CVE-2024-26722

Technical details about CVE-2024-26722 (affected products, exact root cause, versions, impact, remediation) are not provided in the connected documents. Monitor for updated advisories for explicit fixes and affected platforms.

CVE-2024-26970

CVE-2024-26970 affects the Linux kernel clock driver for Qualcomm IPQ6018 (clk: qcom: gcc-ipq6018). Root cause: frequency table arrays lacked a terminating empty element, risking out-of-bounds access when traversed by qcom_find_freq() or qcom_find_freq_floor(). Mitigation: patch adds an empty ter...

CVE-2024-27407

CVE-2024-27407 : In the Linux kernel, a vulnerability in the NTFS3 file system was fixed by adding an overflow check in mi_enum_attr() within fs/ntfs3. The issue was identified as a local, high-severity impact and is addressed by applying the patch described in the Ubuntu USN-7726-1 advisory, whi...

CVE-2024-38602

The CVE-2024-38602 issue is in the Linux kernel ax25 subsystem, where a reference-count leak on the ax25_dev object was reported. The root causes are: (1) ax25_addr_ax25dev() could increase ax25_dev’s refcount multiple times, risking a memory leak, and (2) ax25_dev_device_down() could drop the re...

CVE-2024-39277

In CVE-2024-39277, the Linux kernel vulnerability arises when dma-mapping benchmark bound to NUMA_NO_NODE triggers UBSAN array-index-out-of-bounds in arch/x86/topology.h. The root cause is calling cpumask_of_node() for NUMA_NO_NODE inside do_map_benchmark(), leading to an invalid cpumask[-1] acce...

CVE-2024-44962

The CVE affects the Linux kernel Bluetooth btnxpuart driver. Root cause: when unloading btnxpuart, a timer is not reliably shut down, so if the timer is modified during unload it may fire and invoke the timer callback after the driver is gone, causing a kernel panic. The fix is to replace del_tim...

CVE-2024-45021

The CVE-2024-45021 issue is a Linux kernel vulnerability in memcg_write_event_control() described as a user-triggerable oops caused by improper handling of memory-mapped data beyond a terminating NUL. The connected advisories note that the vulnerability has been fixed in the Linux kernel and that...

CVE-2024-46737

CVE-2024-46737: Linux kernel nvmet-tcp vulnerability fixed. If nvmet_tcp_alloc_cmds() fails, a NULL pointer dereference could crash the kernel in nvmet_tcp_release_queue_work(). The fix sets queue->nr_cmds to zero when allocation of commands fails; affected component is nvmet-tcp in the Linux ...

CVE-2024-46746

The CVE-2024-46746 issue affects the Linux kernel HID AMD SFH driver (amd_sfh). The root cause is freeing driver_data after hid_destroy_device() returns, since driver_data is referenced by callbacks; this can lead to a slab-use-after-free in functions such as amd_sfh_get_report, as evidenced by t...

CVE-2024-46861

CVE-2024-46861 - Linux kernel USB net driver (usbnet/ipheth) : The issue arises when RX callbacks fail in usbnet ipheth; causes could be payload too short, incorrect payload framing (e.g., bad NCM framing), or memory pressure. These failures previously could cause the driver to seize up. The docu...

CVE-2024-49893

CVE-2024-49893 affects the Linux kernel DRM display path (drm/amd/display). The issue arises when dc_state_get_stream_status can return NULL, so stream_status must be checked before use. The patch fixes a NULL_RETURNS issue reported by Coverity by adding a NULL check before accessing stream_statu...

CVE-2024-49915

CVE-2024-49915 concerns the Linux kernel DRM AMD display driver. A null pointer dereference could occur in drm/amd/display during dcn32_init_hw if dc->clk_mgr is null. The fix adds an explicit NULL check before invoking clk_mgr functions, preventing dereferencing a null pointer. Public referen...

CVE-2024-50012

The CVE-2024-50012 issue is in the Linux kernel cpufreq code. In parse_perf_domain, if of_parse_phandle_with_args returns an error, the initial reference to the CPU device node would not be decremented, potentially leaving a reference handling bug. The fix declares the CPU node variable with a cl...

CVE-2024-50118

CVE-2024-50118 relates to the Linux kernel Btrfs remount/RW reconfiguration path. The issue arises during mounting different subvolumes with conflicting RO/RW flags: an initial read-only mount (ro) followed by an attempt to remount a subvolume as read/write, with options/feature checks being skip...

CVE-2024-50225

Technical details for CVE-2024-50225 are not publicly available in the provided connected documents. The materials do not specify affected products, root cause specifics, exploitability, or remediation. Monitor for updates from official advisories and vendor notices.

CVE-2024-50242

CVE-2024-50242 affects the Linux kernel ntfs3 implementation. The issue is described as an “Additional check in ntfs_file_release” in the ntfs_file_release path, with CVSSv3.1: LOCAL, Low attack complexity, Low privileges required, UI: None, S:U, and metrics indicating high confidentiality, integ...

CVE-2024-50249

Mode C: Concrete details found. The CVE-2024-50249 issue in the Linux kernel arises from a lock-ordering problem in the CPPC/ACPI code: sugov_update_shared acquires a raw_spinlock while cpc_write holds a regular spinlock on cpc_ptr->rmw_lock, potentially causing a deadlock. The remediation is ...

CVE-2024-53046

CVE-2024-53046 affects Linux kernel ARM64 in the imx8ulp device tree to correct the flexspi compatible string. The issue arises because imx8ulp flexspi supports 16 LUTs whereas imx8mm supports 32 LUTs, causing a startup warning if the string is incorrect. The fix updates arm64/dts: imx8ulp to ens...

CVE-2024-53048

Technical details for CVE-2024-53048 are not provided in the connected documents. The initial description describes a Linux kernel ice driver crash with DPLL-enabled E810 LOM and a firmware-driven pin initialization approach under planning; no concrete vendor/version/fix details are present here....

CVE-2024-53143

CVE-2024-53143 affects the Linux kernel’s fsnotify path, fixing an ordering issue where iput() must complete before decrementing the watched_objects count. The patch ensures the superblock remains alive until iput() is done, preventing a potential use-after-free (UAF) of sb->s_fs_info in tmpfs...

CVE-2024-53223

Technical details about CVE-2024-53223 are not provided in the connected documents. Please monitor for updates; current sources do not reveal affected products, versions, root cause, impact, or fixes.

CVE-2024-56579

CVE-2024-56579 : In the Linux kernel, the media: amphion driver must set video_drvdata before registering the video device; otherwise video_drvdata() may return NULL in open(), causing an oops. Remediation per the description is to ensure video_drvdata() is set prior to video device registration....

CVE-2024-56620

In CVE-2024-56620, the Linux kernel fix targets the SCSI: ufs: qcom path. The bug occurs when platform MSI resources are freed even if ESI is not enabled, leading to a NULL pointer dereference (Unable to handle kernel NULL pointer dereference at 0x8) during device removal. The impact is a local f...

CVE-2024-56656

The CVE-2024-56656 issue is in the bnxt_en driver for Linux kernels, where 5760X (P7) hardware redefined aggregation ID fields from 16 to 12 bits. The aggregation ID mask was not updated, risking mis-staging GRO/LRO packet headers and potentially triggering kernel BUG__skb_pull in __bnxt_tpa_end/...

CVE-2024-58016

CVE-2024-58016 (Linux kernel) fixes a safesetid vulnerability where syzbot could cause a kmalloc warning by writing an oversized buffer to a sysfs entry; the vulnerability arises from insufficient validation of write buffer sizes in handle_policy_update() and policy writes. The fix is to validate...

CVE-2025-21705

CVE-2025-21705 affects the Linux kernel MPTCP implementation (mptcp: handle fastopen disconnect correctly). Root cause: internal disconnect() during FASTOPEN errors was not properly accounted, risking data stream corruption. Fix: increase the socket disconnect counter so other threads waiting on ...

CVE-2025-21767

CVE-2025-21767 is a Linux kernel issue where clocksource_verify_choose_cpus() is invoked with preemption disabled, causing a call to get_random_u32() that can indirectly acquire sleeping locks in PREEMPT_RT contexts. The root cause is using get_random_u32() while preemption is off, leading to an ...

CVE-2025-21830

In CVE-2025-21830, the Linux kernel Landlock feature was updated to handle “weird” files returned by corrupted filesystems (e.g., bcachefs). Previously, such files could bypass a warning and be treated as accessible regular files. The vulnerability is local (local access required) with a low-priv...

CVE-2025-21854

The CVE-2025-21854 issue affects the Linux kernel sockmap/vsock path. It occurs when a connectible (unconnected) vsock may lose its prior transport, potentially causing a NULL dereference in the BPF recv path and a crash when a listening vsock is present in a sockmap. The root cause is that sockm...

CVE-2025-21894

The CVE-2025-21894 issue affects Linux kernel ENETC, where Virtual Functions (VFs) do not support HWTSTAMP_TX_ONESTEP_SYNC because only the PF can access PMa_SINGLE_STEP registers. The result is a crash when VFs attempt one-step timestamping, as illustrated by the kernel crash trace. A fix has be...

CVE-2025-37747

CVE-2025-37747 (Linux kernel) – perf hang on freeing sigtrap event Affects: Linux kernel perf subsystem, specifically perf_event_overflow and related task_work handling. When a deferred signal is not sent before a file is closed, freeing a sigtrap event can hang due to the interaction between per...

CVE-2025-37812

CVE-2025-37812 concerns the Linux kernel cdns3 driver: a deadlock in NCM gadget usage can occur under PREEMPT_RT when heavy network traffic triggers the threaded interrupt handler to be preempted by softirq. The root cause is protection by the same spinlock shared by the threaded IRQ and softirq....

CVE-2026-46319

The CVE-2026-46319 entry describes a race in the Linux kernel net/sched act_ct where rcu_read_lock is exited before refcount_inc_not_zero on ct_ft, allowing a UAF when ct_ft is freed during cleanup. This creates a local privilege-escalation risk as an attacker could observe or trigger the race wi...

CVE-2009-4537

CVE-2009-4537 concerns the Linux kernel before 2.6.32.3, specifically the r8169 Ethernet driver (drivers/net/r8169.c). The vulnerability arises from not properly checking the size of frames that exceed the MTU, allowing remote attackers to cause a denial of service via crafted packets that exploi...

CVE-2010-3875

CVE-2010-3875 affects the Linux kernel, specifically the ax25_getname function in net/ax25/af_ax25.c. The root cause is that a structure is not initialized, enabling local users to read a copy of kernel stack memory and potentially obtain sensitive information. The issue is tied to kernels prior ...

CVE-2014-0205

CVE-2014-0205 affects the Linux kernel futex_wait in kernel/futex.c, where a reference-count during requeue isn’t properly maintained before 2.6.37. This enables local users to cause denial of service (use-after-free and system crash) and, in a crafted scenario, potentially gain privileges by tri...

CVE-2014-1738

CVE-2014-1738 is a Linux kernel vulnerability in the floppy driver (raw_cmd_copyout) where processing FDRAWCMD IOCTL calls could allow local attackers with write access to /dev/fd to read kernel heap memory. The flaw is described as an improper restriction of pointers during FDRAWCMD processing, ...

CVE-2014-7145

CVE-2014-7145 affects the Linux kernel SMB2_tcon() in fs/cifs/smb2pdu.c, where remote CIFS servers can trigger a NULL pointer dereference by deleting the IPC$ share during DFS referrals, potentially causing a denial of service. The issue is fixed in kernel 3.16.3 (per ChangeLog-3.16.3). Connected...

CVE-2014-9420

CVE-2014-9420 affects the Linux kernel iso9660 isofs rock.c: rock_continue does not bound the number of Rock Ridge continuation entries, allowing a local attacker crafting an ISO image to trigger an infinite loop and cause DoS (system hang/crash) on kernels up to 3.18.1. Public advisories from Ce...

CVE-2014-9644

CVE-2014-9644 affects the Linux kernel Crypto API prior to 3.18.5. It allows a local user to load arbitrary kernel modules by abusing a bind() call on an AF_ALG socket with a module template expression (eg, vfat(aes)) in salg_name. This is a local, privilege-related issue, separate from CVE-2013-...

CVE-2017-11472

CVE-2017-11472 affects the Linux kernel via the acpi_ns_terminate() path in drivers/acpi/acpica/nsutils.c. The flaw does not flush the operand cache, enabling a local user to dump kernel memory and bypass KASLR by crafting an ACPI table, with impact described for kernels before 4.12 (and through ...

CVE-2017-16643

CVE-2017-16643 affects the Linux kernel, specifically the parse_hid_report_descriptor function in drivers/input/tablet/gtco.c, with exploitation possible via a crafted USB device. It allows a local user to trigger an out-of-bounds read and system crash (DoS) and potentially other impacts. The iss...

CVE-2017-18075

CVE-2017-18075 affects the Linux kernel’s crypto/pcrypt.c, where freeing instances in the AF_ALG-based AEAD path (CONFIG_CRYPTO_USER_API_AEAD, CONFIG_CRYPTO_PCRYPT) can trigger a denial-of-service via kfree of an incorrect pointer, with possible unspecified impact by a crafted sequence of system ...

CVE-2018-12928

CVE-2018-12928 concerns Linux kernel 4.15.0 where a NULL pointer dereference can occur in hfs_ext_read_extent within hfs.ko during mounting a crafted HFS filesystem. Connected advisories note the issue in kernel packages and reference a security update (ELSA) and Nessus entries indicating affecte...

CVE-2021-4095

CVE-2021-4095: Linux kernel KVM NULL pointer dereference when dirty ring logging is enabled without an active vCPU context allows an unprivileged local attacker to trigger a kernel oops/DoS via KVM_XEN_HVM_SET_ATTR; affects kernels before 5.17-rc1. Remediation is upgrading to a fixed kernel versi...

CVE-2021-46988

The CVE-2021-46988 entry concerns a Linux kernel issue in userfaultfd where a page allocated during shmem_mfill_atomic_pte() may not be released if a copy_from_user() fails and accounting subsequently fails, triggering a BUG_ON in the caller. The connected Astra/Linux bulletin and Nessus/OpenVAS ...

CVE-2021-47107

CVE-2021-47107 : Linux kernel NFSD is affected by a buffer overflow in READDIR handling. If a client sends a very small READDIR count (e.g., 0), the new init_dirlist logic can underflow the buffer size calculation, causing XDR writing to exceed the allocated space. This underflow was exposed by a...

CVE-2021-47572

CVE-2021-47572 affects the Linux kernel net: nexthop when adding an IPv6 nexthop while IPv6 is disabled (CONFIG_IPV6 not set). Root cause: nh_create_ipv6() dereferences ipv6_stub->fib6_nh_release in its error path, leading to a NULL pointer dereference. The fix returns the dummy stub’s -EAFNOS...

CVE-2022-48765

The CVE-2022-48765 entry corresponds to a Linux kernel issue in KVM LAPIC handling during SET_LAPIC. The accompanying (unpatched) Nessus/OpenVAS notes describe a scenario where rebooting a guest with tsc-deadline mode not exposed can trigger a preemption timer cancellation via apic_update_lvtt(),...

CVE-2022-48990

CVE-2022-48990 affects the Linux kernel (drm/amdgpu) where a use-after-free could occur during GPU recovery due to fw_fence not being initialized before amdgpu_job_free_cb frees a job. The publicly provided details state the fix is in drm/amdgpu: fix use-after-free during gpu recovery, addressing...