CVE-2022-48687

CVE-2022-48687 affects the Linux kernel SRv6 HMAC configuration. The vulnerability stems from the SECRETLEN length being decoupled from SECRET, allowing invalid combinations (e.g., secret="", secretlen=64) that an attacker can craft via netlink to trigger an out-of-bounds read of up to 64 bytes p...

CVE-2022-49177

CVE-2022-49177 : In the Linux kernel, the cavium hwrng driver fix addresses a NULL pointer dereference in cavium RNG handling. The issue manifested as a NULL dereference of 'pdev' in cavium-rng-vf.c (line 182) when dereferenced, triggering a coccicheck warning. The upstream patch fixes the NULL-d...

CVE-2022-49227

CVE-2022-49227 : In the Linux kernel igc driver, the ethtool RX-ring reconfiguration path copies an igc_ring structure but fails to reset the xdp_rxq_info member before igc_setup_rx_resources is called. This causes xdp_rxq_info_reg() to be invoked on an already registered xdp_rxq_info, leading to...

CVE-2022-49348

In Linux kernels affected by CVE-2022-49348, the EXT4_FC_REPLAY bit in sbi->s_mount_state was causing a risk: a corrupted on-disk superblock could set EXT4_FC_REPLAY in s_mount_state, bypassing sanity checks and triggering a BUG() in ext4_es_cache_extent(). The available connected documents co...

CVE-2022-49846

CVE-2022-49846 : In the Linux kernel, a slab-out-of-bounds write bug was reported in udf_find_entry() (fs/udf/namei.c). The issue is demonstrated via a KASAN report during an open path through udf_lookup and namei, with a 256-byte kmalloc object involved. The advisory notes that this has been fix...

CVE-2023-3220

CVE-2023-3220 affects the Linux kernel (through 6.1-rc8) in the MSM DPU path: dpu_crtc_atomic_check in drivers/gpu/drm/msm/disp/dpu1/dpu_crtc.c does not validate kzalloc() return, causing a NULL pointer dereference. Impact is local attacker could crash the system; no remote code execution indicat...

CVE-2023-32257

CVE-2023-32257 affects the Linux kernel ksmbd (the in-kernel SMB server). The vulnerability stems from lack of proper locking when processing SMB2_SESSION_SETUP and SMB2_LOGOFF, enabling an attacker to execute code in the kernel context. The initial description documents the root cause and impact...

CVE-2023-34256

CVE-2023-34256 describes an out-of-bounds read in crc16 in lib/crc16.c when invoked from fs/ext4/super.c due to incomplete offset checks in ext4_group_desc_csum, affecting the Linux kernel up to but not including 6.3.3. The issue can enable local denial of service or information leaks via a craft...

CVE-2023-52638

CVE-2023-52638 : Linux kernel patch changes the j1939_socks_lock to an rwlock to prevent a deadlock among j1939_socks_lock, active_session_list_lock, and sk_session_queue_lock. Patched code reduces circular lock dependency when a thread already holds j1939_socks_lock and may acquire sk_session_qu...

CVE-2023-52670

CVE-2023-52670 is a Linux kernel issue affecting rpmsg: virtio where driver_override is freed only partially during rpmsg_remove, causing a memory leak for an unreferenced object (size 128, shown in the backtrace). The vulnerability was resolved in the Linux kernel by freeing driver_override duri...

CVE-2023-52699

In CVE-2023-52699, the Linux kernel SysV locking flaw caused sleep in atomic context because sb_bread() was invoked with pointers_lock held. The root cause spans historical locking changes: replacing BKL with a sysvfs-private rwlock (Linux 2.5.12) introduced a write_lock → read_lock deadlock; the...

CVE-2023-52741

CVE-2023-52741 is a Linux kernel vulnerability affecting the CIFS implementation. The flaw is a use-after-free in rdata->read_into_pages() that can occur when reading data from a server during unstable network conditions, manifested as a use-after-free in readpages_fill_pages. The issue is dem...

CVE-2023-52846

The CVE-2023-52846 entry concerns a Linux kernel use-after-free in hsr's prp_create_tagged_frame, where prp_fill_rct() may fail and free the skb while the successful path returns the original skb. Impact is described as high for confidentiality, integrity, and availability with local access prere...

CVE-2023-53068

CVE-2023-53068 is reported in the Linux kernel under net: usb: lan78xx: Limit packet length to skb->len. The vulnerability arises when the packet length read from the descriptor may exceed skb->len, causing a cloned skb passed up the network stack to leak kernel memory contents. A fix was a...

CVE-2023-53103

CVE-2023-53103 affects the Linux kernel bonding subsystem. A bug in the enslave/error path could clear the bond’s IFF_SLAVE/IFF_MASTER flags when an enslave of a non-ethernet device fails, causing inconsistent bond state. The fix uses bond_ether_setup to restore the bond’s flags correctly, ensuri...

CVE-2024-26644

CVE-2024-26644 : Linux kernel Btrfs snapshot logic fails when the source is a deleted subvolume. The code copies the source root item (including refs) to the new root item; since refs is 0 for a deleted subvolume, btrfs_get_new_fs_root() returns -ENOENT and the snapshot creation aborts. The docum...

CVE-2024-26783

CVE-2024-26783 is a Linux kernel issue where, under NUMA balancing, wakeup_kswapd() could be invoked with an invalid zone index (-1) causing a page fault oops. The fix adds an index check before wakeup_kswapd() in mm/vmscan.c (resolved in the Linux kernel commit cited in the vulnerability descrip...

CVE-2024-26822

CVE-2024-26822 relates to the Linux kernel SMB client handling of multiuser automounts. The issue occurs when uid, gid and cruid are not provided; the filesystem context used for automounts may reuse values from the parent mount, leading to incorrect ownership/context. The available connected doc...

CVE-2024-26845

CVE-2024-26845 pertains to the Linux kernel scsi: target: core logic. The issue arises when an abort handled by iSCSI is added to tmr_list but is not processed by target core, causing a LUN_RESET that traverses tmr_list to wait on a refcounted abort that is never completed. Symptoms include messa...

CVE-2024-36957

CVE-2024-36957 affects the Linux kernel driver octeontx2-af. The vulnerability is due to an off-by-one read from userspace when attempting to copy count + 1 bytes (memdup_user(buffer, count + 1)), while the userspace buffer only contains count bytes. The fix prevents this by using memdup_user_nul...

CVE-2024-38576

CVE-2024-38576 affects the Linux kernel where rcuc: rcu: print_cpu_stall_info() could overflow a buffer when jiffies differences are large. The root cause involved printing an unsigned difference with %ld and a potential buffer overflow, which is fixed by replacing sprintf() with snprintf() and a...

CVE-2024-38580

CVE-2024-38580 is a Linux kernel vulnerability in epoll handling. The issue arises when epoll calls vfs_poll() with a file pointer that may race with the last fput(), potentially letting f_count drop to zero and leaving the file pointer dead before use. The documented fix is to ensure a valid ref...

CVE-2024-42097

CVE-2024-42097 relates to Linux kernel ALSA emux: patch ioctl data validation. The connected Nessus entries confirm the vulnerability and describe the fix as tightening validation in load_data() and length checks in load_guspatch() to ensure the specified patch length matches the data provided. T...

CVE-2024-42280

The CVE-2024-42280 entry affects the Linux kernel mISDN hfcmulti_tx() use-after-freeBug: a use-after-free could occur if a pointer is dereferenced after dev_kfree_skb(*sp) frees the skb. The issue is fixed in upstream kernel patches (e.g., commits listed in the CVE entry). Impact in the descripti...

CVE-2024-42297

CVE-2024-42297 affects the Linux kernel’s f2fs filesystem. The root cause is a path that dirties an inode (FI_DIRTY_INODE) during operations on a read‑only filesystem, leading to a kernel panic in f2fs_evict_inode when unmounting. The provided details trace the sequence from do_sys_open → f2fs_lo...

CVE-2024-42307

Technical details about CVE-2024-42307 (affected product, vulnerable component, impact, or remediation) are not provided in the supplied documents. Monitor for updates from official advisories.

CVE-2024-43913

The CVE pertains to the Linux kernel nvme apple driver, where improper device reference counting caused a memory leak on a tagset failure. The issue is resolved by correcting the flow: drivers must call nvme_uninit_ctrl after a successful nvme_init_ctrl, and the allocation path was split to simpl...

CVE-2024-44985

CVE-2024-44985 affects the Linux kernel in the IPv6 path (ip6_xmit). The issue is a use-after-free risk: if skb_expand_head() returns NULL, skb and the associated dst/idev may be freed, requiring rcu_read_lock() to prevent UAF. The vulnerability is resolved upstream; commits listed in the connect...

CVE-2024-46714

CVE-2024-46714 in the Linux kernel is addressed by a fix in the DRM/AMD display path: the code now skips the wbscl_set_scaler_filter when the filter is null, preventing a potential NULL return from wbscl_get_filter_coeffs_16p from causing a null dereference. A null check was added to ensure filte...

CVE-2024-46715

CVE-2024-46715: Linux kernel vulnerability in iio_info callback access where certain callbacks could be accessed without checks, leading to a NULL pointer dereference and potential kernel oops if a driver does not implement callbacks. The issue was fixed by adding missing validation for iio_info ...

CVE-2024-46716

The CVE-2024-46716 issue affects the Linux kernel dmaengine altera-msgdma, where descriptors were not correctly freed because of the cleanup path. The fix alters the freeing logic to move descriptor ownership from the chan cleanup path to msgdma_free_descriptor: remove the list_del from msgdma_ch...

CVE-2024-47690

The CVE-2024-47690 entry concerns the Linux kernel f2fs component. The vulnerability arises from the online repair mechanism for corrupted directories in f2fs_lookup(), which can generate dirty data/meta during races with readonly remount. This can leave dirty inodes after the filesystem becomes ...

CVE-2024-49907

CVE-2024-49907 : Linux kernel DRM/AMD display vulnerability where a NULL dereference can occur by dereferencing dc->clk_mgr in the idle-power path if it is NULL. The fix adds a NULL check before calling dc->hwss.apply_idle_power_optimizations (which may call dcn35_apply_idle_power_optimizat...

CVE-2024-50025

CVE-2024-50025 affects the Linux kernel, specifically the scsi fnic driver. Root cause: in a patch, flush_work initialization was moved into a conditional block, risking dispatching a work item on an uninitialized work queue. Impact: this could cause the queued work to not be processed, which may...

CVE-2024-50096

CVE-2024-50096 affects the Linux kernel’s nouveau/dmem migrate_to_ram path. A copy error can cause nouveau_dmem_copy_one to report success even when the firmware/ hardware copy fails, leading migrate_to_ram to return a dirty HIGH_USER page to the user. The fix allocates a zero page so that, in er...

CVE-2024-50139

CVE-2024-50139 affects the Linux kernel KVM for ARM64. UBSAN reports a shift-out-of-bounds in arch/arm64/kvm/sys_regs.c (shift exponent 33 too large for 32-bit int) when running VMs with MTE-enabled host kernels. Affected component is the KVM arm64 path and the bug is fixed by a kernel patch (ref...

CVE-2024-50161

The CVE-2024-50161 issue affects the Linux kernel BPF interpreter (btf.c). It arises from unvalidated array indexing in btf_repeat_fields() when repeating nested struct BTF fields, potentially causing UBSAN out-of-bounds, and was reported to trigger a service denial. The connected BDU note states...

CVE-2024-50221

CVE-2024-50221 affects the Linux kernel AMDGPU/Vangogh driver. The vulnerability arises from a memory out-of-bounds write in the GPU metrics table initialization (vangogh_get_gpu_metrics/smu_cmn_init_soft_gpu_metrics), where the metrics table allocation was too small to cover a subsequent memset....

CVE-2024-50223

CVE-2024-50223: In Linux kernel sched/numa, a potential null pointer dereference in task_numa_work() could occur when a stress scenario unmapped a child address space, causing vma_next() to return NULL. The backtrace shows dereferencing a NULL vma in vma_migratable, leading to a crash. Root cause...

CVE-2024-50303

CVE-2024-50303 affects the Linux kernel: walk_system_ram_res_rev discards resource flags when passing information to the callback, causing IORESOURCE_SYSRAM_DRIVER_MANAGED memory to be selected for kexec buffers if located above normal RAM. This can lead to undefined behavior after reboot or a cr...

CVE-2024-53046

CVE-2024-53046 affects Linux kernel ARM64 in the imx8ulp device tree to correct the flexspi compatible string. The issue arises because imx8ulp flexspi supports 16 LUTs whereas imx8mm supports 32 LUTs, causing a startup warning if the string is incorrect. The fix updates arm64/dts: imx8ulp to ens...

CVE-2024-53202

CVE-2024-53202 : In the Linux kernel, a resource leak can occur in the firmware loader path (fw_log_firmware_info) if an alg instance is not released on the exception path. The fix ensures the alg instance is freed with crypto_free_shash when kmalloc fails. Affected area: firmware_loader/kernel, ...

CVE-2024-53221

Technical details about CVE-2024-53221 (affected products/versions, impact, and fixes) are not provided in the supplied documents. Public specifics are not available here; please monitor for updates from official advisories or connected sources.

CVE-2024-56368

CVE-2024-56368 (Linux kernel) : The issue is a slab-out-of-bounds in the tracing ring buffer path, specifically in __rb_map_vma. A faulty overflow calculation for nr_pages in the expression nr_pages = ((nr_subbufs + 1) <

CVE-2024-56588

CVE-2024-56588 (Linux kernel) affects the hisi_sas driver. The issue arises when dump files are created on the fly during debugfs dump, which leads to a NULL pointer dereference and kernel hang if the driver is unbound while dumping. The root cause is allocating memory and creating debugfs entrie...

CVE-2024-58016

CVE-2024-58016 (Linux kernel) fixes a safesetid vulnerability where syzbot could cause a kmalloc warning by writing an oversized buffer to a sysfs entry; the vulnerability arises from insufficient validation of write buffer sizes in handle_policy_update() and policy writes. The fix is to validate...

CVE-2024-58076

CVE-2024-58076 affects the Linux kernel clock framework for Qualcomm SoCs (e.g., gcc-sm6350). The issue occurs when a clk_rcg2 has a parent but lacks a defined parent_map, which can trigger a NULL pointer dereference during clk_set_rate, as evidenced by the kernel trace in the description. The pr...

CVE-2025-21738

CVE-2025-21738 describes a Linux kernel vulnerability in the ata libata-sff path where ata_pio_sector() could write outside the allocated buffer, potentially corrupting memory. The issue arises when handling a SCSI_IOCTL_SEND_COMMAND (out_len 0xd42) with SCSI command ATA_16 PASS-THROUGH, ATA_NOP,...

CVE-2025-21931

CVE-2025-21931 affects the Linux kernel memory hotplug path (hwpoison) and was fixed by ensuring folio lock is held before unmapping hwpoisoned folio. The fix adds the folio lock around unmap calls in do_migrate_range/try_to_unmap to prevent the kernel BUG triggered when folio is not locked. The ...

CVE-2025-21950

CVE-2025-21950 affects the Linux kernel driver path drivers: virt: acrn: hsm. In pmcmd_ioctl, three kmalloc-allocated memory objects initialized by hcall_get_cpu_state are copied to user space, risking information leakage from uninitialized bytes. The fix uses kzalloc to zero memory, mitigating l...