CVE-2017-18344

CVE-2017-18344 affects the Linux kernel before 4.14.8. The timer_create syscall in kernel/time/posix-timers.c fails to validate sigevent->sigev_notify, causing out-of-bounds access in show_timer when /proc/$PID/timers is read and enabling a local user to read arbitrary kernel memory on builds ...

CVE-2018-7191

CVE-2018-7191 affects the Linux kernel tun subsystem prior to 4.13.14. Root cause: dev_get_valid_name is not called before register_netdevice, enabling a local user to trigger a NULL pointer dereference via ioctl(TUNSETIFF) with a device name containing a “/” character, potentially causing a deni...

CVE-2022-49731

CVE-2022-49731 affects the Linux kernel’s ata_libata-core. The flaw is a NULL pointer dereference in ata_host_alloc_pinfo() if the ppi array starts with NULL, causing a kernel oops. The fix initializes the local pi variable to &ata_dummy_port_info to prevent the oops. This vulnerability is addres...

CVE-2019-15919

CVE-2019-15919 affects the Linux kernel before 5.0.10. The vulnerability is in SMB2_write (fs/cifs/smb2pdu.c) due to a use-after-free in the SMB2 write path, with partial confidentiality impact (I: partial) and no explicit exploitation details provided. Remediation: upgrade to kernel 5.0.10 or la...

CVE-2019-19530

CVE-2019-19530 affects the Linux kernel prior to 5.2.10, with a use-after-free in the USB CDC-ACM driver (drivers/usb/class/cdc-acm.c) triggered by a malicious USB device. The issue could lead to a denial of service through memory corruption if exploited locally via USB hardware interfaces; CVSS ...

CVE-2019-19081

CVE-2019-19081 is a memory-leak/DoS vulnerability in the Linux kernel at drivers/net/ethernet/netronome/nfp/flower/main.c: nfp_flower_spawn_vnic_reprs() leaks memory, enabling denial of service via memory consumption. Affected: Linux kernel versions prior to 5.3.4. Reportedly remediated by Linux ...

CVE-2022-0494

CVE-2022-0494 is a Linux kernel information-leak flaw in scsi_ioctl.c that could let a local attacker with CAP_SYS_ADMIN or CAP_SYS_RAWIO extract kernel information, affecting confidentiality. The associated documents confirm the vulnerability and provide CVSS context (local access, high confiden...

CVE-2023-2124

CVE-2023-2124 is an out-of-bounds memory access flaw in the Linux kernel XFS image restore path after failure with a dirty log journal. It can crash a local user or potentially escalate privileges when mounting/correcting a corrupted XFS disk image. Public advisories (e.g., Debian DSA-5448-1 and ...

CVE-2019-15920

CVE-2019-15920 affects the Linux kernel prior to 5.0.10, with a use-after-free in SMB2_read (fs/cifs/smb2pdu.c). The issue was not fixed in 5.0.10; the 5.0.11 ChangeLog documents a memory leak related to this area. Connected advisories (Unity Linux Nessus plugins) reference the same root cause an...

CVE-2021-29648

CVE-2021-29648 affects the Linux kernel up to version 5.11.11, with the BPF subsystem failing to treat resolved_ids and resolved_sizes as intentionally uninitialized in the vmlinux BTF. The consequence is a system crash on an unexpected access (in map_create and check_btf_info), caused by CID-350...

CVE-2021-33656

CVE-2021-33656 affects the Linux kernel: setting a font with malicious data via the PIO_FONT ioctl can cause a memory out-of-bounds write. Affected: kernel font handling path; root cause: out-of-bounds write in ioctl processing. Impact: local code execution is not explicitly stated; exploitation ...

CVE-2023-42755

CVE-2023-42755 affects the IPv4 RSVP classifier in the Linux kernel. The xprt pointer can reference beyond the skb’s linear area, causing an out-of-bounds read in rsvp_classify, which may allow a local user to crash the system and trigger denial of service. Connected advisories (Debian, Red Hat-b...

CVE-2024-56787

CVE-2024-56787 documents a Linux kernel issue where imx8m SoC code probed as a driver caused -EPROBE_DEFER when clock driver wasn’t probed yet. The fix converts the SoC code to a platform driver and instantiates it in current device_initcall, propagating -EPROBE_DEFER through the .probe retry mec...

CVE-2017-7645

The CVE-2017-7645 issue affects the Linux kernel NFSv2/v3 server (nfsd) and is triggered by processing long RPC replies. The root cause is an out-of-bounds memory access in the NFS server paths (net/sunrpc/svc.c, fs/nfsd/nfs3xdr.c, fs/nfsd/nfsxdr.c) that can lead to a system crash (DoS). Affected...

CVE-2018-18021

CVE-2018-18021 affects arch/arm64/kvm/guest.c in the Linux kernel before 4.18.12. The KVM_SET_ON_REG ioctl is mishandled, allowing a local attacker who can create VMs to arbitrarily redirect the hypervisor flow of control (full register control) and potentially cause a hypervisor panic via an ill...

CVE-2022-24959

CVE-2022-24959 affects the Linux kernel before 5.16.5, via a memory leak in yam_siocdevprivate() in drivers/net/hamradio/yam.c. This can lead to denial of service due to memory exhaustion. The issue is addressed in the 5.16.5 kernel release; related advisories (e.g., Debian security updates) note...

CVE-2022-3114

CVE-2022-3114 affects the Linux kernel up to 5.16-rc6. The issue is in imx_register_uart_clocks (drivers/clk/imx/clk.c): it does not check the return value of kcalloc(), which can lead to a null pointer dereference and a potential crash. This is a local issue with low to moderate complexity and a...

CVE-2018-10881

CVE-2018-10881 is an ext4-related Linux kernel vulnerability: out-of-bounds access in ext4_get_group_info when mounting/operating on a crafted ext4 image, leading to denial of service or system crash. Connected sources (e.g., USN-3752-2) confirm this CVE is among kernel/ext4 issues addressed; rem...

CVE-2018-5814

CVE-2018-5814 : Linux Kernel before 4.16.11, 4.14.43, 4.9.102, and 4.4.133 has race condition vulnerabilities in USB handling (probe, disconnect, rebind) that can trigger use-after-free or NULL dereference via multiple USB over IP packets. Fixes were released in kernel updates: 4.16.11, 4.14.43, ...

CVE-2020-25673

CVE-2020-25673 is described in connected documents as a Linux kernel vulnerability where a non-blocking socket in llcp_sock_connect() can cause a memory leak and eventually hang the system. The Unity Linux UTSA-2026-001467 advisory and related Nessus plugins reiterate this issue, referencing a vu...

CVE-2024-41013

CVE-2024-41013 : The Linux kernel vulnerability in xfs: don't walk off the end of a directory data block has been fixed. The issue was caused by insufficient bounds checks for xfs_dir2_data_unused and xfs_dir2_data_entry, which could allow an out-of-bounds read during directory traversal if a cra...

CVE-2017-7889

CVE-2017-7889 affects the Linux kernel mm subsystem (up to 3.2); a local attacker with access to /dev/mem can read/write kernel memory due to CONFIG_STRICT_DEVMEM not being properly enforced in arch/x86/mm/init.c and drivers/char/mem.c. Public details: Debian security advisories show fixes (e.g.,...

CVE-2019-15215

The CVE-2019-15215 issue is a use-after-free in the Linux kernel, caused by a malicious USB device via the cpia2_usb.c driver (drivers/media/usb/cpia2). Affected: kernel versions before 5.2.6. Impact: potential local denial of service or privilege issues due to use-after-free in USB cpia2 handlin...

CVE-2019-19528

CVE-2019-19528: Linux kernel pre-5.3.7 contains a use-after-free in the iowarrior USB driver (drivers/usb/misc/iowarrior.c) triggered by a malicious USB device. Public advisories (MiracleLinux AXSA:2021-2148:12 and Unity Linux UTSA references) confirm this CVE and map it to kernel builds up to 5....

CVE-2020-28915

CVE-2020-28915 is a Linux kernel vulnerability in the fbcon framebuffer code, where a buffer over-read before 5.8.15 could allow a local attacker to read kernel memory. The issue is caused by improper bounds handling in the framebuffer font-related path used by fbcon. Affected fix: upstream patch...

CVE-2023-1382

The CVE-2023-1382 issue is a data race in the Linux kernel TIPC path where con is allocated before con->sock is set, causing a NULL pointer dereference when accessing con->sock->sk in net/tipc/topsrv.c. This is a local vulnerability with MEDIUM severity (CVSS 4.7). The connected document...

CVE-2023-45863

The CVE-2023-45863 issue affects the Linux kernel prior to 6.2.3 and is triggered by a race condition in lib/kobject.c that causes a fill_kobj_path out-of-bounds write when run with root privileges. Public sources in connected documents (Astra Linux bulletin and IBM advisories) describe the same ...

CVE-2023-52809

CVE-2023-52809 : Linux kernel vulnerability in scsi: libfc where fc_lport_ptp_setup() could dereference a NULL pointer if fc_rport_create() returns NULL. The fix adds a check on fc_rport_create()’s return value and logs an error when it fails. Affects the kernel’s SCSI/FC path; local access requi...

CVE-2015-3288

CVE-2015-3288 affects the Linux kernel prior to 4.1.4. It arises from mishandling anonymous pages in mm/memory.c, allowing a local user to gain privileges or cause a denial of service by writing to page zero. The issue is fixed in 4.1.4 (per ChangeLog-4.1.4 and related advisories referenced in th...

CVE-2022-2503

CVE-2022-2503 affects Linux kernels using Dm-verity/LoadPin. A device-mapper table reload can swap the target to an equivalent dm-linear target, bypassing verification until reboot and allowing root to load untrusted/unsigned kernel modules and firmware. This can enable arbitrary kernel execution...

CVE-2019-15213

CVE-2019-15213: Linux kernel before 5.2.3 contains a use-after-free in the DVB‑USB driver (drivers/media/usb/dvb-usb/dvb-usb-init.c) triggered by a malicious USB device. The issue is limited to the kernel plasma stack in this component and is mitigated by upgrading to kernel 5.2.3 or newer, per t...

CVE-2023-6915

CVE-2023-6915 is a NULL pointer dereference in ida_free() within lib/idr.c of the Linux kernel leading to potential denial of service. Connected advisories show affected kernels across distributions: Astra Linux lists linux-5.10, 5.15, 6.1; CloudLinux notes ida_free in kernel (CVE-2023-6915) for ...

CVE-2020-35508

CVE-2020-35508 is a Linux kernel issue describing a race condition and incorrect initialization of the child/parent process ID handling when filtering signal handlers. The flaw permits a local attacker to bypass checks and send signals to a privileged process. Multiple Nessus/MiracleLinux Unity a...

CVE-2023-28328

CVE-2023-28328: A NULL pointer dereference in the az6027 driver (drivers/media/usb/dev-usb/az6027.c) of the Linux kernel, caused by not validating the user-space message before transfer. Local users could crash the system or potentially cause a denial of service. Connected Astra Linux bulletin re...

CVE-2024-0607

The CVE-2024-0607 entry concerns the Linux kernel netfilter/nft_tables vulnerability in nft_byteorder_eval(). A loop writes 8 bytes per iteration into a dst array of u32 elements, causing out-of-bounds writes and corruption of the dst array. This can enable a local user to cause a Denial of Servi...

CVE-2017-9076

CVE-2017-9076 is a Linux kernel issue reported in the CentOS/Red Hat advisory set (CESA-2018:1854) tied to the IPv6 DCCP implementation. The vulnerability arises from mishandling of inheritance in the IPv6 DCCP code, allowing a local attacker to cause a denial of service or possibly other unspeci...

CVE-2019-7308

CVE-2019-7308 affects the Linux kernel’s BPF verifier in kernel/bpf/verifier.c prior to 4.20.6. The issue is undesirable out-of-bounds speculation on pointer arithmetic across branches with different state/limits, enabling potential side-channel attacks. Public sources in connected documents cons...

CVE-2021-3659

CVE-2021-3659 is a local NULL pointer dereference in the Linux kernel’s IEEE 802.15.4 LR-WPAN subsystem. The specific code path cited in connected sources is a NULL pointer dereference in llsec_key_alloc() within net/mac802154/llsec.c, which can be triggered during LR-WPAN connection closure and ...

CVE-2019-17351

CVE-2019-17351 affects the Linux kernel prior to 5.2.3 in drivers/xen/balloon.c (Xen up to 4.12.x). The issue allows a guest OS user to cause a denial of service by unrestricted resource consumption during the mapping of guest memory. The connected advisories (Unity Linux, EulerOS, OpenVAS/USN re...

CVE-2022-36123

The CVE-2022-36123 entry pertains to the Linux kernel prior to 5.18.13, where an unclear clear operation for the .bss block may allow Xen PV guests to trigger a denial of service or privilege escalation. Affected component: Linux kernel (xen pv guest context) up to version 5.18.12; fixed in 5.18....

CVE-2023-52815

The connected Astra Linux advisory confirms the CVE affects the Linux kernel DRM amdgpu/vkms path. In amdgpu_vkms_conn_get_modes(), the code previously assigned the return value of drm_cvt_mode() to mode and could dereference NULL on failure. The fix adds a NULL check to prevent dereference, miti...

CVE-2017-9077

CVE-2017-9077 : The Linux kernel's tcp_v6_syn_recv_sock in net/ipv6/tcp_ipv6.c mishandles inheritance, enabling a local attacker to cause a denial of service via crafted system calls. The connected CentOS/CSA entries corroborate kernel-level impact and note security updates; no remote exploit det...

CVE-2021-38207

CVE-2021-38207 affects the Linux kernel driver: drivers/net/ethernet/xilinx/ll_temac_main.c. It allows remote attackers to cause a denial of service (buffer overflow and lockup) by sending heavy network traffic for about ten minutes. The issue is in the ll_temac_main.c path, and the vulnerability...

CVE-2022-3707

CVE-2022-3707 is a double-free in the Intel GVT-g graphics support within the Linux kernel, specifically in the intel_gvt_dma_map_guest_page path. The flaw can be triggered by a local attacker and may crash the system due to memory corruption. Connected advisories confirm the issue affecting the ...

CVE-2024-26915

CVE-2024-26915 concerns the Linux kernel DRM AMDGPU driver. The root cause is the Reset IH OVERFLOW_CLEAR bit, which allows detection of subsequent IH ring buffer overflows. Affected component: drm/amdgpu in the Linux kernel. Impact as stated: potential availability impact with local, low-privile...

CVE-2024-42070

CVE-2024-42070 affects the Linux kernel netfilter nft_tables component. The issue is in the NFT_DATA_VALUE store validation for data registers; the datatype can be NFT_DATA_VALUE or NFT_DATA_VERDICT, and a new helper to infer the register type from the set datatype removes a conditional check. Th...

CVE-2017-9075

CVE-2017-9075 affects the Linux kernel network subsystem: the sctp_v6_create_accept_sk function in net/sctp/ipv6.c mishandles inheritance, enabling a local attacker to cause a denial of service (and possibly other effects) via crafted system calls. Connected CentOS Red Hat advisories (e.g., CESA/...

CVE-2020-25669

CVE-2020-25669 is a Linux kernel use-after-free in sunkbd_reinit triggered after sunkbd interrupts and before freed; an alias remains after NULLing in sinkbd_disconnect, enabling a use-after-free condition. Documents indicate this is a kernel issue with local impact, potentially causing a crash o...

CVE-2021-3501

CVE-2021-3501 affects Linux kernels prior to 5.12. The vulnerability arises from the KVM API: the internal.ndata value is mapped to an array index and can be updated by a user process at any time, enabling an out-of-bounds write. Documented impact is data integrity and system availability. A patc...

CVE-2023-2162

Astra Linux security bulletin mirrors CVE-2023-2162, documenting a use-after-free in Linux kernel (iscsi_sw_tcp_session_create in drivers/scsi/iscsi_tcp.c) that could allow a local attacker to leak kernel internal information. The Astra Linux entry identifies the affected kernel subcomponent (SCS...