CVE-2024-42102

CVE-2024-42102 concerns a Linux kernel vulnerability in the dirty throttling path used by the mm/wb subsystem. The issue centers on assuming that dirty limits in page units fit in 32 bits and a patch series titled “mm: Avoid possible overflows in dirty throttling” was applied. The entry notes tha...

CVE-2024-42272

CVE-2024-42272 affects the Linux kernel scheduling path: the act_ct patch fixes padding in zones_ht_key to avoid uninitialized padding being used by rhashtable lookups. The issue traces to a design change that enlarged the key from 2 to 16 bytes due to a struct net pointer, and the fix ensures rh...

CVE-2024-43912

CVE-2024-43912 in the Linux kernel affects the wifi nl80211 code:AP channel width setting is now disallowed when using non-standard widths (e.g., S1G or narrow channels). The issue arises from allowing non-standard AP channel widths while normal 20/40/… MHz progression is expected, and the patch ...

CVE-2024-47673

CVE-2024-47673 affects the Linux kernel wifi iwlwifi mvm; root cause is that TCM is not paused when the firmware is stopped, causing a host command to be sent to a non-live firmware. This can trigger a WARNING and potential local impact. Connected docs indicate patched kernels/versions: e.g., Mar...

CVE-2024-49913

CVE-2024-49913 affects the Linux kernel’s DRM AMD display path. The issue was a potential NULL pointer dereference in commit_planes_for_stream when top_pipe_to_program could be NULL, leading to dereferencing stream_res. The fix adds a null check before accessing top_pipe_to_program to prevent the...

CVE-2024-49957

CVE-2024-49957 is a Linux kernel vulnerability tied to ocfs2/journal handling. When mounting, if journal_reset() fails due to a too-short journal, jbd2_journal_load() may leave journal->j_sb_buffer NULL, triggering a NULL pointer dereference through ocfs2_journal_shutdown() -> jbd2_journal_...

CVE-2024-50183

CVE-2024-50183 relates to the Linux kernel lpfc SCSI NPIV cleanup: deleting an NPIV instance must release all fabric ndlps, or a kref imbalance race occurs. The fix forces DA_ID to complete synchronously using a wait_queue, per the description in both the original CVE entry and Astra Linux securi...

CVE-2024-50245

CVE-2024-50245 affects the Linux kernel fs/ntfs3 subsystem and is resolved by a patch that fixes a possible deadlock in mi_read caused by a mutex lock contention with the ni_lock_dir path. The flaw is within the ntfs3 code path and can result in a stall if the lock ordering interacts with another...

CVE-2024-50283

In the Linux kernel, the ksmbd component fixed a slab-use-after-free in smb3_preauth_hash_rsp. The patch ensures ksmbd_user_session_put is called under smb3_preauth_hash_rsp(), preventing the session from being freed before that call. Affected area: ksmbd/smb3_preauth_hash_rsp lifecycle. Remediat...

CVE-2024-53108

The CVE-2024-53108 issue affects the Linux kernel’s DRM/AMD display stack, specifically the AMD kernel driver path (drm/amd/display) and the function amdgpu_dm_update_freesync_caps. The root cause is an out-of-bounds read caused by ID extraction for the replay check in the AMD EDID being performe...

CVE-2024-56543

Technical details (affected product/version, root cause, impact or fixes) for CVE-2024-56543 are not provided in the connected documents; monitor for updates from official advisories.

CVE-2024-56626

CVE-2024-56626 is a Linux kernel issue in the ksmbd_vfs_stream_write path. An offset supplied by the client can be negative when the ksmbd.conf setting 'vfs objects = streams_xattr' is used, enabling an out-of-bounds write to the allocated buffer. The vulnerability description notes the condition...

CVE-2024-56649

CVE-2024-56649 affects the Linux kernel ENETC MQPRIO offload implementation for VF (and some PFs) where enetc_setup_tc_mqprio() calls enetc_change_preemptible_tcs() but VF lacks the necessary registers. This can cause a NULL hw->port dereference and a crash when configuring preemptible traffic...

CVE-2024-56704

CVE-2024-56704 concerns a Linux kernel issue: in 9p/xen, an IRQ release could be double-freed due to an incorrect IRQ release path, with a fix described as “Pass correct device ID during IRQ release.” Kernel logs reportedly showed an IRQ double-free, and the remediation targets the IRQ release fl...

CVE-2024-57910

CVE-2024-57910 : In the Linux kernel, the iio: light: vcnl4035 driver had an information leak in the triggered buffer. The local buffer used to push data to userspace contained an uninitialized element (a 16-bit value aligned to 8 bytes), leaving at least 4 bytes potentially exposed after a regma...

CVE-2024-57977

CVE-2024-57977 is a Linux kernel vulnerability in memcg where the OOM task traversal could cause a soft lockup when thousands of processes reside in the OOM cgroup. The issue arises from scanning OOM tasks for each memory pressure event, delaying the watchdog handling. The documented fix adds a r...

CVE-2025-21780

CVE-2025-21780 affects the Linux kernel DRM/AMDGPU, where a local attacker could overflow a PPTABLE buffer in smu_sys_set_pp_table() by cycling pptables via sysfs. The issue arises when a small pptable is followed by a larger one, enabling a buffer overflow as described in the advisory. This vuln...

CVE-2025-21945

CVE-2025-21945 affects the Linux kernel (ksmbd) with a use-after-free in smb2_lock. The issue occurs when smb_lock->zero_len is non-zero, causing the ->llist of smb_lock not to be deleted and the flock to reference a freed object during error handling. This is described in the Azure Linux 3...

CVE-2025-22049

The CVE-2025-22049 issue affects the Linux kernel's LoongArch code. It fixes the need to raise ARCH_DMA_MINALIGN from 1 to 16 to accommodate LoongArch devices (e.g., APBDMA) that require 16-byte alignment. The vulnerability stemmed from potential DMA cacheline write errors when data buffers were ...

CVE-2025-22073

CVE-2025-22073 concerns the Linux kernel spufs subsystem. The issue is a leak in spufs_new_file() on failure during spufs_fill_dir(), where the caller proceeds to spufs_rmdir() to clean up, but the resulting dentry remains negative and must be explicitly dropped. The vulnerability is resolved in ...

CVE-2025-22080

CVE-2025-22080 affects the Linux kernel fs/ntfs3 driver. The vulnerability is due to an integer overflow in hdr_first_de() where de_off and used originate from disk; on 32-bit systems, if both exceed UINT_MAX-16, the overflow can cause the check to fail. The issue has been resolved in the kernel,...

CVE-2025-23142

CVE-2025-23142 details are not provided in the supplied documents; monitor for updates.

CVE-2025-37749

CVE-2025-37749 concerns a Linux kernel vulnerability in the PPP stack. The issue stemmed from insufficient bounds checking on skb data in ppp_sync_txmung, risking out-of-bounds reads when processing short packets. The fixed description states that there must be enough data in the skb linear buffe...

CVE-2025-38083

In CVE-2025-38083, the Linux kernel net_sched/prio package has a race in prio_tune() that can underflow a parent qlen when the SFQ perturb timer fires at the wrong time. The race involves CPU0 holding a root lock while CPU1 performs rehash and backlog reduction, with qdisc_put() interplay. The ad...

CVE-2026-31672

CVE-2026-31672 concerns the Linux kernel rt2x00usb Wi‑Fi USB driver, where resources bound to USB interfaces could leak if the device is unbound without disconnection. The root cause is improper devres/USB anchor lifetime management, leading to potential memory leaks and resource exhaustion. The ...

CVE-2026-43494

CVE-2026-43494 affects the Linux kernel’s net/rds zerocopy path. When iov_iter_get_pages2() fails in rds_message_zcopy_from_user(), pinned pages are released and rm->data.op_mmp_znotifier is cleared, but rm->data.op_nents may not be reset. This leads to the cleanup loop in rds_message_purge...

CVE-2009-3726

The CVE-2009-3726 issue affects the Linux kernel NFSv4 client (fs/nfs/nfs4proc.c) and is triggered when a remote NFS server returns a crafted response with incorrect file attributes. This can cause a NULL pointer dereference and kernel panic by attempting to use an open file that has no NFSv4 sta...

CVE-2010-5313

CVE-2010-5313 is demonstrated in the Linux kernel’s arch/x86/kvm/x86.c, where a race condition allows L2 guest OS users to trigger an L2 emulation failure report and cause a denial of service on the L1 guest (as described in the CVE entry). The affected lineage is the Linux kernel before 2.6.38. ...

CVE-2011-4132

CVE-2011-4132 affects the Linux kernel’s Journaling Block Device (JBD) cleanup_journal_tail function. The vulnerability allows local users to trigger a denial of service (assertion error and kernel oops) when handling an ext3 or ext4 image containing an invalid log first block value. The descript...

CVE-2013-4470

CVE-2013-4470 affects the Linux kernel prior to 3.12 when UDP Fragmentation Offload (UFO) is enabled. The issue arises from improper initialization of certain data structures in ip_ufo_append_data (IPv4) and ip6_ufo_append_data (IPv6), allowing local users to trigger memory corruption and a syste...

CVE-2017-16912

The CVE-2017-16912 issue affects the Linux kernel’s USB/IP stack (get_pipe() in drivers/usb/usbip/stub_rx.c) and is exploitable via crafted USB over IP packets to trigger an out-of-bounds read, causing DoS. Affected versions are pre-4.14.8, pre-4.9.71, and pre-4.4.114; fixes were released in Chan...

CVE-2017-2584

CVE-2017-2584 affects arch/x86/kvm/emulate.c in the Linux kernel up to version 4.9.3, enabling local users to read kernel memory or cause a use-after-free DoS via a crafted instruction-emulation application targeting fxrstor, fxsave, sgdt, and sidt. Remediation is not specified in the provided do...

CVE-2021-47219

CVE-2021-47219 involves the Linux kernel SCSI subsystem, specifically the scsi_debug path, where an out-of-bounds read occurs in resp_report_tgtpgs() due to an incorrect handling of lengths. The issue can manifest as a negative alen when userspace supplies a large length, enabling a slab/read bou...

CVE-2021-47454

CVE-2021-47454 describes a Linux kernel vulnerability affecting powerpc SMP idle handling. The issue arises with PREEMPT_COUNT=y: when a CPU is offlined and onlined, the idle task’s preempt count could be decremented in CPU offline, triggering a scheduling panic. The root cause is that powerpc ar...

CVE-2021-47461

CVE-2021-47461 refers to a race in the Linux kernel’s userfaultfd path between writeprotect and exit_mmap() when a process exits and its VMAs are removed concurrently with userfaultfd_writeprotect(). The issue can occur on vanilla kernels as well as development ones and was detected by KASAN. The...

CVE-2022-48696

CVE-2022-48696 affects the Linux kernel regmap_spi code. The vulnerability arises because max_raw_read/max_raw_write in regmap_spi didn’t account for transmitted register address/padding, risking SPI message sizes being exceeded and causing undefined behavior (e.g., data corruption). The fix is t...

CVE-2022-48733

The CVE-2022-48733 issue affects the Linux kernel (btrfs) where a use-after-free can occur in create_snapshot() if btrfs_commit_transaction() fails and the pending snapshot is freed, leaving it in the transaction list. The root cause is improper lifecycle handling of the pending snapshot during t...

CVE-2022-49025

CVE-2022-49025 affects the Linux kernel driver net/mlx5e. The vulnerability arises when multiple dests use termination tables and a second (or later) dest initialization fails; the driver reverts the term tables but does not reset the corresponding attr->dests[num_vport_dests].termtbl referenc...

CVE-2022-49130

In CVE-2022-49130, the Linux kernel ath11k subsystem was fixed by replacing mhi_async_power_up() with mhi_sync_power_up() in the MHI path. The crash occurred when amss.bin was missing and ath11k_pci was removed, since the async variant did not check errors. The sync variant adds error checking an...

CVE-2022-49288

CVE-2022-49288 concerns the Linux kernel ALSA PCM subsystem. The issue arises from races in concurrent prealloc changes via proc files, with no protection against simultaneous PCM buffer preallocation changes, potentially leading to use-after-free or other instability. The provided fix applies th...

CVE-2022-49588

CVE-2022-49588 corresponds to a data-race in the Linux kernel’s TCP sysctl_migrate_req reader. The vulnerability arises from concurrent reading of sysctl_tcp_migrate_req, which could be changed during access. The fix adds READ_ONCE() to the readers to prevent races. Affected component is the kern...

CVE-2022-49629

The CVE-2022-49629 entry concerns a Linux kernel data race in nexthop_compat_mode where readers could observe concurrent changes. The vulnerability is triggered by reading nexthop_compat_mode while it is modified, and fixes require using READ_ONCE() in readers. Connected advisories (Astra Linux, ...

CVE-2022-49715

The CVE-2022-49715 issue affects the Linux kernel’s irqchip/gic-v3 code, specifically gic_populate_ppi_partitions. The root cause is a refcount leak caused by of_find_node_by_phandle() returning a node pointer with an elevated refcount that was not balanced with of_node_put(). The documented fix ...

CVE-2022-49739

The CVE-2022-49739 issue concerns the GFS2 subsystem in the Linux kernel where the inode size of stuffed (inline) inodes was not consistently validated when reading inodes from disk. The fix enforces that the inode size of inline inodes is within the allowed range (gfs2_dinode_in()), preventing o...

CVE-2022-49839

CVE-2022-49839 : In the Linux kernel, the scsi_transport_sas path sas_phy_add() could crash if transport_add_device() failed, since error handling did not account for a NULL device during transport_remove_device() invoked from sas_remove_host(). The issue is mitigated by the upstream fix to check...

CVE-2023-26605

CVE-2023-26605 affects Linux kernel 6.0.8: a use-after-free in inode_cgwb_move_to_attached (fs/fs-writeback.c) related to __list_del_entry_valid. Documentation indicates CVSS v3.1 base score 7.8 ( HIGH ) with local attack vector, low complexity, and no user interaction. The vulnerability is a loc...

CVE-2023-32258

CVE-2023-32258 affects the Linux kernel ksmbd SMB server. The flaw occurs in processing SMB2_LOGOFF and SMB2_CLOSE due to missing locking when operating on an object, allowing code execution in kernel context. Connected documents confirm this is a ksmbd in-kernel vulnerability with high impact (C...

CVE-2023-38431

The CVE-2023-38431 issue affects the Linux kernel ksmbd (fs/smb/server/connection.c) prior to 6.3.8, where NetBIOS header length is not validated against SMB header sizes, via pdu_size in ksmbd_conn_handler_loop, causing an out-of-bounds read. Remediation: upgrade to kernel 6.3.8 or later (per Ch...

CVE-2023-52669

CVE-2023-52669 : In the Linux kernel, the s390/aes CTR code can overread the last block when data length isn’t a full block. The fix uses the actual remaining length and copies it into a buffer before processing, eliminating the overread. This is a local-attack surface issue that could enable a d...

CVE-2023-52915

The CVE-2023-52915 issue affects the Linux kernel driver media: dvb-usb-v2 (af9035) where af9035_i2c_master_xfer processes user-controlled msg entries; if msg[i].buf is null and msg[i].len is zero, previous checks on msg[i].buf could pass, allowing data to reach af9035_i2c_master_xfer and potenti...