CVE-2021-47356

CVE-2021-47356 : The issue is in the Linux kernel mISDN driver where its remove path could use-after-free a timer because del_timer() doesn’t wait for the handler to finish. The advisory notes the fix is to call del_timer_sync() to ensure the timer handler has finished and cannot reschedule. Affe...

CVE-2022-49430

The CVE-2022-49430 entry affects the Linux kernel in the gpio_keys controller. The issue arises from canceling a delayed work handle when the gpio_keys module unloads and an interrupt pin is used instead of GPIO; the module initializes delayed work only for GPIO-backed paths and not for interrupt...

CVE-2022-49728

CVE-2022-49728 affects the Linux kernel’s IPv6 path. The issue is a signed integer overflow in __ip6_append_data, triggered by computing [length] that could exceed int range (UBSAN report: 2147479552 + 8567 cannot be represented in type int). The fix implemented across patches changes the [length...

CVE-2023-52593

CVE-2023-52593 concerns a potential NULL pointer dereference in the Linux kernel’s wifi driver wfx. The issue arises because ieee80211_beacon_get() can return NULL, and wfx_set_mfp_ap() did not validate this before inspecting skb data. The fix converts wfx_set_mfp_ap() to return an error code whe...

CVE-2024-41070

The CVE-2024-41070 issue is a use-after-free in KVM on PPC Book3S HV. The code path kvm_spapr_tce_attach_iommu_group() reads stt from tablefd, then fdputs the fd and uses stt after the fd is released, allowing a race that frees stt via release_spapr_tce_table() (RCU) and can lead to UAF even with...

CVE-2024-46751

CVE-2024-46751 affects the Linux kernel btrfs path where a 0 reference count could trigger a BUG_ON() in btrfs_lookup_extent_info(). The vulnerability arises from the incorrect BUG_ON() and is fixed by changing the code to return -EUCLEAN, abort the transaction, and log an error instead. This red...

CVE-2024-47809

CVE-2024-47809 (Linux kernel) fixes a possible NULL pointer dereference in the DLM code path when a lock block (lkb) is created but the lkb_resource is not yet assigned (until attach_lkb via validate_lock_args). The issue could occur when request_lock() calls, potentially exposing a crash; anothe...

CVE-2024-50004

CVE-2024-50004 affects the Linux kernel DRM/AMD display component, specifically the DML2 policy with EnhancedPrefetchScheduleAccelerationFinal for DCN35. The vulnerability stems from a mismatch in the DCN35 DML2 policy that caused bandwidth validation to fail, leading to an unexpected DPP pipe, g...

CVE-2025-37803

CVE-2025-37803 : Linux kernel vulnerability in udmabuf where a buffer size overflow can occur during udmabuf creation. The root cause is improper size calculation, mitigated by casting size_limit_mb to u64 when computing pglimit. Connected advisories corroborate a kernel fix; patches are deployed...

CVE-2010-3432

CVE-2010-3432 affects the Linux kernel SCTP stack: sctp_packet_config in net/sctp/output.c initializes packet data structures too aggressively in kernels before 2.6.35.6, enabling remote attackers to trigger a denial of service (panic) via a specific SCTP traffic sequence. Affected component: ker...

CVE-2010-4655

CVE-2010-4655 affects the Linux kernel’s net/core/ethtool.c, where uninitialized data structures in ethtool ioctl handling could allow a local user with CAP_NET_ADMIN to leak information from kernel heap memory. The initial description specifies the vulnerability exists in kernel builds before 2....

CVE-2011-1746

The CVE affects the Linux kernel prior to 2.6.38.5, specifically the AGP subsystem in drivers/char/agp/generic.c. It is caused by multiple integer overflows in the functions agp_allocate_memory and agp_create_user_memory, allowing local users to trigger buffer overflows and potentially crash the ...

CVE-2022-49158

CVE-2022-49158 affects the Linux kernel SCSI driver qla2xxx. The issue is a warning generated when adisc is flushed, where an error code type did not match the expected type. The fix adds translation between error code types to avoid the warning (no documented exploit). The connected advisories c...

CVE-2022-49750

CVE-2022-49750 affects the Linux kernel CPPC support in cpufreq. The root cause is that the _CPC object fields are unsigned 32-bit values, which could overflow. The fix is to add u64 casts to these values to prevent overflow when used. Documented impact indicates potential availability impact (A)...

CVE-2024-43901

CVE-2024-43901 — Linux kernel DRM/AMD display NULL pointer dereference in DTN log (DCN401) Affected software: Linux kernel with AMD display driver (DCN401). Root cause: reading the DTN log attempts to access the gamut_remap callback when the DCN401 ASIC does not implement it, leading to a NULL po...

CVE-2024-44942

CVE-2024-44942 concerns the Linux kernel’s f2fs inline data handling during garbage collection. According to the connected Astra Linux bulletin, the root cause is that an inline_data inode can be fuzzed, allowing a valid blkaddr in its direct node; when background GC migrates the block, a f2fs_bu...

CVE-2024-47712

CVE-2024-47712 affects the Linux kernel, specifically a WiFi driver issue in wilc1000. The bug occurs in wilc_parse_join_bss_param where the TSF field of the ies structure is accessed after unlocking the RCU read-side critical section, violating RCU usage rules and risking use-after-free or memor...

CVE-2024-49901

CVE-2024-49901 concerns the Linux kernel DRM MSM Adreno path. The root cause was a NULL pointer dereference during cleanup when gpu->pdev may still be NULL during early initialization, including cases where speedbin data exists but opp/hw data in DT is missing. The vulnerability was resolved b...

CVE-2025-23141

CVE-2025-23141: In the Linux kernel KVM x86, acquiring the SRCU lock when retrieving MP state (KVM_GET_MP_STATE) can trigger a nested VM-Exit and potentially access guest memory in edge cases (e.g., L2 with INIT and pending TRIPLE_FAULT). The issue arises when the vCPU handling of MP state intera...

CVE-2010-3850

CVE-2010-3850: In the Linux kernel, the ec_dev_ioctl function in net/econet/af_econet.c did not require CAP_NET_ADMIN, allowing local users to bypass access restrictions and configure econet addresses via an SIOCSIFADDR ioctl. Documented impact is local privilege/unauthorized configuration; fix a...

CVE-2014-3180

CVE-2014-3180 affects the Linux kernel prior to 3.17, specifically the compatibility code path in kernel/compat.c. The vulnerability is an out-of-bounds read where restart_syscall uses uninitialized data when restarting compat_sys_nanosleep. Note: the description states the code path is unreachab...

CVE-2014-4653

Summary (CVE-2014-4653) : The ALSA control implementation in the Linux kernel has a race/lock handling issue in sound/core/control.c. It does not ensure possession of a read/write lock, enabling a local attacker to trigger a denial of service (use-after-free) and to potentially read kernel memory...

CVE-2014-4654

The CVE-2014-4654 issue affects the Linux kernel ALSA control implementation (snd_ctl_elem_add in sound/core/control.c). The root cause is a lack of authorization checks for SNDRV_CTL_IOCTL_ELEM_REPLACE commands, allowing local attackers with access to /dev/snd/controlX to remove kernel controls....

CVE-2017-16529

CVE-2017-16529 affects the Linux kernel’s snd_usb_create_streams in sound/usb/card.c, allowing a local attacker to trigger an out-of-bounds read and system crash via a crafted USB device, with impact described as a denial of service and potentially other effects. The issue is present in kernels p...

CVE-2021-47353

CVE-2021-47353 in the Linux kernel fixes a NULL pointer dereference in the udf_symlink function. The issue arises when udf_tgetblk returns a NULL sb_getblk value and the code uses epos.bh without checking, leading to a possible crash. The fix adds a NULL check for epos.bh before use, mitigating p...

CVE-2022-49156

The CVE-2022-49156 entry corresponds to a Linux kernel vulnerability in scsi: qla2xxx where a call into midlayer (fc_remote_port_delete) could sleep in interrupt context, causing a crash via scheduling while atomic. The fix schedules the call in non-interrupt context to avoid sleeping while atomi...

CVE-2022-49295

This CVE concerns the Linux kernel nbd subsystem. The root cause is a race between module removal and handling of a netlink command in the nbd_cleanup() path, which could lead to a kernel NULL pointer dereference. The issue is mitigated by ensuring that genl_unregister_family() is called before c...

CVE-2022-49343

CVE-2022-49343 (Linux kernel ext4) : A vulnerability in the ext4 filesystem’s h-tree directory structure allows cycles to exist in a directory’s h-tree, which can cause the kernel to access unallocated memory during a node split when traversing blocks. The root cause is that a corrupted filesyste...

CVE-2022-49347

CVE-2022-49347 concerns a Linux kernel issue in ext4 where a bug_on can trigger during ext4_writepages in delay allocation mode when inline data has been converted to an extent. The root cause described across the provided documents is a race: inline data may be destroyed before ext4_writepages r...

CVE-2023-3159

CVE-2023-3159 is a Linux kernel use-after-free in driver/firewire outbound_phy_packet_callback. A local privileged attacker can trigger a UAF when queue_event() fails, as described in the CVE entry and corroborated by connected Astra Linux advisories. Mitigation/remediation is via the vendor/kern...

CVE-2023-52591

CVE-2023-52591 affects the Linux kernel’s reiserfs rename path. The issue arises when renaming a directory where the parent directory does not change; the VFS previously could touch a renamed directory due to lack of proper locking, risking filesystem corruption. The fix adjusts the reiserfs rena...

CVE-2023-52975

CVE-2023-52975 affects the Linux kernel SCSI/iscsi_tcp component. A use-after-free (UAF) can occur during iSCSI session logout if another task accesses the shost ipaddress attribute, triggering KASAN reports. The issue has concrete fixes in the Linux kernel (e.g., commits in the referenced reposi...

CVE-2024-39483

CVE-2024-39483 concerns the Linux kernel KVM: SVM path where a WARN is emitted when requesting an NMI window if NMIs are masked, specifically when the vCPU is already handling an NMI. The issue hinges on the interaction between vNMI and the NMI window/pending/blocked flags: KVM injects one NMI an...

CVE-2024-46777

CVE-2024-46777 concerns the Linux kernel udf component where the vulnerability arises from handling partition lengths that could overflow 32-bit block numbers and unsafe indexing of the block bitmap. The connected sources confirm the issue is fixed in kernel code by rejecting mounting filesystems...

CVE-2024-49868

CVE-2024-49868 : Linux kernel (btrfs) vulnerability causing a NULL pointer dereference in btrfs_update_reloc_root during balance/relocation cleanup. Root cause: a window where fs_info->reloc_ctl can be NULL between set_reloc_contrl() andunset_reloc_control(), leading to dereferencing NULL in c...

CVE-2024-49891

CVE-2024-49891 : In the Linux kernel, the SCSI lpfc path can NULL-deref when an HBA is resetting or handling an errata event due to hdwq pointers that may have been freed. Fixes add NULL pointer checks before dereferencing hdwq pointers in affected routines (e.g., lpfc_sli_flush_io_rings, lpfc_de...

CVE-2024-49914

CVE-2024-49914 affects the Linux kernel DRM/AMD display path. A null pointer dereference could occur in dcn20_program_pipe when pipe_ctx->plane_state is null; a patch adds a guard to verify pipe_ctx->plane_state is non-null before access. This stabilizes display pipe programming and prevent...

CVE-2024-49922

The CVE-2024-49922 entry concerns the Linux kernel DRM AMD display driver. The issue arises from using pointers that may be NULL in a path where they had been validated earlier in the same function, triggering null-pointer handling after use. The vulnerability is mitigated by a fix that adds null...

CVE-2024-50017

CVE-2024-50017 affects the Linux kernel’s identity-mapping code (x86/mm/ident_map). When ident_pud_init() creates identity maps using only GB pages, it can map large address ranges not requested (a 4K request could yield a full 1GB mapping), potentially including BIOS-reserved areas. This enables...

CVE-2024-53187

CVE-2024-53187 affects the Linux kernel io_uring subsystem (io_pin_pages in io_uring/memmap.c). The issue arises from overflow/garbage uaddr handling when deriving size, enabling local attackers to trigger a fault; CVSSv3.1 metrics shown include Local attack, Low complexity, Low privileges, with ...

CVE-2024-56369

CVE-2024-56369 affects the Linux kernel DRM code: drm/modes/drm_mode_vrefresh() attempted to avoid divide-by-zero by checking htotal/vtotal, but can still trigger div-by-zero (vtotalhtotal ...). This can lead to a crash/denial of service (availability impact). The issue is fixed in the upstream k...

CVE-2025-21912

CVE-2025-21912 describes a Linux kernel issue in the Renesas GPIO driver (gpio_rcar) where register access was not properly protected, leading to spurious “Invalid wait context” messages when spinlock debugging is enabled. The patch switches protection to a raw_spinlock to serialize register acce...

CVE-2025-23163

CVE-2025-23163 relates to a Linux kernel issue in VLAN handling: net: vlan: don't propagate flags on open. The root cause is a possible deadlock when opening VLAN devices due to the device instance lock, where a task may try to acquire dev->lock while already holding it (seen in dev_open + dev...

CVE-2010-4081

CVE-2010-4081 affects the Linux kernel (sound/pci/rme9652/hdspm.c: snd_hdspm_hwdep_ioctl). The root cause is failure to initialize a structure, enabling local users to read potentially sensitive kernel stack memory via SNDRV_HDSPM_IOCTL_GET_CONFIG_INFO. Affected: kernel versions prior to 2.6.36-r...

CVE-2014-0069

The CVE-2014-0069 entry affects the Linux kernel (fs/cifs/file.c: cifs_iovec_write) up to version 3.13.5. The vulnerability stems from improper handling of uncached write operations that copy fewer bytes than requested, enabling local users to read kernel memory (information disclosure), cause me...

CVE-2014-4656

CVE-2014-4656 affects the Linux kernel ALSA sound control (sound/core/control.c). The vulnerability arises from multiple integer overflows in ALSA control handling, exploitable by local users via /dev/snd/controlCX to cause a denial of service. The issue is tied to (1) index values in snd_ctl_add...

CVE-2016-2053

CVE-2016-2053: The Linux kernel’s asn1_ber_decoder in lib/asn1_decoder.c is vulnerable to denial-of-service (panic) via a crafted ASN.1 BER file that lacks a public key. The issue occurs in kernel builds prior to 4.3. Consequence is a local DoS without authenticated user interaction. Affected com...

CVE-2018-16597

CVE-2018-16597 affects the Linux kernel prior to version 4.8. The issue is an incorrect access check in overlayfs mounts, which could allow a local attacker to modify or truncate files on the underlying filesystem. The connected Nessus/OpenVAS advisories reference kernel updates to fix this vulne...

CVE-2021-47284

CVE-2021-47284 (Linux kernel) relates to isdn: mISDN: netjet crash in nj_probe. The issue occurs when nj_setup may fail with -EIO, leaving card->irq initialized and >0; a subsequent nj_release frees an IRQ that wasn’t requested. The fix deletes the prior assignment to card->irq and keeps...

CVE-2022-3543

CVE-2022-3543 affects the Linux kernel BPF component: the memory leak occurs in the unix_sock_destructor/unix_release_sock paths in net/unix/af_unix.c. The issue is localized to the BPF code handling UNIX sockets, and the vulnerability can lead to memory consumption/leaf exhaustion. A patch is av...