linux-cve-announce mailing list - 2024/02

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[next month>] [year] [list]

linux-cve-announce mailing list - 2024/02

Mon	Tue	Wed	Thu	Fri	Sat	Sun
			¹	²	³	⁴
⁵	⁶	⁷	⁸	⁹	¹⁰	¹¹
¹²	¹³	¹⁴	¹⁵	¹⁶	¹⁷	¹⁸
¹⁹	²⁰ 8	²¹ 8	²² 19	²³ 19	²⁴ 6	²⁵ 12
²⁶ 7	²⁷ 71	²⁸ 86	²⁹ 56

Messages by day:

February 20 (8 messages)

CVE-2023-52433: netfilter: nft_set_rbtree: skip sync GC for new elements in this transaction (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26581: netfilter: nft_set_rbtree: skip end interval element from gc (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52434: smb: client: fix potential OOBs in smb2_parse_contexts() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52435: net: prevent mss overflow in skb_segment() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52436: f2fs: explicitly null-terminate the xattr list (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52437: Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d" (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52438: binder: fix use-after-free in shinker's callback (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52439: uio: Fix use-after-free in uio_open (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

February 21 (8 messages)

CVE-2023-52440: ksmbd: fix slub overflow in ksmbd_decode_ntlmssp_auth_blob() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52441: ksmbd: fix out of bounds in init_smb2_rsp_hdr() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52442: ksmbd: validate session id and tree id in compound request (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
Re: CVE-2023-52435: net: prevent mss overflow in skb_segment() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26582: net: tls: fix use-after-free with partial reads and async decrypt (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26584: net: tls: handle backlogging of crypto requests (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26585: tls: fix race between tx work scheduling and socket close (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26583: tls: fix race between async notify and socket close (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

February 22 (19 messages)

Re: CVE-2023-52437: Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d" (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2023-52437: Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d" (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52443: apparmor: avoid crash when parsed profile name is empty (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26586: mlxsw: spectrum_acl_tcam: Fix stack corruption (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26587: net: netdevsim: don't try to destroy PHC on VFs (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26588: LoongArch: BPF: Prevent out-of-bounds memory access (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26590: erofs: fix inconsistent per-file compression format (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26589: bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52444: f2fs: fix to avoid dirent corruption (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52445: media: pvrusb2: fix use after free on context disconnection (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52448: gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52446: bpf: Fix a race condition between btf_put() and map_free() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52447: bpf: Defer the free of inner map when necessary (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52449: mtd: Fix gluebi NULL pointer dereference caused by ftl notifier (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52451: powerpc/pseries/memhp: Fix access beyond end of drmem array (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52450: perf/x86/intel/uncore: Fix NULL pointer dereference issue in upi_fill_topology() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26591: bpf: Fix re-attachment branch in bpf_tracing_prog_attach (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52452: bpf: Fix accesses to uninit stack slots (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26592: ksmbd: fix UAF issue in ksmbd_tcp_new_connection() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

February 23 (19 messages)

CVE-2024-26593: i2c: i801: Fix block process call transactions (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26594: ksmbd: validate mech token in session setup (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52453: hisi_acc_vfio_pci: Update migration data pointer correctly on saving/resume (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52454: nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52456: serial: imx: fix tx statemachine deadlock (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52455: iommu: Don't reserve 0-length IOVA region (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52457: serial: 8250: omap: Don't skip resource freeing if pm_runtime_resume_and_get() failed (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52458: block: add check that partition length needs to be aligned with block size (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52459: media: v4l: async: Fix duplicated list deletion (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52461: drm/sched: Fix bounds limiting when given a malformed entity (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52460: drm/amd/display: Fix NULL pointer dereference at hibernate (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52463: efivarfs: force RO when remounting if SetVariable is not supported (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52462: bpf: fix check for attempt to corrupt spilled pointer (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26595: mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52464: EDAC/thunderx: Fix possible out-of-bounds string access (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26597: net: qualcomm: rmnet: fix global oob in rmnet_policy (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26596: net: dsa: fix netdev_priv() dereference before check on non-DSA netdevice events (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26598: KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26599: pwm: Fix out-of-bounds access in of_pwm_single_xlate() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

February 24 (6 messages)

CVE-2024-26600: phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26601: ext4: regenerate buddy after block freeing failed if under fc replay (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26602: sched/membarrier: reduce the ability to hammer on sys_membarrier (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26603: x86/fpu: Stop relying on userspace for info to fault in xsave buffer (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26604: Revert "kobject: Remove redundant checks for whether ktype is NULL" (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26605: PCI/ASPM: Fix deadlock when enabling ASPM (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

February 25 (12 messages)

CVE-2023-52465: power: supply: Fix null pointer dereference in smb2_probe (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52467: mfd: syscon: Fix null pointer dereference in of_syscon_register() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52466: PCI: Avoid potential out-of-bounds read in pci_dev_for_each_resource() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52468: class: fix use-after-free in class_register() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52470: drm/radeon: check the alloc_workqueue return value in radeon_crtc_init() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52469: drivers/amd/pm: fix a use-after-free in kv_parse_power_table (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52471: ice: Fix some null pointer dereference issues in ice_ptp.c (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52473: thermal: core: Fix NULL pointer dereference in zone registration error path (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52472: crypto: rsa - add a check for allocation failure (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-46904: net: hso: fix null-ptr-deref during tty device unregistration (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-46905: net: hso: fix NULL-deref on disconnect regression (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48626: moxart: fix potential use-after-free on remove path (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

February 26 (7 messages)

CVE-2024-26606: binder: signal epoll threads of self-work (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2019-25161: drm/amd/display: prevent memory leak (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2019-25160: netlabel: fix out-of-bounds memory accesses (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2019-25162: i2c: Fix a potential use after free (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2020-36775: f2fs: fix to avoid potential deadlock (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52474: IB/hfi1: Fix bugs with non-PAGE_SIZE-end multi-iovec user SDMA requests (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-46906: HID: usbhid: fix info leak in hid_submit_ctrl (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

February 27 (71 messages)

CVE-2021-46907: KVM: VMX: Don't use vcpu->run->internal.ndata as an array index (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-46908: bpf: Use correct permission flag for mixed signed bounds arithmetic (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-46910: ARM: 9063/1: mm: reduce maximum number of CPUs if DEBUG_KMAP_LOCAL is enabled (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-46912: net: Make tcp_allowed_congestion_control readonly in non-init netns (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-46914: ixgbe: fix unbalanced device enable/disable in suspend/resume (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-46915: netfilter: nft_limit: avoid possible divide error in nft_limit_init (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-46911: ch_ktls: Fix kernel panic (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-46918: dmaengine: idxd: clear MSIX permission entry on shutdown (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-46909: ARM: footbridge: fix PCI interrupt mapping (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-46916: ixgbe: Fix NULL pointer dereference in ethtool loopback test (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-46917: dmaengine: idxd: fix wq cleanup of WQCFG registers (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-46920: dmaengine: idxd: Fix clobbering of SWERR overflow bit on writeback (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-46919: dmaengine: idxd: fix wq size store permission state (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-46913: netfilter: nftables: clone set element expression template (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-46921: locking/qrwlock: Fix ordering in queued_write_lock_slowpath() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-46922: KEYS: trusted: Fix TPM reservation for seal/unseal (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-46924: NFC: st21nfca: Fix memory leak in device probe and remove (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-46933: usb: gadget: f_fs: Clear ffs_eventfd in ffs_data_clear. (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-46934: i2c: validate user data in compat ioctl (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-46935: binder: fix async_free_space accounting for empty parcels (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-46936: net: fix use-after-free in tw_timer_handler (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-46937: mm/damon/dbgfs: fix 'struct pid' leaks in 'dbgfs_target_ids_write()' (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-46925: net/smc: fix kernel panic caused by race of smc_sock (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-46926: ALSA: hda: intel-sdw-acpi: harden detection of controller (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-46927: nitro_enclaves: Use get_user_pages_unlocked() call to handle mmap assert (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-46928: parisc: Clear stale IIR value on instruction access rights trap (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-46929: sctp: use call_rcu to free endpoint (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-46930: usb: mtu3: fix list_head check warning (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-46932: Input: appletouch - initialize work before device registration (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-46923: fs/mount_setattr: always cleanup mount_kattr (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-46931: net/mlx5e: Wrap the tx reporter dump callback to extract the sq (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2019-25161: drm/amd/display: prevent memory leak (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2020-36777: media: dvbdev: Fix memory leak in dvb_media_device_free() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2020-36776: thermal/drivers/cpufreq_cooling: Fix slab OOB issue (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-46946: ext4: fix check to prevent false positive report of incorrect used inodes (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-46947: sfc: adjust efx->xdp_tx_queue_count with the real number of initialized queues (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-46949: sfc: farch: fix TX queue lookup in TX flush done handling (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-46948: sfc: farch: fix TX queue lookup in TX event handling (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-46950: md/raid1: properly indicate failure when ending a failed write request (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-46951: tpm: efi: Use local variable for calculating final log size (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-46953: ACPI: GTDT: Don't corrupt interrupt mappings on watchdow probe failure (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-46952: NFS: fs_context: validate UDP retrans to prevent shift out-of-bounds (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-46938: dm rq: fix double free of blk_mq_tag_set in dev remove after table load fails (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-46939: tracing: Restructure trace_clock_global() to never block (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-46940: tools/power turbostat: Fix offset overflow issue in index converting (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-46941: usb: dwc3: core: Do core softreset when switch mode (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-46942: io_uring: fix shared sqpoll cancellation hangs (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-46943: media: staging/intel-ipu3: Fix set_fmt error handling (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-46944: media: staging/intel-ipu3: Fix memory leak in imu_fmt (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-46945: ext4: always panic when errors=panic is specified (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-46955: openvswitch: fix stack OOB read while fragmenting IPv4 packets (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-46954: net/sched: sch_frag: fix stack OOB read while fragmenting IPv4 packets (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-46965: mtd: physmap: physmap-bt1-rom: Fix unintentional stack access (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-46967: vhost-vdpa: fix vm_flags for virtqueue doorbell mapping (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-46966: ACPI: custom_method: fix potential use-after-free issue (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-46969: bus: mhi: core: Fix invalid error returning in mhi_queue (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-46970: bus: mhi: pci_generic: Remove WQ_MEM_RECLAIM flag from state workqueue (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-46971: perf/core: Fix unconditional security_locked_down() call (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-46972: ovl: fix leaked dentry (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-46973: net: qrtr: Avoid potential use after free in MHI send (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-46974: bpf: Fix masking negation logic upon negative dst register (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-46968: s390/zcrypt: fix zcard and zqueue hot-unplug memleak (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-46956: virtiofs: fix memory leak in virtio_fs_probe() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-46975: netfilter: conntrack: Make global sysctls readonly in non-init netns (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-46957: riscv/kprobe: fix kernel panic when invoking sys_read traced by kprobe (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-46958: btrfs: fix race between transaction aborts and fsyncs leading to use-after-free (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-46960: cifs: Return correct error code from smb2_get_enc_key (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-46963: scsi: qla2xxx: Fix crash in qla2xxx_mqueuecommand() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-46961: irqchip/gic-v3: Do not enable irqs when handling spurious interrups (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-46962: mmc: uniphier-sd: Fix a resource leak in the remove function (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-46964: scsi: qla2xxx: Reserve extra IRQ vectors (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

February 28 (86 messages)

CVE-2020-36778: i2c: xiic: fix reference leak when pm_runtime_get_sync fails (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2020-36779: i2c: stm32f7: fix reference leak when pm_runtime_get_sync fails (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2020-36780: i2c: sprd: fix reference leak when pm_runtime_get_sync fails (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2020-36781: i2c: imx: fix reference leak when pm_runtime_get_sync fails (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2020-36782: i2c: imx-lpi2c: fix reference leak when pm_runtime_get_sync fails (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2020-36783: i2c: img-scb: fix reference leak when pm_runtime_get_sync fails (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2020-36784: i2c: cadence: fix reference leak when pm_runtime_get_sync fails (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2020-36785: media: atomisp: Fix use after free in atomisp_alloc_css_stat_bufs() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2020-36787: media: aspeed: fix clock handling logic (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-46984: kyber: fix out of bounds access when preempted (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-46985: ACPI: scan: Fix a memory leak in an error handling path (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-46986: usb: dwc3: gadget: Free gadget structure only after freeing endpoints (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-46987: btrfs: fix deadlock when cloning inline extents and using qgroups (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-46988: userfaultfd: release page in error path to avoid BUG_ON (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-46989: hfsplus: prevent corruption in shrinking truncate (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-46991: i40e: Fix use-after-free in i40e_client_subtask() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-46990: powerpc/64s: Fix crashes when toggling entry flush barrier (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-46992: netfilter: nftables: avoid overflows in nft_hash_buckets() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-46993: sched: Fix out-of-bound access in uclamp (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-46976: drm/i915: Fix crash in auto_retire (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-46995: can: mcp251xfd: mcp251xfd_probe(): fix an error pointer dereference in probe (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-46994: can: mcp251x: fix resume from sleep before interface was brought up (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-46997: arm64: entry: always set GIC_PRIO_PSR_I_SET during entry (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-46996: netfilter: nftables: Fix a memleak from userdata error path in new objects (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-46998: ethernet:enic: Fix a use after free bug in enic_hard_start_xmit (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-46999: sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47000: ceph: fix inode leak on getattr error in __fh_to_dentry (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47001: xprtrdma: Fix cwnd update ordering (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47002: SUNRPC: Fix null pointer dereference in svc_rqst_free() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47003: dmaengine: idxd: Fix potential null dereference on pointer status (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-46977: KVM: VMX: Disable preemption when probing user return MSRs (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47004: f2fs: fix to avoid touching checkpointed data in get_victim() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47005: PCI: endpoint: Fix NULL pointer dereference for ->get_features() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47007: f2fs: fix panic during f2fs_resize_fs() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47006: ARM: 9064/1: hw_breakpoint: Do not directly check the event's overflow_handler hook (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47008: KVM: SVM: Make sure GHCB is mapped before updating (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-46978: KVM: nVMX: Always make an attempt to map eVMCS after migration (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-46979: iio: core: fix ioctl handlers removal (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-46980: usb: typec: ucsi: Retrieve all the PDOs instead of just the first 4 (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-46981: nbd: Fix NULL pointer in flush_workqueue (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-46982: f2fs: compress: fix race condition of overwrite vs truncate (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-46983: nvmet-rdma: Fix NULL deref when SEND is completed with error (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2020-36786: media: [next] staging: media: atomisp: fix memory leak of object flash (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47010: net: Only allow init netns to set default tcp cong to a restricted algo (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47021: mt76: mt7915: fix memleak when mt7915_unregister_device() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47022: mt76: mt7615: fix memleak when mt7615_unregister_device() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47023: net: marvell: prestera: fix port event handling on init (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47024: vsock/virtio: free queued packets when closing socket (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47025: iommu/mediatek: Always enable the clk on resume (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47026: RDMA/rtrs-clt: destroy sysfs after removing session from active list (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47027: mt76: mt7921: fix kernel crash when the firmware fails to download (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47028: mt76: mt7915: fix txrate reporting (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47029: mt76: connac: fix kernel warning adding monitor interface (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47011: mm: memcontrol: slab: fix obtain a reference to a freeing memcg (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47030: mt76: mt7615: fix memory leak in mt7615_coredump_work (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47031: mt76: mt7921: fix memory leak in mt7921_coredump_work (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47032: mt76: mt7915: fix tx skb dma unmap (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47033: mt76: mt7615: fix tx skb dma unmap (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47034: powerpc/64s: Fix pte update for kernel memory on radix (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47035: iommu/vt-d: Remove WO permissions on second-level paging entries (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47036: udp: skip L4 aggregation for UDP tunnel packets (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47037: ASoC: q6afe-clocks: fix reprobing of the driver (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47039: ataflop: potential out of bounds in do_format() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47038: Bluetooth: avoid deadlock between hci_dev->lock and socket lock (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47040: io_uring: fix overflows checks in provide buffers (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47012: RDMA/siw: Fix a use after free in siw_alloc_mr (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47043: media: venus: core: Fix some resource leaks in the error path of 'venus_probe()' (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47042: drm/amd/display: Free local data after use (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47044: sched/fair: Fix shift-out-of-bounds in load_balance() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47041: nvmet-tcp: fix incorrect locking in state_change sk callback (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47045: scsi: lpfc: Fix null pointer dereference in lpfc_prep_els_iocb() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47047: spi: spi-zynqmp-gqspi: return -ENOMEM if dma_map_single fails (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47046: drm/amd/display: Fix off by one in hdmi_14_process_transaction() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47018: powerpc/64: Fix the definition of the fixmap area (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47013: net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47014: net/sched: act_ct: fix wild memory access when clearing fragments (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47015: bnxt_en: Fix RX consumer index logic in the error path. (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47017: ath10k: Fix a use after free in ath10k_htc_send_bundle (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47009: KEYS: trusted: Fix memory leak on object td (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47019: mt76: mt7921: fix possible invalid register access (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47049: Drivers: hv: vmbus: Use after free in __vmbus_open() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47050: memory: renesas-rpc-if: fix possible NULL pointer dereference of resource (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47051: spi: fsl-lpspi: Fix PM reference leak in lpspi_prepare_xfer_hardware() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47052: crypto: sa2ul - Fix memory leak of rxd (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47053: crypto: sun8i-ss - Fix memory leak of pad (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47048: spi: spi-zynqmp-gqspi: fix use-after-free in zynqmp_qspi_exec_op (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

February 29 (56 messages)

CVE-2023-52476: perf/x86/lbr: Filter vsyscall addresses (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52475: Input: powermate - fix use-after-free in powermate_config_complete (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52477: usb: hub: Guard against accesses to uninitialized BOS descriptors (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52478: HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52479: ksmbd: fix uaf in smb20_oplock_break_ack (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52480: ksmbd: fix race condition between session lookup and expire (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52481: arm64: errata: Add Cortex-A520 speculative unprivileged load workaround (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52482: x86/srso: Add SRSO mitigation for Hygon processors (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52483: mctp: perform route lookups under a RCU read-side lock (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52484: iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26607: drm/bridge: sii902x: Fix probing race issue (Lee Jones <lee@...nel.org>)
CVE-2023-52485: drm/amd/display: Wake DMCUB before sending a command (Lee Jones <lee@...nel.org>)
CVE-2023-52486: drm: Don't unref the same fb many times by mistake due to deadlock handling (Lee Jones <lee@...nel.org>)
CVE-2023-52487: net/mlx5e: Fix peer flow lists handling (Lee Jones <lee@...nel.org>)
CVE-2023-52489: mm/sparsemem: fix race in accessing memory_section->usage (Lee Jones <lee@...nel.org>)
CVE-2023-52488: serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO (Lee Jones <lee@...nel.org>)
CVE-2023-52490: mm: migrate: fix getting incorrect page mapping during page migration (Lee Jones <lee@...nel.org>)
CVE-2023-52492: dmaengine: fix NULL pointer in channel unregistration function (Lee Jones <lee@...nel.org>)
CVE-2023-52494: bus: mhi: host: Add alignment check for event ring read pointer (Lee Jones <lee@...nel.org>)
CVE-2023-52495: soc: qcom: pmic_glink_altmode: fix port sanity check (Lee Jones <lee@...nel.org>)
CVE-2023-52491: media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run (Lee Jones <lee@...nel.org>)
CVE-2023-52497: erofs: fix lz4 inplace decompression (Lee Jones <lee@...nel.org>)
CVE-2023-52493: bus: mhi: host: Drop chan lock before queuing buffers (Lee Jones <lee@...nel.org>)
CVE-2024-26608: ksmbd: fix global oob in ksmbd_nl_policy (Lee Jones <lee@...nel.org>)
CVE-2024-26609: netfilter: nf_tables: reject QUEUE/DROP verdict parameters (Lee Jones <lee@...nel.org>)
CVE-2023-52496: mtd: maps: vmu-flash: Fix the (mtd core) switch to ref counters (Lee Jones <lee@...nel.org>)
CVE-2023-52498: PM: sleep: Fix possible deadlocks in core system-wide PM code (Lee Jones <lee@...nel.org>)
CVE-2024-26613: net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv (Lee Jones <lee@...nel.org>)
CVE-2024-26610: wifi: iwlwifi: fix a memory corruption (Lee Jones <lee@...nel.org>)
CVE-2024-26614: tcp: make sure init the accept_queue's spinlocks once (Lee Jones <lee@...nel.org>)
CVE-2024-26612: netfs, fscache: Prevent Oops in fscache_put_cache() (Lee Jones <lee@...nel.org>)
CVE-2024-26611: xsk: fix usage of multi-buffer BPF helpers for ZC XDP (Lee Jones <lee@...nel.org>)
CVE-2024-26619: riscv: Fix module loading free order (Lee Jones <lee@...nel.org>)
CVE-2024-26616: btrfs: scrub: avoid use-after-free when chunk length is not 64K aligned (Lee Jones <lee@...nel.org>)
CVE-2024-26615: net/smc: fix illegal rmb_desc access in SMC-D connection dump (Lee Jones <lee@...nel.org>)
CVE-2024-26617: fs/proc/task_mmu: move mmu notification mechanism inside mm lock (Lee Jones <lee@...nel.org>)
CVE-2024-26618: arm64/sme: Always exit sme_alloc() early with existing storage (Lee Jones <lee@...nel.org>)
CVE-2024-26620: s390/vfio-ap: always filter entire AP matrix (Lee Jones <lee@...nel.org>)
CVE-2021-47016: m68k: mvme147,mvme16x: Don't wipe PCC timer config bits (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-46959: spi: Fix use-after-free with devm_spi_alloc_* (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47020: soundwire: stream: fix memory leak in stream config error path (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47055: mtd: require write permissions for locking and badblock ioctls (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47054: bus: qcom: Put child node before return (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47064: mt76: fix potential DMA mapping leak (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47065: rtw88: Fix array overrun in rtw_get_tx_power_params() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47066: async_xor: increase src_offs when dropping destination page (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47067: soc/tegra: regulators: Fix locking up when voltage-spread is out of range (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47068: net/nfc: fix use-after-free llcp_sock_bind/connect (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47056: crypto: qat - ADF_STATUS_PF_RUNNING should be set after adf_dev_init (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47057: crypto: sun8i-ss - Fix memory leak of object d when dma_iv fails to map (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47058: regmap: set debugfs_name to NULL after it is freed (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47059: crypto: sun8i-ss - fix result memory leak on error path (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47060: KVM: Stop looking for coalesced MMIO zones if the bus is destroyed (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47062: KVM: SVM: Use online_vcpus, not created_vcpus, to iterate over vCPUs (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47061: KVM: Destroy I/O bus devices on unregister failure _after_ sync'ing SRCU (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47063: drm: bridge/panel: Cleanup connector on bridge detach (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

292 messages

Powered by blists - more mailing lists