CVE-2024-47143

CVE-2024-47143 relates to the Linux kernel and describes a potential deadlock in the dma-debug flow caused by holding radix_lock while dma_hash_entry locks are held. The fix, as documented in the connected sources, is to perform dma_entry_free() after put_hash_bucket() inside check_unmap() to pre...

CVE-2024-47709

Concretely, CVE-2024-47709 concerns the Linux kernel bcm driver path: after remove_proc_entry() bcm_notify() previously left bo->bcm_proc_read set, causing bcm_release() to trigger an extra remove_proc_entry(). The fix clears bo->bcm_proc_read after remove_proc_entry() in bcm_notify(), prev...

CVE-2024-49951

CVE-2024-49951 is a Linux kernel Bluetooth MGMT issue: when mgmt_index_removed is invoked while there are pending commands in cmd_sync, the code attempts to dequeue user_data from cmd_sync and can crash, as shown by the trace path in mgmt_pending_remove and hci_cmd_sync_work. The vulnerability is...

CVE-2024-50061

CVE-2024-50061 affects the Linux kernel’s i3c: master cdns_i3c_master driver. The root cause is a use-after-free race: cdns_i3c_master_hj_work scheduled in cdns_i3c_master_probe can run after cdns_i3c_master_remove frees master->base via i3c_master_unregister. The documented fix is to cancel t...

CVE-2024-50211

Technical details about CVE-2024-50211 (affected component, root cause, impact, or fix) are not provided in the supplied connected documents. Monitor for updates from upstream advisories or security bulletins.

CVE-2024-50226

CVE-2024-50226 : Linux kernel vulnerability in the CXL port code. A use-after-free during teardown of a region with multiple endpoint decoders (example: decoders 7.0 and 14.0 sharing a switch-decoder 3.0) could allow out-of-order shutdown and leave stale references. The patch ensures: (1) proper ...

CVE-2024-55639

CVE-2024-55639 : In the Linux kernel, the net: renesas: rswitch driver incorrectly uses a saved device-tree node after it has been put (via of_node_put()) in multiple locations. The node is stored in rswitch_device and used by several code paths, so calling of_node_put() after first use leads to ...

CVE-2024-56573

Technical details for CVE-2024-56573 are not provided in the connected documents. The description mentions a Linux kernel fix in efi/libstub, but no vendor/product/version specifics are disclosed here. Monitor official advisories for updates.

CVE-2024-56581

CVE-2024-56581 affects the Linux kernel’s Btrfs code. The issue is a use-after-free in btrfs_ref_tree_mod() after inserting a new ref entry into a block entry’s rb-tree when an unexpected action (BTRFS_DROP_DELAYED_REF) is encountered. The error path freed the ref entry without removing it from t...

CVE-2024-56712

CVE-2024-56712 : In the Linux kernel udmabuf code, a memory leak could occur on the last export_udmabuf() error path when dma_buf_fd() fails and a dma_buf has already been created. The root cause was in export_udmabuf()’s error handling, where the dma_buf could be torn down without freeing the co...

CVE-2024-56720

Technical details for CVE-2024-56720 are not publicly available in the provided documents. Monitor for updates from vendors and security trackers.

CVE-2024-57802

CVE-2024-57802 concerns the Linux kernel netrom path. The issue arises when sending raw messages through ieee802154, where nr_route_frame may read uninitialized data due to not validating the skb buffer length. The root cause is a missing skb->len check before accessing skb->data in nr_rout...

CVE-2024-57882

CVE-2024-57882 affects the Linux kernel MPTCP path; root cause is buggy TCP option length handling, where ADD_ADDR must be mutually exclusive with DSS. Exploitation details not fully disclosed in provided docs, but SYZ reports indicate corruption risk (shinfo nr_frags). Patches exist in stable/li...

CVE-2024-58237

CVE-2024-58237 concerns a Linux kernel BPF tail-call vulnerability. The issue arises because tail-called programs could run helpers that invalidate skb packet pointers; the advisory recommends treating each tail call as potentially invalidating packet pointers. The fix alters bpf_helper_changes_p...

CVE-2025-21680

The CVE-2025-21680 issue affects the Linux kernel’s pktgen code, specifically get_imix_entries, where an insufficient boundary check on the imix_entries array allows out-of-bounds access when a large number of imix entries are passed. This leads to UBSAN reported array-index-out-of-bounds in net/...

CVE-2025-21863

CVE-2025-21863 — Linux kernel io_uring opcode speculation : The vulnerability arises from the io_uring path where sqe->opcode is used for different tables, allowing speculative execution issues. The fix sanitises sqe->opcode to prevent speculation. Affected product: Linux kernel with io_uri...

CVE-2025-23161

CVE-2025-23161 : In the Linux kernel, the PCI vmd driver fixed a lock context issue by changing vmd_dev::cfg_lock from spinlock_t to raw_spinlock_t so it can be used with interrupts disabled in PREEMPT_RT contexts. This avoids a sleeping-lock scenario when accessing PCI config space via pci_ops r...

CVE-2025-37995

CVSS note: CVE-2025-37995 is a Linux kernel issue with a local exploit vector and a MEDIUM impact rating. The vulnerability arises in module handling of kobjects: in lookup_or_create_module_kobject(), an internal kobject is created using module_ktype, and a call to kobject_put() on the error path...

CVE-2025-38637

The CVE CVE-2025-38637 affects the Linux kernel skbprio queue in net_sched when used as a child qdisc under Token Bucket Filter (TBF). The root cause is an overly strict assertion in skbprio enqueue/dequeue that can miscount lengths because TBF may peek at packets without dequeueing when tokens a...

CVE-2009-4538

CVE-2009-4538 affects the Linux kernel e1000e driver (netdev.c) up to and including version 2.6.32.3. The issue is an improper check of the Ethernet frame size when frames exceed the MTU, allowing a remote attacker to influence the system via crafted packets. The impact is described as unspecifie...

CVE-2011-1020

CVE-2011-1020 affects the Linux kernel (2.6.37 and earlier) where the proc filesystem does not restrict access to /proc after a process execs a setuid program. This can let local attackers obtain sensitive information or cause a denial of service by performing open, lseek, read, or write operatio...

CVE-2016-3689

CVE-2016-3689 affects the Linux kernel: the ims_pcu_parse_cdc_data function in drivers/input/misc/ims-pcu.c is exploitable via a USB device with no master/slave interfaces, allowing a physically proximate attacker to trigger a denial of service (system crash). A patch is available in kernel 4.5.1...

CVE-2017-18222

CVE-2017-18222 affects the Linux kernel before 4.12, where the Hisilicon Network Subsystem (HNS) ETH_SS_PRIV_FLAGS handling during sset_count retrieval can cause local denial of service via buffer overflow/memory corruption and potentially other impacts due to incompatibility with ethtool_get_str...

CVE-2017-18255

CVE-2017-18255 affects the Linux kernel: the perf_cpu_time_max_percent_handler in kernel/events/core.c (pre-4.11) can be triggered by a large value, causing a denial of service via integer overflow (and potential unspecified impact). It requires local access. A fix is available in kernel 4.11 and...

CVE-2019-11683

CVE-2019-11683 affects the Linux kernel 5.x prior to 5.0.13, caused by mishandling of padded UDP packets in udp_gro_receive_segment (net/ipv4/udp_offload.c). This can enable a remote attacker to cause a denial of service (slab-out-of-bounds memory corruption) and potentially other impact via UDP ...

CVE-2021-43057

The CVE-2021-43057 issue affects the Linux kernel prior to 5.14.8, caused by a use-after-free in selinux_ptrace_traceme (SELinux handler for PTRACE_TRACEME). Local attackers could trigger memory corruption and elevate privileges by accessing the subjective credentials of another task. The advisor...

CVE-2021-47191

CVE-2021-47191 affects the Linux kernel’s SCSI debug path (scsi_debug) and fixes an out-of-bounds read in resp_readcap16 caused by treating alloc_len as a signed int, which could lead to an OOB in sg_copy_buffer when handling large allocation lengths. The root cause is the incorrect type for allo...

CVE-2022-3111

Mode C detected: CVE-2022-3111 affects the Linux kernel up to 5.16-rc6. The vulnerability is described as free_charger_irq() in drivers/power/supply/wm8350_power.c failing to free WM8350_IRQ_CHG_FAST_RDY, which is registered in wm8350_init_charger(). The Astra Linux bulletin repeats the exact des...

CVE-2022-42432

The CVE-2022-42432 issue affects Linux Kernel 6.0-rc2, caused by uninitialized memory access in nft_osf_eval. Local attackers with high privileges can disclose sensitive information and, in combination with other vulnerabilities, may execute code in the kernel context. Public sources (including A...

CVE-2022-48883

CVE-2022-48883 (Linux kernel) affects net/mlx5e IPoIB: Block PKEY interfaces and occurs when a user configures more rx queues for an interface than the parent supports. The child interface reuses the parent’s receive channels, so the rx-queue count must be large enough to avoid out-of-bounds acce...

CVE-2022-48934

CVE-2022-48934 affects the Linux kernel code for nfp: flower. The issue is a leak in nfp_tunnel_add_shared_mac() related to ida_simple_get() returning an id in 0..NFP_MAX_MAC_INDEX (0xff) and the error path requiring the invalid ida_idx not to be within that range. The fix is to set the invalid v...

CVE-2022-49029

CVE-2022-49029 concerns the Linux kernel hwmon IBM PEX driver. If ibmpex_find_sensors() fails during ibmpex_register_bmc(), the data object is freed but data->list is not removed from driver_data.bmc_data, risking a use-after-free. The fixed code removes the entry from driver_data.bmc_data bef...

CVE-2022-49226

CVE-2022-49226 affects the Linux kernel's asix USB Ethernet driver. The root cause is that asix_read_cmd() can read fewer bytes than requested, potentially leaving callers with uninitialized data. The fix adds a sanity check to ensure the number of bytes read matches the request and propagates er...

CVE-2022-49235

CVE-2022-49235 corresponds to a Linux kernel issue where ath9k_htc uninitialized fields caused two KMSAN bugs. The reports state that in htc_connect_service() svc_meta_len and pad were not initialized (suggesting setting svc_meta_len to 0 when no service data is present) and in htc_issue_send() t...

CVE-2022-49329

CVE-2022-49329: In the Linux kernel (vdpa/vduse), a NULL pointer dereference can occur when reading the control device’s msg_timeout attribute via sysfs because the control device lacks drvdata. The fix, per the provided description, is to stop creating the unneeded attribute for the control devi...

CVE-2022-49588

CVE-2022-49588 corresponds to a data-race in the Linux kernel’s TCP sysctl_migrate_req reader. The vulnerability arises from concurrent reading of sysctl_tcp_migrate_req, which could be changed during access. The fix adds READ_ONCE() to the readers to prevent races. Affected component is the kern...

CVE-2022-49596

The CVE-2022-49596 entry targets the Linux kernel vulnerability in the sysctl_tcp_min_snd_mss reader. The publicly provided details state a data race occurs when reading sysctl_tcp_min_snd_mss, as it can be changed concurrently. The fix introduced is to add READ_ONCE() to the readers of this sysc...

CVE-2022-49715

The CVE-2022-49715 issue affects the Linux kernel’s irqchip/gic-v3 code, specifically gic_populate_ppi_partitions. The root cause is a refcount leak caused by of_find_node_by_phandle() returning a node pointer with an elevated refcount that was not balanced with of_node_put(). The documented fix ...

CVE-2022-49853

The CVE-2022-49853 entry documents a Linux kernel macvlan memory-leak in macvlan_common_newlink when macvlan mode is set to source. If register_netdevice() errors during macvlan_changelink_sources(), the resources created by macvlan_changelink_sources() are not cleaned up, leading to a memory lea...

CVE-2022-49872

The CVE-2022-49872 issue affects the Linux kernel’s net: gso path. A GRO packet can have its gso_size changed and the existing assumption that checking the first list_skb member is sufficient is violated when skbs on the frag_list have differing head_frag heads. This can trigger a BUG_ON in skb_s...

CVE-2023-23004

CVE-2023-23004 affects Linux kernel before 5.19. In drivers/gpu/drm/arm/malidp_planes.c, get_sg_table return value is misinterpreted: code expects NULL in error case, but it is an error pointer. This could lead to a kernel crash/undefined behavior as described in the vendor advisories (e.g., Chan...

CVE-2023-26605

CVE-2023-26605 affects Linux kernel 6.0.8: a use-after-free in inode_cgwb_move_to_attached (fs/fs-writeback.c) related to __list_del_entry_valid. Documentation indicates CVSS v3.1 base score 7.8 ( HIGH ) with local attack vector, low complexity, and no user interaction. The vulnerability is a loc...

CVE-2023-38431

The CVE-2023-38431 issue affects the Linux kernel ksmbd (fs/smb/server/connection.c) prior to 6.3.8, where NetBIOS header length is not validated against SMB header sizes, via pdu_size in ksmbd_conn_handler_loop, causing an out-of-bounds read. Remediation: upgrade to kernel 6.3.8 or later (per Ch...

CVE-2023-52529

CVE-2023-52529 refers to a Linux kernel vulnerability affecting the Sony HID path, where a memory leak could occur in sony_probe() if an error happens after usb_alloc_urb(). The fix ensures usb_free_urb() is called on error paths after a successful usb_alloc_urb(), addressing the leak. Connected ...

CVE-2023-52609

CVE-2023-52609 : Linux kernel binder race between mmput() and do_exit() causes delayed cleanup when Task A pins a remote mm and Task B exits. The race can defer death notifications until a binder event wakes Task A. The patch uses mmput_async() to schedule cleanup work in the mm->async_put_wor...

CVE-2023-52764

CVE-2023-52764 affects the Linux kernel media driver gspca cpia1 (drivers/media/usb/gspca/cpia1.c) with a shift-out-of-bounds in set_flicker triggered when sd->params.exposure.gain grows beyond int bit-width. The issue stems from attempting a left-shift that exceeds the size of an int, causing...

CVE-2023-52935

CVE-2023-52935 refers to a Linux kernel vulnerability in mm/khugepaged related to an ->anon_vma race when removing page tables. The issue could allow concurrent access to page tables during rmap traversal if an anon_vma is shared; the fix adds a re-check after acquiring the mmap lock so there ...

CVE-2023-53034

CVE-2023-53034 is addressed in the Linux kernel ntb_hw_switchtec driver with a fix for a shift-out-of-bounds condition in switchtec_ntb_mw_set_trans. The root cause was that ntb_mw_clear_trans() could pass 0 to both addr and size, causing xlate_pos to become negative and triggering a UBSAN shift-...

CVE-2023-53140

The CVE-2023-53140 issue affects the Linux kernel SCSI core: the /proc/scsi/${proc_name} directory is now removed earlier to fix a race between module unload/reload. This resolves a memory-leak/ordering problem introduced in 2009 and suppresses a proc_dir_entry warning for scsi_debug. Connected a...

CVE-2024-24861

CVE-2024-24861 affects the Linux kernel xc4000 media driver (xc4000_get_frequency) with a race condition that can cause a return-value overflow, potentially leading to malfunction or denial of service. Data from multiple sources confirms the issue originates in the xc4000 driver and is tied to Li...