CVE-2023-52511

CVE-2023-52511 (Linux kernel, spi sun6i) : The issue stems from RX SPI transfers with DMA enabled where data could be corrupted during DMA to memory when transfers span more than a single byte. The fix reduces the width of each DMA read to the RX FIFO to a single byte, mitigating data loss. Publi...

CVE-2023-52561

CVE-2023-52561 : Linux kernel (arm64) vulnerability affecting DB845c boards with Qualcomm sdm845-db845c DTs. The issue stems from not reserving the cont splash memory region (framebuffer memory used by the bootloader), which could trigger a kernel panic (arm-smmu: Unhandled context fault) on v5.1...

CVE-2023-53008

CVE-2023-53008 (Linux kernel): CIFS session setup fix to prevent memory leaks by freeing cifs_ses::auth_key.response before allocating it. This addresses potential memory leaks during reconnect or mounting. The advisory states the fix in the CIFS session setup path; no exploit specifics are provi...

CVE-2024-26829

CVE-2024-26829 : Linux kernel vulnerability in media: ir_toy where a memleak could occur if the command path and irtoy_tx allocation are used and the command fails; the leak is mitigated by freeing the allocated buffer (buf) when irtoy_command fails. Connected advisories confirm the issue and des...

CVE-2024-26844

Linux kernel vulnerability CVE-2024-26844 was resolved by patching the block layer to address a harmful iov_iter direction issue. A Syzkaller warning reported that an iov_iter could be used in both directions due to a transfer direction SG_DXFER_TO_FROM_DEV, which would copy user buffers into the...

CVE-2024-35940

CVE-2024-35940 affects the Linux kernel. The vulnerability stems from pstore/zone: missing NULL pointer check in psz_kmsg_read after kasprintf() can return NULL on allocation failure. The impact is a potential NULL pointer dereference in kernel code paths involving kasprintf results, with publicl...

CVE-2024-36910

CVE-2024-36910 concerns the Linux kernel’s uio_hv_generic path. The issue arises when CoCo VMs allow set_memory_encrypted() or set_memory_decrypted() to fail, causing the operation to return an error while memory may be shared. The VMBus device UIO driver could then free decrypted/shared pages if...

CVE-2024-40968

CVE-2024-40968 affects the Linux kernel on MIPS/Octeon systems. The issue was that after a PCIe link surprise down, the standard PCIe config interface could be abused to cause a kernel panic (“Data bus error”) when accessing peripheral PCIe devices. The fix adds a PCIe link status check and, when...

CVE-2024-41069

CVE-2024-41069 is a Linux kernel vulnerability in ASoC topology where references to freed memory were fixed. The changelog entries indicate root cause was pointers into topology file contents after parsing and releasing memory; the fix allocates memory via devm_kmemdup() to avoid dereferencing fr...

CVE-2024-42286

CVE-2024-42286 affects the Linux kernel SCSI QLA2XXX driver, where nvme_local_port validation was incorrect. The issue could lead to a NULL pointer dereference and a kernel crash (workqueue qla2xxx, nvme_fc_register_remote). Public docs confirm a resolution via upstream kernel fixes (scsi: qla2xx...

CVE-2024-47662

The CVE-2024-47662 entry concerns the Linux kernel component drm/amd/display (DCN35 DMCUB diagnostics). The issue is that a diagnostic register read was removed to prevent triggering a security violation when DMCUB timeouts occur, blocking Z8 entry. The fix is to stop reading that register from t...

CVE-2024-50091

Summary: CVE-2024-50091 affects the Linux kernel driver path for dm-vdo, where the code may examine a dedupe_context pointer after ownership is lost. The vulnerability arises from not clearing the dedupe_context pointer in data_vio when ownership changes, enabling a potential misuse if the pointe...

CVE-2025-37883

CVE-2025-37883 affects the Linux kernel in s390/sclp code. The fix adds a check for the return value of get_zeroed_page() in sclp_console_init() to prevent null pointer dereference, and introduces a free helper to address a memory leak from the loop allocation. Impact described in the sources inc...

CVE-2025-38177

CVE-2025-38177 affects the Linux kernel’s scheduling subsystem (sch_hfsc). The documented fix makes hfsc_qlen_notify() idempotent to improve safety for callers such as qdisc_tree_reduce_backlog(). The described changes include guarding update_vf() (checking cl_nactive) and safely removing RB node...

CVE-2009-3238

CVE-2009-3238 affects the Linux kernel (pre-2.6.30) where get_random_int in drivers/char/random.c produced insufficiently random numbers, enabling prediction of return values and potentially defeating defenses based on randomness. Several OS advisories (e.g., RHSA-2009:1438, ELSA-2009-1106/1438, ...

CVE-2010-2943

CVE-2010-2943 affects the Linux kernel's XFS implementation up to version 2.6.34, where inode allocation B-trees are not consulted before reading inode buffers. This allows remote authenticated users to read unlinked files or read/overwrite disk blocks that were previously allocated to an unlinke...

CVE-2011-1770

CVE-2011-1770 affects the Linux kernel up to version 2.6.33.14, where an integer underflow in dccp_parse_options (net/dccp/options.c) can be triggered by a DCCP packet with an invalid feature options length, causing a buffer over-read and remote denial of service. The vulnerability is exploitable...

CVE-2012-2123

CVE-2012-2123 affects the Linux kernel up to version 3.3.3, where cap_bprm_set_creds in security/commoncap.c mishandles file-system capabilities (fcaps) for implementing a privileged executable. This can let local users bypass personality restrictions via a crafted application, demonstrated by an...

CVE-2021-47623

CVE-2021-47623 affects the PowerPC path in the Linux kernel where unmapping a fixmap entry via __set_fixmap() (FIXMAP_PAGE_CLEAR) ends up calling map_kernel_page(), which fails if invoked a second time for the same page. The connected documents confirm the root cause in arch/powerpc/mm/pgtable.c ...

CVE-2022-49053

CVE-2022-49053 affects the Linux kernel scsi: target: tcmu component. The vulnerability arises from tcmu_try_get_data_page() returning a data page pointer without properly holding a reference under the cmdr_lock, which can allow the page to be freed by tcmu_blocks_release(), creating a use-after-...

CVE-2022-49103

CVE-2022-49103 is a Linux kernel issue where NFSv4.2 _nfs42_proc_copy_notify() leaks refcounts on two error paths after get_nfs_open_context() is called. The root cause is that refcount balancing is omitted on error returns, leading to leaks of the object ctx. The connected security documents con...

CVE-2022-50211

CVE-2022-50211 : Linux kernel md-raid10 path had a slab-out-of-bounds KASAN warning in raid10_remove_disk during an lvm-based reshape test. The fix verifies that the value “number” is valid to prevent an out-of-bounds read (Read of size 8) from 256-byte kmalloc slab. The issue is tied to KASAN re...

CVE-2023-52508

Technical details about CVE-2023-52508 are not publicly available in the provided Connected documents. Monitor for updates.

CVE-2023-52640

CVE-2023-52640 (Linux kernel ntfs3): The issue is a local, out-of-bounds in ntfs_listxattr where the length of the name must not exceed the allocated EA space. Affected code path is in the ntfs3 filesystem. The connected Astra Linux advisory confirms the same vulnerability and indicates a resolve...

CVE-2023-52642

CVE-2023-52642 concerns a Linux kernel issue in the media: rc subsystem where attaching/detaching BPF programs could require write permission, with an auxiliary CAP_NET_ADMIN requirement. The main impact described across multiple advisories is a locally exploitable condition in kernel space that ...

CVE-2024-26706

CVE-2024-26706 (parisc): Linux kernel vulnerability causing random data corruption in the exception handler for user-space memory access. Root cause is a potential register mismatch for the error code in the fault handler, which could lead to storing -EFAULT into the wrong register and corrupt da...

CVE-2024-41068

CVE-2024-41068 – Linux kernel (s390 sclp_init cleanup) Affected: Linux kernel on s390. Root cause: sclp_init() could fail and leave sclp_state_change_event entries in sclp_reg_list, causing a list_add double add warning if multiple init attempts occur. Impact: local privilege or denial conditions...

CVE-2024-46732

CVE-2024-46732 affects the Linux kernel DRM/AMD display path. The root cause was failing to assign linear_pitch_alignment in VM environments, which could lead to a divide-by-zero error. The fix is to assign linear_pitch_alignment in VM contexts; multiple stable-kernel commits (c984debc133e and re...

CVE-2024-46749

CVE-2024-46749 affects the Linux kernel Bluetooth driver btnxpuart. The vulnerability stems from a NULL pointer dereference in btnxpuart_flush(), which could crash the kernel when removing the driver after a failed or incomplete firmware download. The fix adds a guard before freeing rx->skb in...

CVE-2024-46844

CVE-2024-46844: In the Linux kernel, the setup_one_line() path prints a pointer that could be uninitialized for *error_out, risking a NULL pointer dereference or incorrect prints. The fix initializes *error_out in all control paths, addressing the issue. The CVE is scored locally with high impact...

CVE-2024-58011

The CVE-2024-58011 entry concerns the Linux kernel, specifically the platform/x86 int3472 driver. The root cause is a missing check for adev against NULL when a device may not have an ACPI companion fwnode, which could allow adev to be NULL and lead to a NULL pointer dereference in skl_int3472_ge...

CVE-2025-37807

CVE-2025-37807 is a Linux kernel issue in the BPF percpu hashmap path where a percpu pointer is stored at an 8-byte aligned location only if the key_size rounds up to 8; otherwise a 4-byte aligned location is used, causing kmemleak to miss the pointer and report a leak. The root cause is an align...

CVE-2013-6381

CVE-2013-6381 describes a buffer overflow in the Linux kernel’s qeth_snmp_command function (drivers/s390/net/qeth_core_main.c) up to version 3.12.1, allowing local users to cause a denial of service (and potentially other impact) via an SNMP ioctl with an incompatible length. Connected documents ...

CVE-2014-4027

CVE-2014-4027 affects the Linux kernel prior to 3.14. The flaw is in the rd_build_device_space function (drivers/target/target_core_rd.c), where a data structure is not properly initialized, enabling local users to read sensitive information from ramdisk_mcp memory by abusing access to a SCSI ini...

CVE-2014-4667

CVE-2014-4667 affects the Linux kernel: the sctp_association_free function in net/sctp/associola.c before version 3.15.2 fails to properly manage a specific backlog value, enabling remote attackers to trigger a denial of service (socket outage) via a crafted SCTP packet. The vulnerability is root...

CVE-2015-4002

CVE-2015-4002 affects the OZWPAN driver in the Linux kernel (drivers/staging/ozwpan/ozusbsvc1.c) up to version 4.0.5. The issue is a length-value handling flaw where certain length values are not sufficiently large, enabling remote attackers to cause a denial of service (system crash or large loo...

CVE-2022-48842

CVE-2022-48842 describes a race in the Linux kernel ice driver during interface enslave (bonding). The vulnerability occurs when an auxiliary device is re-created: ice_plug_aux_dev() is invoked from ice_service_task() context, potentially creating an aux device while another thread holds RTNL loc...

CVE-2022-49281

CVE-2022-49281 affects Linux kernel CIFS multiuser handling: each user has a separate tcon and handle for a cached directory, but on unmount the kernel must release the pinned dentry for every tcon rather than only the master tcon. If not, unmount can emit warnings of in-use dentries. The issue i...

CVE-2022-49307

CVE-2022-49307 : In the Linux kernel, the tty synclink_gt driver can trigger a null-pointer dereference in slgt_clean() when alloc_hdlcdev() fails and the module is removed. Affected component: the synclink_gt (tty) HDLC driver path in the kernel. The root cause is a null dereference of info->...

CVE-2023-0030

CVE-2023-0030 describes a use-after-free in the Linux kernel nouveau driver related to triggering a memory overflow that causes nvkm_vma_tail to fail. Affected component: nouveau driver in the Linux kernel; root cause is use-after-free leading to crash and potential local privilege escalation. Pr...

CVE-2023-23001

CVE-2023-23001 affects Linux kernel prior to 5.16.3, where a misinterpretation of regulator_get’s return value in drivers/scsi/ufs/ufs-mediatek.c treats an error pointer as NULL in the error case. This may lead to improper handling in that path. The vulnerability is addressed by the Linux kernel ...

CVE-2023-3108

CVE-2023-3108 affects the Linux kernel, specifically the get_user_pages_fast path in the skcipher_recvmsg interface for symmetric-key ciphers (crypto/algif_skcipher.c). The flaw allows a local user to crash the system. Public details in the provided documents confirm the vulnerable component and ...

CVE-2023-52590

CVE-2023-52590 affects the Linux kernel OCFS2 rename path: when renaming a directory, the code previously touched the renamed directory even if the parent did not change, risking filesystem corruption due to missing appropriate locking. The vulnerability is resolved by upstream kernel fixes that ...

CVE-2023-53101

CVE-2023-53101 affects the Linux kernel ext4 bootloader inode handling. The issue arises when EXT4_IOC_SWAP_BOOT initializes an inode with a non-zero i_size, causing i_disksize to remain non-zero and creating an i_size vs i_disksize inconsistency that can trigger a kernel warning (as shown in the...

CVE-2024-42067

CVE-2024-42067 is a Linux kernel vulnerability where, in the BPF/JIT path, set_memory_rox() may fail and leave memory unprotected. The issue arises because the code does not consistently act on the return value of set_memory_rox() and bpf_jit_binary_lock_ro(), allowing a potential protection gap ...

CVE-2024-46760

CVE-2024-46760 concerns the Linux kernel wifi driver rtw88 (usb) where RX status handling could dereference a NULL pointer if USB replies arrive before the device is fully initialized. The root cause is initiation of USB REQs (usb_submit_urb) before rtw_dev setup completes, allowing races with in...

CVE-2024-46811

CVE-2024-46811 affects the Linux kernel in the DRM/AMD display component. A potential out-of-bounds condition arises when accessing bw_params->clk_table.entries (8 entries) if soc.num_states can reach 40; the issue is fixed by asserting when soc.num_states exceeds 8 during fpu_update_bw_boundi...

CVE-2024-49932

The CVE-2024-49932 issue affects the Linux kernel by mis-handling readahead during Btrfs relocation when RAID stripe trees (RST) are involved. Relocation readahead on the relocation inode can return ENOENT, which is not handled by readahead and can submit invalid reads, triggering a kernel BUG in...

CVE-2010-2954

The CVE-2010-2954 issue affects the Linux kernel IRDA stack: irda_bind in net/irda/af_irda.c may dereference a NULL pointer when irda_open_tsap fails, causing local denial of service (kernel panic) via repeated unsuccessful binds on AF_IRDA (PF_IRDA) sockets. Affected software is the Linux kernel...

CVE-2010-3874

CVE-2010-3874: Heap-based buffer overflow in the bcm_connect function of net/can/bcm.c (Broadcast Manager) in the Linux kernel CAN implementation. Affects 64-bit kernels, before 2.6.36.2, enabling local attackers to cause memory corruption and a denial of service via a connect operation. The conn...