CVE-2024-35978

CVE-2024-35978 details (Grounded in provided docs): Linux kernel Bluetooth stack has a memory leak in hci_req_sync_complete() where previous sync state is not freed before reassigning a new one. The Astra Linux security bulletin confirms the same Linux kernel vulnerability with the same fix acros...

CVE-2024-36919

CVE-2024-36919 — Linux kernel (bnx2fc): The Unity/Miracle/NASL advisories confirm a patch that removes spin_lock_bh when releasing resources after upload in the bnx2fc session offload flow. Root cause: session resources are used by FW/driver during offload; after upload they are no longer needed,...

CVE-2024-36952

CVE-2024-36952 is a Linux kernel issue affecting the SCSI lpfc NPIV transport cleanup. The root cause is a race: when a vport is unregistered before the Remove All DA_ID CT and LOGO ELS are sent, the final DA_ID and LOGO can be skipped, because fc_remove_host() frees the ndlp rport object too ear...

CVE-2024-36955

The Linux kernel contains a vulnerability in the ALSA: hda: intel-sdw-acpi driver. The issue stems from the improper usage of the device_get_named_child_node() function, where the caller failed to follow the documentation's requirement to call fwnode_handle_put() on the returned pointer. This ove...

CVE-2024-38596

CVE-2024-38596 is a Linux kernel vulnerability in af_unix data races between unix_release_sock/unix_stream_sendmsg. The races occur because sk_shutdown is written atomically by unix_release_sock() (WRITE_ONCE) but read non‑atomically by unix_stream_sendmsg(), triggering a KCSAN data race (BUG: KC...

CVE-2024-38598

CVE-2024-38598 — Linux kernel (md/raid10) softlockup during resync Technical details from the provided documents indicate that the issue arises in the md bitmap synchronization path for raid10 during lvextend/lvchange --syncaction, leading to a soft lockup (CPU 3) due to a logic error in md_bitma...

CVE-2024-39291

CVE-2024-39291 (Linux kernel) affects the amdgpu path in gfx_v9_4_3.c. The vulnerable code path is gfx_v9_4_3_init_microcode() and related rlc/mec microcode init, where the ucode_prefix buffer was too small, risking truncation when writing strings like amdgpu/%s_rlc.bin or amdgpu/%s_mec.bin with ...

CVE-2024-40966

CVE-2024-40966 affects the Linux kernel tty subsystem. The fix adds an option to have a tty reject a new line discipline (ldisc) and limits virtual terminals to N_TTY, preventing con_write() from sleeping while holding a spinlock (which previously could trigger a BUG: sleeping function called fro...

CVE-2024-43853

Technical details for CVE-2024-43853 are not publicly available in the provided documents. The materials summarize the UAF in proc_cpuset_show() but do not specify affected products, versions, or patches beyond kernel/cgroup references; monitor for updates.

CVE-2024-45016

The CVE-2024-45016 issue affects the Linux kernel netem queueing path. A regression in netem_enqueue() (introduced by commit 5845f706388a) caused NET_XMIT_SUCCESS to be returned for a duplicated packet even when the packet was not enqueued, incrementing the parent qdisc’s qlen and potentially ski...

CVE-2024-46853

CVE-2024-46853 is a Linux kernel issue corrected by updating to a patched kernel. The vulnerability stems from a KASAN slab-out-of-bounds bug in the nxp-fspi driver (spi/nxp-fspi) when handling data not aligned to 4 bytes written to TX FIFO. The issue could cause a read beyond the allocated regio...

CVE-2024-49875

CVE-2024-49875 affects the Linux kernel. Affected component: nfsd path within the kernel’s VFS stack handling EBADMSG from ext4 readdir leading to a warning and non-standard errno. The fixed behavior maps EBADMSG to nfserr_io to avoid the warning, alleviating the -EBADMSG warning/ERR_PTR(-EFSBADC...

CVE-2024-49948

CVE-2024-49948 : In the Linux kernel, the vulnerability stems from insufficient sanity checks in net/core qdisc handling together with virtio_net_hdr_to_skb() parsing. A crafted GSO packet (80 bytes total: 20 IPv4 + 60 TCP + small GSO size) could be misclassified, making skb->len appear larger...

CVE-2024-49989

CVE-2024-49989: In the Linux kernel, the drm/amd/display path fixes a double-free when unloading the amdgpu module. The issue arises during cleanup of display encoders for flexible/inflexible endpoints, potentially freeing the same object twice during amdgpu driver unload. Connected advisories (A...

CVE-2024-50093

Summary: CVE-2024-50093 relates to the Linux kernel where the processor_thermal/intel int340x driver emitted a warning during module unload due to an unnecessary second pci_disable_device() call after enabling a PCI device with pcim_device_enable(). The connected Astra Linux and Debian Debian-LTS...

CVE-2024-50135

CVE-2024-50135 pertains to the Linux kernel nvme-pci driver. A race between reset and nvme_dev_disable() could corrupt dev->online_queues, causing invalid values to be passed to blk_mq_update_nr_hw_queues(). The Linux kernel advisory states the fix is to lock the shutdown_lock mutex before usi...

CVE-2024-50141

CVE-2024-50141 affects the Linux kernel ACPI PRM handling: PRMT previously selected EFI_CONVENTIONAL_MEMORY for PRM runtime usage, which is incorrect for EFI runtime services. The fix is to locate an EFI_MEMORY_RUNTIME block for the PRM handler/context to ensure proper PA-VA mappings during runti...

CVE-2024-53059

Technical details (affected products, root cause, impact, fixes) for CVE-2024-53059 are not provided in the supplied connected documents. Monitor for updates from upstream advisories.

CVE-2024-53072

CVE-2024-53072 affects the Linux kernel, specifically the platform/x86/amd/pmc component. The issue arises when STB is requested via amd_pmc enable_stb=1 and S2D_PHYS_ADDR_LOW/HIGH return 0, indicating STB is inaccessible. This causes ioremap warnings in arch/x86/mm/ioremap.c and can lead to kern...

CVE-2024-53100

CVE-2024-53100 : In the Linux kernel, the nvme: tcp driver had a race between queue_lock and mutex_destroy during error recovery. A mutex_lock added in nvme_tcp_get_address() could race with nvme_tcp_free_queue() and trigger a WARN. The issue has been resolved via a patch that adjusts locking in ...

CVE-2024-53217

CVE-2024-53217 : In the Linux kernel NFSD, a NULL pointer dereference can occur in nfsd4_process_cb_update() if __nfsd4_find_backchannel() does not find an available backchannel session and setup_callback_client() dereferences @ses, causing a segfault. The description notes this is resolved in th...

CVE-2024-57938

CVE-2024-57938 affects the Linux kernel net/sctp code; an overflow in sctp_association_init() can occur when max_autoclose is set to UINT_MAX. Patch fixes the overflow; no exploit details are provided in the documents.

CVE-2025-21968

Vulnerability (CVE-2025-21968) in the Linux kernel affects the drm/amd/display component, specifically the hdcp_work path. A slab-use-after-free occurs when HDCP is destroyed but the property_validate_dwork delayed work queue is still running. The documented fix cancels the delayed work when dest...

CVE-2011-1833

The CVE-2011-1833 issue affects the Linux kernel’s eCryptfs subsystem, specifically the ecryptfs_mount path (fs/ecryptfs/main.c). A race condition during mounting with a mismatched uid could let a local attacker bypass file permissions. This vulnerability is present in kernel versions before 3.1....

CVE-2015-8543

CVE-2015-8543 affects the Linux kernel networking stack (up to version 4.3.3 as used in Android and others). The issue: the networking implementation does not validate protocol identifiers for certain protocol families, enabling local users to cause a NULL pointer dereference and system crash, wi...

CVE-2021-32606

CVE-2021-32606 affects the Linux kernel 5.11–5.12.2, where isotp_setsockopt in net/can/isotp.c permits local privilege escalation to root via a use-after-free. Exploitation details are not provided in the documents; impact is limited to environments with the affected kernel. Ongoing references in...

CVE-2021-4135

CVE-2021-4135 affects the Linux kernel, specifically the netdevsim (Simulated networking device) driver’s eBPF path. The issue is a memory leak in the nsim_map_alloc_elem path that can be triggered by user-controlled use of BPF for the device, enabling a local attacker to access kernel data. Publ...

CVE-2022-33742

Summary: CVE-2022-33742 is tied to Linux Block and Network PV frontends leaking data due to sharing memory regions without zeroing and because grant-table granularity may expose data within the same 4K page as data shared with a backend. This is described alongside related CVEs (CVE-2022-26365, C...

CVE-2022-49291

The CVE-2022-49291 entry describes a Linux kernel flaw in ALSA: pcm where concurrent hw_params and hw_free ioctls could trigger a use-after-free. The fix introduces a dedicated mutex (runtime->buffer_mutex) and applies it to both hw_params and hw_free code paths, with small reordering (mmap_co...

CVE-2023-52513

CVE-2023-52513 affects the Linux kernel RDMA/siw component. The issue was a NULL dereference in siw_cm_work_handler() when the code path for an immediate MPA request failed, caused by mis-handling of a listening endpoint during TCP close. The patch ensures the endpoint is unlinked correctly, canc...

CVE-2023-52784

CVE-2023-52784 concerns the Linux kernel bonding subsystem. The issue arises when a lapbether device is created on a bonding device with no members, and adding a non-ARPHRD_ETHER member forces the bonding master to change type, potentially leading to misuse of devices. The documented fix is to ca...

CVE-2024-26670

CVE-2024-26670 : Linux kernel arm64 workaround for speculative unpriv load (Cortex-A520/A510 errata) fix. The patch ensures the TLBI+DSB sequence is executed after all explicit memory accesses and places it immediately before the ERET when pagetable isolation is disabled. It reworks the KPTI/eret...

CVE-2024-26672

A vulnerability exists in the Linux kernel 's drm/amdgpu driver. The root cause is that the variable mca_funcs is dereferenced in the amdgpu_mca_smu_get_mca_entry() function (specifically in lines 365 and 368 of amdgpu_mca.c) before it is properly checked for NULL at line 377. This flaw can lead ...

CVE-2024-26830

CVE-2024-26830 relates to the i40e driver in the Linux kernel. It fixes a condition where an untrusted VF could remove the administratively set primary MAC address of the VF, which PF can set. The vulnerability occurs when a VF is created, its MAC is set administratively, and the VF is later brou...

CVE-2024-27056

CVE-2024-27056 affects the Linux kernel wireless stack (iwlwifi, mvm). The vulnerability arises in the resume path where the TX queue for the offloading TID may not exist if no packets have been sent on TID 0, causing a crash when the code tries to sync the firmware-updated write pointer. The fix...

CVE-2024-35899

CVE-2024-35899 affects the Linux kernel nf_tables (netfilter). The issue is a race where the destroy workqueue may run after exit_net has released resources, risking use-after-free of a nf_tables set during module removal. The provided trace shows KASAN slab-use-after-free in nf_tables_trans_dest...

CVE-2024-36899

CVE-2024-36899 affects the Linux kernel gpiolib, specifically the cdev path usedwhen closing a GPIO chip device file. The issue is a use-after-free involving watched_lines: during gpio_chrdev_release(), watched_lines is freed with bitmap_free(), but lineinfo_changed_nb notifier chain unregistrati...

CVE-2024-39473

CVE-2024-39473 affects the Linux kernel ASoC: SOF ipc4-topology. The issue occurs when a process module lacks the base config extension: the same input format is applied to all inputs and process->base_config_ext becomes NULL, allowing a NULL dereference under specific topology/sequences. This...

CVE-2024-42125

CVE-2024-42125 affects the Linux kernel wifi rtwn89 fw: scan offload with 6 GHz channel when there is no 6 GHz sband. The fix adds NULL handling for the 6 GHz sband to avoid a crash when a BIOS policy blocks 6 GHz; effectively, it prevents a NULL pointer dereference crash. According to the connec...

CVE-2024-43842

CVE-2024-43842 : In the Linux kernel wifi driver rtw89, a bounds check bug in rtw89_sta_info_get_iter() occurs when comparing status->he_gi to the array size, but rate->he_gi is used as the index. This copy-paste mistake can lead to out-of-bounds access if rate->he_gi != status->he_gi...

CVE-2024-44944

CVE-2024-44944: In the Linux kernel netfilter ctnetlink delete-expectation path, the code fails to call nf_expect_get_id() to compute the expectation ID, causing the least-significant-bit of the expectation object address to be leaked to userspace. This is fixed by introducing a call to nf_expect...

CVE-2024-50046

Technical details for CVE-2024-50046 are not publicly provided in the supplied documents. Monitor official advisories for updates and fixes.

CVE-2024-50049

CVE-2024-50049 affects the Linux kernel DRM AMD display path. The vulnerability arises from dereferencing a se pointer that could be NULL after a prior null check in the same function, leading to a FORWARD_NULL condition. Exploitation would be LOCAL with LOW privileges and no user interaction, po...

CVE-2024-50195

CVE-2024-50195 is documented in the provided sources as a fix to the Linux kernel posix-clock path. The issue was caused by a missing timespec64 check in pc_clock_settime(), with the fix adding a strict validation (timespec64_valid_strict) of tv_sec and tv_nsec before calling ptp->info->set...

CVE-2024-50262

CVE-2024-50262 – Linux kernel trie_get_next_key() out-of-bounds write Root cause: trie_get_next_key() allocates a node stack with size trie->max_prefixlen but writes trie->max_prefixlen+1 nodes when the path is full, leading to an out-of-bounds write. This can occur for tries with max_prefi...

CVE-2024-53218

The Linux kernel contains a race condition in the f2fs file system, specifically within the f2fs_stop_gc_thread() function. Concurrent calls to f2fs shutdown can lead to a use-after-free (UAF) condition because a thread may call kfree() on a garbage collection thread while another thread attempts...

CVE-2024-57900

CVE-2024-57900 is a Linux kernel vulnerability affecting the ila subsystem. A race in ila_add_mapping() can occur with concurrent ILA_CMD_ADD commands, observed as KASAN slab-use-after-free traces. The provided fix adds a mutex to ensure at most one thread calls nf_register_net_hooks(), preventin...

CVE-2024-58083

CVE-2024-58083 affects the Linux kernel KVM: the target vCPU was not reliably verified online before clamping the index in kvm_get_vcpu(). If the index is bad, nospec clamping could return vCPU0, leading to a use‑after‑free when vCPU0 is dereferenced. The issue is mitigated by ensuring vCPU0 is o...

CVE-2025-21715

The Linux kernel is affected by a Use-after-Free (UAF) vulnerability in the net: davicom component, specifically within the dm9000_drv_remove function. The issue occurs because dm is private data for netdev and cannot be accessed after the free_netdev() call is executed. The vulnerability can be ...

CVE-2025-23150

CVE-2025-23150 affects the Linux kernel ext4 filesystem. The issue stems from an off-by-one error in do_split that can cause out-of-bounds access in ext4_insert_dentry, leading to a use-after-free condition (as detected via Syzkaller). The problem can occur during directory entry creation paths t...