CVE-2022-41848

CVE-2022-41848 affects the Linux kernel, specifically the PCMCIA driver path drivers/char/pcmcia/synclink_cs.c. The vulnerability is a race condition that can cause a use-after-free when a physically proximate attacker removes a PCMCIA device while an ioctl is in progress, due to a race between m...

CVE-2024-56569

Technical details about CVE-2024-56569 are not publicly provided in the supplied documents. No vendor/product/version specifics, exploit info, or remediation details are present beyond the initial description. Monitor for updates.

CVE-2024-56578

Technical details about CVE-2024-56578 are not provided in the connected documents. The initial description summarizes the vulnerability; monitor vendor advisories for full details and remediation.

CVE-2024-56640

CVE-2024-56640 affects the Linux kernel (net/smc) and describes a use-after-free caused by mismanaged refcount of LGRs/links. The issue manifests as refcount_t: addition on 0 or underflow during concurrent operations, leading to premature resource release and unsafe access. The root cause is repe...

CVE-2024-57924

CVE-2024-57924 affects the Linux kernel and is described in multiple sources as a fix to “fs: relax assertions on failure to encode file handles.” The issue concerns exportfs_encode_fh and related paths used by filesystem code to encode file handles, with legacy users such as nfsd and name_to_han...

CVE-2024-57996

CVE-2024-57996 (Linux kernel) affects net_sched: sch_sfq where a 1-packet limit exposes a faulty queue-length handling in SFQ, leading to an array bounds UBSAN crash when de-queuing after a limit-triggered drop. The issue is triggered when a TBF/SFQ scenario leaves qlen at 1, then a second packet...

CVE-2024-58014

The CVE-2024-58014 entry concerns a Linux kernel vulnerability in the wifi brcmsmac driver. In wlc_phy_iqcal_gainparams_nphy(), a gain range check was missing, risking out-of-bounds access to tbl_iqcal_gainparams_nphy. The issue has a fixed variant where the code now WARN()s on out-of-range value...

CVE-2025-21904

CVE-2025-21904 affects the Linux kernel’s caif_virtio path. The vulnerability stems from a wrong pointer check in cfv_probe: del_vqs() frees virtqueues, and the code previously dereferenced cfv->vdev before confirming NULL. The correct check is cfv->vq_tx for NULL prior to del_vqs(). Upstre...

CVE-2025-21992

CVE-2025-21992 concerns the HID subsystem in the Linux kernel, where a non-functional HID sensor on the HP 5MP Camera (USB 0408:5473) could cause system hangs when accessed via iio_info. The issue was mitigated by adding the affected device to the HID ignore list so its sensor interface is not ex...

CVE-2025-22113

CVE-2025-22113 — Linux kernel ext4 journal update race (mode C) Affects: Linux kernel with ext4 file system; involved components include ext4, JBD2 journaling, and the update path for superblock writes during shutdown/mount transitions. Summary: The issue arises when an error path can cause an in...

CVE-2025-37756

CVE-2025-37756 relates to the Linux kernel TLS stack. The vulnerability arises from allowing a TLS socket disconnect, which can trigger unexpected corner cases in the TLS receive path. The fix is a kernel patch that explicitly disallows disconnect in net/tls, reducing the risk of abusive disconne...

CVE-2025-37757

In CVE-2025-37757, the Linux kernel leak was in tipc_link_xmit where an overloaded backlog transmit queue could cause -ENOBUFS but leave skb lists uncleared, leading to memory leaks during skb allocations. The fix purges the skb list before tipc_link_xmit() returns.

CVE-2025-37798

CVE-2025-37798 affects the Linux kernel networking code. The fix removes the qlen check in fq_codel_dequeue() and codel_qdisc_dequeue() after making sch->qlen_notify() callbacks idempotent. The description indicates the vulnerability related to backlog/queue length handling in qdisc code (code...

CVE-2010-3881

The CVE-2010-3881 issue affects the Linux kernel arch/x86/kvm/x86.c, where several structure members are not initialized in versions prior to 2.6.36.2. This can allow local users to read potentially sensitive data from kernel stack memory via /dev/kvm. The documented fix is in kernel 2.6.36.2 (an...

CVE-2011-0521

The CVE-2011-0521 issue affects the Linux kernel’s dvb_ca_ioctl in drivers/media/dvb/ttpci/av7110_ca.c, where the sign of a certain integer field is not checked in versions before 2.6.38-rc2. This allows local users to cause a denial of service via memory corruption and potentially other unspecif...

CVE-2013-4470

CVE-2013-4470 affects the Linux kernel prior to 3.12 when UDP Fragmentation Offload (UFO) is enabled. The issue arises from improper initialization of certain data structures in ip_ufo_append_data (IPv4) and ip6_ufo_append_data (IPv6), allowing local users to trigger memory corruption and a syste...

CVE-2014-3687

The provided materials confirm CVE-2014-3687 affects the Linux kernel SCTP implementation (net/sctp/associola.c) up to version 3.17.2. The vulnerability allows remote attackers to cause a denial of service (panic) by sending duplicate ASCONF chunks, triggering an incorrect uncork within the side-...

CVE-2014-5077

CVE-2014-5077 affects the Linux kernel’s SCTP code: the function sctp_assoc_update in net/sctp/associola.c (affected in kernel builds up to 3.15.8) can be triggered when SCTP authentication is enabled. An attacker can cause a denial of service via a NULL pointer dereference and kernel OOPS by ini...

CVE-2015-0239

CVE-2015-0239 affects the Linux kernel KVM emulation path (arch/x86/kvm/emulate.c). If a guest OS does not initialize SYSENTER MSRs, em_sysenter can trigger using a 16‑bit code segment to emulate SYSENTER, allowing a guest OS user to gain guest privileges or cause a guest crash. The vulnerability...

CVE-2016-0821

The CVE-2016-0821 issue relates to the LIST_POISON protection in the Linux kernel (include/linux/poison.h) prior to version 4.3. It affected Android 6.0.1 prior to 2016-03-01 and arises because poison values were used without properly accounting for mmap_min_addr, enabling bypass of poison-pointe...

CVE-2016-4805

CVE-2016-4805 describes a use-after-free in the Linux kernel’s drivers/net/ppp/ppp_generic.c before 4.5.2. The flaw allows local attackers to trigger memory corruption and potential DoS (system crash) by removing a network namespace, related to ppp_register_net_channel and ppp_unregister_channel....

CVE-2017-16533

CVE-2017-16533 affects the Linux kernel’s usbhid_parse() in drivers/hid/usbhid/hid-core.c up to and including version 4.13.7; a crafted USB device can cause an out-of-bounds read, leading to local denial of service or a crash. Affected component: HID USB host controller driver (usbhid). Root caus...

CVE-2021-47624

CVE-2021-47624 : In the Linux kernel, a reference-count leak in the rpc_sysfs_xprt_state_change error path can occur when the 3rd argument buf doesn’t match “offline”, “online”, or “remove.” The leak affects rpc_xprt and rpc_xprt_switch objects heightened by prior calls to rpc_sysfs_xprt_kobj_get...

CVE-2022-48912

CVE-2022-48912 concerns a Linux kernel use-after-free in netfilter: the fix is to avoid dereferencing new_hooks after nf_hook_mutex is released in __ nf_register_net_hook, preventing a KASAN read after free. The Astra Linux advisory reproduces the exact description, including the kasan report: Re...

CVE-2022-49107

CVE-2022-49107 affects the Linux kernel in the ceph subsystem. The issue is a memory leak in ceph_readdir when note_last_dentry returns an error. The fix resets last_readdir at the same time and adds a comment explaining why last_readdir isn’t freed when dir_emit returns false. Public references ...

CVE-2022-49145

CVE-2022-49145 affects the Linux kernel's ACPI CPPC parsing of _CPC data. The root cause is an out-of-bounds access when the NumEntries field is less than 2, which could lead to improper access of the Revision element. A fix has been implemented in the kernel to avoid this access. The vulnerabili...

CVE-2022-49538

CVE-2022-49538 affects the Linux kernel’s ALSA jack path in ASoC. The issue arises when input_dev is unregistered while snd_jack_report is called, potentially causing a NULL pointer dereference. The documented fix is to serialize access to input_dev using a mutex. The connected sources confirm th...

CVE-2022-49539

CVE-2022-49539 concerns the Linux kernel driver rtw89 where CAM leaks (address CAM and bssid CAM) can occur during SER L2 reset and ieee80211_restart_hw(). The fix releases CAM regardless of security state during L2 reset and, if AP mode, releases address CAM of all stations before restart. Conne...

CVE-2022-49548

CVE-2022-49548 concerns a Linux kernel BPF trampoline fix. The vulnerability arises from an overflow risk in bpf_trampoline_get_progs(): the cnt check for BPF_MAX_TRAMP_PROGS did not count BPF_TRAMP_MODIFY_RETURN programs, permitting more than the maximum number of trampoline programs to be attac...

CVE-2022-49573

The CVE-2022-49573 entry refers to a Linux kernel data race in the reader of sysctl_tcp_early_retrans. The vulnerability arises when reading sysctl_tcp_early_retrans, which could be modified concurrently. The fix was to add READ_ONCE() to the reader, mitigating the data race. Connected advisories...

CVE-2022-49574

CVE-2022-49574 is a Linux kernel security issue involving a data race in reading the sysctl_tcp_recovery variable within the TCP stack. The root cause is concurrent modification of sysctl_tcp_recovery while it is being read, which could lead to inconsistent reads or memory corruption. The descrip...

CVE-2022-49615

CVE-2022-49615 affects the Linux kernel ASoC rt711-sdca subsystem. A IO error during initial codec settings could dereference a NULL rt711->component before the probe completes, risking kernel panic. The fix changes the code path to use slave->dev instead of component->dev for the early ...

CVE-2023-0122

CVE-2023-0122 : A NULL pointer dereference in the Linux kernel NVMe subsystem (nvmet_setup_auth()) allows a Pre-Auth Denial of Service to be launched remotely over the network. Affected versions are v6.0-rc1 through v6.0-rc3; the issue is fixed in v6.0-rc4. Root cause and impact are described in ...

CVE-2023-32254

CVE-2023-32254 affects the Linux kernel ksmbd SMB server, due to missing locking when processing SMB2_TREE_DISCONNECT commands. The flaw can allow code execution in kernel context. Multiple connected sources (Ubuntu USNs 6173/6283, Astra Linux bulletin, CBL-Mariner entries) confirm ksmbd involvem...

CVE-2023-52589

The CVE 2023-52589 entry concerns the Linux kernel media rkisp1 driver. The issue is a race in IRQ disable logic within rkisp1_isp_stop() and rkisp1_csi_disable(): interrupts are masked and the code assumes the IRQ handler isn’t running, but the handler can still be active when the stop sequence ...

CVE-2023-52885

CVE-2023-52885 affects the Linux kernel SUNRPC component, causing a use-after-free in svc_tcp_listen_data_ready() when a newsock may hold a freed listener sv_sk; the race can occur after the listener socket is freed and before svc_tcp_accept() of the child sock. The fix is to no-op in svc_tcp_lis...

CVE-2023-52927

CVE-2023-52927 affects the Linux kernel netfilter feature: nf_conntrack_in() calling nf_ct_find_expectation() currently removes the exp from the hash table, which could occur before the created connection is confirmed. The patch introduces a mechanism to keep the exp when the tmpl’s status has IP...

CVE-2024-26623

CVE-2024-26623 affects the Linux kernel pds_core adminq. The race allows NULL dereference when adminq is concurrently accessed via pdsc_adminq_isr, pdsc_work_thread_pdsc_process_adminq, or pdsc_adminq_post during fw_down/fw_up cycles; a reference count was added to protect adminq usage and preven...

CVE-2024-36913

Technical details about CVE-2024-36913 are not publicly provided in the supplied documents. Monitor for updates from vendors (Linux kernel, Debian, Amazon Linux, MSRC) for affected versions, impact, and fixes.

CVE-2024-38604

Technical details about CVE-2024-38604 are not publicly provided in the Connected Documents. The Initial Description mentions refinements to the Linux kernel blkdev_iomap_begin EOF check, but there are no vendor/product/version specifics or remediation details in the supplied material.

CVE-2024-40930

The CVE-2024-40930 issue in the Linux kernel affects wifi cfg80211 by failing to validate the HE operation element length before parsing. The fix is to validate the length prior to parsing, which mitigates potential misuse. The advisory indicates the vulnerability has been resolved in the Linux k...

CVE-2024-41016

CVE-2024-41016 affects the Linux kernel OCFS2 filesystem. The vulnerability arises from a missing bounds check before memcmp in ocfs2_xattr_find_entry(), which could allow an out-of-bounds read when processing crafted xattr data in non-indexed xattrs saved with extra space. The issue is tied to O...

CVE-2024-46711

CVE-2024-46711 affects the Linux kernel MPTCP path-management code. The issue is described as a fix for the ID 0 endpoint usage after multiple subflow re-creations, where local_addr_used/add_addr_accepted counters for initial subflows could be incorrectly decremented for unrelated addresses, prev...

CVE-2024-46835

CVE-2024-46835 affects the Linux kernel DRM/AMDGPU component. The root cause is a NULL dereference risk in adev->gfx.imu.funcs triggered by a smatch static checker warning, fixed in the kernel code as part of “drm/amdgpu: Fix smatch static checker warning” mitigation. Impact per the provided m...

CVE-2024-46852

CVE-2024-46852 — Linux kernel CMA heap off-by-one fix : The issue occurred when a mapping larger than the buffer size could be created via mremap, allowing an overflow bypass in dma_buf_mmap_internal. The CMA heap fault handler incorrectly bound the fault offset by 1 when validating the end of th...

CVE-2024-46854

CVE-2024-46854 – Linux kernel net: dpaa padding has been fixed. When sending small packets (

CVE-2024-47408

CVE-2024-47408 affects the Linux kernel net/smc implementation. The vulnerability arises when processing a proposal message: the field smcd_v2_ext_offset in the proposal is provided by the remote client and may not be trusted. If the value of smcd_v2_ext_offset exceeds the maximum, an attacker co...

CVE-2024-47671

The CVE-2024-47671 entry concerns a Linux kernel vulnerability in USBimp: usbtiusmb? The provided connected documents confirm a kernel-infoleak in USB: usbtmc, with the root cause described as a need to clear the data structure before filling fields in usbtmc_write. The fix/workaround is to preve...

CVE-2024-47727

CVE-2024-47727 is a Linux kernel issue (x86/tdx) where userspace could trick the kernel into performing MMIO via #VE by pointing a syscall at an MMIO address. The root cause was the in-kernel MMIO check in handle_mmio() not guaranteeing the target MMIO address was within the kernel before decodin...

CVE-2024-49885

CVE-2024-49885: Linux kernel mm/slub kmalloc redzone issue resolved. Root cause: orig_size handling treated wasted space as redzone and, with init_on_free=1, clears full object->size including metadata, causing check_object() to misclassify the object as redzone. Fix: clear the used area using...