CVE-2024-46678

CVE-2024-46678 affects the Linux kernel bonding subsystem. The issue arises from bond->ipsec_lock being a spin lock used to protect ipsec_list, which can sleep in xdo_dev_state_add/delete during active-slave changes, triggering scheduling while atomic. The fix replaces the spin lock with a mut...

CVE-2024-46702

CVE-2024-46702 (Linux kernel) relates to Thunderbolt: when a router is removed, the code previously blocked cleanup of XDomain paths due to tb_disconnect_xdomain_paths() racing with tb_stop() during host router NVM upgrade. The fix marks the XDomain as unplugged during removal, allowing tb_stop()...

CVE-2024-46818

CVE-2024-46818 affects the Linux kernel’s DRM/AMD display driver. The root cause is using GPIO_ID_UNKNOWN (-1) as an array index; a patch adds a pre-check before indexing the gpio_id, fixing 5 Coverity-reported overrun issues. The vulnerability is addressed in kernel updates that include the drm/...

CVE-2024-47666

CVE-2024-47666 is a Linux kernel vulnerability in the SCSI pm80xx driver. The bug arises when pm8001_phy_control() stores enable_completion on a stack address, sends resets, waits 300 ms, then returns; if a late PHY control response arrives after the 300 ms, a dangling enable_completion pointer i...

CVE-2024-49854

CVE-2024-49854 affects the Linux kernel’s block/bfq path. The root cause was a use-after-free (UAF): after bfq_split_bfqq(), if the current process is the last holder of bfqq, the bfqq can be freed and then bfqq->waker_bfqq could be accessed, with the waker potentially in the merge chain. The ...

CVE-2024-49866

CVE-2024-49866 involves a race in Linux kernel tracing/timerlat during CPU hot-plug/cpuhp handling. The issue arises when the timerlat/1 thread is migrated during thread creation due to asynchronous CPU online processing (osnoise hotplug workers) and CPU removal from cpu_online_mask during offlin...

CVE-2024-49915

CVE-2024-49915 concerns the Linux kernel DRM AMD display driver. A null pointer dereference could occur in drm/amd/display during dcn32_init_hw if dc->clk_mgr is null. The fix adds an explicit NULL check before invoking clk_mgr functions, preventing dereferencing a null pointer. Public referen...

CVE-2024-50031

CVE-2024-50031 affects the Linux kernel DRM/V3D perfmon handling. When kmscube runs with GALLIUM_HUD and perfmon monitors are destroyed, v3d->active_perfmon may be left as a stale pointer, causing a kernel panic on subsequent runs as the driver attempts to stop a non-existent perfmon. The prov...

CVE-2024-50172

CVE-2024-50172 : Linux kernel RDMA bnxt_re memory leak fix. In bnxt_re_setup_chip_ctx(), if bnxt_qplib_map_db_bar() fails, the driver previously did not free the allocated rdev->chip_ctx memory. The described fix ensures proper cleanup in that failure path, preventing a memory leak. Connected ...

CVE-2024-50207

The CVE-2024-50207 issue affects the Linux kernel’s ring_buffer code (kernel/trace/ring_buffer.c), specifically ring_buffer_subbuf_order_set(). The problem arises because the function updates ring_buffer_per_cpu and installs new sub buffers to match requested page orders without acquiring exclusi...

CVE-2024-50298

Public details for CVE-2024-50298 are not provided in the connected documents; the initial description contains details, but there are no additional technical specifics available here.

CVE-2024-53045

Technical details for CVE-2024-53045 are not provided in the supplied documents. No specifics on affected products, root cause, impact, or fixes are included here. Monitor official advisories for updates.

CVE-2024-53067

The CVE-2024-53067 entry relates to the Linux kernel SCSI/UFS subsystem. A fix prevents RTC update work from starting before runtime PM in the UFS driver is fully initialized, addressing a crash (Oops) observed in the ufshcd_rtc_work path. The core issue is a race/ordering problem that could trig...

CVE-2024-53089

CVE-2024-53089 concerns the Linux kernel on LoongArch with KVM. The issue arises from hrtimers that may be canceled/called in contexts that violate PREEMPT_RT rules, after timers are unmarked to expire in soft expiry but then canceled from a preempt-notifier with preemption disabled. The fix make...

CVE-2024-53115

Technical details for CVE-2024-53115 are not publicly disclosed in the provided connected documents. The initial description mentions a kernel fix for a null pointer dereference in vmw_framebuffer_surface_create_handle, but no product/version specifics or exploit info are given here. Monitor for ...

CVE-2024-53137

CVE-2024-53137 : In the Linux kernel, ARM: fix cacheflush with PAN. The cacheflush syscall was broken when PAN for LPAE was implemented, causing faults because user access was not enabled around the cache maintenance instructions. The CVSSv3.1 metrics show LOCAL access, LOW complexity, LOW privil...

CVE-2024-53143

CVE-2024-53143 affects the Linux kernel’s fsnotify path, fixing an ordering issue where iput() must complete before decrementing the watched_objects count. The patch ensures the superblock remains alive until iput() is done, preventing a potential use-after-free (UAF) of sb->s_fs_info in tmpfs...

CVE-2024-54455

Technical details about CVE-2024-54455 are not provided in the connected documents. Public information in the supplied sources does not specify affected products/versions or root cause beyond the general protection fault in ivpu_bo_list(). Monitor for official advisories.

CVE-2024-56550

The CVE-2024-56550 affects the Linux kernel (s390 architecture). The underlying issue was a return statement in arch_stack_walk_user_common() that could be executed when store_ip() fails, instead of a break. This could skip pagefault_enable(), causing subsequent page faults to be mishandled and p...

CVE-2024-56698

The CVE affects the Linux kernel’s DWC3 gadget USB driver. The root cause is a faulty accounting of scatter-gather entries: dwc3_request->num_queued_sgs is decremented on completion, and if a request is only partially completed, the total number of SG entries may be misreported, potentially le...

CVE-2024-57841

CVE-2024-57841 concerns a Linux kernel memory leak in tcp_conn_request() where dst memory allocated in af_ops->route_req is not freed if inet_csk_reqsk_queue_hash_add() fails, as shown by the kmemleak stack. The vulnerability is in the path that leads to tcp_conn_request() and may leak memory ...

CVE-2024-58054

CVE-2024-58054 concerns the Linux kernel staging media driver for max96712. The issue causes a kernel oops when removing the module, due to a pointer mix-up in v4l2_i2c_subdev_init(): i2c_set_cliendata() overwrites the private pointer with the struct driver data (sd) instead of the driver’s priva...

CVE-2025-21786

CVE-2025-21786 concerns a Linux kernel workqueue use-after-free. The issue arises from a patch that reap workers via kthread_stop() and detaches the rescuer, but incorrectly does not preserve the rescuer’s reference to the pool and removes the code waiting for the rescuer in put_unbound_pool(). T...

CVE-2025-21820

CVE-2025-21820 affects the Linux kernel tty/xilinx_uartps driver. A deadlock could occur due to a circular lock dependency between uart_port_lock and console_lock when handling sysrq. The fix splits sysrq handling into two parts: using a prepare step under the port lock and deferring actual handl...

CVE-2025-21908

CVE-2025-21908 concerns the Linux kernel NFS subsystem. The issue arises when nfs_release_folio() can deadlock during writeback initiated by kcompactd, triggering a recursive path through NFS and the NFSD loopback on the same host. The patch adds PF_KCOMPACTD and a current_is_kcompactd() helper t...

CVE-2025-22012

The CVE-2025-22012 entry concerns the Linux kernel arm64/dts path: qcom/sdm845. The underlying issue relates to pagetable walker cache coherency, causing lock-ups and device-specific resets on SDM845/850 devices (e.g., Dragonboard 845c vs. Lenovo Yoga C630). The resolution described in the docume...

CVE-2025-22042

CVE-2025-22042 pertains to the Linux kernel’s ksmbd subsystem. The issue was a missing bounds check in the creation of a lease context within ksmbd, which could lead to out-of-bounds conditions. The connected documents confirm that this bound-check was added/fixed in the kernel to resolve the vul...

CVE-2025-22050

The CVE-2025-22050 entry concerns the Linux kernel USB networking path. A race between usb_submit_urb and __usbnet_queue_skb occurs due to a missing usbnet_going_away check in usb_submit_urb, while __usbnet_queue_skb performs this validation. This can let a URB proceed while the corresponding SKB...

CVE-2025-22115

CVE-2025-22115 affects the Linux kernel Btrfs code, specifically a race in btrfs_create_pending_block_groups() that mishandles block group refcounts during a two‑phase creation. The fix introduced BLOCK_GROUP_FLAG_NEW but did not use unused_bg_lock, allowing a race between btrfs_create_pending_bl...

CVE-2025-37754

CVE-2025-37754 affects the Linux kernel i915 HuC path: HuC delayed loading fence was registered in the object tracker during probe but is not unregistered on early-probe errors. Because memory is allocated under devres and later released, the fence can be allocated and reused on subsequent probes...

CVE-2025-37765

Summary (CVE-2025-37765): The Linux kernel DRM Nouveau path had a delayed-delete oops during ttm_bo_delayed_delete. The root cause is a dangling nouveau_bo.resv pointer after dma_buf destruction frees amdgpu_bo, and the subsequent ttm_bo_delayed_delete dereferences that pointer, causing a general...

CVE-2025-37767

The CVE-2025-37767 entry describes a Linux kernel vulnerability in the drm/amd/pm path where division by zero is possible if the user sets a speed value greater than UINT_MAX/8. The flaw is triggered locally and carries a CVSSv3.1 base score of 5.5 (Medium) with impactLimited to availability and ...

CVE-2025-37830

In the Linux kernel, CVE-2025-37830 fixes a NULL pointer dereference in the CPU frequency (cpufreq) subsystem related to the scmi path. The root cause is that cpufreq_cpu_get_raw() may return NULL when the target CPU is not present in policy->cpus, and scmi_cpufreq_get_rate() did not check for...

CVE-2025-37839

CVE-2025-37839 (Linux kernel) fixes a journal-related logic flaw in jbd2. The root cause was the incorrect use of sb->s_sequence to determine journal emptiness; it should rely on sb->s_start, which is set earlier. Since 0 is a valid transaction ID, the previous check could spuriously trigge...

CVE-2025-37884

CVE-2025-37884: In the Linux kernel, a deadlock between rcu_tasks_trace and event_mutex was fixed. The issue manifested in _free_event() calling perf_trace_event_unreg() under mutex_lock(&event_mutex) while perf_kprobe_destroy() could synchronize_rcu_tasks_trace(), and in bpf_prog_test_run_syscal...

CVE-2009-3002

CVE-2009-3002 affects the Linux kernel prior to 2.6.31-rc7, where getname() implementations for IrDA, AppleTalk DDP, NET/ROM, and ROSE (and related sockets) did not initialize certain data structures before copying to user-space. This allowed a local user to leak information by calling getsocknam...

CVE-2010-2942

CVE-2010-2942 affects the Linux kernel prior to 2.6.36-rc2. The issue arises in the actions implementation of network queueing: several tcf_*_dump routines (tcf_gact_dump, tcf_mirred_dump, tcf_nat_dump, tcf_simp_dump, tcf_skbedit_dump) do not properly initialize certain structure members during d...

CVE-2010-4164

CVE-2010-4164 affects the Linux kernel prior to 2.6.36.2, where multiple integer underflows occur in the x25_parse_facilities function (net/x25/x25_facilities.c). This can allow a remote attacker to cause a denial of service (system crash) via malformed X.25 facility data (X25_FAC_CLASS_A/B/C/D)....

CVE-2011-1080

CVE-2011-1080 affects the Linux kernel prior to 2.6.39 via the do_replace path in net/bridge/netfilter/ebtables.c. The issue: a name field may not end with a null terminator, enabling a local user with CAP_NET_ADMIN to replace a bridge table and read potentially sensitive data from kernel stack m...

CVE-2011-1577

CVE-2011-1577 describes a heap-based buffer overflow in the is_gpt_valid function of fs/partitions/efi.c in Linux kernel 2.6.38 and earlier. This allows physically proximate attackers to cause a denial of service (OOPS) or potentially other impact via a crafted EFI GPT header size on removable me...

CVE-2012-2375

CVE-2012-2375 affects the Linux kernel NFSv4 implementation where __nfs4_get_acl_uncached in fs/nfs/nfs4proc.c uses an incorrect length variable during a copy, enabling remote NFS servers to trigger a denial of service (OOPS) by sending excessive bitmap words in an FATTR4_ACL reply. Affected are ...

CVE-2012-3412

CVE-2012-3412 affects the sfc (Solarflare Solarstorm) driver in the Linux kernel, specifically versions before 3.2.30. The vulnerability allows remote attackers to trigger a denial of service by sending crafted TCP packets that induce a small MSS value, leading to DMA descriptor consumption and n...

CVE-2013-6378

CVE-2013-6378 affects the Linux kernel up to 3.12.1 and is tied to lbs_debugfs_write in drivers/net/wireless/libertas/debugfs.c. The vulnerability lets a local attacker with root privileges cause a denial of service (OOPS) via a zero-length write call. Multiple connected advisories reference this...

CVE-2014-2706

CVE-2014-2706 describes a race condition in the Linux kernel’s mac80211 subsystem (sta_info.c and tx.c) that, when handling network traffic in conjunction with the WLAN_STA_PS_STA (power-save) state, can cause a remote denial of service (system crash). The issue affects kernel versions prior to 3...

CVE-2015-8551

CVE-2015-8551 affects the Xen PCI backend driver (pciback) when Xen runs on x86 with a Linux 3.1.x–4.3.x driver domain. The issue arises from missing sanity checks in XEN_PCI_OP_* operations, allowing a local guest administrator with access to a passed-through MSI/MSI-X PCI device to trigger BUG ...

CVE-2016-8405

CVE-2016-8405 is an information disclosure vulnerability affecting Android kernels (Kernel-3.10 and Kernel-3.18) via multiple subsystems (ION, Binder, USB, networking). It allows a local malicious process to access data outside its permissions after exploiting a privileged process; CVSS data in t...

CVE-2017-18221

CVE-2017-18221 affects the Linux kernel: the __munlock_pagevec function in mm/mlock.c before 4.11.4 can be exploited locally via crafted mlockall/munlockall usage to cause NR_MLOCK accounting corruption and a denial of service. Affected versions are kernel prior to 4.11.4; the issue is mitigated ...

CVE-2019-16229

CVE-2019-16229 affects the Linux kernel (example: kernel version 5.2.14) where a NULL pointer dereference can occur because kfd_interrupt.c in amdkfd does not check the return value of alloc_workqueue. The Unity Nessus advisory reiterates this description and notes the security community disputes...

CVE-2021-47557

Summary (CVE-2021-47557) : In the Linux kernel, the net/sched sch_ets code could expose a NULL pointer dereference in the DRR active list when the number of DRR classes decreases, allowing a crash via cl->qdisc->ops->peek(cl->qdisc) if cl->qdisc is NULL. This affects the ETS qdisc ...

CVE-2021-47598

CVE-2021-47598 affects the Linux kernel (net/sched/sch_cake) where calling cake_destroy() from cake_init() during qdisc creation could trigger use-after-free in the cake/qdisc destroy path. The issue manifests when a qdisc invokes its own destroy() method during initialization, conflicting with t...