CVE-2024-42229

CVE-2024-42229 concerns a Linux kernel cryptography hardening issue in the AEAD/cipher path. The description states that after cryptographic operations, the key buffer must be zeroized, in line with I.G 9.7.B for FIPS 140-3 guidance. The fix involves zeroizing buffers that previously held private...

CVE-2019-16994

CVE-2019-16994 affects the Linux kernel prior to 5.0, where a memory leak in sit_init_net() (net/ipv6/sit.c) may occur if register_netdev() fails to register sitn->fb_tunnel_dev, potentially enabling denial of service. Connected advisories (e.g., Unity/UTSA) corroborate the kernel version rang...

CVE-2019-20095

CVE-2019-20095 affects the Linux kernel mwifiex driver (drivers/net/wireless/marvell/mwifiex/cfg80211.c). The description states that certain error-handling paths do not free allocated hostcmd memory, causing a memory leak that can lead to a denial of service. The issue is fixed in kernel version...

CVE-2019-20908

CVE-2019-20908 affects the Linux kernel up to 5.3: in drivers/firmware/efi/efi.c, efivar_ssdt ACPI variable permissions can be too permissive, enabling local attackers to bypass lockdown or secure boot restrictions. Affected: Linux kernels prior to 5.4 (as referenced by Unity Linux and MiracleLin...

CVE-2023-4459

CVE-2023-4459 is rejected/not used; this CVE record does not represent an active vulnerability entry.

CVE-2023-52817

CVE-2023-52817: Linux kernel DRM/AMDGPU fix for a NULL pointer dereference when the smc_rreg pointer is NULL while reading amdgpu_regs_smc (VEGA20). The patch adds a NULL check to amdgpu_debugfs_regs_smc_read path, preventing a kernel NULL pointer dereference when users read /sys/kernel/debug/dri...

CVE-2022-4662

CVE-2022-4662 is a Linux kernel USB core subsystem vulnerability describing improper access control when a user attaches a USB device. A local attacker could trigger a crash by exploiting the flawed USB device handling. The connected IBM bulletin for Spectrum Protect Plus notes a remediation: fix...

CVE-2022-4543

CVE-2022-4543, described as EntryBleed, is a Linux kernel vulnerability in the Page Table Isolation (KPTI) path that could allow a local attacker to leak the KASLR base address via prefetch side-channels based on TLB timing on Intel CPUs. The connected sources confirm the issue’s existence and it...

CVE-2023-0590

CVE-2023-0590: A use-after-free in qdisc_graft (net/sched/sch_api.c) due to a race condition in the Linux kernel can lead to denial of service. The issue is noted in multiple public bulletins (e.g., Astra Linux and IBM QRadar) referencing the same kernel component, with remediation via patch ebda...

CVE-2023-1095

CVE-2023-1095 refers to a Linux kernel issue in the nf_tables_updtable path. When nf_tables_table_enable returns an error, nft_trans_destroy frees the transaction object by calling list_del(), but the transaction was never placed on a list (the list head is zeroed), resulting in a NULL pointer de...

CVE-2023-52443

CVE-2023-52443 affects the Linux kernel AppArmor parser. A packed profile containing a name like ":samba-dcerpcd" can be treated as only a namespace, causing tmpname to be NULL while tmpns remains non-NULL, which leads to a NULL dereference in aa_alloc_profile during unpack_profile/a a_unpack pat...

CVE-2017-10661

CVE-2017-10661 is a race condition in Linux kernel timerfd (fs/timerfd.c) that affects versions before 4.10.15. The flaw arises from improper protection of the might_cancel queue during concurrent timerfd operations, enabling local attackers to cause a denial of service or gain privileges via lis...

CVE-2019-19338

CVE-2019-19338 describes a flaw in the Linux kernel related to the handling of TAA/MDS interactions in TSX-enabled cascaded environments, affecting guests on Cascade Lake hosts with TSX enabled and a host-side fix for CVE-2019-11135 in kernels prior to 5.5. The Connected documents confirm affecte...

CVE-2020-36386

The CVE-2020-36386 vulnerability affects the Linux kernel prior to 5.8.1 and is located in net/bluetooth/hci_event.c (hci_extended_inquiry_result_evt). A slab-out-of-bounds read in this function could disclose information or contribute to a DoS condition. Exploitation requires local access (AV:L,...

CVE-2024-0641

CVE-2024-0641 describes a denial-of-service vulnerability in the Linux kernel’s TIPC subsystem, specifically in tipc_crypto_key_revoke in net/tipc/crypto.c. The flaw allows guests with local user privileges to trigger a deadlock, potentially crashing the system. Connected sources (Astra Linux bul...

CVE-2019-15921

CVE-2019-15921 : In the Linux kernel prior to 5.0.6, a memory leak occurs in genl_register_family() when idr_alloc() fails (net/netlink/genetlink.c). This can lead to resource leakage in affected systems. Root cause is a failure path not freeing partial allocations; impact is limited to memory/re...

CVE-2023-2985

CVE-2023-2985 describes a use-after-free in hfsplus_put_super (fs/hfsplus/super.c) of the Linux kernel, enabling a local attacker to cause a denial of service. Connected documents confirm the flaw and its local impact, but do not provide a vendor-specific fix or patch details. No additional explo...

CVE-2020-36310

CVE-2020-36310 affects the Linux kernel prior to 5.8, specifically arch/x86/kvm/svm/svm.c, where set_memory_region_test can infinite-loop on certain nested page faults (CID-e72436bc3a52). The connected Nessus/OSS documents confirm this exact issue in Unity Linux kernels and Debian/openSUSE adviso...

CVE-2023-52340

The CVE concerns the Linux kernel IPv6 implementation (net/ipv6/route.c) where a max_size threshold can be exhausted, enabling a denial-of-service condition (network is unreachable) when IPv6 packets loop via a raw socket. Affected: Linux kernel versions prior to 6.3. Impact is denial of service ...

CVE-2022-2078

CVE-2022-2078 is a Linux kernel vulnerability in nft_set_desc_concat_parse() that can trigger a buffer overflow, leading to denial of service and possibly code execution. The linked AstraEU/IBM advisories reiterate the same function and impact, describing local access requirements and potential f...

CVE-2021-20321

CVE-2021-20321 is a race-condition vulnerability in the Linux kernel OverlayFS subsystem affecting how file renames are performed, potentially allowing a local attacker to crash the system via OverlayFS misuse. Connected advisories corroborate that the issue resides in OverlayFS file object handl...

CVE-2021-38198

CVE-2021-38198 affects the Linux kernel’s KVM implementation for x86. The vulnerability resides in arch/x86/kvm/mmu/paging_tmpl.h where shadow page access permissions are computed incorrectly, leading to a missing guest protection page fault. This can undermine guest isolation and may enable inst...

CVE-2022-24448

CVE-2022-24448 affects the Linux kernel’s NFS path: in fs/nfs/dir.c, if an application opens a regular file with O_DIRECTORY set, nfs_atomic_open() does a regular lookup and returns uninitialized data in the file descriptor when a regular file is found instead of ENOTDIR. This issue is documented...

CVE-2019-19524

CVE-2019-19524 affects the Linux kernel (before 5.3.12) with a use-after-free in drivers/input/ff-memless.c caused by a malicious USB device, leading to kernel panics. upstream patch available (e.g., ChangeLog-5.3.12) and vendor advisories reference mitigations and fixes. The connected documents ...

CVE-2019-15216

CVE-2019-15216 affects the Linux kernel prior to 5.0.14, with a NULL pointer dereference triggered by a malicious USB device in drivers/usb/misc/yurex.c. Exploitation could cause a denial of service; impact is indicated as HIGH for availability. A fix is available in kernel 5.0.14 and later. Reme...

CVE-2020-12768

CVE-2020-12768 affects the Linux kernel before 5.6, specifically svm_cpu_uninit in arch/x86/kvm/svm.c. The issue is a memory leak that occurs at boot time; third parties dispute its severity, noting the leak is one-time and its size is negligible and not triggerable at will. Public sources in con...

CVE-2023-6270

CVE-2023-6270 affects the Linux kernel AoE (ATA over Ethernet) driver. The flaw is in aoecmd_cfg_pkts(), which improperly updates the refcount of thestruct net_device, allowing a use-after-free when freeing the device and accessing it via the skbtxq queue. This can lead to a denial of service or ...

CVE-2026-43038

CVE-2026-43038 affects the Linux kernel IPv6 ICMP error path. A forged IPv4 ICMP error with CIPSO options could cause ip6_err_gen_icmpv6_unreach() to misinterpret an inner IPv4 inet_skb_parm as an IPv6 parameter, allowing an offset misreference (dsthao) that could enable out-of-bounds or memory a...

CVE-2018-10675

The CVE-2018-10675 issue affects the Linux kernel prior to 4.12.9, where the do_get_mempolicy function in mm/mempolicy.c allows a local attacker to trigger a use-after-free, leading to denial of service and potentially other impact. Affected versions include kernels compiled into Linux-based prod...

CVE-2023-46813

CVE-2023-46813 affects the Linux kernel before 6.5.9. The issue arises from incorrect access checking in the #VC handler and SEV-ES MMIO instruction emulation, allowing a race where an attacker with userspace MMIO access can replace an instruction before the #VC handler reads it. This can lead to...

CVE-2024-53051

CVE-2024-53051 is addressed in the Linux kernel's DRM/I915 driver: a change to intel_hdcp_get_capability adds an encoder check to avoid a NULL pointer dereference when an encoder isn’t initialized during hotplug or suspend/resume. This is the stated fix in connected documentation (drm/i915/hdcp: ...

CVE-2018-10879

CVE-2018-10879 is a Linux kernel ext4 use-after-free vulnerability in ext4_xattr_set_entry. A local attacker can trigger a denial of service or other unspecified impact by renaming a file within a crafted ext4 image. The Connected documents corroborate the issue and list multiple advisories, but ...

CVE-2018-1130

CVE-2018-1130 is a Linux kernel vulnerability: a NULL pointer dereference in dccp_write_xmit() of net/dccp/output.c that can crash the system via crafted system calls, allowing local DoS. The Initial Description notes Linux kernel before 4.16-rc7 as vulnerable; connected advisories (Debian, CentO...

CVE-2019-19966

CVE-2019-19966 affects the Linux kernel prior to 5.1.6, where a use-after-free in cpia2_exit() (drivers/media/usb/cpia2/cpia2_v4l.c) can lead to denial of service. Connected advisories (Unity Linux UTSA-2026-004036 and related Nessus plugins) reference the same issue and note a fix in kernel 5.1....

CVE-2018-10883

The CVE-2018-10883 issue affects the Linux kernel ext4 implementation. A local attacker can cause an out-of-bounds write in jbd2_journal_dirty_metadata() by mounting and operating on a crafted ext4 filesystem image, leading to denial of service and potential system crash. Public sources (USN-3871...

CVE-2018-15594

CVE-2018-15594 affects the Linux kernel arch/x86/paravirt.c, where mishandling of certain indirect calls weakens Spectre-v2 mitigations for paravirtual guests. The issue is addressed in kernel updates up to 4.18.1 (ChangeLog-4.18.1, commit 5800dc5c…). In practice, vulnerable systems running affec...

CVE-2021-20194

CVE-2021-20194 affects Linux kernels 5.2+ when compiled with CONFIG_BPF_SYSCALL=y, CONFIG_BPF=y, CONFIG_CGROUPS=y, CONFIG_CGROUP_BPF=y, and without hardened_usercopy; a BPF execution bug in __cgroup_bpf_run_filter_getsockopt() can cause a heap overflow. Local attackers can potentially cause DoS o...

CVE-2019-15807

CVE-2019-15807 : In the Linux kernel prior to 5.1.13, there is a memory leak in drivers/scsi/libsas/sas_expander.c when SAS expander discovery fails, which can cause a BUG and result in a denial of service. The issue is addressed in kernel 5.1.13 as indicated by ChangeLog-5.1.13. Affected product...

CVE-2019-19543

CVE-2019-19543: In the Linux kernel up to 5.1.5/5.1.6, there is a use-after-free in serial_ir_init_module() in drivers/media/rc/serial_ir.c. A local attacker could trigger this UAF via the serial IR device support, with the impact described as potential denial of service or instability once the f...

CVE-2019-20810

CVE-2019-20810 affects the Linux kernel’s go7007 driver: go7007_snd_init in drivers/media/usb/go7007/snd-go7007.c fails to call snd_card_free on a failure path, causing a memory leak (CID-9453264ef586). Public docs specify this vulnerability exists in kernels before 5.6. The described remediation...

CVE-2020-27815

CVE-2020-27815 is a vulnerability in the Linux kernel JFS filesystem code allowing a local attacker who can set extended attributes to trigger a system panic, memory corruption, or privilege escalation. Publicly documented impact: confidentiality, integrity, and availability may be affected. The ...

CVE-2022-0480

CVE-2022-0480 is a Linux kernel vulnerability in filelock_init (fs/locks.c) where memory exhaustion can occur because memcg does not limit the number of POSIX file locks. Connected documents confirm the issue across multiple Linux distributions (Astra Linux, AlmaLinux, IBM Power PowerVM advisory)...

CVE-2022-2153

CVE-2022-2153 is a vulnerability in the Linux kernel’s KVM related to setting a SynIC IRQ. The issue allows a misbehaving VMM to write to SYNIC/STIMER MSRs, which can cause a NULL pointer dereference and a kernel oops, enabling an unprivileged local attacker on the host to trigger a denial of ser...

CVE-2019-19074

The CVE-2019-19074 entry describes a memory leak in the ath9k_wmi_cmd() function (drivers/net/wireless/ath/ath9k/wmi.c) of the Linux kernel up to version 5.3.11, which can be exploited to cause a denial of service via memory consumption. Root cause is a leak within ath9k_wmi_cmd() that enables me...

CVE-2017-17807

CVE-2017-17807 : Linux kernel KEYS subsystem vulnerability where the request_key() path can bypass access control when adding a key to the current task’s default request-key keyring. An unpatched kernel (pre-4.14.6) could allow a local attacker to craft a sequence of system calls to insert keys i...

CVE-2020-12652

CVE-2020-12652 concerns the Linux kernel. The issue is in the function "__mptctl_ioctl" in drivers/message/fusion/mptctl.c, where an operation may hold an incorrect lock during an ioctl, enabling a local race condition (double fetch). The vulnerability affects Linux kernels prior to 5.4.14. Explo...

CVE-2020-15437

CVE-2020-15437 affects the Linux kernel up to version 5.7.x, where a NULL pointer dereference in drivers/tty/serial/8250/8250_core.c:serial8250_isa_init_ports() can be triggered by an uninitialized p->serial_in, enabling local denial of service. Affected component: kernel serial driver (8250) ...

CVE-2022-3108

CVE-2022-3108 is a Linux kernel vulnerability affecting kernels up to 5.16-rc6 where kfd_parse_subtype_iolink (drivers/gpu/drm/amd/amdkfd/kfd_crat.c) does not check the return value of kmemdup(). The issue is a missing return-value check in memory copy logic, which could enable memory corruption ...

CVE-2023-52429

CVE-2023-52429 affects the Linux kernel driver path drivers/md/dm-table.c. The issue arises in dm_table_create’s alloc_targets path where, due to a missing check for struct dm_ioctl.target_count, it can allocate more than INT_MAX bytes and crash. Public sources in connected Nessus plugins confirm...

CVE-2018-20854

CVE-2018-20854 affects the Linux kernel up to version 4.20, where an off-by-one error in drivers/phy/mscc/phy-ocelot-serdes.c can cause a ctrl->phys out-of-bounds read. The issue is rooted in a boundary condition in that SerDes driver, leading to potential information disclosure or instability...