CVE-2024-42232

Based on the connected advisories, CVE-2024-42232 is a race condition in the Linux kernel’s libceph code (ceph_monc_stop) where delayed_work() handling can race with mon_fault() and finish_hunting(), potentially leading to use-after-free scenarios on monc and related objects. The documented fix r...

CVE-2024-46745

CVE-2024-46745 affects the Linux kernel uinput interface. The root cause is an unbounded request for slots via syzkaller, causing memory allocation failure in input_mt_init_slots. The fix limits the allowed number of slots to 100 (extendable if devices require more). Consequences described in the...

CVE-2024-46822

CVE-2024-46822 αφορά Linux kernel, prädominantemente为 ARM64 架构，涉及 acpi_map_gic_cpu_interface() 中对 MPIDR 检查失败时导致 cpu_madt_gicc[cpu] 为 NULL 的情况，从而可能造成空指针解引用。修复为对 get_cpu_for_acpi_id() 的调用路径进行强化，确保获取到有效 CPU 条目后再进行索引，避免空指针 dereference。相关公开资料（如 Astra Linux、CIRCL/CVE 记录）确认了该漏洞存在于内核实现并已通过 Harden get_cpu...

CVE-2024-49858

CVE-2024-49858: Linux kernel TPM event log handling (efistub/tpm) used EFI_LOADER_DATA, leaving the region unreserved in the EFI 64-bit memory map (via E820) and passed to the kernel via kexec, risking memory corruption. The fix substitutes EFI_ACPI_RECLAIM_MEMORY, which EFI/ACPI treats as reserv...

CVE-2024-49969

CVE-2024-49969 affects the Linux kernel DRM AMD/DCN30 color management path. The vulnerability arises in the function cm3_helper_translate_curve_to_hw_format when an index 'i' can exceed TRANSFER_FUNC_POINTS, risking an index/out-of-bounds condition and triggering a buffer overflow in output_tf-&...

CVE-2024-50007

CVE-2024-50007 affects the Linux kernel ALSA asihpi/ASIHPI driver. The issue is an out-of-bounds access in a static array populated from firmware data; the index depends on firmware and was not validated. The patch adds a sanity check to ensure the index fits in the array size, preventing potenti...

CVE-2024-53090

CVE-2024-53090 : In the Linux kernel, the afs lock recursion issue occurred when afs_wake_up_async_call() could incur lock recursion if called from AF_RXRPC while holding the notify_lock and trying to pass an afs_call ref to a work queue. If the afs_call was already queued, an extraneous ref coul...

CVE-2024-58090

CVE-2024-58090 affects the Linux kernel: sched/core commit fixes a long-standing issue where rescheduling could be triggered with interrupts disabled during kexec-based reboot paths. The root cause involved a wakeup in a syscore_suspend()/resume path that set NEED_RESCHED, leading to cond_resched...

CVE-2014-1737

CVE-2014-1737 affects the Linux kernel (through 3.14.3) and its floppy driver (drivers/block/floppy.c). The flaw is in raw_cmd_copyin not handling error conditions during processing of an FDRAWCMD ioctl, enabling local users with write access to /dev/fd to trigger kfree and potentially gain privi...

CVE-2014-1874

The CVE-2014-1874 entry is about the Linux kernel vulnerability in security/selinux/ss/services.c: the security_context_to_sid_core function before 3.13.4 allows local users with CAP_MAC_ADMIN to set a zero-length security context, causing a denial of service (system crash). Affected product: Lin...

CVE-2014-4608

CVE-2014-4608 refers to multiple integer overflows in the LZO decompressor (lzo1x_decompress_safe) in the Linux kernel before 3.15.2, which can cause memory corruption and denial of service via a crafted Literal Run. Some advisories note the Linux kernel is not affected (media hype), while securi...

CVE-2020-29372

The CVE-2020-29372 entry concerns a race condition in the Linux kernel do_madvise implementation (mm/madvise.c) before version 5.6.8, where coredump operations can race with IORING_OP_MADVISE (CID-bc0c4d1e176e). Public sources in connected documents confirm the affected code path and the specific...

CVE-2022-49072

CVE-2022-49072 affects the Linux kernel GPIO subsystem: gpiochip irq members can be read before initialization, causing race conditions and a potential NULL pointer dereference via I2C (gpiochip_to_irq). The issue has been resolved in the kernel by restricting access to irq-related fields until a...

CVE-2024-46806

CVE-2024-46806 affects the Linux kernel DRM/AMDGPU path: the code path that handles partition mode may perform a division or modulo by zero, leading to a potential crash or denial of service. The available connected documents confirm the issue is fixed in the kernel by addressing a warning divisi...

CVE-2024-50059

CVE-2024-50059 affects the Linux kernel’s ntb subsystem for Switchtec NTB: a race between switchtec_ntb_add/init_sndev binding and switchtec_ntb_remove freeing sndev can lead to a use-after-free of sndev from its scheduled check_link_status_work. The provided description and patches indicate the ...

CVE-2024-50247

CVE-2024-50247 affects the Linux kernel ntfs3 path where an incorrectly formatted chunk may decompress to more than LZNT_CHUNK_SIZE bytes, causing an index out of bounds in s_max_off. The Connected documents confirm this CVE is included in multiple advisories (e.g., ALAS2023LIVEPATCH advisories) ...

CVE-2024-53179

CVE-2024-53179 affects the Linux kernel SMB CIFS client (signing key UAF in SMB2.1 with sign mounts). Root cause: race leading to use-after-free in @ses->auth_key.response when concurrent cifs_mount/get_session and signing-key computation occur. The fix introduces a safety check on ses_status ...

CVE-2024-53180

Technical details and affected products/versions for CVE-2024-53180 are not present in the connected documents. The initial description summarizes a Linux kernel change but lacks explicit exploit, affected driver/version, or patch details. Monitor vendor advisories for updates.

CVE-2010-3876

CVE-2010-3876 affects the Linux kernel: the code path net/packet/af_packet.c in kernel versions before 2.6.37-rc2 does not properly initialize certain structure members, allowing local users with CAP_NET_RAW to read copies of the applicable structures from kernel stack memory. Publicly document d...

CVE-2019-15922

CVE-2019-15922 relates to the Linux kernel before 5.0.9, where a NULL pointer dereference can occur for a pf data structure if alloc_disk fails in drivers/block/paride/pf.c. This is a local, kernel‑space issue that can lead to a crash. The affected component is the paride pf driver path; the root...

CVE-2021-47257

The CVE-2021-47257 issue affects the Linux kernel net: ieee802154 code, where a logic error could cause a NULL pointer dereference when the user sets the addr-type mode incorrectly. The patch fixes this NULL-dereference path in parse_dev_addr. The vulnerability is described as a local issue with ...

CVE-2022-48760

The CVE-2022-48760 entry concerns a Linux kernel USB subsystem hang in usb_kill_urb() caused by memory-access ordering issues (SB pattern) between usb_kill_urb() and __usb_hcd_giveback_urb() on SMP systems. The vulnerability is fixed by adding memory barriers, specifically using the smp_mb__after...

CVE-2023-52588

CVE-2023-52588 represents a Linux kernel vulnerability in the F2FS file system. The issue involves a missing gcing flag on a page during block migration, intended to ensure that migrated data is persisted consistently during checkpoints. Without the gcing flag, data/page persistence could become ...

CVE-2024-36924

CVE-2024-36924 – Linux kernel (scsi: lpfc) has a deadlock risk when lpfc_worker_wake_up() is invoked while the hbalock is held. The fix is to release hbalock before calling lpfc_worker_wake_up(), preventing deadlocks in the lpfc SCSI loop. Public advisories from Unity Linux (UTSA-2026-005051) and...

CVE-2024-49867

In the Linux kernel, CVE-2024-49867 affects the btrfs filesystem when unmounting a filesystem. During close_ctree(), the sequence previously stopped and freed the cleaner kthread before ensuring all fixup workers finished, which could allow a fixup worker to wake a freed task_struct (the cleaner)...

CVE-2024-49903

CVE-2024-49903 is a Linux kernel vulnerability involving a slab-use-after-free in the JFS mapping code (dbFreeBits/dbFreeDmap) caused by a race between two paths (dbUnmount and jfs_ioc_trim) that access bmap. The race can lead to uaf when trimming or unmounting JFS and subsequently freeing object...

CVE-2010-4073

CVE-2010-4073 affects the Linux kernel IPC compatibility code: before 2.6.37-rc1, several compat syscall handlers (ipc/compat.c and ipc/compat_mq.c) fail to initialize certain structures, enabling local attackers to read potentially sensitive kernel stack memory via vectors in compat_sys_semctl, ...

CVE-2014-0077

CVE-2014-0077 concerns the Linux kernel component drivers/vhost/net.c . When mergeable buffers are disabled, the code path does not properly validate packet lengths, enabling a guest OS user to trigger a memory corruption that could cause a host crash or, per wording, potentially gain privileges ...

CVE-2015-0239

CVE-2015-0239 affects the Linux kernel KVM emulation path (arch/x86/kvm/emulate.c). If a guest OS does not initialize SYSENTER MSRs, em_sysenter can trigger using a 16‑bit code segment to emulate SYSENTER, allowing a guest OS user to gain guest privileges or cause a guest crash. The vulnerability...

CVE-2016-0821

The CVE-2016-0821 issue relates to the LIST_POISON protection in the Linux kernel (include/linux/poison.h) prior to version 4.3. It affected Android 6.0.1 prior to 2016-03-01 and arises because poison values were used without properly accounting for mmap_min_addr, enabling bypass of poison-pointe...

CVE-2016-2782

CVE-2016-2782 : In the Linux kernel, the treo_attach function in drivers/usb/serial/visor.c (pre-4.5) can be exploited by a physically proximate attacker who inserts a USB device missing a bulk-in or interrupt-in endpoint, causing a NULL pointer dereference and kernel crash (DoS) or possibly othe...

CVE-2017-15116

CVE-2017-15116 affects the Linux kernel rngapi_reset() in crypto/rng.c, vulnerable before version 4.2. The issue allows a local attacker to trigger a NULL pointer dereference, causing a denial of service. Connected Nessus advisories (Unity Linux and EulerOS entries) reiterate the same description...

CVE-2017-16533

CVE-2017-16533 affects the Linux kernel’s usbhid_parse() in drivers/hid/usbhid/hid-core.c up to and including version 4.13.7; a crafted USB device can cause an out-of-bounds read, leading to local denial of service or a crash. Affected component: HID USB host controller driver (usbhid). Root caus...

CVE-2021-47624

CVE-2021-47624 : In the Linux kernel, a reference-count leak in the rpc_sysfs_xprt_state_change error path can occur when the 3rd argument buf doesn’t match “offline”, “online”, or “remove.” The leak affects rpc_xprt and rpc_xprt_switch objects heightened by prior calls to rpc_sysfs_xprt_kobj_get...

CVE-2022-2991

CVE-2022-2991 (Linux kernel LightNVM) Affected software: Linux kernel, LightNVM subsystem. Vulnerability: heap-based buffer overflow caused by insufficient validation of the length of user-supplied data before copying to a fixed-size heap buffer. Impact: local privilege escalation and arbitrary c...

CVE-2022-34494

CVE-2022-34494 : This vulnerability is a double free in rpmsg_virtio_add_ctrl_dev (drivers/rpmsg/virtio_rpmsg_bus.c) of the Linux kernel, before version 5.18.4. Affected: Linux kernel releases prior to 5.18.4. Root cause: double free in the RPMSG virtio control device handling. Impact: described ...

CVE-2022-49615

CVE-2022-49615 affects the Linux kernel ASoC rt711-sdca subsystem. A IO error during initial codec settings could dereference a NULL rt711->component before the probe completes, risking kernel panic. The fix changes the code path to use slave->dev instead of component->dev for the early ...

CVE-2024-26778

CVE-2024-26778 concerns a flaw in the Linux kernel fbdev sav age driver (savage) where an unchecked pixclock input to ioctl() can cause a divide-by-zero. The advisory notes that pixclock is partly validated in savagefb_decode_var() but not sufficiently in savagefb_probe(); the fix introduces a ch...

CVE-2024-41016

CVE-2024-41016 affects the Linux kernel file system OCFS2, specifically the xattr_find_entry() path. The vulnerability arises from an out-of-bounds memory access in a bound check before memcmp when handling xattrs, potentially triggered by crafted images. A fix was applied to perform a strict bou...

CVE-2024-42080

CVE-2024-42080 affects Linux kernels with the RDMA restrack entry handling. The issue arises when ib_create_cq() sets rdma_restrack_entry kern_name to KBUILD_MODNAME; if the module exits without deleting this entry, rdma_restrack_clean() may perform an invalid address access when printing the own...

CVE-2024-47674

Technical details about CVE-2024-47674 are not publicly provided in the supplied documents; monitor for updates from official advisories.

CVE-2024-50211

CVE-2024-50211 is a Linux kernel issue where the udf inode_bmap() function was refactored to handle errors from udf_next_aext() and other error paths. The change allows udf_extend_file() and related code paths to detect errors earlier (e.g., during operations like ftruncate) instead of relying on...

CVE-2024-57924

CVE-2024-57924 affects the Linux kernel and is described in multiple sources as a fix to “fs: relax assertions on failure to encode file handles.” The issue concerns exportfs_encode_fh and related paths used by filesystem code to encode file handles, with legacy users such as nfsd and name_to_han...

CVE-2025-21992

CVE-2025-21992 concerns the HID subsystem in the Linux kernel, where a non-functional HID sensor on the HP 5MP Camera (USB 0408:5473) could cause system hangs when accessed via iio_info. The issue was mitigated by adding the affected device to the HID ignore list so its sensor interface is not ex...

CVE-2010-3881

The CVE-2010-3881 issue affects the Linux kernel arch/x86/kvm/x86.c, where several structure members are not initialized in versions prior to 2.6.36.2. This can allow local users to read potentially sensitive data from kernel stack memory via /dev/kvm. The documented fix is in kernel 2.6.36.2 (an...

CVE-2011-0521

The CVE-2011-0521 issue affects the Linux kernel’s dvb_ca_ioctl in drivers/media/dvb/ttpci/av7110_ca.c, where the sign of a certain integer field is not checked in versions before 2.6.38-rc2. This allows local users to cause a denial of service via memory corruption and potentially other unspecif...

CVE-2011-1585

Technical details for CVE-2011-1585 are not publicly provided in the supplied connected documents. Monitor for updates from vendor advisories or security bulletins to obtain affected products, impact, and fixes.

CVE-2021-47606

CVE-2021-47606 affects the Linux kernel net: netlink af_netlink fix. The vulnerability arises from an empty skb usage, where skb->len=0 and skb->data_len=0 could trigger a division error in netem_enqueue during randomized corruption: skb->data[prandom_u32() % skb_headlen(skb)] ^= 1<

CVE-2022-49107

CVE-2022-49107 affects the Linux kernel in the ceph subsystem. The issue is a memory leak in ceph_readdir when note_last_dentry returns an error. The fix resets last_readdir at the same time and adds a comment explaining why last_readdir isn’t freed when dir_emit returns false. Public references ...

CVE-2022-49123

CVE-2022-49123 affects the ath11k driver in Linux kernels where frames flush of management frames could deadlock, leading to queue flush failures. The vulnerability has upstream fixes (kernel commits referenced in the CVE entry) and downstream patches appear in OS advisories for Root-OS (Ubuntu 2...