CVE-2024-26893

CVE-2024-26893 affects the Linux kernel ARM SCMI SMC transport cleanup path. The vulnerability is caused by a double-free in the chan_free cleanup of a shared transport_info member, which can dereference a NULL pointer on the second cleanup attempt, leading to a kernel crash (OOPs). The issue occ...

CVE-2024-35895

The CVE-2024-35895 vulnerability affects the Linux kernel, specifically the BPF sockmap/sockhash path. A deadlock could occur when map_delete_elem is invoked from a context where interrupts are disabled; the fix adds a hardirq-safety check to bail out if map_delete_elem runs in a non-hardirq-unsa...

CVE-2024-36903

CVE-2024-36903 is a Linux kernel vulnerability related to potential uninitialized value access in IPv6 processing. The cited fix targets __ip6_make_skb() in the IPv6 path by mirroring the IPv4 correction: it now validates FLOWI_FLAG_KNOWN_NH on fl6->flowi6_flags instead of testing HDRINCL on t...

CVE-2024-40907

CVE-2024-40907 affects the Linux kernel in the Ionic driver’s XDP_TX path. The driver sends a packet with a valid rx page and its DMA address; after tx completes, ionic_tx_clean() frees the page but the RX ring buffer isn’t reset to NULL, leading to a use-after-free access on a freed page and a k...

CVE-2024-42102

CVE-2024-42102 concerns a Linux kernel vulnerability in the dirty throttling path used by the mm/wb subsystem. The issue centers on assuming that dirty limits in page units fit in 32 bits and a patch series titled “mm: Avoid possible overflows in dirty throttling” was applied. The entry notes tha...

CVE-2024-42272

The connected IBM Security Bulletin confirms CVE-2024-42272 as a Linux kernel issue fixed in sched: act_ct. The root cause was the padding in zones_ht_key after a patch widened the rhashtable key from 2 to 16 bytes; rhashtable_lookup() could read uninitialized padding bytes. The fix ensures paddi...

CVE-2024-46753

CVE-2024-46753 affects the Linux kernel via the btrfs subsystem. Description: in walk_up_proc() the code previously BUG_ON(ret) after btrfs_dec_ref(); the error is now returned, indicating proper error propagation. The vulnerability is resolved in the Linux kernel as described in multiple advisor...

CVE-2024-46763

CVE-2024-46763 (Linux kernel) involves a NULL pointer dereference in fou_gro_receive() during host shutdown. The NULL pointer is sk->sk_user_data (offset 8 in struct fou), which may be NULL when udp_tunnel_sock_release() clears sk_user_data and the tunnel socket is destroyed after an RCU grace...

CVE-2024-46855

CVE-2024-46855 - In the Linux kernel, the vulnerability is in netfilter nft_socket where a reference-count leak on socket (sk) references could occur. The root cause is leaks in sk refcount handling during return, which is resolved by the patch in the Linux kernel. The impact is described as loca...

CVE-2024-47684

Technical details about CVE-2024-47684 are not publicly provided in the supplied documents; no affected products, versions, root cause, or fixes are disclosed here. Monitor for updates.

CVE-2024-48876

CVE-2024-48876 - Linux kernel : The issue affects stack_depot’s stack_depot_save_flags() when invoked in NMI context. It could deadlock if pool_lock is held during an NMI, so the fix ensures the lock is only taken if space permits and the operation is safe in NMI. The documentation was updated to...

CVE-2024-49879

CVE-2024-49879 affects the Linux kernel DRM/omapdrm subsystem. The root cause is a missing check for the return value of alloc_ordered_workqueue, which may return NULL and lead to a NULL pointer dereference. The available connected documentation confirms this concrete technical detail. The fix ad...

CVE-2024-49892

CVE-2024-49892 (Linux kernel) : Affects the DRM/AMD display path. The bug was caused by get_bytes_per_element() potentially returning 0, leading to multiple DIVIDE_BY_ZERO errors. The patch initializes the default to 1, ensuring bytes_per_element_y and bytes_per_element_c are never denominators o...

CVE-2024-49920

The CVE-2024-49920 entry concerns the Linux kernel DRM/AMD display subsystem. The vulnerability arises from a null-pointer risk in the AMD display path, where pointers such as stream_enc and dc->bw_vbios are used multiple times after a check that is only performed earlier in the function. The ...

CVE-2024-49963

CVE-2024-49963: Linux kernel BCM2835 mailbox timeout during suspend fixed. Root cause: during noirq suspend, the BCM2835 mailbox IRQ is disabled, causing rpi_firmware_property_list() to timeout due to firmware transaction timeouts. Patch fixes the issue by setting the mailbox IRQ to IRQF_NO_SUSPE...

CVE-2024-50041

CVE-2024-50041 relates to the Linux kernel i40e driver where a macvlan leak could occur due to concurrent access to vsi->mac_filter_hash. The provided description states the root cause as improper synchronization when multiple threads modify the mac_filter_hash, leading to potential memory lea...

CVE-2024-50090

The CVE-2024-50090 entry concerns the Linux kernel, specifically the drm/xe/oa path. The issue arises when OA reuses a batch buffer and appends MI_BATCH_BUFFER_END on every call, causing an overflow as bb->len * 4 + bb_prefetch(q->gt) grows beyond the allocated size. The provided connected ...

CVE-2024-50107

CVE-2024-50107 affects the Linux kernel platform/x86/intel/pmc subsystem. The issue was triggered by a change in ioremap address checks that emitted a WARN when iounmap was called for invalid addresses on ThinkPad ThinkPad P1 Gen 7 (Meteor Lake-P). The fix updates pmc_core_iounmap to call iounmap...

CVE-2024-50116

CVE-2024-50116 relates to a Linux kernel nilfs2 bug where the buffer delay flag was not cleared when discarding a page/folio or buffer head, leading to a BUG_ON in submit_bh_wbc() after reading a corrupted filesystem image and degraded read-only. The issue is caused by not clearing the buffer del...

CVE-2024-50124

CVE-2024-50124: The Linux kernel Bluetooth ISO path fixed a use-after-free (UAF) on iso_sock_timeout. conn->sk could be unlinked/freed while iso_conn_lock is waiting, with the fix validating conn->sk by ensuring it is part of iso_sk_list before use. Impact is high for local access scenarios...

CVE-2024-50259

CVE-2024-50259 affects the Linux kernel via the netdevsim component. The issue is caused by missing a trailing NUL after copy_from_user() in nsim_nexthop_bucket_activity_write(), which could affect string handling in that function. A fix adds the trailing zero to ensure proper operation. The CVE ...

CVE-2024-50265

CVE-2024-50265 concerns the Linux kernel OCFS2 XATTR handling. The issue arises in ocfs2_xa_remove() where, after a fault-injected -ENOMEM path, a faulty rc path causes the code to call ocfs2_xa_remove_entry(loc) twice: first from ocfs2_xa_cleanup_value_truncate() and then again when returning to...

CVE-2024-53189

The CVE refers to a Linux kernel wifi nl80211 bounds-check error in nl80211_parse_sched_scan where the cfg80211_scan_request’s channels array uses a __counted_by to n_channels; the patch initializes the memory size with n_channels and updates after filling the array to prevent UBSAN-triggered war...

CVE-2024-53226

The CVE-2024-53226 issue affects the Linux kernel RDMA/hepnas driver path: ib_map_mr_sg() could accept NULL sg_offset, and hns_roce_map_mr_sg() dereferenced a NULL pointer. The Astra Linux bulletin mirrors this, stating a NULL pointer dereference in RDMA/hns: Fix NULL pointer derefernce in hns_ro...

CVE-2024-56556

CVE-2024-56556 targets the Linux kernel binder: a race in binder_add_freeze_work() where proc->inner_lock is dropped while acquiring node->lock, allowing binder_node_release() to race and trigger a use-after-free. Impact is local privilege escalation/high, as indicated by multiple advisorie...

CVE-2024-56607

CVE-2024-56607 concerns the Linux kernel wireless stack, specifically the ath12k driver’s bitrate masking path. The issue stems from a sleep in a function path that can be invoked from atomic/context-sensitive code when a user or cfg80211 path sets legacy bitrates, yielding a sleeping wake-up sta...

CVE-2024-56679

Technical details for CVE-2024-56679 are not publicly available in the provided documents. Please monitor for updates from upstream advisories and vendor advisories to obtain affected products, root cause, and remediation.

CVE-2024-56704

CVE-2024-56704 concerns a Linux kernel issue: in 9p/xen, an IRQ release could be double-freed due to an incorrect IRQ release path, with a fix described as “Pass correct device ID during IRQ release.” Kernel logs reportedly showed an IRQ double-free, and the remediation targets the IRQ release fl...

CVE-2024-56745

CVE-2024-56745 : Linux kernel vulnerability where reset_method_store() leaked allocated memory (via kstrndup) when parsing a string with strsep, because options could be freed after strsep nulled it. A fix preserves the original options string by iterating with a separate tmp_options, preventing ...

CVE-2024-57795

CVE-2024-57795: In the Linux kernel, a use-after-free was reported in RDMA/rxe when a net_device could be freed before an ib_cache_event_task execution. The root cause is the patch removing the direct link to net_device in RXE (and related SIW/RXE paths), which allows a freed net_device to be acc...

CVE-2025-21652

Summary (CVE-2025-21652) : In the Linux kernel, a use-after-free was reported in ipvlan_get_iflink() when handling ipvlan with linkwatch. The issue arises because ipvlan does not hold a refcount on the lower device, unlike vlan/macvlan, which can lead to UAF of ipvlan->phy_dev if the linkwatch...

CVE-2025-21714

CVE-2025-21714 : Linux kernel RDMA/mlx5: fix implicit ODP use after free. The issue could lead to invalidating the MR twice, queuing MR destroy work twice, and a race where the second work runs after the first freed MR, causing a user-after-free and refcount underflow. The fix uses __xa_cmpxchg()...

CVE-2025-21812

CVE-2025-21812 concerns AX25 code in the Linux kernel. A lockdep/potential deadlock issue was observed around ax25_setsockopt() where a syzbot thread attempting to acquire rtnl_mutex could deadlock with a thread holding sk_lock-AF_AX25, due to an existing dependency chain involving ax25_setsockop...

CVE-2025-21914

CVE-2025-21914 affects the Linux kernel Slimbus path (slimbus) where, in delayed interrupt scenarios, slim_do_transfer() returns a timeout but fails to free the associated transaction ID (TID). This leads to invalid memory access inside qcom_slim_ngd_rx_msgq_cb(), potentially causing a kernel pan...

CVE-2025-22066

CVE-2025-22066 concerns the Linux kernel SoC ASoC driver imx-card. The issue arises when devm_kasprintf() returns NULL due to memory allocation failure, and imx_card_probe() does not check for this, leading to a NULL pointer dereference. The vulnerability was resolved by adding a NULL check after...

CVE-2025-37849

CVE-2025-37849 affects the Linux kernel KVM arm64; the issue occurs when kvm_arch_vcpu_create() fails to share the vCPU page with the hypervisor, leaving vGIC vCPU data initialised. This can leak memory on vCPU destruction and may cause use-after-free in redistributor handling. The fix adds prope...

CVE-2025-37858

The CVE-2025-37858 issue affects the Linux kernel’s JFS filesystem. Root cause: AG size calculation in dbExtendFS() uses a 1 < 31 on 32-bit systems, this causes undefined behavior and invalid AG sizes (sbi->bmap->db_agsize). Impact: potential filesystem corruption during extend operation...

CVE-2025-37867

CVE-2025-37867 : Affects the Linux kernel RDMA/core subsystem. The issue stems from an oversized kvmalloc() warning during syzkaller-triggered activity; the fix silences the warning by adding __GFP_NOWARN to the kvmalloc path (function: __kvmalloc_node_noprof). Reported in connected advisories (A...

CVE-2025-37875

CVE-25-37875 concerns the Linux kernel igc/PTM logic. The issue arose from writing to clear the PTM status 'valid' bit while a PTM cycle was in progress, causing unreliablePTM operation. The fix disables PTM trigger most of the time and limits triggering to very brief windows (roughly 10–100 μs) ...

CVE-2025-40014

Technical details for CVE-2025-40014 are not publicly provided in the connected documents. The supplied materials do not specify affected products/versions or remediation. Monitor for updates.

CVE-2010-2248

CVE-2010-2248 affects the Linux kernel CIFS/SMB implementation. The issue is triggered by a remote SMB response containing an invalid CountHigh value, leading to a denial of service (kernel panic) via the CIFSSMBWrite and CIFSSMBWrite2 paths (OS/2 server responses). Affected: Linux kernel prior t...

CVE-2010-5313

CVE-2010-5313 is demonstrated in the Linux kernel’s arch/x86/kvm/x86.c, where a race condition allows L2 guest OS users to trigger an L2 emulation failure report and cause a denial of service on the L1 guest (as described in the CVE entry). The affected lineage is the Linux kernel before 2.6.38. ...

CVE-2011-0711

CVE-2011-0711 affects the Linux kernel through the xfs_fs_geometry function in fs/xfs/xfs_fsops.c. The vulnerability arises because a structure member is not initialized, enabling local attackers to read potentially sensitive data from kernel stack memory via the FSGEOMETRY_V1 ioctl. The affected...

CVE-2011-1745

The CVE-2011-1745 entry affects the Linux kernel: an integer overflow in the agp_generic_insert_memory function (drivers/char/agp/generic.c) in kernels before 2.6.38.5. This allows local users to gain privileges or cause a denial of service via a crafted AGPIOC_BIND agp_ioctl call. Affected platf...

CVE-2012-2136

CVE-2012-2136 affects the Linux kernel prior to 3.4.5. The sock_alloc_send_pskb function does not properly validate a length value, enabling a local user to trigger a heap-based overflow that can crash the system or potentially gain privileges via access to a TUN/TAP device. Affected software is ...

CVE-2015-0275

CVE-2015-0275 affects the Linux kernel ext4 subsystem: the ext4_zero_range function in fs/ext4/extents.c allows local users to trigger a denial of service via a crafted fallocate zero-range request. The linked MiracleLinux/Unity Linux Nessus entries reproduce this: the vulnerability is described ...

CVE-2019-8956

CVE-2019-8956 corresponds to a use-after-free in the Linux kernel SCTP path. Affects Linux kernel before 4.20.8 and 4.19.21, in sctp_sendmsg() when handling SCTP_SENDALL, risking memory corruption. Publicly available advisories indicate the fix is to update to kernel versions 4.20.8+ or 4.19.21+....

CVE-2021-34981

CVE-2021-34981 concerns the Linux kernel’s Bluetooth CMTP module. The issue stems from failing to validate the existence of an object before performing free operations, enabling a local attacker to escalate privileges by executing code in the kernel context (double free). The vulnerability is lin...

CVE-2021-47466

The CVE-2021-47466 issue concerns the Linux kernel SLUB allocator: in kmem_cache_open(), an error-path could leak random_seq data from the slub cache. The fix releases all relevant resources via __kmem_cache_release(), mitigating potential memory leakage. Affected advisories (e.g., Unity Linux UT...

CVE-2022-4382

CVE-2022-4382 describes a use-after-free in the gadgetfs Linux driver caused by a race among superblock operations. Triggering condition: yanking out a device that is currently running the gadgetfs side. The description in the provided documents states a use-after-free condition and potential imp...