CVE-2024-43907

CVE-2024-43907 relates to Linux kernel: in the DRM AMDGPU driver, a null pointer could be dereferenced in drm/amdgpu/pm during apply_state_adjust_rules. The fix adds a pointer check to avoid dereferencing NULL, addressing a potential crash. The initial description shows a concrete fix for null de...

CVE-2019-15218

CVE-2019-15218: Linux kernel before 5.1.8 contains a NULL pointer dereference in drivers/media/usb/siano/smsusb.c triggered by a malicious USB device. Affected is the Linux kernel version range up to 5.1.7; exploitation could lead to a crash or denial of service on affected systems. Remediation i...

CVE-2019-15924

CVE-2019-15924 : The issue is in the Linux kernel before 5.0.11, where fm10k_init_module in drivers/net/ethernet/intel/fm10k/fm10k_main.c can dereference NULL when an alloc_workqueue failure occurs due to missing -ENOMEM handling. This can lead to a crash or potential denial of service on affecte...

CVE-2022-41858

The CVE-2022-41858 entry concerns a NULL pointer dereference in the Linux kernel slip driver path, specifically detaching in sl_tx_timeout (drivers/net/slip/slip.c). The connected Astra Linux bulletin reiterates the same description for the Linux kernel 5.x variant, confirming the vulnerability i...

CVE-2023-39198

CVE-2023-39198 describes a race condition in the Linux kernel’s QXL driver. The qxl_mode_dumb_create() path dereferences the qxl_gem_object_create_with_handle() result while the handle is the sole reference, enabling a caller to guess the handle value and trigger a use-after-free. This can lead t...

CVE-2024-25744

In CVE-2024-25744, Linux kernel versions before 6.6.7 are vulnerable: an untrusted VMM can trigger int80 syscall handling at any point due to code in arch/x86/coco/tdx/tdx.c and arch/x86/mm/mem_encrypt_amd.c. This is a local-privilege impact condition as described by the advisory, with a base sco...

CVE-2021-28972

CVE-2021-28972 affects the Linux kernel RPA PCI Hotplug driver (drivers/pci/hotplug/rpadlpar_sysfs.c) up to version 5.11.8. It is a user‑tolerable buffer overflow caused by improper handling of drc_name termination in add_slot_store/remove_slot_store, allowing userspace to write into the kernel s...

CVE-2022-26490

CVE-2022-26490 affects the Linux kernel ST21NFCA NFC driver (st21nfca_connectivity_event_received in drivers/nfc/st21nfca/se.c) up to and including kernel versions prior to the patched releases. The issue is a buffer overflow caused by untrusted length parameters (EVT_TRANSACTION), which can lead...

CVE-2017-7184

The CVE-2017-7184 issue affects the Linux kernel xfrm subsystem, where xfrm_replay_verify_len in net/xfrm/xfrm_user.c up to 4.10.6 does not validate certain size data after an XFRM_MSG_NEWAE update, enabling a local attacker with CAP_NET_ADMIN to cause a heap-based out-of-bounds access and potent...

CVE-2021-3753

CVE-2021-3753 describes a race in the Linux kernel’s vt_k_ioctl() (vt_ioctl.c) that may cause an out-of-bounds read in vt as vc_mode write access is not protected by a lock. Impact is listed as data confidentiality; exploitation details are not provided in the supplied documents. Connected source...

CVE-2021-38205

CVE-2021-38205 affects the xilinx_emaclite driver in the Linux kernel. The vulnerability arises because the driver prints a real IOMEM/kernel pointer, which can aid attackers in bypassing ASLR and facilitate information disclosure. Affected state is Linux kernels before 5.13.3; remediation is to ...

CVE-2023-6531

CVE-2023-6531 is a Linux kernel use-after-free race in the unix garbage collector where deletion of SKB races with unix_stream_read_generic() on the socket the SKB is queued on. The issue enables local privilege escalation as described in multiple advisories. Public documents consistently identif...

CVE-2024-43909

Technical details about CVE-2024-43909 (AMDGPU SMU7 null pointer dereference) are not provided in the connected documents. The initial description notes a fix but lacks vendor/product/version specifics or remediation steps beyond general description. Monitor for updates.

CVE-2017-15115

CVE-2017-15115: Linux kernel prior to 4.14 allows local users to trigger a denial of service (use-after-free in sctp_do_peeloff in net/sctp/socket.c) via crafted system calls. Impact is system crash; no explicit exploit details provided in the documents beyond this. The IBM bulletin references th...

CVE-2018-10878

CVE-2018-10878 is confirmed in the Linux kernel ext4 filesystem. The connected Nessus advisories reference a local attacker mounting a crafted ext4 image to trigger an out-of-bounds write, leading to denial of service and potential other impacts. Unity Linux UTSA advisories (e.g., UTSA-2026-00113...

CVE-2024-43908

The CVE-2024-43908 issue is confirmed in the Linux kernel’s DRM/AMDGPU code: a null pointer dereference in ras_manager that can arise when ras_manager is consulted. The published fix is to check ras_manager before using it, preventing dereference of a null pointer. The connected Nessus advisories...

CVE-2026-43500

Summary: CVE-2026-43500 affects the Linux kernel RXRPC path for DATA/RESPONSE packets. The issue occurs when skb fragments are externally owned (e.g., via splice() or frag lists) and the code path decrypts in place, binding frag pages into the AEAD/skcipher SGL. The fix extends the gate to unshar...

CVE-2017-18509

CVE-2017-18509 targets the Linux kernel (net/ipv6/ip6mr.c). By sending a specific socket option, an attacker can manipulate a kernel pointer in ip6_mroute_* and trigger an inet_csk_listen_stop general protection fault, potentially enabling arbitrary code execution with root privileges. Impact can...

CVE-2017-18551

CVE-2017-18551 : The Linux kernel contains an out-of-bounds write in drivers/i2c/i2c-core-smbus.c, specifically in the function i2c_smbus_xfer_emulated, affecting kernels prior to 4.14.15. The vulnerability can enable local attacker privilege/escalation due to memory corruption. Remediation is to...

CVE-2018-10880

CVE-2018-10880 is a Linux kernel/ext4 vulnerability: a stack-out-of-bounds write in ext4_update_inline_data() when mounting or writing to a crafted ext4 image, leading to a potential system crash and DoS. The issue originates from insufficient bounds checking in ext4’s handling of inline data dur...

CVE-2019-19922

CVE-2019-19922 affects the Linux kernel sched subsystem (kernel/sched/fair.c) and is triggered when cpu.cfs_quota_us is in use (e.g., with Kubernetes). The issue allows a local attacker to cause a denial of service for non–CPU-bound applications by generating work that triggers slice expiration, ...

CVE-2021-4149

CVE-2021-4149: Local privilege escalation via Linux kernel btrfs deadlock. Affects btrfs_alloc_tree_b in fs/btrfs/extent-tree.c where an improper lock operation can deadlock, enabling a local user to cause a denial-of-service. Debian LTS advisory DLA-3065-1 lists CVE-2021-4149 and notes the patch...

CVE-2018-6927

CVE-2018-6927 concerns the Linux kernel futex_requeue implementation in kernel/futex.c. Multiple connected documents confirm a flaw where triggering a negative wake or requeue value can cause a denial of service via an integer overflow. Affected are kernel versions prior to 4.14.15 (and related u...

CVE-2019-16413

CVE-2019-16413 : Affects the Linux kernel prior to 5.0.4 where the 9p filesystem does not properly protect i_size_write(), causing i_size_read() to loop indefinitely and trigger a denial of service on SMP systems. The public evidence ties this to a kernel patch in ChangeLog-5.0.4 and the commit r...

CVE-2016-10906

CVE-2016-10906 affects the Linux kernel’s arc_emac_main.c (drivers/net/ethernet/arc) with a use-after-free caused by a race between arc_emac_tx and arc_emac_tx_clean. The issue occurs in kernels prior to 4.5, enabling local attackers to exploit the race and potentially compromise kernel memory. T...

CVE-2021-38208

The CVE-2021-38208 entry affects the Linux kernel NFC LLCP path: net/nfc/llcp_sock.c before 5.12.10. A local unprivileged user can trigger a denial of service (NULL pointer dereference and BUG) by performing getsockname after a failed bind. This is a local-privilege scenario with a direct impact ...

CVE-2023-4244

CVE-2023-4244 is a Linux kernel use-after-free in nf_tables/netfilter. A race between the netlink control plane transaction and nft_set element garbage collection can underflow a reference counter, enabling local privilege escalation. Affected: Linux kernel nf_tables/netfilter. Root cause: refere...

CVE-2023-7192

CVE-2023-7192 : Linux Kernel contains a memory-leak/denial-of-service issue in ctnetlink_create_conntrack() within net/netfilter/nf_conntrack_netlink.c. A local attacker with CAP_NET_ADMIN can trigger a refcount overflow to cause DoS. The initial documents confirm the vulnerability and its local-...

CVE-2019-12817

CVE-2019-12817 affects the PowerPC Linux kernel: a bug in arch/powerpc/mm/mmu_context_book3s64.c before 5.1.15 can allow unrelated processes to read/write each other’s memory via an mmap above 512 TB on a subset of PowerPC systems. The issue is limited to those platforms; impact is memory confide...

CVE-2019-15212

CVE-2019-15212 describes a vulnerability in the Linux kernel prior to 5.1.8 where a malicious USB device can trigger a double-free in drivers/usb/misc/rio500.c. This is a local/physical-access issue with potential impact to availability as per CVSS metrics shown. The connected Unity Nessus adviso...

CVE-2021-3506

CVE-2021-3506 : An out-of-bounds memory access in fs/f2fs/node.c of the Linux kernel (f2fs module) allows a local attacker to read/write out-of-bounds memory, leading to a system crash or leakage of kernel information. Affected are kernel versions before 5.12.0-rc4. The description notes the high...

CVE-2022-39188

CVE-2022-39188 describes a race in include/asm-generic/tlb.h in the Linux kernel up to version 5.18/5.19 where unmap_mapping_range races with munmap for VM_PFNMAP VMAs can free a page still holding stale TLB entries. This can cause a page to be freed while TLBs still cache old mappings, potential...

CVE-2020-25668

CVE-2020-25668 is a Linux kernel vulnerability in the TTY subsystem (con_font_op) caused by unsynchronized access to fg_console, leading to a use-after-free. According to Debian, this can cause a crash or memory corruption and may enable privilege escalation; CloudLinux notes a fix was applied in...

CVE-2021-29265

CVE-2021-29265 affects the Linux kernel prior to 5.11.7. The vulnerability is in the usbip_sockfd_store function (drivers/usb/usbip/stub_dev.c) where the stub-up sequence has race conditions during updates of local and shared status, enabling a local attacker to trigger a denial of service (kerne...

CVE-2022-3594

CVE-2022-3594 is a Linux kernel vulnerability in the BPF component: the intr_callback in drivers/net/usb/r8152.c can cause logging of excessive data. It is exploitable remotely as described; a patch/update is recommended. Connected advisories (Astra Linux, Amazon Linux livepatch) mirror these det...

CVE-2020-12657

CVE-2020-12657 affects the Linux kernel before 5.6.5 due to a use-after-free in bfq_idle_slice_timer_body within bfq-iosched.c. The connected advisories (Unity Linux UTSA-2026-00x, Red Hat RHSA/CESA entries, CentOS plugin references) confirm kernel versions impacted and reference the 5.6.5 patch/...

CVE-2022-0850

CVE-2022-0850 affects the Linux kernel’s ext4 filesystem by an information leak via the ext4_extent_header to userspace. The connected sources corroborate a kernel information leak (information disclosure) in ext4_extent_header and note fixes in various distributions:CloudLinux/CSLAs reference “e...

CVE-2022-2961

CVE-2022-2961 concerns the Linux kernel’s PLP Rose functionality. The vulnerability is a use-after-free flaw caused by a race: a local user can trigger a race between calling bind and the rose_bind() function, potentially crashing the kernel or escalating privileges. Impact is described as local ...

CVE-2023-52814

CVE-2023-52814 : Linux kernel has fixed a potential NULL pointer dereference in the AMDGPU driver. The function amdgpu_ras_get_context may return NULL if the device does not support ras, and the code now checks for NULL before dereferencing. This (local) vulnerability could crash the kernel if NU...

CVE-2024-53050

The CVE-2024-53050 issue affects the Linux kernel’s DRM/i915 HDCP path. The vulnerability arises from a missing encoder check in hdcp2_get_capability, and a fix was applied to Add encoder check in intel_hdcp2_get_capability to prevent a null pointer dereference. The description indicates the prob...

CVE-2024-56779

Mode C: The CVE-2024-56779 issue concerns the Linux kernel nfsd when handling concurrent nfsd4_open operations. The description shows a leak: during open processing, two rpc_task instances may be created for the same file, and if an nfs4_openowner is found that is not marked NFS4_OO_CONFIRMED, it...

CVE-2022-1852

CVE-2022-1852 concerns a NULL pointer dereference in the Linux kernel’s KVM module during x86 emulation (x86_emulate_insn) when the guest executes an illegal instruction on Intel CPUs, which can lead to a denial of service. The vulnerability is in the KVM emulation path (arch/x86/kvm/emulate.c) a...

CVE-2022-3524

CVE-2022-3524 affects the Linux kernel IPv6 Handler’s ipv6_renew_options, causing a memory leak. The vulnerability can be triggered remotely per some sources; a patch is available and applies to mitigate the issue. Review the Linux kernel patches referenced in the CVE details and apply the approp...

CVE-2022-39842

CVE-2022-39842 affects the Linux kernel up to version 5.19, specifically in drivers/video/fbdev/pxa3xx-gcu.c (pxa3xx_gcu_write). The count parameter has a type conflict of size_t versus int, causing an integer overflow and bypassing the size check; this value is then passed as the third argument ...

CVE-2023-52821

CVE-2023-52821 affects the Linux kernel’s DRM panel code. In versatile_panel_get_modes(), the return value of drm_mode_duplicate() can be NULL on failure and is not checked, causing a NULL pointer dereference. The fix adds a check to prevent NP dereference. The vulnerability is local and may cras...

CVE-2017-15265

CVE-2017-15265 is a race condition in the ALSA sequencer subsystem of the Linux kernel, up to version 4.13.8. A local attacker can trigger a use-after-free via crafted /dev/snd/seq ioctl calls, leading to denial of service (crash) or potentially other impacts. The vulnerability is fixed in the up...

CVE-2020-11669

CVE-2020-11669 affects the Linux kernel before 5.2 on the powerpc platform. The issue is in arch/powerpc/kernel/idle_book3s.S where save/restore for PNV_POWERSAVE_AMR, PNV_POWERSAVE_UAMOR, and PNV_POWERSAVE_AMOR is missing (CID-53a712bae5dd). This can impact availability (per CVSS 3.1: Availabili...

CVE-2022-45869

CVE-2022-45869 is a Linux kernel issue describing a race condition in the x86 KVM subsystem that can be triggered when nested virtualization and the TDP MMU are enabled. The vulnerability affects the Linux kernel up to version 6.1-rc6 as described in the Astra Linux security bulletin, which mirro...

CVE-2019-15211

CVE-2019-15211 : Linux kernel before 5.2.6 contains a use-after-free in drivers/media/v4l2-core/v4l2-dev.c triggered by a malicious USB device; the issue is tied to memory allocation in drivers/media/radio/radio-raremono.c. Evidence from multiple Nessus/SUSE/OpenOpen advisories confirms the descr...

CVE-2023-39189

CVE-2023-39189 is documented in connected sources as affecting the Linux kernel Netfilter component, specifically the nftables path nf_osf_match_one(), which can trigger an out-of-bounds read leading to a crash or information disclosure. The vulnerability is reported across multiple advisories (e...