CVE-2023-52653

CVE-2023-52653 : Linux kernel SUNRPC fix for a memory leak in gss_import_v2_context. The ctx->mech_used.data allocated via kmemdup was not freed on error, nor by gss_import_v2_context or its caller. The patch adjusts the final call of gss_import_v2_context to gss_krb5_import_ctx_v2 to prevent ...

CVE-2024-27005

The CVE-2024-27005 issue affects the Linux kernel interconnect driver: icc_lock and icc_bw_lock separation allowed races on icc_node::req_list, potentially leading to use-after-free or invalid pointer scenarios when icc_set_bw() iterates while req_list may be modified. The fix requires holding ic...

CVE-2024-56589

CVE-2024-56589 affects the Linux kernel’s scsi/hisi_sas path, where on no-forced preemption kernels an expander connected to 12 SAS SSDs could trigger a watchdog soft lockup due to interrupt handling on a single CPU. The provided details confirm the vulnerability’s root cause as a missing cond_re...

CVE-2024-56707

The connected Astra Linux and MS/ENISA/Nessus entries confirm CVE-2024-56707 affects the Linux kernel octeontx2-pf driver and states the root cause as missing error pointer checks after otx2_mbox_get_rsp in otx2_dmac_flt.c. A fix adds error pointer validation after the call. The remediation is th...

CVE-2024-56630

The CVE-2024-56630 issue affects the Linux kernel’s ocfs2 subsystem: when ocfs2_get_init_inode() fails, inodes could be leaked due to not iput()'ing after new_inode() succeeds and dquot_initialize() fails. The syzbot trace mentions busy inodes after unmount for commit 9c89fe0af826 and that the er...

CVE-2024-53164

In modes: NORMAL, this CVE (CVE-2024-53164) concerns the Linux kernel net/sched subsystem. The technical detail provided across connected advisories confirms the vulnerability lies in the ordering of qlen adjustments: sch->q.qlen changes around qdisc_tree_reduce_backlog() must occur before cal...

CVE-2024-56644

CVE-2024-56644 concerns a leak in the Linux kernel IPv6 path: when an ICMPv6 MTU-change creates an expired exception dst in the IPv6 exception table, and a TCP connection uses that dst, the dst may leak as its refcount becomes unbalanced after ip6_negative_advice() runs. The description specifies...

CVE-2024-57800

CVE-2024-57800 affects the Linux kernel in ALSA memalloc handling. When DMA API debugging is enabled, it may warn about a device driver failing to check a DMA address map, e.g. device address 0x00000000ffff0000, due to explicit address checks instead of using dma_mapping_error(). The documented f...

CVE-2024-56539

CVE-2024-56539 refers to a Linux kernel issue where mwifiex memcpy() would write across a field due to a one-element array, triggering a field-spanning write warning in mwifiex_config_scan(). The fix replaces the one-element array with a flexible-array member in struct mwifiex_ie_types_wildcard_s...

CVE-2024-53214

CVE-2024-53214 concerns the Linux kernel VFIO/PCI logic for hiding PCIe extended capabilities. The issue occurred when hiding the first-in-list capability (unknown or hidden on purpose) by zeroing the capability ID/version while preserving Next, which is safe in general but failed if cap_id excee...

CVE-2024-57888

Technical details for CVE-2024-57888 are not publicly available in the provided documents. Monitor vendor advisories and kernel commit references for remediation context and updates.

CVE-2024-53172

CVE-2024-53172 (Linux kernel, UBI fastmap) : The issue arises in the fast attaching path where alloc_ai() could be invoked twice with the same slab cache name 'ubi_aeb_slab_cache', triggering a kernel WARNING "kmem_cache_create_args". The root cause is duplicate slab cache names during fastmap at...

CVE-2024-56788

CVE-2024-56788 concerns the Linux kernel net/ethernet/oa_tc6 driver. The vulnerability arises from a race between two tx skb pointers: ongoing_tx_skb (the skb currently being transmitted) and waiting_tx_skb (the next skb queued from the network stack). In specific sequences, the SPI thread can mo...

CVE-2025-21647

The CVE-2025-21647 vulnerability affects the Linux kernel’s sched: sch_cake path, where an underflow in per-host bulk flow counters could cause out-of-bounds memory access. A fix adds bounds-checking around all accesses to per-host bulk flow counters via helper functions, moving flow mode checks ...

CVE-2024-56705

CVE-2024-56705 concerns the Linux kernel where ia_css_3a_statistics_allocate() fails to check the allocation result of the rgby_data memory, potentially triggering the assertion at ia_css_s3a_hmem_decode() if rgby_data allocation fails. The public technical details in connected sources indicate t...

CVE-2025-21704

CVE-2025-21704 affects the Linux kernel USB CDC-ACM (cdc_acm) path. The root cause is improper handling of fragmented control transfers: if the first fragment is smaller than struct usb_cdc_notification, computing expected_size can underflow as fragments arrive, leading to memory corruption when ...

CVE-2024-53183

CVE-2024-53183 concerns a Linux kernel vulnerability: in uml/net handling, the code previously used drvdata during device release, but drvdata may not exist at release time. The fix is to retrieve the uml_net instance with container_of() instead of drvdata, preventing a crash when removing a netw...

CVE-2024-57893

The CVE-2024-57893 issue affects the Linux kernel ALSA: seq: oss component, where SysEx messages split into 6-byte packets were processed by the OSS layer with a race-prone access to an internal buffer, potentially causing out-of-bounds access. A mutex-based serialization fix was introduced to gu...

CVE-2025-21662

CVE-2025-21662: In the Linux kernel, net/mlx5: Fix variable not being completed when function returns. The issue could cause a hang of the issuing task if cmd_alloc_index() fails and cmd_work_handler() does not complete ent->slotted before returning. Affected component is mlx5_core/mlx5e, with...

CVE-2025-21701

CVE-2025-21701 : In the Linux kernel, a race existed between device unregistration and ethnl operations (ethnl_set_channels, ethtool checks) that could occur when a network device is being unregistered while its channels are modified. The issue arose because unregister_netdevice_many_notify could...

CVE-2024-53198

CVE-2024-53198 affects the Linux kernel xenbus_dev_probe() path. The issue: when probe() fails (err non-zero) in xenbus_dev_probe(), resources allocated earlier by drv->probe(dev, id) were not released, causing a resource/reference count leak. The patch adds a fail_remove block before fail_put...

CVE-2024-56566

The CVE-2024-56566 issue affects the Linux kernel mm/slub code. If alloc_consistency_checks fails during slab allocation, objects in that slab can be marked as used and the slab removed from the partial list, but later freeing an object could trigger remove_full() on a slab that is neither in the...

CVE-2024-53690

CVE-2024-53690 (Linux kernel) describes a nilfs2 inode handling flaw where a deleted inode could be mis-reused, leading to inode duplication and i_nlink underflow during rmdir. The fix involves guarding against deleted inodes by verifying i_nlink in nilfs_iget() and reclaiming the inode when its ...

CVE-2024-53219

CVE-2024-53219 affects the Linux kernel virtiofs direct IO path when inserting a large module (e.g., 10 MB) with virtio-fs cache disabled. The root cause is a kernel memory allocation/IO path: kernel_read_file reads the module into a 10 MB vmalloc buffer, fuse_direct_io passes a 10 MB block as a ...

CVE-2024-53153

CVE-2024-53153 in the Linux kernel describes a crash condition for Qualcomm PCIe endpoints when PERST# is asserted and the host disables refclk. The issue arises because endpoint cleanup functions (e.g., dw_pcie_ep_cleanup() and pci_epc_deinit_notify()) previously ran during PERST# assert, while ...

CVE-2024-56616

CVE-2024-56616 (Linux kernel) affects drm_dp_mst sideband handling. The MST sideband message body length check was fixed to require at least 1 byte (accounting for the message CRC). Without this, a header with a valid header CRC but body length 0 could trigger memory corruption in drm_dp_sideband...

CVE-2024-53190

The CVE 2024-53190 entry describes a Linux kernel issue in the Realtek RTLWiFi driver, where the efuse read path (read_efuse/read_efuse_byte during rtl8192cu probe) could loop up to 10k times on failure, causing extended system hang. The mitigated behavior is to drastically reduce retry attempts ...

CVE-2024-56576

CVE-2024-56576 affects the Linux kernel media: i2c tc358743 driver. The issue occurs when an error happens in probe(): the previously alarmed polling timer is not removed, causing a timer callback on freed arguments and a crash. A patch fixes the crash by removing the polling timer in the probe e...

CVE-2024-53685

CVE-2024-53685 concerns the Linux kernel Ceph path construction: when the full path built by ceph_mdsc_build_path() exceeds PATH_MAX, the function enters an endless retry loop, effectively DoS-ing the system. The description notes the fix is to remove the retry and fail with ENAMETOOLONG instead,...

CVE-2025-21646

In CVE-2025-21646, the afs issue in the Linux kernel is resolved by enforcing a maximum cell name length of 253 bytes. The kafs filesystem previously allowed up to 256 bytes, but creating a directory under /proc/net/afs/ with that name hit procfs’ 255-byte filename limit, causing a warning. The D...

CVE-2024-56701

CVE-2024-56701: Linux kernel powerpc/pseries code fixed a sleeping-lock issue by changing dtl_access_lock to a rw_semaphore because kmalloc() can sleep while held. Root cause: a non-sleeping lock protected code path that sleeps, causing a potential sleep in atomic context. Impact is local (LOCAL)...

CVE-2024-57948

Summary (CVE-2024-57948) : In the Linux kernel, the mac802154 subsystem had a vulnerability where, during removal of an IEEE 802.15.4 network interface, a list-del operation could run on a stale sdata entry if local interfaces had not been validated first. This could allow a corrupted list path t...

CVE-2024-56592

CVE-2024-56592 (Linux kernel) relates to BPF hash table management for maps. The vulnerability arises when a map element is freed while holding a bucket lock, triggering a lockdep warning due to bpf_map_fd_put_ptr() calling bpf_map_free_id() which acquires map_idr_lock. The fix defers free_htab_e...

CVE-2024-41935

CVE-2024-41935 (Linux kernel, f2fs) : The issue concerns the f2fs extent tree shrink operation. The patch changes the shrink process to operate on read extent nodes in batches, reducing the time a core rwlock is held and preventing potential kernel hangs when the extent tree contains a large numb...

CVE-2024-56597

CVE-2024-56597 is a confirmed Linux kernel vulnerability affecting the JFS filesystem logic. The issue is a shift-out-of-bounds in jfs/dbSplit, triggered when dmt_budmin is less than zero, leading to errors in later stages. The fix adds a pre-check in dbAllocCtl to return an error earlier, preven...

CVE-2024-55881

CVE-2024-55881 : In the Linux kernel, KVM for x86 had a fix to correctly detect 64‑bit hypercalls during complete_hypercall_exit() for guests with protected state (e.g., SEV-ES/SEV-SNP). The change replaces is_64_bit_mode() with is_64_bit_hypercall() to determine 64‑bit mode when the vCPU state n...

CVE-2024-53147

CVE-2024-53147 affects the Linux kernel exFAT filesystem driver. When directory size is at least a cluster and start_clu becomes an invalid/EOF cluster due to filesystem corruption, the code may access ei->hint_femp.eidx outside the directory, causing out-of-bounds access and potential filesys...

CVE-2024-53196

CVE-2024-53196 affects the Linux kernel (arm64/KVM). The issue is that KVM could retire an aborted MMIO instruction and advance the PC even when a synchronous external abort was pending, triggering a kernel WARN in kvm_emulate.h and related call paths. The documented fix is to skip MMIO emulation...

CVE-2024-56637

CVE-2024-56637 (Linux kernel) : A race in netfilter/ipset where the ipset module reference may be unloaded while a set-type backend module is being requested, potentially causing a kernel crash. The race can be triggered by inserting an mdelay() immediately after nfnl_unlock(). The vulnerability ...

CVE-2024-56584

CVE-2024-56584 concerns the Linux kernel: a flaw in io_uring/tctx could leave tctx->xa head non-NULL after xa_store() allocation failures, even when there are no entries. Syzbot WARN_ON_ONCE(!xa_empty(&tctx->xa)) could trigger during final put of an io_uring_task. The available documents de...

CVE-2024-57931

CVE-2024-57931 is a Linux kernel issue in the SELinux subsystem: when evaluating extended permissions, the patch changes behavior to ignore unknown permissions instead of triggering a BUG(), allowing future permissions to be added without breaking older kernels. The unit described in connected da...

CVE-2023-52924

CVE-2023-52924 describes a Linux kernel vulnerability in nf_tables/netfilter where expired elements were wrongly skipped during a set walk, causing use-count inconsistencies and potential WARNs during chain removal. The issue arises in asymmetry between preparation/commit phases when a set elemen...

CVE-2024-27032

CVE-2024-27032 affects the Linux kernel f2fs subsystem. During recovery, if FAULT_BLOCK is enabled, f2fs_reserve_new_block() may return -ENOSPC, potentially causing a kernel panic. Additionally, with fault-injection rate 1 and only FAULT_BLOCK enabled, a deadloop in block reservation may occur. T...

CVE-2024-57929

CVE-2024-57929 : In the Linux kernel, the vulnerability stems from dm-array: when dm_bm_read_lock() fails, a faulty dm_block pointer can be left behind, leading to a double release in dm_array_cursor_end() and a subsequent BUG_on in dm-bufio. The fix (as described in the CVE text) sets the cached...

CVE-2025-21679

CVE-2025-21679—Linux kernel (btrfs): The issue arises in get_canonical_dev_path() where d_path()’s possible error is not handled, causing an invalid memory access on the subsequent strscpy() call. The patch reintroduces proper error handling for d_path() to prevent the memory access, addressing t...

CVE-2024-57904

CVE-2024-57904 affects the Linux kernel’s IIO subsystem for at91: the at91_ts_register path frees the wrong object during error handling. The code currently calls input_free_device() on st->ts_input, but the err path can run before iio_dev is assigned to st->ts_input. The fix is to call inp...

CVE-2024-56590

The CVE-2024-56590 entry concerns the Linux kernel Bluetooth stack (hci_core) and a fix for not checking whether skb actually contains an ACL header in hci_acldata_packet. The issue could cause access to uninitialized/invalid memory beyond skb->data when an ACL header is absent. The fix is a k...

CVE-2025-21632

CVE-2025-21632: In the Linux kernel, a patch fixes shadow stack handling for x86 XSAVE state accessed via ptrace. Previously, regset get/set paths could be invoked with shadow stacks disabled (ARCH_SHSTK_SHSTK==0), causing get_xsave_addr() to return NULL and trigger a WARN_ON in ssp_get. The fix ...

CVE-2024-56594

CVE-2024-56594 references a Linux kernel vulnerability in the DRM/AMDGPU path where the sg segment length was not properly limited. The issue could cause over-mapping of AMDGPU sg length and trigger warnings from debug_dma_map_sg(), due to an incorrect max_segment_size. The connected advisories (...

CVE-2024-53220

The CVE-2024-53220 issue concerns the f2fs file system in the Linux kernel. The root cause is that dirty data was not accounted correctly in __get_secs_required(), which can trigger a system panic when certain conditions (checkpoint_disabling and lfs_mode) are both enabled, leading to over-alloca...