CVE-2019-19051

CVE-2019-19051 : A memory leak in the Linux kernel function i2400m_op_rfkill_sw_toggle() (drivers/net/wimax/i2400m/op-rfkill.c) prior to 5.3.11 can allow a local attacker to cause memory exhaustion and denial of service. The issue is fixed in 5.3.11 (ChangeLog-5.3.11). References include related ...

CVE-2023-0468

CVE-2023-0468 : A use-after-free race in the Linux kernel’s io_uring/poll.c (io_poll_check_events, io_uring subcomponent) is triggered by a race on poll_refs, potentially causing a NULL pointer dereference. Impact: local attacker could cause a system crash/denial of service; CVSS indicates LOCAL ...

CVE-2023-1079

The CVE-2023-1079 issue is a Linux kernel use-after-free involving asus_kbd_backlight_set. A malicious USB device advertising as an Asus device can trigger a use-after-free through the LED controller, when the device is disconnecting, which may schedule a work_struct and free the struct asus_kbd_...

CVE-2024-43902

CVE-2024-43902 is a Linux kernel vulnerability in drm/amd/display where a null pointer could be dereferenced. The fix adds a null checker before passing variables to functions, addressing three NULL_RETURNS issues reported by Coverity. Connected documents confirm the root cause and the remediatio...

CVE-2024-56785

CVE-2024-56785 affects the Linux kernel lifecycle on MIPS Loongson64 platforms (ls7a). The issue centers on DTS/PCIe port node handling: incorrect PCIe port node definitions in ls7a DTS files caused dtc/interpreter warnings and a runtime warning related to address-cell/interrupt-provider mappings...

CVE-2017-18208

CVE-2017-18208 affects the Linux kernel prior to 4.14.4. The vulnerability lies in the MADVISE_WILLNEED handling in mm/madvise.c, where triggering MADVISE_WILLNEED for a DAX mapping allows a local attacker to cause a denial of service via an infinite loop. The issue is local in scope and is tied ...

CVE-2018-16658

The CVE-2018-16658 entry concerns the Linux kernel prior to 4.18.6, where a vulnerability in cdrom_ioctl_drive_status() in drivers/cdrom/cdrom.c allows a local attacker to read kernel memory due to an unsafe cast from unsigned long to int that bypasses bounds checks. The issue is mitigated by upg...

CVE-2020-29370

CVE-2020-29370 (Linux kernel): An issue in kmem_cache_alloc_bulk (mm/slub.c) before 5.5.11 where the slowpath path does not increment the TID as required (CID-fd4d9c7d0c71). Affected: Linux kernel prior to 5.5.11. Impact described in connected advisories as a vulnerability in the kernel memory al...

CVE-2024-42227

CVE-2024-42227 affects the Linux kernel's drm/amd/display: fix overlapping copy within dml_core_mode_programming. The issue arises when &mode_lib->mp.Watermark and &locals->Watermark reference the same address, leading to unsafe memcpy behavior. The vulnerability is mitigated by replacing m...

CVE-2017-18241

CVE-2017-18241 affects Linux kernel fs/f2fs/segment.c prior to 4.13. Local users can cause a denial of service via a NULL pointer dereference in a flush_cmd_control when using the noflush_merge option, leading to a panic. No exploitation details are provided in the documents. Remediation: upgrade...

CVE-2019-19526

The vulnerability CVE-2019-19526 affects the Linux kernel prior to 5.3.9, caused by a use-after-free in the drivers/nfc/pn533/usb.c USB NFC driver. A malicious USB device can trigger the bug, potentially impacting availability (high impact) while confidentiality/integrity remain unaffected. Affec...

CVE-2022-3303

CVE-2022-3303 is a race-condition vulnerability in the Linux kernel sound subsystem (SNDCTL_DSP_SYNC ioctl) that can cause a NULL pointer dereference and denial of service via a locally privileged user. The issue affects the Linux kernel’s sound code path and can crash the system, potentially ena...

CVE-2022-33981

CVE-2022-33981 affects the Linux kernel’s floppy driver (drivers/block/floppy.c) up to version 5.17.6. The issue is a concurrency use-after-free after deallocating raw_cmd in the raw_cmd_ioctl function, leading to a local denial-of-service. Public documents confirm the vulnerable code path and th...

CVE-2020-16120

The CVE-2020-16120 issue concerns Overlayfs in the Linux kernel where permission checks during copy-up were inadequate when used inside a user namespace. It was introduced in kernel 4.19 (ovl: stack file ops) and fixed in kernel 5.8 by patches that verify permissions in ovl_path_open(), switch to...

CVE-2022-42328

Technical details about CVE-2022-42328 (and related CVEs) are not provided in the connected documents. Monitor the cited Xen/XenServer advisories and AWS Amazon/Linux advisories for updates and fixes.

CVE-2023-42756

CVE-2023-42756 is a Linux kernel vulnerability in the Netfilter/IPSET subsystem caused by a race between IPSET_CMD_ADD and IPSET_CMD_SWAP that can lead to a kernel panic and local system crash. The description indicates a local attacker may crash the machine due to calling __ip_set_put on a wrong...

CVE-2024-50134

CVE-2024-50134 affects the Linux kernel driver drm/vboxvideo (vbva_mouse_pointer_shape). The issue stems from a fake VLA at the end of vbva_mouse_pointer_shape triggering a field-spanning memcpy write in hgsmi_base.c:154. The patch replaces the fake VLA with a real VLA to fix the warning and pote...

CVE-2020-36558

CVE-2020-36558 refers to a race condition in the Linux kernel before 5.5.7 involving VT_RESIZEX that can cause a NULL pointer dereference and a general protection fault. The vulnerability is triggered locally within the kernel, with impact described as high availability risk if exploited, and the...

CVE-2024-56551

Summary (CVE-2024-56551) : In the Linux kernel, the drm/amdgpu driver fixes a use-after-free in the slab allocator. The vulnerability is triggered by a use-after-free in the GPU scheduling path, specifically involving drm_sched_entity_flush, where a 8-byte read could occur after an object had bee...

CVE-2023-52595

CVE-2023-52595 is reported in MiracleLinux advisories as affecting MiracleLinux 8 with kernel 4.18.0-553.5.1.el8_10 (AXSA:2024-8481:17). The issue is in wifi: rt2x00: restart beacon queue when hardware reset, where a hardware reset can deadlock the beacon queue if mac80211 does not stop queues, p...

CVE-2020-29371

CVE-2020-29371 affects Linux kernel romfs_dev_read (fs/romfs/storage.c) prior to 5.8.4, where uninitialized memory leaks to userspace. The vulnerability stems from uninitialized memory paths, enabling leakage to user space. Affected component is the ROMFS code in the kernel; no exploit details ar...

CVE-2022-26966

CVE-2022-26966 affects the Linux kernel up to 5.16.12, via the drivers/net/usb/sr9700.c component. A local attacker can attach a specially crafted USB device and cause information disclosure by leaking heap memory from the device, as described in multiple connected documents (upstream kernel note...

CVE-2023-6932

CVE-2023-6932 is a Linux kernel vulnerability affecting the ipv4: igmp component. The issue is described as a use-after-free condition with a race that can cause a timer to be registered on an RCU read-locked object that is freed by another thread, enabling local privilege escalation. Connected d...

CVE-2024-56782

Technical details about CVE-2024-56782 are not provided in the supplied documents. The materials reference the patch description but do not include product/version/impact specifics or exploitation context.

CVE-2015-5157

CVE-2015-5157 affects the Linux kernel prior to 4.1.6 on x86_64. The issue is in arch/x86/entry/entry_64.S where IRET faults during NMIs that occur in userspace are mishandled, potentially allowing a local user to gain privileges. The vulnerability is described in several connected advisories as ...

CVE-2016-9794

CVE-2016-9794 is a local, use-after-free race in ALSA’s snd_pcm_period_elapsed() in the Linux kernel before 4.7. A crafted SNDRV_PCM_TRIGGER_START can trigger memory corruption, enabling a local attacker to cause a denial of service (and possibly other impact) on affected systems. Public write-up...

CVE-2017-7518

CVE-2017-7518: In the Linux kernel before 4.12, the KVM module mishandles the trap-flag TF in EFLAGS during syscall emulation, causing a debug exception (#DB) on the guest stack. This could allow a user/process inside a guest to escalate privileges within the guest (Linux guests only; host kernel...

CVE-2020-26088

CVE-2020-26088 affects the Linux kernel up to version 5.8.2, where a missing CAP_NET_RAW check in NFC socket creation (net/nfc/rawsock.c) could let a local attacker create raw sockets and bypass security mechanisms. This is demonstrated in multiple Nessus advisories (Unity Linux/OpenSUSE/EulerOS ...

CVE-2021-3428

CVE-2021-3428 describes a Linux kernel flaw in ext4: crafting an ext4 extent can overflow an integer in fs/ext4/extents.c (ext4_es_cache_extent), potentially allowing a local attacker with a privileged user to crash the system and cause an availability impact. Connected Nessus entry (UNITY_LINUX_...

CVE-2020-10781

CVE-2020-10781 affects the Linux kernel ZRAM module: a local attacker who can read /sys/class/zram-control/hot_add can create ZRAM device nodes in /dev, and repeated reads can allocated memory and trigger OOM killer, potentially making the system inoperable. Connected advisories (e.g., ALAS2KERNE...

CVE-2021-44879

CVE-2021-44879 affects the Linux kernel’s f2fs implementation: in gc_data_segment (fs/f2fs/gc.c) zeroing out or moving pages does not treat special files, causing a NULL pointer dereference in move_data_page and potentially a crash. The issue is fixed in Linux 5.16.3 (ChangeLog-5.16.3). Affected ...

CVE-2022-49610

The CVE-2022-49610 entry concerns the Linux kernel KVM VMX path. The vulnerability description states a theoretical RSB underflow could occur on VMX when there is a gap between the guest SPEC_CTRL write and vmenter, potentially triggered by an NMI with a deep call stack. The mitigation is to disa...

CVE-2023-52594

CVE-2023-52594 (Linux kernel) involves a potential array-index-out-of-bounds read in the ath9k_htc_txstatus() path of the wifi/ath9k driver. The issue occurs when txs->cnt (data from a URB from a USB device) exceeds HTC_MAX_TX_STATUS (12); UBSAN reports index 13 out of range. The code path lac...

CVE-2023-52918

CVE-2023-52918 – Linux kernel (media: pci: cx23885) The vulnerability concerns the cx23885 video device initialization in the Linux kernel’s media: pci subsystem. cx23885_vdev_init() can return a NULL pointer, but the caller previously used that pointer without checking it. The fix adds a NULL po...

CVE-2021-28715

CVE-2021-28715 concerns the Linux kernel netback driver in Xen guests. The Xen netback path buffers incoming guest data until the guest processes it, and although there are safeguards to limit buffering, an attacker running in a guest can bypass them. Specifically, when using UDP on a fast interf...

CVE-2022-1263

CVE-2022-1263 is a Linux kernel KVM NULL pointer dereference bug that triggers when releasing a vCPU with dirty ring support enabled. An unprivileged local attacker on the host can issue specific ioctl calls to cause a kernel oops and DoS. Public advisories (e.g., Amazon Linux 2 ALAS2KERNEL-5.15-...

CVE-2021-29646

CVE-2021-29646 involves the Linux kernel, where the function tipc_nl_retrieve_key in net/tipc/node.c shows insufficient validation of data sizes. Connected docs confirm concrete details: affected component is the kernel tipc subsystem, with a fix implemented in kernel 5.11.11 (and Fedora/Mariner ...

CVE-2023-0458

CVE-2023-0458 describes a speculative pointer dereference in the Linux kernel’s do_prlimit() path. The vulnerable path uses a controlled resource argument in pointer arithmetic for the rl im variable, enabling leakage of kernel contents when exploited. The Astra Linux security bulletin corroborat...

CVE-2023-52827

CVE-2023-52827 concerns the Linux kernel’s wifi ath12k code. The issue is a potential out-of-bounds read in ath12k_htt_pull_ppdu_stats(), caused by len being extracted from an HTT message without sufficient validation; an unexpected value could occur during message iteration/parsing. The same ris...

CVE-2017-18203

The vulnerability CVE-2017-18203 affects the Linux kernel in the DM (device-mapper) path: dm_get_from_kobject() in drivers/md/dm.c is vulnerable to a race with __dm_destroy during creation/removal of DM devices. Exploitation from a local attacker could cause a Denial of Service. Affected are kern...

CVE-2022-32296

CVE-2022-32296 affects the Linux kernel where, prior to 5.17.9, the TCP source port selection (Algorithm 4, Double-Hash Port Selection from RFC 6056) can allow a remote or local observer to identify clients by observed source ports. Connected advisories confirm the issue in kernel ments and note ...

CVE-2022-3649

CVE-2022-3649 affects the Linux kernel (nilfs_new_inode in fs/nilfs2/inode.c, component BPF). The issue is a use-after-free in nilfs_new_inode that can be triggered remotely, per the initial document and connected advisories. A patch exists to fix this issue (references include a kernel commit ID...

CVE-2023-3161

CVE-2023-3161 : Linux Kernel fbcon has a shift-out-of-bounds in fbcon_set_font when font->width/height > 32, causing undefined behavior and potential denial of service. Connected documents corroborate the same fbcon font handling issue in the Linux kernel. The Astra Linux bulletin mentions ...

CVE-2019-19602

CVE-2019-19602 – Linux kernel fpregs_state_valid cache issue : In arch/x86/include/asm/fpu/internal.h, the fpu_fpregs_owner_ctx caching can mishandle signal-based preemption when compiling with GCC 9, on amd64, leading to context-dependent attackers causing a memory corruption DoS and potentially...

CVE-2021-20239

CVE-2021-20239 describes a flaw in the Linux kernel prior to 5.4.92 within the BPF protocol. A local attacker can leak information about kernel internal addresses, impacting confidentiality. The issue is tied to the BPF verifier/run-time handling and does not require remote access. Affected produ...

CVE-2010-4249

CVE-2010-4249 affects the Linux kernel before 2.6.37-rc3-next-20101125: the wait_for_unix_gc routine in net/unix/garbage.c does not properly select times for garbage-collecting inflight sockets, enabling local users to cause a denial of service (system hang) by crafting socketpair and sendmsg cal...

CVE-2019-15222

CVE-2019-15222 entry is rejected/not used and not an active vulnerability.

CVE-2022-1195

CVE-2022-1195 describes a use-after-free in the Linux kernel driver for hamradio (drivers/net/hamradio), specifically involving the mkiss and sixpack paths. The flaw allows a local attacker with user privileges to trigger a denial of service when the mkiss/sixpack device is detached and resources...

CVE-2023-33203

The CVE-2023-33203 entry concerns the Linux kernel prior to version 6.2.9, where a race condition can lead to a use-after-free in drivers/net/ethernet/qualcomm/emac/emac.c when a physically proximate attacker unplugs an emac device. Affected software: Linux kernel up to 6.2.9 (including distribut...

CVE-2018-6554

CVE-2018-6554 describes a memory leak in the Linux kernel’s irda_bind path (net/irda/af_irda.c and later staging/irda/net/af_irda.c). A local user can cause memory exhaustion by repeatedly binding an AF_IRDA socket, leading to denial of service. The vulnerability exists in kernels prior to 4.17 a...