CVE-2024-50271

CVE-2024-50271 (Linux kernel) : The issue concerns the RLIMIT_SIGPENDING override logic. A fix restores the previous behavior by passing override_rlimit into inc_rlimit_get_ucounts() and skipping the max comparison when override_rlimit is set, making the rlimit enforcement unconditional again. Wi...

CVE-2015-5707

CVE-2015-5707 affects the Linux kernel sg.c sg_start_req function (drivers/scsi/sg.c) where an integer overflow can occur in write requests with a large iov_count, allowing a local attacker to cause a denial of service or potentially other impact on kernel memory. Affected are kernel versions 2.6...

CVE-2016-2186

The CVE-2016-2186 entry concerns the Linux kernel powermate_probe in drivers/input/misc/powermate.c, where kernels prior to 4.5.1 are vulnerable. A physically proximate attacker can trigger a denial of service (NULL pointer dereference and system crash) by sending a crafted endpoints value in a U...

CVE-2016-3070

CVE-2016-3070 affects the Linux kernel: the trace_writeback_dirty_page implementation (in include/trace/events/writeback.h) improperly interacts with mm/migrate.c, allowing a local attacker to trigger a NULL pointer dereference and system crash by triggering a certain page move. The publicly docu...

CVE-2018-1091

The CVE-2018-1091 entry is supported by connected advisories describing Linux kernel vulnerability on POWERPC: In arch/powerpc/kernel/ptrace.c, the function flush_tmregs_to_thread before 4.13.5 can crash a guest kernel when a core dump occurs, due to a missing processor feature check and an erron...

CVE-2019-19252

CVE-2019-19252 affects the Linux kernel (drivers/tty/vt/vc_screen.c) where vcs_write does not prevent write access to vcsu devices up to and including version 5.3.13. This yields a local access vulnerability with partial confidentiality/integity/availability impacts as described in the CVE and ec...

CVE-2022-44032

CVE-2022-44032 affects the Linux kernel up to 6.0.6. The race between cmm_open() and cm4000_detach() in drivers/char/pcmcia/cm4000_cs.c can cause a use-after-free when a PCMCIA device is physically removed while open, enabling a physically proximate attacker to trigger memory corruption. The CVSS...

CVE-2022-49049

CVE-2022-49049 concerns the Linux kernel mm/secretmem path (memfd_secret) where growing a secret memfd via ftruncate could trigger a kernel panic when zeroing pages during truncation. The issue arises because memfd_secret pages are not mapped via the direct map, so page_address() results could be...

CVE-2022-49087

The CVE-2022-49087 entry documents a race in Linux kernel networking code: rxrpc_exit_net() may exit while rxnet->peer_keepalive_timer is still armed, allowing a use-after-free via the rxrpc_peer_keepalive_timeout path. A fix was committed to address this race (in the kernel and mirrored in As...

CVE-2022-49223

The CVE-2022-49223 issue affects the Linux kernel, in the cxl/port path within cxl_core. The root cause is a use-after-free risk in cxl_decoder_release() when it dereferences its parent cxl_port to return an ID to port->decoder_ida, highlighting that the device core only guarantees parent life...

CVE-2022-49548

CVE-2022-49548 concerns a Linux kernel BPF trampoline fix. The vulnerability arises from an overflow risk in bpf_trampoline_get_progs(): the cnt check for BPF_MAX_TRAMP_PROGS did not count BPF_TRAMP_MODIFY_RETURN programs, permitting more than the maximum number of trampoline programs to be attac...

CVE-2022-49565

CVE-2022-49565 concerns the Linux kernel, specifically perf/x86/intel/lbr, where unchecked MSR writes (WRMSR to 0x689) can occur due to an absent TSX quirk application when accessing LBR data. The issue manifests on systems with LBR_FORMAT_EIP_FLAGS2 and, if TSX is disabled, requires a quirk to a...

CVE-2022-49575

CVE-2022-49575: Linux kernel patch fixes a data race in the reader of sysctl_tcp_thin_linear_timeouts by adding READ_ONCE(). The vulnerability arises from concurrent reads/writes to that sysctl during access. Impact is listed as Availability impact (HIGH) with Local attack vector and HIGH complex...

CVE-2022-49695

The CVE-2022-49695 entry affects the Linux kernel igb driver (igb_clean_tx_ring) and is a use-after-free bug triggered when the NIC is in XDP mode. The issue can occur when traffic is redirected to the igb NIC and the device is closed while traffic is flowing. It has been fixed in the kernel (see...

CVE-2022-49748

CVE-2022-49748 relates to the Linux kernel: perf/x86/amd shift of a 32-bit int constant 1 is computed in 32‑bit arithmetic and then passed as a 64‑bit argument, which can overflow when i ≥ 32. The fix uses the BIT_ULL macro for the shift to avoid overflow. Several connected advisories (Astra Linu...

CVE-2022-49908

CVE-2022-49908 affects the Linux kernel Bluetooth path, where a memory leak could occur in L2CAP/vhci_write: when an ACL fragment lacks the L2CAP length, the HCI core may copy the skb to conn->rx_skb and finish processing without freeing it. The provided patches fix this by releasing the relat...

CVE-2023-32254

CVE-2023-32254 affects the Linux kernel ksmbd SMB server, due to missing locking when processing SMB2_TREE_DISCONNECT commands. The flaw can allow code execution in kernel context. Multiple connected sources (Ubuntu USNs 6173/6283, Astra Linux bulletin, CBL-Mariner entries) confirm ksmbd involvem...

CVE-2023-32820

CVE-2023-32820 affects MediaTek wlan firmware. The issue arises from improper input handling that can trigger a firmware assertion, potentially enabling remote denial of service without extra privileges or user interaction. Public details consistently reference a patch ID ALPS07932637 (and ALPS07...

CVE-2023-52905

The CVE-2023-52905 entry affects the Linux kernel, specifically the octeontx2-pf VF driver. Root cause: resources such as mcam entries for Ntuple and hash tables for the tc feature were not freed during driver unbind, causing resource leakage. Impact: potential resource exhaustion on affected sys...

CVE-2023-53140

The CVE-2023-53140 issue affects the Linux kernel SCSI core: the /proc/scsi/${proc_name} directory is now removed earlier to fix a race between module unload/reload. This resolves a memory-leak/ordering problem introduced in 2009 and suppresses a proc_dir_entry warning for scsi_debug. Connected a...

CVE-2024-26623

CVE-2024-26623 relates to the Linux kernel pds_core adminq race condition. The vulnerability arises when multiple threads may access the adminq via pdsc_adminq_isr/pdsc_work_thread()->pdsc_process_adminq or via pdsc_adminq_post, particularly during PCIe reset or fw_down/fw_up cycles, potential...

CVE-2024-26703

CVE-2024-26703 affects the Linux kernel tracing/timerlat: the hrtimer was previously initialized at first timerlat_fd read and destroyed on close, which could trigger a NULL pointer dereference if a user opens and closes timerlat_fd without reading. A fix was implemented to move hrtimer_init to t...

CVE-2024-35984

CVE-2024-35984 is resolved in the Linux kernel by adding a NULL pointer check in __i2c_transfer to prevent a NULL function pointer dereference in i2c: smbus when the designware controller is used in target-only mode. Baruch reported an OOPS in this scenario due to the assumption that a transfer f...

CVE-2024-38611

In CVE-2024-38611, the Linux kernel’s media: i2c: et8ek8 driver vulnerability occurs when the remove callback is defined with __exit; under CONFIG_VIDEO_ET8EK8=y, the remove callback can be discarded on unbind, causing resource leaks. The issue is fixed by compiling the remove callback unconditio...

CVE-2024-39463

CVE-2024-39463 is a Linux kernel vulnerability in 9p: add missing locking around taking dentry fid list. The issue is a use-after-free on a dentry’s d_fsdata fid list when one thread looks up a fid through a dentry while another thread unlinks it. The UAF can occur in functions such as p9_fid_get...

CVE-2024-39484

CVE-2024-39484 - Linux kernel mmc: davinci driver: the remove callback was discarded when built-in and __exit was used, causing resource leaks on unbind/reset. The fix compiles the remove callback unconditionally so it is always executed during driver removal. Connected sources confirm the issue ...

CVE-2024-41059

CVE-2024-41059 (Linux kernel) : A KMSAN-uninitialized value occurred in hfsplus when copying names during extended attributes operations (copy_name in fs/hfsplus/xattr.c). The issue traces to uninitialized memory used during sized_strscpy, leading to a potential information leak or instability wi...

CVE-2024-42134

CVE-2024-42134 : In the Linux kernel, virtio-pci may dereference vp_dev->is_avq when determining admin virtqueues in vp_del_vqs, since vp_dev->is_avq can be empty on some installations (virtio_pci_legacy). The bug could crash guests; the fix is to validate vp_dev->is_avq before use. Conn...

CVE-2024-42243

CVE-2024-42243 relates to the Linux kernel mm/filemap MAX_PAGECACHE_ORDER handling. The issue arises because xarray cannot support arbitrary page cache sizes, triggering WARN_ON in xas_split_alloc on ARM64 when base page size is 64KB (huge pages can be 512MB). The fix implemented patches to LIMIT...

CVE-2024-43098

CVE-2024-43098 is a Linux kernel issue in the i3c subsystem where a deadlock may occur due to double acquisition of i3cbus->lock during i3c_master_register() and related operations. The root cause is calling i3c_device_get_info() (and also i3c_device_info()) instead of using i3cdev->desc-&g...

CVE-2024-43858

CVE-2024-43858 : In the Linux kernel, the JFS filesystem has a fix for an array-index-out-of-bounds in diFree. The IBM bulletin lists this CVE among multiple kernel issues and does not provide a specific remediation version in the supplied documents. Technical detail: the issue is an array-index-...

CVE-2024-44932

CVE-2024-44932 affects the Linux kernel idpf subsystem. The MiracleLinux advisory documents a fix for use-after-free (UAF) conditions that occurred when destroying idpf queues and their associated interrupt vectors; the patch sequence reordered allocation/freeing so queues and vectors are allocat...

CVE-2024-46855

CVE-2024-46855 affects the Linux kernel netfilter nft_socket and is due to sk refcount leaks. The advisory describes a fix that ensures the sk reference is accounted for before return, mitigating potential use-after-free/leak scenarios. Impact is indicated as HIGH availability with network-expose...

CVE-2024-47709

Concretely, CVE-2024-47709 concerns the Linux kernel bcm driver path: after remove_proc_entry() bcm_notify() previously left bo->bcm_proc_read set, causing bcm_release() to trigger an extra remove_proc_entry(). The fix clears bo->bcm_proc_read after remove_proc_entry() in bcm_notify(), prev...

CVE-2024-47809

CVE-2024-47809 (Linux kernel) fixes a possible NULL pointer dereference in the DLM code path when a lock block (lkb) is created but the lkb_resource is not yet assigned (until attach_lkb via validate_lock_args). The issue could occur when request_lock() calls, potentially exposing a crash; anothe...

CVE-2024-49985

CVE-2024-49985 : In the Linux kernel, the i2c-stm32f7 path could deadlock during runtime suspend/resume if a clock controller is attached to the I2C bus (e.g., Versaclock or an AIC32x4 codec). The root cause is a transfer that triggers clk_ops.prepare, which grabs clk.c’s prepare_lock and, after ...

CVE-2024-50179

In CVE-2024-50179, the Linux kernel vulnerability stems from the direct-io read path attempting to mark pages dirty without holding Firmware (Fw) caps, which could lead to an incorrect Fw reference during page dirtying. The fix, as described in the initial document, is a patch that ceph applies: ...

CVE-2024-50220

CVE-2024-50220 affects the Linux kernel fork path where userfaultfd (UFFD) observers can observe a fork. The issue is that the kernel could expose an incomplete VM address space to userland (via VMAs/uffd) when an error occurs during fork. The fix defers khugepaged/KSMM and disables UFFD_EVENT_FO...

CVE-2024-53189

The CVE refers to a Linux kernel wifi nl80211 bounds-check error in nl80211_parse_sched_scan where the cfg80211_scan_request’s channels array uses a __counted_by to n_channels; the patch initializes the memory size with n_channels and updates after filling the array to prevent UBSAN-triggered war...

CVE-2024-56598

Technical details about CVE-2024-56598 (Linux kernel jfs: array-index-out-of-bounds in dtReadFirst) are not provided in the connected documents. Please monitor for updates.

CVE-2024-57981

CVE-2024-57981 affects the Linux kernel USB xHCI code. When a command is queued to the final usable TRB and later aborted, the abort path could dereference a NULL cur_cmd, crashing due to a timer-setup path. The fix prevents timer setup if cur_cmd is NULL, and keeps the doorbell sequence safe. Af...

CVE-2024-58098

CVE-2024-58098 is a Linux kernel vulnerability related to the BPF verifier and the handling of the changes_pkt_data property for global sub-programs. The provided documents describe that calls to certain helpers can cause the verifier to invalidate packet pointers, and that previously global sub-...

CVE-2025-21766

CVE-2025-21766 concerns the Linux kernel IPv4 path. The issue is in __ip_rt_update_pmtu(), which must use Read-Copy-Update (RCU) protection to ensure the net structure it reads cannot disappear during updates. The available connected documents confirm this vulnerability is tied to incorrect locki...

CVE-2025-21781

CVE-2025-21781 is a memory-safety crash in the Batman-adv networking module of the Linux kernel. The issue stems from improper reference counting for batman-adv objects during interface removal, which can lead to a crash when a soft interface goes away before ongoing work completes (notably durin...

CVE-2025-21795

CVE-2025-21795 affects the Linux kernel NFSD component. The vulnerability causes nfsd4_shutdown_callback to hang when nfs4_client is in courtesy state, because cl_cb_inflight remains non-zero and TCP may take ~15 minutes to drop the connection. The provided connected documents indicate a fix in n...

CVE-2025-22087

Technical details about CVE-2025-22087 are not provided in the connected documents. The description outlines kernel stack/array bounds handling but no public advisories, affected products/versions, or mitigations are given here. Monitor for updates.

CVE-2025-23161

CVE-2025-23161 : In the Linux kernel, the PCI vmd driver fixed a lock context issue by changing vmd_dev::cfg_lock from spinlock_t to raw_spinlock_t so it can be used with interrupts disabled in PREEMPT_RT contexts. This avoids a sleeping-lock scenario when accessing PCI config space via pci_ops r...

CVE-2025-37743

CVE-2025-37743 affects the Linux kernel wifi driver ath12k. The vulnerability is a memory leak in HAL_RX_MPDU_START TLV handling when enabling statistics, caused by kzalloc of mon_mpdu not being freed. The fix removes the kzalloc in HAL_RX_MPDU_START TLV handling and also removes standalone monit...

CVE-2025-37841

CVE-2025-37841: In the Linux kernel, the vulnerability affects the pm: cpupower: bench path. If malloc returns NULL due to low memory, the config pointer can be NULL, leading to a NULL dereference. The issue has a tracked fix described as adding a NULL check to prevent dereferencing config when m...

CVE-2013-7445

CVE-2013-7445 : In the Linux kernel DRM subsystem, the Graphics Execution Manager (GEM) object handling (through GEM requests) is mishandled, allowing a context-aware attacker to cause a denial of service via memory exhaustion. The exploitation described uses JavaScript creating many CANVAS eleme...