CVE-2021-47284

In the Linux kernel, the following vulnerability has been resolved: isdn: mISDN: netjet: Fix crash in nj_probe: 'nj_setup' in netjet.c might fail with -EIO and in this case'card->irq' is initialized and is bigger than zero. A subsequent call to'nj_release' will free the irq that has not been r...

CVE-2025-21956

CVE-2025-21956 : In the Linux kernel, drm/amd/display incorrectly handled color depth 14, triggering a warning in amdgpu when running on Radeon RX 6600 XT. The issue is resolved by assigning the pixel clock as pix_clk * (14 * 3) / 24, aligning with other color depths, and also fixes indentation i...

CVE-2025-21975

Technical details for CVE-2025-21975 are not publicly provided in the supplied Connected documents. The entry description exists, but there are no explicit affected products/versions, impact, or fixes in the connected items. Monitor for vendor advisories.

CVE-2025-22008

CVE-2025-22008 is a Linux kernel vulnerability in the regulator subsystem. The issue arises when asynchronous driver probing allows a dummy regulator to be accessed before it has been probed, potentially enabling local access to disrupt system operation. The fix is to ensure the dummy regulator i...

CVE-2025-23147

CVE-2025-23147 : Linux kernel i3c master/IBI handling vulnerability where an IBI can arrive before the target driver is probed, causing a NULL dereference in dev->ibi and a kernel panic. Affected component is the I3C master queue path (i3c_master_queue_ibi()); root cause is uninitialized dev-&...

CVE-2025-37740

The CVE-2025-37740 entry concerns the Linux kernel JFS code: a zero AG width in dmapctl can cause a divide error when computing the control page level in dbAllocAG. The vulnerability is fixed by adding a sanity check for agwidth in dbAllocAG (to avoid division by zero). Affected component: JFS in...

CVE-2025-37766

CVE-2025-37766 affects the Linux kernel drm/amd/pm component, where the vulnerability stems from a divide-by-zero condition when setting a speed value. If speed exceeds UINT_MAX/8, a division by zero can occur. Multiple connected advisories/plugins (Azure Linux update, Astra Linux page, CIRCL sig...

CVE-2025-37787

CVE-2025-37787 affects the Linux kernel in the mv88e6xxx DSA driver. The issue arises when unbinding the driver: a NULL devlink global region pointer is passed to devlink_region_destroy(), causing a NULL-tolerant crash. The root cause is that some devlink regions (MV88E6XXX_REGION_STU and MV88E6X...

CVE-2025-37862

CVE-2025-37862 affects the Linux kernel HID PIDFF code. The vulnerability is a NULL pointer dereference in pidff_find_fields (and pidff_find_special_field) when searching for a report not implemented on the device, potentially triggering a crash. The issue could occur for both optional and requir...

CVE-2025-37924

CVE-2025-37924 : Linux kernel ksmbd use-after-free in Kerberos authentication. A race could occur where a thread uses sess->user after it has been freed by ksmbd_free_user, prior to sess->user being set to NULL. The issue is fixed by setting sess->user = NULL to avoid dangling pointer. M...

CVE-2025-38079

The CVE-2025-38079 entry concerns a vulnerability in the Linux kernel crypto/algif_hash: a double free in hash_accept when accept(2) is used on an algif_hash socket with MSG_MORE and crypto_ahash_import fails. This leads to a slab-use-after-free due to sk2 being freed in both hash_accept and af_a...

CVE-2025-38180

Summary: CVE-2025-38180 affects the Linux kernel’s ATM /proc net handling (lec). The root cause is unsafe dev_lec[] changes paired with missing dev_hold() before dev_put(), causing an imbalance and use-after-free (UAF). The issue is tied to the net/atm/lec handling code and has been addressed by ...

CVE-2025-39688

CVE-2025-39688 affects the Linux kernel NFS server (nfsd): revoked delegations could be hidden due to nfs4_lookup_stateid() not allowing SC_STATUS_FREEABLE in its statusmask. The fix adds SC_STATUS_FREEABLE to the always-allowed flags in nfs4_lookup_stateid() and removes SC_STATUS_FREEABLE from n...

CVE-2026-46099

The CVE-2026-46099 entry describes a use-after-free race in Linux kernel IPv6 handling for seg6 and rpl lightweight tunnels. A NOREF destination cached during ip6_route_input() can be freed by a concurrent FIB lookup on a shared nexthop under PREEMPT_RT, leading to a WARN or potential instability...

CVE-2026-64438

Summary of CVE-2026-64438 : In the Linux kernel’s crypto: qat path, a race during VF2PF teardown could cause use-after-free of per-VF state (vf_info) due to tearing down per-VF locks and state before in-flight VF2PF work completes. The fix introduces a PF-local flag (vf2pf_disabled) that gates wo...

CVE-2011-0711

CVE-2011-0711 affects the Linux kernel through the xfs_fs_geometry function in fs/xfs/xfs_fsops.c. The vulnerability arises because a structure member is not initialized, enabling local attackers to read potentially sensitive data from kernel stack memory via the FSGEOMETRY_V1 ioctl. The affected...

CVE-2011-1182

CVE-2011-1182 affects the Linux kernel’s signal handling: kernel/signal.c before 2.6.39 allows local users to spoof the UID and PID of a signal sender via sigqueueinfo. Affected in MiracleLinux 3 (kernel 2.6.18-274.1.AXS3) per AXSA-2011-313:06; the issue is described as a kill-signal spoofing vul...

CVE-2011-3191

CVE-2011-3191 affects the Linux kernel CIFS implementation (fs/cifs/cifssmb.c: CIFSFindNext). It is caused by an integer signedness error, existing in kernels before 3.1, which can allow a remote CIFS server to trigger memory corruption or other impact via a large length value in a directory read...

CVE-2013-4299

CVE-2013-4299 – Linux kernel (up to 3.11.6) Root cause: Interpretation conflict in drivers/md/dm-snap-persistent.c within the Linux kernel up to version 3.11.6. Impact: Remote authenticated users can obtain sensitive information or modify data by issuing a crafted mapping to a snapshot block devi...

CVE-2014-2678

CVE-2014-2678 affects the Linux kernel (net/rds/iw.c). The rds_iw_laddr_check function can be triggered by a bind() on an RDS socket on systems lacking RDS transports, enabling local attackers to cause a NULL pointer dereference and a system crash (DoS). This is described as affecting kernels up ...

CVE-2015-7990

Technical details beyond the initial description are not provided in the connected documents. No public details about CVE-2015-7990 are included here; monitor for updates.

CVE-2016-8630

Consolidated from CVE-2016-8630 detail: The Linux kernel, prior to 4.8.7, when KVM is enabled, is vulnerable to a local Denial of Service where a crafted ModR/M byte used with an undefined x86 instruction can crash the host OS. Affected component is arch/x86/kvm/emulate.c. Impact is host stabilit...

CVE-2017-15127

CVE-2017-15127 affects the Linux kernel (mm/hugetlb.c: hugetlb_mcopy_atomic_pte). A superfluous implicit page unlock for VM_SHARED hugetlbfs mappings could trigger a local denial of service. Affected: Linux kernel prior to 4.13; the issue is addressed in later kernel versions (see commit 5af10dfd...

CVE-2017-16529

CVE-2017-16529 affects the Linux kernel’s snd_usb_create_streams in sound/usb/card.c, allowing a local attacker to trigger an out-of-bounds read and system crash via a crafted USB device, with impact described as a denial of service and potentially other effects. The issue is present in kernels p...

CVE-2021-32078

Summary (CVE-2021-32078) An out-of-bounds read was found in the Linux kernel code path arch/arm/mach-footbridge/personal-pci.c, due to a missing check for a value that should not be negative (example: accessing element -2 of an array). The issue affects kernels up to at least 5.12.11. The descrip...

CVE-2021-47061

CVE-2021-47061 : Concrete details in connected advisories show a Linux kernel/KVM issue where destroying an I/O bus device must occur after unregister, and after SRCU-synchronization. The root cause is a use-after-free risk if devices are destroyed before the bus is nullified, because readers exp...

CVE-2021-47435

CVE-2021-47435 affects the Linux kernel device-mapper (dm) path, causing a crash via a NULL pointer dereference during IO completion. The issue stems from dm_io_dec_pending() calling end_io_acct() before the in-flight pending count is decremented, and a race if a DM table swap happens concurrentl...

CVE-2021-47657

CVE-2021-47657: In the Linux kernel, the vulnerability affects drm/virtio by risking a NULL pointer use in virtio_gpu_array_put_free() if virtio_gpu_object_shmem_init() fails. The problem arises when objs is NULL and virtio_gpu_array_put_free() is invoked. The fix is to ensure objs is not NULL in...

CVE-2022-1043

CVE-2022-1043 concerns a flaw in the Linux kernel io_uring implementation that lets a local attacker corrupt memory, crash the system, or escalate privileges. The connected Nessus advisories (Unity Linux UTSA-2026-004760/003973) reproduce via kernel io_uring flaw; no specific patched version is l...

CVE-2022-33744

CVE-2022-33744 is an ARM Xen guest vulnerability where unprivileged guests can provoke a Denial of Service in Dom0 via paravirtual devices. The root cause is a race window in updating an rbtree that tracks guest mappings when mapping guest pages on ARM, potentially crashing Dom0 or blocking furth...

CVE-2022-48651

A vulnerability in the Linux kernel 's ipvlan component allows for slab-out-of-bounds bugs. The issue occurs when an AF_PACKET socket is used to send packets through ipvlan while the default xmit function is changed to packet_direct_xmit() via the PACKET_QDISC_BYPASS option. Because packet_direct...

CVE-2022-48956

The CVE-2022-48956 issue is a Linux kernel use-after-free vulnerability in IPv6 handling, specifically in ip6_fragment() with a problematic assumption about rcu_read_lock() ownership. The flaw enables a use-after-free in the UDP path (ip6_dst_idev and ip6_fragment) as shown in the syzbot KASAN re...

CVE-2022-49046

CVE-2022-49046 affects the Linux kernel i2c subsystem, specifically the dev: how the device name is set. The root cause is a missing check of the return value from dev_set_name(); if dev_set_name() fails, dev_name() may be null, leading to a potential null pointer dereference. The connected advis...

CVE-2022-49060

CVE-2022-49060 is a Linux kernel vulnerability affecting the net/smc path, where a NULL pointer dereference could occur in smc_pnet_find_ib due to calling dev_name() with dev.parent without a NULL check. The fix implements a NULL-pointer check before the call to dev_name(), mitigating potential c...

CVE-2022-49199

CVE-2022-49199 affects the Linux kernel RDMA/nldev path. The vulnerability comes from underflow in nldev_stat_set_counter_dynamic_doit() where an “index” is checked for an upper bound but not for negatives. The fix changes the index type to unsigned to prevent underflows. Affected component: RDMA...

CVE-2022-49549

The CVE-2022-49549 entry concerns a Linux kernel memory-leak in the x86 MCE/AMD path: when threshold_create_bank() fails inside mce_threshold_create_device(), the previously allocated threshold banks array (bp) could be leaked because threshold_remove_device() only frees it if the bank creation s...

CVE-2023-35827

CVE-2023-35827 : A use-after-free in the Linux kernel up to version 6.3.8 is reported, specifically in ravb_remove() inside drivers/net/ethernet/renesas/ravb_main.c. The issue arises from a use-after-free in the Renesas AVB/RAVB driver, as described in Astra Linux and Nessus feeds. The vulnerabil...

CVE-2023-5158

CVE-2023-5158: A flaw in the Linux kernel’s virtio ring host path (vringh_kiov_advance in drivers/vhost/vringh.c) can allow a denial of service from guest to host via a zero-length descriptor. The connected Astra Linux bulletin restates the same description for Linux kernels 5.15/6.1, but no conc...

CVE-2023-53026

CVE-2023-53026 — Linux kernel RDMA/core overflow in ib block iterator . The issue occurs when registering a DMA memory region (MR) after choosing a best-aligned page size, while iterating the sglist to split entries into DMA blocks. If the sg entry size and page size match in a way that the total...

CVE-2023-6039

CVE-2023-6039 : A use-after-free vulnerability in the Linux kernel’s LAN78XX USB Ethernet driver (lan78xx_disconnect in drivers/net/usb/lan78xx.c) can crash the system when a LAN78XX USB device is detached. The issue is local in scope and affects the network sub-system (net/usb/lan78xx). The CVE ...

CVE-2024-26792

CVE-2024-26792 : Linux kernel bug in btrfs snapshot creation can cause a double free of an anonymous device number. Root cause: during snapshot creation, anon_dev is allocated, later freed in nested calls, and if the transaction path fails, the same anon_dev may be freed again even if it has been...

CVE-2024-26986

CVE-2024-26986 Root cause: In the Linux kernel’s DRM AMD/KFD path, a memory leak was introduced via a leaked mmget reference on the error path when creating KFD processes while a GPU reset is in progress. Impact: Memory leak in create_process failure for KFD, potentially exhausting memory or reso...

CVE-2024-27400

CVE-2024-27400 affects the Linux kernel drm/amdgpu subsystem. The issue stems from the call order in amdgpu_ttm_move() which caused the old location to become unavailable after a move, affecting DMA-buf and VM move notifications. The fix prioritizes notifying the move before performing the actual...

CVE-2024-27402

A vulnerability exists in the Linux kernel phonet/pep implementation due to a racy use of skb_queue_empty(). Specifically, receive queues are protected by their respective spin-locks rather than the socket lock, which could cause skb_peek() to unexpectedly return NULL or a pointer to a socket buf...

CVE-2024-35830

The CVE-2024-35830 issue concerns the Linux kernel media driver tc358743. Concrete details from connected advisories show the vulnerability arises when the v4l2 async device is registered before the device is fully set up. The fix is to register the v4l2 async device only after successful setup, ...

CVE-2024-35911

CVE-2024-35911 (Linux kernel, ice driver) : Addresses a memory-corruption panic in the ice NIC driver during suspend/rebuild. The issue occurred because, after reset, code referenced num_q_vectors before it was safely reinitialized by ice_vsi_cfg_def(), which could lead to a zero-length buffer al...

CVE-2024-38381

CVE-2024-38381 affects the Linux kernel vulnerability in the NFC NFC-NCI path. The issue is an uninitialized-value access in nci_rx_work, which parses a received packet from ndev->rx_q without validating header size, payload size, and total packet size before processing. An invalid packet coul...

CVE-2024-38545

CVE-2024-38545 : In the Linux kernel, RDMA/hns CQ destruction can race with asynchronous events, leading to a use-after-free if the CQ refcount is released concurrently. The issue is fixed by protecting the CQ refcount with a lock (xa_lock). Astra Linux’s security bulletin confirms the same vulne...

CVE-2024-38560

The CVE-2024-38560 entry concerns Linux kernel SCSI (bfa) code. A vulnerable path copies nbytes from userspace into a kernel buffer without guaranteeing a NUL terminator, enabling an OOB read when sscanf is applied. The issue is fixed by replacing memdup_user with memdup_user_nul to ensure proper...

CVE-2024-38565

CVE-2024-38565 : In the Linux kernel, the issue is “wifi: ar5523: enable proper endpoint verification.” Syzkaller reported a warning about an endpoint in use not having an expected type, and the fix is to validate the existence of all proper endpoints with their corresponding types. The patch is ...