CVE-2022-48923

The CVE-2022-48923 entry concerns a Linux kernel vulnerability in the btrfs code path, specifically for LZO compression. The root cause is that a compressed length could be corrupted to exceed allocated memory, allowing memcpy to write beyond bounds in copy_compressed_segment. This can cause a ke...

CVE-2022-49054

CVE-2022-49054 concerns the Linux kernel hv/vmbus subsystem. The documented fix deactivates the sysctl_record_panic_msg by default in isolated Hyper-V guests, to prevent hv_panic_page from leaking guest-sensitive information. It also notes that hv_panic_page may contain sensitive data and should ...

CVE-2022-49075

CVE-2022-49075 is a Linux kernel issue in btrfs where qgroup reserve tracking used an unsigned int for bytes_changed, allowing overflow when fallocate exceeds 4 GiB. This caused incorrect qgroup accounting and could breach the qgroup limit. The published fixes switch bytes_changed to a 64-bit fie...

CVE-2022-49166

Summary (grounded on provided documents): In the Linux kernel, a vulnerability related to NTFS mounting was addressed. Specifically, ntfs_read_inode_mount can call ntfs_malloc_nofs with a zero allocation size, triggering a BUG in the internal allocator (__ntfs_malloc). The fix implemented is a sa...

CVE-2022-49761

CVE-2022-49761 - Linux kernel (btrfs) details Affected: Linux kernel with btrfs subsystem; function run_one_delayed_ref() path in the delayed refs workflow. Root cause/what changed: The patch changes error reporting from btrfs_debug() to btrfs_err(), adds extra context (logical bytenr, num_bytes,...

CVE-2022-49764

CVE-2022-49764 (Linux kernel) : A vulnerability in BPF raw tracepoint handling allows a BPF program to recursion-trigget the same tracepoint via bpf_trace_printk, causing spinlock contention paths to recurse and potentially affecting tracing by taking the slow path. Root cause: a BPF program atta...

CVE-2023-52736

The CVE-2023-52736 entry concerns the Linux kernel ALSA HDA stack. The vulnerability arises from how ASoC codec drivers reuse hda_codec_driver_probe/remove() from hda_bind.c and how snd_hda_codec_cleanup_for_unbind() unsets the preset. Preset is assigned once during device/driver matching, but AS...

CVE-2023-52912

CVE-2023-52912 relates to the Linux kernel’s DRM amdgpu subsystem. The issue arises during unloading of amdgpu where a bug in drm_buddy_free_block can trigger a kernel BUG and invalid opcode, as shown in the stack trace and kernel log snippet. The impact is a potentially local disruption of a sys...

CVE-2011-1012

CVE-2011-1012 affects the Linux kernel, in particular the LDM partition handling. The flaw lies in ldm_parse_vmdb in fs/partitions/ldm.c, which does not validate the VBLK size in the VMDB structure of an LDM partition table. A crafted partition table can trigger a divide-by-zero and cause a kerne...

CVE-2021-47343

CVE-2021-47343 concerns the Linux kernel dm_btree_remove path (drivers/md/persistent-data/dm-btree-remove.c). In remove_raw(), IO read errors can leave shadow_spine.root uninitialized and still be assigned to new_root at function end, and for dm-thin, pmd->details_root/details_root can become ...

CVE-2021-47577

CVE-2021-47577 affects the Linux kernel io-wq subsystem. A race between creating a new worker task_work and wq exit could allow a creation task_work to be added after exit has begun, causing pending work cancellation to not cover that new task. The description states the fix is to check the EXIT ...

CVE-2022-2785

CVE-2022-2785 affects the Linux kernel BPF subsystem. The vulnerability arises because constants used to fill pointers in structs passed to bpf_sys_bpf are not verified, allowing an attacker with CAP_BPF to read memory anywhere on the system. Affected systems can face arbitrary memory reads, with...

CVE-2022-48920

CVE-2022-48920: In the Linux kernel, the btrfs flushoncommit path could trigger a warning in __writeback_inodes_sb_nr() during transaction commits. The fix avoids deadlock risks by replacing writeback_inodes_sb() with try_to_writeback_inodes_sb(), which reads sb->s_umount and only calls writeb...

CVE-2022-49880

CVE-2022-49880 : Linux kernel ext4 inline-data migration may trigger a reliable warning in ext4_da_release_space when a writeback path releases space with to_free=1 but i_reserved_data_blocks==0. The issue is resolved by forbidding inodes with inline data from migration (ext4 inline data handling...

CVE-2022-49887

The CVE-2022-49887 entry relates to the Linux kernel: the media/ Meson vdec code could leak a refcount due to a failed vdec_probe or during vdec_remove, and requires v4l2_device_unregister to decrement the refcount obtained from v4l2_device_register. The vulnerability affects kernel components ha...

CVE-2022-49993

CVE-2022-49993 affects the Linux kernel loop subsystem. The vulnerability stems from overflow when configuring a loop via ioctl: the code copies info->lo_offset (loop_info64) into lo_offset (loff_t), enabling an overflow that can trigger a warning in iomap_iter() (via iomap_iter_done). The iss...

CVE-2022-50010

CVE-2022-50010 affects the Linux kernel’s fbdev i740fb driver. If a user space ioctl supplies a pixclock value causing the argument to i740_calc_vclk() to be less than I740_RFREQ_FIX, a divide-by-zero can occur in p_best calculation (drivers/video/fbdev/i740fb.c:353). The vulnerability arises bec...

CVE-2022-50028

CVE-2022-50028 affects gadgetfs ep_io in the Linux kernel (drivers/usb/gadget/legacy/inode.c). After usb_ep_queue(), if wait_for_completion_interruptible() is interrupted, code must wait for IRQ completion; otherwise epio_complete() may corrupt the stack. The vulnerability is fixed in the Linux k...

CVE-2022-50032

CVE-2022-50032 concerns the Linux kernel USB Renesas driver fix for a refcount leak. The issue arises in usbhs_rza1_hardware_init() where of_find_node_by_name() returns a node pointer with an elevated refcount; the correct handling is to call of_node_put() when the node is no longer needed. The c...

CVE-2023-52506

CVE-2023-52506 affects the Linux kernel on LoongArch. Root cause: early memblock_reserve() during memblock_init sets node id to MAX_NUMNODES, causing NODE_DATA(nid) NULL dereferences in reserve_bootmem_region() and chain calls, triggering a kernel panic on boot when DEFERRED_STRUCT_PAGE_INIT is e...

CVE-2023-52705

CVE-2023-52705 is a kernel vulnerability affecting the nilfs2 filesystem code in Linux. The issue is an underflow/incorrect boundary calculation in NILFS_SB2_OFFSET_BYTES that computes the position of the second superblock, which can underflow when the device size is smaller than 4096 bytes. This...

CVE-2024-26765

CVE-2024-26765 concerns the Linux kernel on LoongArch. The issue arises when hotplugging nonboot CPUs: IRQs are disabled before calling init_fn(), intended to silence warnings and avoid interrupts, but this is tied to the rcu_cpu_starting warning path (CPU: 1, pid: 0). The result is a race where ...

CVE-2024-50277

In CVE-2024-50277, the Linux kernel fixes a crash in the device-mapper path when blk_alloc_disk fails. Specifically, if blk_alloc_disk returns an error, md->disk is set to an error value and cleanup_mapped_device may still access it, leading to a crash at md->disk->private_data = NULL. T...

CVE-2025-38406

CVE-2025-38406 affects the Linux kernel wifi driver ath6kl: the vulnerability originates from an unnecessary WARN_ON() when firmware input is bad. The description clarifies that bad firmware input is unrelated to the driver stack and does not constitute an exploitable condition; the fix instead p...

CVE-2007-6762

The vulnerability is in the Linux kernel before 2.6.20, caused by an off-by-one error in net/netlabel/netlabel_cipso_v4.c that can overflow the doi_def->tags[] array. Affected component is the kernel’s netlabel CipSO v4 handling. The provided connected sources confirm the off-by-one overflow c...

CVE-2009-3725

CVE-2009-3725 affects the Linux kernel prior to 2.6.31.5 and relates to the connector layer not requiring CAP_SYS_ADMIN for certain interactions with uvesafb, pohmelfs, dst, or dm, enabling local users to bypass access restrictions and escalate privileges. Public references corroborate a local-pr...

CVE-2010-4563

The Connected documents provide concrete detail for CVE-2010-4563: when the Linux kernel handles IPv6, an attacker can probe for sniffing by sending an ICMPv6 Echo Request to a multicast address and observing whether an Echo Reply is returned (as shown by thcping). This affects the Linux kernel’s...

CVE-2011-2928

CVE-2011-2928 affects the Linux kernel prior to 3.1-rc3, specifically the befs_follow_link function in fs/befs/linuxvfs.c. The flaw does not validate the length attribute of long symlinks on a malformed Be filesystem, enabling a local attacker to trigger an incorrect pointer dereference and OOPS,...

CVE-2013-2128

The CVE-2013-2128 issue affects the Linux kernel’s tcp_read_sock() in net/ipv4/tcp.c where skb consumption is not properly managed. This can allow local attackers to trigger a denial of service (system crash) by issuing a crafted splice() on a TCP socket. Evidence appears across multiple advisori...

CVE-2021-47206

CVE-2021-47206 is a Linux kernel vulnerability in the usb: host: ohci-tmio path. The root cause is a missing check of the return value from platform_get_resource(), which can lead to a NULL pointer dereference and a potential crash (availability impact). The vulnerability is resolved in the kerne...

CVE-2021-47334

CVE-2021-47334 affects the Linux kernel’s misc/libmasm/module in the ibmasm_init_one path. The issue is two use-after-free defects arising from ibmasm_init_one/ibmasm_init_remote_input_dev: mouse_dev and keybd_dev allocated by input_allocate_device() are freed in err_free_devices, then ibmasm_fre...

CVE-2022-48849

CVE-2022-48849 affects the Linux kernel (drm/amdgpu) where tiling flag checks were bypassed in the virtual display path. The issue arises in framebuffer initialization when VKMS virtual display is enabled and VKMS does not support FB modifiers, potentially allowing a local attacker to bypass expe...

CVE-2022-48902

CVE-2022-48902 is a Linux kernel issue in the btrfs extent_io path where a warned-on condition could occur when a page with PageError is encountered during extent buffer ops. The vulnerability arises from using assert_eb_page_uptodate() on non-uptodate pages, potentially exposing instability warn...

CVE-2022-49324

CVE-2022-49324 affects the Linux kernel via a refcount leak in the mips CPC default physical base. The root cause is a missing of_node_put() to release a refcount incremented by of_find_compatible_node(), leading to a leak. The primary fix is to add the missing of_node_put() to release the refcou...

CVE-2022-49835

CVE-2022-49835 relates to the Linux kernel ALSA: hda subsystem where memory leaks could occur in add_widget_node due to how kobject_add allocates kobject->name and may not free the kobject on error. The root cause is failure to recycle resources when kobject_add fails, leading to a potential m...

CVE-2023-52828

CVE-2023-52828 (Linux kernel) : The vulnerability arises from BPF verifier handling after a bpf_throw call. Because bpf_throw is the first noreturn call in the verifier, dead code elimination causes subsequent instructions to be treated as unseen, which can affect stack unwinding when a program t...

CVE-2010-4805

CVE-2010-4805 affects the Linux kernel socket backlog handling in net/core/sock.c prior to 2.6.35, allowing remote DoS via large traffic (backlog management related to sk_add_backlog and sk_rmem_alloc). The entry notes this vulnerability exists due to an incomplete fix for CVE-2010-4251. The conn...

CVE-2014-7283

The vulnerability CVE-2014-7283 affects the Linux kernel xfs implementation: xfs_da3_fixhashpath in fs/xfs/xfs_da_btree.c fails to compare btree hash values correctly, before 3.14.2. This can allow local users to trigger filesystem corruption and OOPs/panic via operations on directories with hash...

CVE-2017-18549

CVE-2017-18549 affects the Linux kernel component drivers/scsi/aacraid/commctrl.c in versions prior to 4.13. The root cause is that aac_send_raw_srb does not initialize the reply structure, which can lead to exposure of kernel stack memory. The connected Nessus entries (Unity Linux advisories) re...

CVE-2021-47083

CVE-2021-47083 affects the Linux kernel’s pinctrl Mediatek code: when the eint virtual EINT number exceeds the GPIO count, it can trigger a global-out-of-bounds write to desc[eint_n]. The issue was fixed in the mediatek pinctrl path (pinctrl: mediatek: fix global-out-of-bounds issue). No exploit ...

CVE-2021-47308

CVE-2021-47308 affects the Linux kernel SCSI libfc component, specifically fc_rport_prli_resp(), where an array index out-of-bounds condition was fixed. The vulnerability has a High impact (CVSS 3.1 base score 8.8) with adjacent/adversarial access, no user interaction, and requires no privileges....

CVE-2021-47330

CVE-2021-47330 affects the Linux kernel, specifically the tty: serial: 8250 driver. The vulnerability arises from a memory leak in error handling: in the probe path, if the final serial_config() call fails, the allocated info structure is not freed. A fix was added to provide a proper resource ha...

CVE-2022-49108

CVE-2022-49108 concerns the Linux kernel Mediatek clock driver, where memory leaks occur on probe due to not freeing memory in error handling paths. The vulnerability is resolved by handling error branches to free allocated memory, addressing a resource leak (Coverity ID 1491825). Connected sourc...

CVE-2022-49682

CVE-2022-49682 is a Linux kernel issue: in xtensa, a refcount leak bug in time.c occurred where calibrate_ccount() could return a node with an incremented refcount. The fix requires using of_node_put() when the node is no longer used (to avoid a leak). Connected advisories (Astra Linux and Unity/...

CVE-2022-49767

CVE-2022-49767 affects the Linux kernel 9p/trans_fd path. The issue arises because p9_mux_poll_stop() could fail to interrupt blocking kernel_read()/kernel_write() on pipes due to fd_open() not setting O_NONBLOCK, whereas socket paths already use O_NONBLOCK. A minimal patch makes O_NONBLOCK alway...

CVE-2022-49771

CVE-2022-49771 affects the Linux kernel’s dm-thin/ioctl path. The vulnerability arises when __list_versions uses dm_target_iterate twice under race conditions between the first size estimation and the second information retrieval, allowing module loading to occur between the two calls. The second...

CVE-2023-23002

The CVE-2023-23002 issue affects Linux kernels before 5.16.3, where drivers/bluetooth/hci_qca.c misinterprets the return value of devm_gpiod_get_index_optional (treats an error pointer as NULL in error cases). This misinterpretation can lead to incorrect error handling, contributing to an availab...

CVE-2024-26911

The CVE-2024-26911 entry refers to the Linux kernel DRM buddy component, specifically alloc_range() in drivers/gpu/drm/drm_buddy.c. The root cause was that, in corner cases where required memory blocks couldn’t be found, alloc_range() sometimes returned SUCCESS instead of signaling failure. The d...

CVE-2010-3448

CVE-2010-3448 affects the Linux kernel’s ThinkPad ThinkPad ACPI driver (drivers/platform/x86/thinkpad_acpi.c) on ThinkPad systems using X.Org prior to 2.6.34. The issue allows a local attacker to access and manipulate the video output control state without proper restriction, enabling a denial of...

CVE-2011-1019

The CVE-2011-1019 issue affects the Linux kernel up to version 2.6.38, where dev_load in net/core/dev.c allows local users with CAP_NET_ADMIN to bypass CAP_SYS_MODULE and load arbitrary modules. This constitutes a local privilege escalation. Remediation is to upgrade to kernel 2.6.38 or newer (as...