CVE-2022-1204

CVE-2022-1204 is a use-after-free flaw in the Linux kernel’s Amateur Radio AX.25 protocol handling that can allow a local attacker to crash the system. Connected advisories confirm this is a kernel-level issue, with public reports across multiple distributions (Debian, Mageia, Mariner, etc.). Aff...

CVE-2017-18204

CVE-2017-18204 affects the Linux kernel via ocfs2_setattr in fs/ocfs2/file.c, exploitable by local users to cause a denial-of-service (deadlock) when using DIO. The vulnerability exists in kernel versions before 4.14.2; Ubuntu advisories (USN 3617-3 and related) and Unity Linux advisories referen...

CVE-2018-10087

CVE-2018-10087 is present in the MiracleLinux kernel package listed in AXSA:2024-8953:34. The advisory shows a local DoS risk due to the kernel_wait4 function in kernel/exit.c triggering undefined behavior when using -INT_MIN on an unspecified architecture/compiler. The connected Nessus entry ide...

CVE-2019-19043

The CVE-2019-19043 vulnerability affects the Linux kernel’s i40e driver path: memory leak in i40e_setup_macvlans() within i40e_main.c up through kernel 5.3.11. Triggering i40e_setup_channel() failures can cause memory consumption leading to a denial of service. Connected advisories (Unity Linux U...

CVE-2022-49180

The CVE-2022-49180 issue affects the Linux kernel’s LSM path, specifically a general protection fault in legacy_parse_param. The vulnerability arises when a security module (Smack) processes a recognized mount option and a following BPF hook returns -ENOPARAM, confusing the caller, while the SELi...

CVE-2022-49330

The CVE-2022-49330 issue affects the Linux kernel's MTU probing logic in net/ipv4/tcp_input.c. Specifically, tcp_mtu_probe() starts an MTU probe only when tcp_snd_cwnd(tp) is >= 11, but tcp_snd_cwnd(tp) can later be reduced before the probe completes, creating a scenario that could lead to a z...

CVE-2022-49351

CVE-2022-49351 is tied to the Linux kernel fix in net: altera: Fix refcount leak in altera_tse_mdio_create. The issue arises in for_each_child_of_node() iterations where the previous node’s reference count is decremented and, on breaking out of the loop, of_node_put() was not called, leading to a...

CVE-2022-49587

The CVE-2022-49587 entry concerns a data-race in the Linux kernel related to reading sysctl_tcp_notsent_lowat, which could be modified concurrently. The fix is to add READ_ONCE() to the reader, addressing a sysctl data-race in the tcp stack. The vulnerability is rated with CVSS v3.1 metrics indic...

CVE-2022-49590

Summary : CVE-2022-49590 targets the Linux kernel IGMP subsystem, specifically a data race in reading sysctl_igmp_llm_reports that can occur when the value is changed concurrently. The documented fix adds READ_ONCE() to readers of net.ipv4.sysctl_igmp_llm_reports to prevent races. The vulnerabili...

CVE-2022-49638

CVE-2022-49638 affects the Linux kernel ICMP subsystem. It arises from data races when reading icmp sysctl variables, which can be changed concurrently. The fix adds READ_ONCE() around these reads. According to the descriptor, impact is Availability (HIGH) with no confidentiality or integrity imp...

CVE-2022-49646

CVE-2022-49646 affects the Linux kernel’s wifi/mac80211 code. When using iTXQ, the queue-selection logic assumed a single broadcast vif queue (BE). Allowing non-BE queue markings breaks that assumption and can break txq->ac == skb_queue_mapping, impacting queue handling in the driver and poten...

CVE-2022-50053

CVE-2022-50053 concerns the Linux kernel iavf driver: a reset error handling path could lead to deadlock due to double napi_disable and a stuck iavf_remove when VF removal occurs during rapid resets. The fix removes the call to iavf_close in reset error handling and instead calls iavf_disable_vf ...

CVE-2023-39197

The CVE-2023-39197 entry concerns an out-of-bounds read in Linux kernel Netfilter Connection Tracking (conntrack) for DCCP. A remote attacker could disclose kernel memory contents via crafted DCCP traffic due to copying an unbounded portion of the conntrack header; the issue is categorized as a k...

CVE-2023-52700

The CVE-2023-52700 issue affects the Linux kernel TIPC subsystem. Root cause: a missing/incorrect copy direction for the iov_iter when copying to/from an iterator could trigger a kernel stack trace during sending a SYN message. The referenced commit a41dad905e5a fixed the problem by initializing ...

CVE-2023-53034

CVE-2023-53034 is addressed in the Linux kernel ntb_hw_switchtec driver with a fix for a shift-out-of-bounds condition in switchtec_ntb_mw_set_trans. The root cause was that ntb_mw_clear_trans() could pass 0 to both addr and size, causing xlate_pos to become negative and triggering a UBSAN shift-...

CVE-2024-26764

CVE-2024-26764 : Linux kernel vulnerability in fs/aio where kiocb_set_cancel_fn() was not restricted to I/O submitted via libaio. If called for io_uring I/O, a kernel warning is produced (kiocb_set_cancel_fn+0x9c/0xa8). The fix: set the IOCB_AIO_RW flag for read/write I/O submitted by libaio to p...

CVE-2024-26766

CVE-2024-26766 is a Linux kernel vulnerability in the IB/hfi1 SDMA path. The issue was an off-by-one error in sdma.h tx->num_descs that, after a prior fix, could cause the descs array to overflow for certain 6-descriptor SDMA sends requiring padding in the 7th descriptor. This overflow could c...

CVE-2024-26864

CVE-2024-26864 concerns the Linux kernel TCP path: a refcount handling issue in __inet_hash_connect() could lead to refcnt underflow and socket leaks if not reverted properly after tb2 allocation failure. The issue manifested as a kernel warning in sk_nulls_del_node_init_rcu() and was addressed b...

CVE-2024-27404

CVE-2024-27404 affects the Linux kernel MPTCP implementation (remote_id data races). The issue was resolved by a patch that adds ONCE annotations to fix the data race. Connected advisories (e.g., Astra Linux) corroborate the same fix in Linux kernel 5.x contexts and describe the remote_id race be...

CVE-2024-35787

CVE-2024-35787 affects the Linux kernel’s md/md-bitmap logic. The root issue stemmed from removing page->index (via commit d7038f951828) in the bitmap code while leaving faulty logic for clustered-md, causing slots to be mis-set for cluster nodes and potentially crashes in clustered environmen...

CVE-2024-35859

The Linux kernel contains a vulnerability in the block/bdev.c module's bdev_open_by_dev() function. The root cause is a module reference leakage occurring in the error path: when bdev_may_open() is called, a module reference is grabbed, but it is not released if the function fails. This issue was...

CVE-2024-36897

CVE-2024-36897 — Linux kernel (drm/amd/display, DCN35) Root cause: a new UMA carveout BIOS (version 2.3) wasn’t handled by the DAL BIOS parsing, causing a NULL dereference when code attempted to access Ctx->dc_bios->integrated_info if that pointer was NULL. Affected component: drm/amd/displ...

CVE-2024-36924

CVE-2024-36924 – Linux kernel (scsi: lpfc) has a deadlock risk when lpfc_worker_wake_up() is invoked while the hbalock is held. The fix is to release hbalock before calling lpfc_worker_wake_up(), preventing deadlocks in the lpfc SCSI loop. Public advisories from Unity Linux (UTSA-2026-005051) and...

CVE-2024-39484

CVE-2024-39484 - Linux kernel mmc: davinci driver: the remove callback was discarded when built-in and __exit was used, causing resource leaks on unbind/reset. The fix compiles the remove callback unconditionally so it is always executed during driver removal. Connected sources confirm the issue ...

CVE-2024-40948

Technical details for CVE-2024-40948 (e.g., affected products/versions, root cause, impact, fix) are not provided in the Connected documents. Monitor for updates and refer to the initial description for the vulnerability summary.

CVE-2024-43820

CVE-2024-43820: Linux kernel DM-RAID flaw in raid_resume could WARN_ON_ONCE when resuming after a table load because MD_RECOVERY_RUNNING may be set without the sync_thread being registered. The fix changes the check to verify sync_thread is non-NULL (instead of only MD_RECOVERY_RUNNING). Affected...

CVE-2024-46711

CVE-2024-46711 affects the Linux kernel MPTCP path-management code. The issue is described as a fix for the ID 0 endpoint usage after multiple subflow re-creations, where local_addr_used/add_addr_accepted counters for initial subflows could be incorrectly decremented for unrelated addresses, prev...

CVE-2024-46795

CVE-2024-46795 affects the Linux kernel when using ksmbd over a reused connection with binding sessions. A null pointer dereference can occur in the SMB 3.1 encryption key path: a reused binding session may leave Preauth_HashValue NULL, which is used as input to crypto_shash_update() during key g...

CVE-2024-46822

CVE-2024-46822 αφορά Linux kernel, prädominantemente为 ARM64 架构，涉及 acpi_map_gic_cpu_interface() 中对 MPIDR 检查失败时导致 cpu_madt_gicc[cpu] 为 NULL 的情况，从而可能造成空指针解引用。修复为对 get_cpu_for_acpi_id() 的调用路径进行强化，确保获取到有效 CPU 条目后再进行索引，避免空指针 dereference。相关公开资料（如 Astra Linux、CIRCL/CVE 记录）确认了该漏洞存在于内核实现并已通过 Harden get_cpu...

CVE-2024-47693

CVE-2024-47693 affects the Linux kernel’s IB/core path. The vulnerability arises when ib_cache_update fails and ib_cache_setup_one exits without cleaning gid_table_setup_one, potentially leaving inconsistent gid-table state and triggering a kernel WARN. The fix enforces proper cleanup by calling ...

CVE-2024-47726

CVE-2024-47726 concerns the Linux kernel F2FS: the fix ensures awaiting all Dio write I/Os before block removal to prevent data overwrite when blocks are reused by inodes. Affected are older kernel builds; patched versions exist (e.g., Debian linux-6.1 with the fix, Astra Linux SE18 bulletin, CBL...

CVE-2024-47749

CVE-2024-47749 affects the Linux kernel RDMA/cxgb4 stack. The vulnerability arises because lookup_atid() may return NULL for invalid/non-existent ATIDs, risking a null-pointer dereference in act_establish() and act_open_rpl(). A NULL check has been added to prevent dereferencing NULL. Remediation...

CVE-2024-49867

In the Linux kernel, CVE-2024-49867 affects the btrfs filesystem when unmounting a filesystem. During close_ctree(), the sequence previously stopped and freed the cleaner kthread before ensuring all fixup workers finished, which could allow a fixup worker to wake a freed task_struct (the cleaner)...

CVE-2024-49897

CVE-2024-49897 concerns the Linux kernel DRM/AMD display path. The issue arises in drm/amd/display where dcn32_enable_phantom_stream can return NULL, leading to a NULL dereference if the returned value is used without checks. The fix adds a check for phantom_stream before use, addressing a NULL_R...

CVE-2024-49982

CVE-2024-49982 concerns the AoE (ATA over Ethernet) driver in the Linux kernel. The vulnerability stems from improper refcount handling of the net_device during packet transmission, leading to potential use-after-free scenarios. The fix, described in the cited CVE notes, consolidates a safer patt...

CVE-2024-50007

CVE-2024-50007 affects the Linux kernel ALSA asihpi/ASIHPI driver. The issue is an out-of-bounds access in a static array populated from firmware data; the index depends on firmware and was not validated. The patch adds a sanity check to ensure the index fits in the array size, preventing potenti...

CVE-2024-50041

The CVE-2024-50041 issue is in the Linux kernel i40e driver, where concurrent updates to vsi->mac_filter_hash could leak memory and leave the mac_filter_hash in an inconsistent state. The fix synchronizes access by wrapping i40e_del_mac_filter() and zeroing vf->default_lan_addr.addr with sp...

CVE-2024-50078

Summary of CVE-2024-50078 (Linux kernel) : The Bluetooth subsystem may fail to call iso_exit() when a module is unloaded after iso_init() has been invoked, leaving the proto registered with proto_register() in an invalid state. This can trigger kernel list corruption bugs and an eventual kernel o...

CVE-2024-50083

CVE-2024-50083 concerns a Linux kernel flaw where MPTCP DSS corruption could occur during large PMTU transmissions. The issue, triggered by Syzkaller under a subflow, is tied to __mptcp_move_skbs_from_subflow in net/mptcp/protocol.c and relates to mptcp_data_ready/move_skbs_to_msk paths leading t...

CVE-2024-53178

Technical details for CVE-2024-53178 are not publicly provided in the supplied documents. The description mentions a cfid leak and a kernel fix, but no concrete affected products, versions, or remediation details in the connected data. Monitor for updates.

CVE-2024-53187

CVE-2024-53187 affects the Linux kernel io_uring subsystem (io_pin_pages in io_uring/memmap.c). The issue arises from overflow/garbage uaddr handling when deriving size, enabling local attackers to trigger a fault; CVSSv3.1 metrics shown include Local attack, Low complexity, Low privileges, with ...

CVE-2024-53236

CVE-2024-53236 (Linux kernel) : The vulnerability occurs in the XDP/AF_XDP path where, if a newly allocated skb for an xsk descriptor is created but its TX metadata options are later deemed invalid, the skb is not freed. This can leak skbs until the send buffer is full, preventing further packet ...

CVE-2024-56565

Technical details about CVE-2024-56565 are not provided in the supplied documents. Monitor for updates.

CVE-2024-56694

Technical details about CVE-2024-56694 are not provided in the supplied documents; public information appears scattered across multiple advisories. Monitor for official updates and patches for confirmation.

CVE-2024-56755

CVE-2024-56755 : In the Linux kernel, the FSCACHE_VOLUME_CREATING path in netfs/fscache has a missing memory barrier between the bit-clearing operation and the wake-up, allowing a wake-up to occur before the clearing is detected and potentially causing an indefinite wait. The triggering sequence ...

CVE-2024-58071

CVE-2024-58071 describes a Linux kernel bug in the team subsystem where adding a device that is already a lower of another device (e.g., veth0 lower than vlan1) could trigger recursive locking and potential deadlock. The provided evidence shows a stack trace and lockdep warning indicating two loc...

CVE-2025-21635

CVE-2025-21635 — Linux kernel (RDS): The vulnerability arises from using current->nsproxy in rds_tcp_rcvbuf/rds_tcp_sndbuf sysctl handling, which can cause a NULL pointer dereference when the current task is exiting and the netns proxy is NULL. The fix switches to obtaining the per-netns conte...

CVE-2025-21835

The CVE-2025-21835 issue affects the Linux kernel USB gadget f_midi MIDI Streaming descriptors. The root cause is incorrect bNumEmbMIDIJack and bLength values in MIDIStreaming endpoint descriptors, which can emit broken descriptors when the port count for IN/OUT differs, leaking uninitialized sta...

CVE-2025-37750

The CVE-2025-37750 entry concerns a use-after-free in the Linux kernel SMB/CIFS client when multichannel decryption is used. The root cause is that after the commits “smb: client: allocate crypto only for primary server” and “smb: client: fix UAF in async decryption”, channels could concurrently ...

CVE-2025-37943

CVE-2025-37943 affects the Linux kernel wireless driver ath12k (DP_RX_DECAP_TYPE_NATIVE_WIFI). The issue is an invalid data access when hardware delivers packets with a length exceeding the maximum native Wi‑Fi header, potentially causing memory corruption in ath12k_dp_rx_h_undecap_nwifi. The adv...