CVE-2021-4032

CVE-2021-4032 affects the Linux kernel KVM: arch/x86/kvm/lapic.c kvm_free_lapic. A failure during memory allocation when constructing a VCPU can mishandle memory errors, causing a kernel crash and enabling local-privilege attackers to trigger a denial of service. The issue exists in kernel versio...

CVE-2021-4148

CVE-2021-4148 : Linux kernel vulnerability in the function block_invalidatepage (fs/buffer.c) where a missing sanity check can allow a local user with privileges to cause a denial of service. The connected advisories corroborate a local DoS impact but do not provide vendor-specific patch details ...

CVE-2022-28796

CVE-2022-28796: Linux kernel

CVE-2022-3534

CVE-2022-3534 affects the libbpf component (function btf_dump_name_dups in tools/lib/bpf/btf_dump.c) with a use-after-free in Linux kernel/libbpf. Debian and other sources report a patch and version bumps: Debian DLA fixes libbpf to 0.3-2+deb11u1 (and related packages), and ALT Linux notes a fix ...

CVE-2022-48742

The CVE-2022-48742 entry relates to the Linux kernel’s rtnetlink handling. Technical details in connected documents show that the vulnerability arises from the replay logic in __rtnl_newlink(), where not refreshing master_dev/m_ops could trigger a use-after-free during a replay path. The confirme...

CVE-2022-48893

CVE-2022-48893 affects the Linux kernel's drm/i915/gt engine discovery. If driver initialization is aborted mid-gt/engine discovery, some engines stay incompletely set up and leak allocated objects because engine->release may be NULL. The entry notes a fix: drop the destroy_pinned_context() he...

CVE-2022-49348

In Linux kernels affected by CVE-2022-49348, the EXT4_FC_REPLAY bit in sbi->s_mount_state was causing a risk: a corrupted on-disk superblock could set EXT4_FC_REPLAY in s_mount_state, bypassing sanity checks and triggering a BUG() in ext4_es_cache_extent(). The available connected documents co...

CVE-2022-49704

CVE-2022-49704 is discussed in Connected documents as a Linux kernel issue affecting 9p (v9fs_vfs_get_link fid refcount leak). The fix moves the protocol version check earlier to avoid operating on a fid before validating version, reducing refcount leakage risk. Astra Linux security bulletin conf...

CVE-2023-31082

CVE-2023-31082 : In Linux kernel 6.2, the issue arises from a sleeping function invoked from an invalid context in gsmld_write (drivers/tty/n_gsm.c), which can block the kernel. The vulnerability is explicitly tied to the affected component and context, with the impact described as potentially ca...

CVE-2023-32257

CVE-2023-32257 affects the Linux kernel ksmbd (the in-kernel SMB server). The vulnerability stems from lack of proper locking when processing SMB2_SESSION_SETUP and SMB2_LOGOFF, enabling an attacker to execute code in the kernel context. The initial description documents the root cause and impact...

CVE-2023-34256

CVE-2023-34256 describes an out-of-bounds read in crc16 in lib/crc16.c when invoked from fs/ext4/super.c due to incomplete offset checks in ext4_group_desc_csum, affecting the Linux kernel up to but not including 6.3.3. The issue can enable local denial of service or information leaks via a craft...

CVE-2023-52629

CVE-2023-52629 – Linux kernel use-after-free fixed Root cause: in switch_drv_remove(), the worker (flush_work) could be rescheduled by switch_timer, causing a use-after-free when the code frees psw after timer or worker cleanup. Consequence: a potentially exploitable use-after-free condition with...

CVE-2023-52670

CVE-2023-52670 is a Linux kernel issue affecting rpmsg: virtio where driver_override is freed only partially during rpmsg_remove, causing a memory leak for an unreferenced object (size 128, shown in the backtrace). The vulnerability was resolved in the Linux kernel by freeing driver_override duri...

CVE-2023-52735

The CVE-2023-52735 entry concerns a Linux kernel vulnerability in bpf/sockmap where sock_map_{close,destroy,unhash} could call themselves, risking a recursive loop and potential stack overflow. The design should prevent sock_map proto callbacks from calling themselves; the fix breaks recursive ca...

CVE-2023-53028

CVE-2023-53028 : Linux kernel vulnerability in wifi/mac80211 processing where reverting the memory-leak fix for ieee80211_if_add() (and the related path ieee80211_if_free called from free_netdev) can trigger a null-ptr-deref/GPF as shown by syzbot. Affected component is the wireless stack (mac802...

CVE-2023-53058

CVE-2023-53058 – Linux kernel (net/mlx5, E-Switch) . The vulnerability arises when handling errors in the E-Switch error path: the code dereferences the pointer named “vport,” which can lead to an oops. The issue is localized to the kernel, requiring local access with low privileges; no user inte...

CVE-2023-53117

CVE-2023-53117 refers to a vulnerability in the Linux kernel related to the fs subsystem, specifically an out-of-bounds array speculation issue when closing a file descriptor. The connected advisories (EulerOS, Unity Linux) explicitly identify CVE-2023-53117 and describe the affected area as the ...

CVE-2023-53146

The CVE-2023-53146 issue affects the Linux kernel’s media driver for the dw2102 I2C transfer path. In dw2102_i2c_transfer, the code can read msg[i].buf even when it is null if msg[i].len is zero, allowing a null pointer dereference before the fix. The vulnerability is mitigated by adding a check ...

CVE-2024-26644

CVE-2024-26644 : Linux kernel Btrfs snapshot logic fails when the source is a deleted subvolume. The code copies the source root item (including refs) to the new root item; since refs is 0 for a deleted subvolume, btrfs_get_new_fs_root() returns -ENOENT and the snapshot creation aborts. The docum...

CVE-2024-26710

CVE-2024-26710 affects the Linux kernel on PowerPC with KASAN. The issue was that KASAN’s thread stack size increase was doubled, which could push a 32KB stack to 64KB and trigger build errors (arch/powerpc/kernel/switch.S). The resolved approach limits the stack size increase to cases where the ...

CVE-2024-26783

CVE-2024-26783 is a Linux kernel issue where, under NUMA balancing, wakeup_kswapd() could be invoked with an invalid zone index (-1) causing a page fault oops. The fix adds an index check before wakeup_kswapd() in mm/vmscan.c (resolved in the Linux kernel commit cited in the vulnerability descrip...

CVE-2024-27394

CVE-2024-27394 affects the Linux kernel, in the tcp_ao_connect_init path. The vulnerability arises because call_rcu is used during hlist_for_each_entry_rcu traversal outside the RCU read critical section, allowing the RCU grace period to pass while the key may still be referenced, creating a Use-...

CVE-2024-35826

CVE-2024-35826 — Linux kernel: fix page refcounts for unaligned buffers in __bio_release_pages(). This patch corrects the number of pages released for buffers that do not start at the beginning of a page, addressing a vulnerability in block I/O handling. Impact, as described in the FP: local acce...

CVE-2024-36957

CVE-2024-36957 affects the Linux kernel driver octeontx2-af. The vulnerability is due to an off-by-one read from userspace when attempting to copy count + 1 bytes (memdup_user(buffer, count + 1)), while the userspace buffer only contains count bytes. The fix prevents this by using memdup_user_nul...

CVE-2024-38381

CVE-2024-38381 affects the Linux kernel vulnerability in the NFC NFC-NCI path. The issue is an uninitialized-value access in nci_rx_work, which parses a received packet from ndev->rx_q without validating header size, payload size, and total packet size before processing. An invalid packet coul...

CVE-2024-38567

Mode C: The CVE-2024-38567 issue affects the Linux kernel wifi driver carl9170 (USB endpoints). Root cause: an endpoint type can be improperly treated during URB submission, triggering a warning when an endpoint’s type changes between bulk/interrupt and other endpoints aren’t reassessed. The fix ...

CVE-2024-39277

In CVE-2024-39277, the Linux kernel vulnerability arises when dma-mapping benchmark bound to NUMA_NO_NODE triggers UBSAN array-index-out-of-bounds in arch/x86/topology.h. The root cause is calling cpumask_of_node() for NUMA_NO_NODE inside do_map_benchmark(), leading to an invalid cpumask[-1] acce...

CVE-2024-40916

The CVE-2024-40916 issue concerns the Linux kernel DRM/Exynos HDMI driver. When EDID reading fails and the driver reports no modes, the DRM core previously exposed a 1024x786 mode which some Exynos HDMI variants cannot drive. The fix changes this fallback to a safe 640x480 mode to avoid rendering...

CVE-2024-40943

CVE-2024-40943 arises from a race in OCFS2 where hole punching and AIO/DIO co-exist, allowing an unwritten extent to be removed during I/O. The Linux kernel fix adds synchronization to wait for outstanding direct I/O before fallocate/punch_hole, preventing inconsistent extent state and potential ...

CVE-2024-41015

CVE-2024-41015: Linux kernel ocfs2 vulnerability fixed by adding bounds checking in ocfs2_check_dir_entry() to validate ocfs2_dir_entry members and prevent memory overrun. The patch ensures sanity checks keep directory entry fields within valid memory bounds, addressing potential out-of-bounds/NU...

CVE-2024-42263

CVE-2024-42263 (Linux kernel) : The drm/v3d component had a memory-leak in the timestamp extension when userspace memory fetch failed in the main loop, leaking drm_syncobjs up to that point due to missing drm_syncobj_put. A fix exports and uses a common cleanup helper to correctly release resourc...

CVE-2024-46782

CVE-2024-46782 affects Linux kernel’s ila subsystem (net/ipv6/ila/ila_xlat.c, ila_nf_input) where a use-after-free occurs: ila_xlat_exit_net() frees the rhashtable and then nf_unregister_net_hooks() is called. The issue is the hook removal should occur before freeing resources; the fix reorders a...

CVE-2024-46817

CVE-2024-46817 is tied to the Linux kernel vulnerability in the DRM/AMD display driver. The issue arises when amdgpu_dm initialization proceeds with more than 6 streams, triggering an OVERRUN warning reported by Coverity. The root cause is that initialize logic should abort early; the fix returns...

CVE-2024-49890

CVE-2024-49890 : Linux kernel fix for a NULL dereference in drm/amd/pm by ensuring fw_info is not NULL before use. The issue manifested as a null dereference warning reported by Coverity; the patch prevents dereferencing a NULL fw_info and thus mitigates the vulnerability as described in the entr...

CVE-2024-49907

CVE-2024-49907 : Linux kernel DRM/AMD display vulnerability where a NULL dereference can occur by dereferencing dc->clk_mgr in the idle-power path if it is NULL. The fix adds a NULL check before calling dc->hwss.apply_idle_power_optimizations (which may call dcn35_apply_idle_power_optimizat...

CVE-2024-49992

CVE-2024-49992 affects the Linux kernel DRM STM path. Specifically, ltdc_load() calls drm_crtc_init_with_planes(), drm_universal_plane_init(), and drm_encoder_init() with devm_kzalloc()-allocated resources, which can lead to use-after-free in CRTC/plane handling. Root cause: allocations not manag...

CVE-2024-50001

CVE-2024-50001 affects the Linux kernel, specifically the net/mlx5 multi-packet WQE transmit path. The root cause is an erroneous unmap of a DMA mapping when DMA mapping allocation fails; this can remove a DMA mapping that is still required. If the PCI function subsequently presents the IOVA, the...

CVE-2024-50079

CVE-2024-50079 affects the Linux kernel io_uring/sqpoll path. When sqpoll exits and cancels pending work items, it may call task_work from within io_uring_cancel_generic() while the task is not TASK_RUNNING, risking a scheduler splat as the ring mutex is grabbed in an interruptible state. The roo...

CVE-2024-50145

CVE-2024-50145 concerns the Linux kernel (octeon_ep driver) and fixes a NULL pointer dereference caused by skb allocation failures during RX processing. The change adds handling for skb allocation failures in __octep_oq_process_rx(), which may be invoked during NAPI polling. When build_skb() retu...

CVE-2024-50187

Technical details for CVE-2024-50187 are not provided in the supplied documents. Monitor for updates from the vendor advisories and linked references.

CVE-2024-50193

CVE-2024-50193 affects the Linux kernel on x86. The vulnerability is in x86/entry_32 where CPU buffers were cleared after exc_nmi but before restoring registers. The fix moves CLEAR_CPU_BUFFERS to after RESTORE_ALL_NMI, addressing RDFS mitigation requirements. Public metrics show CVSS v3.1 base s...

CVE-2024-53115

Technical details for CVE-2024-53115 are not publicly disclosed in the provided connected documents. The initial description mentions a kernel fix for a null pointer dereference in vmw_framebuffer_surface_create_handle, but no product/version specifics or exploit info are given here. Monitor for ...

CVE-2024-53218

The CVE-2024-53218 issue affects the Linux kernel F2FS shutdown path, where concurrent shutdown paths can race and cause use-after-free of the f2fs_gc_thread (gc_th), potentially leading to a crash. The root cause is a race in f2fs_stop_gc_thread() allowing gc_th to be freed while another path st...

CVE-2024-53231

The CVE-2024-53231 issue affects the Linux kernel cpufreq/CPPC: cpufreq_cpu_get_raw() may return NULL if the CPU is not in policy->cpus, leading to a NULL pointer dereference. The vulnerability has been resolved in the Linux kernel; affected code path now handles NULL returns to prevent derefe...

CVE-2024-54193

Technical details about CVE-2024-54193 are not publicly provided in the connected documents. The initial description summarizes a kernel fix but does not specify affected subcomponents, root cause, impact, or patch specifics.

CVE-2024-56620

In CVE-2024-56620, the Linux kernel fix targets the SCSI: ufs: qcom path. The bug occurs when platform MSI resources are freed even if ESI is not enabled, leading to a NULL pointer dereference (Unable to handle kernel NULL pointer dereference at 0x8) during device removal. The impact is a local f...

CVE-2024-56656

CVE-2024-56656 affects the bnxt_en driver in the Linux kernel and is caused by an aggregation ID mask that was not updated for P7 (5760X) chips. The completion structures’ aggregation ID field was redefined from 16 bits to 12 bits on P7, freeing 4 bits for metadata (e.g., VLAN ID). As a result, t...

CVE-2024-56744

Technical details for CVE-2024-56744 are not publicly provided in the supplied documents; no affected products or fixes are confirmed here. Monitor for updates from kernel advisories or vendor bulletins.

CVE-2024-57916

CVE-2024-57916 affects the Linux kernel component dealing with GPIO IRQ handling (misc: microchip: pci1xxxx). The root cause is improper IRQ handling that could trigger a kernel panic; the fix replaces generic_handle_irq with handle_nested_irq to resolve the issue. Public references indicate upst...

CVE-2024-58076

CVE-2024-58076 affects the Linux kernel clock framework for Qualcomm SoCs (e.g., gcc-sm6350). The issue occurs when a clk_rcg2 has a parent but lacks a defined parent_map, which can trigger a NULL pointer dereference during clk_set_rate, as evidenced by the kernel trace in the description. The pr...