CVE-2024-50211

CVE-2024-50211 is a Linux kernel issue where the udf inode_bmap() function was refactored to handle errors from udf_next_aext() and other error paths. The change allows udf_extend_file() and related code paths to detect errors earlier (e.g., during operations like ftruncate) instead of relying on...

CVE-2024-53047

Connected document MiracleLinux AXSA advisory explicitly notes CVE-2024-53047: in the Linux kernel mptcp: init incorrectly uses RCU when creating a socket, leading to a suspicious RCU usage warning. Root cause: rcu_read_lock() was omitted during mptcp_sched_find() execution; fix implemented by ad...

CVE-2024-56574

CVE-2024-56574 affects the Linux kernel ts2020 I2C driver (ts2020_probe). A NULL pointer dereference occurs when registering an i2c device via sysfs without platform data, because probe uses platform data that may be missing. The root cause is missing platform data during dynamic sysfs registrati...

CVE-2024-56629

Technical details about CVE-2024-56629 are not provided in the supplied documents. The connected sources do not specify affected products, root cause, or fixes. Monitor for updates and vendor advisories.

CVE-2024-57792

CVE-2024-57792 is a Linux kernel vulnerability in the power: supply: gpio-charger path. The issue arises when the lowest charge current limit is forced to be > 0 and a requested limit falls below this, causing an index calculation that can access memory beyond the allocated memory. It has been...

CVE-2024-57926

CVE-2024-57926 is a Linux kernel vulnerability affecting the Mediatek DRM path. The issue arises in the shutdown path where private->all_drm_private[i]->drm may be accessed after a failed mtk_drm_bind, causing a use-after-free detected by KASAN in drm_atomic_helper_shutdown. The root cause ...

CVE-2024-57951

CVE-2024-57951 affects the Linux kernel and describes a race/state handling issue in hrtimers during CPU hotplug/unplug cycles. The vulnerability arises when a CPU transitions from ONLINE toward HOTUNPLUG and back, causing hrtimers_prepare_cpu() not to run and leaving cpu_base.hres_active at 1. A...

CVE-2024-58052

CVE-2024-58052 — Linux kernel (drm/amdgpu) NULL pointer dereference . The bug occurs in atomctrl_get_smc_sclk_range_table: if smu_atom_get_data_table() fails, it returns NULL and is dereferenced later. The description notes the code path is invoked on Polaris chips, and the vbios data table shoul...

CVE-2025-21745

CVE-2025-21745 affects the Linux kernel blk-cgroup subsystem. The root cause was a leak of the subsystem refcount in blkcg_fill_root_iostats() caused by iterating devices with class_dev_iter_(init|next)() without class_dev_iter_exit(). The fix ends the iteration with class_dev_iter_exit(), preven...

CVE-2025-21957

The CVE refers to a Linux kernel issue affecting the SCSI qla1280 driver. When the driver is compiled with DEBUG_QLA1280 and ql_debug_level > 2, a null dereference can cause an oops. The root cause is incorrect handling of debug printing, where sg_next(s) was used instead of sg_dma_len(s). The...

CVE-2025-22011

CVE-2025-22011 describes a Linux kernel issue on ARM/bcm2711 in Raspberry Pi CM4 during s2idle when the xHCI power-domain resume triggers a VPU firmware crash. The root cause is the mixed usage of raspberrypi-power and bcm2835-power power domains; the fix is to avoid the VPU power-domain driver, ...

CVE-2025-22086

Technical details for CVE-2025-22086 are not publicly provided in the supplied documents. The description notes an RDMA mlx5 CQ handling/QP-number matching issue in mlx5_ib_poll_cq, but specific affected versions, exploit details, or remediation steps are not disclosed here. Monitor for updates.

CVE-2025-22126

CVE-2025-22126 affects the Linux kernel md subsystem: a use-after-free can occur when iterating the mddev list during reboot/exit due to racing with deletions. The fix switches to list_for_each_entry and introduces a mddev_put_locked helper to prevent freeing the active mddev under the lock. Affe...

CVE-2025-38637

The CVE CVE-2025-38637 affects the Linux kernel skbprio queue in net_sched when used as a child qdisc under Token Bucket Filter (TBF). The root cause is an overly strict assertion in skbprio enqueue/dequeue that can miscount lengths because TBF may peek at packets without dequeueing when tokens a...

CVE-2026-31670

Summary: CVE-2026-31670 affects the Linux kernel rfkill subsystem. The vulnerability allows a local attacker to create an unbounded number of rfkill events (without consuming them from the rfkill descriptor), potentially leading to memory exhaustion and DoS. The issue is fixed by bounding the num...

CVE-2010-4243

CVE-2010-4243 affects the Linux kernel up to version 2.6.37. The issue is in fs/exec.c where the OOM Killer does not assess stack memory usage of the arrays representing (1) arguments and (2) environment during an exec, enabling a local user to cause memory exhaustion (denial of service) via a cr...

CVE-2011-1020

CVE-2011-1020 affects the Linux kernel (2.6.37 and earlier) where the proc filesystem does not restrict access to /proc after a process execs a setuid program. This can let local attackers obtain sensitive information or cause a denial of service by performing open, lseek, read, or write operatio...

CVE-2013-2852

CVE-2013-2852 refers to a format string vulnerability in the b43_request_firmware path of the Broadcom B43 wireless driver for the Linux kernel (up to 3.9.4). The issue arises from format specifiers in an fwpostfix modprobe parameter, leading to improper construction of an error message and local...

CVE-2017-15126

CVE-2017-15126 affects the Linux kernels fs/userfaultfd.c, where an improper fork handling during event processing can cause a fork event to be removed from an already freed list, i.e., a use-after-free condition. Affected are kernels before 4.13.6 (fixed in 4.13.6), with the issue having high im...

CVE-2017-6353

CVE-2017-6353 affects the Linux kernel up to 4.10.1. It arises from net/sctp/socket.c not properly restricting association peel-off operations during certain wait states, enabling a local attacker to cause a denial of service via an invalid unlock and a double free (linked to an incorrect fix for...

CVE-2018-14612

CVE-2018-14612 affects the Linux kernel (through 4.17.10) with an invalid pointer dereference in btrfs_root_node() when mounting a crafted btrfs image. The root cause is lack of validation in btrfs_read_block_groups (fs/btrfs/extent-tree.c) and missing empty-tree checks in check_leaf (fs/btrfs/tr...

CVE-2020-36313

CVE-2020-36313 affects the Linux kernel before 5.7. The KVM subsystem allows out‑of‑range access to memslots after a deletion (CID-0774a964ef56), impacting arch/s390/kvm/kvm-s390.c, include/linux/kvm_host.h, and virt/kvm/kvm_main.c. Root cause is a memslot handling bug in KVM/s390; exploitation d...

CVE-2021-43057

The CVE-2021-43057 issue affects the Linux kernel prior to 5.14.8, caused by a use-after-free in selinux_ptrace_traceme (SELinux handler for PTRACE_TRACEME). Local attackers could trigger memory corruption and elevate privileges by accessing the subjective credentials of another task. The advisor...

CVE-2021-47221

CVE-2021-47221 (Linux kernel SLUB redzone issue) The provided sources describe a vulnerability in the SLUB allocator where redzones are checked against s->object_size rather than the in-use size. If a cache is created with an object size less than 24, the freelist pointer may be written beyond...

CVE-2021-47416

CVE-2021-47416 refers to a Linux kernel issue where a memory leak in the MDIO bus interface could occur due to incorrect state handling of MDIOBUS_ALLOCATED. The bug arises when device_register() is called after a partial allocation; mdiobus_free() would free only the memory with kfree(dev) inste...

CVE-2021-47580

The connected Astra/Linux advisory documents confirm CVE-2021-47580 affects the Linux kernel component scsi_debug by a bug in min_t() that could yield a stack out-of-bounds condition. The root cause is using int for min_t(), which sign-extends and allows a larger value to overflow the stack when ...

CVE-2022-0382

CVE-2022-0382 is a Linux kernel issue in the TIPC protocol subsystem caused by uninitialized memory when a user sends a TIPC datagram to one or more destinations. It enables a local attacker to read kernel memory (limited to about 7 bytes; read is not controllable). Affected are Linux kernel vers...

CVE-2022-3106

The connected Astra Linux advisory and the CVE entry confirm CVE-2022-3106 affects the Linux kernel up to 5.16-rc6, where ef100_update_stats (drivers/net/ethernet/sfc/ef100_nic.c) does not check the return value of kmalloc(). The lack of a kmalloc() return check is the root cause; without it, all...

CVE-2022-49395

CVE-2022-49395 concerns the Linux kernel, where an out-of-bounds read occurs in LDT setup due to syscall_stub_data() treating data_count as bytes instead of longs. This yields a 128-byte read on the stack (local to swapper/1) and is triggered during LDT entry initialization. Public advisories fro...

CVE-2022-49404

The CVE-2022-49404 entry concerns the Linux kernel RDMA/hfi1 path. The root cause is an integer multiplication overflow during inter-packet delay calculations due to type-conversion order, allowing overflow and an incorrect result. The fix forces one operand to be u64 so the promotion occurs befo...

CVE-2022-49586

Technical details about CVE-2022-49586 are not provided in the connected documents. The sources only reiterate that the Linux kernel fix involved reading of sysctl_tcp_fastopen and a READ_ONCE() addition. Monitor for vendor updates.

CVE-2022-49688

The CVE-2022-49688 entry concerns the Linux kernel afs subsystem. A patch fix for afs_getattr prevents dereferencing vnode->volume when the dynamic root afs superblock has pseudo-inodes without a volume or server, which previously could trigger a NULL pointer dereference when stat’ing a direct...

CVE-2024-26873

The CVE-2024-26873 issue affects the Linux kernel SCSI HISI SAS driver. In scenarios where a PHY is disabled and a 2‑bit ECC error occurs concurrently, a deadlock is triggered between the offline handling and the automatic dump flow. This can lead to hung tasks and deadlocks in the sas_revalidate...

CVE-2024-38601

CVE-2024-38601 : Linux kernel ring-buffer race between readers and resize checks in ring_buffer, causing transient doubly-linked-list inconsistency (page->prev/next) during concurrent resizing and read operations. Root cause described as a swap of reader pages via cmpxchg in rb_get_reader_page...

CVE-2024-41932

CVE-2024-41932 affects the Linux kernel scheduling path, specifically sched_setaffinity. The issue is a race between per-task affinity updates and cpuset updates, which can cause the task affinity to become non-subset of the cpuset. The code falls back to using the cpuset mask, but a WARN is trig...

CVE-2024-42132

The connected MiracleLinux advisory confirms CVE-2024-42132 affecting Linux kernel Bluetooth HCI code. Root cause: hci_le_big_sync_established_evt() could pass a handle larger than HCI_CONN_HANDLE_MAX, leading to freeing an unallocated handle and a warning in hci_conn_del(). The fix adds an upper...

CVE-2024-43865

Technical details for CVE-2024-43865 are not provided in the supplied documents. No information on affected product versions, impact, or remediation is present. Monitor for updates from official advisories.

CVE-2024-46745

CVE-2024-46745 affects the Linux kernel uinput interface. The root cause is an unbounded request for slots via syzkaller, causing memory allocation failure in input_mt_init_slots. The fix limits the allowed number of slots to 100 (extendable if devices require more). Consequences described in the...

CVE-2024-47674

Technical details about CVE-2024-47674 are not publicly provided in the supplied documents; monitor for updates from official advisories.

CVE-2024-47740

The CVE-2024-47740 entry concerns the Linux kernel F2FS: atomic write ioctls (F2FS_IOC_START_ATOMIC_REPLACE, F2FS_IOC_COMMIT_ATOMIC_WRITE, F2FS_IOC_START_ATOMIC_WRITE, F2FS_IOC_ABORT_ATOMIC_WRITE). The root cause is that inode_owner_or_capable() can incorrectly grant write access to processes whe...

CVE-2024-49951

The CVE-2024-49951 entry describes a Linux kernel vulnerability in the Bluetooth MGMT layer where mgmt_index_removed can crash if called while commands are queued on cmd_sync. The issue can lead to a crash trace in mgmt_pending_remove, mgmt_remove_adv_monitor_complete, and hci_cmd_sync_work, due ...

CVE-2024-49981

The CVE-2024-49981 issue concerns the Linux kernel Venus subsystem. A use-after-free could occur when venus_remove runs while there is unfinished work bound to venus_sys_error_handler (core->work) that is coordinated with venus_event_notify and error handling. The race can involve paths such a...

CVE-2024-50167

CVE-2024-50167 involves the Linux kernel be2net memory path where be_xmit() can leak the skb when be_xmit_enqueue() fails, returning NETDEV_TX_OK without freeing resources. The fix adds dev_kfree_skb_any() to free the skb in that code path. Connected advisories confirm the issue is addressed in n...

CVE-2024-50226

CVE-2024-50226 : Linux kernel vulnerability in the CXL port code. A use-after-free during teardown of a region with multiple endpoint decoders (example: decoders 7.0 and 14.0 sharing a switch-decoder 3.0) could allow out-of-order shutdown and leave stale references. The patch ensures: (1) proper ...

CVE-2024-55639

In CVE-2024-55639, the Linux kernel rswitch driver (Renesas) flaw stems from improper use of a saved device-tree node in rswitch_device, where of_node_put() was called after the first reference is used. The node may be released too late/too early across multiple code paths, risking use-after-free...

CVE-2024-56556

CVE-2024-56556 targets the Linux kernel binder: a race in binder_add_freeze_work() where proc->inner_lock is dropped while acquiring node->lock, allowing binder_node_release() to race and trigger a use-after-free. Impact is local privilege escalation/high, as indicated by multiple advisorie...

CVE-2024-56565

Technical details about CVE-2024-56565 are not provided in the supplied documents. Monitor for updates.

CVE-2024-56567

CVE-2024-56567 concerns the Linux kernel: in ad7780_write_raw(), a division by zero can occur if val2 is zero, since DIV_ROUND_CLOSEST() uses val2 without guaranteeing non-zero. The root cause is that while val can be zero, val2 is not specified to be non-zero, allowing a zero division path. A pa...

CVE-2024-56573

CVE-2024-56573 affects the Linux kernel EFI libstub path. The root cause is cmdline_ptr being an out parameter that is not allocated by the callee, while cmdline points into an allocation that should be freed on failure. The fix ensures the correct pointer is freed by passing the appropriate pool...

CVE-2024-56578

Technical details about CVE-2024-56578 are not provided in the connected documents. The initial description summarizes the vulnerability; monitor vendor advisories for full details and remediation.