CVE-2024-49939

The CVE-2024-49939 entry concerns the Linux kernel wifi driver rtw89 (rtw89_wow_resume and ieee80211_reconfig flow). When SER L2 occurs during WoWLAN resume, the add-interface path can run twice due to a failed rtw89_wow_resume(), leading to a second list_add and a kernel panic. The available sou...

CVE-2024-50196

CVE-2024-50196 affects the Linux kernel pinctrl/ocelot subsystem. The issue causes a system hang when a GPIO interrupt is configured in level mode while the parent interrupt is configured in edge mode, because chained_irq_enter() may not be called if the GPIO interrupt is cleared before the paren...

CVE-2024-53052

Mode C: CVE-2024-53052 affects the Linux kernel io_uring rw path. The issue was a missing IOCB_NOWAIT handling for O_DIRECT start_write, causing a deadlock with the filesystem freezer when a write blocks on kiocb_start_write() while the mount is being frozen. The fix makes the io_uring side honor...

CVE-2024-57924

CVE-2024-57924 affects the Linux kernel and is described in multiple sources as a fix to “fs: relax assertions on failure to encode file handles.” The issue concerns exportfs_encode_fh and related paths used by filesystem code to encode file handles, with legacy users such as nfsd and name_to_han...

CVE-2025-21690

CVE-2025-21690 affects the Linux kernel storvsc SCSI driver where a persistent hypervisor error can cause an unbounded flood of I/O warning logs, leading to kernel log bloat and VM DoS. The issue is addressed by kernel updates across several distributions (e.g., Debian LTS DLA-4076-1:00E2C upgrad...

CVE-2014-3122

CVE-2014-3122 affects the Linux kernel local memory-management path. The advisory centers on the try_to_unmap_cluster function in mm/rmap.c, where the code path did not consistently lock pages, enabling a local user to trigger a memory-usage pattern that can force removal of page-table mappings a...

CVE-2022-49520

CVE-2022-49520 (Linux kernel, arm64 compat): The vulnerability occurs when a compat process executes an unknown syscall above __ARM_NR_COMPAT_END; the kernel incorrectly uses the syscall number as ESR_ELx for the fault, causing arm64_show_signal() to print bogus ESR messages. The fix is to stop u...

CVE-2024-41082

CVE-2024-41082 : The Linux kernel nvme-fabrics issue can exhaust admin_q tags when many nvme commands are issued, causing a reconnect/update failure and potential kernel hang after a reset/timeouts. The connected MiracleLinux/Nessus entry notes a mitigation by letting reg_read32()/reg_read64()/re...

CVE-2024-44960

The CVE-2024-44960 entry concerns a Linux kernel issue in usb gadget core where a descriptor may be unset, causing a null pointer panic. The resolution involves ensuring the descriptor is set before inspecting maxpacket, addressing cases where an endpoint for the current speed is not properly con...

CVE-2024-46759

CVE-2024-46759 : Linux kernel hwmon: adc128d818 underflow when writing limit attributes. The issue stemmed from DIV_ROUND_CLOSEST() after kstrtol() allowing large negative values (e.g., -9223372036854775808) to underflow. The patch reorders clamp_val() and DIV_ROUND_CLOSEST() to fix the underflow...

CVE-2024-53094

CVE-2024-53094 affects the Linux kernel RDMA/siw driver (InfiniBand) where siw_tcp_sendpages/siw_qp_tx.c processing can mishandle sendpage/MSG_SPLICE_PAGES, caused by insufficient input validation. The published fix adds a sendpage_ok() check to disable MSG_SPLICE_PAGES before entering the networ...

CVE-2024-53101

CVE-2024-53101 concerns the Linux kernel: a fix for an uninitialized value in from_kuid/from_kgid was applied. The issue arose when ocfs2_setattr() referenced attr->ia_mode, ia_uid, and ia_gid in a trace point even if ATTR_MODE/ATTR_UID/ATTR_GID weren’t set. The patch initializes all fields of...

CVE-2024-53114

CVE-2024-53114 affects Linux kernel components related to x86 virtualization (VMLOAD/VMSAVE) on Zen4 client hardware. The vulnerability has been addressed in Root’s rootio-linux package for Ubuntu 22.04 (Root-OS-UBUNTU-2204-CVE-2024-53114) with multiple fixed versions available, and similarly pat...

CVE-2024-56591

CVE-2024-56591 affects the Linux kernel Bluetooth subsystem, specifically hci_conn. The issue stems from using cancel_delayed_work_sync, which cancels ongoing work but may allow new work and can lead to the object being freed in hci_conn. The vendor advisories describe the root cause as related t...

CVE-2010-3858

CVE-2010-3858 is a Linux kernel vulnerability described in MiracleLinux advisories as affecting fs/exec.c with CONFIG_STACK_GROWSDOWN. On 64-bit platforms, for 32-bit applications, the setup_arg_pages function does not properly constrain stack usage of arguments and environment, enabling local us...

CVE-2012-6701

CVE-2012-6701 : An integer overflow in fs/aio.c of the Linux kernel before 3.4.1 allows local users to trigger a denial of service (and possibly other impact) via a large AIO iovec. Public sources describe exploitation locally and indicate a fix was applied in 3.4.1 (Linux kernel changelog refere...

CVE-2022-2380

CVE-2022-2380 concerns the Silicon Motion SM712 framebuffer driver in the Linux kernel. The issue is an out-of-bounds memory access in drivers/video/fbdev/sm712fb.c:smtcfb_read(), which could allow a locally authenticated attacker to crash the kernel. The description and linked advisories consist...

CVE-2022-27950

CVE-2022-27950 : A memory leak exists in Linux kernel drivers/hid/hid-elo.c for a hid_parse error condition, affecting kernels before 5.16.11. Exploitation details are not provided in the documents. A fix is in kernel 5.16.11 (and later). Recommendation: upgrade to a version containing the patch ...

CVE-2022-2991

CVE-2022-2991 (Linux kernel LightNVM) Affected software: Linux kernel, LightNVM subsystem. Vulnerability: heap-based buffer overflow caused by insufficient validation of the length of user-supplied data before copying to a fixed-size heap buffer. Impact: local privilege escalation and arbitrary c...

CVE-2023-3338

CVE-2023-3338: A null pointer dereference in the Linux kernel DECnet protocol could allow remote crash of the system. Connected advisories confirm this affects Linux kernel DECnet with mitigation via status updates and removal of the DECnet protocol in the kernel; Debian/IBM entries note remediat...

CVE-2023-3355

CVE-2023-3355 affects the Linux kernel’s MSM GPU driver, specifically the code path in drivers/gpu/drm/msm/msm_gem_submit.c (submit_lookup_cmds). The vulnerability arises from a NULL pointer dereference due to an missing validation of kmalloc() return value, enabling a local user to crash the sys...

CVE-2024-26949

CVE-2024-26949 affects the Linux kernel AMDGPU power management path. The vulnerability is a NULL pointer dereference in drm/amdgpu/pm when obtaining the power limit, caused by powerplay_table initialization being skipped in SR-IOV scenarios. A fix ensures default lower/upper OD values are set if...

CVE-2024-39292

The CVE-2024-39292 issue concerns the Linux kernel UML subsystem. The vulnerability arises in the winch handling path: registering a winch IRQ can race with the winch being added to the winch_handlers list, potentially allowing an interrupt to occur before the winch is tracked, which could lead t...

CVE-2024-43914

CVE-2024-43914 : In the Linux kernel md/raid5 code, the issue arises when --revert-reshape is used during a reshape; updating the raid from 5 to 4 disks while a reshape position is still set caused a mismatch where the old reshape position influenced writepos checks, triggering a panic. The fix c...

CVE-2024-46747

CVE-2024-46747 : In the Linux kernel, the Cougar 500k Gaming Keyboard driver was vulnerable to a slab-out-of-bounds Read in cougar_report_fixup due to a missing verification of the report descriptor size before access. The root cause is in report_fixup not validating the descriptor length prior t...

CVE-2024-46807

CVE-2024-46807 affects the Linux kernel’s DRM/amdgpu path. The root cause is missing validation of the tbo resource pointer, which could dereference a NULL pointer. The mitigation is a patch that validates the tbo resource pointer and skips when NULL, preventing a NULL-deref that could crash the ...

CVE-2024-58090

CVE-2024-58090 affects the Linux kernel: sched/core commit fixes a long-standing issue where rescheduling could be triggered with interrupts disabled during kexec-based reboot paths. The root cause involved a wakeup in a syscore_suspend()/resume path that set NEED_RESCHED, leading to cond_resched...

CVE-2017-7187

The CVE-2017-7187 issue affects the Linux kernel sg_ioctl in drivers/scsi/sg.c, where a large SG_NEXT_CMD_LEN ioctl can trigger a stack-based buffer overflow, leading to a DoS or potentially other impact via out-of-bounds writes in sg_write. Descriptions across connected sources (CNVD-2017-03858)...

CVE-2021-47352

CVE-2021-47352 affects the Linux kernel’s virtio-net code. The issue arises from missing validation of the length reported by a device, which could lead to data corruption or loss. Affected context is confirmed by MiracleLinux/Nessus advisories that reference “virtio-net: Add validation for used ...

CVE-2023-22995

CVE-2023-22995 affects the Linux kernel’s DesignWare USB3 for Qualcomm SoCs driver (dwc3_qcom_acpi_register_core). The connected ENISA/OSV advisory notes an error-path handling defect where platform_device_put and kfree calls are omitted, leaving cleanup incomplete during device registration. Thi...

CVE-2024-36477

CVE-2024-36477 refers to a Linux kernel vulnerability where the TPM SPI transfer did not account for the 4-byte header prepended to the SPI data frame, potentially causing out-of-bounds accesses. The root cause was the use of MAX_SPI_FRAMESIZE to compute the maximum transfer length and buffer siz...

CVE-2024-38661

CVE-2024-38661 is a Linux kernel vulnerability affecting the s390/ap subsystem. The issue stems from using signed int for internal bitmap-related variables in ap_parse_bitmap_str, allowing overflow during updates to /sys/bus/ap/apmask and related fields, which could trigger a kernel panic (panic_...

CVE-2024-40973

CVE-2024-40973 affects the Linux kernel media/mtk-vcodec SCP path. The root cause is a missing check of the return value from devm_kzalloc(), leading to a potential NULL pointer dereference. The issue is described across multiple sources (e.g., Astra Linux reports in linux-5.15/6.1; Debian adviso...

CVE-2024-42232

Based on the connected advisories, CVE-2024-42232 is a race condition in the Linux kernel’s libceph code (ceph_monc_stop) where delayed_work() handling can race with mon_fault() and finish_hunting(), potentially leading to use-after-free scenarios on monc and related objects. The documented fix r...

CVE-2024-56587

CVE-2024-56587: In the Linux kernel, a NULL pointer dereference can occur in the LEDs class when brightness_show() accesses led->cdev attributes without proper synchronization. The issue arises during inter-process interaction when a HID device creates a led and a subsequent access from anothe...

CVE-2015-7513

The CVE-2015-7513 vulnerability affects arch/x86/kvm/x86.c in the Linux kernel prior to 4.4, where PIT counter values are not reset during guest state restoration. This can allow guest OS users to trigger a denial-of-service (divide-by-zero) and host crash via a zero PIT value, related to kvm_vm_...

CVE-2022-49116

CVE-2022-49116 – Linux kernel Bluetooth memset fix : The vulnerability concerns the Bluetooth stack (l2cap_ecred_connect) where structs could leak memory if not initialized. The fix is to use memset to initialize structs to prevent memory leaks. Affected component: Linux kernel Bluetooth subsyste...

CVE-2022-49264

CVE-2022-49264 (Linux kernel) : The issue fixes how argv is passed to execve when argc is 0. The kernel now forces a single empty string into argv and sets argc to 1, accounting for extra stack space in bprm_stack_limits and emitting a WARN message to notify userspace: “process './argc0' launched...

CVE-2024-26763

CVE-2024-26763 is a Linux kernel vulnerability in dm-crypt related to authenticated encryption. The issue arises when data is modified during encryption, which could produce an invalid tag. The fix copies the data into a clone bio and encrypts there, avoiding in-place modification and potential d...

CVE-2024-42104

CVE-2024-42104 affects the Linux kernel’s nilfs2 filesystem. A missing check for inode numbers on directory entries allows internal inodes (metadata files) to be exposed in the namespace, potentially causing a use-after-free of metadata file inodes and kernel bugs in lru_add_fn() when mounting/un...

CVE-2024-42122

CVE-2024-42122 concerns the Linux kernel’s drm/amd/display where a NULL pointer could be produced by kzalloc and used without checking. The fix adds a NULL pointer check before using the allocated memory. Affected subsystem: AMD display kernel code; root cause: missing validation of kzalloc retur...

CVE-2024-46860

CVE-2024-46860 refers to a Linux kernel vulnerability in the wifi subsystem: mt76 mt7921 code path may dereference a NULL mvif->phy when mt7921_ipv6_addr_change is invoked as a notifier while disabling wifi. The description states the fix prevents access to a NULL mvif->phy, addressing a NU...

CVE-2024-56596

CVE-2024-56596 relates to the Linux kernel, in the JFS filesystem implementation. The issue is an array-index-out-of-bounds in jfs_readdir, caused by potential invalid values in the directory index table (stbl). The fix adds a validation check to detect invalid stbl values and return an error cod...

CVE-2011-0521

The CVE-2011-0521 issue affects the Linux kernel’s dvb_ca_ioctl in drivers/media/dvb/ttpci/av7110_ca.c, where the sign of a certain integer field is not checked in versions before 2.6.38-rc2. This allows local users to cause a denial of service via memory corruption and potentially other unspecif...

CVE-2018-10901

CVE-2018-10901 affects the Linux kernel’s KVM virtualization subsystem. The VMX path fails to restore the guest GDT.LIMIT to the host value, setting it to 64KB instead. This can allow a host userspace process to corrupt GDT entries (notably per-cpu variables), enabling local privilege escalation....

CVE-2019-25045

CVE-2019-25045 is a Linux kernel use-after-free in the XFRM subsystem (xfrm_state_fini panic) reported for kernels before 5.0.19. Publicly documented references from EulerOS and Unity Linux advisories confirm the issue and link the fix to kernel 5.0.19 (and related upstream commit). The impact is...

CVE-2021-38203

CVE-2021-38203 affects the btrfs component in the Linux kernel, with the issue present in versions before 5.13.4. The root cause is a race condition during allocations of new system chunks when space is scarce in space_info, which can lead to a denial-of-service (deadlock) for local attackers. Pu...

CVE-2021-47191

CVE-2021-47191 affects the Linux kernel’s SCSI debug path (scsi_debug) and fixes an out-of-bounds read in resp_readcap16 caused by treating alloc_len as a signed int, which could lead to an OOB in sg_copy_buffer when handling large allocation lengths. The root cause is the incorrect type for allo...

CVE-2024-49896

CVE-2024-49896 is a Linux kernel vulnerability affecting the amdgpu/display path. The issue arises when amdgpu_dm passes a null stream to dc_is_stream_unchanged, leading to a potential NULL dereference. The description in the sources notes the root cause as missing null-check before dereferencing...

CVE-2024-49902

CVE-2024-49902 in the Linux kernel affects the JFS dmmap path. The root cause is an out-of-bounds condition in dbSplit when dmt_leafidx exceeds the number of leaves per dmap tree; a bounds check was added in dbFindLeaf. Shaggy’s change also extends the sanity check to cover control pages in addit...