CVE-2017-16529

CVE-2017-16529 affects the Linux kernel’s snd_usb_create_streams in sound/usb/card.c, allowing a local attacker to trigger an out-of-bounds read and system crash via a crafted USB device, with impact described as a denial of service and potentially other effects. The issue is present in kernels p...

CVE-2024-26694

CVE-2024-26694 affects the Linux kernel wifi iwlwifi driver. The vulnerability arises from improper handling of TLV PC register data: the data storage in drv->fw area is freed without clearing the pointer, risking a double-free if a subsequent free occurs (e.g., when a file load fails after pa...

CVE-2024-26822

CVE-2024-26822 relates to the Linux kernel SMB client handling of multiuser automounts. The issue occurs when uid, gid and cruid are not provided; the filesystem context used for automounts may reuse values from the parent mount, leading to incorrect ownership/context. The available connected doc...

CVE-2024-35821

In the Linux kernel, the following vulnerability has been resolved: ubifs: Set page uptodate in the correct place Page cache reads are lockless, so setting the freshly allocated pageuptodate before we've overwritten it with the data it's supposed to havein it will allow a simultaneous reader to s...

CVE-2024-36957

CVE-2024-36957 affects the Linux kernel driver octeontx2-af. The vulnerability is due to an off-by-one read from userspace when attempting to copy count + 1 bytes (memdup_user(buffer, count + 1)), while the userspace buffer only contains count bytes. The fix prevents this by using memdup_user_nul...

CVE-2024-38545

CVE-2024-38545 : In the Linux kernel, RDMA/hns CQ destruction can race with asynchronous events, leading to a use-after-free if the CQ refcount is released concurrently. The issue is fixed by protecting the CQ refcount with a lock (xa_lock). Astra Linux’s security bulletin confirms the same vulne...

CVE-2024-46716

The CVE-2024-46716 issue affects the Linux kernel dmaengine altera-msgdma, where descriptors were not correctly freed because of the cleanup path. The fix alters the freeing logic to move descriptor ownership from the chan cleanup path to msgdma_free_descriptor: remove the list_del from msgdma_ch...

CVE-2024-46733

The CVE-2024-46733 issue is in the Linux kernel, specifically the btrfs qgroup reserve leaks in cow_file_range during buffered writes. The root cause is that in the dirty page path the qgroup reserve remains owned until an ordered_extent is created; if an error occurs before allocation of the ord...

CVE-2024-46809

In the Linux kernel, the vulnerability CVE-2024-46809 affects the drm/amd/display pathway where BIOS images are loaded. The root cause involved missing null checks, which could lead to failures when BIOS images are loaded. A fix adds explicit null checks before BIOS image usage and resolves six N...

CVE-2024-49880

The CVE-2024-49880 entry concerns an off-by-one in ext4 resizing logic (alloc_flex_gd) leading to a kernel BUG in resize operations (resize2fs) when resizing a filesystem. The vulnerability is addressed by a patch that removes the problematic +1 (and adds a WARN_ON_ONCE) to ensure flex_gd->res...

CVE-2024-49907

CVE-2024-49907 : Linux kernel DRM/AMD display vulnerability where a NULL dereference can occur by dereferencing dc->clk_mgr in the idle-power path if it is NULL. The fix adds a NULL check before calling dc->hwss.apply_idle_power_optimizations (which may call dcn35_apply_idle_power_optimizat...

CVE-2024-49921

CVE-2024-49921 concerns the Linux kernel DRM display driver (drm/amd/display) specifically around null-pointer usage; fixes were applied to ensure pointers such as dc->clk_mgr are checked before use, addressing 10 FORWARD_NULL issues reported by Coverity. The connected OSV entries confirm patc...

CVE-2024-50001

The CVE 2024-50001 entry affects the Linux kernel, specifically the net/mlx5 multi-packet WQE transmit path. The code that obtains a DMA mapping for the skb may fail under memory pressure; in the error path it erroneously unmaps one entry from the sq’s FIFO list of active mappings. Since the mapp...

CVE-2024-50043

CVE-2024-50043 affects the Linux kernel nfsd component (nfsd4_free_stateid). The issue arises when multiple FREE_STATEIDs are sent for the same delegation stateid; releasing under a dropped client lock allows a subsequent FREE_STATE to reuse the stateid, leading to use-after-free or counter under...

CVE-2024-50079

CVE-2024-50079 affects the Linux kernel io_uring/sqpoll path. When sqpoll exits and cancels pending work items, it may call task_work from within io_uring_cancel_generic() while the task is not TASK_RUNNING, risking a scheduler splat as the ring mutex is grabbed in an interruptible state. The roo...

CVE-2024-50140

CVE-2024-50140 involves a Linux kernel vulnerability in sched/core where page allocation is disabled during task_tick_mm_cid(). With KASAN and PREEMPT_RT enabled, a call to task_work_add() within task_tick_mm_cid() can sleep in an invalid context, triggering a BUG in stack/depot and related alloc...

CVE-2024-50146

The CVE-2024-50146 entry concerns the Linux kernel mlx5e driver: when profile rollback fails in mlx5e_netdev_change_profile, the netdev profile is left NULL and the subsequent unload can crash if profile->cleanup is called. The issue is triggered during profile rollback failures (e.g., due to ...

CVE-2024-50255

The CVE CVE-2024-50255 affects the Linux kernel Bluetooth stack. A null-ptr-deref in hci_read_supported_codecs can occur due to __hci_cmd_sync_sk() returning NULL for unknown opcodes and the hci_cmd_complete_evt() assuming status from skb->data[0] when an opcode is missing from hci_cc, trigger...

CVE-2024-53046

CVE-2024-53046 affects Linux kernel ARM64 in the imx8ulp device tree to correct the flexspi compatible string. The issue arises because imx8ulp flexspi supports 16 LUTs whereas imx8mm supports 32 LUTs, causing a startup warning if the string is incorrect. The fix updates arm64/dts: imx8ulp to ens...

CVE-2024-53048

Technical details for CVE-2024-53048 are not provided in the connected documents. The initial description describes a Linux kernel ice driver crash with DPLL-enabled E810 LOM and a firmware-driven pin initialization approach under planning; no concrete vendor/version/fix details are present here....

CVE-2024-53223

Technical details about CVE-2024-53223 are not provided in the connected documents. Please monitor for updates; current sources do not reveal affected products, versions, root cause, impact, or fixes.

CVE-2024-53230

CVE-2024-53230 affects the Linux kernel cpufreq CPPC path. The issue is a potential NULL pointer dereference in cppc_get_cpu_cost() when cpufreq_cpu_get_raw() returns NULL for a CPU not present in policy->cpus mask. The fix is to add a NULL check before dereferencing cppc_get_cpu_cost(), mitig...

CVE-2024-56545

Technical details for CVE-2024-56545 are not provided in the supplied Connected documents. Public references describe a Linux kernel HID Hyper-V devres issue, but no additional exploit vectors or affected versions are included here; monitor for updates.

CVE-2024-56579

CVE-2024-56579 : In the Linux kernel, the media: amphion driver must set video_drvdata before registering the video device; otherwise video_drvdata() may return NULL in open(), causing an oops. Remediation per the description is to ensure video_drvdata() is set prior to video device registration....

CVE-2024-57857

In CVE-2024-57857, the Linux kernel RDMA/siw subsystem removed a direct per-device net_device link and relies on ib_devices net_device management instead. The change addresses a slab-use-after-free (KASAN) issue observed during siw_query_port() caused by a badly managed local net_device link. Rem...

CVE-2024-58076

CVE-2024-58076 affects the Linux kernel clock framework for Qualcomm SoCs (e.g., gcc-sm6350). The issue occurs when a clk_rcg2 has a parent but lacks a defined parent_map, which can trigger a NULL pointer dereference during clk_set_rate, as evidenced by the kernel trace in the description. The pr...

CVE-2025-21643

The CVE-2025-21643 entry concerns the Linux kernel netfs path. Affected: kernel components handling asynchronous DIO via bio_vec[] passed to netfs_extract_user_iter(); trigger occurs when CIFS is combined with a loopback blockdev. Root cause: netfs_unbuffered_write_iter_locked() performed a check...

CVE-2025-21808

Technical details for CVE-2025-21808 (affected product/version, root cause, exploit info) are not provided in the connected documents. The Initial Description is present, but mode C cannot be applied without corroborating specifics. Monitor for updates.

CVE-2025-21931

CVE-2025-21931 affects the Linux kernel memory hotplug path (hwpoison) and was fixed by ensuring folio lock is held before unmapping hwpoisoned folio. The fix adds the folio lock around unmap calls in do_migrate_range/try_to_unmap to prevent the kernel BUG triggered when folio is not locked. The ...

CVE-2025-22001

CVE-2025-22001 relates to the Linux kernel, where an integer overflow could occur in qaic_validate_req() due to u64 values supplied from user space via qaic_attach_slice_bo_ioctl(). The vulnerability was fixed by ensuring calculations don’t wrap using check_add_overflow() (kernel fixes referenced...

CVE-2025-22093

Summary (CVE-2025-22093) The Linux kernel DRM for AMD displays had a NULL pointer dereference risk when DMUB is unsupported on the ASIC. Specifically, ctx->dmub_srv could be NULL (tested in dm_dmub_sw_init) but was dereferenced in dmub_hw_lock_mgr_cmd if should_use_dmub_lock returned true. The...

CVE-2025-23156

The CVE-2025-23156 vulnerability affects the Linux kernel’s media: venus: hfi_parser component. It is caused by a potential out-of-bounds access when parsing a payload’s words_count and data pointers; when words_count reaches the last word, data may read beyond the total payload. The issue is mit...

CVE-2025-23158

The CVE-2025-23158 vulnerability affects the Linux kernel media: venus: hfi queue handling, where a firmware-modified large qsize can cause an OOB write when a new_wr_idx is not validated. The issue originates in reading/writing the shared queue (qhdr->q_size) and can lead to an out-of-bounds ...

CVE-2026-31664

The CVE-2026-31664 issue resides in the Linux kernel xfrm subsystem: build_polexpire() fails to clear trailing padding in struct xfrm_user_polexpire, leaving uninitialized heap bytes that are sent to userspace via netlink multicast (XFRMNLGRP_EXPIRE). The consequence is potential leakage of kerne...

CVE-2010-2959

The CVE-2010-2959 issue affects the Linux kernel CAN subsystem, specifically the can/bcm.c implementation, due to an integer overflow vulnerability. This flaw can allow local attackers to execute arbitrary code or cause a system crash (DoS) via crafted CAN traffic. Public advisories confirm vulne...

CVE-2010-3432

CVE-2010-3432 affects the Linux kernel SCTP stack: sctp_packet_config in net/sctp/output.c initializes packet data structures too aggressively in kernels before 2.6.35.6, enabling remote attackers to trigger a denial of service (panic) via a specific SCTP traffic sequence. Affected component: ker...

CVE-2010-3442

Technical details for CVE-2010-3442 are not publicly provided in the connected documents. The sources reference the CVE and affected kernel versions but do not describe exploitability, impact specifics, or fixes. Monitor for vendor advisories and updates.

CVE-2013-0231

CVE-2013-0231 is discussed in connected advisories as affecting the Xen PCI backend: the pciback_enable_msi function in drivers/xen/pciback/conf_space_capability_msi.c on Linux kernels 2.6.18 and 3.8 allows guest OS users with PCI device access to trigger a denial of service by generating a large...

CVE-2014-7145

CVE-2014-7145 affects the Linux kernel SMB2_tcon() in fs/cifs/smb2pdu.c, where remote CIFS servers can trigger a NULL pointer dereference by deleting the IPC$ share during DFS referrals, potentially causing a denial of service. The issue is fixed in kernel 3.16.3 (per ChangeLog-3.16.3). Connected...

CVE-2015-7990

Technical details beyond the initial description are not provided in the connected documents. No public details about CVE-2015-7990 are included here; monitor for updates.

CVE-2017-16913

The CVE-2017-16913 issue affects the Linux kernel USB/IP stack. Specifically, stub_recv_cmd_submit() in drivers/usb/usbip/stub_rx.c fails to validate CMD_SUBMIT packets, enabling a remote attacker to trigger a denial of service via arbitrary memory allocation. Affected kernel versions: before 4.1...

CVE-2019-15504

CVE-2019-15504 affects the Linux kernel driver at drivers/net/wireless/rsi/rsi_91x_usb.c, with a Double Free vulnerability in versions up to 5.2.9. The issue arises from crafted USB device traffic, which could be delivered locally or remotely via usbip/usbredir, leading to potential memory corrup...

CVE-2019-19815

CVE-2019-19815 concerns the Linux kernel 5.0.21: mounting a crafted f2fs filesystem image can trigger a NULL pointer dereference in f2fs_recover_fsync_data (fs/f2fs/recovery.c), related to F2FS_P_SB in fs/f2fs/f2fs.h. The available connected documents reproduce this advisory text and confirm the ...

CVE-2021-47078

Concrete details available: CVE-2021-47078 affects the Linux kernel’s RDMA/rxe driver. The flaw occurs in rxe_qp_do_cleanup() when rxe_qp_from_init() has failed, causing QP fields to be garbage-collected and leading to a refcount underflow and a use-after-free condition. This can enable local exp...

CVE-2021-47338

The CVE-2021-47338 entry describes a Linux kernel fault in fbmem: fb_delete_videomode() could delete a video mode still in use, causing a use-after-free (UAF). Root cause is that fb_set_var calls fbcon_mode_deleted() result without confirming mode usage, enabling UAF in fb_mode_is_equal and subse...

CVE-2021-47646

CVE-2021-47646 (Linux kernel) involves a crash triggered by interactions around block, bfq: honor already-setup queue merges. The vulnerability arose when the commit 2d52c58b9c9b was merged and later reverted by ebc69e897e17; that revert did not introduce the bug, but actually exposed a UAF cause...

CVE-2022-48893

CVE-2022-48893 affects the Linux kernel's drm/i915/gt engine discovery. If driver initialization is aborted mid-gt/engine discovery, some engines stay incompletely set up and leak allocated objects because engine->release may be NULL. The entry notes a fix: drop the destroy_pinned_context() he...

CVE-2022-49109

CVE-2022-49109 concerns the Linux kernel ceph subsystem. The provided text describes a leak: when ceph_get_inode() searches for or inserts an inode into the hash for a given vino, it returns a reference to the inode and may consume that reference if new is non-NULL. If error handling does not rel...

CVE-2022-49142

In CVE-2022-49142, the Linux kernel fix targets net: preserve skb_end_offset() in skb_unclone_keeptruesize() to address a WARN_ON_ONCE(delta truesize value remains consistent and avoids tailroom mismanagement when ksize(addr) is involved. The update includes revision notes and call traces (skb_tr...

CVE-2022-49177

CVE-2022-49177 : In the Linux kernel, the cavium hwrng driver fix addresses a NULL pointer dereference in cavium RNG handling. The issue manifested as a NULL dereference of 'pdev' in cavium-rng-vf.c (line 182) when dereferenced, triggering a coccicheck warning. The upstream patch fixes the NULL-d...