CVE-2022-48942

In CVE-2022-48942, the Linux kernel hwmon subsystem can crash if a sensor’s registration with a thermal zone fails; specifically devm_thermal_zone_of_sensor_register() may return -ENODEV, potentially leading to a NULL pointer dereference in thermal_zone_device_update paths. The described call seq...

CVE-2022-49011

CVE-2022-49011 involves a leak in the Linux kernel hwmon/coretemp code: the PCI device refcount was not decremented after use in nv1a_ram_new(), causing a refcount leak. The root cause is the PCI API’s behavior of returning a device with an incremented refcount, requiring the caller to call pci_d...

CVE-2022-49264

CVE-2022-49264 (Linux kernel) : The issue fixes how argv is passed to execve when argc is 0. The kernel now forces a single empty string into argv and sets argc to 1, accounting for extra stack space in bprm_stack_limits and emitting a WARN message to notify userspace: “process './argc0' launched...

CVE-2022-49534

CVE-2022-49534 in the Linux kernel concerns a memory leak in the lpfc driver when NPIV ports send PLOGI_RJT. The description states a leak could originate from allocations in lpfc_ignore_els_cmpl() and lpfc_els_rsp_reject(), tied to login_mbox context and service parameter buffers. The remedy is ...

CVE-2022-49666

CVE-2022-49666 concerns the Linux kernel, specifically the powerpc/memhotplug path. The issue arises from an add_pages override for PPC, where the kernel began validating addresses against high_memory after commit ffa0b64e3be5 (powerpc: Fix virt_addr_valid() for 64-bit). This leads to a BUG_ON in...

CVE-2023-30772

CVE-2023-30772 is a Linux kernel race condition leading to a use-after-free in drivers/power/supply/da9150-charger.c when a nearby attacker unplugs a device. The issue affects kernels prior to 6.2.9; security advisories from Astra Linux and Debian Mageia indicate this vulnerability, with fixes co...

CVE-2023-52658

CVE-2023-52658 is referenced in MiracleLinux advisory AXSA:2024-8938:33 for MiracleLinux 9. The advisory lists a Linux kernel issue: “net/mlx5: Block entering switchdev mode with ns inconsistency” that was reverted in the upstream commit 662404b24a4c4d839839ed25e3097571f5938b9b, due to instabilit...

CVE-2024-0564

CVE-2024-0564 concerns the Linux kernel memory deduplication mechanism (KSM) where the max page sharing setting can enable a side channel leakage of a victim’s page when an attacker and victim share a host. The connected OSV entries confirm patches in Rootio-Linux packages for Debian/Ubuntu (Root...

CVE-2024-26763

CVE-2024-26763 is a Linux kernel vulnerability in dm-crypt related to authenticated encryption. The issue arises when data is modified during encryption, which could produce an invalid tag. The fix copies the data into a clone bio and encrypts there, avoiding in-place modification and potential d...

CVE-2024-26945

The Linux kernel contains a vulnerability in the crypto: iaa driver. Specifically, if nr_cpus

CVE-2024-35839

Technical details about CVE-2024-35839 are not publicly provided in the supplied documents; monitor for future disclosures and updates.

CVE-2024-36936

The CVE-2024-36936 issue affects the Linux kernel's memory-accept path under efi/unaccepted. The root cause was a soft lockup scenario caused by a spinlock held during memory acceptance, which could intermittently trigger a watchdog/softlockup on the CPU during large TD guest memory loads. The fi...

CVE-2024-39506

CVE-2024-39506 (Linux kernel) : The issue arises in the liquidio driver path within lio_vf_rep_copy_packet(), where pg_info->page is compared to NULL but then unconditionally passed to skb_add_rx_frag(), risking a NULL pointer dereference. The problem trace shows the path from octeon_droq_proc...

CVE-2024-40919

CVE-2024-40919 discusses a Linux kernel bnxt_en issue where a released token (token->state == BNXT_HWRM_DEFERRED) could be logged while the token pointer had already been NULL, risking a NULL pointer dereference. The fix implemented is to add a token pointer check before using the token in log...

CVE-2024-42269

CVE-2024-42269 (Linux kernel) : A local DoS via NULL pointer dereference in ip6table_nat_table_init() was resolved. The root cause: ip6table_nat_table_init() accessed net->gen->ptr[...] before per-network entry was allocated. The fix: call register_pernet_subsys() before xt_register_templat...

CVE-2024-43821

Technical details beyond the description of CVE-2024-43821 are not provided in the supplied documents; no explicit affected products/versions/fixes are listed here. Monitor vendor advisories for updates.

CVE-2024-44965

CVE-2024-44965 is a Linux kernel vulnerability where pti_clone_pgtable() made alignment assumptions (PMD alignment) on the start address, which is valid on x86_64 but not on i386, causing the end condition to malfunction and potentially a short clone of user mappings. The issue could lead to trap...

CVE-2024-47703

CVE-2024-47703 — Linux kernel (BPF-LSM return value) details . A BPF program attached to the file_alloc_security LSM hook could cause a kernel panic if the LSM returns a positive value, which the kernel could misinterpret as a file pointer. The issue arises because the positive return was not val...

CVE-2024-47750

CVE-2024-47750: In the Linux kernel, RDMA/hns on HIP08 had a Use-After-Free of rsv_qp because rsv_qp was freed before ib_unregister_device() was called. The documented fix moves the release of rsv_qp to after ib_unregister_device(). Affected component: RDMA/hns in HIP08; impact is Use-After-Free,...

CVE-2024-47754

CVE-2024-47754 affects the Linux kernel media/mediatek vcodec H264 multi stateless decoder. The issue arises from a smatch static checker warning in vdec_h264_req_multi_if.c, which can trigger a kernel crash when fb is NULL. The connected documents confirm fixes in the kernel (repairs to the smat...

CVE-2024-50095

CVE-2024-50095 affects the Linux kernel’s RDMA/mad path. The vulnerability stemmed from the current timeout handler for mad agents, which acquired and released mad_agent_priv for every timed-out work request (WR), causing heavy locking contention when many WRs must be processed, potentially leadi...

CVE-2024-50232

CVE-2024-50232 affects the Linux kernel in the IIO ADC driver for ad7124. The root cause is a potential division by zero in ad7124_set_channel_odr() when ad7124_write_raw() passes a zero value to DIV_ROUND_CLOSEST(), invoked via iio_write_channel_raw() -> iio_write_channel_attribute() -> ii...

CVE-2024-56727

Technical details for CVE-2024-56727 are not provided in the connected documents. No affected product/version or remediation is disclosed here. Monitor for updates.

CVE-2025-21893

CVE-2025-21893 concerns a use-after-free in the Linux kernel key handling. The issue arises when the key’s usage reaches 0 and the garbage collector may touch the key after it could have been freed. The fix changes the reclamation logic from inspecting the key’s refcount in the garbage collector ...

CVE-2025-21910

CVE-2025-21910 affects the Linux kernel (wifi: cfg80211: regulatory) where invalid user regulatory hints could pass through via regulatory_hint_user() into user_alpha2[]. The root cause involves isalpha() handling non-Latin symbols and a subsequent toupper() mutation that bypassed a prior check. ...

CVE-2025-21914

CVE-2025-21914 affects the Linux kernel Slimbus path (slimbus) where, in delayed interrupt scenarios, slim_do_transfer() returns a timeout but fails to free the associated transaction ID (TID). This leads to invalid memory access inside qcom_slim_ngd_rx_msgq_cb(), potentially causing a kernel pan...

CVE-2025-21916

CVE-2025-21916 is part of Unity Linux/Fedora kernel advisories describing a fix for a flaw in USB ATM CXACRU endpoint checking. The root cause was insufficient verification of USB endpoint addresses in cxacru_bind(), leading to incorrect URB handling (e.g., bogus urb xfers). The mitigation is to ...

CVE-2026-23270

CVE-2026-23270 pertains to the Linux kernel net/sched subsystem. The fix restricts the use of TC action act_ct to only bind to clsact/ingress qdiscs and shared blocks, preventing its use on the egress path. The change addresses a scenario where classify could return TC_ACT_CONSUMED while the skb ...

CVE-2026-52986

The CVE-2026-52986 issue affects the Linux kernel netfilter nf_conntrack_sip module, where unsafe port parsing on non-NUL-terminated data allowed malformed SIP packets to affect conntrack processing. The fix introduces a dedicated sip_parse_port() that validates each digit against the buffer limi...

CVE-1999-0513

CVE-1999-0513 describes a vulnerability where ICMP messages to broadcast addresses are allowed, enabling a Smurf attack that can cause a denial of service. The primary sources (NVD, Red Hat, and CVE listings) consistently state that the issue involves ICMP traffic to broadcast addresses, resultin...

CVE-2010-3081

The Linux kernel (before version 2.6.36-rc4-git2) on 64-bit platforms is vulnerable to a stack pointer underflow issue within the 32-bit compatibility layer. Specifically, the compat_alloc_user_space functions in include/asm/compat.h fail to properly allocate required userspace memory. A local us...

CVE-2015-0571

CVE-2015-0571 is a local privilege-escalation in the WLAN driver for the Linux kernel as used in Qualcomm QuIC Android contributions (MSM devices and related products). The issue arises from the driver’s lack of authorization checks for private SET IOCTL calls, allowing a crafted application to g...

CVE-2015-7513

The CVE-2015-7513 vulnerability affects arch/x86/kvm/x86.c in the Linux kernel prior to 4.4, where PIT counter values are not reset during guest state restoration. This can allow guest OS users to trigger a denial-of-service (divide-by-zero) and host crash via a zero PIT value, related to kvm_vm_...

CVE-2016-2187

No new technical details are provided in the Connected documents for CVE-2016-2187. The only available information is in the Initial document, describing a Linux kernel denial-of-service via gtco_probe in gtco.c caused by a crafted USB endpoint in a device descriptor.

CVE-2016-6136

CVE-2016-6136 is a Linux kernel race condition in audit_log_single_execve_arg (auditsc.c) that can allow a local user to bypass character-set restrictions or disrupt system-call auditing via a double-fetch flaw. Connected advisories confirm multiple vendors map this CVE to Linux kernel fixes; rem...

CVE-2017-14156

Summary: CVE-2017-14156 affects the Linux kernel up to 4.12.10. The atyfb_ioctl function in drivers/video/fbdev/aty/atyfb_base.c does not initialize a certain data structure, allowing local attackers to read padding bytes from kernel stack memory and disclose sensitive information. Impact: inform...

CVE-2021-47456

The Linux kernel is vulnerable to a use-after-free (UAF) condition within the peak_pci CAN device driver. Specifically, in the peak_pci_remove() function, referencing the chan variable after the dev object has been released leads to the UAF. The vulnerability can be exploited by a local attacker ...

CVE-2022-1651

CVE-2022-1651 affects the Linux kernel in the ACRN Device Model (acrn_dev_ioctl in drivers/virt/acrn/hsm.c). The vulnerability is a memory leak during ioctl handling that can be exploited locally by a privileged user to leak kernel information and cause a denial of service. Public documents ident...

CVE-2022-48975

CVE-2022-48975 concerns a memory leak in Linux kernel GPIO handling. The backtrace shows the leak occurs during gpiochip_setup_dev() when registering GPIO devices, with resources allocated in device_private_init() not released on error paths. The fix moves the release logic to use put_device() to...

CVE-2022-49545

CVE-2022-49545 concerns the Linux kernel ALSA USB audio path: a race during closing a USB MIDI output substream where a pending work could access the released rawmidi runtime object. The fix cancels the pending work on substream close to prevent the access. Documented via multiple advisories and ...

CVE-2022-49642

CVE-2022-49642 concerns the Linux kernel: the Synopsys DWC Ethernet driver (net: stmmac: dwc-qos) on Tegra194 can crash the system when the split header feature is enabled, due to an unexpected buffer length that can overflow the total buffer length calculation. NVIDIA feedback indicates split he...

CVE-2023-52659

CVE-2023-52659 affects the Linux kernel 64-bit builds where the pfn_to_kaddr() macro may lose address bits when shifting a 40-bit GFN, causing guest crashes in SEV-SNP environments. The fix introduces an inline function to implicitly cast inputs to a 64-bit type before the shift, replacing the pr...

CVE-2023-52674

The Linux kernel is affected by a vulnerability in the ALSA component specifically related to scarlett2 . The root cause is a missing bounds check in the scarlett2_mixer_ctl_put() function, which could allow an out-of-bounds access to the scarlett2_mixer_values[] array. To resolve this, a clamp()...

CVE-2023-53021

CVE-2023-53021 affects the Linux kernel net/sched sch_taprio component. An invalid TCA_RATE attribute can trigger a use-after-free in a taprio qdisc during qdisc_create/taprio_destroy, with an hrtimer firing and __netif_schedule() leading to net_tx_action() using a destroyed qdisc. The issue is f...

CVE-2024-26718

CVE-2024-26718 affects the Linux kernel’s dm-crypt and dm-verity components. The issue arises from a memory‑corruption scenario in tasklets: tasklet_action_common calls tasklet_trylock, then the tasklet callback, then tasklet_unlock; if the callback frees the tasklet’s containing structure (or fr...

CVE-2024-26757

The Linux kernel contains a vulnerability in the md_check_recovery() function located in the drivers/md/md.c module. The issue arises because the function fails to properly handle read-only arrays, specifically following commit f52f5c71f3d4 . When dm-raid manipulates the mddev->ro state withou...

CVE-2024-26820

CVE-2024-26820 affects the Linux kernel hv_netvsc driver. The issue occurs when the hv_netvsc module is unloaded and reloaded: the NET_DEVICE_REGISTER handler can fail to register a VF because the VF registration call arrives before netvsc_probe finishes, since register_netdevice_notifier() is re...

CVE-2024-35954

CVE-2024-35954: In the Linux kernel, the sg: sg removal teardown race was fixed. sg_remove_sfp_usercontext() must not call sg_device_destroy() after scsi_device_put() because the parent scsi_device’s request_queue is NULL, leading to a NULL pointer dereference and kernel crash. The connected Astr...

CVE-2024-41079

CVE-2024-41079 concerns the Linux kernel’s NVMe target controller (nvmet). The issue is that the first two double words, the “results” for a command queue entry, were not consistently initialized to 0 when unused, creating a potential information leak for RDMA clients. The patch standardizes beha...

CVE-2024-42101

CVE-2024-42101 : In the Linux kernel, the drm/nouveau driver fix for a NULL pointer dereference in nouveau_connector_get_modes. The bug occurred when drm_mode_duplicate() failed, its return value was assigned to mode without a NULL check, potentially dereferencing a NULL pointer. The patch adds a...