CVE-2024-40903

The CVE-2024-40903 issue affects the Linux kernel in the USB Type-C Power Delivery path. Specifically, a use-after-free could occur in tcpm_register_source_caps when new (potentially invalid) source capabilities are advertised, existing source caps are unregistered, and an error occurs in usb_pow...

CVE-2024-40913

Technical details for CVE-2024-40913 are not provided in the supplied documents. Monitor for updates from vendors/advisories.

CVE-2024-42312

CVE-2024-42312 relates to the Linux kernel vulnerability where sysctl did not consistently initialize i_uid/i_gid. The resolution initializes i_uid/i_gid inside the sysfs core so that set_ownership() can safely skip setting them. The change is documented as part of commit 5ec27ec735ba, which fixe...

CVE-2024-44984

Summary (CVE-2024-44984) : Linux kernel bnxt_en driver fix for double DMA unmapping in XDP_REDIRECT. The patch removes the dma_unmap_page_attrs() call in the XDP path, allowing the page pool to handle DMA mapping and avoiding a warning in iommu_dma_unmap_page. Affected component and root cause: b...

CVE-2024-46759

CVE-2024-46759 : Linux kernel hwmon: adc128d818 underflow when writing limit attributes. The issue stemmed from DIV_ROUND_CLOSEST() after kstrtol() allowing large negative values (e.g., -9223372036854775808) to underflow. The patch reorders clamp_val() and DIV_ROUND_CLOSEST() to fix the underflow...

CVE-2024-46807

CVE-2024-46807 affects the Linux kernel’s DRM/amdgpu path. The root cause is missing validation of the tbo resource pointer, which could dereference a NULL pointer. The mitigation is a patch that validates the tbo resource pointer and skips when NULL, preventing a NULL-deref that could crash the ...

CVE-2024-46821

CVE-2024-46821 (Linux kernel, drm/amd/pm) affects the Linux kernel’s AMD power management code where a negative clk_index/clk_idex was used as an index into pptable->DpmDescriptor, leading to a negative array index read. The issue is resolved by a fix that prevents using negative values as an ...

CVE-2024-46866

The CVE-2024-46866 issue in the Linux kernel affects the drm/xe client, specifically the bo_meminfo path. Root cause: bo_meminfo() inspects bo state (tt and ttm resource) without consistently holding the bo lock, allowing state changes that can cause NPD or UAF. Mitigation implemented by grabbing...

CVE-2024-47705

The CVE CVE-2024-47705 (block: fix potential invalid pointer dereference in blk_add_partition) is resolved in the Linux kernel. The issue occurred when blk_add_partition() changed error handling from a single IS_ERR(part) test to handle -ENXIO separately, which unintentionally allowed a path wher...

CVE-2024-47715

Summary: CVE-2024-47715 affects the Linux kernel’s wifi mt76 driver for MT7915 on MT7986. The issue stemmed from mt7915_band_config() setting band_idx to 1 on the main phy for MT7986 with MT7975_ONE_ADIE or MT7976_ONE_ADIE, which caused a dereference of the phys array via wcid->phy_idx in mt76...

CVE-2024-49924

CVE-2024-49924 affects the Linux kernel fbdev pxafb path. The vulnerability is a use-after-free caused by scheduling work (pxafb_task) in pxafb_init_fbinfo/pxafb_probe and freeing fbi->fb during pxafb_remove/unregister_framebuffer without canceling that work. The follow sequence shows the UAF ...

CVE-2024-50202

CVE-2024-50202 (nilfs2) is a Linux kernel issue where nilfs_find_entry() ignored errors loading a directory folio/page, allowing corrupted images with large i_size to trigger repeated error messages and a task hang in vcs_open(). The root cause is error suppression when nilfs_get_folio() fails; t...

CVE-2024-53079

CVE-2024-53079 affects the Linux kernel’s memory management (mm/thp) with a fix for the deferred split unqueue naming and locking. The description details races in THP deferred split queues under load, causing list_del corruptions and “Bad page state” issues, linked to changes around 6.8 (mTHP), ...

CVE-2024-53129

CVE-2024-53129 affects the Linux kernel DRM Rockchip VOP as described. The root cause was a NULL-dereference in vop_plane_atomic_async_check() where 'state' could be dereferenced before a NULL check; patch fixes crtc_state validation (rockchip_drm_vop.c:1096). Connected advisories confirm the iss...

CVE-2024-56678

There are no additional technical details about CVE-2024-56678 in the connected documents beyond what’s in the initial description. Public details in the provided sources are limited; monitor for updates.

CVE-2024-56693

The connected material describes CVE-2024-56693, a Linux kernel issue in the brd (RAM block device) and brd_init path that can lead to a use-after-free (UAF) when modprobe brd triggers error paths. Root cause: loop_init() in the kernel’s loop device code adds disks only after successful blkdev re...

CVE-2024-56777

CVE-2024-56777 affects the Linux kernel DRM STI path. The vulnerability arises because the return value of drm_atomic_get_crtc_state() is not checked before dereferencing the potential error pointer crtc_state in sti_gdp_atomic_check, which can lead to an invalid memory access if the call fails. ...

CVE-2025-21681

Open vSwitch issue CVE-2025-21681 in the Linux kernel caused a lockup in skb_tx_hash when a netdev is unregistering with carrier reported as ON. The root cause was a loop in skb_tx_hash that could spin when dev->real_num_tx_queues goes to zero, especially for devices that report carrier state ...

CVE-2025-21917

Summary of CVE-2025-21917 (Renesas USBHS issue) : In the Linux kernel, the USB Renesas USBHS driver (usb: renesas_usbhs) could crash when performing continuous unbind/bind operations on USB drivers for the Renesas RZ/G2L SoC. The root cause is related to the usbhsc_notify_hotplug() path and invol...

CVE-2025-22005

The CVE-2025-22005 issue, fixed in the Linux kernel, is a memleak in nhc_pcpu_rth_output within fib_check_nh_v6_gw(). The root cause was that fib_nh_common_init() was moved before alloc_percpu_gfp() and cleanup for nhc_pcpu_rth_output was not added on failure. The fix adds cleanup by calling fib_...

CVE-2025-37758

CVE-2025-37758 affects the Linux kernel’s ata_pxa driver. The root cause was a potential NULL pointer dereference in pxa_ata_probe() when devm_ioremap() returns NULL. The fix adds a NULL check after devm_ioremap() to prevent dereferencing NULL.

CVE-2026-53366

CVE-2026-53366 affects the Linux kernel IPv4 path. In __ip_append_data(), the paged-allocation branch miscomputed alloclen/pagedlen due to fraggap carried from the previous skb, causing the linear area to be undersized. The patch corrects this by adding the fraggap to alloclen and subtracting it ...

CVE-2009-2848

CVE-2009-2848 is confirmed in connected material as applicable to MiracleLinux kernel package 2.6.18-128.10AXS3, aligning with the Linux kernel vulnerability where execve does not properly clear current->clear_child_tid during thread creation/exit. This misbehavior can enable local users to ca...

CVE-2013-2547

CVE-2013-2547 concerns the Linux kernel: the crypto_report_one() path in crypto_user.c does not fully initialize certain kernel structures when copying data to userspace, risking leakage of kernel heap memory. The vulnerability requires CAP_NET_ADMIN in the base description, enabling a local atta...

CVE-2014-7822

CVE-2014-7822 concerns the Linux kernel splice_write path, where the splice() system call does not validate the maximum size of a single file. This enables a local unprivileged user to trigger a denial of service (system crash) and potentially other effects, notably when using an ext4 filesystem....

CVE-2015-8816

CVE-2015-8816 affects the Linux kernel prior to 4.3.5, where hub_activate in drivers/usb/core/hub.c mishandles hub-interface data. Physically proximate attackers can unplug a USB hub to trigger invalid memory access and a system crash (DoS); impact may be unspecified otherwise. A fixed version ex...

CVE-2017-14156

Summary: CVE-2017-14156 affects the Linux kernel up to 4.12.10. The atyfb_ioctl function in drivers/video/fbdev/aty/atyfb_base.c does not initialize a certain data structure, allowing local attackers to read padding bytes from kernel stack memory and disclose sensitive information. Impact: inform...

CVE-2017-16994

The CVE-2017-16994 vulnerability affects the Linux kernel’s walk_hugetlb_range function in mm/pagewalk.c, where holes in hugetlb ranges are mishandled. This allows a local attacker to obtain sensitive information from uninitialized kernel memory via a crafted mincore() call. Public sources attrib...

CVE-2019-17052

CVE-2019-17052 affects Linux kernel 3.16–5.3.2 where several AF_NET_RAW-bound protocols (AX.25) do not enforce CAP_NET_RAW in socket creation, allowing unprivileged users to create raw sockets. Related entries mention additional interfaces (IEEE802.154, Appletalk, ISDN, NFC) with the same CAP_NET...

CVE-2021-38203

CVE-2021-38203 affects the btrfs component in the Linux kernel, with the issue present in versions before 5.13.4. The root cause is a race condition during allocations of new system chunks when space is scarce in space_info, which can lead to a denial-of-service (deadlock) for local attackers. Pu...

CVE-2022-2991

CVE-2022-2991 (Linux kernel LightNVM) Affected software: Linux kernel, LightNVM subsystem. Vulnerability: heap-based buffer overflow caused by insufficient validation of the length of user-supplied data before copying to a fixed-size heap buffer. Impact: local privilege escalation and arbitrary c...

CVE-2022-48672

CVE-2022-48672 is a Linux kernel issue in the device-tree flattening path: in unflatten_dt_nodes(), an off-by-one error can overflow the nps[] buffer due to an unfixed depth check in the loop. The problem was fixed by commit 78c44d910d3e, in which the depth handling during unflattening was correc...

CVE-2022-48969

CVE-2022-48969 applies to the Linux kernel Xen netfront driver. The issue arises during live migration: a NAPI polling path is created for a sr-ing, but the old NAPI is not deleted promptly when the source string is nulled and the new one is set on the target host. This creates a tiny window wher...

CVE-2022-49011

CVE-2022-49011 involves a leak in the Linux kernel hwmon/coretemp code: the PCI device refcount was not decremented after use in nv1a_ram_new(), causing a refcount leak. The root cause is the PCI API’s behavior of returning a device with an incremented refcount, requiring the caller to call pci_d...

CVE-2023-22995

CVE-2023-22995 affects the Linux kernel’s DesignWare USB3 for Qualcomm SoCs driver (dwc3_qcom_acpi_register_core). The connected ENISA/OSV advisory notes an error-path handling defect where platform_device_put and kfree calls are omitted, leaving cleanup incomplete during device registration. Thi...

CVE-2023-30772

CVE-2023-30772 is a Linux kernel race condition leading to a use-after-free in drivers/power/supply/da9150-charger.c when a nearby attacker unplugs a device. The issue affects kernels prior to 6.2.9; security advisories from Astra Linux and Debian Mageia indicate this vulnerability, with fixes co...

CVE-2024-26668

CVE-2024-26668 – technical insight The Linux kernel netfilter nft_limit: reject configurations that cause integer overflow (CVE-2024-26668) fixes an overflow when the internal token counter wraps on extremely large requests (notably at very high throughput, e.g., ~17 GB/s). The vulnerability aris...

CVE-2024-35839

Technical details about CVE-2024-35839 are not publicly provided in the supplied documents; monitor for future disclosures and updates.

CVE-2024-35892

CVE-2024-35892 stems from a Linux kernel net/sched issue where qdisc_tree_reduce_backlog() was called with the qdisc lock held while RTNL was not held, triggering a lockdep splat due to unsafe RCU usage. The fix switches from qdisc_lookup() to qdisc_lookup_rcu() to safely dereference qdisc data u...

CVE-2024-36967

CVE-2024-36967 - Normal details available The Astra Linux bulletin and IBM/Kern sources confirm a Linux kernel vulnerability CVE-2024-36967 related to a memory leak in KEYS trusted: tpm2_key_encode() where the 'scratch' buffer was not freed. The bug is resolved by freeing scratch on both success ...

CVE-2024-38553

CVE-2024-38553 affects the Linux kernel net/fec driver by removing the .ndo_poll_controller implementation to avoid deadlocks. The root cause is that netpoll runs in an atomic context and disable_irq() (which may sleep) is invoked via the .ndo_poll_controller interface in sungem; fec_poll_control...

CVE-2024-40973

CVE-2024-40973 affects the Linux kernel media/mtk-vcodec SCP path. The root cause is a missing check of the return value from devm_kzalloc(), leading to a potential NULL pointer dereference. The issue is described across multiple sources (e.g., Astra Linux reports in linux-5.15/6.1; Debian adviso...

CVE-2024-41057

CVE-2024-41057: Linux kernel fix for slab-use-after-free in cachefiles_withdraw_cookie() during FSCACHE withdrawal. The issue could occur when a cache volume is freed while cookie lookups are in flight, leading to UAF on cachefilesVolume. The recommended fix/process order is to call fscache_withd...

CVE-2024-42258

CVE-2024-42258 affects the Linux kernel MM subsystem (mm: huge_memory) and is mitigated by relaxing huge page alignment on 32-bit machines when !CONFIG_64BIT is set. The fixed commit (4ef9ad19e176) corrected the previous behavior that didn’t apply cleanly to x86_32 due to CONFIG_X86_32 vs CONFIG_...

CVE-2024-47689

CVE-2024-47689 affects the Linux kernel (F2FS). The vulnerability stems from f2fs_handle_critical_error() setting SB_RDONLY instead of using the filesystem’s unmount/remount protection, causing a race with freeze/thaw. Root cause: f2fs sets SB_RDONLY in an internal path; remediation proposed/impl...

CVE-2024-47754

CVE-2024-47754 affects the Linux kernel media/mediatek vcodec H264 multi stateless decoder. The issue arises from a smatch static checker warning in vdec_h264_req_multi_if.c, which can trigger a kernel crash when fb is NULL. The connected documents confirm fixes in the kernel (repairs to the smat...

CVE-2024-49885

CVE-2024-49885: Linux kernel mm/slub kmalloc redzone issue resolved. Root cause: orig_size handling treated wasted space as redzone and, with init_on_free=1, clears full object->size including metadata, causing check_object() to misclassify the object as redzone. Fix: clear the used area using...

CVE-2024-50013

CVE-2024-50013 in the Linux kernel fixes a memory leak in the exfat driver. If the first directory entry in the root is not a bitmap directory entry, the buffer head ('bh') may not be released and reassigned, causing a memory leak in exfat_load_bitmap(). The patch fixes the leak by ensuring prope...

CVE-2024-50180

Technical details about CVE-2024-50180 are not publicly provided in the connected documents. Please monitor official updates and vendor advisories for the affected Linux kernel components and remediation guidance.

CVE-2024-50232

CVE-2024-50232 affects the Linux kernel in the IIO ADC driver for ad7124. The root cause is a potential division by zero in ad7124_set_channel_odr() when ad7124_write_raw() passes a zero value to DIV_ROUND_CLOSEST(), invoked via iio_write_channel_raw() -> iio_write_channel_attribute() -> ii...