CVE-2025-21680

The CVE-2025-21680 issue affects the Linux kernel’s pktgen code, specifically get_imix_entries, where an insufficient boundary check on the imix_entries array allows out-of-bounds access when a large number of imix entries are passed. This leads to UBSAN reported array-index-out-of-bounds in net/...

CVE-2025-21749

CVE-2025-21749: In the Linux kernel, the Rose network layer is affected. The issue arises in rose_bind() where the socket must be locked to prevent a soft lockup triggered by a repro that binds from multiple threads, as reported by syzbot (rose_loopback_timer()). Affected component: roseBind path...

CVE-2025-21893

CVE-2025-21893 concerns a use-after-free in the Linux kernel key handling. The issue arises when the key’s usage reaches 0 and the garbage collector may touch the key after it could have been freed. The fix changes the reclamation logic from inspecting the key’s refcount in the garbage collector ...

CVE-2025-21909

CVE-2025-21909 concerns the Linux kernel wifi/nl80211 subsystem. Description: when a monitor interface is set with MONITOR_FLAG_COOK_FRAMES together with other MONITOR flags, a sub-interface can be created without the IEEE80211_SDATA_IN_DRIVER bit, since cooked state takes precedence over other s...

CVE-2025-37995

CVSS note: CVE-2025-37995 is a Linux kernel issue with a local exploit vector and a MEDIUM impact rating. The vulnerability arises in module handling of kobjects: in lookup_or_create_module_kobject(), an internal kobject is created using module_ktype, and a call to kobject_put() on the error path...

CVE-2008-2136

The CVE-2008-2136 entry affects the Linux kernel SIT driver: a memory leak in ipip6_rcv (net/ipv6/sit.c) can be triggered by network traffic to a SIT tunnel, due to improper skb handling (pskb_may_pull and kfree_skb) and skb reference count management. Vulnerable on Linux kernel 2.4 up to 2.4.36....

CVE-2014-7975

CVE-2014-7975 : The Linux kernel up to 3.17 allows a local user to trigger DoS by remounting root read-only without CAP_SYS_ADMIN. This occurs in do_remount_sb invoked via unshare/mount flows, clearing MNT_LOCKED and issuing MNT_FORCE unmount. Connected Nessus advisories for Unity Linux reference...

CVE-2014-8160

CVE-2014-8160 : In the Linux kernel, net/netfilter/nf_conntrack_proto_generic.c before 3.18 generates incorrect conntrack entries when handling certain iptables rule sets for SCTP, DCCP, GRE, and UDP-Lite. This can allow remote attackers to bypass intended access restrictions by sending packets w...

CVE-2016-10147

CVE-2016-10147 affects the Linux kernel’s crypto/mcryptd.c. An local attacker can cause a denial of service by using an AF_ALG socket with an incompatible algorithm (demonstrated by mcryptd(md5)), triggering a NULL pointer dereference and system crash. The description notes the issue exists in ke...

CVE-2016-3955

The CVE-2016-3955 issue affects the Linux kernel’s usbip_recv_xbuff path (drivers/usb/usbip/usbip_common.c) prior to version 4.5.3. A crafted length in a USB/IP packet can trigger an out-of-bounds write, enabling remote denial of service (and potentially other impact) without authentication. The ...

CVE-2016-9685

CVE-2016-9685 affects the Linux kernel’s XFS filesystem: multiple memory leaks in error paths within fs/xfs/xfs_attr_list.c can cause local denial of service through memory consumption. Affects kernel versions before 4.5.1; patch released in 4.5.1. References indicate remediation via upgrading to...

CVE-2017-8925

Technical details beyond the description are not provided in the supplied documents. The provided materials confirm CVE-2017-8925 affects the Linux kernel omninet_open and describes a local denial of service due to reference-count mishandling; no further specifics are available here. Monitor for ...

CVE-2019-16714

Summary: CVE-2019-16714 affects the Linux kernel prior to 5.2.14. The vulnerability is in rds6_inc_info_copy (net/rds/recv.c), where tos and flags are not initialized, allowing a remote attacker to read sensitive data from kernel stack memory. This is an information disclosure vulnerability with ...

CVE-2019-19064

CVE-2019-19064 describes a memory leak in Linux kernel’s fsl_lpspi_probe() (drivers/spi/spi-fsl-lpspi.c) that can cause a denial of service via memory consumption by triggering pm_runtime_get_sync() failures, affecting kernels up to 5.3.11. The vulnerability is referenced in multiple advisories (...

CVE-2021-47236

CVE-2021-47236 : Linux kernel vulnerability in net:cdc_eem skb leak during USBNet transmission has been resolved. Root cause: in eem_tx_fixup(), original skb was not freed when skb_copy_expand() failed, allowing a leak if the clone status was not free’d. The fix frees the original skb in eem_tx_f...

CVE-2021-47257

The CVE-2021-47257 issue affects the Linux kernel net: ieee802154 code, where a logic error could cause a NULL pointer dereference when the user sets the addr-type mode incorrectly. The patch fixes this NULL-dereference path in parse_dev_addr. The vulnerability is described as a local issue with ...

CVE-2021-47466

The CVE-2021-47466 issue concerns the Linux kernel SLUB allocator: in kmem_cache_open(), an error-path could leak random_seq data from the slub cache. The fix releases all relevant resources via __kmem_cache_release(), mitigating potential memory leakage. Affected advisories (e.g., Unity Linux UT...

CVE-2022-44033

CVE-2022-44033 affects the Linux kernel up to version 6.0.6, where a race condition in drivers/char/pcmcia/cm4040_cs.c can cause a use-after-free if a physically proximate attacker removes a PCMCIA device while open. The issue is described as a race between cm4040_open() and reader_detach(). The ...

CVE-2022-49107

CVE-2022-49107 affects the Linux kernel in the ceph subsystem. The issue is a memory leak in ceph_readdir when note_last_dentry returns an error. The fix resets last_readdir at the same time and adds a comment explaining why last_readdir isn’t freed when dir_emit returns false. Public references ...

CVE-2022-49129

The CVE-2022-49129 issue affects the Linux kernel’s mt76 mt7921 driver. When the NIC startup fails, the reset_work item could already be scheduled, risking a use-after-free crash during cleanup. The patch ensures the work item is canceled if startup fails, preventing the crash and stabilizing beh...

CVE-2022-49536

The CVE-2022-49536 entry concerns the Linux kernel SCSI LPFC deadlock in I/O completion and abort handling under heavy stress (500+ vports). Affected component is the lpfc driver within the SCSI subsystem. The root cause is a deadlock between the lpfc_cmd->buf_lock and phba->hbalock during ...

CVE-2022-49565

CVE-2022-49565 concerns the Linux kernel, specifically perf/x86/intel/lbr, where unchecked MSR writes (WRMSR to 0x689) can occur due to an absent TSX quirk application when accessing LBR data. The issue manifests on systems with LBR_FORMAT_EIP_FLAGS2 and, if TSX is disabled, requires a quirk to a...

CVE-2022-49574

CVE-2022-49574 is a Linux kernel security issue involving a data race in reading the sysctl_tcp_recovery variable within the TCP stack. The root cause is concurrent modification of sysctl_tcp_recovery while it is being read, which could lead to inconsistent reads or memory corruption. The descrip...

CVE-2022-49575

CVE-2022-49575: Linux kernel patch fixes a data race in the reader of sysctl_tcp_thin_linear_timeouts by adding READ_ONCE(). The vulnerability arises from concurrent reads/writes to that sysctl during access. Impact is listed as Availability impact (HIGH) with Local attack vector and HIGH complex...

CVE-2022-49580

The CVE-2022-49580 entry describes a data-race in the Linux kernel IPv4 path around reading sysctl_fib_multipath_use_neigh, which could be changed concurrently. The referenced fix adds READ_ONCE() to the reader to guard against concurrent modification. Affected software is the Linux kernel (IPv4 ...

CVE-2022-49848

In the Linux kernel, the vulnerability affects the phy: qcom-qmp-combo driver . The root cause was treating the PCS_USB registers as potentially separate from PCS registers, but using the wrong base when no PCS_USB offset is provided. This caused a potential dereference of a NULL pointer during r...

CVE-2022-49928

The CVE-2022-49928 entry corresponds to a Linux kernel vulnerability (SUNRPC) where a null-ptr-deref can occur if the xps sysfs allocation fails, specifically in sysfs_do_create_link_sd during RPC client setup (gssproxy path). The concrete issue is triggered when the xprt_switch sysfs allocation ...

CVE-2023-52935

CVE-2023-52935 refers to a Linux kernel vulnerability in mm/khugepaged related to an ->anon_vma race when removing page tables. The issue could allow concurrent access to page tables during rmap traversal if an anon_vma is shared; the fix adds a re-check after acquiring the mmap lock so there ...

CVE-2023-53052

CVE-2023-53052 is a Linux kernel vulnerability in the CIFS/DFS codebase, where a use-after-free (UAF) bug occurred when DFS root sessions were kept alive in cifs_umount() during the DFS cache refresher. The fix makes DFS root sessions have the same lifetime as DFS tcons to prevent IPCs from acces...

CVE-2024-26696

CVE-2024-26696 (nilfs2 deadlock fix) In the Linux kernel, the nilfs2 fix addresses a hang in nilfs_lookup_dirty_data_buffers() triggered by a deadlock between log writer and writeback during mbind/migrate_pages_batch. The root cause was a conditional wait in nilfs_page_mkwrite() that could allow ...

CVE-2024-26775

CVE-2024-26775 concerns the Linux kernel’s aoe subsystem. The documented issue is a potential deadlock in set_capacity() caused by a locking order: one path holds bdev->bd_size_lock while another holds d->lock, risking a deadlock when an interrupt occurs and the code path re-enters set_capa...

CVE-2024-27417

CVE-2024-27417 affects the Linux kernel IPv6 path inet6_rtm_getaddr, where if userspace provides a correct IFA_TARGET_NETNSID but omits IFA_ADDRESS and IFA_LOCAL, the function could return -EINVAL while leaking an elevated net namespace reference. The issue is described as a potential 4net leak...

CVE-2024-35857

CVE-2024-35857 concerns the Linux kernel and involves two NULL-dereference issues in ICMP handling during icmp_build_probe(). The first defect is a double call to __in_dev_get_rcu(), where the second call could yield NULL, leading to a potential NULL dereference in the conditional path. The secon...

CVE-2024-40983

The CVE-2024-40983 entry affects the Linux kernel TIPc path. Root cause: crypto requests may complete asynchronously and exit the rcu region, risking use-after-free of the skb destination during xfrm input/output handling. The fix is to force a destination dst reference before entering TIPC decry...

CVE-2024-41011

CVE-2024-41011 (Linux kernel): The vulnerability affects the DRM/AMDKFD path where mapping the MMIO HDP page with large pages can expose an incorrect MMIO offset, leaking a 4K area of BAR space used for HDP flush registers when remapping VRAM-related registers. This can occur on systems with page...

CVE-2024-42236

In CVE-2024-42236, the Linux kernel vulnerability affects usb: gadget: configfs, specifically usb_string_copy(), where an userspace string with length zero can bypass validation, causing an OOB read (str[0-1] before check) followed by an OOB write (str[0-1] = '\0'). The issue is caused by insuffi...

CVE-2024-45009

CVE-2024-45009 affects the Linux kernel MPTCP implementation. The root cause was an incorrect decrement of add_addr_accepted on RM_ADDR processing, before attached subflows exist for ADD_ADDR. The fix adds a guard (WARN_ON_ONCE) and changes the decrement logic to occur only if the attached subflo...

CVE-2024-47709

Concretely, CVE-2024-47709 concerns the Linux kernel bcm driver path: after remove_proc_entry() bcm_notify() previously left bo->bcm_proc_read set, causing bcm_release() to trigger an extra remove_proc_entry(). The fix clears bo->bcm_proc_read after remove_proc_entry() in bcm_notify(), prev...

CVE-2024-47752

CVE-2024-47752 concerns the Linux kernel media/vcodec/mediatek H264 stateless decoder. The provided description states that a smatch static checker warning in vdec_h264_req_if.c led to a kernel crash when the framebuffer pointer (fb) was NULL. The vulnerability is within the Mediatek vcodec path ...

CVE-2024-49925

Technical details about CVE-2024-49925 are not publicly provided in the supplied documents. Monitor for updates from vendors/developers for affected products, impacted versions, exposure, and remediation guidance.

CVE-2024-49965

CVE-2024-49965 concerns the Linux kernel OCFS2 subsystem. The vulnerability arose from an unreasonable unlock in ocfs2_read_blocks, producing a bad unlock balance. A patch series titled “Misc fixes for ocfs2_read_blocks” (v5) fixes two issues in ocfs2_read_blocks(): the first addresses the unlock...

CVE-2024-50090

CVE-2024-50090 is tied to the Linux kernel DRM XE driver. The Connected document describes a bug in __xe_bb_create_job() where a buffer copy operation lacks input data validation, enabling a vulnerability that could trigger a service failure. The Initial description also notes a separate issue in...

CVE-2024-50271

CVE-2024-50271 (Linux kernel) : The issue concerns the RLIMIT_SIGPENDING override logic. A fix restores the previous behavior by passing override_rlimit into inc_rlimit_get_ucounts() and skipping the max comparison when override_rlimit is set, making the rlimit enforcement unconditional again. Wi...

CVE-2024-50290

CVE-2024-50290 is a Linux kernel vulnerability affecting the media: cx24116 driver. The issue arises when reading SNR registers: if the read fails, a negative value could be returned, causing an underflow. The fix prevents that underflow by ensuring reading SNR registers does not produce a negati...

CVE-2024-56569

Technical details about CVE-2024-56569 are not publicly provided in the supplied documents. No vendor/product/version specifics, exploit info, or remediation details are present beyond the initial description. Monitor for updates.

CVE-2024-56651

CVE-2024-56651 affects the Linux kernel hi311x CAN driver (hi3110_can_ist). The issue is a potential use-after-free: error count data added to the CAN frame after netif_rx() could reference a skb that is freed or reused. Root cause: reporting of rxerr/txerr persisted during non-bus-off operation,...

CVE-2024-56675

CVE-2024-56675 affects the Linux kernel: UAF can occur when a non-sleepable BPF program is attached to an uprobe and freed via normal RCU, because Uprobes use bpf_prog_run_array_uprobe() under tasks-trace-RCU protection. The fix explicitly waits for a tasks-trace-RCU grace period after removing t...

CVE-2024-56712

CVE-2024-56712 : In the Linux kernel udmabuf code, a memory leak could occur on the last export_udmabuf() error path when dma_buf_fd() fails and a dma_buf has already been created. The root cause was in export_udmabuf()’s error handling, where the dma_buf could be torn down without freeing the co...

CVE-2024-57974

The CVE-2024-57974 entry describes a race in the Linux kernel UDP path: if a UDP socket changes its local address during a receive after connect(), a secondary hash/tuple hash update may not complete in time, causing lookups to fail and potentially returning ECONNREFUSED. The issue arises from th...

CVE-2024-58001

Technical details about CVE-2024-58001 are not publicly provided in the supplied documents. Monitor for updates from official advisories; the sources reference related advisories but do not reveal vulnerability specifics, affected products, or fixes.