CVE-2024-35868

CVE-2024-35868 is a Linux kernel vulnerability related to the SMB/CIFS client: it fixes a potential use-after-free in cifs_stats_proc_write() by skipping sessions that are tearing down (status SES_EXITING). The issue is addressed in Linux kernel updates; multiple Red Hat advisories (RHSA-2026:053...

CVE-2024-35875

CVE-2024-35875 concerns the Linux kernel’s x86/coco RNG seeding feature. The affected area requires seeding the RNG with 256 bits of RDRAND data at boot for CoCo systems, because the CoCo threat model assumes an untrusted host and limited entropy sources. If RDRAND is broken or unavailable, the i...

CVE-2024-42105

CVE-2024-42105 – nilfs2 inode range/UAF fixes in Linux kernel : The referenced security issue is mitigated by a patch series for nilfs2 that fixes a use-after-free and several inode-number range problems. Specifically, nilfs->ns_first_ino (the first non-reserved inode) was read from the superb...

CVE-2024-42129

CVE-2024-42129 – Linux kernel (mlxreg LED driver) : The vulnerability arose because leds: mlxreg registered LEDs with devm_led_classdev_register(), but led_classdev_unregister() invoked a brightness callback that used a mutex already destroyed during module removal. The fix uses the devm API for ...

CVE-2024-42147

CVE-2024-42147 affects the Linux kernel crypto: hisilicon/debugfs path. During zip probe, debugfs initialization failure could cause the error branch to release_regs, and the regs uninitialization could release multiple times. The root cause is an uninitialized regs path when debugfs init fails, ...

CVE-2024-43886

The connected Astra Linux bulletin confirms CVE-2024-43886 affects the Linux kernel in the DRM/AMD display path, specifically a risk in resource_log_pipe_topology_update within dc_resource.c. The root cause is a potential null pointer dereference when switching from “Extend” to “Second Display On...

CVE-2024-46802

CVE-2024-46802 affects the Linux kernel’s DRM-AMD display path. The vulnerability is a NULL-dereference in drm/amd/display when validating a stream, caused by missing NULL checks for dc or stream. The fixed code adds a NULL check at the start of dc_validate_stream to prevent invalid memory access...

CVE-2024-46843

CVE-2024-46843 concerns the Linux kernel SCSI/UFS path. The issue arises when removing the ufshcd driver from a UFS device, potentially causing a kernel panic if ufshcd_async_scan fails during ufshcd_probe_hba before a SCSI host is added. The fix is to guarantee the SCSI host is removed only if i...

CVE-2024-46844

CVE-2024-46844: In the Linux kernel, the setup_one_line() path prints a pointer that could be uninitialized for *error_out, risking a NULL pointer dereference or incorrect prints. The fix initializes *error_out in all control paths, addressing the issue. The CVE is scored locally with high impact...

CVE-2024-47665

CVE-2024-47665 concerns the Linux kernel’s i3c: mipi-i3c-hci driver. The bug manifested during IBI DMA setup when the code checked if dma_get_cache_alignment * defined value > 256, and incorrectly BUG_ON()'ed during driver initialization. The vulnerability could cause a local fault due to a fa...

CVE-2024-49906

CVE-2024-49906 has concrete remediation on Root OS (rootio-linux) for Ubuntu 22.04 and Debian 11/12. The OSV entries indicate Root has patched CVE-2024-49906 in the rootio-linux package across multiple distributions with multiple fixed versions available. Ubuntu Security Notices and Debian/Ubuntu...

CVE-2024-53089

CVE-2024-53089 concerns the Linux kernel on LoongArch with KVM. The issue arises from hrtimers that may be canceled/called in contexts that violate PREEMPT_RT rules, after timers are unmarked to expire in soft expiry but then canceled from a preempt-notifier with preemption disabled. The fix make...

CVE-2025-37805

CVE-2025-37805 (Linux kernel) : The issue arises in sound/virtio (virtio_snd) during probe/remove sequences, where uninitialized sub-structures could trigger cancel_work_sync on an uninitialized work_struct, leading to a warning trace in kernel/workqueue.c. The fix (as discussed in the connected ...

CVE-2010-3859

CVE-2010-3859 stems from multiple signedness errors in the Linux kernel’s TIPC implementation, allowing local privilege escalation via a crafted sendmsg that triggers a heap-based buffer overflow in tipc_msg_build and related iovec handling (verify_iovec). Public sources confirm affected historic...

CVE-2011-2918

CVE-2011-2918 affects the Linux kernel perf subsystem (Performance Events). The issue arises in the handling of event overflows for PERF_COUNT_SW_CPU_CLOCK, enabling a local attacker to cause a denial of service (system hang) via a crafted application. Public references in connected advisories co...

CVE-2012-0207

CVE-2012-0207 affects the Linux kernel before 3.2.1, where igmp_heard_query in net/ipv4/igmp.c can be triggered by IGMP packets to cause a divide-by-zero leading to a kernel panic (DoS). The vulnerability is addressed in Linux 3.2.1 (as per ChangeLog-3.2.1). Connected advisories/Nessus entries re...

CVE-2017-18221

CVE-2017-18221 affects the Linux kernel: the __munlock_pagevec function in mm/mlock.c before 4.11.4 can be exploited locally via crafted mlockall/munlockall usage to cause NR_MLOCK accounting corruption and a denial of service. Affected versions are kernel prior to 4.11.4; the issue is mitigated ...

CVE-2022-3606

CVE-2022-3606 affects the Linux kernel libbpf component (function find_prog_by_sec_insn in tools/lib/bpf/libbpf.c). The issue is a NULL pointer dereference; advisories recommend applying a patch. Connected sources confirm this CVE is tracked in VDB-211749 and is fixed in downstream packages (e.g....

CVE-2022-49168

The CVE-2022-49168 entry concerns a Linux kernel bug in the btrfs repair path. The issue occurred when the repair submission failed and the code attempted to clean up the repair bio simultaneously with endio, creating potential use-after-free and NULL dereference conditions due to racing with bio...

CVE-2023-23006

CVE-2023-23006 affects the Linux kernel prior to 5.15.13. The vulnerability lies in drivers/net/ethernet/mellanox/mlx5/core/steering/dr_domain.c, which misinterprets the return value of mlx5_get_uars_page in error cases (expects NULL but receives an error pointer). This can lead to a faulty NULL-...

CVE-2023-4458

CVE-2023-4458 affects the Linux kernel ksmbd module, specifically in the parsing of extended attributes. The flaw stems from insufficient validation of user-supplied data, allowing an out-of-bounds read (read past the end of an allocated buffer) and enabling information disclosure on affected sys...

CVE-2023-52640

CVE-2023-52640 (Linux kernel ntfs3): The issue is a local, out-of-bounds in ntfs_listxattr where the length of the name must not exceed the allocated EA space. Affected code path is in the ntfs3 filesystem. The connected Astra Linux advisory confirms the same vulnerability and indicates a resolve...

CVE-2023-53145

In the Linux kernel, the Bluetooth driver subsystem btsdio is affected by a use-after-free race in btsdio_remove. In btsdio_probe, data->work is bound to btsdio_work and started via btsdio_send_frame. If btsdio_remove executes while the work is unfinished, hdev could be freed but still used by...

CVE-2023-6200

The CVE describes a race condition in the Linux kernel that allows an unauthenticated attacker on an adjacent network to send ICMPv6 router advertisement packets to achieve arbitrary code execution. The impact is documented as high (C/H/I/A) with an adjacent network location and no user interacti...

CVE-2024-36969

The CVE-2024-36969 issue affects the Linux kernel drm/amd/display component, specifically a division-by-zero in setup_dsc_config when slice_height is 0, which could crash the amdgpu driver and reboot the system. The patch introduces a guard to avoid dividing by zero (dc_dsc.c:1053; dc_dsc_compute...

CVE-2024-42074

CVE-2024-42074 pertains to the Linux kernel’s ASoC AMD ACP driver. When the acp platform device creation is skipped, chip->chip_pdev can be NULL, leading to a potential NULL pointer dereference in snd_acp_resume. The connected Nessus/NASL entries confirm the root cause and describe the fix: ad...

CVE-2024-46726

CVE-2024-46726 (Linux kernel, drm/amd/display) fixes overflow/overrun in index calculations (vmid0p72_idx, vnom0p8_idx, vmax0p9_idx) to prevent array size overflow. The patch resolves 3 OVERRUNs and 1 INTEGER_OVERFLOW reported by Coverity; affected AMD display path. Remediation is to apply the up...

CVE-2024-46775

CVE-2024-46775 affects the Linux kernel DRM AMD display path (drm/amd/display). Root cause: function return values were not checked before their results were used by subsequent calls. The patch resolves 4 CHECKED_RETURN issues reported by Coverity and fixes the vulnerability by validating return ...

CVE-2024-46841

Technical details about CVE-2024-46841 are not publicly available in the provided connected documents. Monitor for updates from official advisories and vendor pages.

CVE-2024-48875

In the Linux kernel, CVE-2024-48875 is described as a fix for a btrfs issue: don’t take the dev_replace rwsem if the task already holds it. The root cause is a possible deadlock when btrfs_dev_replace flow takes the same rwsem twice during operations like btrfs_map_block, as demonstrated by a loc...

CVE-2024-50111

CVE-2024-50111 affects LoongArch Linux kernel where unaligned access can trigger in irq-enabled context; do_ale() may call get_user(), causing sleep and BUG: sleeping function called from invalid context. The fix described in the unpatched Nessus entry is to enable IRQ handling for unaligned acce...

CVE-2025-22026

CVE-2025-22026 (Linux kernel) affects nfsd in the kernel. The issue: nfsd_proc_stat_init() ignored the return value of svc_proc_register(), so if procfile creation fails the kernel may WARN later during removal. The fix updates nfsd_proc_stat_init() to return the same pointer type as svc_proc_reg...

CVE-2014-2706

CVE-2014-2706 describes a race condition in the Linux kernel’s mac80211 subsystem (sta_info.c and tx.c) that, when handling network traffic in conjunction with the WLAN_STA_PS_STA (power-save) state, can cause a remote denial of service (system crash). The issue affects kernel versions prior to 3...

CVE-2017-18079

CVE-2017-18079 affects the Linux kernel, state: a NULL pointer dereference in drivers/input/serio/i8042.c can crash the system because the port->exists value can change after validation, leading to a denial of service or potentially other impact. Public docs specify the vulnerable condition is...

CVE-2021-4148

CVE-2021-4148 : Linux kernel vulnerability in the function block_invalidatepage (fs/buffer.c) where a missing sanity check can allow a local user with privileges to cause a denial of service. The connected advisories corroborate a local DoS impact but do not provide vendor-specific patch details ...

CVE-2021-47498

The Linux kernel is affected by a vulnerability where the device mapper (DM) fails to prevent requests from being queued to blk-mq during a DM suspend operation. This occurs because blk-mq 's unquiesce can be triggered by external events, such as elevator switches or updates to nr_requests , duri...

CVE-2022-48789

In CVE-2022-48789, the Linux kernel nvme-tcp transport error_recovery work contained a use-after-free risk caused by a race between submit_async_event and the error_recovery handler when destroying the admin queue. The fix requires flushing async_event_work before continuing to destroy the admin ...

CVE-2022-49152

CVE-2022-49152 affects the Linux kernel XArray feature, specifically the xas_create_range() path. When an existing entry with order >= XA_CHUNK_SHIFT is present, xas_create_range() can misinterpret it as a node and dereference xa_node->parent, potentially causing a crash (general protection...

CVE-2023-52569

CVE-2023-52569 affects the Linux kernel's btrfs code path. The patch removes a BUG() on failure to insert a delayed dir index item and adds proper error handling, but it does not fix the underlying issue of using the same index number for different items, per the provided documentation. No exploi...

CVE-2023-53100

The CVE-2023-53100 entry relates to the Linux kernel ext4 code path. The issue was triggered during inline data handling when adding xattrs to an inode: after ext4_xattr_shift_entries(), i_inline_off can be incorrectly updated (reported as changing to 176), which can cause ext4_update_inline_dir/...

CVE-2024-26647

CVE-2024-26647 affects the Linux kernel DRM/AMD display component. In link_set_dsc_pps_packet(), a dereference of struct display_stream_compressor *dsc could occur (dsc->ctx->logger) before a NULL pointer check, enabling a potential crash when the dsc pointer is NULL. The issue has been fix...

CVE-2024-35922

The CVE-2024-35922 issue is a Linux kernel vulnerability in fbmon/fb_videomode_from_videomode() where htotal * vtotal can overflow to zero, risking division by zero. The root cause is overflow during videomode computation; the fix mirrors fb_var_to_videomode() by preventing division by zero. Affe...

CVE-2024-46755

CVE-2024-46755 concerns the Linux kernel wifi mwifiex driver. The issue arises from mwifiex_get_priv_by_id() returning priv pointers for a given bss_num/bss_type without verifying that the priv is currently in use; unused priv pointers lack an attached wiphy, which can lead to a NULL pointer dere...

CVE-2024-46834

The CVE-2024-46834 entry concerns a Linux kernel vulnerability in ethtool handling of channel indirection tables. If the driver cannot fetch the indirection table or allocate memory, the core max-channel check can be skipped, which may allow indirection tables to contain out-of-bounds channel IDs...

CVE-2024-49918

CVE-2024-49918 relates to a Linux kernel issue in the AMD display path (drm/amd/display) where dcn32_acquire_idle_pipe_for_head_pipe_in_layer could dereference a null head_pipe. The fix adds a null check and returns NULL if head_pipe is null, preventing a potential NPE. Connected sources corrobor...

CVE-2025-22025

CVE-2025-22025: In the Linux kernel NFS server (nfsd), if nfsd4_run_cb fails while queuing a dl_recall, the incremented dl_stid reference is not decremented, causing a potential dl_stid leak. The issue is addressed by checking the result of nfsd4_run_cb and, on failure, calling nfs4_put_stid to p...

CVE-2010-3296

CVE-2010-3296 affects the Linux kernel driver cxgb3 (cxgb_extension_ioctl in drivers/net/cxgb3/cxgb3_main.c). The advisory states that the code path in kernels up to 2.6.36-rc5 does not properly initialize a structure member, allowing a local user to potentially read sensitive data from kernel st...

CVE-2011-1013

CVE-2011-1013 is an integer signedness error in the drm_modeset_ctl ioctl handling that affects the Linux kernel prior to 2.6.38 and OpenBSD prior to 4.9, allowing local users to trigger out-of-bounds writes and potentially crash the system or cause other impact via a crafted vb_num in an ioctl. ...

CVE-2015-3290

The connected Astra Linux bulletin describes CVE-2015-3290 in the Linux kernel context and confirms the vulnerability fix: limiting the Haswell performance counter period to mitigate NMI-related privilege escalation. It documents that the issue stemmed from a too-small initial frequency-estimatio...

CVE-2022-48853

The CVE-2022-48853 entry concerns a Linux kernel swiotlb information leak when using DMA_FROM_DEVICE during SCSI SG I/O. The description explains a multi-step scenario where a bounce buffer and swiotlb can expose non-zero data from user space, potentially leaking content when the TUR (Test Unit R...