CVE-2022-49060

CVE-2022-49060 is a Linux kernel vulnerability affecting the net/smc path, where a NULL pointer dereference could occur in smc_pnet_find_ib due to calling dev_name() with dev.parent without a NULL check. The fix implements a NULL-pointer check before the call to dev_name(), mitigating potential c...

CVE-2024-50042

Technical details for CVE-2024-50042 are not publicly available in the provided documents. The connected advisories list kernel issues but do not disclose the affected product/version, root cause, impact, or a concrete fix for this CVE. Monitor for updates.

CVE-2024-50232

CVE-2024-50232 affects the Linux kernel in the IIO ADC driver for ad7124. The root cause is a potential division by zero in ad7124_set_channel_odr() when ad7124_write_raw() passes a zero value to DIV_ROUND_CLOSEST(), invoked via iio_write_channel_raw() -> iio_write_channel_attribute() -> ii...

CVE-2024-50252

CVE-2024-50252 describes a memory leak in the Linux kernel mlxsw spectrum_ipip implementation when changing the remote IPv6 address of an ip6gre net device. The root cause is that the driver failed to add the new address to its hash table and did not remove the old one, leading to leaks and a war...

CVE-2024-50296

CVE-2024-50296 affects the Linux kernel net/hns3 driver (and related SR-IOV cleanup path). Root cause: race in driver removal where concurrent VF disable and resource release call pci_disable_sriov() twice, leading to a NULL pointer dereference during device removal. Impact: kernel crash when the...

CVE-2024-53064

CVE-2024-53064 is a Linux kernel issue in the idpf/vc_core mailbox path. During a reboot-retry sequence, the mailbox workqueue may still run after resources are freed, leading to a NULL pointer dereference when the released control queue is accessed. The fix unrolls the workqueue cancellation and...

CVE-2024-53119

CVE-2024-53119 affects the Linux kernel virtio/vsock code and fixes a memory-leak in the accept_queue during socket destruction. The root cause is that accept_queue entries enqueued after a flush could be left behind before SOCK_DONE is set, causing leaks when sockets are torn down. The fix intro...

CVE-2024-53191

CVE-2024-53191 affects the Linux kernel, specifically the ath12k driver for WLAN (PCI/PCIE path). The issue arises when an initialization error during firmware handling leaves buffers dp->tx_ring[i].tx_status released, but they are freed again during device unbinding (ath12k_pci_remove), causi...

CVE-2024-56582

CVE-2024-56582: Linux kernel btrfs use-after-free in btrfs_encoded_read_endio() identified via KASAN trace in btrfs-endio path; confirmed in the provided trace and fixed in the kernel. Affected component: btrfs in the kernel; root cause: use-after-free in btrfs_encoded_read_endio(); impact as des...

CVE-2024-56744

Technical details for CVE-2024-56744 are not publicly provided in the supplied documents; no affected products or fixes are confirmed here. Monitor for updates from kernel advisories or vendor bulletins.

CVE-2024-58010

The CVE-2024-58010 issue is in the Linux kernel’s binfmt_flat handling, where on 32-bit systems the calculation of full_data could overflow: full_data = data_len + relocs * sizeof(unsigned long) when sizes/counts are not correctly bounded. This is reported to have been fixed in kernel releases (e...

CVE-2025-21758

CVE-2025-21758 is a Linux kernel vulnerability in the IPv6 multicast path. The issue: mld_newpack() could be called without RTNL or RCU being held, which may lead to unsafe access. The fix replaces sock_alloc_send_skb() (which uses GFP_KERNEL and can sleep) with alloc_skb() and charges the net-&g...

CVE-2025-21855

Summary (CVE-2025-21855, Linux kernel): The ibmvnic driver is affected by a use-after-free in ibmvnic_xmit caused by referencing skb memory after flushing the transmit buffer to VIOS. A race between skb length access and memory free (triggered by VIOS interrupts) can lead to a UAF condition, as e...

CVE-2025-22060

CVE-2025-22060 concerns the Linux kernel mvpp2 parser TCAM/SRAM memory. The issue arises when concurrent accesses to the indirect TCAM/SRAM tables via an index register are not atomic, enabling TOCTOU-like corruption when mvpp2_set_rx_mode() runs on multiple CPUs. In the described scenario, this ...

CVE-2025-22063

CVE-2025-22063 is a Linux kernel vulnerability in netlabel CALIPSO handling that can trigger a NULL pointer dereference when an IPv4 socket is used with an IPv6 connect. The issue arises from evaluating sk_fullsock(__sk) ? inet_sk(__sk)->pinet6 : NULL and accessing pinet6 for an IPv4 socket. A...

CVE-2025-22075

CVE-2025-22075 affects the Linux kernel (netlink rtnetlink path) where VF port/node GUIDs were previously included in ifinfo messages but their size wasn’t accounted for when allocating netlink messages. The issue could produce a “Message too long” warning when many VFs are configured (for exampl...

CVE-2025-22111

CVE-2025-22111: In the Linux kernel, the fix removes the RTNL dance for SIOCBRADDIF and SIOCBRDELIF to avoid RTNL pressure race conditions between bridging and device removal. The description details a race where one thread detaches a device from a bridge while another removes the bridge, potenti...

CVE-2025-23148

The CVE-2025-23148 issue applies to the Linux kernel: the Samsung Exynos chipid driver (exynos_chipid_probe) now checks soc_dev_attr->revision for NULL to prevent NULL-pointer dereference. This fixes a potential local dereference vulnerability. The fix mirrors a prior NULL-pointer dereference ...

CVE-2025-37786

CVE-2025-37786 affects the Linux kernel's DSA (distributed switch architecture) routing-table handling. When a tree probe completes with complete = true and a later step fails, dst->rtable entries may remain referencing freed ports, causing a use-after-free. The advisory explains that on probe...

CVE-2025-37788

CVE-2025-37788 affects the Linux kernel cxgb4 memory handling: in cxgb4_init_ethtool_filters(), a memory leak can occur if loc_array is allocated but bmap allocation fails, because the free path only frees from (i-1) iterations. The fix frees loc_array in the bmap error path, mitigating the leak....

CVE-2025-40325

CVE-2025-40325 – Linux kernel raid10 discard handling Issue: In md/raid10, a discard BIO with REQ_NOWAIT could be returned without waiting for a barrier, potentially leaving the system with an inconsistent discard handling path. The fix enforces waiting for the barrier before returning such a dis...

CVE-2010-0415

The CVE-2010-0415 issue affects the Linux kernel before 2.6.33-rc7. The do_pages_move function in mm/migrate.c does not validate node values, allowing local users to read arbitrary kernel memory locations and cause an OOPS, with possible other impacts by specifying a node outside the kernel’s nod...

CVE-2011-1180

The CVE-2011-1180 issue affects the Linux kernel’s IrDA code, specifically the iriap_getvaluebyclass_indication function in net/irda/iriap.c. It describes multiple stack-based buffer overflows caused by unvalidated length fields for names and attributes, allowing remote attackers to trigger memor...

CVE-2011-1745

The CVE-2011-1745 entry affects the Linux kernel: an integer overflow in the agp_generic_insert_memory function (drivers/char/agp/generic.c) in kernels before 2.6.38.5. This allows local users to gain privileges or cause a denial of service via a crafted AGPIOC_BIND agp_ioctl call. Affected platf...

CVE-2014-0100

CVE-2014-0100 refers to a race condition in the Linux kernel’s inet_frag_intern function (net/ipv4/inet_fragment.c) that affects kernel versions up to 3.13.6. The vulnerability can be triggered by a large sequence of fragmented ICMP Echo Request packets under heavy CPU load, leading to a use-afte...

CVE-2015-0275

CVE-2015-0275 affects the Linux kernel ext4 subsystem: the ext4_zero_range function in fs/ext4/extents.c allows local users to trigger a denial of service via a crafted fallocate zero-range request. The linked MiracleLinux/Unity Linux Nessus entries reproduce this: the vulnerability is described ...

CVE-2015-4700

The CVE-2015-4700 issue affects the Linux kernel (arch/x86/net/bpf_jit_comp.c) up to version 4.0.5. The bpf_int_jit_compile function can be triggered by crafted BPF instructions to cause a denial-of-service (system crash) via late convergence in the JIT compiler. Affected component is the JIT-com...

CVE-2015-7990

Technical details beyond the initial description are not provided in the connected documents. No public details about CVE-2015-7990 are included here; monitor for updates.

CVE-2015-8845

CVE-2015-8845 affects the Linux kernel on powerpc platforms prior to 4.4.1. The vulnerability arises because the tm_reclaim_thread function in arch/powerpc/kernel/process.c may proceed with a TM reclaim call without verifying that TM suspend mode exists, enabling local users to trigger a denial o...

CVE-2017-18193

The CVE-2017-18193 issue is in the Linux kernel’s F2FS extent_cache.c (before 4.13). It mishandles extent trees, enabling a local, multi-threaded application to trigger a denial of service. Connected advisories (Unity Linux and OpenVAS/Open Nessus entries) confirm the affected component and impac...

CVE-2017-9150

CVE-2017-9150 affects the Linux kernel prior to 4.11.1, where the function do_check in kernel/bpf/verifier.c fails to expose the allow_ptr_leaks setting to constrain the output of print_bpf_insn. This omission enables local attackers to leak sensitive address information through crafted bpf syste...

CVE-2021-47094

CVE-2021-47094 is associated with a Linux kernel KVM vulnerability in the x86 MMU. After dropping mmu_lock in the TDP MMU, the code restarts the tdp_iter_next() iterator and must not advance it; otherwise the top-level SPTE and all children can be skipped, which is fatal if any skipped SPTEs were...

CVE-2021-47356

CVE-2021-47356 : The issue is in the Linux kernel mISDN driver where its remove path could use-after-free a timer because del_timer() doesn’t wait for the handler to finish. The advisory notes the fix is to call del_timer_sync() to ensure the timer handler has finished and cannot reschedule. Affe...

CVE-2021-47527

Summary: CVE-2021-47527 affects the Linux kernel’s serial core. The root cause was a transmit-buffer not freed on final close after switching to tty_port_close, which could cause the buffer to remain uncleared (stalling ioctl drains) and could leak on driver unbind. The issue has been fixed in th...

CVE-2022-47943

Summary: CVE-2022-47943 affects the ksmbd component of the Linux kernel (versions 5.15–5.19 before 5.19.2). The flaw is an out-of-bounds read that can trigger an OOPS when handling SMB2_WRITE with a large length in the zero DataOffset case. Impact (as stated): potential kernel crash/denial of ser...

CVE-2022-48629

Summary : CVE-2022-48629 affects the Linux kernel crypto RNG for Qualcomm (qcom-rng). The issue arises in qcom_rng_read() and qcom_rng_generate() where the destination buffer may not be fully filled on success, leaving trailing zeros when the RNG can return 0 from the generate() function. This co...

CVE-2022-48686

Summary (CVE-2022-48686) Affected software: Linux kernel (nvme-tcp) as described in initial document; Astra Linux advisories corroborate the Linux kernel fix. Root cause: Use-after-free (UAF) in nvme-tcp when detecting digest errors; also a control flow issue requiring exiting the io_work loop af...

CVE-2022-48733

The CVE-2022-48733 issue affects the Linux kernel (btrfs) where a use-after-free can occur in create_snapshot() if btrfs_commit_transaction() fails and the pending snapshot is freed, leaving it in the transaction list. The root cause is improper lifecycle handling of the pending snapshot during t...

CVE-2022-48735

CVE-2022-48735 concerns a use‑after‑free in the Linux kernel ALSA hda LED class devices created by HD‑audio codec drivers. The issue arises because LED class devices are registered via devm_led_classdev_register() and tied to the codec device, but the devres release can execute before the devm ch...

CVE-2022-48947

CVE-2022-48947 is a Linux kernel vulnerability related to Bluetooth L2CAP u8 overflow. By repeatedly sending L2CAP_CONF_REQ, chan->num_conf_rsp could wrap at 255. The fix adds a boundary check using L2CAP_MAX_CONF_RSP to prevent overflow. Connected advisories (e.g., Unity Linux/Astra Linux ent...

CVE-2022-49215

CVE-2022-49215 : In the Linux kernel, a race in xsk socket teardown can cause a NULL pointer dereference. The bug happens because xs->dev is NULL’ed before all users finish using the socket, and synchronize_net() does not wait for in-flight data-plane operations (xsk_poll, xsk_sendmsg, xsk_rec...

CVE-2022-49220

CVE-2022-49220 affects the Linux kernel in the dax subsystem. The issue occurs when inodes are not flushed before destroying dax_cache, triggered by loading and unloading the nd_pmem modules. The root cause is in dax_fs_exit() not flushing inodes prior to cache destruction, which can lead to obje...

CVE-2022-49430

The CVE-2022-49430 entry affects the Linux kernel in the gpio_keys controller. The issue arises from canceling a delayed work handle when the gpio_keys module unloads and an interrupt pin is used instead of GPIO; the module initializes delayed work only for GPIO-backed paths and not for interrupt...

CVE-2022-49515

The CVE-2022-49515 issue affects the Linux kernel ASoC driver for cs35l41. It is caused by an out-of-bounds access in otp_packed_element_t where CS35L41_NUM_OTP_ELEM is defined as 100 but only 99 entries exist in otp_map_1/2[CS35L41_NUM_OTP_ELEM], triggering UBSAN shift-out-of-bounds warnings in ...

CVE-2022-49549

The CVE-2022-49549 entry concerns a Linux kernel memory-leak in the x86 MCE/AMD path: when threshold_create_bank() fails inside mce_threshold_create_device(), the previously allocated threshold banks array (bp) could be leaked because threshold_remove_device() only frees it if the bank creation s...

CVE-2022-49612

CVE-2022-49612 discusses a Linux kernel vulnerability in the power: supply: core interpolation logic. The issue lies in boundary handling within power_supply_temp2resist_simple and power_supply_ocv2cap_simple, introduced by a4585ba2050f460f749bbaf2b67bd56c41e30283 (power: supply: core: Use librar...

CVE-2022-49691

CVE-2022-49691 describes a Linux kernel vulnerability in ERSPAN handling where code incorrectly assumes skb_transport_header is always set, affecting ip6erspan_tunnel_xmit() and erspan_fb_xmit(). The issue can impact packet transmission in ERSPAN-related paths when the transport header is not pre...

CVE-2023-52483

CVE-2023-52483 affects the Linux kernel where mctp_route_lookup/mctp_route_lookup_null traverse net->mctp.routes without an RCU read lock, allowing a potential race that could lead to a use-after-free due to a grace period expiry and a kfree while a route pointer is in use. The security adviso...

CVE-2023-52857

Technical details about CVE-2023-52857 are not publicly provided in the supplied documents. Monitor for updates from vendors and advisories.

CVE-2023-52913

CVE-2023-52913 concerns the Linux kernel DRM/i915 context UAF race: gem_context_register() makes the context visible to userspace, and a separate thread can trigger I915_GEM_CONTEXT_DESTROY, potentially using the ctx pointer after it's been exposed. The mitigation is to ensure that the ctx pointe...