CVE-2024-46722

CVE-2024-46722 is a Linux kernel vulnerability affecting the DRM AMDGPU driver where a read of mc_data[i-1] could go out of bounds. The connected Astra/DEBIAN/CBLMARINER advisories reference the same issue in the kernel and confirm a fix was applied in the AMDGPU/mc_data path to address the out-o...

CVE-2024-46725

CVE-2024-46725 refers to a Linux kernel vulnerability where the drm/amdgpu path could trigger an out-of-bounds write warning. The connected Astra Linux bulletin confirms the issue as a kernel-level flaw and notes the fix was to validate the ring type value to prevent the OOB write. The vulnerabil...

CVE-2024-49851

The CVE CVE-2024-49851 affects the Linux kernel TPM subsystem. The vulnerability originated from tpm_dev_transmit preparing TPM space before transmission and not rolling back this preparation if a command fails, potentially leaking transient TPM handles when the device is closed afterwards. The p...

CVE-2024-50019

In CVE-2024-50019 the IBM bulletin documents a Linux kernel issue where kthread unparked-per-CPU threads could be woken up during stop. Root cause: calling kthread_unpark unconditionally before ensuring the thread is inactive can cause a wakeup on a per-CPU kthread that has been bound via kthread...

CVE-2024-50101

CVE-2024-50101 occurs in the Linux kernel iommu/vt-d code where domain_context_clear() incorrectly called pci_for_each_dma_alias() for non‑PCI devices, potentially causing kernel hangs. The fix adds a check to only call pci_for_each_dma_alias() for PCI devices and calls domain_context_clear_one()...

CVE-2024-50216

This CVE (CVE-2024-50216) is described in a MiracleLinux advisory as a Linux kernel XFS issue: the last-resort AG selection in xfs_filestream_pick_ag could leak an uninitialized pag when the code path falls back to an online AG. Root cause: the loop used pag as an iterator while later code expect...

CVE-2024-53082

CVE-2024-53082: Linux kernel virtio_net vulnerability resolved by adding a hash_key_length check in virtnet_probe() to prevent possible out-of-bounds errors when setting/reading the hash key. This root cause and fix are echoed in connected documents (Astra Linux bulletin and IBM/Red Hat–style pag...

CVE-2024-53135

CVE-2024-53135 affects the Linux kernel’s KVM/VMX functionality. The issuebury Intel PT virtualization (guest/host mode) behind CONFIG_BROKEN disables pt_mode unless BROKEN=y and exposes numerous bugs that can affect both guest stability and host health. Reported problems include: guest fatalitie...

CVE-2024-53139

The CVE-2024-53139 entry concerns the Linux kernel SCTP stack. A fix for a possible use-after-free in sctp_v6_available() is described, prompted by a lockdep warning showing sctp_v6_available() calling dev_get_by_index_rcu() and ipv6_chk_addr() without holding RCU. The description notes a stack t...

CVE-2024-53203

CVE-2024-53203 is a Linux kernel issue: a potential array underflow in usb: typec ucsi_ccg_sync_control() could be triggered when the user controls the command via debugfs, if con_index is zero leading to an access of ucsi.connector[con_index-1]. The vulnerability is resolved in the Linux kernel;...

CVE-2024-57946

CVE-2024-57946 affects Linux kernel virtio-blk: during system suspend, the PM callbacks previously kept the block queue frozen, risking deadlocks if code path invoked bio_queue_enter() while suspended. The fix replaces queue quiesce with a freeze-and-thaw approach in virtio-blk PM callbacks and d...

CVE-2024-57973

CVE-2024-57973 : In the Linux kernel, an integer wrap could occur on 32-bit systems while computing the length for a reply (gl->tot_len + sizeof(struct cpl_pass_accept_req) + sizeof(struct rss_header)), from user-controlled data via process_responses(). The issue affects the rdma/cxgb4 path an...

CVE-2025-21891

The CVE-2025-21891 entry concerns a Linux kernel ipvlan vulnerability where outbound IPv4/IPv6 headers could be read from skb->head if the network header was not in the skb’s linear part. The fix adds pskb_network_may_pull() calls for both IPv4 and IPv6 handlers (ipvlan_core.c: ipvlan_route_v6...

CVE-2025-21899

The CVE concerns the Linux kernel tracing subsystem (eventtrigger_write path). A bug in the sequence of operations when registering a hist trigger can leave the named_triggers list inconsistent, because event_trigger_register() succeeds but hist_trigger_enable() does not reliably add the new trig...

CVE-2025-21961

CVE-2025-21961 (Linux kernel BNXT driver): A miscalculated truesize in the bnxt_xdp_build_skb path when mb-xdp is used with XDP_PASS causes an incorrect skb_truesize to be recorded, since skb_shared_info is wiped by napi_build_skb() and the code may reuse a stale sinfo->nr_frags. This is fixed...

CVE-2016-9604

CVE-2016-9604 affects the Linux kernel prior to 4.11-rc8. A local attacker who can join the kernel session keyring can access internal keyrings (e.g., .dns_resolver, .builtin_trusted_keys) and bypass module signature verification by adding a self-generated public key to the keyring, enabling loca...

CVE-2020-27194

CVE-2020-27194 affects the Linux kernel prior to 5.8.15. The issue is in the eBPF verifier: scalar32_min_max_or() incorrectly copies a 64‑bit value into a 32‑bit variable, causing integer truncation and incorrect bounds tracking. This misalignment between verifier time checks and actual execution...

CVE-2023-52643

CVE-2023-52643: Linux kernel iio subsystem memleak in iio_device_register_sysfs_group on failure to free iio_dev_opaque->chan_attr_group.attrs. The MiracleLinux AXSA advisory confirms the patch and remediation via updated kernel, with no exploitation details provided. Upgrade to a kernel versi...

CVE-2023-52800

The CVE-2023-52800 entry concerns a Linux kernel issue in wifi/ath11k: the htt pktlog handling calling ath11k_mac_get_ar_by_pdev_id() was not in an RCU read-side critical section. The fix marks that code path as an RCU read-side critical section to prevent potential use-after-free in ath11k activ...

CVE-2023-52819

CVE-2023-52819 is resolved in the Linux kernel. The vulnerability was in drm/amd where UBSAN reported an array-index-out-of-bounds for Polaris/Tonga in pptable structs using flexible array sizes; the fix switches to using flexible arrays to avoid out-of-bounds access. Impact is local (CVSS: AV:L,...

CVE-2023-52878

CVE-2023-52878 : Linux kernel vulnerability in can_put_echo_skb() where out-of-bounds access to can_priv::echo_skb could crash the kernel. The fix enforces a bounds check and, on out-of-bounds access, issues a warning and returns an error instead of crashing. Affected component: CAN networking pa...

CVE-2024-26661

Public technical details for CVE-2024-26661 are not provided in the connected documents; monitor for updates from vendors/advisories.

CVE-2024-26851

CVE-2024-26851: Linux kernel nf_conntrack_h323 decoding bug fixed. UBSAN reported negative/out-of-bounds shifts when decoding Ras messages due to abnormal skb->data; patch adds protection to keep extension bitmap length

CVE-2024-26903

CVE-2024-26903 (Linux kernel) : Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security. Root cause: after RFCOMM/L2CAP disconnect, the code could dereference a released l2cap_conn, leading to a null pointer access when calling hci_conn_security. Impact per CVSS: Medium (5.5) with high ava...

CVE-2024-35823

CVE-2024-35823: Linux kernel vt buffer corruption when deleting characters has been fixed. Root cause: overlapping buffers in VT text handling; solution: replace memcpy() with memmove() (same approach as VGA text buffer fix). Affected component: vt in the Linux kernel. Remediation: upgrade to a k...

CVE-2024-35852

CVE-2024-35852 : In the Linux kernel (mlxsw spectrum_acl_tcam), a memory leak can occur when rehash work is canceled while pending, as hints allocated for the migration may remain referenced. The fix frees the associated hints when a pending rehash work is canceled. Connected advisories reference...

CVE-2024-35934

The CVE-2024-35934 issue affects the Linux kernel net/smc subsystem. Affected component: smc_pnet-related code in net/smc (pnet IDs list creation). Root cause: excessive RTNL (rtnl) lock pressure during net namespace/pnet initialization, caused by smc_pnet_create_pnetids_list() acquiring rtnl in ...

CVE-2024-35959

CVE-2024-35959 is an Linux kernel issue fixed in the mlx5e path. The fix addresses a cleanup flow: when mlx5e_priv_init() fails, mlx5e_priv_init’s cleanup calls mlx5e_selq_cleanup, which previously could lead to a misordered lock usage. The cleanup calls mlx5e_selq_apply() that assumes priv->s...

CVE-2024-36922

CVE-2024-36922 affects the Linux kernel’s iwlwifi driver (iwl_txq_reclaim) where txq->read_ptr could be read without holding the lock, allowing a race that can reclaim the same entry twice and trigger a WARN_ONCE, potentially causing a service disruption. The issue is fixed by reading txq->...

CVE-2024-43900

CVE-2024-43900 affects the Linux kernel’s media: xc2028 path. A worker thread can dereference a freed dvb_frontend object after tuner_probe() allocates a tuner and module removal frees the dvb_frontend, leading to a use-after-free in load_firmware_cb() triggered by request_firmware_work_func. The...

CVE-2024-47697

CVE-2024-47697: Linux kernel dvb-frontends rtl2830 had an out-of-bounds write via rtl2830_pid_filter due to a boundary check allowing index 32. The patch updates the boundary to index >= 32 (instead of index > 32) and enforces that dev->filters, a 32-bit bitmap, uses set_bit/clear_bit on...

CVE-2024-47706

CVE-2024-47706 affects the Linux kernel bfq I/O scheduler. The issue was a use-after-free involving bfqq->bic during merges in the bfq_merge/merge-chain flow, which could allow IO handling to operate on a bfqq that is no longer valid. The provided details describe an initial state with three b...

CVE-2024-47718

CVE-2024-47718 affects the Linux kernel wireless stack (rtw88) used by the wifi subsystem. The issue arises in wifi: rtw88 where firmware loading requires two attempts (regular and wowlan). In rtw_wait_firmware_completion(), the code now always waits for both attempts; previously, if rtw_usb_intf...

CVE-2024-47739

CVE-2024-47739 concerns the Linux kernel padata subsystem. The vulnerability arises when submitting more than 2^32 padata objects to padata_do_serial, where the sorting of overflowed seq_nr values can cause a newly overflowed entry to be placed before existing ones, leading to a deadlock in the s...

CVE-2024-49944

CVE-2024-49944: In the Linux kernel SCTP path, sctp_listen_start() did not reset sk_state when sctp_autobind() failed, so after a failed autobind, a subsequent sctp_inet_listen() could observe sctp_sk(sk)->reuse with sk_state LISTENING and dereference bind_hash (NULL), causing a NULL dereferen...

CVE-2024-50006

CVE-2024-50006 (Linux kernel): Affects ext4 with an i_data_sem unlock order issue during ext4_ind_migrate() causing a potential deadlock in jbd2_log_wait_commit when EXT4_IOC_MIGRATE is used with O_SYNC. The deadlock occurs if EXT4_IOC_MIGRATE races with write(2) and CONFIG_PROVE_LOCKING is enabl...

CVE-2024-50045

CVE-2024-50045 affects the Linux kernel br_netfilter where a vulnerability in br_nf_dev_queue_xmit can crash when forwarding untagged traffic through a VxLAN bridge port. The root cause is a metadata_dst handling path during fragmentation checks that leads to an invalid skb_dst and a NULL dev, ca...

CVE-2024-50163

The CVE-2024-50163 entry documents a Linux kernel fix for bpf redirect flag overlap: the internal UAPI bpf_redirect flags were sharing the same ri->flags values for SKB and XDP paths, causing a crash under certain redirect use. The patch makes bpf_redirect_info stack-allocated per path, avoids...

CVE-2024-53066

CVE-2024-53066 describes a KMSAN warning in the Linux kernel’s NFS getattr decoding path. The issue arises from an uninitialized fattr->mdsthreshold field in decode_getfattr_attrs()/decode_attr_mdsthreshold(), which could trigger a KMSAN failure. The provided fix initializes fattr->mdsthres...

CVE-2024-53136

In CVE-2024-53136, the Linux kernel mm/shmem fix was reverted: reverting the patch that fixed data-race in shmem_getattr() to address deadlocks when accessing tmpfs over NFS. The description notes the revert was done at d949d1d14fa2 per guidance, with comments indicating the change silenced a syz...

CVE-2024-57900

CVE-2024-57900 is a Linux kernel vulnerability affecting the ila subsystem. A race in ila_add_mapping() can occur with concurrent ILA_CMD_ADD commands, observed as KASAN slab-use-after-free traces. The provided fix adds a mutex to ensure at most one thread calls nf_register_net_hooks(), preventin...

CVE-2024-58072

CVE-2024-58072 corresponds to a Linux kernel issue in the rtlwifi subsystem. The fix removes an unused private-data hook (check_buddy_priv) and related data structures that were added to a global private data list. The description states the list and lock were unused and could lead to access of f...

CVE-2025-21821

CVE-2025-21821 affects the Linux kernel; specifically the fbdev/omap framebuffer code. The issue arises when using touchscreen with framebuffer, causing a crash (scheduling while atomic) in the driver path related to LCD DMA. The provided advisory notes the root cause is tied to IRQ handling for ...

CVE-2025-22014

CVE-2025-22014 relates to the Linux kernel, specifically the QCOM SoC PDR path. The issue is a potential deadlock between processes when a client adds a service lookup (pdr_add_lookup) and a server locator update (pdr_locator_new_server), which can cause the response to queue on the same workqueu...

CVE-2025-39735

CVE-2025-39735 affects the Linux kernel's JFS: a slab-out-of-bounds read in ea_get() can occur when processing extended attributes. The root cause is an overflow during clamping of ea_size against EALIST_SIZE(ea_buf->xattr) due to int upper-bound handling, causing a negative size to be used in...

CVE-2014-9529

CVE-2014-9529: A race condition in Linux kernel key garbage collection (key_gc_unused_keys in security/keys/gc.c) up to 3.18.2 can enable local users to cause DoS or memory corruption during key garbage collection via keyctl. Connected advisory confirms kernel upstream fix and lists commit a3a878...

CVE-2020-14304

CVE-2020-14304 describes a memory-disclosure flaw in the Linux kernel ethernet drivers, in how data is read from a device EEPROM. A local user can read uninitialized kernel memory, impacting confidentiality. The description notes a local-exploit vector and does not provide a patch or mitigation i...

CVE-2021-47495

CVE-2021-47495 involves the Linux kernel usbnet vulnerability where a zero maxpacket caused an invalid division and a kernel oops. The description notes a sanity check for maxpacket and that a 0 value is nonsensical, leading to a failure to divide by it. The accompanying notes indicate a fix was ...

CVE-2022-49492

The CVE-2022-49492 issue affects the Linux kernel nvme-pci path. In nvme_alloc_admin_tags, admin_q can be set to an error (e.g., -ENOMEM) and, after returning, the flow may quiesce a non-existent admin queue, leading to a bad NULL pointer dereference. The vulnerability is a local issue with HIGH ...

CVE-2022-49519

The CVE-2022-49519 issue concerns the Linux kernel wireless driver ath10k. A double invocation of ath10k_halt during a suspend sequence could occur when FW recovery triggered by ath10k_core_restart() interleaves with suspend, freezing the restart worker and causing ath10k_htt_rx_free() to be free...