CVE-2024-56749

Technical details for CVE-2024-56749 are not publicly provided in the supplied documents; no vendor names, affected products, or remediation specifics are present. Monitor for official advisories and patches.

CVE-2025-21795

CVE-2025-21795 affects the Linux kernel NFSD component. The vulnerability causes nfsd4_shutdown_callback to hang when nfs4_client is in courtesy state, because cl_cb_inflight remains non-zero and TCP may take ~15 minutes to drop the connection. The provided connected documents indicate a fix in n...

CVE-2025-21816

CVE-2025-21816 affects the Linux kernel hrtimers subsystem. The issue arises when hrtimers queued on an offline CPU can wake up and arm the deadline timer after CPU hotplug stage CPUHP_AP_HRTIMERS_DYING, potentially impacting bandwidth timer handling (notably RCU-related wakeups). The documented ...

CVE-2025-21872

CVE-2025-21872 – Linux kernel (EFI/MOKVAR handling) : The vulnerability arises from how the kernel validates the EFI MOKvar table. In older code, the mokvar table was fully remapped on each iteration to determine its size, which could fail if the table grew large due to early_memmap limitations, ...

CVE-2025-21956

CVE-2025-21956 : In the Linux kernel, drm/amd/display incorrectly handled color depth 14, triggering a warning in amdgpu when running on Radeon RX 6600 XT. The issue is resolved by assigning the pixel clock as pix_clk * (14 * 3) / 24, aligning with other color depths, and also fixes indentation i...

CVE-2025-22087

Technical details about CVE-2025-22087 are not provided in the connected documents. The description outlines kernel stack/array bounds handling but no public advisories, affected products/versions, or mitigations are given here. Monitor for updates.

CVE-2025-22088

Summary of CVE-2025-22088: In the Linux kernel RDMA erdma driver, the vulnerability is a Use-After-Free (UAF) in erdma_accept_newconn(). After erdma_cep_put(new_cep) frees new_cep, a subsequent dereference could access freed memory. The issue is fixed in the provided updates. The connected docume...

CVE-2025-23151

Technical details for CVE-2025-23151 are not provided in the connected documents. The initial description mentions a Linux kernel fix for an MHI bus/host race, but there are no specifics on affected products, vectors, or remediation in the supplied sources. Monitor for updates.

CVE-2025-37792

The CVE-2025-37792 issue affects the Linux kernel Bluetooth btrtl driver (rtl load file path). root cause: btrtl_initialize() may treat a zero-length rtl_load_file() as non-error, causing an error pointer vs NULL and a subsequent NULL dereference. Severity is MEDIUM (CVSSv3.1 base 5.5), with loca...

CVE-2025-37862

CVE-2025-37862 affects the Linux kernel HID PIDFF code. The vulnerability is a NULL pointer dereference in pidff_find_fields (and pidff_find_special_field) when searching for a report not implemented on the device, potentially triggering a crash. The issue could occur for both optional and requir...

CVE-2025-37998

CVE-2025-37998 concerns openvswitch in the Linux kernel where unsafe Netlink attribute parsing in output_userspace() could lead to processing of malformed attributes. The connected documents confirm a patch that replaces the manual Netlink attribute iteration in output_userspace() with nla_for_ea...

CVE-2008-2136

The CVE-2008-2136 entry affects the Linux kernel SIT driver: a memory leak in ipip6_rcv (net/ipv6/sit.c) can be triggered by network traffic to a SIT tunnel, due to improper skb handling (pskb_may_pull and kfree_skb) and skb reference count management. Vulnerable on Linux kernel 2.4 up to 2.4.36....

CVE-2009-0028

CVE-2009-0028 is a local vulnerability in the Linux kernel up to version 2.6.28 where the clone system call with CLONE_PARENT can allow an unprivileged child to spawn a second child and exit, enabling it to send arbitrary signals to the parent process. The MiracleLinux AXSA-2009-42:04 advisory ex...

CVE-2010-4655

CVE-2010-4655 affects the Linux kernel’s net/core/ethtool.c, where uninitialized data structures in ethtool ioctl handling could allow a local user with CAP_NET_ADMIN to leak information from kernel heap memory. The initial description specifies the vulnerability exists in kernel builds before 2....

CVE-2011-4132

CVE-2011-4132 affects the Linux kernel’s Journaling Block Device (JBD) cleanup_journal_tail function. The vulnerability allows local users to trigger a denial of service (assertion error and kernel oops) when handling an ext3 or ext4 image containing an invalid log first block value. The descript...

CVE-2013-0343

CVE-2013-0343 affects the Linux kernel’s IPv6 handling, specifically ipv6_create_tempaddr in net/ipv6/addrconf.c, up to version 3.8. It can allow a remote attacker to cause a denial of service (excessive retries and RA address-generation outage) and potentially obtain sensitive information via IC...

CVE-2014-4699

CVE-2014-4699 affects the Linux kernel prior to 3.15.4 on Intel CPUs: a non-canonical saved RIP value in system calls that do not use IRET can be exploited via ptrace and fork to escalate privileges or trigger a denial of service (double fault). Multiple connected advisories (e.g., MiracleLinux A...

CVE-2016-3695

CVE-2016-3695 in the Linux kernel relates to the einj_error_inject function (drivers/acpi/apei/einj.c). The issue allows a local user to simulate hardware errors and cause a denial of service by failing to disable APEI error injection via EINJ when securelevel is set. The connected documents show...

CVE-2016-4580

CVE-2016-4580 affects the Linux kernel up to version 4.5.4 (pre-4.5.5). The vulnerability arises in x25_negotiate_facilities() inside net/x25/x25_facilities.c where a data structure is not properly initialized, enabling an attacker to read sensitive data from kernel stack memory via an X.25 Call ...

CVE-2016-9178

CVE-2016-9178 affects the Linux kernel prior to 4.7.5. The macro __get_user_asm_ex in arch/x86/include/asm/uaccess.h does not initialize a certain integer variable, allowing local users to obtain sensitive information from kernel stack memory by triggering a failure of a get_user_ex call. Impact ...

CVE-2017-11472

CVE-2017-11472 affects the Linux kernel via the acpi_ns_terminate() path in drivers/acpi/acpica/nsutils.c. The flaw does not flush the operand cache, enabling a local user to dump kernel memory and bypass KASLR by crafting an ACPI table, with impact described for kernels before 4.12 (and through ...

CVE-2017-15537

The CVE-2017-15537 issue affects the x86 FPU state handling in the Linux kernel prior to 4.13.5. If a CPU supports xsave but not xsaves, ptrace() or rt_sigreturn() mishandles reserved xstate header bits, enabling local users to read other processes’ FPU registers. A fix is provided in Linux kerne...

CVE-2017-16530

CVE-2017-16530 affects the Linux kernel uas driver (drivers/usb/storage/uas.c; uas-detect.h). The issue allows a local user to trigger a denial of service or potentially other impact via a crafted USB device, caused by an out-of-bounds read. Affected condition is the uas driver in the kernel prio...

CVE-2018-14610

CVE-2018-14610 concerns the Linux kernel up to 4.17.10. A crafted btrfs image mounting scenario can trigger an out-of-bounds access in write_extent_buffer() due to insufficient verification that each block group has a corresponding chunk at mount time (in fs/btrfs/extent-tree.c). This can lead to...

CVE-2019-10142

CVE-2019-10142 references a flaw in the Linux kernel's freescale hypervisor manager implementation. A parameter passed to an ioctl was not properly validated and was used in size calculations for page size, making the kernel vulnerable on 5.0.x kernels before 5.0.17. Exploitation could crash the ...

CVE-2020-35501

CVE-2020-35501 is rejected; this CVE ID is not a valid vulnerability entry.

CVE-2021-47284

CVE-2021-47284 (Linux kernel) relates to isdn: mISDN: netjet crash in nj_probe. The issue occurs when nj_setup may fail with -EIO, leaving card->irq initialized and >0; a subsequent nj_release frees an IRQ that wasn’t requested. The fix deletes the prior assignment to card->irq and keeps...

CVE-2021-47338

The CVE-2021-47338 entry describes a Linux kernel fault in fbmem: fb_delete_videomode() could delete a video mode still in use, causing a use-after-free (UAF). Root cause is that fb_set_var calls fbcon_mode_deleted() result without confirming mode usage, enabling UAF in fb_mode_is_equal and subse...

CVE-2021-47489

Concretely affected: the Linux kernel AMDGPU display driver code, specifically the drm/amdgpu_dm_debugfs.c path. A heap-based buffer overflow can be triggered by writing a string into the debug filesystem (dp_link_settings_write path), due to missing size checks when copying from userspace into a...

CVE-2022-0400

The CVE-2022-0400 entry concerns an out-of-bounds read in the Linux kernel’s SMC protocol stack that can enable remote denial of service. Connected sources (NVD, OSV, Debian-related OSV entries) confirm the affected component and impact but do not provide a patched version or explicit remediation...

CVE-2022-3534

CVE-2022-3534 affects the libbpf component (function btf_dump_name_dups in tools/lib/bpf/btf_dump.c) with a use-after-free in Linux kernel/libbpf. Debian and other sources report a patch and version bumps: Debian DLA fixes libbpf to 0.3-2+deb11u1 (and related packages), and ALT Linux notes a fix ...

CVE-2022-48638

CVE-2022-48638 pertains to the Linux kernel cgroup subsystem. The issue stems from cgroup_get_from_id() not validating that the looked-up kn is a directory, which must be a kernfs directory. If the id supplied by userspace points to a non-directory, it can trigger a kernel panic. The connected As...

CVE-2022-48757

In the Linux kernel vulnerability CVE-2022-48757, information leakage occurs in /proc/net/ptype: within one net namespace, a packet socket created without binding to a device can expose the new packet_type to other namespaces by reading /proc/net/ptype. The fix adds a net pointer in packet_type t...

CVE-2022-49253

CVE-2022-49253 affects the Linux kernel in the media: usb: go7007: s2250-board path, where a leak is fixed by calling i2c_unregister_device(audio) on the error path during probe. Connected sources (SUSE Astra Linux advisories) confirm the fix is in this area. The CVE description in the initial do...

CVE-2022-49305

CVE-2022-49305 affects the Linux kernel driver path drivers/staging/rtl8192u where a deadlock in ieee80211_beacons_stop() could occur. The root cause is a lock-order interaction: del_timer_sync() waited while holding ieee->beacon_lock in ieee80211_beacons_stop(), but the timer handler also nee...

CVE-2022-49546

Technical details (affected product/version, root cause, impact, fix specifics) are not publicly provided in the connected documents. Monitor for updates.

CVE-2022-49563

CVE-2022-49563 relates to the Linux kernel crypto: qat RSA path. The fix adds parameter checks and rejects requests when the source buffer size exceeds the RSA key size to prevent a potential integer underflow when copying the source scatterlist to a linear buffer. Connected advisories (Astra Lin...

CVE-2022-49671

CVE-2022-49671 affects the Linux kernel RDMA/CM component. The issue is a memory leak in ib_cm_insert_listen where cm_id_priv resources allocated by cm_alloc_id_priv() are not freed if cm_init_listen() fails; an error unwind was missing and has been added to fix the leak. Connected sources refere...

CVE-2022-49759

The CVE-2022-49759 entry concerns the Linux kernel vmw_vmci/VMCI path: the vmci_dispatch_dgs() tasklet calls vmci_read_data(), which uses wait_event() and can sleep in atomic context, risking deadlock. The fix replaces tasklets with threaded IRQs and removes tasklets usage entirely. Impact center...

CVE-2022-49902

CVE-2022-49902 concerns a Linux kernel memory-leak in rq_wb on add_disk failure. kmemleak reported 3 memory-leak instances; the leak stems from memory allocated in wbt_enable_default() not being freed in device_add_disk()’s error path. Normally, del_gendisk()/rq_qos_exit() would free rq_wb memory...

CVE-2023-0469

CVE-2023-0469 is a use-after-free in io_uring/filetable.c (io_install_fixed_file) within the Linux kernel’s io_uring subcomponent during call cleanup, potentially enabling a local DoS. Affected: Linux kernel with vulnerable io_uring code. Exploitation details are not provided in the supplied docu...

CVE-2023-5197

CVE-2023-5197 is a use-after-free vulnerability in the Linux kernel’s netfilter nf_tables component. Public documents confirm it can be triggered by the addition/removal of rules within the same transaction, leading to potential local privilege escalation. Affected context includes Linux kernel d...

CVE-2023-52532

CVE-2023-52532 concerns a Linux kernel TX CQE error handling issue in net: mana. The advisory states that for an unknown TX CQE error type (likely from newer hardware), the kernel must still free the SKB and update the queue tail to avoid accounting errors; TX errors can be triggered by injecting...

CVE-2023-53024

The CVE-2023-53024 entry concerns the Linux kernel BPF subsystem. Root cause: speculative store bypass (SSB) can cause a stack slot initially containing a pointer to be overwritten by a scalar without a subsequent lfence, enabling a potential speculative-pointer‑as‑scalar leak. The mitigation add...

CVE-2023-53121

The CVE-2023-53121 vulnerability affects the Linux kernel where tcp_rtx_synack() can be invoked from process context, allowing tcp_make_synack() to touch per-CPU data with preemption enabled and trigger a BUG: using __this_cpu_add() in preemptible code. The root cause is a context-inappropriate c...

CVE-2023-5972

CVE-2023-5972 concerns a null pointer dereference in the netfilter nft_inner.c path of the Linux kernel. A local attacker could crash the system or escalate privileges via improper handling of nft_inner_num/nft_inner_expr_name attributes in inner tunnel netlink attributes, as described in the CVE...

CVE-2024-26695

CVE-2024-26695 affects the Linux kernel crypto: ccp and fixes a null pointer dereference in __sev_platform_shutdown_locked when the SEV platform device is shutdown with a null psp_master (e.g., DEBUG_TEST_DRIVER_REMOVE). The issue was observed via KASAN, showing a null-deref in __sev_platform_shu...

CVE-2024-26839

CVE-2024-26839 affects the Linux kernel: a memleak in IB/hfi1’s init_credit_return when dma_alloc_coherent fails to allocate dd->cr_base[i].va; proper cleanup should deallocate dd->cr_base and any previously allocated dd->cr_base[i] to avoid leaks. The issue is resolved by the kernel fix...

CVE-2024-35830

The CVE-2024-35830 issue concerns the Linux kernel media driver tc358743. Concrete details from connected advisories show the vulnerability arises when the v4l2 async device is registered before the device is fully set up. The fix is to register the v4l2 async device only after successful setup, ...

CVE-2024-35849

CVE-2024-35849 affects the Linux kernel btrfs_ioctl_logical_to_ino path. The issue is an information leak: a struct btrfs_data_container allocated with kvmalloc() is copied back to user space without zero-filling, exposing uninitialized memory (Bytes 40-65535) to user-space. The root cause is lac...