CVE-2024-53046

CVE-2024-53046 affects Linux kernel ARM64 in the imx8ulp device tree to correct the flexspi compatible string. The issue arises because imx8ulp flexspi supports 16 LUTs whereas imx8mm supports 32 LUTs, causing a startup warning if the string is incorrect. The fix updates arm64/dts: imx8ulp to ens...

CVE-2024-56538

Technical details for CVE-2024-56538 (Linux kernel drm: zynqmp_kms unplug before removal) are not publicly provided in the connected documents. Monitor for updates; none of the OpenVAS/USN entries include exact exploit specifics, affected versions, or fixes beyond referencing the CVE.

CVE-2024-56550

The CVE-2024-56550 affects the Linux kernel (s390 architecture). The underlying issue was a return statement in arch_stack_walk_user_common() that could be executed when store_ip() fails, instead of a break. This could skip pagefault_enable(), causing subsequent page faults to be mishandled and p...

CVE-2024-56622

Summary: CVE-2024-56622 is a Linux kernel vulnerability in the SCSI UFS core sysfs path that can trigger a division by zero when monitoring is disabled. The issue is tracked across multiple vendors/distros with fixed releases: Debian LTS advisory DLA-4076-1 notes a fix in linux-6.1-6.1.6.1.128-1~...

CVE-2024-57935

The CVE-ID describes a Linux kernel flaw in RDMA/hns: when destroying a QP, an invalid dip_ctx pointer could be accessed if the QP could not be modified to RTR, due to the dip_ctx not being attached. This is a local-attack surface with potential kernel access to cause a denial of service or crash...

CVE-2025-21739

CVE-2025-21739 affects the Linux kernel SCSI UFS path. A use-after-free occurs when crypto private data (struct ufs_hba::crypto_profile) is released as part of ufshcd_dealloc_host() during driver removal or error handling, while a cleanup handler registered by devm_blk_crypto_profile_init() still...

CVE-2025-21808

Technical details for CVE-2025-21808 (affected product/version, root cause, exploit info) are not provided in the connected documents. The Initial Description is present, but mode C cannot be applied without corroborating specifics. Monitor for updates.

CVE-2025-21868

CVE-2025-21868 affects the Linux kernel: the issue arises in net/core related to small head cache usage when MAX_SKB_FRAGS is large (example build with MAX_SKB_FRAGS=45). The splat trace points to netif_napi_add_weight_locked and related paths; the advisory notes that the root cause is independen...

CVE-2025-21945

CVE-2025-21945 affects the Linux kernel (ksmbd) with a use-after-free in smb2_lock. The issue occurs when smb_lock->zero_len is non-zero, causing the ->llist of smb_lock not to be deleted and the flock to reference a freed object during error handling. This is described in the Azure Linux 3...

CVE-2025-21950

CVE-2025-21950 affects the Linux kernel driver path drivers: virt: acrn: hsm. In pmcmd_ioctl, three kmalloc-allocated memory objects initialized by hcall_get_cpu_state are copied to user space, risking information leakage from uninitialized bytes. The fix uses kzalloc to zero memory, mitigating l...

CVE-2025-22012

The CVE-2025-22012 entry concerns the Linux kernel arm64/dts path: qcom/sdm845. The underlying issue relates to pagetable walker cache coherency, causing lock-ups and device-specific resets on SDM845/850 devices (e.g., Dragonboard 845c vs. Lenovo Yoga C630). The resolution described in the docume...

CVE-2025-22044

CVE-2025-22044 (Linux kernel) : The issue arises in acpi_nfit_ctl where a narrowing conversion from u64 to int can allow an invalid argument when nd_family is non-zero but its lower 32 bits are zero. Syzkaller warned that to_nfit_bus_uuid() may translate to a non-secondary bus family, and the fix...

CVE-2025-22125

CVE-2025-22125 : Linux kernel md/raid1, raid10 could ignore IO flags (notably REQ_IDLE, and related flags) when blk-wbt is enabled, causing degraded write performance. The issue is fixed by preserving IO flags from the master bio (commit f51d46d0e7cb: “md: add support for REQ_NOWAIT”). Applicable...

CVE-2025-37770

CVE-2025-37770 affects the Linux kernel (drm/amd/pm): if a user sets a speed value greater than UINT_MAX/8, a division by zero is possible. The issue is exploitable locally with low privileges and no user interaction required. The vulnerability was identified by the Linux Verification Center (SVA...

CVE-2025-37778

CVE-2025-37778 affects the Linux kernel’s ksmbd/kerberos path. The issue is a dangling pointer in krb_authenticate: it frees sess->user and may not null it; ksmbd_krb5_authenticate reinitialises sess->user, but may return without doing so, causing smb2_sess_setup to access freed memory. The...

CVE-2025-37786

CVE-2025-37786 affects the Linux kernel's DSA (distributed switch architecture) routing-table handling. When a tree probe completes with complete = true and a later step fails, dst->rtable entries may remain referencing freed ports, causing a use-after-free. The advisory explains that on probe...

CVE-2025-37839

CVE-2025-37839 (Linux kernel) fixes a journal-related logic flaw in jbd2. The root cause was the incorrect use of sb->s_sequence to determine journal emptiness; it should rely on sb->s_start, which is set earlier. Since 0 is a valid transaction ID, the previous check could spuriously trigge...

CVE-2025-37928

CVE-2025-37928 refers to a Linux kernel vulnerability in the dm-bufio path where scheduling in atomic context can occur when try_verify_in_tasklet is enabled and CONFIG_DEBUG_ATOMIC_SLEEP is set. The bug arises from sleeping in an invalid context, potentially enabling local privilege escalation o...

CVE-2025-38003

The CVE-2025-38003 issue affects the Linux kernel BCM CAN component where procfs content generation for a bcm_op being removed lacked proper rcu_read_lock protection, risking unreliable data in procfs (use-after-free style) due to missing rcu handling. A patch adds the missing rcu_read_lock() and...

CVE-2025-38083

In CVE-2025-38083, the Linux kernel net_sched/prio package has a race in prio_tune() that can underflow a parent qlen when the SFQ perturb timer fires at the wrong time. The race involves CPU0 holding a root lock while CPU1 performs rehash and backlog reduction, with qdisc_put() interplay. The ad...

CVE-2008-1673

The CVE-2008-1673 vulnerability affects the Linux kernel ASN.1 BER decoding in CIFS and ip_nat_snmp_basic modules (and gxsnmp). Root cause: improper validation of ASN.1 BER lengths, enabling a remote attacker to crash the system or execute arbitrary code via: (1) a length greater than the working...

CVE-2010-2495

CVE-2010-2495 affects the Linux kernel’s L2TP implementation (pppol2tp.c). The vulnerability arises from improper validation of certain interface-related values in pppol2tp_xmit, enabling a NULL pointer dereference and an OOPs that can cause a denial of service via routing-change vectors. The iss...

CVE-2010-3078

The CVE-2010-3078 issue affects the Linux kernel (xfs_ioc_fsgetxattr) where a structure member is not initialized, enabling local attackers to read potentially sensitive data from kernel stack memory via an ioctl. This vulnerability is documented in MiracleLinux AXSA-2010-500:18 and is fixed in 2...

CVE-2010-3698

The CVE-2010-3698 entry concerns the KVM implementation in Linux kernels prior to 2.6.36. The root cause is that the kernel does not properly reload the FS and GS segment registers when handling KVM_RUN with a modified Local Descriptor Table (LDT). Impact: host OS users can cause a denial of serv...

CVE-2010-3848

CVE-2010-3848 is a Linux kernel vulnerability: a stack-based buffer overflow in econet_sendmsg (net/econet/af_econet.c) when Econet is configured, caused by handling a large number of iovec structures. This allows local privilege escalation. The flaw affects Linux kernels before 2.6.36.2 and is a...

CVE-2010-3849

CVE-2010-3849 affects the Linux kernel’s econet_sendmsg path (net/econet/af_econet.c) prior to 2.6.36.2, when an Econet address is configured. A local user can trigger a denial of service by issuing a sendmsg with a NULL remote address, causing a NULL pointer dereference and OOPS. The correspondi...

CVE-2012-2375

CVE-2012-2375 affects the Linux kernel NFSv4 implementation where __nfs4_get_acl_uncached in fs/nfs/nfs4proc.c uses an incorrect length variable during a copy, enabling remote NFS servers to trigger a denial of service (OOPS) by sending excessive bitmap words in an FATTR4_ACL reply. Affected are ...

CVE-2013-6378

CVE-2013-6378 affects the Linux kernel up to 3.12.1 and is tied to lbs_debugfs_write in drivers/net/wireless/libertas/debugfs.c. The vulnerability lets a local attacker with root privileges cause a denial of service (OOPS) via a zero-length write call. Multiple connected advisories reference this...

CVE-2017-14497

CVE-2017-14497 describes a vulnerability in the Linux kernel’s tpacket_rcv() path (net/packet/af_packet.c) where the code mishandles vnet headers. It is triggered by crafted system calls and, per the connected Nessus entries, could allow a local attacker to cause a denial of service via buffer ov...

CVE-2017-15102

CVE-2017-15102 originates from the Linux kernel prior to 4.8.1, where the tower_probe function in drivers/usb/misc/legousbtower.c can be exploited locally by a near-physically proximate attacker via a crafted USB device. The issue is triggered by a write-what-where condition that arises after a r...

CVE-2019-20422

The CVE-2019-20422 issue affects the Linux kernel prior to 5.3.4, where fib6_rule_lookup in net/ipv6/ip6_fib.c mishandles the RT6_LOOKUP_F_DST_NOREF flag in a reference-count decision, potentially causing a crash identified by syzkaller (CID-7b09c2d052db). The vulnerability arises from incorrect ...

CVE-2020-35513

CVE-2020-35513 describes a flaw in the Linux kernel NFS implementation where an incorrect umask during file/directory modification can be triggered when NFSv4.2 and a non-NFSv4.2 process access the NFS concurrently. The result is resource starvation leading to denial of service. The initial and c...

CVE-2021-47498

The CVE-2021-47498 issue affects the Linux kernel where Device Mapper requests could be requeued during DM suspend due to blk-mq unquiesce calls from outside events, causing a kernel panic under nr_requests updates. The fix changes behavior to avoid queuing during suspend and to requeue requests ...

CVE-2022-0400

The CVE-2022-0400 entry concerns an out-of-bounds read in the Linux kernel’s SMC protocol stack that can enable remote denial of service. Connected sources (NVD, OSV, Debian-related OSV entries) confirm the affected component and impact but do not provide a patched version or explicit remediation...

CVE-2022-48771

The CVE-2022-48771 issue affects the Linux kernel drm/vmwgfx: a failing usercopy of the fence_rep object can leave a stale file descriptor entry because put_unused_fd() isn’t released; this can let userland reference a dangling file descriptor and enable use-after-free scenarios. The fix defers t...

CVE-2022-49142

CVE-2022-49142 relates to a Linux kernel net skb handling issue where skb_end_offset() preservation in skb_unclone_keeptruesize() and interactions with kfence could cause a WARN_ON_ONCE(delta

CVE-2022-49152

CVE-2022-49152 affects the Linux kernel XArray feature, specifically the xas_create_range() path. When an existing entry with order >= XA_CHUNK_SHIFT is present, xas_create_range() can misinterpret it as a node and dereference xa_node->parent, potentially causing a crash (general protection...

CVE-2022-49300

CVE-2022-49300 affects the Linux kernel nbd subsystem. A race occurs when the nbd module is removed: nbd_genl_connect() may call nbd_alloc_config() concurrently, and although try_module_get() can fail, nbd_alloc_config() previously did not handle that. This can cause leakage of nbd_config and rel...

CVE-2022-49413

CVE-2022-49413 affects the Linux kernel bfq driver (bfq_merge_bio). The vulnerability arises when a process migrates to a different cgroup or writeback starts bios for another cgroup, leaving stale cgroup data in bfq’s bic and potentially merging requests across distinct or dead bfq queues, riski...

CVE-2022-49561

CVE-2022-49561 : In the Linux kernel netfilter conntrack path, the vulnerability arises when a conntrack entry is re-fetched after insertion, and a clash can cause the skb->_nfct to be freed and then rebound to an already-confirmed entry. The issue stems from freeing the conntrack entry/extens...

CVE-2022-49815

CVE-2022-49815 : In the Linux kernel, the erofs fix adds a missing xas_retry() in fscache mode during xarray iteration. The iteration currently holds only the RCU read lock and may encounter XA_RETRY_ENTRY when an entry is modified concurrently, which could cause an oops when dereferencing an inv...

CVE-2022-49846

CVE-2022-49846 : In the Linux kernel, a slab-out-of-bounds write bug was reported in udf_find_entry() (fs/udf/namei.c). The issue is demonstrated via a KASAN report during an open path through udf_lookup and namei, with a 256-byte kmalloc object involved. The advisory notes that this has been fix...

CVE-2022-49911

In CVE-2022-49911, the Linux kernel's netfilter ipset hash:net,iface type could exhaust memory because it did not enforce the documented limit of storing more than 64 networks with distinct interfaces in a single set. The issue is addressed by applying the documented restriction (max 64 interface...

CVE-2022-49985

The CVE-2022-49985 entry concerns the Linux kernel, where the BPF component allowed a range check descriptor to misrepresent a tight range because tnum_range(0, map->max_entries-1) may yield a superset of the intended values. The root cause is that the tnum-based range representation can erron...

CVE-2023-4458

CVE-2023-4458 affects the Linux kernel ksmbd module, specifically in the parsing of extended attributes. The flaw stems from insufficient validation of user-supplied data, allowing an out-of-bounds read (read past the end of an allocated buffer) and enabling information disclosure on affected sys...

CVE-2023-51782

The CVE-2023-51782 issue affects the Linux kernel (net/rose/af_rose.c) and is a use-after-free in rose_ioctl caused by a race in rose_accept. Affected versions are before 6.6.8. The vulnerability can lead to local privilege escalation or kernel crash. Mitigation: upgrade to Linux kernel 6.6.8 or ...

CVE-2023-52586

CVE-2023-52586 : In the Linux kernel DRM MSM DPU, a race between vblank enable/disable from different threads existed due to missing synchronization. The fix adds a mutex around control vblank IRQ handling (and removes vblank_ctl_lock usage), replacing an atomic refcount with a simple int counter...

CVE-2023-53103

CVE-2023-53103 affects the Linux kernel bonding subsystem. A bug in the enslave/error path could clear the bond’s IFF_SLAVE/IFF_MASTER flags when an enslave of a non-ethernet device fails, causing inconsistent bond state. The fix uses bond_ether_setup to restore the bond’s flags correctly, ensuri...

CVE-2023-53145

In the Linux kernel, the Bluetooth driver subsystem btsdio is affected by a use-after-free race in btsdio_remove. In btsdio_probe, data->work is bound to btsdio_work and started via btsdio_send_frame. If btsdio_remove executes while the work is unfinished, hdev could be freed but still used by...

CVE-2024-26822

CVE-2024-26822 relates to the Linux kernel SMB client automounts. The issue occurs when uid, gid and cruid are not specified, which can cause the automount context to reuse values from the parent mount. The fix is to dynamically set uid, gid and cruid in the filesystem context used for automounts...