CVE-2024-36939

CVE-2024-36939 affects the Linux kernel nfs subsystem. Root cause: rpc_proc_register() errors in init_nfs_fs() could be ignored, causing nfs_net_exit() to run during netns destruction and trigger warning paths. The issue was addressed by properly handling the rpc_proc_register() error in nfs_net_...

CVE-2024-39473

CVE-2024-39473 affects the Linux kernel ASoC: SOF ipc4-topology. The issue occurs when a process module lacks the base config extension: the same input format is applied to all inputs and process->base_config_ext becomes NULL, allowing a NULL dereference under specific topology/sequences. This...

CVE-2024-39497

CVE-2024-39497: In the Linux kernel, drm/shmem-helper fix for a BUG_ON() triggered by mmap(PROT_WRITE, MAP_PRIVATE) in drm_gem_shmem_mmap. The issue arose from a missing check for copy-on-write (COW) mappings, which could lead to a kernel panic at vmf_insert_pfn_prot when a VMA has VM_PFNMAP and ...

CVE-2024-41044

CVE-2024-41044 : Linux kernel PPP handling vulnerability. The issue arises in ppp_async_encode() which assumes LCP packets have valid body (codes 1–7). An attacker could craft a claim-as-LCP packet that is actually malformed, enabling a local denial-of-service. The fix adds ppp_check_packet() to ...

CVE-2024-41077

Concretely, CVE-2024-41077 affects the Linux kernel null_blk path. The issue arises from an insufficient validation of the block size: the size must be between 512 and PAGE_SIZE and must be a power of two. The faulty check allowed an invalid bs (e.g., 1536) to be accepted, which could cause a nul...

CVE-2024-43842

CVE-2024-43842 : In the Linux kernel wifi driver rtw89, a bounds check bug in rtw89_sta_info_get_iter() occurs when comparing status->he_gi to the array size, but rate->he_gi is used as the index. This copy-paste mistake can lead to out-of-bounds access if rate->he_gi != status->he_gi...

CVE-2024-46673

CVE-2024-46673: In the Linux kernel, the aacraid SCSI driver could double-free aac_dev::queues during probe if aac_init_adapter() failed after initial allocation. The hardware-specific init path calls into aac_init_adapter(), which on error frees queues but does not clear the pointer, and the err...

CVE-2024-50080

Technical details for CVE-2024-50080 are not publicly provided in the connected documents. The initial description summarizes the vulnerability, but no vendor/product/version specifics are disclosed here. Monitor for official advisories or patches.

CVE-2024-50195

CVE-2024-50195 is documented in the provided sources as a fix to the Linux kernel posix-clock path. The issue was caused by a missing timespec64 check in pc_clock_settime(), with the fix adding a strict validation (timespec64_valid_strict) of tv_sec and tv_nsec before calling ptp->info->set...

CVE-2024-53100

CVE-2024-53100 : In the Linux kernel, the nvme: tcp driver had a race between queue_lock and mutex_destroy during error recovery. A mutex_lock added in nvme_tcp_get_address() could race with nvme_tcp_free_queue() and trigger a WARN. The issue has been resolved via a patch that adjusts locking in ...

CVE-2024-56672

CVE-2024-56672 affects the Linux kernel blk-cgroup component. The issue is a use-after-free (UAF) in blkcg_unpin_online() where blkcg_parent(blkcg) is read after blkcg_destroy_blkgs(blkcg) could free the blkcg. The fix reads the parent pointer before destroying the blkcg’s blkg’s, preventing UAF....

CVE-2025-22056

The CVE-2025-22056 issue affects the Linux kernel nft_tunnel handling of NFTA_TUNNEL_KEY_OPTS_GENEVE attributes, where the parse/dump logic performed type conversions before pointer arithmetic, causing a slab-out-of-bounds write. The fix is to perform pointer addition using char* units and correc...

CVE-2015-3214

CVE-2015-3214 affects QEMU prior to 2.3.1 (pit_ioport_read in i8254.c) and Linux kernel prior to 2.6.33. The flaw does not distinguish between read and write lengths, potentially allowing a privileged guest user (with PIT emulation enabled) to trigger an invalid index and cause arbitrary host cod...

CVE-2016-0723

CVE-2016-0723 is a Linux kernel race condition in the tty_ioctl handler (drivers/tty/tty_io.c) that can allow a local attacker to obtain memory content or trigger a denial of service by manipulating a TIOCGETD call during a TIOCSETD operation. The initial description states the flaw exists in ker...

CVE-2017-6346

CVE-2017-6346 affects the Linux kernel net/packet/af_packet.c, describing a race condition in the PACKET_FANOUT fanout path that can cause a use-after-free in multithreaded user apps. The connected sources confirm this is a local vulnerability with potential denial of service and possible unspeci...

CVE-2021-47383

CVE-2021-47383 : In the Linux kernel, the tty imageblit out-of-bounds access is caused when an ioctl FBIOPUT_VSCREENINFO with only xres, yres, and bits_per_pixel is sent and the struct matches the previous ioctl. This leaves fb_var_screeninfo incomplete, causing updatescrollmode() to compute a wr...

CVE-2022-21546

CVE-2022-21546 is a Linux kernel vulnerability affecting the SCSI target path. The issue arises in target_core_iblock/file when handling WRITE_SAME commands if the NDOB bit is set (NDOB indicates no data buffer) or when zero SG elements are sent. The kernel patch adds a common WRITE_SAME check fo...

CVE-2022-33742

Summary: CVE-2022-33742 is tied to Linux Block and Network PV frontends leaking data due to sharing memory regions without zeroing and because grant-table granularity may expose data within the same 4K page as data shared with a backend. This is described alongside related CVEs (CVE-2022-26365, C...

CVE-2022-3635

CVE-2022-3635 affects the Linux Kernel. The vulnerability is in the function tst_timer of drivers/atm/idt77252.c (IPsec component). It enables a use-after-free condition. A patch is recommended to fix the issue. The provided documents confirm the root cause and the vulnerable file/function, and d...

CVE-2022-45888

CVE-2022-45888 affects the Linux kernel up to 6.0.9, specifically the xillybus/xillyusb.c driver, where a race condition and use-after-free can occur during physical removal of a USB device. Connected advisories confirm fixes in later kernel releases (e.g., Debian 6.1.x: 6.1.119-1~deb11u1; SUSE a...

CVE-2022-49291

The CVE-2022-49291 entry describes a Linux kernel flaw in ALSA: pcm where concurrent hw_params and hw_free ioctls could trigger a use-after-free. The fix introduces a dedicated mutex (runtime->buffer_mutex) and applies it to both hw_params and hw_free code paths, with small reordering (mmap_co...

CVE-2023-1637

CVE-2023-1637 affects the Linux kernel X86 CPU Power Management options, described as a speculative-execution style vulnerability in suspend-to-RAM resume. Connected advisories (e.g., ALAS-2024-076 and related Nessus/Amazon/Linux entries) confirm the issue is a local-privilege/information disclos...

CVE-2023-3106

CVE-2023-3106 is reported in Unity Linux advisories as a NULL pointer dereference in netlink_dump. The issue occurs when a Netlink socket receives a message (sendmsg) for XFRM_MSG_GETSA or XFRM_MSG_GETPOLICY with the DUMP flag set, potentially causing a denial of service. The description notes pr...

CVE-2023-52635

The CVE-2023-52635 entry concerns a Linux kernel devfreq timer race. Description: frequent governor switches (e.g., simple_ondemand and performance) on a devfreq device may race with timer cancellation and expiration, risking timer_list corruption when cancel_delayed_work_sync() is followed by ex...

CVE-2023-52813

CVE-2023-52813 : Linux kernel crypto: pcrypt fix hungtask for PADATA_RESET. The issue was a hung task in test_aead_vec_cfg caused by padata_do_parallel returning -EBUSY when pinst->flags included PADATA_RESET, preventing aead_request_complete() and leading to a hung wait. Connected sources des...

CVE-2024-26769

CVE-2024-26769 affects the Linux kernel vulnerability in the nvmet-fc path. The issue occurs when deleting an association, where the shutdown path can deadlock by flushing the nested nvmet_wq, leading to a denial of service risk. The fix defers the problematic work by moving the put operation int...

CVE-2024-26802

CVE-2024-26802: In the Linux kernel stmmac driver, destroy_workqueue() drains the queue and clears the workqueue variable but does not set it to NULL, enabling a possible kernel/module panic if a cleared-but-non-NULL pointer is later used during resume/reset flows. The fix is to set the workqueue...

CVE-2024-26899

CVE-2024-26899 — Linux kernel deadlock fix details : Affected component is the block layer in the Linux kernel. The issue arises when bd_link_disk_holder() uses the global open_mutex to guard the creation of a symlink between a holding disk and a slave bdev during driver initialization/modificati...

CVE-2024-35865

CVE-2024-35865 is a Linux kernel vulnerability affecting the SMB client path, specifically a use-after-free in smb2_is_valid_oplock_break(). The issue arises when skipping sessions that are tearing down (status SES_EXITING) is not performed correctly, enabling a UAF condition in the SMB2 oplock b...

CVE-2024-35973

CVE-2024-35973 affects the Linux kernel's geneve code path. The issue arises from incomplete header validation in geneve_xmit_skb, where skb->protocol handling could leave pskb_inet_may_pull() with an uninitialized or unexpected value, potentially triggering an uninit-value during transmission...

CVE-2024-36919

CVE-2024-36919 — Linux kernel (bnx2fc): The Unity/Miracle/NASL advisories confirm a patch that removes spin_lock_bh when releasing resources after upload in the bnx2fc session offload flow. Root cause: session resources are used by FW/driver during offload; after upload they are no longer needed,...

CVE-2024-36952

CVE-2024-36952 is a Linux kernel issue affecting the SCSI lpfc NPIV transport cleanup. The root cause is a race: when a vport is unregistered before the Remove All DA_ID CT and LOGO ELS are sent, the final DA_ID and LOGO can be skipped, because fc_remove_host() frees the ndlp rport object too ear...

CVE-2024-36955

In CVE-2024-36955, the Linux kernel ALSA: hda: intel-sdw-acpi code had a path using device_get_named_child_node() that could leak a reference if fwnode_handle_put() was not called on the returned fwnode handle. The described fix adds a call to fwnode_handle_put() to prevent a leaked reference, ad...

CVE-2024-38596

CVE-2024-38596 is a Linux kernel vulnerability in af_unix data races between unix_release_sock/unix_stream_sendmsg. The races occur because sk_shutdown is written atomically by unix_release_sock() (WRITE_ONCE) but read non‑atomically by unix_stream_sendmsg(), triggering a KCSAN data race (BUG: KC...

CVE-2024-40966

CVE-2024-40966 affects the Linux kernel tty subsystem. The fix adds an option to have a tty reject a new line discipline (ldisc) and limits virtual terminals to N_TTY, preventing con_write() from sleeping while holding a spinlock (which previously could trigger a BUG: sleeping function called fro...

CVE-2024-40967

CVE-2024-40967 affects the Linux kernel serial: imx subsystem. The root cause is a potential deadlock while waiting for USR2_TXDC in transmitter empty handling. The patch introduces a timeout of at most 1 second; if the timeout occurs, the driver ignores the transmitter state and continues optimi...

CVE-2024-42094

CVE-2024-42094 affects the Linux kernel where CONFIG_CPUMASK_OFFSTACK=y caused explicit cpumask var allocation on the stack in net/iucv to risk stack overflow. The fix is to use the *cpumask_var API(s) to allocate cpumask variables in a config-neutral way, leaving allocation strategy to CONFIG_CP...

CVE-2024-42124

CVE-2024-42124 affects the Linux kernel and fixes a preemption bug in qedf by making qedf_execute_tmf() non-preemptible. The issue was triggered by calling smp_processor_id() from preemptible code in qedf_execute_tmf90, causing a BUG_ON on RT kernels. Affected context is kernel-level SCSI qedf dr...

CVE-2024-46853

CVE-2024-46853 is a Linux kernel issue corrected by updating to a patched kernel. The vulnerability stems from a KASAN slab-out-of-bounds bug in the nxp-fspi driver (spi/nxp-fspi) when handling data not aligned to 4 bytes written to TX FIFO. The issue could cause a read beyond the allocated regio...

CVE-2024-49968

CVE-2024-49968 (from Miracle Linux AXSA advisory) concerns Linux kernel ext4. The vulnerability occurs when mounting an ext4 filesystem that does not have the casefold feature while the default hash version is DX_HASH_SIPHASH; in this scenario the mount operation exits, effectively preventing mou...

CVE-2024-50046

Technical details for CVE-2024-50046 are not publicly provided in the supplied documents. Monitor official advisories for updates and fixes.

CVE-2024-53072

CVE-2024-53072 affects the Linux kernel, specifically the platform/x86/amd/pmc component. The issue arises when STB is requested via amd_pmc enable_stb=1 and S2D_PHYS_ADDR_LOW/HIGH return 0, indicating STB is inaccessible. This causes ioremap warnings in arch/x86/mm/ioremap.c and can lead to kern...

CVE-2024-53217

CVE-2024-53217 : In the Linux kernel NFSD, a NULL pointer dereference can occur in nfsd4_process_cb_update() if __nfsd4_find_backchannel() does not find an available backchannel session and setup_callback_client() dereferences @ses, causing a segfault. The description notes this is resolved in th...

CVE-2024-57980

Summary of CVE-2024-57980 (Linux kernel) : The vulnerability is in the media: uvcvideo path where, if uvc_status_init() fails to allocate the int_urb, the code frees dev->status but does not set it to NULL. This leads to a double-free in uvc_status_cleanup() when the memory is freed again. The...

CVE-2025-21667

CVE-2025-21667 : Linux kernel vulnerability where on 32-bit builds iomap_write_delalloc_scan() used a 32-bit position due to folio_next_index() returning an unsigned long, truncating 64-bit offsets and potentially causing an infinite loop during writes to XFS. Connected documents confirm the root...

CVE-2025-21715

CVE-2025-21715 is reported in the Astra Linux bulletin as a Linux kernel issue affecting the davicom net driver. The root cause is a use-after-free (UAF) of the netdev private data stored in the dm object inside dm9000_drv_remove. The code can dereference dm after free_netdev() has been called, l...

CVE-2025-21727

CVE-2025-21727 : Linux kernel issue in padata_reorder causing a use-after-free in padata_find_next under certain race conditions. The provided connected documents confirm a KASAN UAF scenario when a parallel padata_reorder/serial flow frees Pd too early and later calls padata_find_next. The remed...

CVE-2025-21836

CVE-2025-21836 affects the Linux kernel io_uring/kbuf subsystem. The issue arises in io_register_pbuf_ring where an old io_buffer_list may be reused after upgrade, violating the expectation that most fields remain stable post-publish; the correct fix is to always reallocate the buffer list. The u...

CVE-2025-38218

CVE-2025-38218 affects the Linux kernel with f2fs: a sanity check failure in sit_bitmap_size can lead to a kernel panic during resize/mount. The issue arises when sit_i->bitmap_size is 192, making sit bitmap size 1536, but with MAIN_SEGS at 261893 the sit_blk_cnt becomes 4762; build_sit_entrie...

CVE-2021-32606

CVE-2021-32606 affects the Linux kernel 5.11–5.12.2, where isotp_setsockopt in net/can/isotp.c permits local privilege escalation to root via a use-after-free. Exploitation details are not provided in the documents; impact is limited to environments with the affected kernel. Ongoing references in...