CVE-2024-50245

CVE-2024-50245 affects the Linux kernel fs/ntfs3 subsystem and is resolved by a patch that fixes a possible deadlock in mi_read caused by a mutex lock contention with the ni_lock_dir path. The flaw is within the ntfs3 code path and can result in a stall if the lock ordering interacts with another...

CVE-2024-53187

CVE-2024-53187 affects the Linux kernel io_uring subsystem (io_pin_pages in io_uring/memmap.c). The issue arises from overflow/garbage uaddr handling when deriving size, enabling local attackers to trigger a fault; CVSSv3.1 metrics shown include Local attack, Low complexity, Low privileges, with ...

CVE-2011-1020

CVE-2011-1020 affects the Linux kernel (2.6.37 and earlier) where the proc filesystem does not restrict access to /proc after a process execs a setuid program. This can let local attackers obtain sensitive information or cause a denial of service by performing open, lseek, read, or write operatio...

CVE-2011-1776

The CVE-2011-1776 issue affects the Linux kernel’s is_gpt_valid function (fs/partitions/efi.c). It does not validate the size of a GPT entry, allowing physically proximate attackers to trigger a heap-based buffer overflow and OOPS or potentially read kernel heap memory when a crafted GPT storage ...

CVE-2022-34494

CVE-2022-34494 : This vulnerability is a double free in rpmsg_virtio_add_ctrl_dev (drivers/rpmsg/virtio_rpmsg_bus.c) of the Linux kernel, before version 5.18.4. Affected: Linux kernel releases prior to 5.18.4. Root cause: double free in the RPMSG virtio control device handling. Impact: described ...

CVE-2022-49305

CVE-2022-49305 affects the Linux kernel driver path drivers/staging/rtl8192u where a deadlock in ieee80211_beacons_stop() could occur. The root cause is a lock-order interaction: del_timer_sync() waited while holding ieee->beacon_lock in ieee80211_beacons_stop(), but the timer handler also nee...

CVE-2022-49739

The CVE-2022-49739 issue concerns the GFS2 subsystem in the Linux kernel where the inode size of stuffed (inline) inodes was not consistently validated when reading inodes from disk. The fix enforces that the inode size of inline inodes is within the allowed range (gfs2_dinode_in()), preventing o...

CVE-2024-26932

Mode C: CVE-2024-26932 affects the Linux kernel USB Type-C tcpm path. The issue is a double-free of the same capabilitiy when unregistering PD capabilities in tcpm_port_unregister_pd(), where the first free occurs via pd_capabilities_release() and the second is explicit in tcpm_port_unregister_pd...

CVE-2024-35943

The CVE-2024-35943 entry pertains to the Linux kernel, specifically a vulnerability in TI-related pmdomain handling where omap_prm_domain_init lacked a null-pointer check after a dynamic allocation. The issue arises because devm_kasprintf() can return NULL on allocation failure, and without verif...

CVE-2024-42236

In CVE-2024-42236, the Linux kernel vulnerability affects usb: gadget: configfs, specifically usb_string_copy(), where an userspace string with length zero can bypass validation, causing an OOB read (str[0-1] before check) followed by an OOB write (str[0-1] = '\0'). The issue is caused by insuffi...

CVE-2024-46840

CVE-2024-46840 relates to the Linux kernel bug in btrfs where handling for refs == 0 in snapshot delete could yield an incorrect answer because of missing locks. The fix converts BUG_ON(refs == 0) sites in reada, walk_down_proc, and walk_up_proc to proper error handling, returning -EUCLEAN (later...

CVE-2024-49913

CVE-2024-49913 affects the Linux kernel’s DRM AMD display path. The issue was a potential NULL pointer dereference in commit_planes_for_stream when top_pipe_to_program could be NULL, leading to dereferencing stream_res. The fix adds a null check before accessing top_pipe_to_program to prevent the...

CVE-2024-49919

CVE-2024-49919 describes a null pointer dereference in the Linux kernel DRM AMD display path. Specifically, in dcn201_acquire_free_pipe_for_layer, the code could assume head_pipe was non-null and perform an assertion when it was null. The fix adds an explicit null check for head_pipe and, if it i...

CVE-2024-53108

The CVE-2024-53108 issue affects the Linux kernel’s DRM/AMD display stack, specifically the AMD kernel driver path (drm/amd/display) and the function amdgpu_dm_update_freesync_caps. The root cause is an out-of-bounds read caused by ID extraction for the replay check in the AMD EDID being performe...

CVE-2025-22041

The CVE-2025-22041 issue affects the Linux kernel ksmbd subsystem. In multichannel mode, a use-after-free can occur in ksmbd_sessions_deregister() when a second channel creates a session via the first channel’s connection, causing a freed session in the global session table to be dereferenced via...

CVE-2025-37803

CVE-2025-37803 : Linux kernel vulnerability in udmabuf where a buffer size overflow can occur during udmabuf creation. The root cause is improper size calculation, mitigated by casting size_limit_mb to u64 when computing pglimit. Connected advisories corroborate a kernel fix; patches are deployed...

CVE-2010-4073

CVE-2010-4073 affects the Linux kernel IPC compatibility code: before 2.6.37-rc1, several compat syscall handlers (ipc/compat.c and ipc/compat_mq.c) fail to initialize certain structures, enabling local attackers to read potentially sensitive kernel stack memory via vectors in compat_sys_semctl, ...

CVE-2011-2517

The vulnerability CVE-2011-2517 affects the Linux kernel (pre-2.6.39.2) where multiple buffer overflows in net/wireless/nl80211.c can allow local users to gain privileges by exploiting a long SSID during scan operations when CAP_NET_ADMIN is available. Impact is local privilege escalation with co...

CVE-2017-16530

CVE-2017-16530 affects the Linux kernel uas driver (drivers/usb/storage/uas.c; uas-detect.h). The issue allows a local user to trigger a denial of service or potentially other impact via a crafted USB device, caused by an out-of-bounds read. Affected condition is the uas driver in the kernel prio...

CVE-2021-47110

CVE-2021-47110 affects the Linux kernel’s x86/kvm subsystem. The issue: kvmclock was only disabled on boot CPU during shutdown via machine_shutdown(), leaving other CPUs with a live kvmclock and risking memory corruption on events like Hibernate restore. Root cause: kvmclock MSR is not universall...

CVE-2022-48772

CVE-2022-48772 affects the Linux kernel media lgdt3306a driver. Root cause: missing null-pointer check for platform_data in the probe path, causing a null-deref (observed via KASAN kmemdup in lgdt3306a_probe). Impact: potential kernel crash via local access; observed read of a null pointer. Remed...

CVE-2022-49288

CVE-2022-49288 concerns the Linux kernel ALSA PCM subsystem. The issue arises from races in concurrent prealloc changes via proc files, with no protection against simultaneous PCM buffer preallocation changes, potentially leading to use-after-free or other instability. The provided fix applies th...

CVE-2024-26791

CVE-2024-26791 — Linux kernel: btrfs dev-replace: properly validate device names. A syzbot report indicated device name buffers passed to device replace could read beyond end (getname_kernel) due to insufficient termination checks. The fix adds a helper that validates both source and target devic...

CVE-2024-46753

CVE-2024-46753 affects the Linux kernel via the btrfs subsystem. Description: in walk_up_proc() the code previously BUG_ON(ret) after btrfs_dec_ref(); the error is now returned, indicating proper error propagation. The vulnerability is resolved in the Linux kernel as described in multiple advisor...

CVE-2024-49888

CVE-2024-49888 – Linux kernel (BPF) sdiv/smod overflow fix . The issue affects the BPF subsystem where division by -1 can overflow for 64-bit operands (LLONG_MIN/-1) on x86_64, potentially triggering a kernel crash; on arm64, results differ (LLONG_MIN/-1 yields LLONG_MIN). The provided patch logi...

CVE-2024-49895

Summary: CVE-2024-49895 affects the Linux kernel DRM/AMD display path for DCN30, where a degamma hardware-format translation could access transfer function points out of bounds. The root cause is an index variable “i” that could exceed TRANSFER_FUNC_POINTS, leading to a potential buffer overflow ...

CVE-2024-49899

CVE-2024-49899 affects the Linux kernel’s DRM AMD display code. The vulnerability arises from denominators that could be zero due to uninitialized defaults; the fix sets denominators’ default to 1 to prevent division by zero. This resolves 10 DIVIDE_BY_ZERO issues reported by Coverity. The linked...

CVE-2024-49904

The CVE-2024-49904 issue affects the Linux kernel DRM/AMDGPU subsystem. The vulnerability arises from a missing list empty check in list_for_each_entry_safe, which can lead to a NULL pointer dereference in corner cases. The advisory notes that the fix is to add a list empty check to avoid the nul...

CVE-2024-50183

CVE-2024-50183 relates to the Linux kernel lpfc SCSI NPIV cleanup: deleting an NPIV instance must release all fabric ndlps, or a kref imbalance race occurs. The fix forces DA_ID to complete synchronously using a wait_queue, per the description in both the original CVE entry and Astra Linux securi...

CVE-2024-58085

CVE-2024-58085 relates to the Linux kernel Tomoyo security module, specifically a warning emission in tomoyo_write_control(). The description notes a syzbot report about a “too large allocation” warning when a long single line is written without a newline. The fix changes memory allocation behavi...

CVE-2025-37800

CVE-2025-37800 affects the Linux kernel driver core code, specifically a potential NULL pointer dereference in dev_uevent() when a userspace read of the uevent attribute overlaps with a driver unbind. The fix switches to using READ_ONCE() to fetch the driver pointer and acquires the bus’ drivers ...

CVE-2025-37841

CVE-2025-37841: In the Linux kernel, the vulnerability affects the pm: cpupower: bench path. If malloc returns NULL due to low memory, the config pointer can be NULL, leading to a NULL dereference. The issue has a tracked fix described as adding a NULL check to prevent dereferencing config when m...

CVE-2019-19241

CVE-2019-19241 affects the Linux kernel prior to 5.4.2 where the io_uring path can cause requests to appear with UID 0 and full capabilities due to IORING_OP_SENDMSG handling by kernel worker threads in contexts from unprivileged users. Affected code paths include fs/io-wq.c, fs/io_uring.c, and n...

CVE-2021-47408

CVE-2021-47408 affects the Linux kernel netfilter conntrack code. The issue arises when the conntrack hash table resizes or during cleanup, causing nf_ct_iterate_cleanup to restart after a resize and delaying net_namespace teardown. The available connected documents state that adding a mutex to s...

CVE-2022-49130

In CVE-2022-49130, the Linux kernel ath11k subsystem was fixed by replacing mhi_async_power_up() with mhi_sync_power_up() in the MHI path. The crash occurred when amss.bin was missing and ath11k_pci was removed, since the async variant did not check errors. The sync variant adds error checking an...

CVE-2023-0469

CVE-2023-0469 is a use-after-free in io_uring/filetable.c (io_install_fixed_file) within the Linux kernel’s io_uring subcomponent during call cleanup, potentially enabling a local DoS. Affected: Linux kernel with vulnerable io_uring code. Exploitation details are not provided in the supplied docu...

CVE-2023-23004

CVE-2023-23004 affects Linux kernel before 5.19. In drivers/gpu/drm/arm/malidp_planes.c, get_sg_table return value is misinterpreted: code expects NULL in error case, but it is an error pointer. This could lead to a kernel crash/undefined behavior as described in the vendor advisories (e.g., Chan...

CVE-2023-52915

The CVE-2023-52915 issue affects the Linux kernel driver media: dvb-usb-v2 (af9035) where af9035_i2c_master_xfer processes user-controlled msg entries; if msg[i].buf is null and msg[i].len is zero, previous checks on msg[i].buf could pass, allowing data to reach af9035_i2c_master_xfer and potenti...

CVE-2024-36915

CVE-2024-36915 concerns the Linux kernel’s NFC LLCP path where nfc_llcp_setsockopt() could unsafe-copy from user-supplied sockptr data, triggering a slab-out-of-bounds read. Symptom traces show reads of 4 bytes at a user task, linked to copy_from_sockptr() and inline copy_from_sockptr_offset; the...

CVE-2024-41070

The CVE-2024-41070 issue is a use-after-free in KVM on PPC Book3S HV. The code path kvm_spapr_tce_attach_iommu_group() reads stt from tablefd, then fdputs the fd and uses stt after the fd is released, allowing a race that frees stt via release_spapr_tce_table() (RCU) and can lead to UAF even with...

CVE-2024-43912

CVE-2024-43912 in the Linux kernel affects the wifi nl80211 code:AP channel width setting is now disallowed when using non-standard widths (e.g., S1G or narrow channels). The issue arises from allowing non-standard AP channel widths while normal 20/40/… MHz progression is expected, and the patch ...

CVE-2024-44954

The CVE-2024-44954 entry concerns the Linux kernel ALSA subsystem. Description: there is a race condition in the midibuf accessed by both the URB completion callback and rawmidi API paths. Root cause: concurrent accesses to the line6 midibuf can trigger KMSAN warnings (syzkaller). Impact: potenti...

CVE-2024-46777

CVE-2024-46777 concerns the Linux kernel udf component where the vulnerability arises from handling partition lengths that could overflow 32-bit block numbers and unsafe indexing of the block bitmap. The connected sources confirm the issue is fixed in kernel code by rejecting mounting filesystems...

CVE-2024-47673

CVE-2024-47673 affects the Linux kernel wifi iwlwifi mvm; root cause is that TCM is not paused when the firmware is stopped, causing a host command to be sent to a non-live firmware. This can trigger a WARNING and potential local impact. Connected docs indicate patched kernels/versions: e.g., Mar...

CVE-2024-50248

CVE-2024-50248 affects the Linux kernel’s ntfs3 component. The advisory states that bounds checking was added to mi_enum_attr() to ensure attributes do not strays beyond valid memory regions, mitigating a memory-safety issue. The entry is resolved in the Linux kernel by updating to a patched vers...

CVE-2024-50283

In the Linux kernel, the ksmbd component fixed a slab-use-after-free in smb3_preauth_hash_rsp. The patch ensures ksmbd_user_session_put is called under smb3_preauth_hash_rsp(), preventing the session from being freed before that call. Affected area: ksmbd/smb3_preauth_hash_rsp lifecycle. Remediat...

CVE-2025-21780

CVE-2025-21780 affects the Linux kernel DRM/AMDGPU, where a local attacker could overflow a PPTABLE buffer in smu_sys_set_pp_table() by cycling pptables via sysfs. The issue arises when a small pptable is followed by a larger one, enabling a buffer overflow as described in the advisory. This vuln...

CVE-2011-1585

Technical details for CVE-2011-1585 are not publicly provided in the supplied connected documents. Monitor for updates from vendor advisories or security bulletins to obtain affected products, impact, and fixes.

CVE-2017-15116

CVE-2017-15116 affects the Linux kernel rngapi_reset() in crypto/rng.c, vulnerable before version 4.2. The issue allows a local attacker to trigger a NULL pointer dereference, causing a denial of service. Connected Nessus advisories (Unity Linux and EulerOS entries) reiterate the same description...

CVE-2017-16527

CVE-2017-16527 affects the Linux kernel component sound/usb/mixer.c, vulnerable before version 4.13.8. A crafted USB device can trigger a snd_usb_mixer_interrupt use-after-free, causing denial of service or system crash. Exploitation vectors are local to physical USB device interaction. The conne...