CVE-2024-57986

CVE-2024-57986 affects the Linux kernel HID core: Resolution Multiplier handling assumes valid Logical Collections and may set multiplier_collection to NULL, enabling a potential flaw. The issue was only partially fixed previously; the remaining case (none of the found collections being a Logical...

CVE-2011-1776

The CVE-2011-1776 issue affects the Linux kernel’s is_gpt_valid function (fs/partitions/efi.c). It does not validate the size of a GPT entry, allowing physically proximate attackers to trigger a heap-based buffer overflow and OOPS or potentially read kernel heap memory when a crafted GPT storage ...

CVE-2014-9715

CVE-2014-9715 affects the Linux kernel prior to 3.14.5, where nf_conntrack_extend.h in the netfilter subsystem uses an insufficiently large data type for certain extension data. This can allow a local attacker to trigger a NULL pointer dereference and OOPS (DoS) by outbound traffic that loads ext...

CVE-2015-5283

CVE-2015-5283 affects the Linux kernel prior to 4.2.3. The sctp_init function in net/sctp/protocol.c uses an incorrect sequence of protocol-initialization steps, allowing a local attacker to cause a denial of service (panic or memory corruption) by creating SCTP sockets before all steps complete....

CVE-2017-18255

CVE-2017-18255 affects the Linux kernel: the perf_cpu_time_max_percent_handler in kernel/events/core.c (pre-4.11) can be triggered by a large value, causing a denial of service via integer overflow (and potential unspecified impact). It requires local access. A fix is available in kernel 4.11 and...

CVE-2017-6347

The CVE-2017-6347 entry describes a vulnerability in the Linux kernel (net/ipv4/ip_sockglue.c: ip_cmsg_recv_checksum) when built before version 4.10.1. The flaw arises from incorrect assumptions about skb data layout, allowing a local attacker to trigger a denial of service via a buffer over-read...

CVE-2017-7374

CVE-2017-7374 is a use-after-free in the Linux kernel fs/crypto/ subsystem prior to 4.10.7, where revoking keyring keys used for ext4, f2fs, or ubifs encryption can free cryptographic transform objects prematurely. This enables local attackers to cause a denial of service via a NULL pointer deref...

CVE-2019-15922

CVE-2019-15922 relates to the Linux kernel before 5.0.9, where a NULL pointer dereference can occur for a pf data structure if alloc_disk fails in drivers/block/paride/pf.c. This is a local, kernel‑space issue that can lead to a crash. The affected component is the paride pf driver path; the root...

CVE-2019-15923

The CVE-2019-15923 entry describes a NULL pointer dereference in the Linux kernel before 5.0.9, specifically for a cd data structure when alloc_disk fails in drivers/block/paride/pf.c. The available references point to upstream commit f0d1762554014ce0ae347b9f0d088f2c157c8c72 and ChangeLog-5.0.9. ...

CVE-2020-10742

CVE-2020-10742 : The Linux kernel vulnerability is an index buffer overflow during Direct IO writes that can cause the NFS client to crash and, in some cases, a kernel panic after a kmalloc memory allocation has a reach-out beyond the allocated buffer. The described impact includes data confident...

CVE-2022-3543

CVE-2022-3543 affects the Linux kernel BPF component: the memory leak occurs in the unix_sock_destructor/unix_release_sock paths in net/unix/af_unix.c. The issue is localized to the BPF code handling UNIX sockets, and the vulnerability can lead to memory consumption/leaf exhaustion. A patch is av...

CVE-2022-3577

CVE-2022-3577 is an out-of-bounds memory write flaw in the Linux kernel HID driver for Kid-friendly Wired Controller (bigben) in bigben_probe (drivers/hid/hid-bigbenff.c). A malicious or defunct bigben device could trigger an out-of-bounds write, potentially crashing the system or allowing local ...

CVE-2022-41848

CVE-2022-41848 affects the Linux kernel, specifically the PCMCIA driver path drivers/char/pcmcia/synclink_cs.c. The vulnerability is a race condition that can cause a use-after-free when a physically proximate attacker removes a PCMCIA device while an ioctl is in progress, due to a race between m...

CVE-2022-48743

CVE-2022-48743 affects the Linux kernel net/amd-xgbe driver. The issue is an skb data length underflow triggered by hardware descriptor inconsistencies, causing a BUG_ON() in include/linux/skbuff.h and intermittent kernel panics. A fix drops the offending packet when such underflows are detected....

CVE-2022-48947

CVE-2022-48947 is a Linux kernel vulnerability related to Bluetooth L2CAP u8 overflow. By repeatedly sending L2CAP_CONF_REQ, chan->num_conf_rsp could wrap at 255. The fix adds a boundary check using L2CAP_MAX_CONF_RSP to prevent overflow. Connected advisories (e.g., Unity Linux/Astra Linux ent...

CVE-2022-49158

CVE-2022-49158 affects the Linux kernel SCSI driver qla2xxx. The issue is a warning generated when adisc is flushed, where an error code type did not match the expected type. The fix adds translation between error code types to avoid the warning (no documented exploit). The connected advisories c...

CVE-2022-49466

CVE-2022-49466 affects the Linux kernel regulator: scmi subsystem. The root cause is a refcount leak in scmi_regulator_probe due to of_find_node_by_name() returning a node pointer with an incremented refcount; the patch adds a call to of_node_put() to release the node when done. This fix prevents...

CVE-2022-49596

The CVE-2022-49596 entry targets the Linux kernel vulnerability in the sysctl_tcp_min_snd_mss reader. The publicly provided details state a data race occurs when reading sysctl_tcp_min_snd_mss, as it can be changed concurrently. The fix introduced is to add READ_ONCE() to the readers of this sysc...

CVE-2022-49630

CVE-2022-49630: In the Linux kernel, a data-race around reading sysctl_tcp_ecn_fallback allows concurrent modification while being read. The issue is mitigated by adding READ_ONCE() to the reader, per the CVE description. This affects the kernel’s TCP/sysctl path and results in a data race that c...

CVE-2023-52993

CVE-2023-52993 affects the Linux kernel’s x86/i8259 legacy interrupt handling. The root cause is that IRQ_LEVEL was not set for legacy PIC interrupts, allowing a spurious APIC interrupt on IRQ0 to trigger a software resend of the legacy timer interrupt, which in the softirq/tasklet context can yi...

CVE-2023-53024

The CVE-2023-53024 entry concerns the Linux kernel BPF subsystem. Root cause: speculative store bypass (SSB) can cause a stack slot initially containing a pointer to be overwritten by a scalar without a subsequent lfence, enabling a potential speculative-pointer‑as‑scalar leak. The mitigation add...

CVE-2023-53066

CVE-2023-53066 affects the Linux kernel in the qed_sriov path. The vulnerability arises from potential NULL dereferences in qed_iov_get_vf_info, and the fix guards against NULL pointers by validating the helper’s returned info before use. This is a local issue with the impact characterized as hig...

CVE-2024-36934

CVE-2024-36934 concerns a Linux kernel vulnerability where a kernel buffer allocated for a userspace copy of nbytes could lack a terminating NUL, causing an out-of-bounds read when sscanf is used on the buffer. The root cause is failing to ensure the copied buffer is NUL-terminated. The fix repla...

CVE-2024-38576

CVE-2024-38576 affects the Linux kernel where rcuc: rcu: print_cpu_stall_info() could overflow a buffer when jiffies differences are large. The root cause involved printing an unsigned difference with %ld and a potential buffer overflow, which is fixed by replacing sprintf() with snprintf() and a...

CVE-2024-40916

The CVE-2024-40916 issue concerns the Linux kernel DRM/Exynos HDMI driver. When EDID reading fails and the driver reports no modes, the DRM core previously exposed a 1024x786 mode which some Exynos HDMI variants cannot drive. The fix changes this fallback to a safe 640x480 mode to avoid rendering...

CVE-2024-40957

CVE-2024-40957 (Linux kernel seg6) relates to parameter passing when NF_HOOK() is invoked from End.DX4 and End.DX6 in PREROUTING. input_action_end_dx4() and input_action_end_dx6() incorrectly passed a NULL outdev or invalid indev to NF_HOOK(), which can trigger a NULL pointer dereference in rpfil...

CVE-2024-42289

The CVE-2024-42289 issue in the Linux kernel affects the SCSI qla2xxx driver during vport delete. It caused a crash due to stale outstanding I/O entries not completing, leading to a NULL pointer dereference in dma_direct_unmap_sg during vport deletion. The fix explicitly sends an async logout for...

CVE-2024-43890

CVE-2024-43890: Linux kernel tracing overflow in get_free_elt() is fixed. The issue was that tracing_map->next_elt could overflow beyond tracing_map->max_elt, allowing insertion into a full tracing_map and potentially causing an infinite loop with preemption disabled, leading to a CPU hang....

CVE-2024-43893

CVE-2024-43893 (Linux kernel) fixes a divide-by-zero in uart_get_divisor triggered by TIOCSSERIAL with an invalid baud_base when uartclk becomes zero. The patch adds a zero-check for uartclk in uart_set_info() before subsequent serial_setup calls, preventing a divide-by-zero and potential oops on...

CVE-2024-44940

CVE-2024-44940 pertains to the Linux kernel. The issue is a WARN_ON_ONCE in gue_gro_receive when the encapsulated protocol has no GRO handler; the packet is contrived (Syzbot-triggered) and not actionable. The fix removes this warning, as it is expected and not a vulnerability vector, by dropping...

CVE-2024-44985

CVE-2024-44985 affects the Linux kernel in the IPv6 path (ip6_xmit). The issue is a use-after-free risk: if skb_expand_head() returns NULL, skb and the associated dst/idev may be freed, requiring rcu_read_lock() to prevent UAF. The vulnerability is resolved upstream; commits listed in the connect...

CVE-2024-46762

CVE-2024-46762 describes a Linux kernel issue in the Xen driver support (privcmd) where simultaneous calls to privcmd_irqfd_assign() and privcmd_irqfd_deassign() could lead to use-after-free of a kirqfd instance, potentially causing a kernel oops. The root cause is a lack of proper synchronizatio...

CVE-2024-47661

The CVE-2024-47661 issue affects the Linux kernel’s drm/amd/display path, where dmub_rb_cmd's ramping_boundary was defined as uint8_t but assigned 0xFFFF. The fix changes ramping_boundary to a uint8_t value of 0xFF, addressing two integer-overflow problems reported by Coverity. Affected component...

CVE-2024-47673

CVE-2024-47673 affects the Linux kernel wifi iwlwifi mvm; root cause is that TCM is not paused when the firmware is stopped, causing a host command to be sent to a non-live firmware. This can trigger a WARNING and potential local impact. Connected docs indicate patched kernels/versions: e.g., Mar...

CVE-2024-47691

CVE-2024-47691 affects the Linux kernel’s F2FS subsystem, tied to a race condition in f2fs_stop_gc_thread() that can cause a use-after-free in sbi->gc_th. The issue can occur during remount/shutdown scenarios where gc_th is freed, and a guard is needed via sb->s_umount semaphore. The descri...

CVE-2024-47712

CVE-2024-47712 affects the Linux kernel, specifically a WiFi driver issue in wilc1000. The bug occurs in wilc_parse_join_bss_param where the TSF field of the ies structure is accessed after unlocking the RCU read-side critical section, violating RCU usage rules and risking use-after-free or memor...

CVE-2024-49945

CVE-2024-49945 affects the Linux kernel where the ncsi work is not properly synchronized with the freeing of the ncsi device. The issue arises when the ncsi work function can run after the associated structure is freed, leading to use-after-free bugs or kernel panics. The documented impact is a p...

CVE-2024-49998

CVE-2024-49998 affects the Linux kernel net: dsa shutdown sequence, specifically lan9303. Two shutdown-time races are described: (1) a driver data pointer (dev_get_drvdata) may be accessed after shutdown, risking an NPD if the remove path runs; (2) concurrent zeroization of conduit->dsa_ptr ca...

CVE-2024-50258

CVE-2024-50258 affects the Linux kernel net stack. A small gso_max_size/gso_ipv4_max_size can cause an underflow in sk_dst_gso_max_size(), making sk->sk_gso_max_size exceed device limits and trigger a BUG_ON crash during tcp_write_xmit/tso processing. The root cause is in computing tso_segs (D...

CVE-2024-50265

CVE-2024-50265 concerns the Linux kernel OCFS2 XATTR handling. The issue arises in ocfs2_xa_remove() where, after a fault-injected -ENOMEM path, a faulty rc path causes the code to call ocfs2_xa_remove_entry(loc) twice: first from ocfs2_xa_cleanup_value_truncate() and then again when returning to...

CVE-2024-50286

The CVE-2024-50286 entry concerns the Linux kernel ksmbd subsystem. A race exists between ksmbd_smb2_session_create and ksmbd_expire_session that can lead to a use-after-free in the global sessions table. The fix adds a missing sessions_table_lock when adding or deleting sessions from the global ...

CVE-2024-53068

CVE-2024-53068 affects the Linux kernel’s ARM SCMI subsystem. The issue is a slab-use-after-free in scmi_bus_notifier caused by prematurely freeing scmi_dev->name in __scmi_device_destroy(); the release of scmi_dev->name is moved to scmi_device_release() to prevent use-after-free, per the p...

CVE-2024-53191

CVE-2024-53191 affects the Linux kernel, specifically the ath12k driver for WLAN (PCI/PCIE path). The issue arises when an initialization error during firmware handling leaves buffers dp->tx_ring[i].tx_status released, but they are freed again during device unbinding (ath12k_pci_remove), causi...

CVE-2024-56369

CVE-2024-56369 affects the Linux kernel DRM code: drm/modes/drm_mode_vrefresh() attempted to avoid divide-by-zero by checking htotal/vtotal, but can still trigger div-by-zero (vtotalhtotal ...). This can lead to a crash/denial of service (availability impact). The issue is fixed in the upstream k...

CVE-2024-56546

CVE-2024-56546 affects the Linux kernel in drivers/soc/xilinx, specifically xlnx_add_cb_for_suspend. The issue arises if kmalloc fails to allocate cb_data, because the error path does not free eve_data (missing kfree), potentially causing a memory leak and impacting availability. The patch adds t...

CVE-2024-56549

CVE-2024-56549 (cachefiles) in the Linux kernel fixes a NULL pointer dereference in object->file, occurring in ondemand-mode due to inconsistent lifetime between the allocated fd and object->file. The trigger path includes cachefiles_ondemand_fd_write_iter -> fscache_cookie_state_machine...

CVE-2024-56632

A connected report (BDU:2025-15313) describes a memory-leak vulnerability in the Linux kernel NVMe over TCP driver, specifically nvme_tcp_setup_ctrl() in driver/nvme/host/tcp.c. The issue leaks memory (tagset occupied by admin_q) when creating a new ctrl fails, potentially causing service failure...

CVE-2024-56660

CVE-2024-56660 : In the Linux kernel, the DR (Direct Routing) path for mlx5 may return either -EBUSY or -ENOMEM from dr_domain_add_vport_cap(), but the code can propagate an error pointer when -ENOMEM is returned. This can lead to a dereference of an error pointer inside dr_ste_v0_build_src_gvmi_...

CVE-2024-56692

CVE-2024-56692 concerns the Linux kernel’s f2fs file system. The vulnerability stems from insufficient sanity checks for the nat entry blkaddr used during truncate_node(), which can lead to a system panic when f2fs_invalidate_blocks() processes a corrupted blkaddr (as observed in fuzzing). The ro...

CVE-2024-56744

Technical details for CVE-2024-56744 are not publicly provided in the supplied documents; no affected products or fixes are confirmed here. Monitor for updates from kernel advisories or vendor bulletins.