CVE-2025-21968

Vulnerability (CVE-2025-21968) in the Linux kernel affects the drm/amd/display component, specifically the hdcp_work path. A slab-use-after-free occurs when HDCP is destroyed but the property_validate_dwork delayed work queue is still running. The documented fix cancels the delayed work when dest...

CVE-2011-1494

CVE-2011-1494 affects the Linux kernel (2.6.38 and earlier) via an integer overflow in the _ctl_do_mpt_command function (drivers/scsi/mpt2sas/mpt2sas_ctl.c). This can allow local users to gain privileges or cause a denial of service (memory corruption) by issuing an ioctl with a crafted value tha...

CVE-2015-7799

The CVE-2015-7799 issue affects the Linux kernel, specifically slhc_init in drivers/net/slip/slhc.c, up to version 4.2.3. The vulnerability arises because the function does not validate certain slot numbers, allowing a local user to trigger a denial of service via a crafted PPPIOCSMAXCID ioctl ca...

CVE-2015-8785

CVE-2015-8785: The fuse_fill_write_pages function in fs/fuse/file.c of the Linux kernel (versions before 4.4) is exploitable locally to cause a denial of service via a writev call that triggers a zero-length first iov. This is a local, non-privileged issue with an attacker able to induce an infin...

CVE-2016-4794

CVE-2016-4794 is a local-use-after-free in the Linux kernel’s percpu allocator (mm/percpu.c) up to version 4.6. A crafted mmap/bpf usage could cause a denial of service or potentially other unspecified impact. The IBM advisories list fixes at code levels 7.7.1.9, 7.8.1.6, 8.1.1.2, and 8.1.2.1 for...

CVE-2019-19043

The CVE-2019-19043 vulnerability affects the Linux kernel’s i40e driver path: memory leak in i40e_setup_macvlans() within i40e_main.c up through kernel 5.3.11. Triggering i40e_setup_channel() failures can cause memory consumption leading to a denial of service. Connected advisories (Unity Linux U...

CVE-2021-47289

CVE-2021-47289 in the Linux kernel fixes a NULL pointer dereference in ACPI: utils when calling acpi_dev_put() on a possibly NULL pointer. The patch makes acpi_dev_put() silently accept NULL (avoiding downcalls with a NULL offset). The public advisory notes the change as part of resolving the ACP...

CVE-2021-47456

CVE-2021-47456 affects the Linux kernel, specifically the peak_pci driver. The issue is a use-after-free (UAF) that occurs when removing the peak_pci module and the code references 'chan' after releasing 'dev'. The patch fixes the UAF by delaying the release of 'dev'. Logs reference KASAN: use-af...

CVE-2022-49116

CVE-2022-49116 – Linux kernel Bluetooth memset fix : The vulnerability concerns the Bluetooth stack (l2cap_ecred_connect) where structs could leak memory if not initialized. The fix is to use memset to initialize structs to prevent memory leaks. Affected component: Linux kernel Bluetooth subsyste...

CVE-2022-49236

CVE-2022-49236 concerns a Linux kernel use-after-free in BPF/BTF handling: a race between module init and module reuse could allow BTF IDs to be published before a module is fully live. The fix, as described in the related documentation, is to set a BTF_MODULE_F_LIVE flag at MODULE_STATE_LIVE so ...

CVE-2022-49356

CVE-2022-49356 concerns a Linux kernel SUNRPC vulnerability where RDMA segment overflows could occur if svc_rdma_build_writes() walks past a Write chunk’s segment array. The fixed commit prevents walking off the end of the array and was validated with KASAN. The description notes the pre-fix test...

CVE-2022-49434

The CVE-2022-49434 issue is in the Linux kernel where pci_dev_lock() historically acquired the config space access lock before the device lock, risking AB/BA deadlocks with sriov_numvfs_store() that already takes the device lock first. The fix is to reverse the order in pci_dev_lock() so it acqui...

CVE-2022-49520

CVE-2022-49520 (Linux kernel, arm64 compat): The vulnerability occurs when a compat process executes an unknown syscall above __ARM_NR_COMPAT_END; the kernel incorrectly uses the syscall number as ESR_ELx for the fault, causing arm64_show_signal() to print bogus ESR messages. The fix is to stop u...

CVE-2023-26606

The CVE-2023-26606 issue affects the Linux kernel (6.0.8) with a use-after-free in ntfs_trim_fs (fs/ntfs3/bitmap.c). Affects Linux kernel components related to NTFS handling; impact is high (confidentiality, integrity, availability) with local privileges required and no user interaction. Root cau...

CVE-2023-52806

CVE-2023-52806 concerns the Linux kernel ALSA hda subsystem. The description in the initial document notes a possible NULL pointer dereference when an AudioDSP stream is assigned, specifically when a COUPLED stream is inadvertently accepted despite drivers using HOST or LINK types. The connected ...

CVE-2024-27414

CVE-2024-27414 affects the Linux kernel. The issue was in rtnetlink: the error handling logic when writing back IFLA_BRIDGE_FLAGS could use a broken pointer due to the loop modification that checked IFLA_BRIDGE_MODE length and removed a break. This caused the code path to select the last NLA, pot...

CVE-2024-36030

CVE-2024-36030 refers to a Linux kernel vulnerability in the octeontx2-af driver where a double free could occur in rvu_npc_freemem() due to an extra free of memory previously released (npc_mcam_rsrcs_deinit() freed mcam->counters.bmap). The fix, as noted in the connected documents, was to del...

CVE-2024-39480

CVE-2024-39480 is a Linux kernel vulnerability where kdb tab-complete could cause a buffer overflow by using strncpy() with the source buffer size instead of the destination. The fix replaces these strncpy() calls with boundary-checked memmove()/memcpy() operations to prevent overflow during symb...

CVE-2024-40903

The CVE-2024-40903 issue affects the Linux kernel in the USB Type-C Power Delivery path. Specifically, a use-after-free could occur in tcpm_register_source_caps when new (potentially invalid) source capabilities are advertised, existing source caps are unregistered, and an error occurs in usb_pow...

CVE-2024-40956

CVE-2024-40956 affects the Linux kernel (dmaengine: idxd). The vulnerability is a use-after-free in irq_process_work_list, caused by reusing a descriptor while it may still be referenced. The fix uses list_for_each_entry_safe() to safely iterate and delete entries during the loop; freeing the des...

CVE-2024-41040

Technical details about CVE-2024-41040 are not provided in the supplied documents. No concrete information on affected products, versions, vulnerability scope, or remediation is available here. Monitor official advisories and vendor updates for confirmed impact and fixes.

CVE-2024-42101

CVE-2024-42101 : In the Linux kernel, the drm/nouveau driver fix for a NULL pointer dereference in nouveau_connector_get_modes. The bug occurred when drm_mode_duplicate() failed, its return value was assigned to mode without a NULL check, potentially dereferencing a NULL pointer. The patch adds a...

CVE-2024-42276

CVE-2024-42276 : The connected Astra Linux security bulletin confirms a Linux kernel vulnerability in the nvme-pci path was resolved by adding a missing condition check for the existence of mapped data. Specifically, nvme_map_data() is invoked when a request has physical segments, and nvme_unmap_...

CVE-2024-47696

CVE-2024-47696 concerns the Linux kernel, specifically the RDMA/iwcm path. The root cause is a use‑after‑free during flushing of the iwcm_wq when it was created without the WQ_MEM_RECLAIM flag, which can break forward‑progress and lead to deadlock if a flush discovers the workqueue in a reclaimin...

CVE-2024-47719

CVE-2024-47719 (Linux kernel) concerns iommufd:ALIGN() overflow during iova allocation, which can corrupt the selected area range. The fix caps the automatic alignment to the huge page size to prevent fragmentation/space waste and Overflow, per the advisory. Affected component: iommufd/io_pagetab...

CVE-2024-47754

CVE-2024-47754 affects the Linux kernel media/mediatek vcodec H264 multi stateless decoder. The issue arises from a smatch static checker warning in vdec_h264_req_multi_if.c, which can trigger a kernel crash when fb is NULL. The connected documents confirm fixes in the kernel (repairs to the smat...

CVE-2024-50077

CVE-2024-50077: The Miracle/Linux kernel advisory and linked sources confirm a fix in the Linux kernel Bluetooth ISO path. The bug was caused by an early return in iso_init() when bt_debugfs failed to initialize (CONFIG_DEBUG_FS or CONFIG_DEBUG_FS_ALLOW_ALL unset). This could lead to iso_inited r...

CVE-2024-50130

Summary: CVE-2024-50130 affects the Linux kernel, specifically the netfilter/bpf path. The issue arises when a BPF link is attached to a net namespace without taking a proper reference to the net namespace, allowing a use-after-free scenario during netns teardown. The bug manifests as a KASAN sla...

CVE-2024-50180

Technical details about CVE-2024-50180 are not publicly provided in the connected documents. Please monitor official updates and vendor advisories for the affected Linux kernel components and remediation guidance.

CVE-2024-50194

The CVE-2024-50194 issue affects the Linux kernel arm64 uprobes on big-endian kernels, where in-memory instruction encoding (little-endian) was not converted to the kernel nativ e endianness before analysis and simulation. Consequences could include rejecting probeable instructions, unsafe out-of...

CVE-2024-53085

CVE-2024-53085 (Linux kernel) describes a race in TPM handling during suspend/read paths. The fix locks the TPM chip before checking chip flags in both tpm_pm_suspend() and tpm_hwrng_read(), and relocates TPM_CHIP_FLAG_SUSPENDED checking inside tpm_get_random() so the lock is considered when the ...

CVE-2024-53171

CVE-2024-53171 affects the Linux kernel ubifs authentication path. The published details describe a use-after-free in ubifs_tnc_end_commit arising when a node’s znode->parent changes due to a tree split, while the node’s znode->cparent may still point to freed memory after deletions. The is...

CVE-2024-56572

CVE-2024-56572 : In the Linux kernel, the media: platform: allegro-dvt path fixes a memory-leak in allocate_buffers_internal(). The buffer allocated in the loop may leak if not released on the exception path; the fix ensures the buffer is freed when allegro_alloc_buffer fails. This addresses a lo...

CVE-2024-56591

The MiracleLinux advisory confirms CVE-2024-56591 in the Linux kernel Bluetooth stack: the hci_conn code now uses disable_delayed_work_sync instead of cancel_delayed_work_sync to prevent new submissions while the work object is being freed. This fixes a race in work cancellation that could affect...

CVE-2024-56667

CVE-2024-56667 affects the Linux kernel DRM/i915 driver. The root cause is a NULL pointer dereference in drm_info() when the intel_context structure contains NULL, leading to a crash. The issue has been mitigated by a fix cherry-picked from commit 754302a5bc1bd8fd3b7d85c168b0a1af6d4bba4d. The vul...

CVE-2024-56754

CVE-2024-56754: Linux kernel vulnerability in crypto: caam where the pointer passed to caam_qi_shutdown() was derived from a devm_add_action_or_reset() parameter of type struct caam_drv_private *, but cast to struct device *. The connected Astra Linux advisory confirms the fix: Pass the correct p...

CVE-2024-57793

CVE-2024-57793 affects the Linux kernel in the virt: tdx-guest path, where an unrecoverable error in set_memory_decrypted() can cause decrypted memory to be leaked to the page allocator. The untrusted host in CoCo VMs can trigger set_memory_decrypted() to fail, and callers must handle such errors...

CVE-2024-57947

The CVE-2024-57947 issue in the Linux kernel concerns netfilter nf_set_pipapo: the initial map fill must initialize the buffer to all-ones only up to the size of the first field. If the first element’s bsize is smaller than m->bsize_max, one-bits leak into later rounds, causing nf_set_pipapo t...

CVE-2010-3081

CVE-2010-3081 describes a local privilege-escalation in the Linux kernel’s 64-bit compat layer due to missing sanity checks in compat_alloc_user_space, enabling a local user to abuse compat_mc_getsockopt controlling a length value. Affected: kernel 2.6.x before 2.6.36-rc4-git2 on 64-bit platforms...

CVE-2014-3610

CVE-2014-3610 is a Linux kernel KVM WRMSR emulation flaw present up to and including 3.17.2. The issue arises when guest writes a non-canonical value to a model-specific register, causing the host to crash (DoS). It is tied to wrmsr_interception (arch/x86/kvm/svm.c) and handle_wrmsr (arch/x86/kvm...

CVE-2014-7822

CVE-2014-7822 concerns the Linux kernel splice_write path, where the splice() system call does not validate the maximum size of a single file. This enables a local unprivileged user to trigger a denial of service (system crash) and potentially other effects, notably when using an ext4 filesystem....

CVE-2016-6213

CVE-2016-6213 affects the Linux kernel (fs/namespace.c): an unrestricted limit on the number of mounts in a mount namespace allows a local attacker to cause memory exhaustion and potential deadlock via MS_BIND mount calls. The vulnerability is present in kernels before 4.9 and has been referenced...

CVE-2017-16647

CVE-2017-16647 affects the Linux kernel driver: drivers/net/usb/asix_devices.c, up to version 4.13.11. The issue arises from a NULL pointer dereference when a crafted USB device is connected, enabling local attackers to trigger a denial of service (system crash) and potentially other impact. The ...

CVE-2018-10087

CVE-2018-10087 is present in the MiracleLinux kernel package listed in AXSA:2024-8953:34. The advisory shows a local DoS risk due to the kernel_wait4 function in kernel/exit.c triggering undefined behavior when using -INT_MIN on an unspecified architecture/compiler. The connected Nessus entry ide...

CVE-2022-1671

CVE-2022-1671 is a local NULL pointer dereference in the Linux kernel function rxrpc_preparse_s (net/rxrpc/server_key.c). The flaw allows a local attacker to crash the system or leak internal kernel information. Public references indicate this CVE was addressed in SUSE-SU-2022:2615-1, which fixes...

CVE-2022-3621

CVE-2022-3621 : A vulnerability in the Linux kernel component nilfs2 affects the function nilfs_bmap_lookup_at_level in fs/nilfs2/inode.c. The issue enables a NULL pointer dereference, with the document noting that the flaw can be exploited remotely. The vulnerability is caused by manipulation of...

CVE-2022-49011

CVE-2022-49011 involves a leak in the Linux kernel hwmon/coretemp code: the PCI device refcount was not decremented after use in nv1a_ram_new(), causing a refcount leak. The root cause is the PCI API’s behavior of returning a device with an incremented refcount, requiring the caller to call pci_d...

CVE-2022-49290

CVE-2022-49290 affects the Linux kernel mac80211 mesh code. A double-free could occur in ieee80211_join_mesh() when rejoining a mesh, after a prior fix in ieee80211_leave_mesh() leaked memory. The root cause was a freed old_ie during copy_mesh_setup() in join, which could lead to memory corruptio...

CVE-2022-49401

CVE-2022-49401 pertains to the Linux kernel, where a fault in mm/page_owner handling was fixed: current->comm[] is not guaranteed to be a proper string, and using strlcpy(s1, s2, l) may call strlen(s2) and trigger out-of-bounds access. The fix replaces strlcpy with strscpy() in mm/page_owner.c...

CVE-2023-52612

CVE-2023-52612 is a Linux kernel vulnerability in crypto: scomp where the req->dst buffer could overflow when copying from scomp_scratch->dst. The description specifies that the dst buffer size must be checked before copying to prevent overflow. Connected documents (Astra Linux security bul...