CVE-2024-26687

CVE-2024-26687 concerns the Linux kernel xen/events subsystem. The issue arises from a lock-order inversion between irq_mapping_update_lock and irq_desc->lock in shutdown_pirq/startup_pirq paths, allowing race conditions where evtchn mappings can be torn down and re-established concurrently. S...

CVE-2024-35979

The connected MiracleLinux AXSA advisory documents CVE-2024-35979 and describes the Linux kernel raid1 use-after-free in raid1_write_request() where r1_bio->bios[] temporarily pointed to the original bio and could be freed if a blocked rdev was encountered, freeing the underlying bios. The mit...

CVE-2024-35982

CVE-2024-35982 affects the Linux kernel’s batman-adv local TT handling. When an attached interface MTU becomes too small to transmit the local translation table, TT resizing can fail to converge, causing an endless loop. Symptoms include repeated log spam like “batman_adv: batadv0: Forced to purg...

CVE-2024-36961

The CVE-2024-36961 issue relates to the Linux kernel’s thermal debugfs code. The root cause is two locking problems in the thermal zone debugfs handling: (1) a race where user space can open the mitigations file before the thermal zone’s debugfs pointer is set, leading to a NULL pointer dereferen...

CVE-2024-40974

CVE-2024-40974 (Linux kernel, powerpc/pseries) is a local concern where plpar_hcall() and plpar_hcall9() expect valid, explicitly-sized result buffers; historically, only in-code comments signaled minimum sizes, risking stack corruption when a caller used undersized buffers. The affected code now...

CVE-2024-42315

CVE-2024-42315 – exFAT deadlock fix in Linux kernel . The issue occurs when exposing a file with entries exceeding ES_MAX_ENTRY_NUM, where the bh-array is allocated with GFP_KERNEL inside __exfat_get_dentry_set, potentially causing a deadlock on sbi->s_lock between processes. The fix changes t...

CVE-2024-45018

The connected advisories confirm CVE-2024-45018 affects the Linux kernel netfilter flowtable. It is caused by missing initialisation of extack before use in flow offload. The impact is described in the CVE entry, and remediation is to apply the kernel update/patch provided by the vendor (update t...

CVE-2024-45026

CVE-2024-45026 : In the Linux kernel (s390 DASD), data corruption could occur on Extent Space Efficient (ESE) or thin-provisioned volumes during error scenarios. The root cause was an imprecise length check in dasd_ese_needs_format that could mis-handle certain transport errors, potentially corru...

CVE-2024-46786

CVE-2024-46786 concerns the Linux kernel fscache subsystem. The connected documents confirm a concrete root cause: the fscache_cookie_lru_timer is initialized when the fscache module is loaded but is not deleted on module unload, which can lead to the timer being left on the per-CPU timer list an...

CVE-2024-46820

CVE-2024-46820 is a Linux kernel vulnerability in the AMDGPU VCN suspend path. The fix removes calls that disable IRQs and stops tracking IRQ state in vcn 5 suspend, because the code did not properly enable/disable VCN IRQs and did not manage IRQ state. The patch eliminates the WARN_ON(!amdgpu_ir...

CVE-2024-49896

CVE-2024-49896 is a Linux kernel vulnerability affecting the amdgpu/display path. The issue arises when amdgpu_dm passes a null stream to dc_is_stream_unchanged, leading to a potential NULL dereference. The description in the sources notes the root cause as missing null-check before dereferencing...

CVE-2024-50027

CVE-2024-50027 affects the Linux kernel thermal subsystem. The issue arises in thermal_zone_device_unregister() where the object tzp can be accessed after its memory is freed. The patch moves the freeing of tzp to after the removal completion, ensuring it cannot be accessed post-free. This repres...

CVE-2024-50078

Summary of CVE-2024-50078 (Linux kernel) : The Bluetooth subsystem may fail to call iso_exit() when a module is unloaded after iso_init() has been invoked, leaving the proto registered with proto_register() in an invalid state. This can trigger kernel list corruption bugs and an eventual kernel o...

CVE-2024-50086

CVE-2024-50086 affects the Linux kernel ksmbd (SMB2 server). A race between SMB2 session log off and session setup could lead to a use-after-free of the session object. The patch adds a session_lock when setting SMB2_SESSION_EXPIRED and switches to a reference-counted/session-scoped reference to ...

CVE-2024-50218

CVE-2024-50218 relates to the Linux kernel ocfs2 truncation path where passing a 64-bit value to ocfs2_truncate_inline could overflow. The fix introduces a sanity check for byte_start and byte_len in ocfs2_remove_inode_range(); if either is greater than ocfs2_max_inline_data_with_xattr, the funct...

CVE-2024-53210

CVE-2024-53210 affects the Linux kernel (s390/iucv) where passing MSG_PEEK to skb_recv_datagram() increments skb->users refcount and iucv_sock_recvmsg() does not decrement it, causing a skb memory leak during skb_queue_purge() and a WARN_ON during socket destruction. The fix is to decrement sk...

CVE-2024-58005

CVE-2024-58005 in the Linux kernel has concrete details in the connected documents: the root cause is a memory allocation path in the TPM eventlog ACPI handling that could allocate an oversized 16 MiB buffer due to how the order parameter is mapped. The patched fix changes the allocation strategy...

CVE-2025-21910

CVE-2025-21910 affects the Linux kernel (wifi: cfg80211: regulatory) where invalid user regulatory hints could pass through via regulatory_hint_user() into user_alpha2[]. The root cause involves isalpha() handling non-Latin symbols and a subsequent toupper() mutation that bypassed a prior check. ...

CVE-2025-22022

CVE-2025-22022 concerns the Linux kernel USB xHCI driver, where NEC isochronous endpoints with NEC uPD720200 controllers could trigger IOMMU faults due to mis-handling of missed service errors. The description notes a faulty behavior involving transfer descriptors around isochronous rings and a c...

CVE-2025-37778

CVE-2025-37778 is a Linux kernel vulnerability in ksmbd’s krb_authenticate path. The root cause is a use-after-free: krb_authenticate frees sess->user and may not NULL it; if ksmbd_krb5_authenticate does not reinitialize sess->user, smb2_sess_setup may later access freed memory. Several adv...

CVE-2025-37829

CVE-2025-37829 affects the Linux kernel: cpufreq: scpi: Fix null-ptr-deref in scpi_cpufreq_get_rate(). The root cause is that cpufreq_cpu_get_raw() can return NULL when the target CPU is not present in policy->cpus mask, and scpi_cpufreq_get_rate() does not handle this, causing a NULL pointer ...

CVE-2025-37992

CVE-2025-37992 affects the Linux kernel net_sched subsystem. Affected: qdiscs (codel, fq, fq_codel, fq_pie, hhf, pie). Root cause: during qdisc ->change(), trimming only the main queue could leave packets on the gso_skb list, risking NULL pointer dereference when sch->limit is compared to s...

CVE-2026-46244

The CVE-2026-46244 issue affects the Linux kernel netfilter nft_inner path. In nft_inner_parse_l2l3(), while handling inner IPv6 packets, ipv6_find_hdr() computes the transport header offset correctly across extension headers, but the code later overwrites this value with nhoff + sizeof(_ip6h) (4...

CVE-2026-53215

CVE-2026-53215 affects the Linux kernel mvpp2 driver: the RX path could return a descriptor buffer to the hardware Buffer Manager after it had been handed to XDP or an skb, allowing DMA into memory no longer owned by the RX ring. Root cause is improper handling of RX buffers in mvpp2_rx_refill() ...

CVE-2010-5321

CVE-2010-5321 affects the Linux kernel videobuf subsystem (videobuf-core.c and related via videobuf-vmalloc.c) with a memory-leak vulnerability that can be exploited by local users via /dev/video mmap calls to trigger memory allocations and cause a denial of service. Public sources in the connect...

CVE-2017-7346

The CVE-2017-7346 issue is a Linux kernel vulnerability in vmwgfx where vmw_gb_surface_define_ioctl in drivers/gpu/drm/vmwgfx/vmwgfx_surface.c fails to validate certain levels data, enabling a local attacker to cause a denial of service (system hang) via a crafted ioctl to /dev/dri/renderD* on ke...

CVE-2021-47544

CVE-2021-47544 : Linux kernel TCP path shows page frag corruption on a page fault, resolved by a patch that fixes nested sk_page_frag() usage during page faults involving CIFS-mapped user buffers. Root cause: page fault handling can initiate an SMB transaction on a different socket within the sam...

CVE-2022-48997

CVE-2022-48997 affects the Linux kernel TPM subsystem, where tpm transactions during suspend were not guarded and could race with other TPM accessors inside tpm_pm_suspend. The referenced fixes call tpm_try_get_ops(), a wrapper around tpm_chip_start() that acquires the appropriate mutex, to seria...

CVE-2022-49072

CVE-2022-49072 affects the Linux kernel GPIO subsystem: gpiochip irq members can be read before initialization, causing race conditions and a potential NULL pointer dereference via I2C (gpiochip_to_irq). The issue has been resolved in the kernel by restricting access to irq-related fields until a...

CVE-2022-49372

CVE-2022-49372 affects the Linux kernel where tcp_rtx_synack() can be invoked from process context during a Fast Open TCP backlog/backlog processing sequence when CONFIG_DEBUG_PREEMPT is enabled. The issue arises as a SYN retransmit is processed in process context, cooking a SYN-ACK in that conte...

CVE-2022-49442

CVE-2022-49442 pertains to the Linux kernel: the compaction sysfs file created by compaction_register_node in drivers/base/node.c was not removed in unregister_node, allowing a leaked sysfs file. The issue is fixed by applying compaction_unregister_node. According to the provided documents, the v...

CVE-2022-49638

CVE-2022-49638 affects the Linux kernel ICMP subsystem. It arises from data races when reading icmp sysctl variables, which can be changed concurrently. The fix adds READ_ONCE() around these reads. According to the descriptor, impact is Availability (HIGH) with no confidentiality or integrity imp...

CVE-2023-26606

The CVE-2023-26606 issue affects the Linux kernel (6.0.8) with a use-after-free in ntfs_trim_fs (fs/ntfs3/bitmap.c). Affects Linux kernel components related to NTFS handling; impact is high (confidentiality, integrity, availability) with local privileges required and no user interaction. Root cau...

CVE-2023-52625

The CVE-2023-52625 entry concerns the Linux kernel’s drm/amd/display path (DMCUB enter/exit idle). The root cause is a SW/state mismatch when exiting idle before issuing commands to DMCUB, where the exit/notify idle operation can itself issue a command. The provided fix strategy is to track a sof...

CVE-2023-52658

CVE-2023-52658 is referenced in MiracleLinux advisory AXSA:2024-8938:33 for MiracleLinux 9. The advisory lists a Linux kernel issue: “net/mlx5: Block entering switchdev mode with ns inconsistency” that was reverted in the upstream commit 662404b24a4c4d839839ed25e3097571f5938b9b, due to instabilit...

CVE-2023-52659

CVE-2023-52659 affects the Linux kernel 64-bit builds where the pfn_to_kaddr() macro may lose address bits when shifting a 40-bit GFN, causing guest crashes in SEV-SNP environments. The fix introduces an inline function to implicitly cast inputs to a 64-bit type before the shift, replacing the pr...

CVE-2023-52674

CVE-2023-52674: Linux kernel ALSA scarlett2 clocking path vulnerability fixed by Add clamp() in scarlett2_mixer_ctl_put(); the input value is limited to 0..SCARLETT2_MIXER_MAX_VALUE to prevent out-of-bounds access to scarlett2_mixer_values[]. The connected IBM Guardium advisory lists the CVE with...

CVE-2024-26634

CVE-2024-26634 — Normal mode Affected: Linux kernel net subsystem involving network namespace handling. Summary: A BUG triggered when removing a net namespace with conflicting interface altnames could cause the main interface name to be overwritten during the namespace teardown. This occurred whe...

CVE-2024-26763

CVE-2024-26763 is a Linux kernel vulnerability in dm-crypt related to authenticated encryption. The issue arises when data is modified during encryption, which could produce an invalid tag. The fix copies the data into a clone bio and encrypts there, avoiding in-place modification and potential d...

CVE-2024-35859

CVE-2024-35859 concerns the Linux kernel: a module reference leakage can occur in the bdev_open_by_dev error path. The vulnerability arises because a module reference is grabbed when bdev_may_open() is invoked and might not be released if that call fails. The issue was identified via code review ...

CVE-2024-35962

CVE-2024-35962 (Linux kernel): The issue is a netfilter input validation bug in the kernel’s user input handling. The vulnerability arises from do_replace() paths using copy_from_sockptr() followed by unsafe copy_from_sockptr_offset() calls, enabling insufficient validation of optlen against the ...

CVE-2024-36897

CVE-2024-36897 — Linux kernel (drm/amd/display, DCN35) Root cause: a new UMA carveout BIOS (version 2.3) wasn’t handled by the DAL BIOS parsing, causing a NULL dereference when code attempted to access Ctx->dc_bios->integrated_info if that pointer was NULL. Affected component: drm/amd/displ...

CVE-2024-40948

Technical details for CVE-2024-40948 (e.g., affected products/versions, root cause, impact, fix) are not provided in the Connected documents. Monitor for updates and refer to the initial description for the vulnerability summary.

CVE-2024-42278

CVE-2024-42278: In the Linux kernel ASoC TAS2781 driver, tasdev_load_calibrated_data() had a reversed if condition that could be a no-op or cause a NULL dereference. MiracleLinux AXSA advisory confirms the vulnerability was resolved in the kernel, but the provided materials do not specify a patch...

CVE-2024-43823

CVE-2024-43823 is a Linux kernel PCI keystone issue where a DT error can cause a NULL pointer dereference in ks_pcie_setup_rc_app_regs when IORESOURCE_MEM is missing. The description in the sources states the bug occurs if a Device Tree error leads to a NULL in resource_list_first_type(), with pc...

CVE-2024-44981

In CVE-2024-44981, the Linux kernel vulnerability is in the workqueue path: shift_and_mask() constructs a mask with a signed immediate and is invoked with a shift of 31, leading UBSAN to report an integer subtraction overflow and triggering a kernel panic. The documented fix uses an unsigned cons...

CVE-2024-46711

CVE-2024-46711 affects the Linux kernel MPTCP path-management code. The issue is described as a fix for the ID 0 endpoint usage after multiple subflow re-creations, where local_addr_used/add_addr_accepted counters for initial subflows could be incorrectly decremented for unrelated addresses, prev...

CVE-2024-47707

Mode C: CVE-2024-47707 is a Linux kernel vulnerability affecting IPv6 route handling. The connected Astra Linux bulletin confirms a concrete root cause: a NULL check for rt->rt6i_idev was removed, risking a null pointer dereference in rt6_uncached_list_flush_dev() when processing IPv6 route st...

CVE-2024-47749

CVE-2024-47749 affects the Linux kernel RDMA/cxgb4 stack. The vulnerability arises because lookup_atid() may return NULL for invalid/non-existent ATIDs, risking a null-pointer dereference in act_establish() and act_open_rpl(). A NULL check has been added to prevent dereferencing NULL. Remediation...

CVE-2024-49969

CVE-2024-49969 affects the Linux kernel DRM AMD/DCN30 color management path. The vulnerability arises in the function cm3_helper_translate_curve_to_hw_format when an index 'i' can exceed TRANSFER_FUNC_POINTS, risking an index/out-of-bounds condition and triggering a buffer overflow in output_tf-&...