linux-cve-announce mailing list

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

linux-cve-announce mailing list

	Jan	Feb	Mar	Apr	May	Jun	Jul	Aug	Sep	Oct	Nov	Dec
2024		292	270	387	1203	323	465	323	287	438	263

Recent messages:

2024/11/19 #91: CVE-2024-53085: tpm: Lock TPM chip in tpm_pm_suspend() first (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/11/19 #90: CVE-2024-53081: media: ar0521: don't overflow when checking PLL values (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/11/19 #89: CVE-2024-53067: scsi: ufs: core: Start the RTC update work later (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/11/19 #88: CVE-2024-53064: idpf: fix idpf_vc_core_init error path (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/11/19 #87: CVE-2024-53069: firmware: qcom: scm: fix a NULL-pointer dereference (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/11/19 #86: CVE-2024-53045: ASoC: dapm: fix bounds checker error in dapm_widget_list_create (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/11/19 #85: CVE-2024-53055: wifi: iwlwifi: mvm: fix 6 GHz scan construction (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/11/19 #84: CVE-2024-53074: wifi: iwlwifi: mvm: don't leak a link on AP removal (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/11/19 #83: CVE-2024-53049: slub/kunit: fix a WARNING due to unwrapped __kmalloc_cache_noprof (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/11/19 #82: CVE-2024-53088: i40e: fix race condition by adding filter's intermediate sync state (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/11/19 #81: CVE-2024-53087: drm/xe: Fix possible exec queue leak in exec IOCTL (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/11/19 #80: CVE-2024-53086: drm/xe: Drop VM dma-resv lock on xe_sync_in_fence_get failure in exec IOCTL (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/11/19 #79: CVE-2024-53084: drm/imagination: Break an object reference loop (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/11/19 #78: CVE-2024-53083: usb: typec: qcom-pmic: init value of hdr_len/txbuf_len earlier (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/11/19 #77: CVE-2024-53082: virtio_net: Add hash_key_length check (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/11/19 #76: CVE-2024-53079: mm/thp: fix deferred split unqueue naming and locking (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/11/19 #75: CVE-2024-53080: drm/panthor: Lock XArray when getting entries for the VM (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/11/19 #74: CVE-2024-53051: drm/i915/hdcp: Add encoder check in intel_hdcp_get_capability (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/11/19 #73: CVE-2024-53050: drm/i915/hdcp: Add encoder check in hdcp2_get_capability (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/11/19 #72: CVE-2024-53078: drm/tegra: Fix NULL vs IS_ERR() check in probe() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/11/19 #71: CVE-2024-53077: rpcrdma: Always release the rpcrdma_device's xa_array (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/11/19 #70: CVE-2024-53076: iio: gts-helper: Fix memory leaks for the error path of iio_gts_build_avail_scale_table() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/11/19 #69: CVE-2024-53075: riscv: Prevent a bad reference count on CPU nodes (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/11/19 #68: CVE-2024-53073: NFSD: Never decrement pending_async_copies on error (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/11/19 #67: CVE-2024-53060: drm/amdgpu: prevent NULL pointer dereference if ATIF is not supported (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/11/19 #66: CVE-2024-53068: firmware: arm_scmi: Fix slab-use-after-free in scmi_bus_notifier() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/11/19 #65: CVE-2024-53066: nfs: Fix KMSAN warning in decode_getfattr_attrs() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/11/19 #64: CVE-2024-53065: mm/slab: fix warning caused by duplicate kmem_cache creation in kmem_buckets_create (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/11/19 #63: CVE-2024-53063: media: dvbdev: prevent the risk of out of memory access (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/11/19 #62: CVE-2024-53062: media: mgb4: protect driver against spectre (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/11/19 #61: CVE-2024-53072: platform/x86/amd/pmc: Detect when STB is not available (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/11/19 #60: CVE-2024-53071: drm/panthor: Be stricter about IO mapping flags (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/11/19 #59: CVE-2024-53070: usb: dwc3: fix fault at system suspend if device was already runtime suspended (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/11/19 #58: CVE-2024-53061: media: s5p-jpeg: prevent buffer overflows (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/11/19 #57: CVE-2024-53043: mctp i2c: handle NULL header address (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/11/19 #56: CVE-2024-53042: ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_init_flow() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/11/19 #55: CVE-2024-53048: ice: fix crash on probe for DPLL enabled E810 LOM (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/11/19 #54: CVE-2024-53047: mptcp: init: protect sched with rcu_read_lock (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/11/19 #53: CVE-2024-53046: arm64: dts: imx8ulp: correct the flexspi compatible string (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/11/19 #52: CVE-2024-53044: net/sched: sch_api: fix xa_insert() error path in tcf_block_get_ext() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/11/19 #51: CVE-2024-53059: wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/11/19 #50: CVE-2024-53058: net: stmmac: TSO: Fix unbalanced DMA map/unmap for non-paged SKB data (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/11/19 #49: CVE-2024-53057: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/11/19 #48: CVE-2024-53056: drm/mediatek: Fix potential NULL dereference in mtk_crtc_destroy() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/11/19 #47: CVE-2024-53054: cgroup/bpf: use a dedicated workqueue for cgroup bpf destruction (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/11/19 #46: CVE-2024-53055: wifi: iwlwifi: mvm: fix 6 GHz scan construction (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/11/19 #45: CVE-2024-53053: scsi: ufs: core: Fix another deadlock during RTC update (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/11/19 #44: CVE-2024-53052: io_uring/rw: fix missing NOWAIT check for O_DIRECT start write (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/11/19 #43: CVE-2024-50303: resource,kexec: walk_system_ram_res_rev must retain resource flags (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/11/19 #42: CVE-2024-50304: ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/11/19 #41: CVE-2024-50301: security/keys: fix slab-out-of-bounds in key_task_permission (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/11/19 #40: CVE-2024-50302: HID: core: zero-initialize the report buffer (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/11/19 #39: CVE-2024-50288: media: vivid: fix buffer overwrite when using > 32 buffers (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/11/19 #38: CVE-2024-50297: net: xilinx: axienet: Enqueue Tx packets in dql before dmaengine starts (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/11/19 #37: CVE-2024-50296: net: hns3: fix kernel crash when uninstalling driver (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/11/19 #36: CVE-2024-50294: rxrpc: Fix missing locking causing hanging calls (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/11/19 #35: CVE-2024-50295: net: arc: fix the device for dma_map_single/dma_unmap_single (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/11/19 #34: CVE-2024-50291: media: dvb-core: add missing buffer index check (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/11/19 #33: CVE-2024-50293: net/smc: do not leave a dangling sk pointer in __smc_create() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/11/19 #32: CVE-2024-50292: ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/11/19 #31: CVE-2024-50300: regulator: rtq2208: Fix uninitialized use of regulator_config (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/11/19 #30: CVE-2024-50299: sctp: properly validate chunk size in sctp_sf_ootb() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/11/19 #29: CVE-2024-50290: media: cx24116: prevent overflows on SNR calculus (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/11/19 #28: CVE-2024-50289: media: av7110: fix a spectre vulnerability (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/11/19 #27: CVE-2024-50298: net: enetc: allocate vf_state during PF probes (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/11/19 #26: CVE-2024-50283: ksmbd: fix slab-use-after-free in smb3_preauth_hash_rsp (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/11/19 #25: CVE-2024-50275: arm64/sve: Discard stale CPU state when handling SVE traps (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/11/19 #24: CVE-2024-50284: ksmbd: Fix the missing xa_store error check (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/11/19 #23: CVE-2024-50282: drm/amdgpu: add missing size check in amdgpu_debugfs_gprwave_read() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/11/19 #22: CVE-2024-50280: dm cache: fix flushing uninitialized delayed_work on cache_ctr error (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/11/19 #21: CVE-2024-50281: KEYS: trusted: dcp: fix NULL dereference in AEAD crypto operation (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/11/19 #20: CVE-2024-50279: dm cache: fix out-of-bounds access to the dirty bitset when resizing (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/11/19 #19: CVE-2024-50279: dm cache: fix out-of-bounds access to the dirty bitset when resizing (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/11/19 #18: CVE-2024-50278: dm cache: fix potential out-of-bounds access on the first resume (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/11/19 #17: CVE-2024-50287: media: v4l2-tpg: prevent the risk of a division by zero (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/11/19 #16: CVE-2024-50277: dm: fix a crash if blk_alloc_disk fails (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/11/19 #15: CVE-2024-50286: ksmbd: fix slab-use-after-free in ksmbd_smb2_session_create (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/11/19 #14: CVE-2024-50285: ksmbd: check outstanding simultaneous SMB operations (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/11/19 #13: CVE-2024-50276: net: vertexcom: mse102x: Fix possible double free of TX skb (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/11/19 #12: CVE-2024-50273: btrfs: reinitialize delayed ref list after deleting it from the list (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/11/19 #11: CVE-2024-50272: filemap: Fix bounds checking in filemap_read() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/11/19 #10: CVE-2024-50271: signal: restore the override_rlimit logic (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/11/19 #9: CVE-2024-50270: mm/damon/core: avoid overflow in damon_feed_loop_next_input() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/11/19 #8: CVE-2024-50269: usb: musb: sunxi: Fix accessing an released usb phy (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/11/19 #7: CVE-2024-50268: usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/11/19 #6: CVE-2024-50274: idpf: avoid vport access in idpf_get_link_ksettings (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/11/19 #5: CVE-2024-50266: clk: qcom: videocc-sm8350: use HW_CTRL_TRIGGER for vcodec GDSCs (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/11/19 #4: CVE-2024-50267: USB: serial: io_edgeport: fix use after free in debug printk (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/11/19 #3: CVE-2024-50264: vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/11/19 #2: CVE-2024-50265: ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/11/19 #1: CVE-2023-52921: drm/amdgpu: fix possible UAF in amdgpu_cs_pass1() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/11/11 #3: REJECTED: CVE-2024-50219: mm/page_alloc: let GFP_ATOMIC order-0 allocs access highatomic reserves (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/11/11 #2: Re: CVE-2024-50219: mm/page_alloc: let GFP_ATOMIC order-0 allocs access highatomic reserves (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/11/11 #1: CVE-2024-50263: fork: only invoke khugepaged, ksm hooks if no error (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/11/10 #2: Re: CVE-2024-49993: iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count (Greg KH <gregkh@...uxfoundation.org>)
2024/11/10 #1: REJECTED: CVE-2024-49993: iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/11/09 #52: CVE-2024-50262: bpf: Fix out-of-bounds write in trie_get_next_key() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/11/09 #51: CVE-2024-50259: netdevsim: Add trailing zero to terminate the string in nsim_nexthop_bucket_activity_write() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/11/09 #50: CVE-2024-50261: macsec: Fix use-after-free while sending the offloading packet (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/11/09 #49: CVE-2024-50260: sock_map: fix a NULL pointer dereference in sock_map_link_update_prog() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

4251 messages