CVE-2022-48912

CVE-2022-48912 concerns a Linux kernel use-after-free in netfilter: the fix is to avoid dereferencing new_hooks after nf_hook_mutex is released in __ nf_register_net_hook, preventing a KASAN read after free. The Astra Linux advisory reproduces the exact description, including the kasan report: Re...

CVE-2022-48942

In CVE-2022-48942, the Linux kernel hwmon subsystem can crash if a sensor’s registration with a thermal zone fails; specifically devm_thermal_zone_of_sensor_register() may return -ENODEV, potentially leading to a NULL pointer dereference in thermal_zone_device_update paths. The described call seq...

CVE-2022-49321

CVE-2022-49321 affects the Linux kernel’s xprtrdma RPC path. When bc_serv is NULL, a RDMA server fault reply can be misinterpreted as a bcall, causing rpcrdma_bc_receive_call to encounter a NULL pointer and trigger a kernel crash (high availability impact). The provided documents confirm the root...

CVE-2022-49603

CVE-2022-49603 concerns the Linux kernel where data races around sysctl_ip_fwd_update_priority could occur while readers access it concurrently. The fix adds READ_ONCE() to readers to prevent concurrent modification. Connected advisories (EulerOS/OpenVAS/Nessus) explicitly reference this vulnerab...

CVE-2023-2860

CVE-2023-2860 is an out-of-bounds read vulnerability in the Linux kernel’s SR-IPv6 implementation, specifically in the processing of seg6 attributes. It stems from improper validation of user-supplied data, allowing a privileged local user to read beyond the end of an allocated buffer and disclos...

CVE-2023-6560

CVE-2023-6560 corresponds to an out-of-bounds memory access in the Linux kernel io_uring subsystem (SQ/CQ rings) that can allow a local user to crash the system. Affected component is the io_uring handling code, specifically the __io_uaddr_map() path. The vulnerability is local in scope with the ...

CVE-2024-26757

CVE-2024-26757 is a Linux kernel vulnerability affecting the md/mdadm dm-raid path. The root cause: read-only array handling allowed a race between read/write state transitions and sync-thread registration, leading to a potential hang in the recovery/sync flow when the array is toggled between re...

CVE-2024-26800

CVE-2024-26800 affects the Linux kernel TLS backlog decryption path. The issue is a use-after-free when crypto_aead_decrypt returns -EBUSY and tls_do_decryption waits for async decryptions; if any completes with an error, tls_do_decryption returns -EBADMSG and tls_decrypt_sg releases memory that ...

CVE-2024-26825

CVE-2024-26825 refers to a Linux kernel vulnerability where the rx_data_reassembly skb could leak if the NCI device was deallocated before fragmentation processing completed. The root cause is that rx_data_reassembly skb is bound to the NCI device and, if the device is freed early, the skb could ...

CVE-2024-35795

CVE-2024-35795 : In the Linux kernel, a deadlock was fixed in the AMDGPU driver when reading the MQD via debugfs. The issue arose from a circular locking dependency between mmap_lock and the reservation_ww_class_* locks during a read path implemented in amdgpu_debugfs_mqd_read. The reverse-lock c...

CVE-2024-36979

CVE-2024-36979 is a Linux kernel vulnerability in the bridge mst path (net/bridge/br_mst.c/br_private.h) where a vlan could be freed while walking a list, causing a use-after-free via RCU. The issue arose from suspicious RCU usage and a path involving br_forward_delay_timer and br_mst_set_state. ...

CVE-2024-38540

CVE-2024-38540 concerns the Linux kernel bnxt_re driver. The vulnerability is due to undefined behavior triggered when bnxt_qplib_alloc_init_hwq is called with hwq_attr->aux_depth != 0 and hwq_attr->aux_stride == 0, which causes roundup_pow_of_two(hwq_attr->aux_stride) to run with a 0 va...

CVE-2024-40956

CVE-2024-40956 affects the Linux kernel (dmaengine: idxd). The vulnerability is a use-after-free in irq_process_work_list, caused by reusing a descriptor while it may still be referenced. The fix uses list_for_each_entry_safe() to safely iterate and delete entries during the loop; freeing the des...

CVE-2024-42122

CVE-2024-42122 concerns the Linux kernel’s drm/amd/display where a NULL pointer could be produced by kzalloc and used without checking. The fix adds a NULL pointer check before using the allocated memory. Affected subsystem: AMD display kernel code; root cause: missing validation of kzalloc retur...

CVE-2024-43821

Technical details beyond the description of CVE-2024-43821 are not provided in the supplied documents; no explicit affected products/versions/fixes are listed here. Monitor vendor advisories for updates.

CVE-2024-43834

CVE-2024-43834 (Linux kernel) : The issue is a race/invalid wait-context in page_pool destruction when a driver uses XDP with a page pool. Specifically, page_pool_destroy() decreases the pool’s refcount and calls mem_allocator_disconnect(), which may acquire mutex_lock(). If the driver has regist...

CVE-2024-45022

CVE-2024-45022 affects Linux kernel mm/vmalloc: a high-order allocation fallback to order-0 in vm_area_alloc_pages() could lead __vmap_pages_range_noflush() to map pages with different shifts, risking memory corruption. The documentation states the fix is to remove the fallback code, so that if a...

CVE-2024-46795

CVE-2024-46795 affects the Linux kernel when using ksmbd over a reused connection with binding sessions. A null pointer dereference can occur in the SMB 3.1 encryption key path: a reused binding session may leave Preauth_HashValue NULL, which is used as input to crypto_shash_update() during key g...

CVE-2024-46852

CVE-2024-46852 — Linux kernel CMA heap off-by-one fix : The issue occurred when a mapping larger than the buffer size could be created via mremap, allowing an overflow bypass in dma_buf_mmap_internal. The CMA heap fault handler incorrectly bound the fault offset by 1 when validating the end of th...

CVE-2024-49966

CVE-2024-49966 in the Linux kernel (OCFS2) fixes a bug where an active delayed work could remain when freeing oinfo after an error in global quota read, triggering a warning. The patch cancels the dqi_sync_work before freeing oinfo and changes the read_file_info error path to return a status inst...

CVE-2024-50002

CVE-2024-50002 affects the Linux kernel’s static_call subsystem. The root cause is a union in struct static_call_key where key::mods and key::sites share a pointer and are distinguished by a bit, but static_call_del_module() assumed a valid static_call_mod pointer and dereferenced it when an allo...

CVE-2024-50075

CVE-2024-50075 is an issue in the Linux kernel specifically for Tegra XUSB (xhci) where, when USB virtualization is enabled, USB2 ports shared across VFs can cause an invalid memory access due to using the total USB2 phy number to check PORTSC values. The vulnerability stems from the port-numberi...

CVE-2024-50267

CVE-2024-50267 — Linux kernel (USB: serial: io_edgeport) A use-after-free in a debug printk after usb_free_urb(urb) was fixed by storing the urb->dev pointer at the start of the function to avoid referencing a freed urb. The vulnerability affects the Linux kernel’s USB serial edgeport driver a...

CVE-2024-50275

The CVE (CVE-2024-50275) affects the Linux kernel on arm64 with SVE traps. A race allows stale FPSIMD/SVE state to be reused across preemption, leading to SVE traps while TIF_SVE is set and potentially incorrect live state handling. The fix detaches from the saved CPU state when not live by calli...

CVE-2024-53084

CVE-2024-53084 affects the Linux kernel’s DRM/Imagination driver path for PVR, where a resource cleanup reference loop between PVR VM Context and VM Mappings could leak VM resources. The official fix breaks the loop by freeing outstanding VM mappings before destroying the PVR Context associated w...

CVE-2024-53090

CVE-2024-53090 : In the Linux kernel, the afs lock recursion issue occurred when afs_wake_up_async_call() could incur lock recursion if called from AF_RXRPC while holding the notify_lock and trying to pass an afs_call ref to a work queue. If the afs_call was already queued, an extraneous ref coul...

CVE-2024-56772

The CVE-2024-56772 entry describes a use-after-free in Linux kernel kunit: in kunit_debugfs_create_suite(), if alloc_string_stream() fails during kunit_suite_for_each_test_case(), suite->log has already been assigned and the error path frees the stream but does not NULL the pointer. This leads...

CVE-2024-57922

The CVE-2024-57922 entry relates to the Linux kernel drm/amd/display code, where wrappers for dcn_bw_ceil2() and dcn_bw_floor2() gained a check for non-zero granularity to prevent asserts/divide-by-zero. The fix is reflected in multiple advisories: Debian LTS DLA-4076-1 and DSA-5860-1 note update...

CVE-2024-57924

CVE-2024-57924 affects the Linux kernel and is described in multiple sources as a fix to “fs: relax assertions on failure to encode file handles.” The issue concerns exportfs_encode_fh and related paths used by filesystem code to encode file handles, with legacy users such as nfsd and name_to_han...

CVE-2024-57996

The CVE-2024-57996 issue affects the Linux kernel’s net_sched sch_sfq code, where a limit of 1 packet is mishandled, causing an array-index-out-of-bounds. The vulnerability can lead to a UBSAN crash in sfq_link/sfq_dequeue path when qlen handling interacts with SFQ limits, notably under scenarios...

CVE-2025-21722

CVE-2025-21722 concerns the NILFS2 filesystem in the Linux kernel. When filesystem corruption triggers a read-only fallback, buffer state inconsistencies can occur: one path is when mark_buffer_dirty() marks data/metadata dirty but the buffer isn’t uptodate, and another path is nilfs_btree_propag...

CVE-2025-21861

CVE-2025-21861 : Technical details (affected product/component, root cause, impact, and fixes) are not provided in the supplied Connected documents; monitor for updates from vendors/security advisories.

CVE-2025-21914

CVE-2025-21914 affects the Linux kernel Slimbus path (slimbus) where, in delayed interrupt scenarios, slim_do_transfer() returns a timeout but fails to free the associated transaction ID (TID). This leads to invalid memory access inside qcom_slim_ngd_rx_msgq_cb(), potentially causing a kernel pan...

CVE-2025-22097

CVE-2025-22097 affects the Linux kernel vkms (drm/vkms). The vulnerability is a use-after-free and potential double-free of the default_config pointer when driver init fails, because vkms_exit() may access an uninitialized/freed default_config. The fix: initialize default_config only if the drive...

CVE-2025-22105

CVE-2025-22105 affects the Linux kernel bonding driver. When an XDP program is attached to a bonded interface, changing the bond mode may trigger a warning inside bond_xdp_set. The fix adds a check for the presence of an XDP program when setting bond mode, since some modes (e.g., balance-rr with ...

CVE-2014-7842

The CVE-2014-7842 issue affects the Linux kernel’s arch/x86/kvm/x86.c; a race condition prior to 3.17.4 can allow a guest OS user to trigger an MMIO/PIO‑driven emulation error report, causing a guest crash (denial of service). Public notes in Nessus advisories reference CVE-2010-5313 as related. ...

CVE-2015-7550

CVE-2015-7550 concerns the Linux kernel’s keyctl_read_key in security/keys/keyctl.c, where a missing semaphore around a race between keyctl_revoke and keyctl_read can allow a local user to trigger a NULL pointer dereference and system crash (DoS) and possibly other impact. The vulnerability exist...

CVE-2016-6213

CVE-2016-6213 affects the Linux kernel (fs/namespace.c): an unrestricted limit on the number of mounts in a mount namespace allows a local attacker to cause memory exhaustion and potential deadlock via MS_BIND mount calls. The vulnerability is present in kernels before 4.9 and has been referenced...

CVE-2018-10087

CVE-2018-10087 is present in the MiracleLinux kernel package listed in AXSA:2024-8953:34. The advisory shows a local DoS risk due to the kernel_wait4 function in kernel/exit.c triggering undefined behavior when using -INT_MIN on an unspecified architecture/compiler. The connected Nessus entry ide...

CVE-2019-17054

CVE-2019-17054 affects the Linux kernel (AF_APPLETALK) where atalk_create does not enforce CAP_NET_RAW through 5.3.2, allowing unprivileged users to create raw sockets. Exploitation status and exact fixes are not provided in the supplied documents; no mitigation details are described here.

CVE-2019-19043

The CVE-2019-19043 vulnerability affects the Linux kernel’s i40e driver path: memory leak in i40e_setup_macvlans() within i40e_main.c up through kernel 5.3.11. Triggering i40e_setup_channel() failures can cause memory consumption leading to a denial of service. Connected advisories (Unity Linux U...

CVE-2021-47191

CVE-2021-47191 affects the Linux kernel’s SCSI debug path (scsi_debug) and fixes an out-of-bounds read in resp_readcap16 caused by treating alloc_len as a signed int, which could lead to an OOB in sg_copy_buffer when handling large allocation lengths. The root cause is the incorrect type for allo...

CVE-2021-47592

CVE-2021-47592 affects the Linux kernel stmmac driver and its VLAN priority RX steering path. The issue manifested as a NULL pointer dereference when deleting a tc flower filter for VLAN priority after a previous mis-implemented tc_del_vlan_flow() used flow_cls_offload_flow_rule() (invalid for tc...

CVE-2022-1204

CVE-2022-1204 is a use-after-free flaw in the Linux kernel’s Amateur Radio AX.25 protocol handling that can allow a local attacker to crash the system. Connected advisories confirm this is a kernel-level issue, with public reports across multiple distributions (Debian, Mageia, Mariner, etc.). Aff...

CVE-2022-48975

CVE-2022-48975 concerns a memory leak in Linux kernel GPIO handling. The backtrace shows the leak occurs during gpiochip_setup_dev() when registering GPIO devices, with resources allocated in device_private_init() not released on error paths. The fix moves the release logic to use put_device() to...

CVE-2022-48978

CVE-2022-48978 is a Linux kernel vulnerability in HID core (hid_report_raw_event) causing a shift-out-of-bounds when processing HID reports. The issue is triggered by syzbot reports and UBSAN shows shift-out-of-bounds in hid-core.c:1323 while computing snto32; fix patches add bounds checks (limit...

CVE-2022-49028

CVE-2022-49028 concerns the Linux kernel ixgbevf driver. The advisory notes a resource leak in ixgbevf_init_module(): when pci_register_driver() fails, the workqueue created by create_singlethread_workqueue() is not destroyed. The fix adds destroy_workqueue() in the failure path to prevent the le...

CVE-2022-49116

CVE-2022-49116 – Linux kernel Bluetooth memset fix : The vulnerability concerns the Bluetooth stack (l2cap_ecred_connect) where structs could leak memory if not initialized. The fix is to use memset to initialize structs to prevent memory leaks. Affected component: Linux kernel Bluetooth subsyste...

CVE-2022-49534

CVE-2022-49534 in the Linux kernel concerns a memory leak in the lpfc driver when NPIV ports send PLOGI_RJT. The description states a leak could originate from allocations in lpfc_ignore_els_cmpl() and lpfc_els_rsp_reject(), tied to login_mbox context and service parameter buffers. The remedy is ...

CVE-2022-49631

CVE-2022-49631 is a Linux kernel data-race vulnerability in the reader of sysctl_raw_l3mdev_accept. While reading this sysctl, its value could be changed concurrently, prompting a fix that adds a READ_ONCE() to the reader. The issue is a kernel-level race that can affect availability. The connect...