CVE-2024-26824

CVE-2024-26824 affects the Linux kernel crypto/algif_hash: hashing a zero-length message could trigger a faulty SG list free on error. The fix removes freeing the SG list on the zero-length error path; kernel updates implementing this change are the remediation.

CVE-2024-35907

Mode C: The CVE-2024-35907 issue affects the mlxbf_gige driver in the Linux kernel (BlueField-3 SmartNIC). The root cause is a NULL pointer dereference in mlxbf_gige_open() when kdump is enabled, traced to a pending RX interrupt that fires before request_irq(RX IRQ) is called, causing an interrup...

CVE-2024-36894

CVE-2024-36894 relates to a race in the Linux kernel USB gadget stack (usb: gadget: f_fs) between aio_cancel() and AIO completion for FFS-based USB requests on the UDC. The issue could cause a stale/hanging pointer when a completion runs concurrently with an aio_cancel, as io_data->req may be ...

CVE-2024-36946

CVE-2024-36946 is a Linux kernel local denial of service issue related to phonet: rtm_phonet_notify() skb allocation. The root cause is that fill_route() stores three components in the skb (rtmsg, RTA_DST, RTA_OIF) and rtm_phonet_notify() should allocate space via NLMSG_ALIGN(sizeof(struct rtmsg)...

CVE-2024-38381

CVE-2024-38381 affects the Linux kernel vulnerability in the NFC NFC-NCI path. The issue is an uninitialized-value access in nci_rx_work, which parses a received packet from ndev->rx_q without validating header size, payload size, and total packet size before processing. An invalid packet coul...

CVE-2024-38589

CVE-2024-38589 : In the Linux kernel netrom subsystem, a deadlock can occur in nr_rt_ioctl due to a circular locking dependency between nr_node_list_lock and nr_node_lock. Syzbot identified a possible deadlock when attempting to acquire nr_node_lock while already holding nr_node_list_lock, with t...

CVE-2024-42098

The CVE-2024-42098 entry concerns the Linux kernel crypto/ecdh logic, where private_key can remain partially overwritten when a caller-supplied or newly generated key is shorter than the previous one. The documented fix explicitly zeroizes the entire private_key array before writing new material,...

CVE-2024-42107

CVE-2024-42107 affects the Linux kernel ice driver’s PTP support. The issue is a race between ice_ptp_extts_event() and ice_ptp_release() that can dereference a NULL pointer (ptp_clock_event called with NULL) after the PTP clock has been released, causing a kernel panic. The documented fix is to ...

CVE-2024-42297

CVE-2024-42297 affects the Linux kernel’s f2fs filesystem. The root cause is a path that dirties an inode (FI_DIRTY_INODE) during operations on a read‑only filesystem, leading to a kernel panic in f2fs_evict_inode when unmounting. The provided details trace the sequence from do_sys_open → f2fs_lo...

CVE-2024-46705

CVE-2024-46705 affects the Linux kernel DRM Xe driver. The flaw arises from how mmio mappings are reset to NULL on device removal, intended to prevent rogue MMIO access after a device is removed, but could be misused when unmapped regions are remapped by another component, leading to system disru...

CVE-2024-46751

CVE-2024-46751 affects the Linux kernel btrfs path where a 0 reference count could trigger a BUG_ON() in btrfs_lookup_extent_info(). The vulnerability arises from the incorrect BUG_ON() and is fixed by changing the code to return -EUCLEAN, abort the transaction, and log an error instead. This red...

CVE-2024-46801

CVE-2024-46801 is a Linux kernel issue in libfs: fix get_stashed_dentry().get_stashed_dentry() may dereference a stashed dentry without proper protection; the fix switches from READ_ONCE() to rcu_dereference() to ensure rcu protection, addressing potential use-after-free. Public documents (includ...

CVE-2024-46830

CVE-2024-46830 affects the Linux kernel KVM for x86. The vulnerability arises when acquiring kvm->srcu while handling KVM_SET_VCPU_EVENTS, because KVM will forcibly leave nested VMX/SVM during SMM toggling and leaving nested VMX can read guest memory. The described fix: grab SRCU unconditional...

CVE-2024-49866

CVE-2024-49866 involves a race in Linux kernel tracing/timerlat during CPU hot-plug/cpuhp handling. The issue arises when the timerlat/1 thread is migrated during thread creation due to asynchronous CPU online processing (osnoise hotplug workers) and CPU removal from cpu_online_mask during offlin...

CVE-2024-49912

The CVE-2024-49912 entry concerns a Linux kernel DRM/AMD display issue. A null pointer dereference risk existed in drm/amd/display within planes_changed_for_existing_stream when stream_status could be null. The published fix adds a null check for stream_status in planes_changed_for_existing_strea...

CVE-2024-49922

The CVE-2024-49922 entry concerns the Linux kernel DRM AMD display driver. The issue arises from using pointers that may be NULL in a path where they had been validated earlier in the same function, triggering null-pointer handling after use. The vulnerability is mitigated by a fix that adds null...

CVE-2024-50112

In CVE-2024-50112, the Linux kernel fixes a weakness in Linear Address Masking (LAM) on x86 by disabling LAM in most cases. The vulnerability stems from transient execution risk related to LAM unless Linear Address Space Separation (LASS) is active. Until LASS support lands, LAM should only be al...

CVE-2024-53087

Technical details about CVE-2024-53087 are not provided in the connected documents. The initial description includes a summary but no publishable technical specifics (affected versions, impact, or fixes) in the supplied sources. Monitor for updates.

CVE-2024-53175

CVE-2024-53175 affects the Linux kernel’s IPC subsystem. The issue arises when percpu memory allocation fails during create_ipc_ns, leading to a memleak because ipc sysctls and mq sysctls are not released on failure. The fix releases these resources on failure to prevent leaks, as illustrated by ...

CVE-2024-56575

CVE-2024-56575 affects the Linux kernel component media: imx-jpeg. The issue is triggered when power suppliers are detached without proper synchronization with power management callbacks, risking kernel panic from a NULL-pointer dereference during dev_pm_domain_detach(). A fix ensures power suppl...

CVE-2024-56744

Technical details for CVE-2024-56744 are not publicly provided in the supplied documents; no affected products or fixes are confirmed here. Monitor for updates from kernel advisories or vendor bulletins.

CVE-2024-58020

CVE-2024-58020 affects the Linux kernel HID multitouch driver. The issue arises when devm_kasprintf() returns NULL and the result is used in mt_input_configured() without a NULL check, risking NULL pointer dereference. Acknowledged fixes add a NULL check in mt_input_configured(); impact is listed...

CVE-2025-21712

In the Linux kernel, the md/md-bitmap component had a race where bitmap_get_stats() could be called while the bitmap storage was destroyed or not fully initialized, risking a general protection fault. The root cause was dereferencing bitmap->storage outside a synchronized lifetime of the bitma...

CVE-2025-21739

CVE-2025-21739 affects the Linux kernel SCSI UFS path. A use-after-free occurs when crypto private data (struct ufs_hba::crypto_profile) is released as part of ufshcd_dealloc_host() during driver removal or error handling, while a cleanup handler registered by devm_blk_crypto_profile_init() still...

CVE-2025-21931

CVE-2025-21931 affects the Linux kernel memory hotplug path (hwpoison) and was fixed by ensuring folio lock is held before unmapping hwpoisoned folio. The fix adds the folio lock around unmap calls in do_migrate_range/try_to_unmap to prevent the kernel BUG triggered when folio is not locked. The ...

CVE-2025-21975

Technical details for CVE-2025-21975 are not publicly provided in the supplied Connected documents. The entry description exists, but there are no explicit affected products/versions, impact, or fixes in the connected items. Monitor for vendor advisories.

CVE-2025-21978

CVE-2025-21978 – Linux kernel (drm/hyperv): address space leak in Hyper-V DRM device mapping . The vulnerability occurs when a Hyper-V DRM device is probed: the driver allocates MMIO space for VRAM and maps it as cacheable, but on device removal or probing error path the MMIO space is released wi...

CVE-2025-37820

CVE-2025-37820 (Linux kernel – xen-netfront) has a concrete issue: the function xdp_convert_buff_to_frame() may return NULL when failing to convert an XDP buffer to an XDP frame due to memory constraints, internal errors, or invalid data. If the caller does not check for NULL, a NULL pointer dere...

CVE-2025-37862

CVE-2025-37862 affects the Linux kernel HID PIDFF code. The vulnerability is a NULL pointer dereference in pidff_find_fields (and pidff_find_special_field) when searching for a report not implemented on the device, potentially triggering a crash. The issue could occur for both optional and requir...

CVE-2025-37994

CVE-2025-37994 affects the Linux kernel driver path usb: typec: ucsi: displayport. The root cause is a NULL pointer access in ucsi_displayport_work handling. A patch was applied to ensure the UCSI driver waits for all pending tasks in the ucsi_displayport_work queue to finish before partner remov...

CVE-2025-39989

The CVE-2025-39989 issue affects the Linux kernel’s x86 memory error handling (MCE) path. Root cause: a patch series changes the copy-from-user recovery flow by introducing and switching extable fixup types, notably EX_TYPE_EFAULT_REG, instead of handling EX_TYPE_UACCESS for poison found in get_u...

CVE-2008-1673

The CVE-2008-1673 vulnerability affects the Linux kernel ASN.1 BER decoding in CIFS and ip_nat_snmp_basic modules (and gxsnmp). Root cause: improper validation of ASN.1 BER lengths, enabling a remote attacker to crash the system or execute arbitrary code via: (1) a length greater than the working...

CVE-2009-3080

CVE-2009-3080 affects the Linux kernel gdth driver (gdth_read_event in drivers/scsi/gdth.c). In kernels before 2.6.32-rc8, a negative event index in an IOCTL can allow local users to cause a denial of service or potentially gain privileges. MiracleLinux advisories cite this CVE as part of affecte...

CVE-2010-3432

CVE-2010-3432 affects the Linux kernel SCTP stack: sctp_packet_config in net/sctp/output.c initializes packet data structures too aggressively in kernels before 2.6.35.6, enabling remote attackers to trigger a denial of service (panic) via a specific SCTP traffic sequence. Affected component: ker...

CVE-2010-3850

CVE-2010-3850: In the Linux kernel, the ec_dev_ioctl function in net/econet/af_econet.c did not require CAP_NET_ADMIN, allowing local users to bypass access restrictions and configure econet addresses via an SIOCSIFADDR ioctl. Documented impact is local privilege/unauthorized configuration; fix a...

CVE-2010-4668

CVE-2010-4668 affects the Linux kernel up to 2.6.37-rc7, where blk_rq_map_user_iov in block/blk-map.c allows a local user to trigger a panic/DoS via a zero-length I/O request to a SCSI device, due to an unaligned map. The vulnerability is tied to an incomplete fix for CVE-2010-4163. Affected vers...

CVE-2011-1160

Technical details for CVE-2011-1160 are not publicly available in the supplied connected documents. The initial description identifies a kernel memory info leak in tpm_open (Linux kernel

CVE-2014-0069

The CVE-2014-0069 entry affects the Linux kernel (fs/cifs/file.c: cifs_iovec_write) up to version 3.13.5. The vulnerability stems from improper handling of uncached write operations that copy fewer bytes than requested, enabling local users to read kernel memory (information disclosure), cause me...

CVE-2016-8630

Consolidated from CVE-2016-8630 detail: The Linux kernel, prior to 4.8.7, when KVM is enabled, is vulnerable to a local Denial of Service where a crafted ModR/M byte used with an undefined x86 instruction can crash the host OS. Affected component is arch/x86/kvm/emulate.c. Impact is host stabilit...

CVE-2016-8632

CVE-2016-8632 affects the Linux kernel’s tipc_msg_build() in net/tipc/msg.c (up to version 4.8.11). The vulnerability stems from failing to validate the relationship between minimum fragment length and maximum packet size, enabling a local user with CAP_NET_ADMIN to gain privileges or cause a hea...

CVE-2017-18193

The CVE-2017-18193 issue is in the Linux kernel’s F2FS extent_cache.c (before 4.13). It mishandles extent trees, enabling a local, multi-threaded application to trigger a denial of service. Connected advisories (Unity Linux and OpenVAS/Open Nessus entries) confirm the affected component and impac...

CVE-2017-9150

CVE-2017-9150 affects the Linux kernel prior to 4.11.1, where the function do_check in kernel/bpf/verifier.c fails to expose the allow_ptr_leaks setting to constrain the output of print_bpf_insn. This omission enables local attackers to leak sensitive address information through crafted bpf syste...

CVE-2021-47178

CVE-2021-47178 : Linux kernel vulnerability in SCSI target code where smp_processor_id() was used in preemptible code. The issue manifested as a BUG message in preemptible kernel paths (TCMU/target_core_mod) and during shutdown, triggered by commands queued to TCMU devices using certain backends....

CVE-2021-47284

CVE-2021-47284 (Linux kernel) relates to isdn: mISDN: netjet crash in nj_probe. The issue occurs when nj_setup may fail with -EIO, leaving card->irq initialized and >0; a subsequent nj_release frees an IRQ that wasn’t requested. The fix deletes the prior assignment to card->irq and keeps...

CVE-2021-47646

CVE-2021-47646 (Linux kernel) involves a crash triggered by interactions around block, bfq: honor already-setup queue merges. The vulnerability arose when the commit 2d52c58b9c9b was merged and later reverted by ebc69e897e17; that revert did not introduce the bug, but actually exposed a UAF cause...

CVE-2022-47943

Summary: CVE-2022-47943 affects the ksmbd component of the Linux kernel (versions 5.15–5.19 before 5.19.2). The flaw is an out-of-bounds read that can trigger an OOPS when handling SMB2_WRITE with a large length in the zero DataOffset case. Impact (as stated): potential kernel crash/denial of ser...

CVE-2022-48637

CVE-2022-48637 — bnxt skb UAF in Linux kernel : The bnxt driver hands over a completed skb to the PTP worker (bnxt_tx_int). If the worker runs before the remaining code, the skb may be freed while still in use. The fix makes the loss of ownership explicit by setting the skb pointer to NULL, notin...

CVE-2022-48651

CVE-2022-48651 affects the Linux kernel ipvlan path. When an AF_PACKET socket uses PACKET_QDISC_BYPASS and the default xmit path is switched, skb->mac_header may remain at 65535, yielding slab-out-of-bounds in ipvlan_xmit_mode_l2. Root causes: packet_snd() only resets skb->mac_header for SO...

CVE-2022-49060

CVE-2022-49060 is a Linux kernel vulnerability affecting the net/smc path, where a NULL pointer dereference could occur in smc_pnet_find_ib due to calling dev_name() with dev.parent without a NULL check. The fix implements a NULL-pointer check before the call to dev_name(), mitigating potential c...

CVE-2022-49063

The CVE (CVE-2022-49063) affects the Linux kernel in the ice driver’s ARFS feature, where use-after-free can occur when freeing @rx_cpu_rmap. The issue arises because free_irq_cpu_rmap() is invoked after (devm_)free_irq(), causing the code to operate on IRQ descriptors that may already be freed, ...