CVE-2024-49989

CVE-2024-49989: In the Linux kernel, the drm/amd/display path fixes a double-free when unloading the amdgpu module. The issue arises during cleanup of display encoders for flexible/inflexible endpoints, potentially freeing the same object twice during amdgpu driver unload. Connected advisories (A...

CVE-2024-47705

The CVE CVE-2024-47705 (block: fix potential invalid pointer dereference in blk_add_partition) is resolved in the Linux kernel. The issue occurred when blk_add_partition() changed error handling from a single IS_ERR(part) test to handle -ENXIO separately, which unintentionally allowed a path wher...

CVE-2024-49946

CVE-2024-49946 affects the Linux kernel PPP stack. The issue arises in ppp_channel_bridge_input() when packets are backlogged to a socket owned by a user process and the code path can call sk_backlog_rcv()/__release_sock()/release_sock() in process context. This creates an inconsistent lock state...

CVE-2024-49983

CVE-2024-49983 : Linux kernel ext4 fix for double-free in ext4_ext_replay_update_ex(). The patch drops the temporary ppath and uses path directly, preventing freeing of path via ppath and ensuring the original path is updated on success. It also makes ext4_find_extent() update the path and propag...

CVE-2024-50093

Summary: CVE-2024-50093 relates to the Linux kernel where the processor_thermal/intel int340x driver emitted a warning during module unload due to an unnecessary second pci_disable_device() call after enabling a PCI device with pcim_device_enable(). The connected Astra Linux and Debian Debian-LTS...

CVE-2024-50128

The CVE-2024-50128 issue is a Linux kernel net/wwan vulnerability: a global out-of-bounds read caused by wwan_rtnl_link_ops assigning a bigger maxtype when parsing netlink attributes. The root cause, per nla_parse_nested_deprecated guidance, is using an undersized IFLA_WWAN_MAX size during parsin...

CVE-2024-53114

CVE-2024-53114 affects Linux kernel components related to x86 virtualization (VMLOAD/VMSAVE) on Zen4 client hardware. The vulnerability has been addressed in Root’s rootio-linux package for Ubuntu 22.04 (Root-OS-UBUNTU-2204-CVE-2024-53114) with multiple fixed versions available, and similarly pat...

CVE-2024-53129

CVE-2024-53129 affects the Linux kernel DRM Rockchip VOP as described. The root cause was a NULL-dereference in vop_plane_atomic_async_check() where 'state' could be dereferenced before a NULL check; patch fixes crtc_state validation (rockchip_drm_vop.c:1096). Connected advisories confirm the iss...

CVE-2024-53155

CVE-2024-53155 relates to the Linux kernel OCFS2: a fix for an uninitialized value in ocfs2_file_read_iter() caused by a kiocb ‘private’ field possibly being uninitialized when passed from the block layer. The accompanying kernel log shows KMSAN reports and a stack trace ending in ocfs2_file_read...

CVE-2024-56577

Technical details about CVE-2024-56577 are not publicly provided in the supplied documents. Please monitor for updates from the vendor and security advisories.

CVE-2024-56650

CVE-2024-56650 - Linux kernel netfilter x_tables led_tg_check() . The connected documents confirm a fix in the Linux kernel addressing an issue where an invalid LED ID check could lead to a recallable problem during ID processing. The root cause, as described, is insufficient validation of an ID ...

CVE-2024-56654

CVE-2024-56654 — Linux kernel Bluetooth hci_event fix : Addresses unsafe use of rcu_read_lock/unlock inside list_for_each_entry_rcu, where entries dereferenced with rcu_dereference must be accessed only within an RCU read-side critical section. The patch resolves a safety issue by ensuring correc...

CVE-2024-56747

CVE-2024-56747 concerns the Linux kernel scsi/qedi memory leak. The vulnerable path occurs when the sb (shared memory) for qedi_sb_init is allocated but not freed if sb_init fails, leading to a memory leak. The fix adds dma_free_coherent() to release sb_virt, aligning with the handling in qedr_al...

CVE-2024-57902

CVE-2024-57902 affects the Linux kernel AF_PACKET path. The bug arose in vlan_get_tci() where the code touched the skb when handling MSG_PEEK, allowing a crash. The fix reworks vlan_get_tci() to avoid touching the skb entirely and adds a const qualifier to the skb argument. The crash trace involv...

CVE-2017-7346

The CVE-2017-7346 issue is a Linux kernel vulnerability in vmwgfx where vmw_gb_surface_define_ioctl in drivers/gpu/drm/vmwgfx/vmwgfx_surface.c fails to validate certain levels data, enabling a local attacker to cause a denial of service (system hang) via a crafted ioctl to /dev/dri/renderD* on ke...

CVE-2022-1204

CVE-2022-1204 is a use-after-free flaw in the Linux kernel’s Amateur Radio AX.25 protocol handling that can allow a local attacker to crash the system. Connected advisories confirm this is a kernel-level issue, with public reports across multiple distributions (Debian, Mageia, Mariner, etc.). Aff...

CVE-2022-49594

CVE-2022-49594 : In the Linux kernel, a data race around reading sysctl_tcp_mtu_probe_floor could occur because the value was updated concurrently while read. The fix was to add READ_ONCE() to the reader, mitigating a local-exploit class and preserving availability. The connected advisories/refs ...

CVE-2022-49726

CVE-2022-49726 concerns the Linux kernel clocksource for Hyper-V. The issue arises from exporting an __init-annotated hv_init_clocksource() symbol, while the __init code may be freed after initialization, making the symbol potentially invalid for modules. The vulnerability can lead to a kernel pa...

CVE-2023-35828

CVE-2023-35828 affects the Linux kernel with a use-after-free in the Renesas USB3 gadget driver (drivers/usb/gadget/udc/renesas_usb3.c: renesas_usb3_remove). The vulnerability is triggered in certain removal paths, enabling local attackers to potentially crash the kernel or escalate privileges. A...

CVE-2023-52676

The CVE-2023-52676 issue affects the Linux kernel BPF verifier where stack bounds were inconsistently checked for 32-bit offsets, potentially overflowing 32-bit arithmetic when combining a 64-bit register with an offset. The patch moves stack-bound checks into the 64-bit domain and enforces tight...

CVE-2023-52703

Summary: CVE-2023-52703 is a Linux kernel vulnerability in the USB subsystem (net/usb kalmia) where act_len was uninitialized in the usb_bulk_msg error path in kalmia_send_init_packet(). The kernel fix removes passing act_len to the usb_bulk_msg error paths, since the value would be from the firs...

CVE-2023-52798

CVE-2023-52798 concerns the Linux kernel’s ath11k wifi DFS radar event handling. The fix marks the DFS radar event locking code (calling ath11k_mac_get_ar_by_pdev_id()) as an RCU read-side critical section to prevent potential use-after-free in active pdev protection. Document notes indicate comp...

CVE-2024-26835

CVE-2024-26835 affects the Linux kernel nf_tables (netfilter). When memory pressure causes hook registration to fail, a table can be marked active with no registered hooks, and on table/base chain deletion nf_tables may unregister hooks again, causing a core warn. The connected documents confirm ...

CVE-2024-26949

CVE-2024-26949 affects the Linux kernel AMDGPU power management path. The vulnerability is a NULL pointer dereference in drm/amdgpu/pm when obtaining the power limit, caused by powerplay_table initialization being skipped in SR-IOV scenarios. A fix ensures default lower/upper OD values are set if...

CVE-2024-27016

CVE-2024-27016 affects the Linux kernel netfilter flowtable path and is mitigated by a fix that ensures sufficient room to access the PPPoE header’s protocol field. The patch validates the protocol field before the flowtable lookup and uses a helper to access it, preventing out-of-bounds access. ...

CVE-2024-35824

No public technical details are provided in the connected documents for CVE-2024-35824; monitor for updates.

CVE-2024-35976

CVE-2024-35976 : In the Linux kernel, a proposed input validation bug in XDP_SOCKET options (XDP_{UMEM|COMPLETION}_FILL_RING) allowed a read of 4 bytes via an invalid @optlen path in xsk_setsockopt, tracked by syzbot with KASAN slab-out-of-bounds. The issue arises during setsockopt handling and i...

CVE-2024-36936

The CVE-2024-36936 issue affects the Linux kernel's memory-accept path under efi/unaccepted. The root cause was a soft lockup scenario caused by a spinlock held during memory acceptance, which could intermittently trigger a watchdog/softlockup on the CPU during large TD guest memory loads. The fi...

CVE-2024-38573

In CVE-2024-38573, the Linux kernel CPUS frequency framework (cppc_cpufreq) fixes a possible NULL dereference. cppc_cpufreq_get_rate() and hisi_cppc_cpufreq_get_rate() could observe a NULL policy from cpufreq_cpu_get() under certain conditions. The fix adds a NULL return check to prevent derefere...

CVE-2024-38605

CVE-2024-38605 : In the Linux kernel, the ALSA core code fixed a NULL module pointer handling during snd_card initialization. The patch moves the assignment of card->module outside the MODULE check to ensure the driver’s module reference is correctly tracked when the core is built-in but the c...

CVE-2024-41058

CVE-2024-41058 : Linux kernel vulnerability due to slab-use-after-free in fscache_withdraw_volume() (cachefiles/fscache path). The issue could cause kernel instability via UAF on a volume being withdrawn; patch fixes slab-use-after-free in fscache_withdraw_volume() and adds refcount protection. I...

CVE-2024-42152

CVE-2024-42152: Linux kernel nvmet race during qp establishment may leak memory when destroying a ctrl. Root cause: nvmet_sq_destroy captures sq->ctrl early, risking final ref drop if an admin connect cmd races with destruction. Fixes in the cited documents re-capture sq->ctrl after infligh...

CVE-2024-43884

CVE-2024-43884 : In the Linux kernel, the Bluetooth MGMT path could dereference NULL in hci_conn_params_add() when pairing a device, due to a missing NULL check. This could crash the host. The fixed patch adds error handling in pair_device() to validate the NULL value before dereferencing. Connec...

CVE-2024-49870

CVE-2024-49870 (Linux kernel, cachefiles) summary : The vulnerability arises in cachefiles when a dentry leak can occur if a lookup cookie and a cull run concurrently in cachefiles_open_file(). The leak happens because the code path may fail to release a reference to a dentry, potentially leaving...

CVE-2024-49939

CVE-2024-49939 relates to the Linux kernel WiFi driver rtw89. When a SER L2 event occurs during WoWLAN resume, ieee80211_reconfig() can trigger an add-interface flow that may run twice if rtw89_wow_resume() returns a failure, causing a double list add and a kernel panic. The description states th...

CVE-2024-50009

The CVE-2024-50009 issue affects the Linux kernel’s cpufreq/amd-pstate path where cpufreq_cpu_get may return NULL, risking a NULL-dereference. The fix adds a proper return value check and aborts on error. Affects local/privilege-limited scenarios (per CVSS: LOCAL, LOW/LOW for user and privileges,...

CVE-2024-50015

CVE-2024-50015 affects the Linux kernel ext4 dax path. In ext4/dax, the loop in dax_iomap_rw() can copy data after the process is signalled and then update the inode size, causing written extents to exceed the inode size (e.g., 2M vs 4M) and fsck to report inconsistencies. The referenced fixes tr...

CVE-2024-50048

CVE-2024-50048 (Linux kernel fbcon NULL pointer dereference) : A NULL pointer dereference in fbcon_putcs was triggered after using fbcon via FBIOPUT_CON2FBMAP and TIOCLINUX, due to an uninitialized ops->putcs path. Reproducer shows set_con2fb_map -> con2fb_init_display -> fbcon_set_disp ...

CVE-2024-50153

CVE-2024-50153 — Linux kernel null pointer dereference in target_alloc_device() The Astra Linux advisory (and linked sources) confirm a vulnerability in the Linux kernel's SCSI target core (target_alloc_device) where memory allocation for device queues could fail before dev.transport is initializ...

CVE-2024-50202

CVE-2024-50202 (nilfs2) is a Linux kernel issue where nilfs_find_entry() ignored errors loading a directory folio/page, allowing corrupted images with large i_size to trigger repeated error messages and a task hang in vcs_open(). The root cause is error suppression when nilfs_get_folio() fails; t...

CVE-2024-50216

This CVE (CVE-2024-50216) is described in a MiracleLinux advisory as a Linux kernel XFS issue: the last-resort AG selection in xfs_filestream_pick_ag could leak an uninitialized pag when the code path falls back to an online AG. Root cause: the loop used pag as an iterator while later code expect...

CVE-2024-50261

Mode C CVE-2024-50261 (macsec use-after-free) affects the Linux kernel’s macsec offload path. The issue stems from metadata_dst being freed prematurely in macsec_free_netdev() while a packet is still using it. The fix replaces metadata_dst freeing with dst_release() so that metadata_dst is not fr...

CVE-2024-56678

There are no additional technical details about CVE-2024-56678 in the connected documents beyond what’s in the initial description. Public details in the provided sources are limited; monitor for updates.

CVE-2024-56777

CVE-2024-56777 affects the Linux kernel DRM STI path. The vulnerability arises because the return value of drm_atomic_get_crtc_state() is not checked before dereferencing the potential error pointer crtc_state in sti_gdp_atomic_check, which can lead to an invalid memory access if the call fails. ...

CVE-2024-57896

CVE-2024-57896 corresponds to a Linux kernel use-after-free in the btrfs unmount path. During close_ctree(), the cleaner kthread is stopped and its task_struct freed, but a delalloc_worker may still wake the cleaner from inode.c:submit_compressed_extents(), causing use-after-free of the task_stru...

CVE-2024-58007

CVE-2024-58007 affects the Linux kernel in the soc: qcom: socinfo path, specifically on MSM8916 devices where the sysfs serial_number is constant. The root cause is an out-of-bounds read of the serial_num field in the socinfo structure due to checking the start offset instead of the end when vali...

CVE-2025-21690

CVE-2025-21690 affects the Linux kernel storvsc SCSI driver where a persistent hypervisor error can cause an unbounded flood of I/O warning logs, leading to kernel log bloat and VM DoS. The issue is addressed by kernel updates across several distributions (e.g., Debian LTS DLA-4076-1:00E2C upgrad...

CVE-2025-21864

CVE-2025-21864 (Linux kernel) : Affects the TCP path when deferring skb free in multi-netns/IPComp6 scenarios. The secpath may keep a reference to an xfrm_state via an skb attached to it, causing a lingering reference after netns deletion. The published fix drops the secpath at the same time as d...

CVE-2025-21927

CVE-2025-21927 : In the Linux kernel, nvme-tcp recv path may memory-corrupt when a packet with an invalid header length is received (e.g., 255) while header digests are enabled. The root cause was missing validation of the header length in nvme_tcp_recv_pdu(), and the patch rejects packets with a...

CVE-2025-21968

Vulnerability (CVE-2025-21968) in the Linux kernel affects the drm/amd/display component, specifically the hdcp_work path. A slab-use-after-free occurs when HDCP is destroyed but the property_validate_dwork delayed work queue is still running. The documented fix cancels the delayed work when dest...