CVE-2022-49583

CVE-2022-49583 affects the Linux kernel iavf driver. The vulnerability was caused by improper handling of dummy receive descriptors, leading to a memory leak where the previous receive buffer page wasn’t freed when a dummy descriptor was written by hardware. The fix updates iavf_get_rx_buffer to ...

CVE-2024-42312

CVE-2024-42312 relates to the Linux kernel vulnerability where sysctl did not consistently initialize i_uid/i_gid. The resolution initializes i_uid/i_gid inside the sysfs core so that set_ownership() can safely skip setting them. The change is documented as part of commit 5ec27ec735ba, which fixe...

CVE-2025-37920

CVE-2025-37920 affects the Linux kernel in the AF_XDP path. The issue is a race condition in the generic RX path when multiple sockets share the same xsk_buff_pool (shared umem), with RX queues being socket-exclusive and FILL queues sharable. The fix moves the rx_lock from xsk_socket to the share...