CVE-2022-1353

CVE-2022-1353 — pfkey_register (net/key/af_key.c, Linux kernel) : A local, unprivileged user can gain access to kernel memory due to a flaw in pfkey_register. The vulnerability can lead to a system crash or leakage of internal kernel information. The Connected documents reference Linux kernel adv...

CVE-2021-4002

CVE-2021-4002 describes a memory-leak flaw in the Linux kernel hugetlbfs memory usage caused by mappings being created twice (via shmget) for regions aligned to PUD, enabling a local user to access data that should be protected. The connected documents confirm this vulnerability across multiple L...

CVE-2019-11486

The CVE-2019-11486 entry describes multiple race conditions in the Siemens R3964 line discipline driver (drivers/tty/n_r3964.c) of the Linux kernel, affecting versions before 5.0.8. This yields local exploitation potential with full confidentiality, integrity, and availability impact. A fix is av...

CVE-2021-31916

CVE-2021-31916 is a Linux kernel vulnerability in the device-mapper code (drivers/md/dm-ioctl.c, list_devices) causing an out-of-bounds memory write due to a bound check failure in kernels before 5.12. An attacker with CAP_SYS_ADMIN (local, no user interaction) can trigger a heap overrun, potenti...

CVE-2021-38204

CVE-2021-38204 affects the Linux kernel MAX-3421 host USB controller driver (drivers/usb/host/max3421-hcd.c). The flaw allows a physically proximate attacker to trigger a use-after-free and cause a denial of service (system panic) by removing a MAX-3421 USB device in certain situations. A fix is ...

CVE-2022-1015

CVE-2022-1015: A local out-of-bounds write in Linux kernel nf_tables_api.c (netfilter/nf_tables) is reported. Connected Astra/Linux documents confirm the vulnerability and recommend updating to a later kernel version (e.g., via vendor/KMS updates) to mitigate. Exploitation details are not provide...

CVE-2022-28356

CVE-2022-28356 is a Linux kernel vulnerability describing a refcount leak in net/llc/af_llc.c that affects kernels before 5.17.1. Connected docs confirm the issue and reference a fix in 5.17.1 (and advisories in Debian DSA 5127-1/DSA-5173-1, Astra/Linux bulletins). The CVSS v3.1 base score is 5.5...

CVE-2020-11608

CVE-2020-11608 affects Linux kernel versions prior to 5.6.1. The issue is a NULL pointer dereference in the ov511_mode_init_regs and ov518_mode_init_regs paths of drivers/media/usb/gspca/ov519.c when there are zero USB endpoints, potentially enabling local denial of service. The vulnerability is ...

CVE-2020-25656

CVE-2020-25656 is a Linux kernel use-after-free in the console subsystem related to ioctls KDGKBSENT and KDSKBSENT. A local attacker could read memory out of bounds, impacting data confidentiality. Several advisories (CloudLinux, Amazon Linux, CentOS/RHEL, Cloud Foundry/usn, etc.) reference this ...

CVE-2024-43911

CVE-2024-43911—Linux kernel wifi/mac80211 NULL pointer dereference fix . The vulnerability occurs in the MLD path during band/tx BA session initialization where link_data/link_conf may not point to vif->bss_conf, risking a NULL chan and a kernel crash. The fix adds explicit checks on ht_suppor...

CVE-2020-15780

CVE-2020-15780 – Linux kernel configfs ACPI lockdown bypass Affects: Linux kernel drivers/acpi/acpi_configfs.c prior to 5.7.7 (observed in Unity Linux advisories). Impact: Injection of malicious ACPI tables via configfs could bypass lockdown and secure boot protections. Local attacker privileges ...

CVE-2022-1012

CVE-2022-1012 affects the Linux kernel TCP source port generation (net/ipv4/tcp.c) due to a small table perturb size, enabling information leakage and potential denial of service. Multiple connected advisories reiterate the memory-leak flaw in the TCP source port algorithm and indicate a patched ...

CVE-2010-3873

CVE-2010-3873 affects the Linux kernel X.25 implementation prior to 2.6.36.2. The vulnerability arises from improper parsing of facilities, allowing a remote attacker to trigger heap memory corruption and a kernel panic (partial availability) via malformed X25_FAC_CALLING_AE or X25_FAC_CALLED_AE ...

CVE-2020-25672

The CVE-2020-25672 entry refers to a memory-leak vulnerability in the Linux kernel NFC LLCP path (llcp_sock_connect). The issue is described as a memory leak in the NFC LLCP implementation, which can lead to resource exhaustion and denial of service when non-blocking socket operations trigger the...

CVE-2017-1000410

Summary of CVE-2017-1000410 (Linux kernel info leak) : The vulnerability affects Linux kernel 3.3-rc1 and later in how L2CAP ConfigRequest/ConfigResponse are parsed. A stack variable (struct l2cap_conf_efs efs) is declared uninitialized and, depending on parsing flow and input, can be leaked back...

CVE-2018-20169

CVE-2018-20169 affects the Linux kernel USB subsystem. It stems from missing size checks in __usb_get_extra_descriptor when reading an extra descriptor, potentially enabling denial-of-service (and, per CVSS hints, high impact on confidentiality/integrity/availability). Affected versions: Linux ke...

CVE-2019-18660

CVE-2019-18660 affects: Linux kernel on PowerPC. Summary: Information exposure due to Spectre-RSB mitigation not being active on all applicable CPUs, related to arch/powerpc/kernel/entry_64.S and arch/powerpc/kernel/security.c. Impact: potential partial leakage of sensitive data through side chan...

CVE-2019-19065

CVE-2019-19065 corresponds to a memory leak in the Linux kernel’s sdma_init() (drivers/infiniband/hw/hfi1/sdma.c). The condition is triggered by rhashtable_init() failures during sdma_init(), leading to memory consumption and potential DoS. The root cause is that the call path invokes sdma_init()...

CVE-2023-4273

CVE-2023-4273 affects the Linux kernel exFAT driver. The vulnerability arises from how file name reconstruction copies file name data into a stack variable, enabling a local privileged attacker to overflow the kernel stack. Connected advisories confirm real-world impact and list affected kernels;...

CVE-2019-15214

CVE-2019-15214 refers to a use-after-free in the Linux kernel sound subsystem (before 5.0.10), triggered when a card is disconnected and data structures are deleted too early. Affected components: sound/core/init.c and sound/core/info.c. Impact described in sources: local attacker could potential...

CVE-2019-19537

CVE-2019-19537 is a race condition in the Linux kernel USB stack (drivers/usb/core/file.c and related USB character device layer) triggered by a malicious USB device. The vulnerability could allow a local attacker to cause a denial of service by making the kernel stop responding. Public reference...

CVE-2019-20636

CVE-2019-20636 affects the Linux kernel prior to 5.4.12. The vulnerability is an out-of-bounds write in drivers/input/input.c via a crafted keycode table in input_set_keycode, enabling a local attacker with root privileges to corrupt memory and potentially execute arbitrary code or cause a denial...

CVE-2019-19067

Summary (CVE-2019-19067) Four memory leaks in the acp_hw_init() function of amdgpu/acp.c in the Linux kernel (before 5.3.8) can cause memory consumption and denial of service when mfd_add_hotplug_devices() or pm_genpd_add_device() fail. The issue is reported as exploitable by a local attacker wit...

CVE-2021-45868

CVE-2021-45868: Linux kernel before 5.15.3 does not validate the on-disk quota_tree block number in quota_tree.c, which can lead to a use-after-free in kernel/locking/rwsem.c if a quota file is corrupted. Affected: Linux kernel up to 5.15.2 (and older) with quota support. Impact: potential kernel...

CVE-2020-25645

Summary: CVE-2020-25645 describes a confidentiality flaw in the Linux kernel’s GENEVE tunnel code when IPsec is used to encrypt traffic for the tunnel’s UDP port. In kernels before 5.9-rc7, traffic between two Geneve endpoints may be left unencrypted, allowing an attacker between the endpoints to...

CVE-2021-20317

The connected documents confirm CVE-2021-20317 as a Linux kernel timerqueue race condition: a corrupted timer tree in timerqueue_add can cause wakeups to be missed, enabling a local attacker with special privileges to cause a denial of service (system hang/crash) while the system runs. No explici...

CVE-2020-13974

CVE-2020-13974 affects the Linux kernel in drivers/tty/vt/keyboard.c, caused by a signed integer overflow in k_ascii when invoked repeatedly. Connected docs confirm impacted products include Linux kernel 4.4–5.7.1 and note potential local code execution risk (IBM bulletin and MSRC description) th...

CVE-2022-0168

CVE-2022-0168 is a Linux kernel local DoS in smb2_ioctl_query_info in fs/cifs/smb2ops.c caused by an incorrect return from memdup_user, allowing a privileged (CAP_SYS_ADMIN) local attacker to crash the system. Public details in connected sources reaffirm the same kernel-level flaw affecting CIFS ...

CVE-2023-1998

CVE-2023-1998 affects the Linux kernel. Root cause: when using legacy IBRS, the IBRS bit is cleared on returning to userspace, disabling implicit STIBP and leaving some spectre-BTI protections ineffective; attackers on a local machine could exploit cross-thread branch target injection despite mit...

CVE-2022-25258

The CVE-2022-25258 issue affects the Linux kernel USB Gadget subsystem, specifically drivers/usb/gadget/composite.c, where interface OS descriptor requests with large indices or NULL function pointer handling were not properly validated, enabling memory corruption. It affects kernels before 5.16....

CVE-2024-26587

The CVE-2024-26587 issue in Linux kernel netdevsim could crash when destroying a netdevsim with VFs instantiated. The root cause was that PHC gets initialised in nsim_init_netdevsim() (only called for PF ports), but mock_phc_destroy() was not placed there, leading to a NULL pointer dereference du...

CVE-2021-3483

CVE-2021-3483 refers to a vulnerability in the Linux kernel Nosy driver where a device can be inserted twice into a doubly-linked list, causing a use-after-free when one is removed. This affects versions before 5.12-rc6 and impacts confidentiality, integrity, and availability. The incident is loc...

CVE-2019-19534

Summary: CVE-2019-19534 affects the Linux kernel before 5.3.11, enabling a local info-leak via the Peak USB CAN driver (drivers/net/can/usb/peak_usb/pcan_usb_core.c) when a malicious USB device is connected. The root cause is missing initialization of certain structures in the peak_usb CAN driver...

CVE-2020-36312

CVE-2020-36312 affects the Linux kernel up to version 5.8.9, where in virt/kvm/kvm_main.c a kmalloc failure can trigger a memory leak in kvm_io_bus_unregister_dev. The connected Nessus advisories confirm the issue as a kernel-level leak and reference the fixed patch in 5.8.10 (ChangeLog-5.8.10; c...

CVE-2021-3743

CVE-2021-3743 is an out-of-bounds memory read flaw in the Linux kernel’s Qualcomm IPC router protocol. The issue arises from a missing sanity check, allowing a local attacker to read out-of-bounds kernel memory, potentially causing system crashes or information leakage. Documents consistently des...

CVE-2022-43945

CVE-2022-43945 affects the Linux kernel NFSD: in versions prior to 5.19.17 and 6.0.2, an RPC message over TCP can cause the send buffer to be oversized, leading NFSD to write beyond allocated space and crash (DoS). The issue is caused by combining receive and send buffers into a single page array...

CVE-2018-19854

CVE-2018-19854 affects the Linux kernel pre-4.19.3. In crypto/crypto_user.c (crypto user configuration API), structures copied to userspace are not fully initialized, potentially leaking memory to user processes. This is a regression from CVE-2013-2547 but with easier exploitability, requiring CO...

CVE-2021-38199

CVE-2021-38199 concerns the Linux kernel’s NFSv4 client. The vulnerability arises from incorrect connection-setup ordering in fs/nfs/nfs4client.c, which can be triggered by remote NFSv4 servers during trunking detection, potentially causing a denial of service by hanging mounts. Connected advisor...

CVE-2023-3863

CVE-2023-3863 is a use-after-free vulnerability in the Linux kernel’s NFC stack (nfc_llcp_find_local in net/nfc/llcp_core.c). A local privileged user could trigger memory misuse leading to kernel information leak (impact on confidentiality; I=H, A=H in some advisories) and potential escalation. P...

CVE-2023-52445

The CVE-2023-52445 vulnerability (Linux kernel, media: pvrusb2) stems from a use-after-free when a context is disconnected during module load; a kthread may call pvr2_context_destroy and free the context before usb hub_event notification. The patch adds a sanity check to prevent the invalid read ...

CVE-2026-43500

Summary: CVE-2026-43500 affects the Linux kernel RXRPC path for DATA/RESPONSE packets. The issue occurs when skb fragments are externally owned (e.g., via splice() or frag lists) and the code path decrypts in place, binding frag pages into the AEAD/skcipher SGL. The fix extends the gate to unshar...

CVE-2017-7895

CVE-2017-7895 affects the Linux kernel NFSv2/v3 server (fs/nfsd/nfs3xdr.c, fs/nfsd/nfsxdr.c). A remote attacker can craft requests that bypass end-of-buffer checks, triggering pointer-arithmetic errors or other unspecified impacts. Affected kernels include up to 4.10.13; remediation is to upgrade...

CVE-2022-2078

CVE-2022-2078 is a Linux kernel vulnerability in nft_set_desc_concat_parse() that can trigger a buffer overflow, leading to denial of service and possibly code execution. The linked AstraEU/IBM advisories reiterate the same function and impact, describing local access requirements and potential f...

CVE-2020-11609

CVE-2020-11609 affects the Linux kernel, specifically the stv06xx USB video driver family. The issue arises from mishandling of invalid USB device descriptors in the stv06xx.c and stv06xx_pb0100.c code paths, leading to a NULL pointer dereference. This can allow a locally‑present attacker with ac...

CVE-2021-3744

CVE-2021-3744 is a memory-leak DoS in the Linux kernel: the flaw occurs in the ccp_run_aes_gcm_cmd() function (drivers/crypto/ccp/ccp-ops.c), allowing memory consumption-based denial of service. Connected advisories (Astra Linux and Amazon Linux 2 kernel updates) confirm the same root cause and n...

CVE-2022-24958

CVE-2022-24958 relates to the Linux kernel USB gadget subsystem, specifically drivers/usb/gadget/legacy/inode.c up to version 5.16.8, where dev->buf release is mishandled. The consequence is a use‑after‑free condition in the USB gadget legacy path, which can lead to a local denial of service a...

CVE-2023-6531

CVE-2023-6531 is a Linux kernel use-after-free race in the unix garbage collector where deletion of SKB races with unix_stream_read_generic() on the socket the SKB is queued on. The issue enables local privilege escalation as described in multiple advisories. Public documents consistently identif...

CVE-2019-20812

CVE-2019-20812 affects the Linux kernel prior to 5.4.7. The issue is in the function prb_calc_retire_blk_tmo() in net/packet/af_packet.c , which can cause a denial of service (high CPU usage and soft lockup) in a failure case when using TPACKET_V3 . Impact is localized (local access required) and...

CVE-2022-4543

CVE-2022-4543, described as EntryBleed, is a Linux kernel vulnerability in the Page Table Isolation (KPTI) path that could allow a local attacker to leak the KASLR base address via prefetch side-channels based on TLB timing on Intel CPUs. The connected sources confirm the issue’s existence and it...

CVE-2024-42229

CVE-2024-42229 concerns a Linux kernel cryptography hardening issue in the AEAD/cipher path. The description states that after cryptographic operations, the key buffer must be zeroized, in line with I.G 9.7.B for FIPS 140-3 guidance. The fix involves zeroizing buffers that previously held private...