CVE-2024-42123

CVE-2024-42123 (Linux kernel) : In the amdgpu driver, the function amdgpu_umc_handle_bad_pages is invoked during amdgpu_umc_bad_page_polling_timeout and can double-free the err_addr pointer in certain cases. The fix sets err_addr to NULL to avoid the warnings, addressing a potential use-after-fre...

CVE-2024-42247

CVE-2024-42247 pertains to the Linux kernel WireGuard: allowedips issue. On the PA-RISC/HPPA parity, the code swap_endian() attempted to load a 128-bit IPv6 address from an unaligned memory location, causing kernel warnings about unaligned accesses in wg_allowedips_insert_v6. The documented fix s...

CVE-2024-45828

CVE-2024-45828 affects the Linux kernel i3c-mipi-i3c-hci driver. The issue is a NULL pointer deref caused by a race where the ring stop path may trigger a RING_OP_STAT interrupt after io_data is NULLed during cleanup. The fix masks the ring interrupts before the ring stop request to prevent this ...

CVE-2024-46742

CVE-2024-46742 is a Linux kernel vulnerability affecting the SMB server path where a potential null pointer dereference in smb2_open() could occur when lease_ctx_info is NULL (SMB2_OPLOCK_LEVEL_LEASE). The fix adds a NULL check for lease_ctx_info and also removes redundant parentheses in parse_du...

CVE-2024-46765

CVE-2024-46765 affects the Linux kernel ice driver XDP configuration, where ice_xdp() and PF reset race on shared resources (ice_vsi_close/ice_prepare_for_reset, ice_vsi_rebuild, ice_vsi_open). The fix adds a mutex (xdp_state_lock) to protect ice_vsi_rebuild() and ice_xdp(), and introduces ICE_VS...

CVE-2024-46840

CVE-2024-46840 relates to the Linux kernel bug in btrfs where handling for refs == 0 in snapshot delete could yield an incorrect answer because of missing locks. The fix converts BUG_ON(refs == 0) sites in reada, walk_down_proc, and walk_up_proc to proper error handling, returning -EUCLEAN (later...

CVE-2024-46865

CVE-2024-46865 (Linux kernel) : The vulnerability arises from improper initialization of a resource named “grc” in a code path using fou. If fou is NULL, the code may execute a goto out and use grc uninitialized, enabling an attacker with local access to trigger use of an uninitialized resource. ...

CVE-2024-47679

In CVE-2024-47679, a race exists in the Linux kernel VFS between evict_inodes() (triggered via iput() and generic_shutdown_super()) and btrfs/iget() path through find_inode(). The race can allow an inode (example ino 261) to be evicted by one thread while another thread revalidates and reuses it,...

CVE-2024-49888

CVE-2024-49888 – Linux kernel (BPF) sdiv/smod overflow fix . The issue affects the BPF subsystem where division by -1 can overflow for 64-bit operands (LLONG_MIN/-1) on x86_64, potentially triggering a kernel crash; on arm64, results differ (LLONG_MIN/-1 yields LLONG_MIN). The provided patch logi...

CVE-2024-49899

CVE-2024-49899 affects the Linux kernel’s DRM AMD display code. The vulnerability arises from denominators that could be zero due to uninitialized defaults; the fix sets denominators’ default to 1 to prevent division by zero. This resolves 10 DIVIDE_BY_ZERO issues reported by Coverity. The linked...

CVE-2024-49904

The CVE-2024-49904 issue affects the Linux kernel DRM/AMDGPU subsystem. The vulnerability arises from a missing list empty check in list_for_each_entry_safe, which can lead to a NULL pointer dereference in corner cases. The advisory notes that the fix is to add a list empty check to avoid the nul...

CVE-2024-50040

CVE-2024-50040 concerns the igb driver in the Linux kernel. The issue stemmed from igb_io_error_detected() treating transient non-fatal PCIe errors as non-fatal, which could lead igb_io_resume() to assume the device was still up and attempt a bring-up, causing a kernel panic during recovery from ...

CVE-2024-50166

CVE-2024-50166 affects the Linux kernel. The issue is a refcount handling bug in fman-related devices (fsl/fman) where multiple references taken in mac_probe() by of_find_device_by_node(), fman_bind(), and fman_port_bind() were not fully released on error paths or removal, causing reference leaks...

CVE-2024-50245

CVE-2024-50245 affects the Linux kernel fs/ntfs3 subsystem and is resolved by a patch that fixes a possible deadlock in mi_read caused by a mutex lock contention with the ni_lock_dir path. The flaw is within the ntfs3 code path and can result in a stall if the lock ordering interacts with another...

CVE-2024-50300

The CVE-2024-50300 issue affects the Linux kernel’s regulator/rtq2208 driver, caused by an uninitialized use of regulator_config that can lead to a kernel error. A patch has been released to fix the uninitialized use, restoring proper initialization in the rtq2208 regulator. Several sources (e.g....

CVE-2024-56745

CVE-2024-56745 : Linux kernel vulnerability where reset_method_store() leaked allocated memory (via kstrndup) when parsing a string with strsep, because options could be freed after strsep nulled it. A fix preserves the original options string by iterating with a separate tmp_options, preventing ...

CVE-2024-58064

Technical details for CVE-2024-58064 are not provided in the given documents; no affected products, impact, or fix are specified here. Monitor for updates from vendor/advisory sources.

CVE-2024-58085

CVE-2024-58085 relates to the Linux kernel Tomoyo security module, specifically a warning emission in tomoyo_write_control(). The description notes a syzbot report about a “too large allocation” warning when a long single line is written without a newline. The fix changes memory allocation behavi...

CVE-2025-21885

Technical details (affected product, vulnerable component, root cause, exploitability) are not publicly provided in the supplied documents. Monitor for updates from vendor advisories and security feeds.

CVE-2025-21951

Technical details about CVE-2025-21951 are not provided in the supplied documents. Monitor official advisories for updates on affected products, impact, and fixes.

CVE-2025-22049

The CVE-2025-22049 issue affects the Linux kernel's LoongArch code. It fixes the need to raise ARCH_DMA_MINALIGN from 1 to 16 to accommodate LoongArch devices (e.g., APBDMA) that require 16-byte alignment. The vulnerability stemmed from potential DMA cacheline write errors when data buffers were ...

CVE-2025-22062

CVE-2025-22062 is a Linux kernel vulnerability where mutual exclusion was missing in proc_sctp_do_udp_port(), risking a crash due to unsynchronized calls to sctp_udp_sock_stop() and sctp_udp_sock_start(). The issue is evidenced by syzbot exposé showing a crash/OOPS from a non-canonical address. T...

CVE-2025-22080

CVE-2025-22080 affects the Linux kernel fs/ntfs3 driver. The vulnerability is due to an integer overflow in hdr_first_de() where de_off and used originate from disk; on 32-bit systems, if both exceed UINT_MAX-16, the overflow can cause the check to fail. The issue has been resolved in the kernel,...

CVE-2025-23142

CVE-2025-23142 details are not provided in the supplied documents; monitor for updates.

CVE-2025-23159

CVE-2025-23159 affects the Linux kernel media/venus/hfi component. The issue arises from sfr->buf_size stored in shared memory being modifiable by a local attacker, allowing an out-of-bounds write when the size exceeds the actual SFR data. The fix caps the reported size to the allocated SFR bu...

CVE-2025-37788

CVE-2025-37788 affects the Linux kernel cxgb4 memory handling: in cxgb4_init_ethtool_filters(), a memory leak can occur if loc_array is allocated but bmap allocation fails, because the free path only frees from (i-1) iterations. The fix frees loc_array in the bmap error path, mitigating the leak....

CVE-2025-37799

CVE-2025-37799 : In the Linux kernel, the vmxnet3 driver’s XDP handling is vulnerable due to malformed packet sizing in vmxnet3_process_xdp when packets fall in the 128–3k byte range. This caused MTU-related connectivity issues (e.g., with HTTP requests and IPIP-encapsulated traffic) and, in some...

CVE-2025-37800

CVE-2025-37800 affects the Linux kernel driver core code, specifically a potential NULL pointer dereference in dev_uevent() when a userspace read of the uevent attribute overlaps with a driver unbind. The fix switches to using READ_ONCE() to fetch the driver pointer and acquires the bus’ drivers ...

CVE-2025-37859

The CVE-2025-37859 issue affects the Linux kernel page_pool subsystem. The root cause was a bug where page_pool_release_retry() could wake up the kworker repeatedly when inflight became negative, causing an infinite reschedule loop and flooding logs. The published fix mitigates this by not resche...

CVE-2026-31672

CVE-2026-31672 concerns the Linux kernel rt2x00usb Wi‑Fi USB driver, where resources bound to USB interfaces could leak if the device is unbound without disconnection. The root cause is improper devres/USB anchor lifetime management, leading to potential memory leaks and resource exhaustion. The ...

CVE-2026-43494

CVE-2026-43494 affects the Linux kernel’s net/rds zerocopy path. When iov_iter_get_pages2() fails in rds_message_zcopy_from_user(), pinned pages are released and rm->data.op_mmp_znotifier is cleared, but rm->data.op_nents may not be reset. This leads to the cleanup loop in rds_message_purge...

CVE-2026-46054

CVE-2026-46054 affects the Linux kernel SELinux overlayfs access checks for mmap() and mprotect(). The issue arises from insufficient enforcement of backing-file access between the user file and backing file, potentially bypassing policies. A patch introduces security_mmap_backing_file() to enfor...

CVE-2010-4073

CVE-2010-4073 affects the Linux kernel IPC compatibility code: before 2.6.37-rc1, several compat syscall handlers (ipc/compat.c and ipc/compat_mq.c) fail to initialize certain structures, enabling local attackers to read potentially sensitive kernel stack memory via vectors in compat_sys_semctl, ...

CVE-2014-2851

CVE-2014-2851: Integer overflow in ping_init_sock (net/ipv4/ping.c) of the Linux kernel up to 3.14.1 allows local users to cause a denial of service (use‑after‑free and system crash) and potentially gain privileges via a crafted application that exploits an improperly managed reference counter. C...

CVE-2016-1576

CVE-2016-1576 concerns the Linux kernel overlayfs. The overlayfs implementation up to version 4.5.2 does not properly restrict the mount namespace, enabling a local user to gain privileges by mounting an overlay filesystem on top of a FUSE filesystem and then executing a crafted setuid program. T...

CVE-2017-7374

CVE-2017-7374 is a use-after-free in the Linux kernel fs/crypto/ subsystem prior to 4.10.7, where revoking keyring keys used for ext4, f2fs, or ubifs encryption can free cryptographic transform objects prematurely. This enables local attackers to cause a denial of service via a NULL pointer deref...

CVE-2019-8956

CVE-2019-8956 corresponds to a use-after-free in the Linux kernel SCTP path. Affects Linux kernel before 4.20.8 and 4.19.21, in sctp_sendmsg() when handling SCTP_SENDALL, risking memory corruption. Publicly available advisories indicate the fix is to update to kernel versions 4.20.8+ or 4.19.21+....

CVE-2021-47110

CVE-2021-47110 affects the Linux kernel’s x86/kvm subsystem. The issue: kvmclock was only disabled on boot CPU during shutdown via machine_shutdown(), leaving other CPUs with a live kvmclock and risking memory corruption on events like Hibernate restore. Root cause: kvmclock MSR is not universall...

CVE-2021-47408

CVE-2021-47408 affects the Linux kernel netfilter conntrack code. The issue arises when the conntrack hash table resizes or during cleanup, causing nf_ct_iterate_cleanup to restart after a resize and delaying net_namespace teardown. The available connected documents state that adding a mutex to s...

CVE-2021-47639

CVE-2021-47639 affects the Linux kernel KVM x86/mmu code. The issue arises when unmapping a guest frame number (gfn) range in the TDP MMU: both valid and invalid SPTE roots can be zapped, but invalid roots aren’t consistently cleared in mmu_notifier paths. This can leave references to freed pages...

CVE-2022-34494

CVE-2022-34494 : This vulnerability is a double free in rpmsg_virtio_add_ctrl_dev (drivers/rpmsg/virtio_rpmsg_bus.c) of the Linux kernel, before version 5.18.4. Affected: Linux kernel releases prior to 5.18.4. Root cause: double free in the RPMSG virtio control device handling. Impact: described ...

CVE-2022-41848

CVE-2022-41848 affects the Linux kernel, specifically the PCMCIA driver path drivers/char/pcmcia/synclink_cs.c. The vulnerability is a race condition that can cause a use-after-free when a physically proximate attacker removes a PCMCIA device while an ioctl is in progress, due to a race between m...

CVE-2022-48738

CVE-2022-48738 corresponds to a Linux kernel vulnerability in ASoC: ops where snd_soc_put_volsw() could accept values outside the advertised valid range. The issue arises from missing validation of user-space-reported ranges, allowing out-of-range values to be processed. The connected Astra Linux...

CVE-2022-48934

CVE-2022-48934 affects the Linux kernel code for nfp: flower. The issue is a leak in nfp_tunnel_add_shared_mac() related to ida_simple_get() returning an id in 0..NFP_MAX_MAC_INDEX (0xff) and the error path requiring the invalid ida_idx not to be within that range. The fix is to set the invalid v...

CVE-2022-49022

CVE-2022-49022 affects the Linux kernel’s wifi/mac80211 stack. The issue is a potential out-of-bounds access in ieee80211_get_rate_duration during rate duration calculation, reported as UBSAN: array-index-out-of-bounds in net/mac80211/airtime.c. The index 15 is out of range for type 'u16 [12]'. A...

CVE-2022-49466

CVE-2022-49466 affects the Linux kernel regulator: scmi subsystem. The root cause is a refcount leak in scmi_regulator_probe due to of_find_node_by_name() returning a node pointer with an incremented refcount; the patch adds a call to of_node_put() to release the node when done. This fix prevents...

CVE-2022-49596

The CVE-2022-49596 entry targets the Linux kernel vulnerability in the sysctl_tcp_min_snd_mss reader. The publicly provided details state a data race occurs when reading sysctl_tcp_min_snd_mss, as it can be changed concurrently. The fix introduced is to add READ_ONCE() to the readers of this sysc...

CVE-2022-49716

CVE-2022-49716 affects the Linux kernel’s irqchip/gic-v3 mechanism. The vulnerability stems from incorrect refcount handling in gic_populate_ppi_partitions: of_get_child_by_name() returns a node pointer with an incremented refcount, and if not properly released, a refcount leak occurs when kcallo...

CVE-2022-49788

Summary: CVE-2022-49788 in the Linux kernel affects the vmware vmci host datagram path. The issue is an information leak caused by padding in the vmci_event_qp struct allocated by qp_notify_peer(); uninitialized data could be exposed to userspace via copy_to_user. The vulnerability is tied to vmc...

CVE-2023-52509

CVE-2023-52509 affects the Linux kernel ravb driver. The vulnerability arises when ravb_stop() does not cancel pending ravb_tx_timeout_work(), allowing ravb_tx_timeout_work() to access freed priv after ravb_remove() and unregister_netdev(), potentially using freed resources. The root cause is use...