CVE-2024-49952

CVE-2024-49952 relates to a Linux kernel vulnerability in nf_tables/netfilter where nf_dup_ipv4() and nf_dup_ipv6() could write to a per-cpu nf_skb_duplicated variable unsafely. Syzkaller traced improper use of __this_cpu_write() in preemptible code, and the fix requires disabling soft interrupts...

CVE-2025-37925

The CVE-2025-37925 entry concerns a Linux kernel vulnerability in the JFS filesystem. When finalizing an on-disk inode, clear_inode() could encounter an unknown type and trigger a kernel BUG; the root cause is an invalid handling path for on-disk inode types, where types 5–15 are reserved. The fi...

CVE-2024-45022

Technical details beyond the Initial Description are not provided in the connected documents. Monitor for updates from official advisories to confirm affected products, scope, and fixes for CVE-2024-45022.

CVE-2024-45026

CVE-2024-45026 : In the Linux kernel (s390 DASD), data corruption could occur on Extent Space Efficient (ESE) or thin-provisioned volumes during error scenarios. The root cause was an imprecise length check in dasd_ese_needs_format that could mis-handle certain transport errors, potentially corru...

CVE-2024-46820

CVE-2024-46820 is a Linux kernel vulnerability in the AMDGPU VCN suspend path. The fix removes calls that disable IRQs and stops tracking IRQ state in vcn 5 suspend, because the code did not properly enable/disable VCN IRQs and did not manage IRQ state. The patch eliminates the WARN_ON(!amdgpu_ir...

CVE-2024-47697

CVE-2024-47697: Linux kernel dvb-frontends rtl2830 had an out-of-bounds write via rtl2830_pid_filter due to a boundary check allowing index 32. The patch updates the boundary to index >= 32 (instead of index > 32) and enforces that dev->filters, a 32-bit bitmap, uses set_bit/clear_bit on...

CVE-2024-50218

CVE-2024-50218 relates to the Linux kernel ocfs2 truncation path where passing a 64-bit value to ocfs2_truncate_inline could overflow. The fix introduces a sanity check for byte_start and byte_len in ocfs2_remove_inode_range(); if either is greater than ocfs2_max_inline_data_with_xattr, the funct...

CVE-2024-50287

CVE-2024-50287: Linux kernel vulnerability fixed in media: v4l2-tpg where division by zero could occur during buffer rescale when scaled_width is zero. The patch adds WARN_ON_ONCE() and returns early to avoid precalculation.

CVE-2024-53084

CVE-2024-53084 affects the Linux kernel’s DRM/Imagination driver path for PVR, where a resource cleanup reference loop between PVR VM Context and VM Mappings could leak VM resources. The official fix breaks the loop by freeing outstanding VM mappings before destroying the PVR Context associated w...

CVE-2024-56596

CVE-2024-56596 relates to the Linux kernel, in the JFS filesystem implementation. The issue is an array-index-out-of-bounds in jfs_readdir, caused by potential invalid values in the directory index table (stbl). The fix adds a validation check to detect invalid stbl values and return an error cod...

CVE-2024-56746

CVE-2024-56746 concerns a Linux kernel memory-leak in the fbdev sh7760fb driver. When information such as info->screen_base is not ready, sh7760fb_free_mem() previously did not reliably release memory, leading to a leak. The fix switches to using dma_free_coherent() to free memory in sh7760fb_...

CVE-2024-56752

CVE-2024-56752 affects the Linux kernel DRM/Nouveau path (gf100) where a missing unlock in gf100_gr_chan_new() could occur when gf100_grctx_generate() fails. The fix explicitly unlocks gr->fecs.mutex before returning the error, addressing an inconsistent return on the mutex in gf100_gr_chan_ne...

CVE-2025-22104

The CVE-2025-22104 issue concerns the ibmvnic driver in the Linux kernel. The root cause was printing hex dumps by casting the buffer to an 8-byte long and using string formatters, which could trigger a read buffer overflow if the buffer size isn’t a multiple of 8. The fix introduces a new ibmvni...

CVE-2025-37758

CVE-2025-37758 affects the Linux kernel’s ata_pxa driver. The root cause was a potential NULL pointer dereference in pxa_ata_probe() when devm_ioremap() returns NULL. The fix adds a NULL check after devm_ioremap() to prevent dereferencing NULL.

CVE-2013-7445

CVE-2013-7445 : In the Linux kernel DRM subsystem, the Graphics Execution Manager (GEM) object handling (through GEM requests) is mishandled, allowing a context-aware attacker to cause a denial of service via memory exhaustion. The exploitation described uses JavaScript creating many CANVAS eleme...

CVE-2016-2186

The CVE-2016-2186 entry concerns the Linux kernel powermate_probe in drivers/input/misc/powermate.c, where kernels prior to 4.5.1 are vulnerable. A physically proximate attacker can trigger a denial of service (NULL pointer dereference and system crash) by sending a crafted endpoints value in a U...

CVE-2016-2544

CVE-2016-2544 corresponds to a race in the Linux kernel’s sound/core/seq/seq_queue.c queue_delete path (pre-4.4.1). A local attacker can trigger a use-after-free via an ioctl timing flaw, leading to a denial of service and possible system crash. Public references note fixes in kernel 4.4.1 and re...

CVE-2016-9084

The CVE-2016-9084 entry concerns Linux kernel Vfio PCI: vfio_pci_intrs.c misuses kzalloc, enabling a local attacker with access to a vfio PCI device file to trigger an integer overflow and cause a denial of service or other impact. Connected sources (e.g., Mageia advisories MGASA-2017-0147/0148 a...

CVE-2017-16526

CVE-2017-16526 affects the Linux kernel driver code drivers/uwb/uwbd.c up to version 4.13.5; a crafted USB device could trigger a general protection fault and system crash via local access, potentially causing denial of service or other impact. The connected Unity Linux advisories (UTSA-2026-0016...

CVE-2017-8925

Technical details beyond the description are not provided in the supplied documents. The provided materials confirm CVE-2017-8925 affects the Linux kernel omninet_open and describes a local denial of service due to reference-count mishandling; no further specifics are available here. Monitor for ...

CVE-2019-19070

Summary (CVE-2019-19070): A memory-leak in the Linux kernel spi_gpio_probe() (drivers/spi/spi-gpio.c) up to 5.3.11 can cause a denial of service via memory exhaustion when devm_add_action_or_reset() fails. The vulnerability is tied to the probe path and is contingent on memory pressure; a third‑p...

CVE-2021-47097

CVE-2021-47097 : In the Linux kernel, the elantech PS/2 driver has a stack-based out-of-bounds access in elantech_change_report_id(), caused by an array param[] that must be at least 3 bytes while elantech_read_reg_params() calls ps2_command() with 3 bytes. The stack was only 2 bytes, enabling a ...

CVE-2021-47544

CVE-2021-47544 affects the Linux kernel TCP path, specifically the page frag allocation in sk_page_frag() during a page fault on an mmapped user buffer from CIFS. The nested memory access triggers page-frag modifications that corrupt the TCP stream, observed in HTTP transfers served by Apache ove...

CVE-2022-1651

CVE-2022-1651 affects the Linux kernel in the ACRN Device Model (acrn_dev_ioctl in drivers/virt/acrn/hsm.c). The vulnerability is a memory leak during ioctl handling that can be exploited locally by a privileged user to leak kernel information and cause a denial of service. Public documents ident...

CVE-2022-48969

CVE-2022-48969 applies to the Linux kernel Xen netfront driver. The issue arises during live migration: a NAPI polling path is created for a sr-ing, but the old NAPI is not deleted promptly when the source string is nulled and the new one is set on the target host. This creates a tiny window wher...

CVE-2022-49014

CVE-2022-49014 affects the Linux kernel net/tun subsystem. A use-after-free occurs in tun_detach() when sock_put() drops the last reference to struct net before net notifier code (notifier_call_chain/netdev_state_change) has finished accessing it. The patch fixes this by calling sock_put() from t...

CVE-2022-49214

CVE-2022-49214 pertains to the Linux kernel on PowerPC 64s where Data SLB (Data Segment) faults do not set DSISR to a useful value, causing misclassification of read vs. write faults. The fix reworks the printing logic to treat SLB faults separately and only print read/write when the fault type c...

CVE-2022-49349

CVE-2022-49349 is a Linux kernel vulnerability in the ext4 filesystem where a use-after-free occurs in ext4_rename_dir_prepare. The issue arises during ext4 directory block reads when a directory entry with an invalid rec_len can lead to a stale parent reference being used, enabling a use-after-f...

CVE-2022-49589

CVE-2022-49589 affects the Linux kernel igmp subsystem: a data race occurs while reading sysctl_igmp_qrv, since the value could be changed concurrently. The fix described in the description is to add READ_ONCE() to readers of net->ipv4.sysctl_igmp_qrv, with follow-up changes planned after net ...

CVE-2022-49590

Summary : CVE-2022-49590 targets the Linux kernel IGMP subsystem, specifically a data race in reading sysctl_igmp_llm_reports that can occur when the value is changed concurrently. The documented fix adds READ_ONCE() to readers of net.ipv4.sysctl_igmp_llm_reports to prevent races. The vulnerabili...

CVE-2022-49666

CVE-2022-49666 concerns the Linux kernel, specifically the powerpc/memhotplug path. The issue arises from an add_pages override for PPC, where the kernel began validating addresses against high_memory after commit ffa0b64e3be5 (powerpc: Fix virt_addr_valid() for 64-bit). This leads to a BUG_ON in...

CVE-2022-49723

The CVE-2022-49723 issue affects the Linux kernel’s i915 DRM reset path. The root cause is incorrect pointer offset handling in error_state_read when there is no i915_gpu_coredump but a non-zero buffer offset, which could lead to a kernel page fault under concurrent engine resets and error_state ...

CVE-2023-32820

CVE-2023-32820 affects MediaTek wlan firmware. The issue arises from improper input handling that can trigger a firmware assertion, potentially enabling remote denial of service without extra privileges or user interaction. Public details consistently reference a patch ID ALPS07932637 (and ALPS07...

CVE-2024-36881

CVE-2024-36881: Linux kernel mm/userfaultfd vulnerability where wr-protected page table entries (uffd_wp) were not cleared on close(), only on UFFDIO_UNREGISTER. The fix unregisters wr-protect bits during close() as well, eliminating potential leftovers in pgtable entries and preventing WARN repo...

CVE-2024-39486

Summary (CVE-2024-39486): Linux kernel vulnerability in drm_file: Fix pid refcounting race. The race occurs in drm_file_update_pid() when filp->pid is updated under filelist_mutex, allowing a possible use-after-free of a pid structure under PREEMPT_RCU. Affected component: drm_file in the Linu...

CVE-2024-42269

CVE-2024-42269 (Linux kernel) : A local DoS via NULL pointer dereference in ip6table_nat_table_init() was resolved. The root cause: ip6table_nat_table_init() accessed net->gen->ptr[...] before per-network entry was allocated. The fix: call register_pernet_subsys() before xt_register_templat...

CVE-2024-44971

CVE-2024-44971 relates to the Linux kernel bcm_sf2 (net: dsa) driver. The issue was a memory leak in bcm_sf2_mdio_register(): after of_phy_find_device() returns devices, phy_device_remove() is called in a loop but the refcount on the PHY device was not decremented, as get_device() incremented it ...

CVE-2024-44984

CVE-2024-44984 (Linux kernel) is resolved by removing the dma_unmap_page_attrs() call from the bnxt_en driver XDP_REDIRECT path to stop double DMA unmapping. The bug previously triggered a warning in iommu_dma_unmap_page (CPU warning trace shown in the kernel log) due to DMA mapping handling not ...

CVE-2024-46675

CVE-2024-46675 affects the Linux kernel’s USB subsystem (usb: dwc3: core). The vulnerability could allow the USB core to access an invalid event buffer address during runtime suspend, potentially causing SMMU faults and memory issues on Exynos platforms. It stems from a sequence where the event b...

CVE-2024-46866

CVE-2024-46866 is a Linux kernel DRM-XE issue: bo_meminfo() can inspect bo state (tt/ttm) without holding the bo lock, allowing state changes that may cause NPD or UAF. The fix grabs the bo lock during bo_meminfo() and adds a ref for object_idr; v2 also introduces xe_bo_assert_held(). Concrete de...

CVE-2024-47687

The CVE-2024-47687 issue affects the Linux kernel mlx5/vdpa path. It fixes an invalid MR resource destroy where error paths could release uninitialized MR resources. The patch adds a missing check in mlx5_vdpa_destroy_mr_resources() to block destroying non-initialized MR resources, addressing a N...

CVE-2024-47730

The CVE-2024-47730 entry concerns the Linux kernel vulnerability crypto: hisilicon/qm - inject error before stopping queue. The issue arises when the accelerator core reports memory errors; the driver injects a qm error to close the master ooo before stopping the queue, preventing access to memor...

CVE-2024-49886

CVE-2024-49886 : In the Linux kernel, the SST/ISST path (platform/x86) could trigger a KASAN slab-out-of-bounds when attaching an SST PCI device to a VM, due to a read from an address beyond a 512-byte kmalloc allocation in _isst_if_get_pci_dev. The issue manifested as a KASAN slab-out-of-bounds ...

CVE-2024-49902

CVE-2024-49902 relates to a Linux kernel vulnerability in JFS where a leaf index (dmt_leafidx) could cause an out-of-bounds in dbSplit when the number of leaves per dmap tree is exceeded. The fix adds a check for dmt_leafidx in dbFindLeaf and expands the sanity checks to apply to control pages as...

CVE-2024-50095

CVE-2024-50095 affects the Linux kernel RDMA mad path. The root cause was heavy locking contention in the timeout handler for timed-out WRs in mad_agent_priv, as the current timeout handler acquired and released the lock for every timed-out work request, which could cause softlockups (notably whe...

CVE-2024-50126

CVE-2024-50126 concerns the Linux kernel’s net/sched path, specifically the taprio_dump() function. The connected advisories confirm a concrete root cause: a use-after-free could occur due to missing an RCU read-side critical section around taprio_dump(). The remediation implemented is to wrap th...

CVE-2024-53058

The CVE affects the Linux kernel driver net: stmmac when handling TSO with non-paged SKB data. The root cause is an unbalanced DMA map/unmap sequence: tx_skbuff_dma[].buf is set inconsistently, causing a valid buffer to be unmapped prematurely if a DMA descriptor is freed before all descriptors f...

CVE-2024-53210

CVE-2024-53210 affects the Linux kernel (s390/iucv) where passing MSG_PEEK to skb_recv_datagram() increments skb->users refcount and iucv_sock_recvmsg() does not decrement it, causing a skb memory leak during skb_queue_purge() and a WARN_ON during socket destruction. The fix is to decrement sk...

CVE-2024-56627

The CVE-2024-56627 issue affects the Linux kernel ksmbd component, specifically ksmbd_vfs_stream_read. A client-supplied negative offset could trigger an out-of-bounds read from the stream_buf when the ksmbd.conf setting vfs objects = streams_xattr is used. The vulnerability originates in the ker...

CVE-2024-56670

CVE-2024-56670 : Linux kernel vulnerability in the usb gadget u_serial driver where a NULL dereference could occur when port->port_usb is NULL during multi-threaded access. The description documents a race between gs_open/gs_start_io and disconnect paths (gserial_disconnect/composite_disconnec...