CVE-2024-57924

CVE-2024-57924 affects the Linux kernel and is described in multiple sources as a fix to “fs: relax assertions on failure to encode file handles.” The issue concerns exportfs_encode_fh and related paths used by filesystem code to encode file handles, with legacy users such as nfsd and name_to_han...

CVE-2011-0521

The CVE-2011-0521 issue affects the Linux kernel’s dvb_ca_ioctl in drivers/media/dvb/ttpci/av7110_ca.c, where the sign of a certain integer field is not checked in versions before 2.6.38-rc2. This allows local users to cause a denial of service via memory corruption and potentially other unspecif...

CVE-2021-47385

CVE-2021-47385 is a Linux kernel hwmon issue affecting the w83792d driver (and related subclients) where a NULL pointer dereference could occur if a value read from the device matches certain bit patterns. The root cause is dereferencing a NULL after reading val; the advisory notes that the patch...

CVE-2022-49034

CVE-2022-49034 relates to a Linux kernel issue where, when CONFIG_CPUMASK_OFFSTACK and CONFIG_DEBUG_PER_CPU_MAPS are enabled, cpu_max_bits_warn() emits a runtime warning while reading /proc/cpuinfo due to iterating CPUs with NR_CPUS. The patch fixes the warning by iterating up to nr_cpu_ids (runt...

CVE-2024-41079

CVE-2024-41079 concerns the Linux kernel’s NVMe target controller (nvmet). The issue is that the first two double words, the “results” for a command queue entry, were not consistently initialized to 0 when unused, creating a potential information leak for RDMA clients. The patch standardizes beha...

CVE-2024-50095

CVE-2024-50095 affects the Linux kernel’s RDMA/mad path. The vulnerability stemmed from the current timeout handler for mad agents, which acquired and released mad_agent_priv for every timed-out work request (WR), causing heavy locking contention when many WRs must be processed, potentially leadi...

CVE-2024-53084

CVE-2024-53084 affects the Linux kernel’s DRM/Imagination driver path for PVR, where a resource cleanup reference loop between PVR VM Context and VM Mappings could leak VM resources. The official fix breaks the loop by freeing outstanding VM mappings before destroying the PVR Context associated w...

CVE-2024-53090

CVE-2024-53090 : In the Linux kernel, the afs lock recursion issue occurred when afs_wake_up_async_call() could incur lock recursion if called from AF_RXRPC while holding the notify_lock and trying to pass an afs_call ref to a work queue. If the afs_call was already queued, an extraneous ref coul...

CVE-2024-57922

The CVE-2024-57922 entry relates to the Linux kernel drm/amd/display code, where wrappers for dcn_bw_ceil2() and dcn_bw_floor2() gained a check for non-zero granularity to prevent asserts/divide-by-zero. The fix is reflected in multiple advisories: Debian LTS DLA-4076-1 and DSA-5860-1 note update...

CVE-2021-47191

CVE-2021-47191 affects the Linux kernel’s SCSI debug path (scsi_debug) and fixes an out-of-bounds read in resp_readcap16 caused by treating alloc_len as a signed int, which could lead to an OOB in sg_copy_buffer when handling large allocation lengths. The root cause is the incorrect type for allo...

CVE-2022-3202

CVE-2022-3202 involves a NULL pointer dereference in diFree() within fs/jfs/inode.c of the Linux kernel’s Journaled File System (JFS). The underlying cause is a NULL pointer dereference, which could allow a local attacker to crash the system or leak kernel internal information. The CVE is associa...

CVE-2022-49072

CVE-2022-49072 affects the Linux kernel GPIO subsystem: gpiochip irq members can be read before initialization, causing race conditions and a potential NULL pointer dereference via I2C (gpiochip_to_irq). The issue has been resolved in the kernel by restricting access to irq-related fields until a...

CVE-2022-49321

CVE-2022-49321 affects the Linux kernel’s xprtrdma RPC path. When bc_serv is NULL, a RDMA server fault reply can be misinterpreted as a bcall, causing rpcrdma_bc_receive_call to encounter a NULL pointer and trigger a kernel crash (high availability impact). The provided documents confirm the root...

CVE-2022-49534

CVE-2022-49534 in the Linux kernel concerns a memory leak in the lpfc driver when NPIV ports send PLOGI_RJT. The description states a leak could originate from allocations in lpfc_ignore_els_cmpl() and lpfc_els_rsp_reject(), tied to login_mbox context and service parameter buffers. The remedy is ...

CVE-2024-38661

CVE-2024-38661 is a Linux kernel vulnerability affecting the s390/ap subsystem. The issue stems from using signed int for internal bitmap-related variables in ap_parse_bitmap_str, allowing overflow during updates to /sys/bus/ap/apmask and related fields, which could trigger a kernel panic (panic_...

CVE-2024-46747

CVE-2024-46747 : In the Linux kernel, the Cougar 500k Gaming Keyboard driver was vulnerable to a slab-out-of-bounds Read in cougar_report_fixup due to a missing verification of the report descriptor size before access. The root cause is in report_fixup not validating the descriptor length prior t...

CVE-2024-46821

CVE-2024-46821 (Linux kernel, drm/amd/pm) affects the Linux kernel’s AMD power management code where a negative clk_index/clk_idex was used as an index into pptable->DpmDescriptor, leading to a negative array index read. The issue is resolved by a fix that prevents using negative values as an ...

CVE-2024-49902

CVE-2024-49902 in the Linux kernel affects the JFS dmmap path. The root cause is an out-of-bounds condition in dbSplit when dmt_leafidx exceeds the number of leaves per dmap tree; a bounds check was added in dbFindLeaf. Shaggy’s change also extends the sanity check to cover control pages in addit...

CVE-2024-50086

CVE-2024-50086 affects the Linux kernel ksmbd (SMB2 server). A race between SMB2 session log off and session setup could lead to a use-after-free of the session object. The patch adds a session_lock when setting SMB2_SESSION_EXPIRED and switches to a reference-counted/session-scoped reference to ...

CVE-2024-53180

Technical details and affected products/versions for CVE-2024-53180 are not present in the connected documents. The initial description summarizes a Linux kernel change but lacks explicit exploit, affected driver/version, or patch details. Monitor vendor advisories for updates.

CVE-2024-58090

CVE-2024-58090 affects the Linux kernel: sched/core commit fixes a long-standing issue where rescheduling could be triggered with interrupts disabled during kexec-based reboot paths. The root cause involved a wakeup in a syscore_suspend()/resume path that set NEED_RESCHED, leading to cond_resched...

CVE-2025-37741

CVE-2025-37741 affects the Linux kernel JFS, where a race/locking path can lead to a deadlock in diFree when nlink is incorrectly derived as 0. Root cause: during inode handling for iag creation, a corrupted metapage can cause dinode’s nlink to be copied as 0, triggering diFree and a deadlock seq...

CVE-2016-2782

CVE-2016-2782 : In the Linux kernel, the treo_attach function in drivers/usb/serial/visor.c (pre-4.5) can be exploited by a physically proximate attacker who inserts a USB device missing a bulk-in or interrupt-in endpoint, causing a NULL pointer dereference and kernel crash (DoS) or possibly othe...

CVE-2022-48619

CVE-2022-48619 : A local Linux kernel vulnerability in drivers/input/input.c (input_set_capability) can panic the kernel when an event code falls outside the bitmap. Affected: Linux kernel versions before 5.17.10. Root cause: mishandling in input_set_capability for out-of-bitmap event codes. Impa...

CVE-2024-42122

CVE-2024-42122 concerns the Linux kernel’s drm/amd/display where a NULL pointer could be produced by kzalloc and used without checking. The fix adds a NULL pointer check before using the allocated memory. Affected subsystem: AMD display kernel code; root cause: missing validation of kzalloc retur...

CVE-2024-49896

CVE-2024-49896 is a Linux kernel vulnerability affecting the amdgpu/display path. The issue arises when amdgpu_dm passes a null stream to dc_is_stream_unchanged, leading to a potential NULL dereference. The description in the sources notes the root cause as missing null-check before dereferencing...

CVE-2014-3610

CVE-2014-3610 is a Linux kernel KVM WRMSR emulation flaw present up to and including 3.17.2. The issue arises when guest writes a non-canonical value to a model-specific register, causing the host to crash (DoS). It is tied to wrmsr_interception (arch/x86/kvm/svm.c) and handle_wrmsr (arch/x86/kvm...

CVE-2017-16533

CVE-2017-16533 affects the Linux kernel’s usbhid_parse() in drivers/hid/usbhid/hid-core.c up to and including version 4.13.7; a crafted USB device can cause an out-of-bounds read, leading to local denial of service or a crash. Affected component: HID USB host controller driver (usbhid). Root caus...

CVE-2019-25045

CVE-2019-25045 is a Linux kernel use-after-free in the XFRM subsystem (xfrm_state_fini panic) reported for kernels before 5.0.19. Publicly documented references from EulerOS and Unity Linux advisories confirm the issue and link the fix to kernel 5.0.19 (and related upstream commit). The impact is...

CVE-2021-38200

Public technical details for CVE-2021-38200 are not present in the connected documents. The initial description notes the affected Linux kernel path and conditions, but no exploits, affected versions beyond general, or remediation details are provided here; monitor for updates.

CVE-2021-47321

CVE-2021-47321 : Linux kernel watchdog use-after-free due to del_timer() not waiting for the timer handler. The issue occurs in the driver remove path, where a timer may still be running after removal, risking a use-after-free. The fixed path uses del_timer_sync() to wait for the timer handler to...

CVE-2021-47579

Mode C: CVE-2021-47579 affects the Linux kernel overlayfs component (ovl) with a WARN_ON path in ovl_workdir_create() when mkdir returns a dentry without an inode (not instantiated). The fix, described in the connected advisories, calls ovl_mkdir_real() directly from ovl_workdir_create() and reje...

CVE-2022-49123

CVE-2022-49123 affects the ath11k driver in Linux kernels where frames flush of management frames could deadlock, leading to queue flush failures. The vulnerability has upstream fixes (kernel commits referenced in the CVE entry) and downstream patches appear in OS advisories for Root-OS (Ubuntu 2...

CVE-2023-52625

The CVE-2023-52625 entry concerns the Linux kernel’s drm/amd/display path (DMCUB enter/exit idle). The root cause is a SW/state mismatch when exiting idle before issuing commands to DMCUB, where the exit/notify idle operation can itself issue a command. The provided fix strategy is to track a sof...

CVE-2024-26763

CVE-2024-26763 is a Linux kernel vulnerability in dm-crypt related to authenticated encryption. The issue arises when data is modified during encryption, which could produce an invalid tag. The fix copies the data into a clone bio and encrypts there, avoiding in-place modification and potential d...

CVE-2024-40974

CVE-2024-40974 (Linux kernel, powerpc/pseries) is a local concern where plpar_hcall() and plpar_hcall9() expect valid, explicitly-sized result buffers; historically, only in-code comments signaled minimum sizes, risking stack corruption when a caller used undersized buffers. The affected code now...

CVE-2024-53177

CVE-2024-53177 affects the Linux kernel SMB client cache code. The vulnerability arises from a use-after-free in smb2_cached_lease_break/open_cached_dir error handling, where freeing a cfid could race with a pending lease-break work item. The fix updates open_cached_dir() to drop references inste...

CVE-2024-53179

CVE-2024-53179 affects the Linux kernel SMB CIFS client (signing key UAF in SMB2.1 with sign mounts). Root cause: race leading to use-after-free in @ses->auth_key.response when concurrent cifs_mount/get_session and signing-key computation occur. The fix introduces a safety check on ses_status ...

CVE-2017-5669

The vulnerability CVE-2017-5669 affects the Linux kernel’s do_shmat() in ipc/shm.c up to and including 4.9.12, where the rounding operation on the mapped address is not restricted. This allows local (privileged) users to map page zero and bypass the mmap protection mechanism via crafted shmget/sh...

CVE-2022-49746

The CVE-2022-49746 issue affects the Linux kernel DMA engine, specifically the imx-sdma path. A memory leak can occur in sdma_transfer_init when sdma_load_context() fails: the sdma_desc is freed, but the allocated desc->bd was not, leading to a leak (as illustrated by timeout/login messages). ...

CVE-2024-38635

CVE-2024-38635 pertains to the Linux kernel soundwire cadence driver. The root cause was an incorrect PDI offset that added an offset to the PDI array, risking out-of-bounds access. A follow-up patch completely removes this useless offset. The Fixes tag was not provided because no known platforms...

CVE-2024-47726

CVE-2024-47726 concerns the Linux kernel F2FS: the fix ensures awaiting all Dio write I/Os before block removal to prevent data overwrite when blocks are reused by inodes. Affected are older kernel builds; patched versions exist (e.g., Debian linux-6.1 with the fix, Astra Linux SE18 bulletin, CBL...

CVE-2024-49897

CVE-2024-49897 concerns the Linux kernel DRM/AMD display path. The issue arises in drm/amd/display where dcn32_enable_phantom_stream can return NULL, leading to a NULL dereference if the returned value is used without checks. The fix adds a check for phantom_stream before use, addressing a NULL_R...

CVE-2024-50171

CVE-2024-50171 affects the Linux kernel BCM SYSPORT driver: bcm_sysport_xmit() can leak memory because skb is not freed when dma_map_single() fails, with a fix that frees the skb via dev_kfree_skb() and returns NETDEV_TX_OK. Public records indicate the issue is resolved in patched kernel releases...

CVE-2024-50246

CVE-2024-50246 is a Linux kernel vulnerability affecting the ntfs3 file-system code path. The issue stems from a missing or insufficient check related to the alloc_size for rough attribute handling in fs/ntfs3, which could allow a local attacker to exploit the flaw. The CVE is described with a CV...

CVE-2014-3690

CVE-2014-3690 affects arch/x86/kvm/vmx.c in the Linux kernel’s KVM subsystem on Intel, where the CR4 control register value may not be preserved across VM entries. The vendor-provided details in connected Nessus advisories describe a local attacker with access to /dev/kvm who can kill arbitrary p...

CVE-2017-18270

CVE-2017-18270 refers to a local-kernel vulnerability in Linux kernels prior to 4.13.5 where a local user could create keyrings for other users via keyctl, enabling setting unwanted defaults or causing a denial of service. The issue is fixed in Linux kernel 4.13.5 (as indicated by the ChangeLog r...

CVE-2018-10087

CVE-2018-10087 is present in the MiracleLinux kernel package listed in AXSA:2024-8953:34. The advisory shows a local DoS risk due to the kernel_wait4 function in kernel/exit.c triggering undefined behavior when using -INT_MIN on an unspecified architecture/compiler. The connected Nessus entry ide...

CVE-2022-3105

The CVE-2022-3105 entry concerns the Linux kernel (till 5.16-rc6) where uapi_finalize in drivers/infiniband/core/uverbs_uapi.c does not check kmalloc_array() results. The Connected Astra Linux bulletin repeats the same description. No explicit vendor/patch details or exploit information are provi...

CVE-2022-49180

The CVE-2022-49180 issue affects the Linux kernel’s LSM path, specifically a general protection fault in legacy_parse_param. The vulnerability arises when a security module (Smack) processes a recognized mount option and a following BPF hook returns -ENOPARAM, confusing the caller, while the SELi...