CVE-2024-50069

The CVE-2024-50069 entry concerns the Linux kernel pinctrl: apple subsystem. Root cause: devm_kasprintf() could return NULL on failure, but the return value was not checked. The fix adds a check of the returned pointer to prevent NULL dereference. Impact described as high availability risk in aff...

CVE-2024-50099

The CVE-2024-50099 entry is supported by connected documents showing concrete Linux kernel details. Affected component: arm64 probes in the Linux kernel. Root cause: simulate_ldr_literal() and simulate_ldrsw_literal() relied on plain C memory accesses, which have no extable entries and can fault;...

CVE-2024-50115

CVE-2024-50115 is a Linux kernel vulnerability affecting KVM nSVM where loading PDPTEs from memory incorrectly handles nCR3[4:0]. The issue can cause an out-of-bounds read if a target page is at the end of a memslot, due to not enforcing 32-byte alignment when PAE paging is used. The root cause i...

CVE-2024-50163

The CVE-2024-50163 entry documents a Linux kernel fix for bpf redirect flag overlap: the internal UAPI bpf_redirect flags were sharing the same ri->flags values for SKB and XDP paths, causing a crash under certain redirect use. The patch makes bpf_redirect_info stack-allocated per path, avoids...

CVE-2024-53136

In CVE-2024-53136, the Linux kernel mm/shmem fix was reverted: reverting the patch that fixed data-race in shmem_getattr() to address deadlocks when accessing tmpfs over NFS. The description notes the revert was done at d949d1d14fa2 per guidance, with comments indicating the change silenced a syz...

CVE-2024-53215

CVE-2024-53215 concerns the Linux kernel RcRPC/RDMA path (svcrdma) where percpu_counter destruction was mishandled during svc_rdma_proc_init()/svc_rdma_proc_cleanup(). If register_sysctl() returns NULL, percpu counters initialized in svc_rdma_proc_init() may not be destroyed, and on hotplug CPU e...

CVE-2024-55916

The CVE-2024-55916 entry refers to a Linux kernel race where the KVP/VSS daemon may run before the VMBus ringbuffer is fully initialized. Concrete detail: a NULL pointer dereference can occur in hv_pkt_iter_first when the daemon opens / dev/vmbus/hv_kvp and registers before vmbus_open() completes...

CVE-2025-21848

The CVE-2025-21848 issue affects the Linux kernel where nfp_bpf_cmsg_alloc() fails to check the return value of nfp_app_ctrl_msg_alloc(), leading to a NULL pointer dereference. The connected sources confirm this root cause and indicate a patch was added to perform the necessary check to prevent t...

CVE-2025-22079

The CVE-2025-22079 issue affects the Linux kernel OCFS2 path handling. A 16-bit l_tree_depth could exceed OCFS2_MAX_PATH_DEPTH, risking out-of-bounds access (noted when reading from a corrupted mounted disk). A fix was implemented to validate l_tree_depth and guard against invalid values, prevent...

CVE-2014-8171

CVE-2014-8171 affects the Linux kernel memcg (memory resource controller). The description shows that a local user can spawn new processes within a memory-constrained cgroup, and this handling of OOM could lead to a deadlock, yielding a local denial of service. The incident is tied to the memcg O...

CVE-2015-2922

CVE-2015-2922 is a Linux kernel IPv6 Neighbor Discovery flaw in the ndisc_router_discovery path that lets a crafted Router Advertisement with a small hop_limit reconfigure the hop-limit on the receiving interface. It affects the IPv6 stack prior to kernel 3.19.6; the impact is loss of connectivit...

CVE-2015-7613

CVE-2015-7613 is a Linux kernel race condition in the IPC object implementation (up to version 4.2.3) that can allow a local unprivileged user to escalate privileges by triggering ipc_addid, which uses uid/gid values from uninitialized data (topics include msg.c, shm.c, util.c). Connected sources...

CVE-2017-16535

CVE-2017-16535 affects the Linux kernel up to version 4.13.9, where usb_get_bos_descriptor in drivers/usb/core/config.c improperly handles crafted USB devices, enabling a local attacker to trigger an out-of-bounds read that can cause denial of service or a system crash. The issue stems from readi...

CVE-2020-28097

CVE-2020-28097 affects the Linux kernel’s vgacon subsystem; versions before 5.8.10 mishandle software scrollback, causing a vgacon_scrolldelta out-of-bounds read . This is a local issue that can read kernel memory via the vgacon pathway. The public references note the fix in kernel release 5.8.10...

CVE-2021-47556

CVE-2021-47556 concerns a NULL-deref in ethtool_set_coalesce() on the legacy ioctl path when a device driver implements only one of get_coalesce() or set_coalesce() and the availability check is buggy. The issue could crash with a NULL pointer when changing coalescing settings if both callbacks a...

CVE-2022-1973

CVE-2022-1973 describes a use-after-free in the Linux kernel NTFS3 filesystem, specifically in the log_replay path (fs/ntfs3/fslog.c). It allows a local attacker to crash the system and may lead to kernel information leakage. The connected Astra Linux note corroborates the same description of the...

CVE-2022-3169

CVE-2022-3169 - Linux kernel NVMe host driver. A denial-of-service condition may occur when NVME_IOCTL_RESET and NVME_IOCTL_SUBSYS_RESET are issued in sequence via the device file, potentially causing a PCIe link disconnect. Affected component is the Linux kernel’s NVMe host/driver pathway; the f...

CVE-2022-48747

The Linux kernel contains a vulnerability in the block module's bio_truncate() function. The root cause is an incorrect offset used for the page, which prevents the function from correctly clearing the buffer outside of the last block of the block device (bdev ). This flaw can result in the syste...

CVE-2022-49006

CVE-2022-49006 concerns Linux kernel tracing: when a dynamic event (e.g., a kprobe) is added and later removed, the event type number recycled after 65535 can cause the parsing logic for new events to misinterpret the binary blob. The vulnerability stems from reusing the former type number for a ...

CVE-2022-49429

CVE-2022-49429 affects the Linux kernel’s RDMA/hfi1 subsystem. When the hfi1 module is loaded with SDMA disabled (HFI1_CAP_SDMA off), a call to hfi1_write_iter() can dereference a NULL pointer, causing a kernel panic through the I/O path (sdma_select_user_engine → hfi1_user_sdma_process_request →...

CVE-2023-38427

The connected documents confirm CVE-2023-38427 affects the Linux kernel (ksmbd) via an integer underflow and an out-of-bounds read in fs/smb/server/smb2pdu.c (deassemble_neg_contexts) and that a fix was released in Linux kernel 6.3.8. Practical impact is high due to potential data exposure and co...

CVE-2023-52626

CVE-2023-52626 (Linux kernel) affects net/mlx5e: fix an operation precedence bug in port timestamping napi_poll context, where indirection (*) has lower precedence than postfix ++, causing an out-of-bounds read after increment. The fix dereferences before increment, preventing the read. CVSS 3.1 ...

CVE-2023-52663

The CVE-2023-52663 entry concerns a memory‑leak in the Linux kernel: ASoC: SOF: amd: amd_sof_acp_probe() allocated fw_code/bin and fw_data/bin with kasprintf() but never freed via kfree(), causing a leak. The fix switches to devm_kasprintf() and adds a pointer validity check to ensure allocation ...

CVE-2023-52791

CVE-2023-52791 affects the Linux kernel i2c core: Run atomic i2c xfer when !preemptible to ensure atomicity during restart sequences, preventing voluntary context switches within RCU read-side critical sections. The fix, tied to preemption handling (switching to !preemptible()), aligns with pre-v...

CVE-2024-26651

CVE-2024-26651 concerns a Linux kernel issue where a missing check in usbnet_get_endpoints could fail to propagate an error, potentially enabling a local impact as described in the advisory. The vulnerability is tied to the usbnet_endpoints handling path, with the described fix being to add a che...

CVE-2024-26761

CVE-2024-26761 : Linux kernel fix in the cxl/pci HDM setup to prevent a system hang when the DVSEC CXL range is not found in a CFMWS window. If the Host Physical Address (HPA) is not a System Physical Address (SPA), the CXL range may not map to a CFMWS window, causing the HDM decoder to be disabl...

CVE-2024-26785

The Linux kernel is vulnerable to a protection fault within the iommufd component, specifically in the iommufd_test_syz_conv_iova function. The issue arises because the iommufd_access_change_ioas() function sets access->ioas to NULL during its execution, potentially causing a race condition wh...

CVE-2024-27053

The Linux kernel contains a vulnerability in the wifi: wilc1000 driver where an RCU pointer is dereferenced outside of an RCU critical section during the connect path. This issue occurs when parsing target BSS parameters, specifically triggering a suspicious RCU usage warning when lockdep is enab...

CVE-2024-35887

CVE-2024-35887 affects the Linux kernel ax25 subsystem. When an ax25 device detaches, ax25_dev_device_down() calls ax25_ds_del_timer() to cleanup the slave_timer; if the timer handler is running, del_timer() may run concurrently with ax25_dev_put() freeing the device, causing a use-after-free. Th...

CVE-2024-35890

CVE-2024-35890 affects the Linux kernel GRO path: when packets are GROed with fraglist they may be segmented and reused in the stack. The skb objects could be reused as-is after their destructor was removed in skb_gro_receive_list, but the reference to their socket wasn’t removed, preventing prop...

CVE-2024-35894

CVE-2024-35894: In the Linux kernel, a mitigation for a subflow-level BPF access issue was implemented in mptcp by preventing BPF from accessing mptcp-level proto_ops from a subflow scope. The root cause was a misconfigured interaction where BPF could reach mptcp proto_ops through a tcp subflow, ...

CVE-2024-36002

Linux kernel CVE-2024-36002 details a crash in dpll_pin_on_pin_register/dpll_pin_on_pin_unregister when a pin is registered with multiple parent pins on the same dpll device. A crash trace occurs during ice driver removal (ICE/ice_dpll_deinit_pins). The fix adds a cookie-like parent pointer when ...

CVE-2024-36005

CVE-2024-36005 is reported in the Astra Linux security bulletin as a Linux kernel vulnerability affecting nf_tables: the kernel could unregister an already unregistered nethook due to mishandling the table dormant flag on netdev release events. The issue is described with the same reproduction tr...

CVE-2024-36928

CVE-2024-36928 affects the Linux kernel s390/qeth driver. Affected component is the qeth out_q napi path; the root cause is a NULL napi function pointer being invoked when hsuid is set for the first time on an IQD Layer3 device while the interface is UP. This triggers a kernel panic (Fatal except...

CVE-2024-36944

The Linux kernel was updated to resolve a vulnerability involving a circular locking dependency between the console_owner locking and the worker pool locking . This issue was identified in the drm/qxl component and caused virtual machines to hang during boot-up. The fix involves reapplying the si...

CVE-2024-38605

CVE-2024-38605 : In the Linux kernel, the ALSA core code fixed a NULL module pointer handling during snd_card initialization. The patch moves the assignment of card->module outside the MODULE check to ensure the driver’s module reference is correctly tracked when the core is built-in but the c...

CVE-2024-39282

Technical details for CVE-2024-39282 are not provided in the supplied documents. Affected components, impact and fixes are not explicitly listed here; monitor vendor advisories (kernel/NDS) for updates and patches.

CVE-2024-49983

CVE-2024-49983 : Linux kernel ext4 fix for double-free in ext4_ext_replay_update_ex(). The patch drops the temporary ppath and uses path directly, preventing freeing of path via ppath and ensuring the original path is updated on success. It also makes ext4_find_extent() update the path and propag...

CVE-2024-50009

The CVE-2024-50009 issue affects the Linux kernel’s cpufreq/amd-pstate path where cpufreq_cpu_get may return NULL, risking a NULL-dereference. The fix adds a proper return value check and aborts on error. Affects local/privilege-limited scenarios (per CVSS: LOCAL, LOW/LOW for user and privileges,...

CVE-2024-50048

CVE-2024-50048 (Linux kernel fbcon NULL pointer dereference) : A NULL pointer dereference in fbcon_putcs was triggered after using fbcon via FBIOPUT_CON2FBMAP and TIOCLINUX, due to an uninitialized ops->putcs path. Reproducer shows set_con2fb_map -> con2fb_init_display -> fbcon_set_disp ...

CVE-2024-50182

CVE-2024-50182 concerns the Linux kernel memfd_secret() syscall. On arm64 configurations where arch cannot set a direct map (notably when can_set_direct_map() is false), memfd_secret() currently returns success in set_direct_mapInvalid_noflush(), which makes the syscall appear to work but fails t...

CVE-2024-50272

CVE-2024-50272 is a Linux kernel issue where filemap_read() could enter an infinite loop if a caller provides an iocb->ki_pos near the filesystem limit and an iterator count overflows that limit. The vulnerability was addressed by fixing bounds checking in filemap_read() (kernel code path: fil...

CVE-2024-53133

CVE-2024-53133 concerns the Linux kernel DRM/AMD display driver. The vulnerability arises when a dml allocation fails, causing the current state’s dml contexts to become invalid. Subsequent calls to dc_state_copy_internal could shallow-copy these invalid pointers, and releasing the new state coul...

CVE-2024-56577

Technical details about CVE-2024-56577 are not publicly provided in the supplied documents. Please monitor for updates from the vendor and security advisories.

CVE-2024-56640

Summary : CVE-2024-56640 affects the Linux kernel net/smc subsystem, related to a use-after-free caused by incorrect refcount handling of LGR/link. The issue can occur when refcnt reaches 0 and triggers premature clearing, or underflow after repeated releases, as observed in two call paths (LGR t...

CVE-2024-56726

CVE-2024-56726 affects the Linux kernel octeontx2-pf in cn10k.c; the issue stems from missing validation after otx2_mbox_get_rsp. The Astra Linux bulletin mirrors this kernel context and notes the fix is to add an error pointer check after otx2_mbox_get_rsp. Remediation in the public record indic...

CVE-2025-21650

Technical details about CVE-2025-21650 are not provided in the connected documents. The initial description is detailed, but there is no supplementary data in the connected sources to confirm affected products/versions, impact, or fixes. Monitor for updates.

CVE-2025-21979

CVE-2025-21979 affects the Linux kernel wifi stack (cfg80211). A wiphy_work can be queued as soon as the wiphy is allocated (wiphy_new_nm). If wiphy_free runs before the rdev::wiphy_work executes, the wiphy memory is freed and later accessed, leading to a use-after-free. The fix is to cancel the ...

CVE-2025-37778

CVE-2025-37778 is a Linux kernel vulnerability in ksmbd’s krb_authenticate path. The root cause is a use-after-free: krb_authenticate frees sess->user and may not NULL it; if ksmbd_krb5_authenticate does not reinitialize sess->user, smb2_sess_setup may later access freed memory. Several adv...

CVE-2025-37798

CVE-2025-37798 affects the Linux kernel networking code. The fix removes the qlen check in fq_codel_dequeue() and codel_qdisc_dequeue() after making sch->qlen_notify() callbacks idempotent. The description indicates the vulnerability related to backlog/queue length handling in qdisc code (code...