CVE-2024-26919

CVE-2024-26919 : In the Linux kernel, the USB ULPI driver had a debugfs directory leak due to a naming mismatch: the ULPI per-device debugfs root was created using the parent device name, while ulpi_unregister_interface attempted to remove a directory named after the ULPI device itself. This caus...

CVE-2024-26978

The CVE-2024-26978 entry relates to a Linux kernel issue: creating a max14830 I2C device from userspace could trigger a NULL pointer dereference in max310x during I2C instantiation. The fix adds a validity check for the devtype and aborts the probe with a clear error message. Connected advisories...

CVE-2024-35952

CVE-2024-35952 concerns the Linux kernel: a hard-to-reproduce soft-lockup was caused by a loop in ast_dp_set_on_off() that could infinite-loop because VGACRI-Dx scratch registers—actually MCU-controlled by DPMCU in the BMC—are protected by scu-lock. If scu-lock is enabled, DPMCU cannot update the...

CVE-2024-40940

The CVE-2024-40940 issue affects the Linux kernel mlx5 driver (net/mlx5). The root cause is in mlx5_lag_create_port_sel_table(): when a flow rule creation fails, the tainted pointer is deleted multiple times instead of using the correct flow rule pointers. The bug is fixed by using the correct fl...

CVE-2024-40984

CVE-2024-40984 is a Linux kernel vulnerability related to ACPICA mapping of operation regions (BARs). The root cause was a NULL pointer dereference when a memory mapping extended across page boundaries and a read/write length attempted to access beyond the mapped region. The fix is a revert of th...

CVE-2024-41055

CVE-2024-41055 : Linux kernel vulnerability in the mm subsystem where a NULL pointer dereference could occur in pfn_section_valid() due to a race with section_deactivate() and an insufficient READ_ONCE() around ms->usage. The fix adds a value check on ms->usage before dereferencing and reli...

CVE-2024-41066

CVE-2024-41066: In the Linux kernel, ibmvnic transmit path could leak an skb if free_map and tx_buff arrays became out of sync. The patch adds a conditional to verify that the skb address is NULL before proceeding; if not, it warns the user and frees the old pointer to prevent memory leaks and TC...

CVE-2024-42131

CVE-2024-26929 is rejected/not used; this CVE entry is not an active vulnerability.

CVE-2024-49937

CVE-2024-49937 relates to the Linux kernel wifi stack (cfg80211) where starting CAC in non-AP modes could leave chandef.chan as NULL, triggering a CPU warning. Root cause: incorrect Chandef handling when CAC starts in certain modes. Impact: local attacker could potentially observe instability fro...

CVE-2024-50038

CVE-2024-50038 : Linux kernel fix for netfilter xtables UNSPEC handling. The patch ensures matches/targets no longer assume skb_network_header() validity when UNSPEC is used, and restricts registration to NFPROTO_IPV4/NIPv6 (and ARP for MARK target). This prevents ebtables traversal from misproce...

CVE-2024-50084

Technical details for CVE-2024-50084 are not provided in the connected documents. Monitor for updates; no product/version/impact specifics are disclosed in the supplied materials.

CVE-2024-50141

CVE-2024-50141 (Linux kernel) : The issue concerns ACPI PRM handling for EFI runtime services. PRMT previously selected a block of type EFI_CONVENTIONAL_MEMORY, which is incorrect for runtime services per the UEFI spec. The fix makes PRMT locate a block with EFI_MEMORY_RUNTIME for the PRM handler...

CVE-2024-50200

CVE-2024-50200 corresponds to a Linux kernel maple_tree fix. Affected area is the maple tree implementation used for range inserts. The vulnerability arises during a spanning store across two leaf nodes where the right leaf is the rightmost child of the shared parent and the store fully consumes ...

CVE-2024-50279

CVE-2024-50279 affects the Linux kernel dm-cache component. The issue is an index/bounds bug in bitset iteration when shrinking the fast device, which caused an out-of-bounds access to the dirty bitset. The vulnerability is triggered during resize operations (as described in the reproduce steps a...

CVE-2024-53097

CVE-2024-53097 affects the Linux kernel mm/krealloc path. Connected sources confirm a patch for mm: krealloc: Fix MTE false alarm in __do_krealloc, addressing a false KASAN/MTE slab-out-of-bounds error triggered when zeroing spare memory in __do_krealloc. Root cause: memory tagging mismatch due t...

CVE-2025-21676

CVE-2025-21676 : In the Linux kernel, the fec driver could crash when page_pool_dev_alloc_pages returned NULL under memory pressure because the error was not handled in fec_enet_update_cbd. The fix drops the current packet instead of dereferencing a NULL page, addressing a rare but possible crash...

CVE-2025-21962

CVE-2025-21962 affects the Linux kernel CIFS mount option closetimeo, where user-provided closetimeo (u32) is converted to jiffies before validation, allowing an integer overflow. Connected sources (Astra Linux, ALAS AWS advisories, Debian/Red Hat references) confirm this as a kernel-level issue ...

CVE-2014-8171

CVE-2014-8171 affects the Linux kernel memcg (memory resource controller). The description shows that a local user can spawn new processes within a memory-constrained cgroup, and this handling of OOM could lead to a deadlock, yielding a local denial of service. The incident is tied to the memcg O...

CVE-2015-5156

CVE-2015-5156 affects the Linux kernel’s virtio-net implementation. The vulnerability arises in virtnet_probe (drivers/net/virtio_net.c) where a FRAGLIST feature is supported without proper memory allocation, enabling a remote attacker on the local network to trigger a buffer overflow/memory corr...

CVE-2020-28097

CVE-2020-28097 affects the Linux kernel’s vgacon subsystem; versions before 5.8.10 mishandle software scrollback, causing a vgacon_scrolldelta out-of-bounds read . This is a local issue that can read kernel memory via the vgacon pathway. The public references note the fix in kernel release 5.8.10...

CVE-2021-26934

CVE-2021-26934 affects the Linux kernel versions 4.18 through 5.10.16 as used by Xen. The root cause is that the backend allocation (be-alloc) mode of the drm_xen_front drivers was not intended to be a supported configuration, but this was not clearly stated in its support status entry. Public do...

CVE-2021-4090

CVE-2021-4090 : A Linux kernel NFSD out-of-bounds write in nfsd4_decode_bitmap4 (fs/nfsd/nfs4xdr.c) can be triggered by a missing sanity check, allowing a local privileged user to access out-of-bounds memory and threaten system integrity and confidentiality. Multiple connected sources confirm the...

CVE-2021-47386

The CVE-2021-47386 issue affects the Linux kernel hwmon driver w83791d. The vulnerability stems from a NULL pointer dereference that can occur when a specific readval bit pattern is encountered, potentially leading to a kernel NULL dereference if conditions (val & 0x08), !(val & 0x80), and ((val ...

CVE-2021-47432

CVE-2021-47432 relates to the Linux kernel. The vulnerability occurs in lib/generic-radix-tree.c: overflow in the peek() path when inode numbers are spread across the 64-bit inode space, triggering corner-case integer overflows in radix-tree usage. The connected Miracl e/MIRACLE_LINUX AXSA adviso...

CVE-2022-21546

CVE-2022-21546 is a Linux kernel vulnerability affecting the SCSI target path. The issue arises in target_core_iblock/file when handling WRITE_SAME commands if the NDOB bit is set (NDOB indicates no data buffer) or when zero SG elements are sent. The kernel patch adds a common WRITE_SAME check fo...

CVE-2022-29156

The CVE-2022-29156 issue is a Linux kernel vulnerability: a double free in drivers/infiniband/ulp/rtrs/rtrs-clt.c (rtrs_clt_dev_release) present in kernels before 5.16.12. This is a local-attackable condition with high impact on confidentiality, integrity, and availability as reflected by CVSS. R...

CVE-2022-33741

CVE-2022-33741 concerns Linux PV frontend frontends (Block and Network) used by Xen that leak data through memory sharing with the backend. The root cause described across sources is that these frontends do not zero memory regions before sharing them with the backend, and the grant table granular...

CVE-2022-48992

CVE-2022-48992 pertains to the Linux kernel: the ASoC subsystem (soc-pcm) BE reparenting path had a NULL pointer dereference risk exposed during fuzzing. The root cause is a missing NULL check in the dpcm_be_reparent API, which could lead to kernel NULL pointer dereference. The fix adds an explic...

CVE-2022-49111

CVE-2022-49111 is a Linux kernel vulnerability in the Bluetooth stack where a use-after-free occurs in hci_send_acl, triggered by HCI_EV_DISCONN_PHY_LINK_COMPLETE and improper handling of AMP_LINK cleanup. The trace (KASAN) shows a use-after-free in hci_send_acl leading to memory corruption, and ...

CVE-2022-49636

CVE-2022-49636 affects the Linux kernel VLAN code, specifically a memory leak in vlan_newlink/vlan_changelink paths. The issue arises when a memory allocation fails in vlan_changelink() after prior allocations succeed; memory allocated for egress priority/vlan_dev structures may remain referenced...

CVE-2022-49925

CVE-2022-49925 : In the Linux kernel, a null-pointer dereference can occur in RDMA/core during ib_core_cleanup due to an unhandled failure of roce_gid_mgmt_init() (gid_cache_wq may be allocated and then freed during cleanup when not allocated). This is reported as a KASAN null-ptr-deref and is tr...

CVE-2023-1872

CVE-2023-1872 is a use-after-free in the Linux kernel io_uring subsystem caused by the io_file_get_fixed path not validating ctx->uring_lock, enabling a race with fixed files unregistration. This can lead to local privilege escalation and possible denial of service. Affected component is the k...

CVE-2023-52572

CVE-2023-52572 is confirmed in the provided connected documents. The vulnerability is a use-after-free (UAF) in the CIFS/SMB protocol handling inside the Linux kernel, specifically in cifs_demultiplex_thread() and related paths, which can lead to a UAF in smb2_is_network_name_deleted and downstre...

CVE-2023-52831

CVE-2023-52831 (Linux kernel) : The issue resides in cpu/hotplug logic when CPUs are isolated with isolcpus=. Offline-ing the last non-isolated (housekeeping) CPU can cause a WARN_ON in build_sched_domains and a subsequent panic due to an empty CPU mask in partition_sched_domains_locked(), leadin...

CVE-2024-26672

CVE-2024-26672 affects the Linux kernel AMDGPU driver: amdgpu_mca_smu_get_mca_entry() dereferences mca_funcs before a NULL check, leading to potential NULL-pointer dereference in UE/CE error handling paths. The issue is evidenced by code paths where mca_funcs is used to read max_ue_count/max_ce_c...

CVE-2024-26680

CVE-2024-26680—Linux kernel (net/atlantic): The issue arises in the Atlantic driver’s PTP HWTS ring. aq_ring_hwts_rx_alloc() allocates extra DMA memory for the HWTS ring, but aq_ring_free() did not account for that extra size, causing a mismatch between mapped and unmapped DMA regions (trace show...

CVE-2024-26740

CVE-2024-26740: In the Linux kernel, the net/sched act_mirred fix uses the Rx backlog for egress→ingress reversals to prevent socket lock deadlocks on certain redirect scenarios. The upstream patch ca22da2fbd69 implements this backlog-based handling; Nessus advisory AXSA references this CVE with ...

CVE-2024-35927

CVE-2024-35927 affects Linux kernel DRM-related code. The fix adds a guard in drm_kms_helper_poll_disable() to check that output polling is initialized before disabling, and updates drm_mode_config_helper_suspend()/resume() to avoid calling these helpers if polling isn’t initialized. This prevent...

CVE-2024-35931

The CVE affects the Linux kernel DRM/AMDGPU stack. During RAS (Reliability, Availability, Serviceability) recovery, a mode-1 PCI error slot reset is erroneously issued, which could trigger GPU resets and system hangs (VRAM loss, kernel panic traces). The root cause is the PCI error slot reset bei...

CVE-2024-36952

CVE-2024-36952 is a Linux kernel issue affecting the SCSI lpfc NPIV transport cleanup. The root cause is a race: when a vport is unregistered before the Remove All DA_ID CT and LOGO ELS are sent, the final DA_ID and LOGO can be skipped, because fc_remove_host() frees the ndlp rport object too ear...

CVE-2024-40911

CVE-2024-40911 affects the Linux kernel WiFi stack: linux wifi cfg80211_get_station may dereference a NULL pointer if the wiphy is not locked, leading to an Unable to handle kernel NULL pointer dereference. The fix locks the wiphy before rdev_get_station() (see ieee80211_get_station lockdep asser...

CVE-2024-40945

CVE-2024-40945 : In the Linux kernel, iommu_sva_bind_device() should return a SVA bond handle or an ERR_PTR on error. Some drivers (idxd/uacce) previously only checked for IS_ERR(), which could lead to a NULL pointer dereference if NULL was returned in error paths. The public advisories indicate ...

CVE-2024-42240

CVE-2024-42240: Linux kernel x86/bhi vulnerability where, when BHI mitigation is enabled, an entry_SYSENTER_compat() sequence could trigger a #DB handler warning due to the TF single-step bit handling. The fix changes the order to clear the TF flag before or after clearing branch history as appro...

CVE-2024-43853

CVE-2024-43853 is a Linux kernel vulnerability where a Use-After-Free could occur when reading /proc/cpuset due to a race during rebinding of the v1 root cgroup after unmount. The issue stems from rebinding top_cpuset.css.cgrp to the default root while a cached cgroup_root could still be referenc...

CVE-2024-46724

CVE-2024-46724 is a Linux kernel vulnerability in drm/amdgpu where an out-of-bounds read of df_v1_7_channel_number could occur. The issue stems from not validating fb_channel_number range, leading to an array read error. A patch/mitigation has been applied in upstream kernel releases, and several...

CVE-2024-47668

CVE-2024-47668 affects the Linux kernel, specifically the radix tree code path in lib/generic-radix-tree.c. The flaw arises from a rare race in __genradix_ptr_alloc() when the tree depth is increased: a preallocated node may be created before another thread increases depth, and that node could la...

CVE-2024-50121

CVE-2024-50121 affects the Linux kernel component nfsd, specifically the race where nfsd_shrinker_work may be cancelled in nfs4_state_shutdown_net without waiting for the shrinker to exit. This can cause warnings and use-after-free scenarios when unhashing and destroying nfsd clients during net s...

CVE-2024-50237

CVE-2024-50237 is a Linux kernel vulnerability in wifi/mac80211: get_txpower path where a stopped virtual interface (vif) could be passed to the driver, risking a crash from uninitialized private data. The issue has been fixed in the kernel; Astra Linux advisories cite the same fix across affecte...

CVE-2024-50251

CVE-2024-50251 is a Linux kernel netfilter nft_payload vulnerability. The issue arises when nft_payload sanitization of offset and length fails, allowing skb_checksum() to access beyond the sk_buff boundary if offset+length exceeds the skb length, triggering a BUG_ON(). Connected advisories confi...

CVE-2024-56761

The CVE-2024-56761 issue affects the Linux kernel’s x86/fred handling of WFE state during missing-ENDBRANCH #CPs. Indirect branches can set IBT to WAIT_FOR_ENDBRANCH, leaving WFE asserted across the boundary. When an inappropriate instruction is decoded with WFE set, a #CP fault can occur. The ad...