CVE-2022-49848

In the Linux kernel, the vulnerability affects the phy: qcom-qmp-combo driver . The root cause was treating the PCS_USB registers as potentially separate from PCS registers, but using the wrong base when no PCS_USB offset is provided. This caused a potential dereference of a NULL pointer during r...

CVE-2024-41098

CVE-2024-41098 is a Linux kernel vulnerability in the libata-core path. The issue arises when ata_port_alloc() fails during ata_host_alloc(); ata_host_release() then frees ata_port struct members unconditionally, which can cause a NULL pointer dereference (BUG: page fault). The provided trace sho...

CVE-2024-44932

CVE-2024-44932 affects the Linux kernel idpf subsystem. The MiracleLinux advisory documents a fix for use-after-free (UAF) conditions that occurred when destroying idpf queues and their associated interrupt vectors; the patch sequence reordered allocation/freeing so queues and vectors are allocat...

CVE-2024-44954

The CVE-2024-44954 entry concerns the Linux kernel ALSA subsystem. Description: there is a race condition in the midibuf accessed by both the URB completion callback and rawmidi API paths. Root cause: concurrent accesses to the line6 midibuf can trigger KMSAN warnings (syzkaller). Impact: potenti...

CVE-2024-46679

CVE-2024-46679 (Linux kernel) : A race between sysfs reading of ethtool link settings and device removal can read state when the device is not present, causing a crash. The fix moves a device-presence check into ethtool (and related callers) to ensure link settings are only shown when the device ...

CVE-2024-49904

The CVE-2024-49904 issue affects the Linux kernel DRM/AMDGPU subsystem. The vulnerability arises from a missing list empty check in list_for_each_entry_safe, which can lead to a NULL pointer dereference in corner cases. The advisory notes that the fix is to add a list empty check to avoid the nul...

CVE-2024-50040

CVE-2024-50040 concerns the igb driver in the Linux kernel. The issue stemmed from igb_io_error_detected() treating transient non-fatal PCIe errors as non-fatal, which could lead igb_io_resume() to assume the device was still up and attempt a bring-up, causing a kernel panic during recovery from ...

CVE-2024-50090

CVE-2024-50090 is tied to the Linux kernel DRM XE driver. The Connected document describes a bug in __xe_bb_create_job() where a buffer copy operation lacks input data validation, enabling a vulnerability that could trigger a service failure. The Initial description also notes a separate issue in...

CVE-2024-50132

CVE-2024-50132 – Linux kernel tracing/probes vulnerability . Affected component: tracing_eprobe code in the kernel/trace/trace_eprobe.c module. Root cause: nr_args was initialized before truncating arguments to MAX_TRACE_ARGS, causing invalid memory access when creating trace probes with more tha...

CVE-2024-50183

CVE-2024-50183 relates to the Linux kernel lpfc SCSI NPIV cleanup: deleting an NPIV instance must release all fabric ndlps, or a kref imbalance race occurs. The fix forces DA_ID to complete synchronously using a wait_queue, per the description in both the original CVE entry and Astra Linux securi...

CVE-2024-50208

CVE-2024-50208 affects the Linux kernel’s RDMA bnxt_re path. The flaw is in how Level-2 PBL pages are set up for non-MR resources when num_pages > 256K: there is a single PDE page address, but the logic incorrectly assumes multiple pages, causing invalid memory access and potential memory corr...

CVE-2024-56721

CVE-2024-56721 affects the Linux kernel x86/CPU/AMD handling of the erratum_1386_microcode array. The issue occurs because the array requires an empty entry at the end; without it, x86_match_cpu_with_stepping() may continue iterating past the end. The fix is to add an empty entry to the end of er...

CVE-2024-57974

The CVE-2024-57974 entry describes a race in the Linux kernel UDP path: if a UDP socket changes its local address during a receive after connect(), a secondary hash/tuple hash update may not complete in time, causing lookups to fail and potentially returning ECONNREFUSED. The issue arises from th...

CVE-2024-57986

CVE-2024-57986 affects the Linux kernel HID core: Resolution Multiplier handling assumes valid Logical Collections and may set multiplier_collection to NULL, enabling a potential flaw. The issue was only partially fixed previously; the remaining case (none of the found collections being a Logical...

CVE-2024-58001

Technical details about CVE-2024-58001 are not publicly provided in the supplied documents. Monitor for updates from official advisories; the sources reference related advisories but do not reveal vulnerability specifics, affected products, or fixes.

CVE-2024-58085

CVE-2024-58085 relates to the Linux kernel Tomoyo security module, specifically a warning emission in tomoyo_write_control(). The description notes a syzbot report about a “too large allocation” warning when a long single line is written without a newline. The fix changes memory allocation behavi...

CVE-2025-21649

CVE-2025-21649 (Linux kernel) : Affected component: net: hns3 on HIP08 devices. Root cause: NULL pointer dereference when attempting to set TX hardware timestamp information if HIP08 devices do not register PTP devices (ptp is NULL). This can cause a kernel crash during 1588 timestamping flow in ...

CVE-2025-22054

CVE-2025-22054: Linux kernel vulnerability in arcnet handling (com20020pci_probe) where devm_kasprintf() can return NULL, leading to a NULL pointer dereference. The fix adds a NULL check after devm_kasprintf() and ensures no resources are leaked. Connected docs (Ubuntu Unity/Linux advisories) con...

CVE-2025-23142

CVE-2025-23142 details are not provided in the supplied documents; monitor for updates.

CVE-2025-23159

CVE-2025-23159 affects the Linux kernel media/venus/hfi component. The issue arises from sfr->buf_size stored in shared memory being modifiable by a local attacker, allowing an out-of-bounds write when the size exceeds the actual SFR data. The fix caps the reported size to the allocated SFR bu...

CVE-2025-37800

CVE-2025-37800 affects the Linux kernel driver core code, specifically a potential NULL pointer dereference in dev_uevent() when a userspace read of the uevent attribute overlaps with a driver unbind. The fix switches to using READ_ONCE() to fetch the driver pointer and acquires the bus’ drivers ...

CVE-2025-37875

CVE-25-37875 concerns the Linux kernel igc/PTM logic. The issue arose from writing to clear the PTM status 'valid' bit while a PTM cycle was in progress, causing unreliablePTM operation. The fix disables PTM trigger most of the time and limits triggering to very brief windows (roughly 10–100 μs) ...

CVE-2025-38083

In CVE-2025-38083, the Linux kernel net_sched/prio package has a race in prio_tune() that can underflow a parent qlen when the SFQ perturb timer fires at the wrong time. The race involves CPU0 holding a root lock while CPU1 performs rehash and backlog reduction, with qdisc_put() interplay. The ad...

CVE-2010-1188

CVE-2010-1188 details (mode C): A use-after-free in net/ipv4/tcp_input.c of the Linux kernel 2.6 prior to 2.6.20. When IPV6_RECVPKTINFO is set on a listening TCP socket, a SYN packet to a LISTEN socket can trigger the skb being freed improperly, allowing a remote attacker to cause a denial of ser...

CVE-2010-2248

CVE-2010-2248 affects the Linux kernel CIFS/SMB implementation. The issue is triggered by a remote SMB response containing an invalid CountHigh value, leading to a denial of service (kernel panic) via the CIFSSMBWrite and CIFSSMBWrite2 paths (OS/2 server responses). Affected: Linux kernel prior t...

CVE-2010-5313

CVE-2010-5313 is demonstrated in the Linux kernel’s arch/x86/kvm/x86.c, where a race condition allows L2 guest OS users to trigger an L2 emulation failure report and cause a denial of service on the L1 guest (as described in the CVE entry). The affected lineage is the Linux kernel before 2.6.38. ...

CVE-2010-5321

CVE-2010-5321 affects the Linux kernel videobuf subsystem (videobuf-core.c and related via videobuf-vmalloc.c) with a memory-leak vulnerability that can be exploited by local users via /dev/video mmap calls to trigger memory allocations and cause a denial of service. Public sources in the connect...

CVE-2011-1776

The CVE-2011-1776 issue affects the Linux kernel’s is_gpt_valid function (fs/partitions/efi.c). It does not validate the size of a GPT entry, allowing physically proximate attackers to trigger a heap-based buffer overflow and OOPS or potentially read kernel heap memory when a crafted GPT storage ...

CVE-2015-5283

CVE-2015-5283 affects the Linux kernel prior to 4.2.3. The sctp_init function in net/sctp/protocol.c uses an incorrect sequence of protocol-initialization steps, allowing a local attacker to cause a denial of service (panic or memory corruption) by creating SCTP sockets before all steps complete....

CVE-2016-3689

CVE-2016-3689 affects the Linux kernel: the ims_pcu_parse_cdc_data function in drivers/input/misc/ims-pcu.c is exploitable via a USB device with no master/slave interfaces, allowing a physically proximate attacker to trigger a denial of service (system crash). A patch is available in kernel 4.5.1...

CVE-2016-9083

CVE-2016-9083 affects the Linux kernel VFIO PCI driver. The vulnerability is a state machine confusion bug in vfio_pci.c that lets a local attacker bypass integer overflow checks and trigger memory corruption, potentially causing a denial of service. Root cause is related to VFIO_DEVICE_SET_IRQS ...

CVE-2017-16913

The CVE-2017-16913 issue affects the Linux kernel USB/IP stack. Specifically, stub_recv_cmd_submit() in drivers/usb/usbip/stub_rx.c fails to validate CMD_SUBMIT packets, enabling a remote attacker to trigger a denial of service via arbitrary memory allocation. Affected kernel versions: before 4.1...

CVE-2017-6348

CVE-2017-6348 affects the Linux kernel: the hashbin_delete function in net/irda/irqueue.c improperly handles lock dropping, enabling a local user to trigger a denial of service through crafted IrDA device operations. The issue exists in kernels before 4.9.13 and is fixed by upgrading to 4.9.13 or...

CVE-2019-19241

CVE-2019-19241 affects the Linux kernel prior to 5.4.2 where the io_uring path can cause requests to appear with UID 0 and full capabilities due to IORING_OP_SENDMSG handling by kernel worker threads in contexts from unprivileged users. Affected code paths include fs/io-wq.c, fs/io_uring.c, and n...

CVE-2021-43057

The CVE-2021-43057 issue affects the Linux kernel prior to 5.14.8, caused by a use-after-free in selinux_ptrace_traceme (SELinux handler for PTRACE_TRACEME). Local attackers could trigger memory corruption and elevate privileges by accessing the subjective credentials of another task. The advisor...

CVE-2021-47408

CVE-2021-47408 affects the Linux kernel netfilter conntrack code. The issue arises when the conntrack hash table resizes or during cleanup, causing nf_ct_iterate_cleanup to restart after a resize and delaying net_namespace teardown. The available connected documents state that adding a mutex to s...

CVE-2021-47461

CVE-2021-47461 refers to a race in the Linux kernel’s userfaultfd path between writeprotect and exit_mmap() when a process exits and its VMAs are removed concurrently with userfaultfd_writeprotect(). The issue can occur on vanilla kernels as well as development ones and was detected by KASAN. The...

CVE-2021-47468

CVE-2021-47468 is a Linux kernel vulnerability affecting isdn/mISDN where a sleeping function could be called from an atomic context because card->isac.release() is invoked while still holding a lock. The description states the fix is to call this function after releasing the lock. Logs illust...

CVE-2021-47491

CVE-2021-47491 concerns the Linux kernel vulnerability in mm: khugepaged, where read-only THP for filesystems could collapse THP for readonly/executable mappings of non-regular files (e.g., block devices). The root cause is that THP collapse was allowed for such files due to an insufficient vm_fi...

CVE-2022-3105

The CVE-2022-3105 entry concerns the Linux kernel (till 5.16-rc6) where uapi_finalize in drivers/infiniband/core/uverbs_uapi.c does not check kmalloc_array() results. The Connected Astra Linux bulletin repeats the same description. No explicit vendor/patch details or exploit information are provi...

CVE-2022-47521

CVE-2022-47521 affects Linux kernel prior to 6.0.11 with the WILC1000 driver. Missing validation of IEEE80211_P2P_ATTR_CHANNEL_LIST in drivers/net/wireless/microchip/wilc1000/cfg80211.c can trigger a heap-based buffer overflow when parsing the operating channel list from Wi-Fi management frames. ...

CVE-2022-49160

CVE-2022-49160 affects the Linux kernel's qla2xxx SCSI driver. The issue occurs during purex packet handling where a pre-allocated structure is incorrectly freed, leading to a crash during module load/unload tests. The fix skips that entry to prevent the invalid free, with call traces citing stac...

CVE-2022-49329

CVE-2022-49329: In the Linux kernel (vdpa/vduse), a NULL pointer dereference can occur when reading the control device’s msg_timeout attribute via sysfs because the control device lacks drvdata. The fix, per the provided description, is to stop creating the unneeded attribute for the control devi...

CVE-2022-49567

The CVE-2022-49567 issue is a Linux kernel vulnerability in mm/mempolicy where uninitialized nodemask data can be accessed when policy mode is MPOL_LOCAL, leading to potential read of pol->w.cpuset_mems_allowed during mpol_rebind_policy. The root cause is that mpol_set_nodemask() does not init...

CVE-2022-49578

CVE-2022-49578 concerns a data race in the Linux kernel related to sysctl_ip_prot_sock. The root cause is concurrent access to sysctl_ip_prot_sock, causing load/store tearing unless proper synchronization is used. The vulnerability affects the kernel’s IP/sysctl handling and is stated as resolved...

CVE-2022-49748

CVE-2022-49748 relates to the Linux kernel: perf/x86/amd shift of a 32-bit int constant 1 is computed in 32‑bit arithmetic and then passed as a 64‑bit argument, which can overflow when i ≥ 32. The fix uses the BIT_ULL macro for the shift to avoid overflow. Several connected advisories (Astra Linu...

CVE-2023-33288

CVE-2023-33288 affects the Linux kernel up to version 6.2.8, with a fix in 6.2.9. Root cause: a use-after-free in bq24190_remove (drivers/power/supply/bq24190_charger.c) that can race and lead to a local attacker crashing the system. Affected component: bq24190_charger.c within the power supply d...

CVE-2023-52529

CVE-2023-52529 refers to a Linux kernel vulnerability affecting the Sony HID path, where a memory leak could occur in sony_probe() if an error happens after usb_alloc_urb(). The fix ensures usb_free_urb() is called on error paths after a successful usb_alloc_urb(), addressing the leak. Connected ...

CVE-2023-53052

CVE-2023-53052 is a Linux kernel vulnerability in the CIFS/DFS codebase, where a use-after-free (UAF) bug occurred when DFS root sessions were kept alive in cifs_umount() during the DFS cache refresher. The fix makes DFS root sessions have the same lifetime as DFS tcons to prevent IPCs from acces...

CVE-2023-53066

CVE-2023-53066 affects the Linux kernel in the qed_sriov path. The vulnerability arises from potential NULL dereferences in qed_iov_get_vf_info, and the fix guards against NULL pointers by validating the helper’s returned info before use. This is a local issue with the impact characterized as hig...