CVE-2024-57900

CVE-2024-57900 is a Linux kernel vulnerability affecting the ila subsystem. A race in ila_add_mapping() can occur with concurrent ILA_CMD_ADD commands, observed as KASAN slab-use-after-free traces. The provided fix adds a mutex to ensure at most one thread calls nf_register_net_hooks(), preventin...

CVE-2024-57908

CVE-2024-57908 affects the Linux kernel’s IIO KMX61 driver (iio: imu: kmx61). The vulnerability arises from using a local buffer to push data to userspace from a triggered buffer without initializing inactive channels, potentially leaking information. The documented fix is to initialize the buffe...

CVE-2024-58083

CVE-2024-58083 affects the Linux kernel KVM: the target vCPU was not reliably verified online before clamping the index in kvm_get_vcpu(). If the index is bad, nospec clamping could return vCPU0, leading to a use‑after‑free when vCPU0 is dereferenced. The issue is mitigated by ensuring vCPU0 is o...

CVE-2025-21719

CVE-2025-21719 concerns the Linux kernel IPv4 multicast (ipmr) subsystem. The issue arises from calling mr_mfc_uses_dev() for unresolved (unres) mcast routes, which can crash because c->mfc_un.res.minvif and maxvif alias to a struct sk_buff_head that contains pointers. The vulnerability is roo...

CVE-2010-2962

The CVE-2010-2962 issue affects the Intel i915 DRM GEM in the Linux kernel prior to 2.6.36. It arises from insufficient validation of pointers to memory blocks in i915_gem.c, enabling local users to write to kernel memory via crafted ioctl usage (pwrite/pread) and potentially gain privileges.

CVE-2014-7841

CVE-2014-7841 affects the Linux kernel SCTP implementation (net/sctp/sm_make_chunk.c) with ASCONF enabled. A malformed INIT chunk can trigger a NULL pointer dereference, causing a system crash (DoS). Affected: kernel versions before 3.17.4; fix: upgrade to 3.17.4 or later (kernel changelog confir...

CVE-2014-9529

CVE-2014-9529: A race condition in Linux kernel key garbage collection (key_gc_unused_keys in security/keys/gc.c) up to 3.18.2 can enable local users to cause DoS or memory corruption during key garbage collection via keyctl. Connected advisory confirms kernel upstream fix and lists commit a3a878...

CVE-2016-0723

CVE-2016-0723 is a Linux kernel race condition in the tty_ioctl handler (drivers/tty/tty_io.c) that can allow a local attacker to obtain memory content or trigger a denial of service by manipulating a TIOCGETD call during a TIOCSETD operation. The initial description states the flaw exists in ker...

CVE-2017-17975

CVE-2017-17975: Use-after-free in Linux kernel’s usbtv_probe (drivers/media/usb/usbtv/usbtv-core.c) up to kernel 4.14.10 can allow local attackers to trigger audio registration failure, potentially causing a denial of service (system crash) or other unspecified impact due to improper handling of ...

CVE-2021-47001

In CVE-2021-47001, the Linux kernel’s rpcrdma path (net/sunrpc/xprtrdma/rpc_rdma.c) has a race in cwnd update ordering after reconnects, where the reply handler may open the cwnd before rpcrdma_post_recvs() posts enough Receive WEs, causing an RNR and immediate connection loss. This race is highl...

CVE-2022-47518

CVE-2022-47518 affects the Linux kernel before 6.0.11, specifically the WILC1000 wireless driver (drivers/net/wireless/microchip/wilc1000/cfg80211.c). The issue is missing validation of the number of channels, which can trigger a heap-based buffer overflow when copying the list of operating chann...

CVE-2022-48747

CVE-2022-48747 affects the Linux kernel in the block.bio_truncate() path. The vulnerability stems from a wrong page offset being used, causing bio_truncate() to clear data outside the last block of a block device and potentially return uninitialized data when both truncated/corrupted FS and users...

CVE-2023-52698

CVE-2023-52698: The Linux kernel fix addresses a memory leak in netlbl_calipso_add_pass() when IPv6 is disabled at boot (ipv6.disable=1). In this scenario, netlbl_calipso_ops_register() may not be called and netlbl_calipso_ops_get() returns NULL, causing allocated doi_def memory in netlbl_calipso...

CVE-2023-52867

CVE-2023-52867 affects the Linux kernel drm/radeon driver: a buffer overflow in the AFMT status buffer (afmt_status, size 6) can occur because afmt_idx is checked after access. The issue is resolved in kernel updates referenced by multiple advisories (e.g., Amazon Linux 2 ALAS-2025-2834 and Unity...

CVE-2024-26734

CVE-2024-26734 affects the Linux kernel devlink subsystem. The issue arises from use-after-free and memory leaks in devlink_init() due to the ordering of registration: the pernet operations structure must be registered before the generic netlink family, and a proper unregister path is needed if r...

CVE-2024-26851

CVE-2024-26851: Linux kernel nf_conntrack_h323 decoding bug fixed. UBSAN reported negative/out-of-bounds shifts when decoding Ras messages due to abnormal skb->data; patch adds protection to keep extension bitmap length

CVE-2024-26853

CVE-2024-26853 affects the Linux kernel igc XDP path. When a frame cannot be transmitted via XDP_REDIRECT (e.g., full queue), the frame must be freed, but calling xdp_return_frame_rx_napi inside igc_xdp_xmit can cause memory corruption. The fix (as per the description) is to break on the first no...

CVE-2024-35823

CVE-2024-35823: Linux kernel vt buffer corruption when deleting characters has been fixed. Root cause: overlapping buffers in VT text handling; solution: replace memcpy() with memmove() (same approach as VGA text buffer fix). Affected component: vt in the Linux kernel. Remediation: upgrade to a k...

CVE-2024-35872

Summary: CVE-2024-35872 affects the Linux kernel mm/secretmem feature. The issue arose because folios for secretmem could be added to batches without the LRU flag, making folio_is_secretmem() unreliable and enabling a local attacker to trigger GUP-fast on secretmem folios. The fix removes the unr...

CVE-2024-35959

CVE-2024-35959 is an Linux kernel issue fixed in the mlx5e path. The fix addresses a cleanup flow: when mlx5e_priv_init() fails, mlx5e_priv_init’s cleanup calls mlx5e_selq_cleanup, which previously could lead to a misordered lock usage. The cleanup calls mlx5e_selq_apply() that assumes priv->s...

CVE-2024-36928

CVE-2024-36928 affects the Linux kernel s390/qeth driver. Affected component is the qeth out_q napi path; the root cause is a NULL napi function pointer being invoked when hsuid is set for the first time on an IQD Layer3 device while the interface is UP. This triggers a kernel panic (Fatal except...

CVE-2024-38558

Technical details for CVE-2024-38558 are not publicly available in the provided documents. Monitor for updates from official advisories to confirm affected products, impact, and fixes.

CVE-2024-38615

CVE-2024-38615 : A Linux kernel cpufreq vulnerability was resolved. The issue centers on the cpufreq exit() callback which is now optional; code must not call exit() without validating the pointer first, and freq_table must be cleared even if the exit() callback is absent. The connected Astra Lin...

CVE-2024-40904

CVE-2024-40904 affects the Linux kernel USB: class: cdc-wdm driver. The issue was a CPU soft lockup caused by excessive log messages from the interrupt URB handling, exacerbated by immediate resubmission of URBs with -EPROTO status and verbose kernel logging. The fix replaces two verbose dev_err(...

CVE-2024-41089

CVE-2024-41089 relates to the Linux kernel DRM/Nouveau code path: in nv17_tv_get_hd_modes(), the return of drm_mode_duplicate() (and drm_cvt_mode()) could be NULL on failure, leading to a NULL pointer dereference. The fix adds a NULL check to avoid dereferencing a NULL mode object. Impact is a lo...

CVE-2024-41095

CVE-2024-41095 concerns the Linux kernel's DRM Nouveau driver. The root cause is a NULL pointer dereference in nv17_tv_get_ld_modes() when drm_mode_duplicate() fails and its return value is assigned to mode without checking for NULL. The patch adds a guard to prevent the NULL pointer dereference ...

CVE-2024-42252

CVE-2024-42252 is described as a Linux kernel vulnerability resolved by replacing BUG_ON() with WARN_ON() in the closure handling path. The issue arises if a BUG_ON() can be hit in the wild, which would not be appropriate and could lead to a kernel oops. The fix is to use WARN_ON() instead of BUG...

CVE-2024-43888

CVE-2024-43888 pertains to the Linux kernel memory-control path. The advisory fixes a use-after-free in mm/list_lru for memory cgroups: mem_cgroup_from_slab_obj() must be called under RCU protection (rcu_read_lock) or with appropriate locks; without it, a memcg could be freed while still used. Th...

CVE-2024-44938

CVE-2024-44938 relates to the Linux kernel JFS code. The issue is a shift-out-of-bounds in dbDiscardAG when BLKSTOL2() returns 0 while seeking the next smaller log2 block, which can yield a negative shift exponent. The patch resolves this by exiting the loop when a negative shift is encountered. ...

CVE-2024-44958

CVE-2024-44958 – Linux kernel SMT scheduling fix : The issue was a balance error in sched_smt_present where, if cpuset_cpu_inactive() fails during cpu offline, sched_smt_present is decremented before sched_cpu_deactivate(), causing an unbalanced dec/inc pair. The patch increments sched_smt_presen...

CVE-2024-46858

CVE-2024-46858 in the Linux kernel fixes a local UAF race in mptcp_pm_del_add_timer. Two paths can access mptcp_pm_del_add_timer concurrently (CPU1 in PM code path vs CPU2 in netlink/ip stack path), leading to use-after-free when a timer entry is freed after leaving the critical region. The patch...

CVE-2024-50022

The CVE-2024-50022 issue affects the Linux kernel device-dax path. The root cause is pgoff alignment in dax_set_mapping() using ALIGN() instead of ALIGN_DOWN(), which can misalign vmf->address to fault_size and cause memory address errors. This was observed during page fault handling in dev_da...

CVE-2024-50153

CVE-2024-50153 — Linux kernel null pointer dereference in target_alloc_device() The Astra Linux advisory (and linked sources) confirm a vulnerability in the Linux kernel's SCSI target core (target_alloc_device) where memory allocation for device queues could fail before dev.transport is initializ...

CVE-2024-50278

The CVE-2024-50278 vulnerability affects the Linux kernel’s dm-cache (device-mapper) component. It can cause an out-of-bounds access in the dirty-bitset when the fast device is expanded before the first resume of the cache table, due to the first-resume size check not being performed. Reproductio...

CVE-2024-53117

CVE-2024-53117 (Linux kernel) : The vulnerability affects virtio/vsock in the Linux kernel. The root cause was a missing kfree_skb() in error handling for MSG_ZEROCOPY paths, which could cause memory leaks. The fix adds the missing kfree_skb() to prevent leaks when MSG_ZEROCOPY encounters errors....

CVE-2024-53133

CVE-2024-53133 concerns the Linux kernel DRM/AMD display driver. The vulnerability arises when a dml allocation fails, causing the current state’s dml contexts to become invalid. Subsequent calls to dc_state_copy_internal could shallow-copy these invalid pointers, and releasing the new state coul...

CVE-2024-53239

CVE-2024-53239 relates to the Linux kernel ALSA 6fire driver. The vulnerability arises when resources are released immediately after usb6fire_chip_abort(), while the card object may still be in use (the code calls snd_card_free_when_closed()). This can lead to a use-after-free scenario. The docum...

CVE-2024-53681

CVE-2024-53681 : In the Linux kernel nvmet subsystem, the code path nvmet_root_discovery_nqn_store mishandled the subsysnqn string as a fixed-size buffer even though it is allocated to the string size. The root cause is buffer overrun risk when the subsysnqn is longer than the old buffer. The fix...

CVE-2024-56577

Technical details about CVE-2024-56577 are not publicly provided in the supplied documents. Please monitor for updates from the vendor and security advisories.

CVE-2024-56606

CVE-2024-56606 concerns the Linux kernel vulnerability in af_packet where, after sock_init_data() allocates a sk object and attaches it to a sock, packet_create() on error frees the sk but leaves a dangling sk pointer in the sock. This can enable a use-after-free if other code reuses that pointer...

CVE-2024-56778

CVE-2024-56778 affects the Linux kernel DRM STI driver. The root cause is that sti_hqvdp_atomic_check could dereference an error pointer because the return value of drm_atomic_get_crtc_state() was not checked, risking invalid pointer use and potential instability. The vulnerability is limited to ...

CVE-2025-37797

CVE-2025-37797 affects the Linux kernel HFSC qdisc. A Use-After-Free can occur in hfsc_change_class() when handling certain child qdiscs (e.g., netem, codel) due to a time-of-check/time-of-use race: hfsc_change_class() may add a class to vttree after qdisc_peek_len() potentially clears the queue....

CVE-2017-8831

The CVE-2017-8831 issue affects the Linux kernel, specifically the saa7164_bus_get function in drivers/media/pci/saa7164/saa7164-bus.c, with impact up to kernel version 4.11.5. It is a local, potentially privilege-escalating vulnerability described as a “double fetch” vulnerability caused by re-r...

CVE-2018-10901

CVE-2018-10901 affects the Linux kernel’s KVM virtualization subsystem. The VMX path fails to restore the guest GDT.LIMIT to the host value, setting it to 64KB instead. This can allow a host userspace process to corrupt GDT entries (notably per-cpu variables), enabling local privilege escalation....

CVE-2021-47076

CVE-2021-47076 is a Linux kernel vulnerability affecting the RDMA/rxe path. The flaw was due to RXE not updating WQE status on LOCAL_WRITE failures, which could trigger a kernel panic when an atomic operation is sent with an invalid lkey. The issue has concrete remediation in the Linux kernel ups...

CVE-2021-47118

CVE-2021-47118: In the Linux kernel, cad_pid is initialized without taking a reference to the init task’s pid. When cad_pid is later updated via sysctl, the old pid may be put without a corresponding get, risking a use-after-free of the init task’s struct pid. The connected MiracleLinux advisory ...

CVE-2022-2380

CVE-2022-2380 concerns the Silicon Motion SM712 framebuffer driver in the Linux kernel. The issue is an out-of-bounds memory access in drivers/video/fbdev/sm712fb.c:smtcfb_read(), which could allow a locally authenticated attacker to crash the kernel. The description and linked advisories consist...

CVE-2022-27950

CVE-2022-27950 : A memory leak exists in Linux kernel drivers/hid/hid-elo.c for a hid_parse error condition, affecting kernels before 5.16.11. Exploitation details are not provided in the documents. A fix is in kernel 5.16.11 (and later). Recommendation: upgrade to a version containing the patch ...

CVE-2022-4128

CVE-2022-4128 is a NULL pointer dereference in the Linux kernel’s MPTCP implementation during subflow traversal at disconnect time. The issue can be triggered by a local user and may crash the host, resulting in a denial-of-service condition. The connected vulnerability listings (including Miracl...

CVE-2022-48804

CVE-2022-48804 is resolved in the Linux kernel’s vt_ioctl/vt_setactivate path. The vulnerability stems from an array_index_nospec handling that could allow a transient integer underflow when an out-of-bounds value is decremented after zero, specifically affecting vsa.console handling. The descrip...