linux-cve-announce mailing list - 2024/04

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

linux-cve-announce mailing list - 2024/04

Mon	Tue	Wed	Thu	Fri	Sat	Sun
¹ 3	² 36	³ 98	⁴ 33	⁵ 5	⁶	⁷
⁸ 1	⁹	¹⁰ 40	¹¹	¹²	¹³ 1	¹⁴
¹⁵ 1	¹⁶	¹⁷ 109	¹⁸ 6	¹⁹	²⁰	²¹
²²	²³ 1	²⁴ 8	²⁵	²⁶ 1	²⁷	²⁸ 40
²⁹	³⁰ 4

Messages by day:

April 1 (3 messages)

CVE-2024-26653: usb: misc: ljca: Fix double free in error handling path (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26654: ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26655: Fix memory leak in posix_clock_open() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

April 2 (36 messages)

CVE-2024-26657: drm/sched: fix null-ptr-deref in init entity (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26656: drm/amdgpu: fix use-after-free bug (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52631: fs/ntfs3: Fix an NULL dereference bug (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52630: blk-iocost: Fix an UBSAN shift-out-of-bounds warning (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26666: wifi: mac80211: fix RCU use in TDLS fast-xmit (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26667: drm/msm/dpu: check for valid hw_pp in dpu_encoder_helper_phys_cleanup (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26658: bcachefs: grab s_umount only if snapshotting (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26659: xhci: handle isoc Babble and Buffer Overrun events properly (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26660: drm/amd/display: Implement bounds check for stream encoder creation in DCN301 (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26661: drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()' (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26662: drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()' (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26663: tipc: Check the bearer type before calling tipc_udp_nl_bearer_add() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26664: hwmon: (coretemp) Fix out-of-bounds memory access (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26665: tunnels: fix out of bounds access when building IPv6 PMTU error (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26669: net/sched: flower: Fix chain template offload (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26668: netfilter: nft_limit: reject configurations that cause integer overflow (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26670: arm64: entry: fix ARM64_WORKAROUND_SPECULATIVE_UNPRIV_LOAD (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52633: um: time-travel: fix time corruption (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52632: drm/amdkfd: Fix lock dependency warning with srcu (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52634: drm/amd/display: Fix disable_otg_wa logic (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52635: PM / devfreq: Synchronize devfreq_monitor_[start/stop] (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26671: blk-mq: fix IO hang from sbitmap wakeup race (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26672: drm/amdgpu: Fix variable 'mca_funcs' dereferenced before NULL check in 'amdgpu_mca_smu_get_mca_entry()' (Greg Kroah-Hartman <gregkh@...uxfoundat…)
CVE-2024-26673: netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26674: x86/lib: Revert to _ASM_EXTABLE_UA() for {get,put}_user() fixups (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52636: libceph: just wait for more data to be available on the socket (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26683: wifi: cfg80211: detect stuck ECSA element in probe resp (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26684: net: stmmac: xgmac: fix handling of DPP safety error for DMA channels (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26675: ppp_async: limit MRU to 64K (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26676: af_unix: Call kfree_skb() for dead unix_(sk)->oob_skb in GC. (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26677: rxrpc: Fix delayed ACKs to not set the reference serial number (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26678: x86/efistub: Use 1:1 file:memory mapping for PE/COFF .compat section (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26679: inet: read sk->sk_family once in inet_recv_error() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26680: net: atlantic: Fix DMA mapping for PTP hwts ring (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26682: wifi: mac80211: improve CSA/ECSA connection refusal (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26681: netdevsim: avoid potential loop in nsim_dev_trap_report_work() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

April 3 (98 messages)

CVE-2023-52638: can: j1939: prevent deadlock by changing j1939_socks_lock to rwlock (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52637: can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER) (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26694: wifi: iwlwifi: fix double-free bug (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26693: wifi: iwlwifi: mvm: fix a crash when we run out of stations (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26695: crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26692: smb: Fix regression in writes when non-standard maximum write size negotiated (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26696: nilfs2: fix hang in nilfs_lookup_dirty_data_buffers() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26697: nilfs2: fix data corruption in dsync block recovery for small block sizes (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26698: hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26699: drm/amd/display: Fix array-index-out-of-bounds in dcn35_clkmgr (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26701: eventfs: Do not create dentries nor inodes in iterate_shared (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26700: drm/amd/display: Fix MST Null Ptr for RV (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52639: KVM: s390: vsie: fix race during shadow creation (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26702: iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26703: tracing/timerlat: Move hrtimer_init to timerlat_fd open() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26704: ext4: fix double-free of blocks due to wrong extents moved_len (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26705: parisc: BTLB: Fix crash when setting up BTLB at CPU bringup (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26707: net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26709: powerpc/iommu: Fix the missing iommu_group_put() during platform domain attach (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26706: parisc: Fix random data corruption from exception handler (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26710: powerpc/kasan: Limit KASAN thread size increase to 32KB (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26685: nilfs2: fix potential bug in end_buffer_async_write (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26686: fs/proc: do_task_stat: use sig->stats_lock to gather the threads/children stats (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26688: fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26708: mptcp: really cope with fastopen race (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26689: ceph: prevent use-after-free in encode_cap_msg() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26690: net: stmmac: protect updates of 64-bit statistics counters (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26712: powerpc/kasan: Fix addr error caused by page alignment (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26721: drm/i915/dsc: Fix the macro that calculates DSCC_/DSCA_ PPS reg address (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26722: ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26687: xen/events: close evtchn after mapping cleanup (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26725: dpll: fix possible deadlock during netlink dump operation (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26726: btrfs: don't drop extent_map for free space inode on write error (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26727: btrfs: do not ASSERT() if the newly created subvolume already got read (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26713: powerpc/pseries/iommu: Fix iommu initialisation during DLPAR add (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26714: interconnect: qcom: sc8180x: Mark CO0 BCM keepalive (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26715: usb: dwc3: gadget: Fix NULL pointer dereference in dwc3_gadget_suspend (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26691: KVM: arm64: Fix circular locking dependency (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26716: usb: core: Prevent null pointer dereference in update_port_device_state (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26723: lan966x: Fix crash when adding interface under a lag (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26717: HID: i2c-hid-of: fix NULL-deref on failed power up (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26719: nouveau: offload fence uevents work to workqueue (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26724: net/mlx5: DPLL, Fix possible use after free after delayed work timer triggers (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26718: dm-crypt, dm-verity: disable tasklets (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26711: iio: adc: ad4130: zero-initialize clock init data (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26720: mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2024-26701: eventfs: Do not create dentries nor inodes in iterate_shared (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52641: fs/ntfs3: Add NULL ptr dereference checking at the end of attr_allocate_frame() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26736: afs: Increase buffer size in afs_update_volume_status() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52640: fs/ntfs3: Fix oob in ntfs_listxattr (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26737: bpf: Fix racing between bpf_timer_cancel_and_free and bpf_timer_cancel (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26738: powerpc/pseries/iommu: DLPAR add doesn't completely initialize pci_controller (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26739: net/sched: act_mirred: don't override retval if we already lost the skb (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26740: net/sched: act_mirred: use the backlog for mirred ingress (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26747: usb: roles: fix NULL pointer issue when put module's reference (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26744: RDMA/srpt: Support specifying the srpt_service_guid parameter (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26728: drm/amd/display: fix null-pointer dereference on edid reading (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26749: usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26732: net: implement lockless setsockopt(SO_PEEK_OFF) (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26735: ipv6: sr: fix possible use-after-free and null-ptr-deref (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26734: devlink: fix possible use-after-free and memory leaks in devlink_init() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26729: drm/amd/display: Fix potential null pointer dereference in dc_dmub_srv (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26752: l2tp: pass correct message length to ip6_append_data (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26762: cxl/pci: Skip to handle RAS errors if CXL.mem device is detached (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26761: cxl/pci: Fix disabling memory if DVSEC CXL Range does not match a CFMWS window (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26763: dm-crypt: don't modify the data when using authenticated encryption (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26765: LoongArch: Disable IRQ before init_fn() for nonboot CPUs (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26764: fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26766: IB/hfi1: Fix sdma.h tx->num_descs off-by-one error (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26767: drm/amd/display: fixed integer types and null check locations (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26768: LoongArch: Change acpi_core_pic[NR_CPUS] to acpi_core_pic[MAX_CORE_PIC] (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26769: nvmet-fc: avoid deadlock on delete association path (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26753: crypto: virtio/akcipher - Fix stack overflow on memcpy (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26772: ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26770: HID: nvidia-shield: Add missing null pointer checks to LED initialization (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26773: ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26774: ext4: avoid dividing by 0 in mb_update_avg_fragment_size() when block bitmap corrupt (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26776: spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26777: fbdev: sis: Error out if pixclock equals zero (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26778: fbdev: savage: Error out if pixclock equals zero (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26754: gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26755: md: Don't suspend the array for interrupted reshape (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26756: md: Don't register sync_thread for reshape directly (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26759: mm/swap: fix race when skipping swapcache (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26760: scsi: target: pscsi: Fix bio_put() for error case (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26751: ARM: ep93xx: Add terminator to gpiod_lookup_table (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26742: scsi: smartpqi: Fix disable_managed_interrupts (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26733: arp: Prevent overflow in arp_req_get(). (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26731: bpf, sockmap: Fix NULL pointer dereference in sk_psock_verdict_data_ready() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26730: hwmon: (nct6775) Fix access to temperature configuration registers (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26748: usb: cdns3: fix memory double free when handle zero packet (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26775: aoe: avoid potential deadlock at set_capacity (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26757: md: Don't ignore read-only array in md_check_recovery() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26741: dccp/tcp: Unhash sk from ehash for tb2 alloc failure after check_estalblished(). (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26743: RDMA/qedr: Fix qedr_create_user_qp error flow (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26779: wifi: mac80211: fix race condition on enabling fast-xmit (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26771: dmaengine: ti: edma: Add some null pointer checks to the edma_probe (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26758: md: Don't ignore suspended array in md_check_recovery() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

April 4 (33 messages)

CVE-2024-26746: dmaengine: idxd: Ensure safe user copy of completion record (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26745: powerpc/pseries/iommu: IOMMU table is not initialized for kdump over SR-IOV (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26750: af_unix: Drop oob_skb ref before purging queue in GC. (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26781: mptcp: fix possible deadlock in subflow diag (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26790: dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26791: btrfs: dev-replace: properly validate device names (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26792: btrfs: fix double free of anonymous device after snapshot creation failure (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26793: gtp: fix use-after-free and null-ptr-deref in gtp_newlink() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26794: btrfs: fix race between ordered extent completion and fiemap (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26795: riscv: Sparse-Memory/vmemmap out-of-bounds fix (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26798: fbcon: always restore the old font data in fbcon_do_set_font() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26796: drivers: perf: ctr_get_width function for legacy is not defined (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26797: drm/amd/display: Prevent potential buffer overflow in map_hw_resources (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26799: ASoC: qcom: Fix uninitialized pointer dmactl (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26782: mptcp: fix double-free on socket dismantle (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26800: tls: fix use-after-free on failed backlog decryption (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26801: Bluetooth: Avoid potential use-after-free in hci_error_reset (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26802: stmmac: Clear variable when destroying workqueue (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26803: net: veth: clear GRO when clearing XDP even when down (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26804: net: ip_tunnel: prevent perpetual headroom growth (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26805: netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26806: spi: cadence-qspi: remove system-wide suspend helper calls from runtime PM hooks (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26807: spi: cadence-qspi: fix pointer reference in runtime PM hooks (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26783: mm/vmscan: fix a bug calling wakeup_kswapd() with a wrong zone index (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26784: pmdomain: arm: Fix NULL dereference on scmi_perf_domain removal (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26785: iommufd: Fix protection fault in iommufd_test_syz_conv_iova (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26786: iommufd: Fix iopt_access_list_id overwrite bug (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26787: mmc: mmci: stm32: fix DMA API overlapping mappings warning (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26788: dmaengine: fsl-qdma: init irq after reg initialization (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26789: crypto: arm64/neonbs - fix out-of-bounds access on short input (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26780: af_unix: Fix task hung while purging oob_skb in GC. (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26809: netfilter: nft_set_pipapo: release elements in clone only from destroy path (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26808: netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

April 5 (5 messages)

CVE-2024-26810: vfio/pci: Lock external INTx masking ops (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26813: vfio/platform: Create persistent IRQ handlers (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26814: vfio/fsl-mc: Block calling interrupt handler without trigger (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27437: vfio/pci: Disable auto-enable of exclusive INTx IRQ (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26812: vfio/pci: Create persistent INTx handler (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

April 8 (1 message)

CVE-2024-26811: ksmbd: validate payload size in ipc response (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

April 10 (40 messages)

CVE-2024-26815: net/sched: taprio: proper TCA_TAPRIO_TC_ENTRY_INDEX check (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26816: x86, relocs: Ignore relocations in .notes section (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47182: scsi: core: Fix scsi_mode_sense() buffer length handling (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47181: usb: musb: tusb6010: check return value after calling platform_get_resource() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47183: scsi: lpfc: Fix link down processing to address NULL pointer dereference (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47185: tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47186: tipc: check for null after calling kmemdup (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47184: i40e: Fix NULL ptr dereference on VSI filter sync (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47188: scsi: ufs: core: Improve SCSI abort handling (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47197: net/mlx5e: nullify cq->dbg pointer in mlx5_debug_cq_remove() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47198: scsi: lpfc: Fix use-after-free in lpfc_unreg_rpi() routine (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47199: net/mlx5e: CT, Fix multiple allocations and memleak of mod acts (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47200: drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47201: iavf: free q_vectors before queues in iavf_disable_vf (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47204: net: dpaa2-eth: fix use-after-free in dpaa2_eth_remove (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47202: thermal: Fix NULL pointer dereferences in of_thermal_ functions (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47203: scsi: lpfc: Fix list_add() corruption in lpfc_drain_txq() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47206: usb: host: ohci-tmio: check return value after calling platform_get_resource() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47205: clk: sunxi-ng: Unregister clocks/resets when unbinding (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47189: btrfs: fix memory ordering between normal and ordered work functions (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47207: ALSA: gus: fix null pointer dereference on pointer block (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47190: perf bpf: Avoid memory leak from perf_env__insert_btf() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47192: scsi: core: sysfs: Fix hang when device state is set via sysfs (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47196: RDMA/core: Set send and receive CQ before forwarding to the driver (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47194: cfg80211: call cfg80211_stop_ap when switch from P2P_GO type (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47195: spi: fix use-after-free of the add_lock mutex (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47191: scsi: scsi_debug: Fix out-of-bound read in resp_readcap16() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47193: scsi: pm80xx: Fix memory leak during rmmod (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47187: arm64: dts: qcom: msm8998: Fix CPU/L2 idle state latency and residency (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47210: usb: typec: tipd: Remove WARN_ON in tps6598x_block_read (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47209: sched/fair: Prevent dead task groups from regaining cfs_rq's (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47219: scsi: scsi_debug: Fix out-of-bound read in resp_report_tgtpgs() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47211: ALSA: usb-audio: fix null pointer dereference on pointer cs_desc (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47212: net/mlx5: Update error handler for UCTX and UMEM (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47213: NFSD: Fix exposure in nfsd4_decode_bitmap() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47214: hugetlb, userfaultfd: fix reservation restore on userfaultfd error (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47215: net/mlx5e: kTLS, Fix crash in RX resync flow (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47216: scsi: advansys: Fix kernel pointer leak (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47217: x86/hyperv: Fix NULL deref in set_hv_tscchange_cb() if Hyper-V setup fails (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47218: selinux: fix NULL-pointer dereference when hashtab allocation fails (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

April 13 (1 message)

CVE-2024-26817: amdkfd: use calloc instead of kzalloc to avoid integer overflow (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

April 15 (1 message)

REJECTED: CVE-2021-47213: NFSD: Fix exposure in nfsd4_decode_bitmap() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

April 17 (109 messages)

CVE-2023-52642: media: rc: bpf attach/detach requires write permission (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26826: mptcp: fix data re-injection from stale subflow (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52643: iio: core: fix memleak in iio_device_register_sysfs (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26827: i2c: qcom-geni: Correct I2C TRE sequence (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26828: cifs: fix underflow in parse_server_interfaces() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26830: i40e: Do not allow untrusted VF to remove administratively set MAC (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26831: net/handshake: Fix handshake_req_destroy_test1 (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26818: tools/rtla: Fix clang warning about mount_point var size (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26819: dm: limit the number of targets and parameter size area (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26820: hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26821: fs: relax mount_setattr() permission checks (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26822: smb: client: set correct id, uid and cruid for multiuser automounts (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26823: irqchip/gic-v3-its: Restore quirk probing for ACPI-based systems (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26824: crypto: algif_hash - Remove bogus SGL free on zero-length error path (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26825: nfc: nci: free rx_data_reassembly skb on NCI device cleanup (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26829: media: ir_toy: fix a memleak in irtoy_tx (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26833: drm/amd/display: Fix memory leak in dm_sw_fini() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26832: mm: zswap: fix missing folio cleanup in writeback race path (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26842: scsi: ufs: core: Fix shift issue in ufshcd_clear_cmd() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26843: efi: runtime: Fix potential overflow of soft-reserved region size (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26844: block: Fix WARNING in _copy_from_iter (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26845: scsi: target: core: Add TMF to tmr_list handling (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26846: nvme-fc: do not wait in vain when unloading module (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26834: netfilter: nft_flow_offload: release dst in case direct xmit path is used (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26835: netfilter: nf_tables: set dormant flag on hook register failure (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26836: platform/x86: think-lmi: Fix password opcode ordering for workstations (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26837: net: bridge: switchdev: Skip MDB replays of deferred events on offload (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26838: RDMA/irdma: Fix KASAN issue with tasklet (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26839: IB/hfi1: Fix a memleak in init_credit_return (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26840: cachefiles: fix memory leak in cachefiles_add_cache() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26841: LoongArch: Update cpu_sibling_map when disabling nonboot CPUs (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26848: afs: Fix endless loop in directory parsing (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26849: netlink: add nla be16/32 types to minlen array (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26847: powerpc/rtas: use correct function name for resetting TCE tables (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26850: mm/debug_vm_pgtable: fix BUG_ON with pud advanced test (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26851: netfilter: nf_conntrack_h323: Add protection for bmp length out of range (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26852: net/ipv6: avoid possible UAF in ip6_route_mpath_notify() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26853: igc: avoid returning frame twice in XDP_REDIRECT (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26854: ice: fix uninitialized dplls mutex usage (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26855: net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26856: net: sparx5: Fix use after free inside sparx5_del_mact_entry (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26857: geneve: make sure to pull inner header in geneve_rx() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26858: net/mlx5e: Use a memory barrier to enforce PTP WQ xmit submission tracking occurs after populating the m… (Greg Kroah-Hartman <gregkh@...uxfoundat…)
CVE-2024-26859: net/bnx2x: Prevent access to a freed page in page_pool (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52644: wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26861: wireguard: receive: annotate data-race around receiving_counter.counter (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26860: dm-integrity: fix a memory leak when rechecking the data (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26862: packet: annotate data-races around ignore_outgoing (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26873: scsi: hisi_sas: Fix a deadlock issue related to automatic dump (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26874: drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26876: drm/bridge: adv7511: fix crash on irq during probe (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26864: tcp: Fix refcnt handling in __inet_hash_connect(). (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26875: media: pvrusb2: fix uaf in pvr2_context_set_notify (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26877: crypto: xilinx - call finalize with bh disabled (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26878: quota: Fix potential NULL pointer dereference (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26879: clk: meson: Add missing clocks to axg_clk_regmaps (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26880: dm: call the resume method on internal suspend (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26881: net: hns3: fix kernel crash when 1588 is received on HIP08 devices (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26882: net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26865: rds: tcp: Fix use-after-free of net in reqsk_timer_handler(). (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26883: bpf: Fix stackmap overflow check on 32-bit arches (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26884: bpf: Fix hashtab overflow check on 32-bit arches (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26885: bpf: Fix DEVMAP_HASH overflow check on 32-bit arches (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26886: Bluetooth: af_bluetooth: Fix deadlock (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26887: Bluetooth: btusb: Fix memory leak (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26888: Bluetooth: msft: Fix memory leak (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26889: Bluetooth: hci_core: Fix possible buffer overflow (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26890: Bluetooth: btrtl: fix out of bounds memory access (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26891: iommu/vt-d: Don't issue ATS Invalidation request when device is disconnected (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26892: wifi: mt76: mt7921e: fix use-after-free in free_irq() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26866: spi: lpspi: Avoid potential use-after-free in probe() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26893: firmware: arm_scmi: Fix double free in SMC transport cleanup path (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26894: ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26895: wifi: wilc1000: prevent use-after-free on vif when cleaning up all interfaces (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26896: wifi: wfx: fix memory leak when starting AP (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26897: wifi: ath9k: delay all of ath9k_wmi_event_tasklet() until init is complete (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26898: aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26899: block: fix deadlock between bd_link_disk_holder and partition scan (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26900: md: fix kmemleak of rdev->serial (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26901: do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26902: perf: RISCV: Fix panic on pmu overflow handler (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26867: comedi: comedi_8255: Correct error in subdevice initialization (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26868: nfs: fix panic when nfs4_ff_layout_prepare_ds() fails (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26903: Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26869: f2fs: fix to truncate meta inode pages forcely (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26870: NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102 (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26871: f2fs: fix NULL pointer dereference in f2fs_submit_page_write() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26872: RDMA/srpt: Do not register event handler until srpt device is fully setup (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26863: hsr: Fix uninit-value access in hsr_get_node() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26905: btrfs: fix data races when accessing the reserved amount of block reserves (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26906: x86/mm: Disallow vsyscall page read for copy_from_kernel_nofault() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26904: btrfs: fix data race at btrfs_use_block_rsv() when accessing block reserve (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26909: soc: qcom: pmic_glink_altmode: fix drm bridge use-after-free (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26908: x86/xen: Add some null pointer checking to smp.c (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26907: RDMA/mlx5: Fix fortify source warning while accessing Eth segment (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
Re: CVE-2024-26774: ext4: avoid dividing by 0 in mb_update_avg_fragment_size() when block bitmap corrupt (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26910: netfilter: ipset: fix performance regression in swap operation (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52645: pmdomain: mediatek: fix race conditions with genpd (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26919: usb: ulpi: Fix debugfs directory leak (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
10 more messages

April 18 (6 messages)

CVE-2024-26921: inet: inet_defrag: prevent sk release while still in use (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
Re: CVE-2024-26920: tracing/trigger: Fix to return error if failed to alloc snapshot ("gregkh@...uxfoundation.org" <gregkh@...uxfoundation.org>)
REJECTED: CVE-2024-26819: dm: limit the number of targets and parameter size area (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
Re: CVE-2024-26827: i2c: qcom-geni: Correct I2C TRE sequence (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
Re: [External] : Re: CVE-2024-26920: tracing/trigger: Fix to return error if failed to alloc snapshot ("gregkh@...uxfoundation.org" <gregkh@...uxfoundation.org…)
REJECTED: CVE-2024-26827: i2c: qcom-geni: Correct I2C TRE sequence (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

April 23 (1 message)

CVE-2024-26922: drm/amdgpu: validate the parameters of bo mapping operations more clearly (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

April 24 (8 messages)

CVE-2024-26925: netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26924: netfilter: nft_set_pipapo: do not free live element (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26923: af_unix: Fix garbage collector racing against connect() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
Re: CVE-2023-52575: x86/srso: Fix SBPB enablement for spec_rstack_overflow=off (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2023-52575: x86/srso: Fix SBPB enablement for spec_rstack_overflow=off (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26922: binder: check offset alignment in binder_get_object() (Lee Jones <lee@...nel.org>)
Re: CVE-2024-26922: binder: check offset alignment in binder_get_object() (Lee Jones <lee@...nel.org>)
CVE-2024-26926: binder: check offset alignment in binder_get_object() (Lee Jones <lee@...nel.org>)

April 26 (1 message)

CVE-2023-52646: aio: fix mremap after fork null-deref (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

April 28 (40 messages)

CVE-2024-26928: smb: client: fix potential UAF in cifs_debug_files_proc_show() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26927: ASoC: SOF: Add some bounds checking to firmware data (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48632: i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48631: ext4: fix bug in extents parsing when eh_entries == 0 and eh_depth > 0 (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48641: netfilter: ebtables: fix memory leak when blob is malformed (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48642: netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48643: netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48644: net/sched: taprio: avoid disabling offload when it was never enabled (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48645: net: enetc: deny offload of tc-based TSN features on VF interfaces (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48646: sfc/siena: fix null pointer dereference in efx_hard_start_xmit (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48647: sfc: fix TX channel offset when using legacy interrupts (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48633: drm/gma500: Fix WARN_ON(lock->magic != lock) error (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48634: drm/gma500: Fix BUG: sleeping function called from invalid context errors (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48635: fsdax: Fix infinite loop in dax_iomap_rw() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48636: s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48637: bnxt: prevent skb UAF after handing over to PTP worker (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48638: cgroup: cgroup_get_from_id() must check the looked-up kn is a directory (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48639: net: sched: fix possible refcount leak in tc_new_tfilter() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48640: bonding: fix NULL deref in bond_rr_gen_slave_id (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48649: mm/slab_common: fix possible double free of kmem_cache (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48658: mm: slub: fix flush_cpu_slab()/__free_slab() invocations in task context. (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48659: mm/slub: fix to return errno if kmalloc() fails (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48660: gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48661: gpio: mockup: Fix potential resource leakage when register a chip (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48662: drm/i915/gem: Really move i915_gem_context.link under ref protection (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48663: gpio: mockup: fix NULL pointer dereference when removing debugfs (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48665: exfat: fix overflow for large capacity partition (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48664: btrfs: fix hang during unmount when stopping a space reclaim worker (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48666: scsi: core: Fix a use-after-free (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48667: smb3: fix temporary data corruption in insert range (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48650: scsi: qla2xxx: Fix memory leak in __qlt_24xx_handle_abts() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48668: smb3: fix temporary data corruption in collapse range (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48651: ipvlan: Fix out-of-bound bugs caused by unset skb->mac_header (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48652: ice: Fix crash by keep old cfg when update TCs more than queues (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48653: ice: Don't double unplug aux on peer initiated reset (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48654: netfilter: nfnetlink_osf: fix possible bogus match in nf_osf_find() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48655: firmware: arm_scmi: Harden accesses to the reset domains (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48656: dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48657: arm64: topology: fix possible overflow in amu_fie_setup() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48648: sfc: fix null pointer dereference in efx_hard_start_xmit (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

April 30 (4 messages)

Re: CVE-2024-26908: x86/xen: Add some null pointer checking to smp.c (Greg KH <gregkh@...uxfoundation.org>)
REJECTED: CVE-2024-26908: x86/xen: Add some null pointer checking to smp.c (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
Re: CVE-2023-52630: blk-iocost: Fix an UBSAN shift-out-of-bounds warning (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2023-52630: blk-iocost: Fix an UBSAN shift-out-of-bounds warning (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

387 messages

Powered by blists - more mailing lists