CVE-2023-52753

CVE-2023-52753 affects the Linux kernel’s DRM/AMD display timing generator. The root cause is a NULL pointer dereference when accessing the timing generator’s funcs if it is NULL. This can lead to a kernel crash (availability impact). The fix adds a NULL check before dereferencing the timing gene...

CVE-2023-52880

CVE-2023-52880 is a Linux kernel flaw where attaching the N_GSM0710 line discipline can be performed by an unprivileged user only after CAP_NET_ADMIN has been requested to create GSM networking. The initial namespaceCAP_NET_ADMIN is also required to proceed with the attachment. Several connected ...

CVE-2024-38580

CVE-2024-38580 is a Linux kernel vulnerability in epoll handling. The issue arises when epoll calls vfs_poll() with a file pointer that may race with the last fput(), potentially letting f_count drop to zero and leaving the file pointer dead before use. The documented fix is to ensure a valid ref...

CVE-2024-46805

CVE-2024-46805 is a Linux kernel vulnerability in the drm/amdgpu path where a NULL pointer dereference of hive can occur when validating amdgpu_hive_info. The issue (root cause: amdgpu_hive_info *hive may be NULL) can lead to an out-of-bounds or memory access problem in the driver, with the advis...

CVE-2024-58001

Technical details about CVE-2024-58001 are not publicly provided in the supplied documents. Monitor for updates from official advisories; the sources reference related advisories but do not reveal vulnerability specifics, affected products, or fixes.

CVE-2025-21672

CVE-2025-21672 concerns the Linux kernel, specifically the afs module, where a fix guards against a lock being left held when returning to userspace. The root cause is described as a scenario where if argc is less than 0 and a function returns directly, an inode mutex lock is not released. The pa...

CVE-2025-23163

CVE-2025-23163 relates to a Linux kernel issue in VLAN handling: net: vlan: don't propagate flags on open. The root cause is a possible deadlock when opening VLAN devices due to the device instance lock, where a task may try to acquire dev->lock while already holding it (seen in dev_open + dev...

CVE-2014-1737

CVE-2014-1737 affects the Linux kernel (through 3.14.3) and its floppy driver (drivers/block/floppy.c). The flaw is in raw_cmd_copyin not handling error conditions during processing of an FDRAWCMD ioctl, enabling local users with write access to /dev/fd to trigger kfree and potentially gain privi...

CVE-2020-36313

CVE-2020-36313 affects the Linux kernel before 5.7. The KVM subsystem allows out‑of‑range access to memslots after a deletion (CID-0774a964ef56), impacting arch/s390/kvm/kvm-s390.c, include/linux/kvm_host.h, and virt/kvm/kvm_main.c. Root cause is a memslot handling bug in KVM/s390; exploitation d...

CVE-2020-36691

CVE-2020-36691 affects the Linux kernel up to and including versions prior to 5.8. The flaw is in lib/nlattr.c where a nested Netlink policy with a back reference can trigger unbounded recursion, causing a denial of service. A patch was merged in kernel 5.8 (per ChangeLog-5.8); users should upgra...

CVE-2021-47219

CVE-2021-47219 involves the Linux kernel SCSI subsystem, specifically the scsi_debug path, where an out-of-bounds read occurs in resp_report_tgtpgs() due to an incorrect handling of lengths. The issue can manifest as a negative alen when userspace supplies a large length, enabling a slab/read bou...

CVE-2021-47247

CVE-2021-47247 is a Linux kernel use-after-free in the mlx5e_encap_take path during neigh update, caused by improper handling when encap entries are concurrently inserted/deleted after rtnetlink lock changes. The issue is documented in upstream kernel notes and is listed in Debian’s DLA-4178-1 ad...

CVE-2022-49615

CVE-2022-49615 affects the Linux kernel ASoC rt711-sdca subsystem. A IO error during initial codec settings could dereference a NULL rt711->component before the probe completes, risking kernel panic. The fix changes the code path to use slave->dev instead of component->dev for the early ...

CVE-2023-52589

The CVE 2023-52589 entry concerns the Linux kernel media rkisp1 driver. The issue is a race in IRQ disable logic within rkisp1_isp_stop() and rkisp1_csi_disable(): interrupts are masked and the code assumes the IRQ handler isn’t running, but the handler can still be active when the stop sequence ...

CVE-2024-42236

In CVE-2024-42236, the Linux kernel vulnerability affects usb: gadget: configfs, specifically usb_string_copy(), where an userspace string with length zero can bypass validation, causing an OOB read (str[0-1] before check) followed by an OOB write (str[0-1] = '\0'). The issue is caused by insuffi...

CVE-2024-49925

Technical details about CVE-2024-49925 are not publicly provided in the supplied documents. Monitor for updates from vendors/developers for affected products, impacted versions, exposure, and remediation guidance.

CVE-2024-50061

CVE-2024-50061 affects the Linux kernel’s i3c: master cdns_i3c_master driver. The root cause is a use-after-free race: cdns_i3c_master_hj_work scheduled in cdns_i3c_master_probe can run after cdns_i3c_master_remove frees master->base via i3c_master_unregister. The documented fix is to cancel t...

CVE-2010-3876

CVE-2010-3876 affects the Linux kernel: the code path net/packet/af_packet.c in kernel versions before 2.6.37-rc2 does not properly initialize certain structure members, allowing local users with CAP_NET_RAW to read copies of the applicable structures from kernel stack memory. Publicly document d...

CVE-2010-4158

The CVE-2010-4158 issue affects the Linux kernel (pre-2.6.36.2) where sk_run_filter in net/core/filter.c may execute BPF_S_LD_MEM or BPF_S_LDX_MEM before a memory location is initialized. This can allow local users to read potentially sensitive kernel stack memory via a crafted socket filter. The...

CVE-2016-3955

The CVE-2016-3955 issue affects the Linux kernel’s usbip_recv_xbuff path (drivers/usb/usbip/usbip_common.c) prior to version 4.5.3. A crafted length in a USB/IP packet can trigger an out-of-bounds write, enabling remote denial of service (and potentially other impact) without authentication. The ...

CVE-2021-47624

CVE-2021-47624 : In the Linux kernel, a reference-count leak in the rpc_sysfs_xprt_state_change error path can occur when the 3rd argument buf doesn’t match “offline”, “online”, or “remove.” The leak affects rpc_xprt and rpc_xprt_switch objects heightened by prior calls to rpc_sysfs_xprt_kobj_get...

CVE-2022-3106

The connected Astra Linux advisory and the CVE entry confirm CVE-2022-3106 affects the Linux kernel up to 5.16-rc6, where ef100_update_stats (drivers/net/ethernet/sfc/ef100_nic.c) does not check the return value of kmalloc(). The lack of a kmalloc() return check is the root cause; without it, all...

CVE-2022-49122

CVE-2022-49122 is a Linux kernel vulnerability affecting the dm ioctl path where user-supplied data could act as an index and enable Spectre v1 gadget behavior. The fix, described in connected advisories, prevents leakage of kernel memory to userspace by applying array_index_nospec to index handl...

CVE-2022-49305

CVE-2022-49305 affects the Linux kernel driver path drivers/staging/rtl8192u where a deadlock in ieee80211_beacons_stop() could occur. The root cause is a lock-order interaction: del_timer_sync() waited while holding ieee->beacon_lock in ieee80211_beacons_stop(), but the timer handler also nee...

CVE-2022-49536

The CVE-2022-49536 entry concerns the Linux kernel SCSI LPFC deadlock in I/O completion and abort handling under heavy stress (500+ vports). Affected component is the lpfc driver within the SCSI subsystem. The root cause is a deadlock between the lpfc_cmd->buf_lock and phba->hbalock during ...

CVE-2023-52975

CVE-2023-52975 affects the Linux kernel SCSI/iscsi_tcp component. A use-after-free (UAF) can occur during iSCSI session logout if another task accesses the shost ipaddress attribute, triggering KASAN reports. The issue has concrete fixes in the Linux kernel (e.g., commits in the referenced reposi...

CVE-2024-42134

CVE-2024-42134 : In the Linux kernel, virtio-pci may dereference vp_dev->is_avq when determining admin virtqueues in vp_del_vqs, since vp_dev->is_avq can be empty on some installations (virtio_pci_legacy). The bug could crash guests; the fix is to validate vp_dev->is_avq before use. Conn...

CVE-2014-4608

CVE-2014-4608 refers to multiple integer overflows in the LZO decompressor (lzo1x_decompress_safe) in the Linux kernel before 3.15.2, which can cause memory corruption and denial of service via a crafted Literal Run. Some advisories note the Linux kernel is not affected (media hype), while securi...

CVE-2014-8160

CVE-2014-8160 : In the Linux kernel, net/netfilter/nf_conntrack_proto_generic.c before 3.18 generates incorrect conntrack entries when handling certain iptables rule sets for SCTP, DCCP, GRE, and UDP-Lite. This can allow remote attackers to bypass intended access restrictions by sending packets w...

CVE-2017-16526

CVE-2017-16526 affects the Linux kernel driver code drivers/uwb/uwbd.c up to version 4.13.5; a crafted USB device could trigger a general protection fault and system crash via local access, potentially causing denial of service or other impact. The connected Unity Linux advisories (UTSA-2026-0016...

CVE-2019-16714

Summary: CVE-2019-16714 affects the Linux kernel prior to 5.2.14. The vulnerability is in rds6_inc_info_copy (net/rds/recv.c), where tos and flags are not initialized, allowing a remote attacker to read sensitive data from kernel stack memory. This is an information disclosure vulnerability with ...

CVE-2021-47110

CVE-2021-47110 affects the Linux kernel’s x86/kvm subsystem. The issue: kvmclock was only disabled on boot CPU during shutdown via machine_shutdown(), leaving other CPUs with a live kvmclock and risking memory corruption on events like Hibernate restore. Root cause: kvmclock MSR is not universall...

CVE-2021-47257

The Linux kernel contains a null pointer dereference vulnerability in the net: ieee802154 networking component. The issue originates from a logic error in the ieee802154_llsec_parse_dev_addr() function within the net/ieee802154/nl802154.c module. This error can be triggered if a user sets the mod...

CVE-2022-48733

The CVE-2022-48733 issue affects the Linux kernel (btrfs) where a use-after-free can occur in create_snapshot() if btrfs_commit_transaction() fails and the pending snapshot is freed, leaving it in the transaction list. The root cause is improper lifecycle handling of the pending snapshot during t...

CVE-2022-48772

CVE-2022-48772 affects the Linux kernel media lgdt3306a driver. Root cause: missing null-pointer check for platform_data in the probe path, causing a null-deref (observed via KASAN kmemdup in lgdt3306a_probe). Impact: potential kernel crash via local access; observed read of a null pointer. Remed...

CVE-2022-49107

CVE-2022-49107 affects the Linux kernel in the ceph subsystem. The issue is a memory leak in ceph_readdir when note_last_dentry returns an error. The fix resets last_readdir at the same time and adds a comment explaining why last_readdir isn’t freed when dir_emit returns false. Public references ...

CVE-2023-52835

CVE-2023-52835 affects the Linux kernel perf subsystem. The root issue is that a large AUX area (e.g., 4 GB) can cause rb_alloc_aux and related allocations to hit bounds and mmap failure, triggering a WARN and an ENOMEM during perf-record. The fix is to bail out early if the requested AUX area is...

CVE-2024-26775

CVE-2024-26775 concerns the Linux kernel’s aoe subsystem. The documented issue is a potential deadlock in set_capacity() caused by a locking order: one path holds bdev->bd_size_lock while another holds d->lock, risking a deadlock when an interrupt occurs and the code path re-enters set_capa...

CVE-2024-41059

CVE-2024-41059 (Linux kernel) : A KMSAN-uninitialized value occurred in hfsplus when copying names during extended attributes operations (copy_name in fs/hfsplus/xattr.c). The issue traces to uninitialized memory used during sized_strscpy, leading to a potential information leak or instability wi...

CVE-2024-46753

CVE-2024-46753 affects the Linux kernel via the btrfs subsystem. Description: in walk_up_proc() the code previously BUG_ON(ret) after btrfs_dec_ref(); the error is now returned, indicating proper error propagation. The vulnerability is resolved in the Linux kernel as described in multiple advisor...

CVE-2024-47809

CVE-2024-47809 (Linux kernel) fixes a possible NULL pointer dereference in the DLM code path when a lock block (lkb) is created but the lkb_resource is not yet assigned (until attach_lkb via validate_lock_args). The issue could occur when request_lock() calls, potentially exposing a crash; anothe...

CVE-2024-50090

CVE-2024-50090 is tied to the Linux kernel DRM XE driver. The Connected document describes a bug in __xe_bb_create_job() where a buffer copy operation lacks input data validation, enabling a vulnerability that could trigger a service failure. The Initial description also notes a separate issue in...

CVE-2024-56598

Technical details about CVE-2024-56598 (Linux kernel jfs: array-index-out-of-bounds in dtReadFirst) are not provided in the connected documents. Please monitor for updates.

CVE-2020-29372

The CVE-2020-29372 entry concerns a race condition in the Linux kernel do_madvise implementation (mm/madvise.c) before version 5.6.8, where coredump operations can race with IORING_OP_MADVISE (CID-bc0c4d1e176e). Public sources in connected documents confirm the affected code path and the specific...

CVE-2021-47408

CVE-2021-47408 affects the Linux kernel netfilter conntrack code. The issue arises when the conntrack hash table resizes or during cleanup, causing nf_ct_iterate_cleanup to restart after a resize and delaying net_namespace teardown. The available connected documents state that adding a mutex to s...

CVE-2022-48760

The CVE-2022-48760 entry concerns a Linux kernel USB subsystem hang in usb_kill_urb() caused by memory-access ordering issues (SB pattern) between usb_kill_urb() and __usb_hcd_giveback_urb() on SMP systems. The vulnerability is fixed by adding memory barriers, specifically using the smp_mb__after...

CVE-2022-49739

The CVE-2022-49739 issue concerns the GFS2 subsystem in the Linux kernel where the inode size of stuffed (inline) inodes was not consistently validated when reading inodes from disk. The fix enforces that the inode size of inline inodes is within the allowed range (gfs2_dinode_in()), preventing o...

CVE-2023-52764

CVE-2023-52764 affects the Linux kernel media driver gspca cpia1 (drivers/media/usb/gspca/cpia1.c) with a shift-out-of-bounds in set_flicker triggered when sd->params.exposure.gain grows beyond int bit-width. The issue stems from attempting a left-shift that exceeds the size of an int, causing...

CVE-2023-52915

The CVE-2023-52915 issue affects the Linux kernel driver media: dvb-usb-v2 (af9035) where af9035_i2c_master_xfer processes user-controlled msg entries; if msg[i].buf is null and msg[i].len is zero, previous checks on msg[i].buf could pass, allowing data to reach af9035_i2c_master_xfer and potenti...

CVE-2024-26791

CVE-2024-26791 — Linux kernel: btrfs dev-replace: properly validate device names. A syzbot report indicated device name buffers passed to device replace could read beyond end (getname_kernel) due to insufficient termination checks. The fix adds a helper that validates both source and target devic...