linux-cve-announce mailing list - 2024/03

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

linux-cve-announce mailing list - 2024/03

Mon	Tue	Wed	Thu	Fri	Sat	Sun
				¹ 13	² 61	³ 1
⁴ 29	⁵ 3	⁶ 31	⁷ 1	⁸ 3	⁹	¹⁰
¹¹ 1	¹² 2	¹³ 3	¹⁴ 1	¹⁵ 27	¹⁶	¹⁷
¹⁸ 25	¹⁹ 4	²⁰ 1	²¹ 3	²²	²³	²⁴
²⁵ 41	²⁶ 14	²⁷ 4	²⁸ 1	²⁹ 1	³⁰	³¹

Messages by day:

March 1 (13 messages)

CVE-2021-47070: uio_hv_generic: Fix another memory leak in error handling paths (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47069: ipc/mqueue, msg, sem: avoid relying on a stack reference past its expiry (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47079: platform/x86: ideapad-laptop: fix a NULL pointer dereference (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47071: uio_hv_generic: Fix a memory leak in error handling paths (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47072: btrfs: fix removed dentries still existing after log is synced (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47073: platform/x86: dell-smbios-wmi: Fix oops on rmmod dell_smbios (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47074: nvme-loop: fix memory leak in nvme_loop_create_ctrl() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47075: nvmet: fix memory leak in nvmet_alloc_ctrl() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47076: RDMA/rxe: Return CQE error if invalid lkey was supplied (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47077: scsi: qedf: Add pointer checks in qedf_update_link_speed() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47078: RDMA/rxe: Clear all QP fields if creation failed (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47081: habanalabs/gaudi: Fix a potential use after free in gaudi_memset_device_memory (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47080: RDMA/core: Prevent divide-by-zero error triggered by the user (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

March 2 (61 messages)

CVE-2024-26621: mm: huge_memory: don't force huge page alignment on 32 bit (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48627: vt: fix memory overlapping when deleting chars in the buffer (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52499: powerpc/47x: Fix 47x syscall return crash (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48628: ceph: drop messages from MDS when unmounting (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52508: nvme-fc: Prevent null pointer dereference in nvme_fc_io_getuuid() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52509: ravb: Fix use-after-free issue in ravb_tx_timeout_work() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52510: ieee802154: ca8210: Fix a potential UAF in ca8210_probe (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52511: spi: sun6i: reduce DMA RX transfer width to single byte (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52512: pinctrl: nuvoton: wpcm450: fix out of bounds write (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52513: RDMA/siw: Fix connection failure handling (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52514: x86/reboot: VMCLEAR active VMCSes before emergency reboot (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52515: RDMA/srp: Do not call scsi_done() from srp_abort() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52516: dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52517: spi: sun6i: fix race between DMA RX transfer completion and RX FIFO drain (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52500: scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52519: HID: intel-ish-hid: ipc: Disable and reenable ACPI GPE bit (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52520: platform/x86: think-lmi: Fix reference leak (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52521: bpf: Annotate bpf_long_memcpy with data_race (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52522: net: fix possible store tearing in neigh_periodic_work() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52523: bpf, sockmap: Reject sk_msg egress redirects to non-TCP sockets (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52501: ring-buffer: Do not attempt to read past "commit" (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52502: net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52503: tee: amdtee: fix use-after-free vulnerability in amdtee_close_session (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52504: x86/alternatives: Disable KASAN in apply_alternatives() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52505: phy: lynx-28g: serialize concurrent phy_set_mode_ext() calls to shared registers (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52506: LoongArch: Set all reserved memblocks on Node#0 at initialization (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52507: nfc: nci: assert requested protocol is valid (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52525: wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52526: erofs: fix memory leak of LZMA global compressed deduplication (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52527: ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52528: net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52529: HID: sony: Fix a potential memory leak in sony_probe() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52530: wifi: mac80211: fix potential key use-after-free (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52531: wifi: iwlwifi: mvm: Fix a memory corruption issue (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52532: net: mana: Fix TX CQE error handling (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52524: net: nfc: llcp: Add lock when modifying device list (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52518: Bluetooth: hci_codec: Fix leaking content of local_codecs (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52560: mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52559: iommu/vt-d: Avoid memory allocation in iommu_suspend() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52569: btrfs: remove BUG() after failure to insert delayed dir index item (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52571: power: supply: rk817: Fix node refcount leak (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52570: vfio/mdev: Fix a null-ptr-deref bug for mdev_unregister_parent() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52573: net: rds: Fix possible NULL-pointer dereference (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52572: cifs: Fix UAF in cifs_demultiplex_thread() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52574: team: fix null-ptr-deref when team device type is changed (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52575: x86/srso: Fix SBPB enablement for spec_rstack_overflow=off (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52576: x86/mm, kexec, ima: Use memblock_free_late() from ima_free_kexec_buffer() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52577: dccp: fix dccp_v4_err()/dccp_v6_err() again (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52578: net: bridge: use DEV_STATS_INC() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52561: arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52579: ipv4: fix null-deref in ipv4_link_failure (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52562: mm/slab_common: fix slab_caches list corruption after kmem_cache_destroy() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52563: drm/meson: fix memory leak on ->hpd_notify callback (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52564: Revert "tty: n_gsm: fix UAF in gsm_cleanup_mux" (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52565: media: uvcvideo: Fix OOB read (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52566: nilfs2: fix potential use after free in nilfs_gccache_submit_read_data() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52567: serial: 8250_port: Check IRQ data before use (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52568: x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52581: netfilter: nf_tables: fix memleak when more than 255 elements expired (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52582: netfs: Only call folio_start_fscache() one time for each folio (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52580: net/core: Fix ETH_P_1588 flow dissector (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

March 3 (1 message)

REJECTED: CVE-2023-52466: PCI: Avoid potential out-of-bounds read in pci_dev_for_each_resource() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

March 4 (29 messages)

CVE-2024-26622: tomoyo: fix UAF write bug in tomoyo_write_control() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2023-52579: ipv4: fix null-deref in ipv4_link_failure (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47083: pinctrl: mediatek: fix global-out-of-bounds issue (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47082: tun: avoid double free in tun_free_netdev (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47084: hamradio: defer ax25 kfree after unregister_netdev (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47086: phonet/pep: refuse to enable an unbound pipe (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47085: hamradio: improve the incomplete fix to avoid NPD (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47097: Input: elantech - fix stack out of bound access in elantech_change_report_id() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47088: mm/damon/dbgfs: protect targets destructions with kdamond_lock (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47098: hwmon: (lm90) Prevent integer overflow/underflow in hysteresis calculations (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47099: veth: ensure skb entering GRO are not cloned. (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47100: ipmi: Fix UAF when uninstall ipmi_si and ipmi_msghandler module (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47102: net: marvell: prestera: fix incorrect structure access (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47101: asix: fix uninit-value in asix_mdio_read() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47103: inet: fully convert sk->sk_rx_dst to RCU rules (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47089: kfence: fix memory leak when cat kfence objects (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47090: mm/hwpoison: clear MF_COUNT_INCREASED before retrying get_any_page() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47091: mac80211: fix locking in ieee80211_start_ap error path (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47092: KVM: VMX: Always clear vmx->fail on emulation_required (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47093: platform/x86: intel_pmc_core: fix memleak on registration failure (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47094: KVM: x86/mmu: Don't advance iterator after restart due to yielding (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47095: ipmi: ssif: initialize ssif_info->client early (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47096: ALSA: rawmidi - fix the uninitalized user_pversion (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47087: tee: optee: Fix incorrect page free bug (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47105: ice: xsk: return xsk buffers back to pool when cleaning the ring (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47106: netfilter: nf_tables: fix use-after-free in nft_set_catchall_destroy() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47107: NFSD: Fix READDIR buffer overflow (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47108: drm/mediatek: hdmi: Perform NULL pointer check for mtk_hdmi_conf (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47104: IB/qib: Fix memory leak in qib_user_sdma_queue_pkts() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

March 5 (3 messages)

CVE-2022-48630: crypto: qcom-rng - fix infinite loop on requests not multiple of WORD_SZ (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48629: crypto: qcom-rng - ensure buffer for generate is completely filled (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2023-52521: bpf: Annotate bpf_long_memcpy with data_race (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

March 6 (31 messages)

CVE-2023-52584: spmi: mediatek: Fix UAF on device remove (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52583: ceph: fix deadlock or deadcode of misusing dget() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52594: wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52593: wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52595: wifi: rt2x00: restart beacon queue when hardware reset (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52596: sysctl: Fix out of bounds access for empty sysctl registers (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52597: KVM: s390: fix setting of fpc register (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52598: s390/ptrace: handle setting of fpc register correctly (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52599: jfs: fix array-index-out-of-bounds in diNewExt (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52600: jfs: fix uaf in jfs_evict_inode (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52601: jfs: fix array-index-out-of-bounds in dbAdjTree (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52602: jfs: fix slab-out-of-bounds Read in dtSearch (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52585: drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52604: FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52605: ACPI: extlog: fix NULL pointer dereference check (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52606: powerpc/lib: Validate size for vector operations (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52603: UBSAN: array-index-out-of-bounds in dtSplitRoot (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52607: powerpc/mm: Fix null-pointer dereference in pgtable_cache_add (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26623: pds_core: Prevent race issues involving the adminq (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26624: af_unix: fix lockdep positive in sk_diag_dump_icons() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26625: llc: call sock_orphan() at release time (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52586: drm/msm/dpu: Add mutex lock in control vblank irq (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52587: IB/ipoib: Fix mcast list locking (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52588: f2fs: fix to tag gcing flag on page during block migration (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52589: media: rkisp1: Fix IRQ disable race issue (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52590: ocfs2: Avoid touching renamed directory if parent does not change (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52591: reiserfs: Avoid touching renamed directory if parent does not change (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52592: libbpf: Fix NULL pointer dereference in bpf_object__collect_prog_relos (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26627: scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26628: drm/amdkfd: Fix lock dependency warning (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26626: ipmr: fix kernel panic when forwarding mcast packets (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

March 7 (1 message)

REJECTED: CVE-2023-52592: libbpf: Fix NULL pointer dereference in bpf_object__collect_prog_relos (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

March 8 (3 messages)

REJECTED: CVE-2021-46946: ext4: fix check to prevent false positive report of incorrect used inodes (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2023-52496: mtd: maps: vmu-flash: Fix the (mtd core) switch to ref counters (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
Re: CVE-2023-52496: mtd: maps: vmu-flash: Fix the (mtd core) switch to ref counters (Greg KH <gregkh@...uxfoundation.org>)

March 11 (1 message)

REJECTED: CVE-2023-52514: x86/reboot: VMCLEAR active VMCSes before emergency reboot (Lee Jones <lee@...nel.org>)

March 12 (2 messages)

REJECTED: CVE-2024-26613: net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv (Lee Jones <lee@...nel.org>)
REJECTED: CVE-2024-26609: netfilter: nf_tables: reject QUEUE/DROP verdict parameters (Lee Jones <lee@...nel.org>)

March 13 (3 messages)

CVE-2023-52608: firmware: arm_scmi: Check mailbox/SMT channel for consistency (Lee Jones <lee@...nel.org>)
CVE-2024-26629: nfsd: fix RELEASE_LOCKOWNER (Lee Jones <lee@...nel.org>)
CVE-2024-26630: mm: cachestat: fix folio read-after-free in cache walk (Lee Jones <lee@...nel.org>)

March 14 (1 message)

Re: CVE-2023-52605: ACPI: extlog: fix NULL pointer dereference check (Lee Jones <lee@...nel.org>)

March 15 (27 messages)

CVE-2021-47110: x86/kvm: Disable kvmclock on all CPUs on shutdown (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47109: neighbour: allow NUD_NOARP entries to be forced GCed (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47119: ext4: fix memory leak in ext4_fill_super (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47120: HID: magicmouse: fix NULL-deref on disconnect (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47121: net: caif: fix memory leak in cfusbl_device_notify (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47111: xen-netback: take a reference to the RX task thread (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47112: x86/kvm: Teardown PV features on boot CPU as well (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47114: ocfs2: fix data corruption by fallocate (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47113: btrfs: abort in rename_exchange if we fail to insert the second ref (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47115: nfc: fix NULL ptr dereference in llcp_sock_getname() after failed connect (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47116: ext4: fix memory leak in ext4_mb_init_backend on error path. (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47117: ext4: fix bug on in ext4_es_cache_extent as ext4_split_extent_at failed (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47118: pid: take a reference when initializing `cad_pid` (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47123: io_uring: fix ltout double free on completion race (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47132: mptcp: fix sk_forward_memory corruption on retransmission (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47133: HID: amd_sfh: Fix memory leak in amd_sfh_work (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47134: efi/fdt: fix panic when no valid fdt found (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47135: mt76: mt7921: fix possible AOOB issue in mt7921_mcu_tx_rate_report (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47124: io_uring: fix link timeout refs (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47125: sch_htb: fix refcount leak in htb_parent_to_leaf_offload (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47126: ipv6: Fix KASAN: slab-out-of-bounds Read in fib6_nh_flush_exceptions (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47127: ice: track AF_XDP ZC enabled queues in bitmap (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47128: bpf, lockdown, audit: Fix buggy SELinux lockdown permission checks (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47129: netfilter: nft_ct: skip expectations for confirmed conntrack (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47130: nvmet: fix freeing unallocated p2pmem (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47122: net: caif: fix memory leak in caif_device_notify (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47131: net/tls: Fix use-after-free after the TLS device goes down and up (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

March 18 (25 messages)

CVE-2023-52609: binder: fix race between mmput() and do_exit() (Lee Jones <lee@...nel.org>)
CVE-2023-52610: net/sched: act_ct: fix skb leak and crash on ooo frags (Lee Jones <lee@...nel.org>)
CVE-2023-52611: wifi: rtw88: sdio: Honor the host max_req_size in the RX path (Lee Jones <lee@...nel.org>)
CVE-2023-52613: drivers/thermal/loongson2_thermal: Fix incorrect PTR_ERR() judgment (Lee Jones <lee@...nel.org>)
CVE-2023-52612: crypto: scomp - fix req->dst buffer overflow (Lee Jones <lee@...nel.org>)
CVE-2024-26632: block: Fix iterating over an empty bio with bio_for_each_folio_all (Lee Jones <lee@...nel.org>)
CVE-2024-26631: ipv6: mcast: fix data-race in ipv6_mc_down / mld_ifc_work (Lee Jones <lee@...nel.org>)
CVE-2024-26633: ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim() (Lee Jones <lee@...nel.org>)
CVE-2023-52614: PM / devfreq: Fix buffer overflow in trans_stat_show (Lee Jones <lee@...nel.org>)
CVE-2023-52615: hwrng: core - Fix page fault dead lock on mmap-ed hwrng (Lee Jones <lee@...nel.org>)
CVE-2024-26634: net: fix removing a namespace with conflicting altnames (Lee Jones <lee@...nel.org>)
CVE-2024-26635: llc: Drop support for ETH_P_TR_802_2. (Lee Jones <lee@...nel.org>)
CVE-2024-26636: llc: make llc_ui_sendmsg() more robust against bonding changes (Lee Jones <lee@...nel.org>)
CVE-2024-26637: wifi: ath11k: rely on mac80211 debugfs handling for vif (Lee Jones <lee@...nel.org>)
CVE-2023-52616: crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init (Lee Jones <lee@...nel.org>)
CVE-2024-26638: nbd: always initialize struct msghdr completely (Lee Jones <lee@...nel.org>)
CVE-2023-52617: PCI: switchtec: Fix stdev_release() crash after surprise hot remove (Lee Jones <lee@...nel.org>)
CVE-2023-52619: pstore/ram: Fix crash when setting number of cpus to an odd number (Lee Jones <lee@...nel.org>)
CVE-2024-26639: mm, kmsan: fix infinite recursion due to RCU critical section (Lee Jones <lee@...nel.org>)
CVE-2024-26640: tcp: add sanity checks to rx zerocopy (Lee Jones <lee@...nel.org>)
CVE-2023-52618: block/rnbd-srv: Check for unlikely string overflow (Lee Jones <lee@...nel.org>)
CVE-2024-26641: ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv() (Lee Jones <lee@...nel.org>)
REJECTED: CVE-2021-47115: nfc: fix NULL ptr dereference in llcp_sock_getname() after failed connect (Lee Jones <lee@...nel.org>)
REJECTED: CVE-2023-52605: ACPI: extlog: fix NULL pointer dereference check (Lee Jones <lee@...nel.org>)
Re: CVE-2023-52605: ACPI: extlog: fix NULL pointer dereference check (Lee Jones <lee@...nel.org>)

March 19 (4 messages)

REJECTED: CVE-2021-46907: KVM: VMX: Don't use vcpu->run->internal.ndata as an array index (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2021-46975: netfilter: conntrack: Make global sysctls readonly in non-init netns (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2021-47084: hamradio: defer ax25 kfree after unregister_netdev (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2021-47085: hamradio: improve the incomplete fix to avoid NPD (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

March 20 (1 message)

REJECTED: CVE-2024-26628: drm/amdkfd: Fix lock dependency warning (Lee Jones <lee@...nel.org>)

March 21 (3 messages)

CVE-2024-26642: netfilter: nf_tables: disallow anonymous set with timeout flag (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52620: netfilter: nf_tables: disallow timeout for anonymous sets (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26643: netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

March 25 (41 messages)

CVE-2021-47137: net: lantiq: fix memory corruption in RX ring (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47149: net: fujitsu: fix potential null-ptr-deref (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47138: cxgb4: avoid accessing registers when clearing filters (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47147: ptp: ocp: Fix a resource leak in an error handling path (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47146: mld: fix panic in mld_newpack() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47140: iommu/amd: Clear DMA ops when switching domain (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47142: drm/amdgpu: Fix a use-after-free (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47145: btrfs: do not BUG_ON in link_to_fixup_dir (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47144: drm/amd/amdgpu: fix refcount leak (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47150: net: fec: fix the potential memory leak in fec_enet_init() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47153: i2c: i801: Don't generate an interrupt on bus reset (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47152: mptcp: fix data stream corruption (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47148: octeontx2-pf: fix a buffer overflow in otx2_set_rxfh_context() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47136: net: zero-initialize tc skb extension on allocation (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47151: interconnect: qcom: bcm-voter: add a missing of_node_put() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47175: net/sched: fq_pie: fix OOB access in the traffic path (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47176: s390/dasd: add missing discipline function (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47177: iommu/vt-d: Fix sysfs leak in alloc_iommu() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47178: scsi: target: core: Avoid smp_processor_id() in preemptible code (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47165: drm/meson: fix shutdown crash when component not probed (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47164: net/mlx5e: Fix null deref accessing lag dev (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47180: NFC: nci: fix memory leak in nci_allocate_device (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47162: tipc: skb_linearize the head skb when reassembling msgs (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47163: tipc: wait and exit until all work queues are done (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47160: net: dsa: mt7530: fix VLAN traffic leaks (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47166: NFS: Don't corrupt the value of pg_bytes_written in nfs_do_recoalesce() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47158: net: dsa: sja1105: add error handling in sja1105_setup() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47159: net: dsa: fix a crash if ->get_sset_count() fails (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47168: NFS: fix an incorrect limit in filelayout_decode_layout() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47171: net: usb: fix memory leak in smsc75xx_bind (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47174: netfilter: nft_set_pipapo_avx2: Add irq_fpu_usable() check, fallback to non-AVX2 version (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47173: misc/uss720: fix memory leak in uss720_probe (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47143: net/smc: remove device from smcd_dev_list after failed device_add() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47172: iio: adc: ad7124: Fix potential overflow due to non sequential channel numbers (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47141: gve: Add NULL pointer checks when freeing irqs. (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47167: NFS: Fix an Oopsable condition in __nfs_pageio_add_request() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47139: net: hns3: put off calling register_netdev() until client initialize complete (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47179: NFSv4: Fix a NULL pointer dereference in pnfs_mark_matching_lsegs_return() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47170: USB: usbfs: Don't WARN about excessively large memory allocations (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47161: spi: spi-fsl-dspi: Fix a resource leak in an error handling path (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47169: serial: rp2: use 'request_firmware' instead of 'request_firmware_nowait' (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

March 26 (14 messages)

CVE-2024-26644: btrfs: don't abort filesystem when attempting to snapshot deleted subvolume (Lee Jones <lee@...nel.org>)
CVE-2024-26645: tracing: Ensure visibility when inserting an element into tracing_map (Lee Jones <lee@...nel.org>)
CVE-2023-52621: bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers (Lee Jones <lee@...nel.org>)
CVE-2023-52622: ext4: avoid online resizing failures due to oversized flex bg (Lee Jones <lee@...nel.org>)
CVE-2023-52623: SUNRPC: Fix a suspicious RCU usage warning (Lee Jones <lee@...nel.org>)
CVE-2023-52624: drm/amd/display: Wake DMCUB before executing GPINT commands (Lee Jones <lee@...nel.org>)
CVE-2023-52625: drm/amd/display: Refactor DMCUB enter/exit idle interface (Lee Jones <lee@...nel.org>)
CVE-2024-26648: drm/amd/display: Fix variable deferencing before NULL check in edp_setup_replay() (Lee Jones <lee@...nel.org>)
CVE-2024-26647: drm/amd/display: Fix late derefrence 'dsc' check in 'link_set_dsc_pps_packet()' (Lee Jones <lee@...nel.org>)
CVE-2024-26649: drm/amdgpu: Fix the null pointer when load rlc firmware (Lee Jones <lee@...nel.org>)
CVE-2024-26650: platform/x86: p2sb: Allow p2sb_bar() calls during PCI device probe (Lee Jones <lee@...nel.org>)
CVE-2023-52626: net/mlx5e: Fix operation precedence bug in port timestamping napi_poll context (Lee Jones <lee@...nel.org>)
CVE-2023-52627: iio: adc: ad7091r: Allow users to configure device events (Lee Jones <lee@...nel.org>)
CVE-2024-26646: thermal: intel: hfi: Add syscore callbacks for system-wide PM (Lee Jones <lee@...nel.org>)

March 27 (4 messages)

CVE-2024-26651: sr9800: Add check for usbnet_get_endpoints (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26652: net: pds_core: Fix possible double free in error handling path (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2024-26624: af_unix: fix lockdep positive in sk_diag_dump_icons() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
Re: CVE-2023-52462: bpf: fix check for attempt to corrupt spilled pointer (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

March 28 (1 message)

CVE-2023-52628: netfilter: nftables: exthdr: fix 4-byte stack OOB write (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

March 29 (1 message)

CVE-2023-52629: sh: push-switch: Reorder cleanup operations to avoid use-after-free bug (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

270 messages

Powered by blists - more mailing lists