CVE-2024-53047

Connected document MiracleLinux AXSA advisory explicitly notes CVE-2024-53047: in the Linux kernel mptcp: init incorrectly uses RCU when creating a socket, leading to a suspicious RCU usage warning. Root cause: rcu_read_lock() was omitted during mptcp_sched_find() execution; fix implemented by ad...

CVE-2024-56609

Technical details for CVE-2024-56609 are not publicly available in the provided Connected documents. The initial description mentions a kernel purge TX queue fix for rt w88, but no explicit affected products, versions, or remediation is given here. Monitor for updates.

CVE-2024-56716

CVE-2024-56716 affects the Linux kernel via netdevsim: nsim_dev_health_break_write() accepts a zero or excessively large count, which can crash the kernel. Connected advisories indicate this CVE is addressed in kernel updates for various distributions (e.g., Debian LTS, Mariner/Mageia/Amazon Linu...

CVE-2024-57792

CVE-2024-57792 is a Linux kernel vulnerability in the power: supply: gpio-charger path. The issue arises when the lowest charge current limit is forced to be > 0 and a requested limit falls below this, causing an index calculation that can access memory beyond the allocated memory. It has been...

CVE-2024-58087

CVE-2024-58087 relates to the Linux kernel ksmbd subsystem. The root cause is a racy issue during session lookup and expire. The fix, as documented in connected sources, increments the session reference count while holding the relevant lock to prevent race conditions with session expiry. The vuln...

CVE-2025-21670

CVE-2025-21670 affects the Linux kernel’s vsock/bpf path. The issue occurs when vsock_transport is not assigned (NULL) during vsock_bpf_recvmsg for connected sockets (stream/seqpacket), leading to a NULL pointer dereference in vsock_connectible_has_data and an in-kernel oops trace. The vulnerabil...

CVE-2025-21722

CVE-2025-21722 concerns the NILFS2 filesystem in the Linux kernel. When filesystem corruption triggers a read-only fallback, buffer state inconsistencies can occur: one path is when mark_buffer_dirty() marks data/metadata dirty but the buffer isn’t uptodate, and another path is nilfs_btree_propag...

CVE-2025-21831

CVE-2025-21831 covers a Linux kernel PCI issue: on some TUXEDO Sirius Gen1 systems, a BIOS-specific wakeup failure caused suspend-time root-port D3hot entry. Root cause is a policy change from commit 9d26d3a8f1b0 that allowed all PCIe ports to enter D3, which could hang on resume for the affected...

CVE-2025-21835

The CVE-2025-21835 issue affects the Linux kernel USB gadget f_midi MIDI Streaming descriptors. The root cause is incorrect bNumEmbMIDIJack and bLength values in MIDIStreaming endpoint descriptors, which can emit broken descriptors when the port count for IN/OUT differs, leaking uninitialized sta...

CVE-2025-21935

In CVE-2025-21935, the Linux kernel rapidio subsystem fixes a missing check in rio_scan_alloc_net(): the return value of rio_add_net() must be checked, and if it fails, put_device() should be called to free memory and drop the reference from rio_add_net(). This prevents potential memory leaks and...

CVE-2025-21961

CVE-2025-21961 (Linux kernel BNXT driver): A miscalculated truesize in the bnxt_xdp_build_skb path when mb-xdp is used with XDP_PASS causes an incorrect skb_truesize to be recorded, since skb_shared_info is wiped by napi_build_skb() and the code may reuse a stale sinfo->nr_frags. This is fixed...

CVE-2025-22002

CVE-2025-22002 concerns the Linux kernel netfs code path: if a filesystem does not implement invalidate_cache, a write-to-cache failure can trigger a NULL pointer dereference in netfs_write_collection_worker, leading to a kernel crash. The provided documents confirm the root cause as a missing NU...

CVE-2016-3070

CVE-2016-3070 affects the Linux kernel: the trace_writeback_dirty_page implementation (in include/trace/events/writeback.h) improperly interacts with mm/migrate.c, allowing a local attacker to trigger a NULL pointer dereference and system crash by triggering a certain page move. The publicly docu...

CVE-2016-9685

CVE-2016-9685 affects the Linux kernel’s XFS filesystem: multiple memory leaks in error paths within fs/xfs/xfs_attr_list.c can cause local denial of service through memory consumption. Affects kernel versions before 4.5.1; patch released in 4.5.1. References indicate remediation via upgrading to...

CVE-2017-16914

The vulnerability CVE-2017-16914 affects the Linux kernel’s USB/IP path: the stub_send_ret_submit() function in drivers/usb/usbip/stub_tx.c is vulnerable in kernel versions before 4.14.8, 4.9.71, 4.1.49, and 4.4.107. A specially crafted USB over IP packet can trigger a NULL pointer dereference, l...

CVE-2018-1091

The CVE-2018-1091 entry is supported by connected advisories describing Linux kernel vulnerability on POWERPC: In arch/powerpc/kernel/ptrace.c, the function flush_tmregs_to_thread before 4.13.5 can crash a guest kernel when a core dump occurs, due to a missing processor feature check and an erron...

CVE-2019-16714

Summary: CVE-2019-16714 affects the Linux kernel prior to 5.2.14. The vulnerability is in rds6_inc_info_copy (net/rds/recv.c), where tos and flags are not initialized, allowing a remote attacker to read sensitive data from kernel stack memory. This is an information disclosure vulnerability with ...

CVE-2019-17054

CVE-2019-17054 affects the Linux kernel (AF_APPLETALK) where atalk_create does not enforce CAP_NET_RAW through 5.3.2, allowing unprivileged users to create raw sockets. Exploitation status and exact fixes are not provided in the supplied documents; no mitigation details are described here.

CVE-2019-19252

CVE-2019-19252 affects the Linux kernel (drivers/tty/vt/vc_screen.c) where vcs_write does not prevent write access to vcsu devices up to and including version 5.3.13. This yields a local access vulnerability with partial confidentiality/integity/availability impacts as described in the CVE and ec...

CVE-2020-29372

The CVE-2020-29372 entry concerns a race condition in the Linux kernel do_madvise implementation (mm/madvise.c) before version 5.6.8, where coredump operations can race with IORING_OP_MADVISE (CID-bc0c4d1e176e). Public sources in connected documents confirm the affected code path and the specific...

CVE-2021-47501

CVE-2021-47501 affects the Linux kernel i40e driver. A NULL pointer dereference in i40e_dbg_dump_desc could crash when dumping VFs VSI RX/TX descriptors via debugfs. The root cause is missing VSI-type validation during dump; the fix adds a check to ensure the VSI type is correct before dumping RX...

CVE-2021-47609

CVE-2021-47609 : Linux kernel vulnerability in the SCPI genpd driver for arm SCPI firmware. The issue was a missing bound check on scpi_pd->name, which could overflow a 30-byte buffer when copying the device name, potentially leading to memory corruption. The fix allocates the string dynamical...

CVE-2022-44033

CVE-2022-44033 affects the Linux kernel up to version 6.0.6, where a race condition in drivers/char/pcmcia/cm4040_cs.c can cause a use-after-free if a physically proximate attacker removes a PCMCIA device while open. The issue is described as a race between cm4040_open() and reader_detach(). The ...

CVE-2022-48502

CVE-2022-48502 affects the Linux kernel ntfs3 subsystem. A vulnerability in fs/ntfs3/xattr.c (ntfs_set_ea) allows an out-of-bounds read during disk reads due to improper checks. This is described in multiple sources (Linux kernel advisories and vendor bulletins) as present in kernels before 6.2. ...

CVE-2022-48942

In CVE-2022-48942, the Linux kernel hwmon subsystem can crash if a sensor’s registration with a thermal zone fails; specifically devm_thermal_zone_of_sensor_register() may return -ENODEV, potentially leading to a NULL pointer dereference in thermal_zone_device_update paths. The described call seq...

CVE-2022-49136

CVE-2022-49136 (Linux kernel) fixes a Bluetooth HCI QUEUE issue: hci_cmd_sync_queue must return an error if HCI_UNREGISTER is set to avoid use-after-free when hci_unregister_dev frees the HCI device. The connected advisories (MiracleLinux, AlmaLinux, Oracle Linux RHSA/ELSA, etc.) reference the fi...

CVE-2022-49577

CVE-2022-49577 describes a data-race in the Linux kernel surrounding the UDP sysctl field sysctl_udp_l3mdev_accept. While reading this reader, the value could be changed concurrently, which is addressed by adding a READ_ONCE() to the reader. The vulnerability is Linux kernel related and can be tr...

CVE-2022-49599

CVE-2022-49599 concerns a data race in the Linux kernel involving sysctl_tcp_l3mdev_accept. The connected advisories confirm the vulnerability is in the kernel’s handling of sysctl_tcp_l3mdev_accept and that the fix adds READ_ONCE() to the readers to prevent concurrent modification during reads. ...

CVE-2023-52667

CVE-2023-52667 affects the Linux kernel net/mlx5e code path. The vulnerability is a potential double-free in fs_any_create_groups when kcalloc() succeeds but kvzalloc() fails, because ft->g could be freed twice up the call chain. The fix implemented is to set ft->g to NULL in fs_any_create_...

CVE-2023-53010

The CVE-2023-53010 vulnerability concerns the bnxt Ethernet driver in the Linux kernel. A buffer overread could occur from reading past the end of test names due to concatenation across an offset beyond the end of the first name, triggering the buffer overflow detection logic. The root cause was ...

CVE-2024-26718

CVE-2024-26718 concerns the Linux kernel. The description and connected Astra Linux bulletin confirm a memory-corruption risk in dm-crypt and dm-verity tasklets due to the tasklet handling path (tasklet_action_common calling tasklet_trylock, running the callback, then tasklet_unlock). The propose...

CVE-2024-26746

The CVE-2024-26746 issue is a Linux kernel vulnerability where event log cache allocation used kmem_cache_create is unsafe for user copies, triggering a kernel bug when HARDENED_USERCOPY is enabled. The connected PT/ Nessus entries confirm the problem is tied to the idxd event log completion reco...

CVE-2024-35964

CVE-2024-35964 : Linux kernel Bluetooth ISO component fixed an issue where setsockopt user input was not properly validated. The description states to check input length before copying data, indicating a potential input-validation/overflow risk. Connected advisories reference the CVE and confirm ...

CVE-2024-35983

CVE-2024-35983 : The Vuln resides in the Linux kernel, caused by incorrect bits_per() rounding for power-of-two CONFIG_NR_CPUS, leading to crashes on certain machines/configs. Public advisories (Unity UTSA-2025-992928) confirm the vulnerability has been resolved in kernel updates. Affected compon...

CVE-2024-36897

CVE-2024-36897 — Linux kernel (drm/amd/display, DCN35) Root cause: a new UMA carveout BIOS (version 2.3) wasn’t handled by the DAL BIOS parsing, causing a NULL dereference when code attempted to access Ctx->dc_bios->integrated_info if that pointer was NULL. Affected component: drm/amd/displ...

CVE-2024-42104

CVE-2024-42104 affects the Linux kernel’s nilfs2 filesystem. A missing check for inode numbers on directory entries allows internal inodes (metadata files) to be exposed in the namespace, potentially causing a use-after-free of metadata file inodes and kernel bugs in lru_add_fn() when mounting/un...

CVE-2024-42232

CVE-2024-42232 (Linux kernel, libceph) is a race between delayed_work handling in ceph_monc_stop() and mon_fault()/finish_hunting() that could lead to use-after-free when reusing monc and its associated fields. The fix, as described in connected advisories, is: (1) during session close in ceph_mo...

CVE-2024-46821

CVE-2024-46821 (Linux kernel, drm/amd/pm) affects the Linux kernel’s AMD power management code where a negative clk_index/clk_idex was used as an index into pptable->DpmDescriptor, leading to a negative array index read. The issue is resolved by a fix that prevents using negative values as an ...

CVE-2024-47670

This CVE (CVE-2024-47670) affects the Linux kernel OCFS2 subsystem. The vulnerability arises from insufficient bounds checking in ocfs2_xattr_find_entry(), allowing potential out-of-bounds memory access while scanning for a match in OCFS2 extended attributes. The advisory states that a paranoia c...

CVE-2024-47726

CVE-2024-47726 relates to the Linux kernel F2FS: a fix ensures all in-flight direct I/O (DIO) writes complete before removing blocks. The root cause was a race where a DIO could overwrite data in a block that would be reused by another inode if block removal occurred too early. Affected component...

CVE-2024-47747

CVE-2024-47747 — Linux kernel ether3 driver UAF due to race between timer and device removal . The issue occurs in ether3_probe where a timer is initialized for ether3_ledoff and bound to prev(dev)->timer. If the module or device is removed concurrently, ether3_remove cleans up and may access ...

CVE-2024-47753

CVE-2024-47753 affects the Linux kernel media/mediatek/vcodec VP8 stateless decoder. The issue stems from a smatch static checker warning in vdec_vp8_req_if.c that can cause a kernel crash when fb is NULL. A fix was applied to resolve the smatch warning and prevent the NULL framebuffer crash; ref...

CVE-2024-50007

CVE-2024-50007 affects the Linux kernel ALSA asihpi/ASIHPI driver. The issue is an out-of-bounds access in a static array populated from firmware data; the index depends on firmware and was not validated. The patch adds a sanity check to ensure the index fits in the array size, preventing potenti...

CVE-2024-50059

CVE-2024-50059 affects the Linux kernel’s ntb subsystem for Switchtec NTB: a race between switchtec_ntb_add/init_sndev binding and switchtec_ntb_remove freeing sndev can lead to a use-after-free of sndev from its scheduled check_link_status_work. The provided description and patches indicate the ...

CVE-2024-50072

CVE-2024-50072 affects the Linux kernel on x86 where VERW is used. The issue can trigger a general protection fault (#GP) in 32-bit vm86 contexts when VERW mitigations (e.g., MDS/RFDS) are enabled and the code segment selector is not properly referenced. The root cause is using VERW with an arbit...

CVE-2024-50102

CVE-2024-50102 : The connected advisories indicate a Linux kernel x86 issue where using the high address bit to classify user vs. kernel space enabled a speculative-execution leak for non-canonical addresses. The root cause involves non-canonical address handling and an evolving AC/bit behavior a...

CVE-2024-50167

CVE-2024-50167 involves the Linux kernel be2net memory path where be_xmit() can leak the skb when be_xmit_enqueue() fails, returning NETDEV_TX_OK without freeing resources. The fix adds dev_kfree_skb_any() to free the skb in that code path. Connected advisories confirm the issue is addressed in n...

CVE-2024-50233

CVE-2024-50233 concerns the Linux kernel: in staging: iio: frequency: ad9832, ad9832_write_frequency() may divide by clk_get_rate() which can be 0, leading to a division by zero in ad9832_calc_freqreg(). The fout value comes from user-controlled text and the zero-rate edge case is not protected b...

CVE-2024-50273

CVE-2024-50273 is a Linux kernel vulnerability in btrfs delayed refs. The issue arises when inserting a delayed ref and updating its action to BTRFS_DROP_DELAYED_REF: the ref is removed from its ref head’s list with list_del(), but its add_list member is not reinitialized. If drop_delayed_ref() r...

CVE-2024-50275

The CVE (CVE-2024-50275) affects the Linux kernel on arm64 with SVE traps. A race allows stale FPSIMD/SVE state to be reused across preemption, leading to SVE traps while TIF_SVE is set and potentially incorrect live state handling. The fix detaches from the saved CPU state when not live by calli...