.34-rc6. The issue is due to multiple buffer overflows in the XDR implementation, exploitable via a crafted NFSv4 WRITE request, impacting the read_buf and nfsd4_decode_compound paths. Consequences include denial of...

CVE-2016-0774

CVE-2016-0774 affects Linux kernel backports in Debian wheezy (before 3.2.73-2+deb7u3) and RHEL 7.1 (before 3.10.0-229.26.2). The flaw is in the pipe_read/pipe_write paths in fs/pipe.c where the side effects of failed __copy_to_user_inatomic/__copy_from_user_inatomic calls are not properly handle...

CVE-2016-10200

CVE-2016-10200 describes a race condition in the Linux kernel’s L2TPv3 IP Encapsulation feature that can allow a local user to escalate privileges or cause a denial of service via repeated bind() calls without correctly checking SOCK_ZAPPED status. The issue affects Linux kernels prior to 4.8.14,...

CVE-2016-2847

CVE-2016-2847 affects the Linux kernel, where fs/pipe.c does not cap unread data in pipes, enabling local users to cause memory exhaustion and a denial of service. The description and connected sources confirm the vulnerability lies in the per-user pipe data handling and that the risk is local Do...

CVE-2017-14489

CVE-2017-14489 affects the Linux kernel iSCSI transport (drivers/scsi/scsi_transport_iscsi.c: iscsi_if_rx). The root cause is incorrect length validation, enabling a local authenticated attacker to trigger a denial of service (kernel panic) or memory corruption. Affected as of kernel versions up ...

CVE-2017-5967

CVE-2017-5967 affects the Linux kernel: when CONFIG_TIMER_STATS is enabled, the time subsystem through kernel 4.9.9 allows a local attacker to reveal real PID values (outside of PID namespaces) by reading /proc/timer_list, via the print_timer path in kernel/time/timer_list.c and the __timer_stats...

CVE-2018-25020

Summary of CVE-2018-25020 (Linux kernel BPF): The vulnerability is in the BPF subsystem where a long jump over an instruction sequence can cause an overflow. It specifically affects the kernel's BPF implementations in files kernel/bpf/core.c and net/core/filter.c, for Linux kernels prior to 4.17....

CVE-2022-1974

CVE-2022-1974 describes a use-after-free in the Linux kernel NFC core due to a race between kobject creation and deletion. The vulnerability permits a local attacker with CAP_NET_ADMIN to leak kernel information. The description and references indicate this is tied to the Linux NFC subsystem and ...

CVE-2023-32269

The CVE-2023-32269 issue is a use-after-free in the Linux kernel (before 6.1.11) in net/netrom/af_netrom.c where accept is allowed for a connected AF_NETROM socket. Exploitation requires netrom routing to be configured or CAP_NET_ADMIN. This vulnerability can lead to local privilege/escalation im...

CVE-2023-52607

In the Linux kernel, the following vulnerability has been resolved: powerpc/mm: Fix null-pointer dereference in pgtable_cache_add kasprintf() returns a pointer to dynamically allocated memorywhich can be NULL upon failure. Ensure the allocation was successfulby checking the pointer validity.

CVE-2024-26803

Technical details beyond the initial description are not provided in the connected documents. Public specifics about affected products, versions, or fixes are not available here; monitor for official updates.

CVE-2024-26843

In the Linux kernel, the following vulnerability has been resolved: efi: runtime: Fix potential overflow of soft-reserved region size md_size will have been narrowed if we have >= 4GB worth of pages in asoft-reserved region.

CVE-2024-35789

CVE-2024-35789 – Linux kernel : Vulnerability in wifi/mac80211 VLAN handling where on moving a station out of a VLAN and deleting the VLAN, the fast_rx entry could still point to the VLAN netdev, enabling a use-after-free. The fixed behavior is to immediately call ieee80211_check_fast_rx after VL...

CVE-2024-35952

CVE-2024-35952 concerns the Linux kernel: a hard-to-reproduce soft-lockup was caused by a loop in ast_dp_set_on_off() that could infinite-loop because VGACRI-Dx scratch registers—actually MCU-controlled by DPMCU in the BMC—are protected by scu-lock. If scu-lock is enabled, DPMCU cannot update the...

CVE-2024-36968

The CVE-2024-36968 entry concerns the Linux kernel Bluetooth L2CAP path. Concrete details across connected docs show: the vulnerability arises in l2cap_le_flowctl_init() where MTU validation could fail, allowing division by zero and an integer overflow when hdev->le_mtu is out of the valid ran...

CVE-2024-39487

CVE-2024-39487 affects the Linux kernel bonding code, specifically the option handling in bond_option_arp_ip_targets_set. The root cause is an out-of-bounds read when newval->string is empty, causing a read of the byte after the string during in4_pton/strlen flow. The report shows a KASAN slab...

CVE-2024-41073

CVE-2024-41073 affects the Linux kernel NVMe driver: a discarded special payload could be double-freed on a retry unless RQF_SPECIAL_LOAD is cleared during request cleanup. The fix is to clear RQF_SPECIAL_LOAD when cleaning the request to prevent the double-free scenario; multiple advisories (ALM...

CVE-2024-41076

CVE-2024-41076: In the Linux kernel, NFSv4: Fix memory leak in nfs4_set_security_label. The vulnerability leaks nfs_fattr and nfs4_label each time a security xattr is set. The connected Astra/IBM bulletins reiterate this CVE as resolved; no other product/vendor/version details are provided in the...

CVE-2024-42073

The CVE-2024-42073 issue is in the Linux kernel mlxsw spectrum_buffers path. The Shared Buffer Status Register (SBSR) payloads used by two operations were built with absolute port numbers rather than numbers relative to the first port of the port_page, causing memory corruption on Spectrum-4 syst...

CVE-2024-42240

CVE-2024-42240: Linux kernel x86/bhi vulnerability where, when BHI mitigation is enabled, an entry_SYSENTER_compat() sequence could trigger a #DB handler warning due to the TF single-step bit handling. The fix changes the order to clear the TF flag before or after clearing branch history as appro...

CVE-2024-42284

CVE-2024-42284 affects the Linux kernel Tipc UDP address handling. The vulnerability arises when tipc_udp_addr2str() returns 0 on error, allowing an invalid UDP media address to be treated as valid and potentially triggering a buffer overflow in tipc_media_addr_printf(). The fix commits return a ...

CVE-2024-53093

CVE-2024-53093 targets the Linux kernel’s nvme-multipath subsystem. The vulnerability stemmed from partition scanning being performed in the controller’s scan_work context. If a path error occurred during that scan, IO could deadlock because the same context would block until a path became availa...

CVE-2024-53113

CVE-2024-53113 (Linux kernel) : A NULL pointer de-reference can occur in alloc_pages_bulk_noprof when a task is migrated between cpusets with cpuset enabled; ac.preferred_zoneref may become NULL during zonelist traversal, leading to a crash. The fixes introduce a NULL pointer check on preferred_z...

CVE-2025-21693

In the Linux kernel CVE-2025-21693, the zswap path could UAF resources if the original per-CPU acomp_ctx is still in use when a CPU hotplug occurs, because preemption/migration isn’t disabled during the operation. The defect affects mm/zswap: the code retrieves acomp_ctx on the current CPU at ope...

CVE-2025-37838

CVE-2025-37838 affects the Linux kernel HSI ssi_protocol: a use-after-free can occur due to a race between ssi_protocol_probe() binding ssi->work to ssip_xmit_work() and ssi_protocol_remove() freeing ssi via kfree(ssi) while the work is still potentially in use. The connected Azure Linux 3.0 a...

CVE-2017-2596

CVE-2017-2596 affects the Linux kernel’s KVM VMX handling. The nested_vmx_check_vmptr function in arch/x86/kvm/vmx.c through kernel 4.9.8 incorrectly emulates the VMXON instruction, enabling a local L1 guest user to cause host memory exhaustion and a denial of service by abusing mishandled page r...

CVE-2021-29266

CVE-2021-29266 affects the Linux kernel prior to 5.11.9. The use-after-free vulnerability is in drivers/vhost/vdpa.c where v->config_ctx may hold an invalid value when a character device is reopened, enabling a use-after-free scenario. The issue is addressed in ChangeLog-5.11.9 (kernel patch f...

CVE-2021-47103

CVE-2021-47103 concerns the Linux kernel: the pointer sk_rx_dst used in inet paths (tcp_v4_do_rcv/tcp_v6_do_rcv) was protected by RCU without proper documentation and ordering, leading to potential use-after-free scenarios demonstrated by KASAN in dst_check and related code paths. The connected S...

CVE-2023-23039

CVE-2023-23039 : In the Linux kernel (up to 6.2.0-rc2), the race condition in drivers/tty/vcc.c between vcc_open() and vcc_remove() can cause a use-after-free when a physically proximate attacker removes a VCC device while open() is invoked. This yields a potential impact on integrity and availab...

CVE-2023-52757

CVE-2023-52757 : Linux kernel SMB client deadlock fix. The issue arose when releasing mids under server->mid_lock could lead to a deadlock with cifs_tcp_ses_lock and smb2_find_smb_tcon if mids were released without proper references. The patch removes an unnecessary spinlock in release_mid() c...

CVE-2023-52832

CVE-2023-52832 affects the Linux kernel’s wireless stack (mac80211/nl80211). The issue arises when ieee80211_get_tx_power() can return INT_MIN (the internal sentinel for an “unset power level”), which can trigger a UBSAN signed‑integer overflow. The observed effect is a UBSAN warning in net/wirel...

CVE-2024-0562

CVE-2024-0562 is a Linux kernel use-after-free vulnerability in wb_inode_writeback_end related to disk removal. When a disk is removed, bdi_unregister stops write-back, but wb_inode_writeback_end() may schedule bandwidth estimation work after the bdi_writeback has been freed, causing a timer to a...

CVE-2024-35942

CVE-2024-35942 relates to the Linux kernel and affects the imx8mp block clock handling. The issue occurs when the fdcc clock, intended for the HDMI RX domain, is added to the hdmimix domain while HDMI TX/LCDIF probe sequencing can disable it. If the clock is disabled before HDMI/LCDIF probe, LCDI...

CVE-2024-36006

CVE-2024-36006 affects the Linux kernel mlxsw spectrum_acl_tcam code. The root cause is incorrect list usage: both vchunk_migrate_all and vregion_rehash paths call list_first_entry() without ensuring the lists are non-empty, triggering warnings. The connected Astra Linux bulletin confirms the sam...

CVE-2024-40995

CVE-2024-40995 affects the Linux kernel net/sched: act_api where repeated adds of actions with the same index could hang by causing an infinite loop in tcf_idr_check_alloc. The fix returns -EAGAIN to prevent the loop while preserving documented behavior. Syzbot reported tasks blocked waiting on r...

CVE-2024-41023

CVE-2024-41023 — Linux kernel vulnerability in sched/deadline: a task_struct reference leak occurs when a timer is canceled before expiration after start_dl_timer() increments the refcount. The leak happens because the timer callback is supposed to decrement the reference count, but an early-canc...

CVE-2024-44970

CVE-2024-44970 relates to the Linux kernel mlx5e SHAMPO driver. When a Work Queue Entry (WQE) has all strides consumed, it is unlinked from the WQ list. The issue allowed receiving CQEs with 0 consumed strides for the same WQE after it was fully consumed and unlinked, triggering an extra unlink t...

CVE-2024-46819

CVE-2024-46819: In the Linux kernel, the drm/amdgpu path for nbio_v7_4 could dereference an obj when ras_manager.obj is null, causing a warning and potential data leakage through NBIO data. The issue has been resolved in the cited update. The description notes a fix to avoid printing NBIO error d...

CVE-2024-50093

Summary: CVE-2024-50093 relates to the Linux kernel where the processor_thermal/intel int340x driver emitted a warning during module unload due to an unnecessary second pci_disable_device() call after enabling a PCI device with pcim_device_enable(). The connected Astra Linux and Debian Debian-LTS...

CVE-2024-50199

CVE-2024-50199 (Linux kernel): The issue is in mm/swapfile handling where HugeTLB pages could be leaked after swapoff due to pud_none_or_clear_bad path, causing a bad pud error. The described fix is to skip HugeTLB pages for unuse_vma, preventing leakage when swapping. Affected areas are the swap...

CVE-2024-53224

CVE-2024-53224 affects the Linux kernel mlx5_ib/Mellanox InfiniBand driver. The issue arises from a race between device deregistration and pkey-change work, caused by relocating pkey change work init/cleanup from device resources stage to the notifier stage and by moving the MLX5_IB_STAGE_DEVICE_...

CVE-2024-56647

CVE-2024-56647: In the Linux kernel, icmp host relookup can trigger ip_rt_bug when ARP/link conditions and xfrm are involved. The fix skips icmp relookup for locally generated packets (e.g., ICMP errors) to avoid dst->out being ip_rt_bug on loopback and similar scenarios. Reproduced scenario s...

CVE-2024-57947

The CVE-2024-57947 issue affects the Linux kernel netfilter nf_set_pipapo logic used in NFT range matching. The bug arises from how the initial map is filled: the initial buffer was set to all-ones without constraining to the size of the first field, and after each map-search round, the swap betw...

CVE-2025-21636

CVE-2025-21636 is a Linux kernel vulnerability where the code path for sctp: sysctl: plpmtud_probe_interval used current->nsproxy, risking NULL dereference when the task exits. The fix replaces use of current->nsproxy with obtaining the necessary net pointer from table->data via containe...

CVE-2025-21925

CVE-2025-21925 : In the Linux kernel, a vulnerability was fixed where skb_get() could be used before dev_queue_xmit() when a shared skb is processed (e.g., with IFF_TX_SKB_SHARING). The documented exploit path involves syzbot crashing a host via the llc_sap_action_send_test_c path, with the e1000...

CVE-2025-21927

CVE-2025-21927 affects the Linux kernel nvme-tcp path, specifically nvme_tcp_recv_pdu(). The vulnerability arises because the header length is not validated; when header digests are enabled, a packet with an invalid header length (e.g., 255) could cause nvme_tcp_verify_hdgst() to access memory ou...

CVE-2025-21991

The CVE-2025-21991 issue affects the Linux kernel’s AMD microcode loader for x86. It could trigger an out-of-bounds access when iterating NUMA nodes with empty or CPU-less nodes, potentially accessing cpu_data beyond its bounds during a microcode update. The root cause is that load_microcode_amd(...

CVE-2025-37823

CVE-2025-37823: In Linux kernel net_sched hfsc, there is a potential use-after-free (UAF) in hfsc_dequeue() that has been fixed. The patch adds safety guards around hfsc_dequeue() to prevent UAF, addressing a vulnerability in the hfsc class handling. The description notes no reliable reproducer p...

CVE-2011-1833

The CVE-2011-1833 issue affects the Linux kernel’s eCryptfs subsystem, specifically the ecryptfs_mount path (fs/ecryptfs/main.c). A race condition during mounting with a mismatched uid could let a local attacker bypass file permissions. This vulnerability is present in kernel versions before 3.1....