linux-cve-announce mailing list

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

linux-cve-announce mailing list

	Jan	Feb	Mar	Apr	May	Jun	Jul	Aug	Sep	Oct	Nov	Dec
2024		292	270	387	1203	323	465	323	287	438	283	62

Recent messages:

2024/12/19 #12: REJECTED: CVE-2024-26848: afs: Fix endless loop in directory parsing (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/12/19 #11: REJECTED: CVE-2024-43903: drm/amd/display: Add NULL check for 'afb' before dereferencing in amdgpu_dm_plane_handle_curso… (Greg Kroah-Hartman <gregkh@...uxfoundat…)
2024/12/19 #10: REJECTED: CVE-2024-42116: igc: fix a log entry using uninitialized netdev (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/12/19 #9: REJECTED: CVE-2024-41024: misc: fastrpc: Restrict untrusted app to attach to privileged PD (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/12/19 #8: REJECTED: CVE-2024-36885: drm/nouveau/firmware: Fix SG_DEBUG error with nvkm_firmware_ctor() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/12/19 #7: REJECTED: CVE-2024-35928: drm/amd/amdgpu: Fix potential ioremap() memory leaks in amdgpu_device_init() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/12/19 #6: REJECTED: CVE-2024-26972: ubifs: ubifs_symlink: Fix memleak of inode->i_link in error path (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/12/19 #5: REJECTED: CVE-2024-26720: mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/12/19 #4: REJECTED: CVE-2024-26713: powerpc/pseries/iommu: Fix iommu initialisation during DLPAR add (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/12/19 #3: REJECTED: CVE-2023-52759: gfs2: ignore negated quota changes (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/12/19 #2: REJECTED: CVE-2022-48700: vfio/type1: Unpin zero pages (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/12/19 #1: REJECTED: CVE-2021-47615: RDMA/mlx5: Fix releasing unallocated memory in dereg MR flow (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/12/18 #1: Re: CVE-2024-53144: Bluetooth: hci_event: Align BR/EDR JUST_WORKS paring with LE (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/12/17 #2: Re: CVE-2024-50106: nfsd: fix race between laundromat and free_stateid (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/12/17 #1: CVE-2024-53144: Bluetooth: hci_event: Align BR/EDR JUST_WORKS paring with LE (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/12/12 #4: REJECTED: CVE-2024-53102: nvme: make keep-alive synchronous operation (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/12/12 #3: Re: CVE-2024-53102: nvme: make keep-alive synchronous operation (Greg KH <gregkh@...uxfoundation.org>)
2024/12/12 #2: REJECTED: CVE-2024-50089: unicode: Don't special case ignorable code points (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/12/12 #1: REJECTED: CVE-2024-50018: net: napi: Prevent overflow of napi_defer_hard_irqs (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/12/07 #1: CVE-2024-53143: fsnotify: Fix ordering of iput() and watched_objects decrement (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/12/06 #2: CVE-2024-53141: netfilter: ipset: add missing range check in bitmap_ip_uadt (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/12/06 #1: CVE-2024-53142: initramfs: avoid filename buffer overrun (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/12/05 #1: REJECTED: CVE-2021-47488: cgroup: Fix memory leak caused by missing cgroup_bpf_offline (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/12/04 #16: CVE-2024-53138: net/mlx5e: kTLS, Fix incorrect page refcounting (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/12/04 #15: CVE-2024-53127: Revert "mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K" (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/12/04 #14: CVE-2024-53133: drm/amd/display: Handle dml allocation failure to avoid crash (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/12/04 #13: CVE-2024-53130: nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/12/04 #12: CVE-2024-53135: KVM: VMX: Bury Intel PT virtualization (guest/host mode) behind CONFIG_BROKEN (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/12/04 #11: CVE-2024-53134: pmdomain: imx93-blk-ctrl: correct remove path (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/12/04 #10: CVE-2024-53132: drm/xe/oa: Fix "Missing outer runtime PM protection" warning (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/12/04 #9: CVE-2024-53128: sched/task_stack: fix object_is_on_stack() for KASAN tagged pointers (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/12/04 #8: CVE-2024-53137: ARM: fix cacheflush with PAN (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/12/04 #7: CVE-2024-53136: mm: revert "mm: shmem: fix data-race in shmem_getattr()" (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/12/04 #6: CVE-2024-53131: nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/12/04 #5: CVE-2024-53129: drm/rockchip: vop: Fix a dereferenced before check warning (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/12/04 #4: CVE-2024-53140: netlink: terminate outstanding dump on socket close (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/12/04 #3: CVE-2024-53139: sctp: fix possible UAF in sctp_v6_available() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/12/04 #2: CVE-2024-53126: vdpa: solidrun: Fix UB bug with devres (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/12/04 #1: CVE-2024-53125: bpf: sync_linked_regs() must preserve subreg_def (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/12/03 #1: Re: Possible wrong fix patch for some stable branches (Greg KH <gregkh@...uxfoundation.org>)
2024/12/02 #22: CVE-2024-53115: drm/vmwgfx: avoid null_ptr_deref in vmw_framebuffer_surface_create_handle (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/12/02 #21: CVE-2024-53112: ocfs2: uncache inode which has failed entering the group (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/12/02 #20: CVE-2024-53118: vsock: Fix sk_error_queue memory leak (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/12/02 #19: CVE-2024-53113: mm: fix NULL pointer dereference in alloc_pages_bulk_noprof (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/12/02 #18: CVE-2024-53110: vp_vdpa: fix id_table array not null terminated error (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/12/02 #17: CVE-2024-53108: drm/amd/display: Adjust VSDB parser for replay feature (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/12/02 #16: CVE-2024-53106: ima: fix buffer overrun in ima_eventdigest_init_common (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/12/02 #15: CVE-2024-53107: fs/proc/task_mmu: prevent integer overflow in pagemap_scan_get_args() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/12/02 #14: CVE-2024-53114: x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/12/02 #13: CVE-2024-53111: mm/mremap: fix address wraparound in move_page_tables() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/12/02 #12: CVE-2024-53109: nommu: pass NULL argument to vma_iter_prealloc() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/12/02 #11: CVE-2024-53124: net: fix data-races around sk->sk_forward_alloc (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/12/02 #10: CVE-2024-53122: mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/12/02 #9: CVE-2024-53121: net/mlx5: fs, lock FTE when checking if active (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/12/02 #8: CVE-2024-53120: net/mlx5e: CT: Fix null-ptr-deref in add rule err flow (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/12/02 #7: CVE-2024-53123: mptcp: error out earlier on disconnect (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/12/02 #6: CVE-2024-53119: virtio/vsock: Fix accept_queue memory leak (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/12/02 #5: CVE-2024-53117: virtio/vsock: Improve MSG_ZEROCOPY error handling (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/12/02 #4: CVE-2024-53116: drm/panthor: Fix handling of partial GPU mapping of BOs (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/12/02 #3: CVE-2024-53105: mm: page_alloc: move mlocked flag clearance into free_pages_prepare() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/12/02 #2: CVE-2024-53103: hv_sock: Initializing vsk->trans to NULL to prevent a dangling pointer (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/12/02 #1: CVE-2024-53104: media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/11/28 #5: Re: CVE-2024-50228: mm: shmem: fix data-race in shmem_getattr() (Greg KH <gregkh@...uxfoundation.org>)
2024/11/28 #4: REJECTED: CVE-2024-50228: mm: shmem: fix data-race in shmem_getattr() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/11/28 #3: Re: CVE-2024-53054: cgroup/bpf: use a dedicated workqueue for cgroup bpf destruction (Greg KH <gregkh@...uxfoundation.org>)
2024/11/28 #2: REJECTED: CVE-2024-53054: cgroup/bpf: use a dedicated workqueue for cgroup bpf destruction (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/11/28 #1: CVE-2023-52922: can: bcm: Fix UAF in bcm_proc_show() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/11/25 #8: CVE-2024-53100: nvme: tcp: avoid race between queue_lock lock and destroy (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/11/25 #7: CVE-2024-53099: bpf: Check validity of link->type in bpf_link_show_fdinfo() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/11/25 #6: CVE-2024-53102: nvme: make keep-alive synchronous operation (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/11/25 #5: CVE-2024-53101: fs: Fix uninitialized value issue in from_kuid and from_kgid (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/11/25 #4: CVE-2024-53097: mm: krealloc: Fix MTE false alarm in __do_krealloc (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/11/25 #3: CVE-2024-53098: drm/xe/ufence: Prefetch ufence addr to catch bogus address (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/11/25 #2: CVE-2024-53096: mm: resolve faulty mmap_region() error path behaviour (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/11/25 #1: Re: CVE-2024-50228: mm: shmem: fix data-race in shmem_getattr() (Greg KH <gregkh@...uxfoundation.org>)
2024/11/21 #7: CVE-2024-53095: smb: client: Fix use-after-free of network namespace. (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/11/21 #6: CVE-2024-53094: RDMA/siw: Add sendpage_ok() check to disable MSG_SPLICE_PAGES (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/11/21 #5: CVE-2024-53093: nvme-multipath: defer partition scanning (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/11/21 #4: CVE-2024-53092: virtio_pci: Fix admin vq cleanup by using correct info pointer (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/11/21 #3: CVE-2024-53091: bpf: Add sk_is_inet and IS_ICSK check in tls_sw_has_ctx_tx/rx (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/11/21 #2: CVE-2024-53089: LoongArch: KVM: Mark hrtimer to expire in hard interrupt context (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/11/21 #1: CVE-2024-53090: afs: Fix lock recursion (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/11/19 #91: CVE-2024-53085: tpm: Lock TPM chip in tpm_pm_suspend() first (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/11/19 #90: CVE-2024-53081: media: ar0521: don't overflow when checking PLL values (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/11/19 #89: CVE-2024-53067: scsi: ufs: core: Start the RTC update work later (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/11/19 #88: CVE-2024-53064: idpf: fix idpf_vc_core_init error path (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/11/19 #87: CVE-2024-53069: firmware: qcom: scm: fix a NULL-pointer dereference (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/11/19 #86: CVE-2024-53045: ASoC: dapm: fix bounds checker error in dapm_widget_list_create (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/11/19 #85: CVE-2024-53055: wifi: iwlwifi: mvm: fix 6 GHz scan construction (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/11/19 #84: CVE-2024-53074: wifi: iwlwifi: mvm: don't leak a link on AP removal (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/11/19 #83: CVE-2024-53049: slub/kunit: fix a WARNING due to unwrapped __kmalloc_cache_noprof (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/11/19 #82: CVE-2024-53088: i40e: fix race condition by adding filter's intermediate sync state (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/11/19 #81: CVE-2024-53087: drm/xe: Fix possible exec queue leak in exec IOCTL (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/11/19 #80: CVE-2024-53086: drm/xe: Drop VM dma-resv lock on xe_sync_in_fence_get failure in exec IOCTL (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/11/19 #79: CVE-2024-53084: drm/imagination: Break an object reference loop (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/11/19 #78: CVE-2024-53083: usb: typec: qcom-pmic: init value of hdr_len/txbuf_len earlier (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/11/19 #77: CVE-2024-53082: virtio_net: Add hash_key_length check (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/11/19 #76: CVE-2024-53079: mm/thp: fix deferred split unqueue naming and locking (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/11/19 #75: CVE-2024-53080: drm/panthor: Lock XArray when getting entries for the VM (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2024/11/19 #74: CVE-2024-53051: drm/i915/hdcp: Add encoder check in intel_hdcp_get_capability (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

4333 messages