CVE-2015-1333

CVE-2015-1333 is a memory-leak vulnerability in the Linux kernel prior to 4.1.4. The issue is in the __key_link_end function within security/keys/keyring.c, where adding a key to a keyring via add_key can allow a local attacker to exhaust memory and cause a denial of service. Public advisories an...

CVE-2015-8575

CVE-2015-8575: In Linux kernel

CVE-2016-2053

CVE-2016-2053: The Linux kernel’s asn1_ber_decoder in lib/asn1_decoder.c is vulnerable to denial-of-service (panic) via a crafted ASN.1 BER file that lacks a public key. The issue occurs in kernel builds prior to 4.3. Consequence is a local DoS without authenticated user interaction. Affected com...

CVE-2016-6327

CVE-2016-6327 affects the Linux kernel: the infiniband ulp srpt driver (ib_srpt.c) before 4.5.1 is vulnerable to a local denial-of-service via an ABORT_TASK command that aborts a device write operation, leading to a NULL pointer dereference and system crash. Affected are kernels prior to 4.5.1; r...

CVE-2016-9178

CVE-2016-9178 affects the Linux kernel prior to 4.7.5. The macro __get_user_asm_ex in arch/x86/include/asm/uaccess.h does not initialize a certain integer variable, allowing local users to obtain sensitive information from kernel stack memory by triggering a failure of a get_user_ex call. Impact ...

CVE-2018-14610

CVE-2018-14610 concerns the Linux kernel up to 4.17.10. A crafted btrfs image mounting scenario can trigger an out-of-bounds access in write_extent_buffer() due to insufficient verification that each block group has a corresponding chunk at mount time (in fs/btrfs/extent-tree.c). This can lead to...

CVE-2021-28039

CVE-2021-28039 affects the Linux kernel 5.9.x–5.11.3 (used with Xen). In some configurations, an x86 PV guest OS user can crash the Dom0 or a driver domain by generating a large amount of I/O. Root cause is the misuse of guest physical addresses when CONFIG_XEN_UNPOPULATED_ALLOC is set but CONFIG...

CVE-2021-4032

CVE-2021-4032 affects the Linux kernel KVM: arch/x86/kvm/lapic.c kvm_free_lapic. A failure during memory allocation when constructing a VCPU can mishandle memory errors, causing a kernel crash and enabling local-privilege attackers to trigger a denial of service. The issue exists in kernel versio...

CVE-2021-46283

CVE-2021-46283 affects the Linux kernel’s nf_tables_newset in nf_tables_api.c, where missing initialization of nft_set_elem_expr_alloc can trigger a NULL pointer dereference/GPF when a local user creates a netfilter table expression in their namespace, leading to a denial of service. The vulnerab...

CVE-2022-2590

Astra Linux bulletin confirms CVE-2022-2590 was addressed in Linux kernel MM/GUP logic by fixing FOLL_FORCE COW security issue and removing FOLL_COW. The patch targets races where a read-only shared page could become writable via FOLL_FORCE during COW, enabling unprivileged local writes to read‑o...

CVE-2022-3606

CVE-2022-3606 affects the Linux kernel libbpf component (function find_prog_by_sec_insn in tools/lib/bpf/libbpf.c). The issue is a NULL pointer dereference; advisories recommend applying a patch. Connected sources confirm this CVE is tracked in VDB-211749 and is fixed in downstream packages (e.g....

CVE-2022-48827

CVE-2022-48827 (Linux kernel NFSD READ near OFFSET_MAX) : The vulnerability arises when the client-side NFS read request is aligned to a server rsize of 0x1000 due to a buffer alignment change. This can cause a loff_t overflow on the server when reading near the maximum file offset, leading the s...

CVE-2022-48905

CVE-2022-48905 relates to a memory leak in the Linux kernel's ibmvnic driver during flushing of the reset-work-item. The issue is resolved by fixing the tiny memory leak in the reset work queue, as noted in the public description and repeated across connected advisories (Astra Linux and Nessus/Un...

CVE-2022-48956

The CVE-2022-48956 issue is a Linux kernel use-after-free vulnerability in IPv6 handling, specifically in ip6_fragment() with a problematic assumption about rcu_read_lock() ownership. The flaw enables a use-after-free in the UDP path (ip6_dst_idev and ip6_fragment) as shown in the syzbot KASAN re...

CVE-2022-49268

Summary: CVE-2022-49268 affects the Linux kernel ASoC: SOF Intel path and causes a NULL pointer dereference when ENOMEM occurs during noncontiguous DMA allocations. The issue arises if snd_dma_free_pages() is called after snd_dma_alloc_pages() returns -ENOMEM, leading to a NULL dereference in dma...

CVE-2022-49296

CVE-2022-49296: Linux kernel Ceph deadlock when holding Fwb to get inline_data. The vulnerability arises during cephfs/cephmds inline data handling (inline_version logic) causing a deadlock involving Fwb/Fsr caps during the getattr sequence, potentially locking the system. Connected docs indicate...

CVE-2022-49304

CVE-2022-49304 concerns a deadlock in the Linux kernel’s serial driver path (drivers/tty/serial) specifically in sa1100_set_termios(). The issue stems from a lock-order conflict: thread1 holds sport->port.lock while waiting on del_timer_sync(), while a timer handler running in thread2 also nee...

CVE-2022-49504

The CVE-2022-49504 issue affects the Linux kernel SCSI lpfc path, where after an external loopback test the system oopsed in llpfc_set_rrq_active() due to a mismanaged ABTS completion and ref counting. The root cause was a mixup in completing the new FLOGI/ABTS flow, causing the original ABTS to ...

CVE-2022-49697

CVE-2022-49697 concerns a leak in the Linux kernel caused by a BPF lookup path that could leak a request_sock. The issue occurs when a BPF program performs a socket lookup that takes a refcnt on the socket and, after locating the child request_socket, returns the parent LISTEN socket via sk_to_fu...

CVE-2022-49698

CVE-2022-49698 detailed context : In the Linux kernel, a bug in netfilter involves updating per-CPU rnd_state from user context in the local_out path, potentially allowing a local attacker to influence randomness. The recommended fix replaces uses of prandom with get_random_u32, and shifts random...

CVE-2023-3220

CVE-2023-3220 affects the Linux kernel (through 6.1-rc8) in the MSM DPU path: dpu_crtc_atomic_check in drivers/gpu/drm/msm/disp/dpu1/dpu_crtc.c does not validate kzalloc() return, causing a NULL pointer dereference. Impact is local attacker could crash the system; no remote code execution indicat...

CVE-2023-52693

The CVE-2023-52693 issue affects the Linux kernel ACPI video backlight code. Root cause: acpi_get_parent() can fail (e.g., acpi_ut_acquire_mutex() failure) and pass an uninitialized acpi_parent to acpi_get_pci_dev() during acpi_video_dev_register_backlight(). Impact: potential incorrect parent ha...

CVE-2023-52773

CVE-2023-52773 concerns a NULL pointer dereference in the Linux kernel’s DRM/AMD display path. The issue is in amdgpu_dm_i2c_xfer(), which can dereference a null pointer when performing a DDC/I2C transfer. The description states that on ddc_service_construct(), the code now checks both the link t...

CVE-2023-53046

CVE-2023-53046 describes a race condition between hci_cmd_sync_work and hci_cmd_sync_clear in the Linux kernel Bluetooth subsystem, which can lead to a use-after-free and potentially a kernel panic. The issue arises when hci_cmd_sync_work is queued after a cancel_work_sync, allowing the cmd_sync_...

CVE-2024-0775

CVE-2024-0775 describes a use-after-free in the Linux kernel’s ext4 remount path: __ext4_remount in fs/ext4/super.c. The flaw lets a local user cause an information leak by freeing old quota file names before a potential failure, resulting in a use-after-free. Relevant connected documents confirm...

CVE-2024-26792

CVE-2024-26792 : Linux kernel bug in btrfs snapshot creation can cause a double free of an anonymous device number. Root cause: during snapshot creation, anon_dev is allocated, later freed in nested calls, and if the transaction path fails, the same anon_dev may be freed again even if it has been...

CVE-2024-26986

CVE-2024-26986 Root cause: In the Linux kernel’s DRM AMD/KFD path, a memory leak was introduced via a leaked mmget reference on the error path when creating KFD processes while a GPU reset is in progress. Impact: Memory leak in create_process failure for KFD, potentially exhausting memory or reso...

CVE-2024-35806

The CVE-2024-35806 entry concerns the Linux kernel vulnerability in soc: fsl: qbman where IRQs must be disabled when taking cgr_lock to avoid deadlocks. The description states that smp_call_function_single already disables IRQs in the affected code path and that qman_update_cgr and qman_delete_cg...

CVE-2024-35917

CVE-2024-35917 (Linux kernel, s390/bpf) details from connected Azure Linux Nessus entry show the issue arises from GCC reordering memcpy() after assignments in bpf_jit_plt(), causing NULL pointers to be written instead of the intended return/target addresses. Root cause is GCC alias-analysis misc...

CVE-2024-35955

CVE-2024-35955 : Linux kernel vulnerability in kprobe registration that could cause a use-after-free if module unload changes MODULE_STATE from LIVE/GOING to UNFORMED between address checks. The fix switches to using only __module_text_address() and performs try_module_get(module) while MODULE_ST...

CVE-2024-38560

The CVE-2024-38560 entry concerns Linux kernel SCSI (bfa) code. A vulnerable path copies nbytes from userspace into a kernel buffer without guaranteeing a NUL terminator, enabling an OOB read when sscanf is applied. The issue is fixed by replacing memdup_user with memdup_user_nul to ensure proper...

CVE-2024-38659

The CVE-2024-38659 issue affects the Linux kernel enic driver: enic_set_vf_port assumes fixed lengths for nl attributes (IFLA_PORT_PROFILE, IFLA_PORT_INSTANCE_UUID, IFLA_PORT_HOST_UUID) and validates them via nla_policy. The policy uses IFLA_PORT_PROFILE as NLA_STRING, IFLA_PORT_INSTANCE_UUID as ...

CVE-2024-42097

CVE-2024-42097 relates to Linux kernel ALSA emux: patch ioctl data validation. The connected Nessus entries confirm the vulnerability and describe the fix as tightening validation in load_data() and length checks in load_guspatch() to ensure the specified patch length matches the data provided. T...

CVE-2024-42288

CVE-2024-42288 affects the Linux kernel SCSI qla2xxx driver. The root cause is an incorrect dereference of the Init Control Block (ICB), which could enable memory corruption. The fix Correctly dereferences the ICB to prevent memory corruption, as documented in the vulnerability description. The l...

CVE-2024-43835

CVE-2024-43835 affects the Linux kernel virtio_net component, where a warning napi_skb_cache_put was triggered after a commit changed nested-BH locking for napi_alloc_cache. The issue stems from virtio assuming NAPI context in cases like netpoll, leading to warnings in net/core/skbuff.c during fr...

CVE-2024-43867

The CVE refers to a Linux kernel issue in the DRM Nouveau path: a refcount underflow in nouveau_bo_ref() when nouveau_bo has not been initialized (backing ttm_bo). The vulnerability arises in the unwind path of drm_gem_object_init(); instead of calling nouveau_bo_ref(), code now manually cleans u...

CVE-2024-46714

CVE-2024-46714 in the Linux kernel is addressed by a fix in the DRM/AMD display path: the code now skips the wbscl_set_scaler_filter when the filter is null, preventing a potential NULL return from wbscl_get_filter_coeffs_16p from causing a null dereference. A null check was added to ensure filte...

CVE-2024-46715

CVE-2024-46715: Linux kernel vulnerability in iio_info callback access where certain callbacks could be accessed without checks, leading to a NULL pointer dereference and potential kernel oops if a driver does not implement callbacks. The issue was fixed by adding missing validation for iio_info ...

CVE-2024-46744

The CVE-2024-46744 issue in the Linux kernel affects Squashfs by failing to sanity-check the symbolic link size read from disk. This causes the size (i_size) to be corrupted, which is later used to derive a length value that overflows a signed int in squashfs_symlink_read_folio(), leading to a po...

CVE-2024-46818

CVE-2024-46818 affects the Linux kernel’s DRM/AMD display driver. The root cause is using GPIO_ID_UNKNOWN (-1) as an array index; a patch adds a pre-check before indexing the gpio_id, fixing 5 Coverity-reported overrun issues. The vulnerability is addressed in kernel updates that include the drm/...

CVE-2024-49907

CVE-2024-49907 : Linux kernel DRM/AMD display vulnerability where a NULL dereference can occur by dereferencing dc->clk_mgr in the idle-power path if it is NULL. The fix adds a NULL check before calling dc->hwss.apply_idle_power_optimizations (which may call dcn35_apply_idle_power_optimizat...

CVE-2024-50161

The CVE-2024-50161 issue affects the Linux kernel BPF interpreter (btf.c). It arises from unvalidated array indexing in btf_repeat_fields() when repeating nested struct BTF fields, potentially causing UBSAN out-of-bounds, and was reported to trigger a service denial. The connected BDU note states...

CVE-2024-50172

CVE-2024-50172 : Linux kernel RDMA bnxt_re memory leak fix. In bnxt_re_setup_chip_ctx(), if bnxt_qplib_map_db_bar() fails, the driver previously did not free the allocated rdev->chip_ctx memory. The described fix ensures proper cleanup in that failure path, preventing a memory leak. Connected ...

CVE-2024-50193

CVE-2024-50193 affects the Linux kernel on x86. The vulnerability is in x86/entry_32 where CPU buffers were cleared after exc_nmi but before restoring registers. The fix moves CLEAR_CPU_BUFFERS to after RESTORE_ALL_NMI, addressing RDFS mitigation requirements. Public metrics show CVSS v3.1 base s...

CVE-2024-50250

The CVE-2024-50250 issue affects the Linux kernel fsdax code: dax_unshare_iter copies data from srcmap to iomap and previously did not align copy_pos/copy_len to a page boundary, allowing misalignment when iter->pos and length are not page-aligned. The bug can cause data corruption (when iter-...

CVE-2024-53202

CVE-2024-53202 : In the Linux kernel, a resource leak can occur in the firmware loader path (fw_log_firmware_info) if an alg instance is not released on the exception path. The fix ensures the alg instance is freed with crypto_free_shash when kmalloc fails. Affected area: firmware_loader/kernel, ...

CVE-2024-54193

Technical details about CVE-2024-54193 are not publicly provided in the connected documents. The initial description summarizes a kernel fix but does not specify affected subcomponents, root cause, impact, or patch specifics.

CVE-2024-56368

CVE-2024-56368 (Linux kernel) : The issue is a slab-out-of-bounds in the tracing ring buffer path, specifically in __rb_map_vma. A faulty overflow calculation for nr_pages in the expression nr_pages = ((nr_subbufs + 1) <

CVE-2024-56550

The CVE-2024-56550 affects the Linux kernel (s390 architecture). The underlying issue was a return statement in arch_stack_walk_user_common() that could be executed when store_ip() fails, instead of a break. This could skip pagefault_enable(), causing subsequent page faults to be mishandled and p...

CVE-2024-56622

Summary: CVE-2024-56622 is a Linux kernel vulnerability in the SCSI UFS core sysfs path that can trigger a division by zero when monitoring is disabled. The issue is tracked across multiple vendors/distros with fixed releases: Debian LTS advisory DLA-4076-1 notes a fix in linux-6.1-6.1.6.1.128-1~...