CVE-2024-35982

CVE-2024-35982 affects the Linux kernel’s batman-adv local TT handling. When an attached interface MTU becomes too small to transmit the local translation table, TT resizing can fail to converge, causing an endless loop. Symptoms include repeated log spam like “batman_adv: batadv0: Forced to purg...

CVE-2024-36010

CVE-2024-36010: Linux kernel igb driver fix for string truncation warnings in igb_set_fw_version. The patch expands the adapter->fw_version buffer (using kasprintf then falling back to snprintf) to avoid -Wformat-truncation warnings in igb_main.c and prevents NULL dereference by not exposing a...

CVE-2024-38540

The Linux kernel contains a vulnerability in the bnxt_re driver caused by undefined behavior in the bnxt_qplib_alloc_init_hwq function. This issue is triggered when the function is called with hwq_attr->aux_depth != 0 and hwq_attr->aux_stride == 0 , leading to an undefined call to roundup_p...

CVE-2024-39491

CVE-2024-39491: In the Linux kernel ALSA: hda cs35l56 driver, the cs_dsp instance was created in probe() but could be used after a remove/rebind cycle, as cs_dsp_remove() was only called on the unbind path and not on error paths. The fix initializes cs_dsp in probe() so failure can be detected ea...

CVE-2024-42258

CVE-2024-42258 affects the Linux kernel MM subsystem (mm: huge_memory) and is mitigated by relaxing huge page alignment on 32-bit machines when !CONFIG_64BIT is set. The fixed commit (4ef9ad19e176) corrected the previous behavior that didn’t apply cleanly to x86_32 due to CONFIG_X86_32 vs CONFIG_...

CVE-2024-43854

The CVE-2024-43854 entry relates to the Linux kernel vulnerability where the integrity buffer used for media writes was not zero-initialized. Root cause: metadata allocated by bio_integrity_prep used plain kmalloc, risking writing random kernel memory into media; PI metadata exposure is limited, ...

CVE-2024-46852

CVE-2024-46852 — Linux kernel CMA heap off-by-one fix : The issue occurred when a mapping larger than the buffer size could be created via mremap, allowing an overflow bypass in dma_buf_mmap_internal. The CMA heap fault handler incorrectly bound the fault offset by 1 when validating the end of th...

CVE-2024-46860

CVE-2024-46860 refers to a Linux kernel vulnerability in the wifi subsystem: mt76 mt7921 code path may dereference a NULL mvif->phy when mt7921_ipv6_addr_change is invoked as a notifier while disabling wifi. The description states the fix prevents access to a NULL mvif->phy, addressing a NU...

CVE-2024-47687

The CVE-2024-47687 issue affects the Linux kernel mlx5/vdpa path. It fixes an invalid MR resource destroy where error paths could release uninitialized MR resources. The patch adds a missing check in mlx5_vdpa_destroy_mr_resources() to block destroying non-initialized MR resources, addressing a N...

CVE-2024-47743

CVE-2024-47743 affects the Linux kernel in the KEYS subsystem. In find_asymmetric_key(), if id_{0,1,2} are all NULL, a WARN is emitted but a null dereference on id_2 occurs, leading to an oops. The vulnerable code is fixed by adding the missing id_2 NULL check and by moving WARN_ON() to the final...

CVE-2024-49902

CVE-2024-49902 in the Linux kernel affects the JFS dmmap path. The root cause is an out-of-bounds condition in dbSplit when dmt_leafidx exceeds the number of leaves per dmap tree; a bounds check was added in dbFindLeaf. Shaggy’s change also extends the sanity check to cover control pages in addit...

CVE-2024-49952

The CVE-2024-49952 vulnerability affects the Linux kernel nf_tables/netfilter path, caused by unsafe writes to per-CPU nf_skb_duplicated in nf_dup_ipv4()/nf_dup_ipv6() when preemption is enabled. The issue arises because __this_cpu_write() is used in preemptible code, risking corruption of the pe...

CVE-2024-50013

CVE-2024-50013 in the Linux kernel fixes a memory leak in the exfat driver. If the first directory entry in the root is not a bitmap directory entry, the buffer head ('bh') may not be released and reassigned, causing a memory leak in exfat_load_bitmap(). The patch fixes the leak by ensuring prope...

CVE-2024-50027

CVE-2024-50027 affects the Linux kernel thermal subsystem. The issue arises in thermal_zone_device_unregister() where the object tzp can be accessed after its memory is freed. The patch moves the freeing of tzp to after the removal completion, ensuring it cannot be accessed post-free. This repres...

CVE-2024-50086

CVE-2024-50086 affects the Linux kernel ksmbd (SMB2 server). A race between SMB2 session log off and session setup could lead to a use-after-free of the session object. The patch adds a session_lock when setting SMB2_SESSION_EXPIRED and switches to a reference-counted/session-scoped reference to ...

CVE-2024-53042

CVE-2024-53042 affects the Linux kernel’s ipv4/ip_tunnel code. The issue arises from paths where ip_tunnel_init_flow() is invoked without holding the RCU read lock, triggering a suspicious RCU usage warning. The fix uses l3mdev_master_upper_ifindex_by_index() to acquire the RCU read lock before c...

CVE-2024-53044

CVE-2024-53044 affects the Linux kernel net/sched component (sch_api) and is tied to the tcf_block_get_ext() path. The root cause is an xa_insert() error handling route, which can mis-handle a failure when the same block index is requested for ingress and egress, leading to a busy block condition...

CVE-2024-53210

CVE-2024-53210 affects the Linux kernel (s390/iucv) where passing MSG_PEEK to skb_recv_datagram() increments skb->users refcount and iucv_sock_recvmsg() does not decrement it, causing a skb memory leak during skb_queue_purge() and a WARN_ON during socket destruction. The fix is to decrement sk...

CVE-2024-56678

The Linux kernel contains a vulnerability in powerpc/mm/fault where the copy_from_kernel_nofault() function can trigger page faults when reading unmapped kfence objects from /proc/kzone . This occurs because the function incorrectly relies on kfence to handle faults instead of using the fixup tab...

CVE-2024-57911

In CVE-2024-57911, a Linux kernel vulnerability in iio: dummy caused potential information leakage via a triggered buffer. The data buffer allocated with kmalloc() was not initialized for inactive channels, risking uninitialized data being pushed to userspace. The root cause is that iio_for_each_...

CVE-2024-57996

The CVE-2024-57996 issue affects the Linux kernel’s net_sched sch_sfq code, where a limit of 1 packet is mishandled, causing an array-index-out-of-bounds. The vulnerability can lead to a UBSAN crash in sfq_link/sfq_dequeue path when qlen handling interacts with SFQ limits, notably under scenarios...

CVE-2024-58017

CVE-2024-58017 affects the Linux kernel printk LOG_BUF_LEN_MAX. The issue arises when performing the 1 <

CVE-2025-22022

CVE-2025-22022 concerns the Linux kernel USB xHCI driver, where NEC isochronous endpoints with NEC uPD720200 controllers could trigger IOMMU faults due to mis-handling of missed service errors. The description notes a faulty behavior involving transfer descriptors around isochronous rings and a c...

CVE-2025-22097

The Linux kernel contains a vulnerability in the drm/vkms component where a use after free and double free can occur during driver initialization. If the driver fails to initialize, the vkms_exit() function might access or double free an uninitialized or already freed default_config pointer. The ...

CVE-2025-23136

CVE-2025-23136 (Linux kernel, thermal/int340x): The issue arises when an ACPI companion fwnode is missing and the kernel may dereference a NULL adev in int3402_thermal_probe() (and similarly in int3400_thermal_probe()). The fix adds a NULL check for adev and returns -ENODEV when it is not set, pr...

CVE-2025-37752

CVE-2025-37752 is a Linux kernel vulnerability affecting the scheduler, specifically net_sched: sch_sfq. The root cause is that limit validation could be bypassed if the limit was indirectly updated as other parameters changed. The fix moves the limit validation to the end of the configuration up...

CVE-2016-4485

The CVE-2016-4485 issue affects the Linux kernel (net/llc/af_llc.c): the llc_cmsg_rcv path does not initialize a data structure, enabling a local attacker to read kernel stack memory and obtain sensitive information. Public references in connected documents indicate this vulnerability existed in ...

CVE-2016-9756

CVE-2016-9756 affects Linux kernel’s x86 KVM emulation (arch/x86/kvm/emulate.c). The root cause is improper initialization of Code Segment (CS) in certain error paths, enabling a local attacker to read sensitive kernel stack memory via a crafted user-space program. A fix was released in Linux ker...

CVE-2019-17052

CVE-2019-17052 affects Linux kernel 3.16–5.3.2 where several AF_NET_RAW-bound protocols (AX.25) do not enforce CAP_NET_RAW in socket creation, allowing unprivileged users to create raw sockets. Related entries mention additional interfaces (IEEE802.154, Appletalk, ISDN, NFC) with the same CAP_NET...

CVE-2019-25045

CVE-2019-25045 is a Linux kernel use-after-free in the XFRM subsystem (xfrm_state_fini panic) reported for kernels before 5.0.19. Publicly documented references from EulerOS and Unity Linux advisories confirm the issue and link the fix to kernel 5.0.19 (and related upstream commit). The impact is...

CVE-2021-47191

CVE-2021-47191 affects the Linux kernel’s SCSI debug path (scsi_debug) and fixes an out-of-bounds read in resp_readcap16 caused by treating alloc_len as a signed int, which could lead to an OOB in sg_copy_buffer when handling large allocation lengths. The root cause is the incorrect type for allo...

CVE-2021-47289

CVE-2021-47289 in the Linux kernel fixes a NULL pointer dereference in ACPI: utils when calling acpi_dev_put() on a possibly NULL pointer. The patch makes acpi_dev_put() silently accept NULL (avoiding downcalls with a NULL offset). The public advisory notes the change as part of resolving the ACP...

CVE-2022-2380

CVE-2022-2380 concerns the Silicon Motion SM712 framebuffer driver in the Linux kernel. The issue is an out-of-bounds memory access in drivers/video/fbdev/sm712fb.c:smtcfb_read(), which could allow a locally authenticated attacker to crash the kernel. The description and linked advisories consist...

CVE-2022-3202

CVE-2022-3202 involves a NULL pointer dereference in diFree() within fs/jfs/inode.c of the Linux kernel’s Journaled File System (JFS). The underlying cause is a NULL pointer dereference, which could allow a local attacker to crash the system or leak kernel internal information. The CVE is associa...

CVE-2022-44034

The CVE-2022-44034 issue affects the Linux kernel (through 6.0.6) in the PCMCIA driver path, specifically drivers/char/pcmcia/scr24x_cs.c, where a race between scr24x_open() and scr24x_remove() can cause a use-after-free if a physically proximate attacker removes a PCMCIA device while open() is i...

CVE-2022-48912

CVE-2022-48912 concerns a Linux kernel use-after-free in netfilter: the fix is to avoid dereferencing new_hooks after nf_hook_mutex is released in __ nf_register_net_hook, preventing a KASAN read after free. The Astra Linux advisory reproduces the exact description, including the kasan report: Re...

CVE-2022-48942

In CVE-2022-48942, the Linux kernel hwmon subsystem can crash if a sensor’s registration with a thermal zone fails; specifically devm_thermal_zone_of_sensor_register() may return -ENODEV, potentially leading to a NULL pointer dereference in thermal_zone_device_update paths. The described call seq...

CVE-2022-48969

CVE-2022-48969 applies to the Linux kernel Xen netfront driver. The issue arises during live migration: a NAPI polling path is created for a sr-ing, but the old NAPI is not deleted promptly when the source string is nulled and the new one is set on the target host. This creates a tiny window wher...

CVE-2022-49011

CVE-2022-49011 involves a leak in the Linux kernel hwmon/coretemp code: the PCI device refcount was not decremented after use in nv1a_ram_new(), causing a refcount leak. The root cause is the PCI API’s behavior of returning a device with an incremented refcount, requiring the caller to call pci_d...

CVE-2022-49264

CVE-2022-49264 (Linux kernel) : The issue fixes how argv is passed to execve when argc is 0. The kernel now forces a single empty string into argv and sets argc to 1, accounting for extra stack space in bprm_stack_limits and emitting a WARN message to notify userspace: “process './argc0' launched...

CVE-2022-49534

CVE-2022-49534 in the Linux kernel concerns a memory leak in the lpfc driver when NPIV ports send PLOGI_RJT. The description states a leak could originate from allocations in lpfc_ignore_els_cmpl() and lpfc_els_rsp_reject(), tied to login_mbox context and service parameter buffers. The remedy is ...

CVE-2022-49666

CVE-2022-49666 concerns the Linux kernel, specifically the powerpc/memhotplug path. The issue arises from an add_pages override for PPC, where the kernel began validating addresses against high_memory after commit ffa0b64e3be5 (powerpc: Fix virt_addr_valid() for 64-bit). This leads to a BUG_ON in...

CVE-2023-30772

CVE-2023-30772 is a Linux kernel race condition leading to a use-after-free in drivers/power/supply/da9150-charger.c when a nearby attacker unplugs a device. The issue affects kernels prior to 6.2.9; security advisories from Astra Linux and Debian Mageia indicate this vulnerability, with fixes co...

CVE-2023-52658

CVE-2023-52658 is referenced in MiracleLinux advisory AXSA:2024-8938:33 for MiracleLinux 9. The advisory lists a Linux kernel issue: “net/mlx5: Block entering switchdev mode with ns inconsistency” that was reverted in the upstream commit 662404b24a4c4d839839ed25e3097571f5938b9b, due to instabilit...

CVE-2024-0564

CVE-2024-0564 concerns the Linux kernel memory deduplication mechanism (KSM) where the max page sharing setting can enable a side channel leakage of a victim’s page when an attacker and victim share a host. The connected OSV entries confirm patches in Rootio-Linux packages for Debian/Ubuntu (Root...

CVE-2024-26945

The Linux kernel contains a vulnerability in the crypto: iaa driver. Specifically, if nr_cpus

CVE-2024-35839

Technical details about CVE-2024-35839 are not publicly provided in the supplied documents; monitor for future disclosures and updates.

CVE-2024-36881

The Linux kernel contains a vulnerability in the mm/userfaultfd component where write-protect (wr-protect) bits were not properly reset when a userfaultfd was closed via the close() system call. While the unregistration process correctly handled explicit UFFDIO_UNREGISTER ioctls, the omission in ...

CVE-2024-39506

CVE-2024-39506 (Linux kernel) : The issue arises in the liquidio driver path within lio_vf_rep_copy_packet(), where pg_info->page is compared to NULL but then unconditionally passed to skb_add_rx_frag(), risking a NULL pointer dereference. The problem trace shows the path from octeon_droq_proc...

CVE-2024-40910

CVE-2024-40910 affects the Linux kernel ax25 subsystem. The vulnerability stems from a refcount imbalance: when releasing a socket in ax25_release(), the code decreases the refcount on the associated ax.25 device via netdev_put(), but the inbound connection path does not call netdev_hold() for ne...