linux-cve-announce mailing list - 2024/05

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

linux-cve-announce mailing list - 2024/05

Mon	Tue	Wed	Thu	Fri	Sat	Sun
		¹ 165	² 1	³ 26	⁴	⁵
⁶	⁷	⁸ 6	⁹	¹⁰ 1	¹¹	¹²
¹³ 6	¹⁴	¹⁵	¹⁶ 2	¹⁷ 153	¹⁸	¹⁹ 90
²⁰ 63	²¹ 386	²² 72	²³ 14	²⁴ 88	²⁵ 19	²⁶
²⁷	²⁸ 8	²⁹ 5	³⁰ 98	³¹

Messages by day:

May 1 (165 messages)

CVE-2023-52647: media: nxp: imx8-isi: Check whether crossbar pad is non-NULL before access (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52648: drm/vmwgfx: Unmap the surface before resetting it on a plane state (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26938: drm/i915/bios: Tolerate devdata==NULL in intel_bios_encoder_supports_dp_dual_mode() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26940: drm/vmwgfx: Create debugfs ttm_resource_manager entry only if needed (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26939: drm/i915/vma: Fix UAF on destroy against retire race (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26941: drm/dp: Fix divide-by-zero regression on DP MST unplug with nouveau (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26942: net: phy: qcom: at803x: fix kernel panic with at8031_probe (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26943: nouveau/dmem: handle kcalloc() allocation failure (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26944: btrfs: zoned: fix use-after-free in do_zone_finish() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26945: crypto: iaa - Fix nr_cpus < nr_iaa case (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26946: kprobes/x86: Use copy_from_kernel_nofault() to read from unsafe address (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26947: ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26929: scsi: qla2xxx: Fix double free of fcport (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26948: drm/amd/display: Add a dc_state NULL check in dc_state_release (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26949: drm/amdgpu/pm: Fix NULL pointer dereference when get power limit (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26950: wireguard: netlink: access device through ctx instead of peer (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26951: wireguard: netlink: check for dangling peer via is_dead instead of empty list (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26952: ksmbd: fix potencial out-of-bounds when buffer offset is invalid (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26953: net: esp: fix bad handling of pages from page_pool (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26954: ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26955: nilfs2: prevent kernel bug at submit_bh_wbc() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26956: nilfs2: fix failure to detect DAT corruption in btree and direct mappings (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26957: s390/zcrypt: fix reference counting on zcrypt card objects (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26930: scsi: qla2xxx: Fix double free of the ha->vp_map pointer (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26958: nfs: fix UAF in direct writes (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26959: Bluetooth: btnxpuart: Fix btnxpuart_close (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26960: mm: swap: fix race between free_swap_and_cache() and swapoff() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26961: mac802154: fix llsec key resources release in mac802154_llsec_key_del (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26962: dm-raid456, md/raid456: fix a deadlock for dm-raid456 while io concurrent with reshape (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26963: usb: dwc3-am62: fix module unload/reload behavior (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26964: usb: xhci: Add error handling in xhci_map_urb_for_dma (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26931: scsi: qla2xxx: Fix command flush on cable pull (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26932: usb: typec: tcpm: fix double-free issue in tcpm_port_unregister_pd() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26933: USB: core: Fix deadlock in port "disable" sysfs attribute (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26934: USB: core: Fix deadlock in usb_deauthorize_interface() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26935: scsi: core: Fix unremoved procfs host directory regression (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26937: drm/i915/gt: Reset queue_priority_hint on parking (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26966: clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26975: powercap: intel_rapl: Fix a NULL pointer dereference (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26976: KVM: Always flush async #PF workqueue when vCPU is being destroyed (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26977: pci_iounmap(): Fix MMIO mapping leak (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26978: serial: max310x: fix NULL pointer dereference in I2C instantiation (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26979: drm/vmwgfx: Fix possible null pointer derefence with invalid contexts (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26967: clk: qcom: camcc-sc8280xp: fix terminating of frequency table arrays (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26968: clk: qcom: gcc-ipq9574: fix terminating of frequency table arrays (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26969: clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26970: clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26971: clk: qcom: gcc-ipq5018: fix terminating of frequency table arrays (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26972: ubifs: ubifs_symlink: Fix memleak of inode->i_link in error path (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26973: fat: fix uninitialized field in nostale filehandles (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26965: clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26974: crypto: qat - resolve race condition during AER recovery (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26980: ksmbd: fix slab-out-of-bounds in smb2_allocate_rsp_buf (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26936: ksmbd: validate request buffer size in smb2_allocate_rsp_buf() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26989: arm64: hibernate: Fix level3 translation fault in swsusp_save() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26990: KVM: x86/mmu: Write-protect L2 SPTEs in TDP MMU when clearing dirty status (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26991: KVM: x86/mmu: x86: Don't overflow lpage_info when checking attributes (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26992: KVM: x86/pmu: Disable support for adaptive PEBS (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26993: fs: sysfs: Fix reference leak in sysfs_break_active_protection() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26994: speakup: Avoid crash on very long word (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26995: usb: typec: tcpm: Correct the PDO counting in pd_set (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26996: usb: gadget: f_ncm: Fix UAF ncm object at re-bind after usb ep transport error (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26997: usb: dwc2: host: Fix dereference issue in DDMA completion flow. (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26998: serial: core: Clearing the circular buffer before NULLifying it (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26981: nilfs2: fix OOB in nilfs_set_de_type (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26999: serial/pmac_zilog: Remove flawed mitigation for rx irq flood (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27000: serial: mxs-auart: add spinlock around changing cts state (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27001: comedi: vmk80xx: fix incomplete endpoint checking (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27002: clk: mediatek: Do a runtime PM get on controllers during probe (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27003: clk: Get runtime PM before walking tree for clk_summary (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27004: clk: Get runtime PM before walking tree during disable_unused (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27005: interconnect: Don't access req_list while it's being manipulated (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27006: thermal/debugfs: Add missing count increment to thermal_debug_tz_trip_up() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27007: userfaultfd: change src_folio after ensuring it's unpinned in UFFDIO_MOVE (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27008: drm: nv04: Fix out of bounds access (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26982: Squashfs: check the inode number is not the invalid value of zero (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27009: s390/cio: fix race condition during online processing (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27010: net/sched: Fix mirred deadlock on device recursion (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27011: netfilter: nf_tables: fix memleak in map from abort path (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27012: netfilter: nf_tables: restore set elements when delete set fails (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26983: bootconfig: use memblock_free_late to free xbc memory to buddy (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26984: nouveau: fix instmem race condition around ptr stores (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26986: drm/amdkfd: Fix memory leak in create_process failure (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26985: drm/xe: Fix bo leak in intel_fb_bo_framebuffer_init (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26987: mm/memory-failure: fix deadlock when hugetlb_optimize_vmemmap is enabled (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26988: init/main.c: Fix potential static_command_line memory overflow (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27014: net/mlx5e: Prevent deadlock while disabling aRFS (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27016: netfilter: flowtable: validate pppoe header (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27017: netfilter: nft_set_pipapo: walk over current view on netlink dump (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27015: netfilter: flowtable: incorrect pppoe tuple (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27018: netfilter: br_netfilter: skip conntrack input hook for promisc packets (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27019: netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27020: netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27021: r8169: fix LED-related deadlock on module removal (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27013: tun: limit printing rate when illegal packet received by tun dev (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27022: fork: defer linking file vma until vma is fully initialized (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27024: net/rds: fix WARNING in rds_conn_connect_if_down (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27026: vmxnet3: Fix missing reserved tailroom (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27023: md: Fix missing release of 'active_io' for flush (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
66 more messages

May 2 (1 message)

REJECTED: CVE-2023-52651: wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev() (Greg Kroah-Hartman <gregkh@...uxfoundation.or…)

May 3 (26 messages)

CVE-2022-48671: cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48670: peci: cpu: Fix use-after-free in adev_release() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48672: of: fdt: fix off-by-one error in unflatten_dt_nodes() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48673: net/smc: Fix possible access to freed memory in link clear (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48674: erofs: fix pcluster use-after-free on UP platforms (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48675: IB/core: Fix a nested dead lock as part of ODP flow (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48687: ipv6: sr: fix out-of-bounds read when setting HMAC data. (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48686: nvme-tcp: fix UAF when detecting digest errors (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48696: regmap: spi: Reserve space for register address/padding (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48697: nvmet: fix a use-after-free (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48698: drm/amd/display: fix memory leak when using debugfs_lookup() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48688: i40e: Fix kernel crash during module removal (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48689: tcp: TX zerocopy should not sense pfmemalloc status (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48690: ice: Fix DMA mappings leak (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48691: netfilter: nf_tables: clean up hook list when offload flags check fails (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48692: RDMA/srp: Set scmnd->result only when scmnd is not NULL (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48693: soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48694: RDMA/irdma: Fix drain SQ hang with no completion (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48695: scsi: mpt3sas: Fix use-after-free warning (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48700: vfio/type1: Unpin zero pages (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48701: ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48702: ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48703: thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48705: wifi: mt76: mt7921e: fix crash in chip reset fail (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48704: drm/radeon: add a force flush to delay work when radeon (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48699: sched/debug: fix dentry leak in update_sched_domain_debugfs (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

May 8 (6 messages)

CVE-2024-27393: xen-netfront: Add missing skb_mark_for_recycle (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52654: io_uring/af_unix: disable sending io_uring over sockets (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27394: tcp: Fix Use-After-Free in tcp_ao_connect_init (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27395: net: openvswitch: Fix Use-After-Free in ovs_ct_exit (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27396: net: gtp: Fix Use-After-Free in gtp_dellink (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27397: netfilter: nf_tables: use timestamp to check for set element timeout (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

May 10 (1 message)

Re: CVE-2024-26898: aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts ("gregkh@...uxfoundation.org" <gregkh@...uxfoundation.org>)

May 13 (6 messages)

CVE-2023-52655: usb: aqc111: check packet for fixup for true limit (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27398: Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27399: Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27400: drm/amdgpu: once more fix the call oder in amdgpu_ttm_move() v2 (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27401: firewire: nosy: ensure user_length is taken into account when fetching packet contents (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52656: io_uring: drop any code related to SCM_RIGHTS (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

May 16 (2 messages)

REJECTED: CVE-2024-26821: fs: relax mount_setattr() permission checks (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
Re: CVE-2024-26821: fs: relax mount_setattr() permission checks (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

May 17 (153 messages)

CVE-2024-27403: netfilter: nft_flow_offload: reset dst in route object after setting up flow (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27402: phonet/pep: fix racy skb_queue_empty() use (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27404: mptcp: fix data races on remote_id (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27405: usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27406: lib/Kconfig.debug: TEST_IOV_ITER depends on MMU (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27407: fs/ntfs3: Fixed overflow check in mi_enum_attr() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27408: dmaengine: dw-edma: eDMA: Add sync read before starting the DMA transfer in remote setup (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52657: Revert "drm/amd/pm: resolve reboot exception for si oland" (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27409: dmaengine: dw-edma: HDMA: Add sync read before starting the DMA transfer in remote setup (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27410: wifi: nl80211: reject iftype change with mesh ID change (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27411: drm/nouveau: keep DMA buffers required for suspend/resume (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27412: power: supply: bq27xxx-i2c: Do not free non existing IRQ (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27414: rtnetlink: fix error logic of IFLA_BRIDGE_FLAGS writing back (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27415: netfilter: bridge: confirm multicast packets before passing them up the stack (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27416: Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27417: ipv6: fix potential "struct net" leak in inet6_rtm_getaddr() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27418: net: mctp: take ownership of skb in mctp_local_output (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27413: efi/capsule-loader: fix incorrect allocation size (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27419: netrom: Fix data-races around sysctl_net_busy_read (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52658: Revert "net/mlx5: Block entering switchdev mode with ns inconsistency" (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27428: netrom: Fix data-races around sysctl_netrom_network_ttl_initialiser (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27429: netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27430: netrom: Fix a data-race around sysctl_netrom_default_path_quality (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27431: cpumap: Zero-initialise xdp_rxq_info struct before running XDP program (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27420: netrom: Fix a data-race around sysctl_netrom_link_fails_count (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27421: netrom: Fix a data-race around sysctl_netrom_routing_control (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27422: netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27424: netrom: Fix a data-race around sysctl_netrom_transport_busy_delay (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27423: netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27425: netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27426: netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27427: netrom: Fix a data-race around sysctl_netrom_transport_timeout (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52660: media: rkisp1: Fix IRQ handling due to shared interrupts (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52659: x86/mm: Ensure input to pfn_to_kaddr() is treated as a 64-bit type (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27432: net: ethernet: mtk_eth_soc: fix PPE hanging issue (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27433: clk: mediatek: mt7622-apmixedsys: Fix an error handling path in clk_mt8135_apmixed_probe() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27434: wifi: iwlwifi: mvm: don't set the MFP flag for the GTK (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27436: ALSA: usb-audio: Stop parsing channels bits when all channels are found. (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27435: nvme: fix reconnection fail due to reserved tag allocation (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35785: tee: optee: Fix kernel panic caused by incorrect error handling (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35794: dm-raid: really frozen sync_thread during suspend (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35784: btrfs: fix deadlock with fiemap and extent locking (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35786: drm/nouveau: fix stale locked mutex in nouveau_gem_ioctl_pushbuf (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35787: md/md-bitmap: fix incorrect usage for sb_index (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35788: drm/amd/display: Fix bounds check for dcn35 DcfClocks (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35789: wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35790: usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35791: KVM: SVM: Flush pages under kvm->lock to fix UAF in svm_register_enc_region() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35792: crypto: rk3288 - Fix use after free in unprepare (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35793: debugfs: fix wait/cancellation handling during remove (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35796: net: ll_temac: platform_get_resource replaced by wrong function (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35795: drm/amdgpu: fix deadlock while reading mqd from debugfs (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35805: dm snapshot: fix lockup in dm_exception_table_exit (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35806: soc: fsl: qbman: Always disable interrupts when taking cgr_lock (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35807: ext4: fix corruption during on-line resize (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35808: md/dm-raid: don't call md_reap_sync_thread() directly (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35810: drm/vmwgfx: Fix the lifetime of the bo cursor memory (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35809: PCI/PM: Drain runtime-idle callbacks before driver removal (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35811: wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35812: usb: cdc-wdm: close race between read and workqueue (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35813: mmc: core: Avoid negative index with array access (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35814: swiotlb: Fix double-allocation of slots due to broken alignment handling (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35797: mm: cachestat: fix two shmem bugs (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35815: fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35816: firewire: ohci: prevent leak of left-over IRQ on unbind (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35817: drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35818: LoongArch: Define the __io_aw() hook as mmiowb() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35819: soc: fsl: qbman: Use raw spinlock for cgr_lock (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35820: io_uring: fix io_queue_proc modifying req->flags (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35821: ubifs: Set page uptodate in the correct place (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35822: usb: udc: remove warning when queue disabled ep (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35823: vt: fix unicode buffer corruption when deleting characters (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35798: btrfs: fix race in read_extent_buffer_pages() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35799: drm/amd/display: Prevent crash when disable stream (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35800: efi: fix panic in kdump kernel (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35801: x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35802: x86/sev: Fix position dependent variable references in startup code (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35803: x86/efistub: Call mixed mode boot services on the firmware's stack (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35804: KVM: x86: Mark target gfn of emulated atomic instruction as dirty (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35825: usb: gadget: ncm: Fix handling of zero block length packets (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35824: misc: lis3lv02d_i2c: Fix regulators getting en-/dis-abled twice on suspend/resume (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35826: block: Fix page refcounts for unaligned buffers in __bio_release_pages() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52662: drm/vmwgfx: fix a memleak in vmw_gmrid_man_get_node (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52661: drm/tegra: rgb: Fix missing clk_put() in the error handling paths of tegra_dc_rgb_probe() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52663: ASoC: SOF: amd: Fix memory leak in amd_sof_acp_probe() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35827: io_uring/net: fix overflow check in io_recvmsg_mshot_prep() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35828: wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35829: drm/lima: fix a memleak in lima_heap_alloc (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35830: media: tc358743: register v4l2 async device only after successful setup (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35831: io_uring: Fix release of pinned pages when __io_uaddr_map fails (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52664: net: atlantic: eliminate double free in error handling logic (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35833: dmaengine: fsl-qdma: Fix a memory leak related to the queue command DMA (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35832: bcachefs: kvfree bch_fs::snapshots in bch2_fs_snapshots_exit (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52666: ksmbd: fix potential circular locking issue in smb2_set_ea() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52665: powerpc/ps3_defconfig: Disable PPC64_BIG_ENDIAN_ELF_ABI_V2 (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52667: net/mlx5e: fix a potential double-free in fs_any_create_groups (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35835: net/mlx5e: fix a double-free in arfs_create_groups (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35836: dpll: fix pin dump crash for rebound module (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35837: net: mvpp2: clear BM pool before initialization (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
54 more messages

May 19 (90 messages)

CVE-2024-35861: smb: client: fix potential UAF in cifs_signal_cifsd_for_reconnect() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35870: smb: client: fix UAF in smb2_reconnect_server() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35871: riscv: process: Fix kernel gp leakage (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35872: mm/secretmem: fix GUP-fast succeeding on secretmem folios (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35873: riscv: Fix vector state restore in rt_sigreturn() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35874: aio: Fix null ptr deref in aio_complete() wakeup (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35875: x86/coco: Require seeding RNG with RDRAND on CoCo systems (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35876: x86/mce: Make sure to grab mce_sysfs_mutex in set_bank() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35877: x86/mm/pat: fix VM_PAT handling in COW mappings (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35878: of: module: prevent NULL pointer dereference in vsnprintf() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35879: of: dynamic: Synchronize of_changeset_destroy() with the devlink removals (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35862: smb: client: fix potential UAF in smb2_is_network_name_deleted() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35880: io_uring/kbuf: hold io_buffer_list reference over mmap (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35863: smb: client: fix potential UAF in is_valid_oplock_break() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35864: smb: client: fix potential UAF in smb2_is_valid_lease_break() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35865: smb: client: fix potential UAF in smb2_is_valid_oplock_break() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35866: smb: client: fix potential UAF in cifs_dump_full_key() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35868: smb: client: fix potential UAF in cifs_stats_proc_write() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35867: smb: client: fix potential UAF in cifs_stats_proc_show() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35869: smb: client: guarantee refcounted children from parent session (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35860: bpf: support deferring bpf_link dealloc to after RCU grace period (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35882: SUNRPC: Fix a slow server-side memory leak with RPC-over-TCP (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35891: net: phy: micrel: Fix potential null pointer dereference (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35892: net/sched: fix lockdep splat in qdisc_tree_reduce_backlog() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35893: net/sched: act_skbmod: prevent kernel-infoleak (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35894: mptcp: prevent BPF accessing lowat from a subflow socket. (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35895: bpf, sockmap: Prevent lock inversion deadlock in map delete elem (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35896: netfilter: validate user input for expected length (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35897: netfilter: nf_tables: discard table flag update with pending basechain deletion (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35898: netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35899: netfilter: nf_tables: flush pending destroy work before exit_net release (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35900: netfilter: nf_tables: reject new basechain after table flag update (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35883: spi: mchp-pci1xxx: Fix a possible null pointer dereference in pci1xxx_spi_probe (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35901: net: mana: Fix Rx DMA datasize and skb_over_panic (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35902: net/rds: fix possible cp null dereference (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35903: x86/bpf: Fix IP after emitting call depth accounting (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35904: selinux: avoid dereference of garbage after mount failure (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35905: bpf: Protect against int overflow for stack access size (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35906: drm/amd/display: Send DTBCLK disable message on first commit (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35907: mlxbf_gige: call request_irq() after NAPI initialized (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35908: tls: get psock ref after taking rxlock to avoid leak (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35909: net: wwan: t7xx: Split 64bit accesses to fix alignment issues (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35884: udp: do not accept non-tunnel GSO skbs landing in a tunnel (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35885: mlxbf_gige: stop interface during shutdown (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35886: ipv6: Fix infinite recursion in fib6_dump_done(). (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35887: ax25: fix use-after-free bugs caused by ax25_ds_del_timer (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35888: erspan: make sure erspan_base_hdr is present in skb->head (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35889: idpf: fix kernel panic on unknown packet types (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35890: gro: fix ownership transfer (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35881: Revert "drm/amd/display: Send DTBCLK disable message on first commit" (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35911: ice: fix memory corruption bug with suspend and rebuild (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35912: wifi: iwlwifi: mvm: rfi: fix potential response leaks (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35913: wifi: iwlwifi: mvm: pick the version of SESSION_PROTECTION_NOTIF (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35914: nfsd: Fix error cleanup path in nfsd_rename() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35915: nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35916: dma-buf: Fix NULL pointer dereference in sanitycheck() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35917: s390/bpf: Fix bpf_plt pointer arithmetic (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35910: tcp: properly terminate timers for kernel sockets (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
Re: CVE-2024-27406: lib/Kconfig.debug: TEST_IOV_ITER depends on MMU (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35918: randomize_kstack: Improve entropy diffusion (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52699: sysv: don't call sb_bread() with pointers_lock held (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35927: drm: Check output polling initialized before disabling (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35928: drm/amd/amdgpu: Fix potential ioremap() memory leaks in amdgpu_device_init() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35929: rcu/nocb: Fix WARN_ON_ONCE() in the rcu_nocb_bypass_lock() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35930: scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35931: drm/amdgpu: Skip do PCI error slot reset during RAS recovery (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35932: drm/vc4: don't check if plane->state->fb == state->fb (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35933: Bluetooth: btintel: Fix null ptr deref in btintel_read_version (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35934: net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35937: wifi: cfg80211: check A-MSDU format more carefully (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35935: btrfs: send: handle path ref underflow in header iterate_inode_ref() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35936: btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35919: media: mediatek: vcodec: adding lock to protect encoder context list (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35938: wifi: ath11k: decrease MHI channel buffer length to 8KB (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35939: dma-direct: Leak pages on dma_set_decrypted() failure (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35940: pstore/zone: Add a null pointer check to the psz_kmsg_read (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35920: media: mediatek: vcodec: adding lock to protect decoder context list (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35922: fbmon: prevent division by zero in fb_videomode_from_videomode() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35921: media: mediatek: vcodec: Fix oops when HEVC init fails (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35923: io_uring: clear opcode specific data for an early failure (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35924: usb: typec: ucsi: Limit read size on v1.2 (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35925: block: prevent division by zero in blk_rq_stat_sum() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35926: crypto: iaa - Fix async_disable descriptor leak (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35942: pmdomain: imx8mp-blk-ctrl: imx8mp_blk: Add fdcc clock to hdmimix domain (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35943: pmdomain: ti: Add a null pointer check to the omap_prm_domain_init (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35944: VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35945: net: phy: phy_device: Prevent nullptr exceptions on ISR (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35946: wifi: rtw89: fix null pointer access when abort scan (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35941: net: skbuff: add overflow debug check to pull/push helpers (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35947: dyndbg: fix old BUG_ON in >control parser (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

May 20 (63 messages)

Re: CVE-2023-52665: powerpc/ps3_defconfig: Disable PPC64_BIG_ENDIAN_ELF_ABI_V2 (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35949: btrfs: make sure that WRITTEN is set on all metadata blocks (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35948: bcachefs: Check for journal entries overruning end of sb clean section (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35951: drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35950: drm/client: Fully protect modes[] with dev->mode_config.mutex (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35952: drm/ast: Fix soft lockup (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35953: accel/ivpu: Fix deadlock in context_xa (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35962: netfilter: complete validation of user input (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35963: Bluetooth: hci_sock: Fix not validating setsockopt user input (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35964: Bluetooth: ISO: Fix not validating setsockopt user input (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35965: Bluetooth: L2CAP: Fix not validating setsockopt user input (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35966: Bluetooth: RFCOMM: Fix not validating setsockopt user input (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35967: Bluetooth: SCO: Fix not validating setsockopt user input (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35968: pds_core: Fix pdsc_check_pci_health function to use work thread (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35969: ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35970: af_unix: Clear stale u->oob_skb. (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35971: net: ks8851: Handle softirqs at the end of IRQ thread to fix hang (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35954: scsi: sg: Avoid sg device teardown race (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35972: bnxt_en: Fix possible memory leak in bnxt_rdma_aux_device_init() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35973: geneve: fix header validation in geneve[6]_xmit_skb (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35974: block: fix q->blkg_list corruption during disk rebind (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35975: octeontx2-pf: Fix transmit scheduler resource leak (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35976: xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35977: platform/chrome: cros_ec_uart: properly fix race condition (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35978: Bluetooth: Fix memory leak in hci_req_sync_complete() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35979: raid1: fix use-after-free for original bio in raid1_write_request() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35980: arm64: tlb: Fix TLBI RANGE operand (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35981: virtio_net: Do not send RSS key if it is not supported (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35955: kprobes: Fix possible use-after-free issue on kprobe registration (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35982: batman-adv: Avoid infinite loop trying to resize local TT (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35956: btrfs: qgroup: fix qgroup prealloc rsv leak in subvolume operations (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35957: iommu/vt-d: Fix WARN_ON in iommu probe path (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35959: net/mlx5e: Fix mlx5e_priv_init() cleanup flow (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35958: net: ena: Fix incorrect descriptor free behavior (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35960: net/mlx5: Properly link new fs rules into the tree (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35961: net/mlx5: Register devlink first under devlink lock (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35984: i2c: smbus: fix NULL function pointer dereference (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35983: bounds: Use the right number of bits for power-of-two CONFIG_NR_CPUS (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35985: sched/eevdf: Prevent vlag from going out of bounds in reweight_eevdf() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35986: phy: ti: tusb1210: Resolve charger-det crash if charger psy is unregistered (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35987: riscv: Fix loading 64-bit NOMMU kernels past the start of RAM (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35988: riscv: Fix TASK_SIZE on 64-bit NOMMU (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35991: dmaengine: idxd: Convert spinlock to mutex to lock evl workqueue (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36000: mm/hugetlb: fix missing hugetlb_lock for resv uncharge (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35989: dmaengine: idxd: Fix oops during rmmod on single-CPU platforms (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36001: netfs: Fix the pre-flush when appending to a file in writethrough mode (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36002: dpll: fix dpll_pin_on_pin_register() for multiple parent pins (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36003: ice: fix LAG and VF lock dependency in ice_reset_vf() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36004: i40e: Do not use WQ_MEM_RECLAIM flag for workqueue (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36005: netfilter: nf_tables: honor table dormant flag from netdev release event path (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36006: mlxsw: spectrum_acl_tcam: Fix incorrect list API usage (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36007: mlxsw: spectrum_acl_tcam: Fix warning during rehash (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36008: ipv4: check for NULL idev in ip_route_use_hint() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35992: phy: marvell: a3700-comphy: Fix out of bounds read (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36009: ax25: Fix netdev refcount issue (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35993: mm: turn folio_test_hugetlb into a PageType (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35994: firmware: qcom: uefisecapp: Fix memory related IO errors and crashes (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35995: ACPI: CPPC: Use access_width over bit_width for system memory accesses (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35996: cpu: Re-enable CPU mitigations by default for !X86 architectures (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35997: HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35998: smb3: fix lock ordering potential deadlock in cifs_sync_mid_result (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35999: smb3: missing lock when picking channel (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35990: dma: xilinx_dpdma: Fix locking (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

May 21 (386 messages)

REJECTED: CVE-2023-52665: powerpc/ps3_defconfig: Disable PPC64_BIG_ENDIAN_ELF_ABI_V2 (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
Re: CVE-2023-52665: powerpc/ps3_defconfig: Disable PPC64_BIG_ENDIAN_ELF_ABI_V2 (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
Re: CVE-2024-26904: btrfs: fix data race at btrfs_use_block_rsv() when accessing block reserve (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2024-26904: btrfs: fix data race at btrfs_use_block_rsv() when accessing block reserve (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47221: mm/slub: actually fix freelist pointer vs redzoning (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47220: usb: dwc3: core: fix kernel panic when do reboot (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47230: KVM: x86: Immediately reset the MMU context when the SMM flag is cleared (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47231: can: mcba_usb: fix memory leak in mcba_usb (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47232: can: j1939: fix Use-after-Free, hold skb ref while in use (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47233: regulator: rt4801: Fix NULL pointer dereference if priv->enable_gpios is NULL (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47234: phy: phy-mtk-tphy: Fix some resource leaks in mtk_phy_init() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47235: net: ethernet: fix potential use-after-free in ec_bhf_remove (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47224: net: ll_temac: Make sure to free skb when it is completely used (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47223: net: bridge: fix vlan tunnel dst null pointer dereference (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47225: mac80211: fix deadlock in AP/VLAN handling (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47222: net: bridge: fix vlan tunnel dst refcnt when egressing (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47226: x86/fpu: Invalidate FPU state after a failed XRSTOR from a user buffer (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47227: x86/fpu: Prevent state corruption in __fpu__restore_sig() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47228: x86/ioremap: Map EFI-reserved memory as encrypted for SEV (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47229: PCI: aardvark: Fix kernel panic during PIO transfer (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47237: net: hamradio: fix memory leak in mkiss_close (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47246: net/mlx5e: Fix page reclaim for dead peer hairpin (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47247: net/mlx5e: Fix use-after-free of encap entry in neigh update handler (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47249: net: rds: fix memory leak in rds_recvmsg (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47248: udp: fix race between close() and udp_abort() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47250: net: ipv4: fix memory leak in netlbl_cipsov4_add_std (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47251: mac80211: fix skb length check in ieee80211_scan_rx() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47252: batman-adv: Avoid WARN_ON timing related checks (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47254: gfs2: Fix use-after-free in gfs2_glock_shrink_scan (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47253: drm/amd/display: Fix potential memory leak in DMUB hw_init (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47255: kvm: LAPIC: Restore guard to prevent illegal APIC register access (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47238: net: ipv4: fix memory leak in ip_mc_add1_src (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47256: mm/memory-failure: make sure wait for page writeback in memory_failure (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47257: net: ieee802154: fix null deref in parse dev addr (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47259: NFS: Fix use-after-free in nfs4_init_client() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47258: scsi: core: Fix error handling of scsi_host_alloc() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47260: NFS: Fix a potential NULL dereference in nfs_get_client() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47261: IB/mlx5: Fix initializing CQ fragments buffer (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47262: KVM: x86: Ensure liveliness of nested VM-Enter fail tracepoint message (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47263: gpio: wcd934x: Fix shift-out-of-bounds error (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47264: ASoC: core: Fix Null-point-dereference in fmt_single_name() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47265: RDMA: Verify port when creating flow rule (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47239: net: usb: fix possible use-after-free in smsc75xx_bind (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47266: RDMA/ipoib: Fix warning caused by destroying non-initial netns (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47267: usb: fix various gadget panics on 10gbps cabling (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47240: net: qrtr: fix OOB Read in qrtr_endpoint_post (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47268: usb: typec: tcpm: cancel vdm and state machine hrtimer when unregister tcpm port (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47241: ethtool: strset: fix message length calculation (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47242: mptcp: fix soft lookup in subflow_error_report() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47244: mptcp: Fix out of bounds when parsing TCP options (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47245: netfilter: synproxy: Fix out of bounds when parsing TCP options (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47243: sch_cake: Fix out of bounds when parsing TCP options and header (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47236: net: cdc_eem: fix tx fixup skb leak (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47270: usb: fix various gadgets null ptr deref on 10gbps cabling. (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47279: usb: misc: brcmstb-usb-pinmap: check return value after calling platform_get_resource() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47280: drm: Fix use-after-free read in drm_getunique() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47281: ALSA: seq: Fix race of snd_seq_timer_open() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47282: spi: bcm2835: Fix out-of-bounds access with more than 4 slaves (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47283: net:sfc: fix non-freed irq in legacy irq mode (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47284: isdn: mISDN: netjet: Fix crash in nj_probe: (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47285: net/nfc/rawsock.c: fix a permission check bug (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47271: usb: cdnsp: Fix deadlock issue in cdnsp_thread_irq_handler (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47273: usb: dwc3-meson-g12a: fix usb2 PHY glue init when phy0 is disabled (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47274: tracing: Correct the length check which causes memory corruption (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47275: bcache: avoid oversized read request in cache missing code path (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47272: usb: dwc3: gadget: Bail from dwc3_gadget_exit() if dwc->gadget is NULL (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47276: ftrace: Do not blindly read the ip address in ftrace_bug() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47277: kvm: avoid speculation-based attacks from out-of-range memslot accesses (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47278: bus: mhi: pci_generic: Fix possible use-after-free in mhi_pci_remove() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47269: usb: dwc3: ep0: fix NULL pointer exception (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47287: driver core: auxiliary bus: Fix memory leak when driver_register() fail (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47296: KVM: PPC: Fix kvm_arch_vcpu_ioctl vcpu_load leak (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47297: net: fix uninit-value in caif_seqpkt_sendmsg (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47298: bpf, sockmap: Fix potential memory leak on unlikely error case (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47288: media: ngene: Fix out-of-bounds bug in ngene_command_config_free_buf() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47290: scsi: target: Fix NULL dereference on XCOPY completion (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47289: ACPI: fix NULL pointer dereference (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47291: ipv6: fix another slab-out-of-bounds in fib6_nh_flush_exceptions (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47292: io_uring: fix memleak in io_init_wq_offload() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47293: net/sched: act_skbmod: Skip non-Ethernet packets (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47294: netrom: Decrease sock refcount when sock timers expire (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47295: net: sched: fix memory leak in tcindex_partial_destroy_work (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47286: bus: mhi: core: Validate channel ID when processing command completions (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47300: bpf: Fix tail_call_reachable rejection for interpreter when jit failed (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47309: net: validate lwtstate->data before returning from skb_tunnel_info() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47310: net: ti: fix UAF in tlan_remove_one (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47311: net: qcom/emac: fix UAF in emac_remove (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47312: netfilter: nf_tables: Fix dereference of null pointer flow (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47313: cpufreq: CPPC: Fix potential memleak in cppc_cpufreq_cpu_init (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47314: memory: fsl_ifc: fix leak of private memory on probe failure (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47315: memory: fsl_ifc: fix leak of IO mapping on probe failure (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47316: nfsd: fix NULL dereference in nfs3svc_encode_getaclres (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47317: powerpc/bpf: Fix detecting BPF atomic instructions (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47318: arch_topology: Avoid use-after-free for scale_freq_data (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47301: igb: Fix use-after-free error during reset (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47319: virtio-blk: Fix memory leak among suspend/resume procedure (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47320: nfs: fix acl memory leak of posix_acl_create() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47321: watchdog: Fix possible use-after-free by calling del_timer_sync() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47322: NFSv4: Fix an Oops in pnfs_mark_request_commit() when doing O_DIRECT (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
287 more messages

May 22 (72 messages)

Re: CVE-2024-35906: drm/amd/display: Send DTBCLK disable message on first commit (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
Re: CVE-2024-26650: platform/x86: p2sb: Allow p2sb_bar() calls during PCI device probe (Greg KH <gregkh@...uxfoundation.org>)
Re: CVE-2024-27429: netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47434: xhci: Fix command ring pointer corruption while aborting a command (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47433: btrfs: fix abort logic in btrfs_replace_file_extents (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47443: NFC: digital: fix possible memory leak in digital_tg_listen_mdaa() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47444: drm/edid: In connector_bad_edid() cap num_of_ext by num_blocks read (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47445: drm/msm: Fix null pointer dereference on pointer edp (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47446: drm/msm/a4xx: fix error handling in a4xx_gpu_init() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47447: drm/msm/a3xx: fix error handling in a3xx_gpu_init() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47448: mptcp: fix possible stall on recvmsg() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47449: ice: fix locking for Tx timestamp tracking flush (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47450: KVM: arm64: Fix host stage-2 PGD refcount (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47451: netfilter: xt_IDLETIMER: fix panic that occurs when timer_type has garbage value (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47452: netfilter: nf_tables: skip netdev events generated on netns removal (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47435: dm: fix mempool NULL pointer race when completing IO (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47453: ice: Avoid crash from unnecessary IDA free (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47454: powerpc/smp: do not decrement idle task preempt count in CPU offline (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47455: ptp: Fix possible memory leak in ptp_clock_register() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47456: can: peak_pci: peak_pci_remove(): fix UAF (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47457: can: isotp: isotp_sendmsg(): add result check for wait_event_interruptible() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47458: ocfs2: mount fails with buffer overflow in strlen (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47436: usb: musb: dsps: Fix the probe error path (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47437: iio: adis16475: fix deadlock on frequency set (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47438: net/mlx5e: Fix memory leak in mlx5_core_destroy_cq() error path (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47439: net: dsa: microchip: Added the condition for scheduling ksz_mib_read_work (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47440: net: encx24j600: check error in devm_regmap_init_encx24j600 (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47441: mlxsw: thermal: Fix out-of-bounds memory accesses (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47442: NFC: digital: fix possible memory leak in digital_in_send_sdd_req() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47460: ocfs2: fix data corruption after conversion from inline format (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47459: can: j1939: j1939_netdev_start(): fix UAF for rx_kref of j1939_priv (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47461: userfaultfd: fix a race between writeprotect and exit_mmap() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47463: mm/secretmem: fix NULL page->mapping dereference in page_is_secretmem() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47462: mm/mempolicy: do not allow illegal MPOL_F_NUMA_BALANCING | MPOL_LOCAL in mbind() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47464: audit: fix possible null-pointer dereference in audit_filter_rules (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47466: mm, slub: fix potential memoryleak in kmem_cache_open() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47467: kunit: fix reference count leak in kfree_at_end (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47468: isdn: mISDN: Fix sleeping function called from invalid context (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47469: spi: Fix deadlock when adding SPI controllers on SPI buses (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47473: scsi: qla2xxx: Fix a memory leak in an error path of qla2x00_process_els() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47470: mm, slub: fix potential use-after-free in slab_debugfs_fops (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47471: drm: mxsfb: Fix NULL pointer dereference crash on unload (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47472: net: mdiobus: Fix memory leak in __mdiobus_register (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47465: KVM: PPC: Book3S HV: Fix stack handling in idle_kvm_start_guest() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47475: comedi: vmk80xx: fix transfer-buffer overflows (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47474: comedi: vmk80xx: fix bulk-buffer overflow (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47484: octeontx2-af: Fix possible null pointer dereference. (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47485: IB/qib: Protect from buffer overflow in struct qib_user_sdma_pkt fields (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47486: riscv, bpf: Fix potential NULL dereference (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47487: drm/amdgpu: fix out of bounds write (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47488: cgroup: Fix memory leak caused by missing cgroup_bpf_offline (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47489: drm/amdgpu: Fix even more out of bound writes from debugfs (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47491: mm: khugepaged: skip huge page collapse for special files (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47476: comedi: ni_usb6501: fix NULL-deref in command paths (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47493: ocfs2: fix race between searching chunks and release journal_head from buffer_head (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47494: cfg80211: fix management registrations locking (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47490: drm/ttm: fix memleak in ttm_transfered_destroy (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47492: mm, thp: bail out early in collapse_file for writeback page (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47495: usbnet: sanity check for maxpacket (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47497: nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47496: net/tls: Fix flipped sign in tls_err_abort() calls (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47477: comedi: dt9812: fix DMA buffers on stack (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47498: dm rq: don't queue request to blk-mq during DM suspend (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47478: isofs: Fix out of bound access for corrupted isofs image (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47479: staging: rtl8712: fix use-after-free in rtl8712_dl_fw (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47480: scsi: core: Put LLD module refcnt after SCSI device is released (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47482: net: batman-adv: fix error handling (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47483: regmap: Fix possible double-free in regcache_rbtree_exit() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47481: RDMA/mlx5: Initialize the ODP xarray when creating an ODP MR (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2023-52830: Bluetooth: Fix double free in hci_conn_cleanup (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36010: igb: Fix string truncation warnings in igb_set_fw_version (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
Re: CVE-2024-27410: wifi: nl80211: reject iftype change with mesh ID change ("gregkh@...uxfoundation.org" <gregkh@...uxfoundation.org>)

May 23 (14 messages)

CVE-2024-36012: Bluetooth: msft: fix slab-use-after-free in msft_do_close() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36011: Bluetooth: HCI: Fix potential null-ptr-deref (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36013: Bluetooth: L2CAP: Fix slab-use-after-free in l2cap_connect() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
Re: CVE-2024-35802: x86/sev: Fix position dependent variable references in startup code (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
Re: CVE-2021-47326: x86/signal: Detect and prevent an alternate signal stack overflow (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2021-47326: x86/signal: Detect and prevent an alternate signal stack overflow (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2024-35876: x86/mce: Make sure to grab mce_sysfs_mutex in set_bank() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2024-35906: drm/amd/display: Send DTBCLK disable message on first commit (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2024-35881: Revert "drm/amd/display: Send DTBCLK disable message on first commit" (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
Re: CVE-2024-35906: drm/amd/display: Send DTBCLK disable message on first commit (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
Re: CVE-2024-26650: platform/x86: p2sb: Allow p2sb_bar() calls during PCI device probe (Greg KH <gregkh@...uxfoundation.org>)
REJECTED: CVE-2024-26650: platform/x86: p2sb: Allow p2sb_bar() calls during PCI device probe (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2024-26650: platform/x86: p2sb: Allow p2sb_bar() calls during PCI device probe (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
Re: CVE-2024-26821: fs: relax mount_setattr() permission checks (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

May 24 (88 messages)

REJECTED: CVE-2023-52793: samples/bpf: syscall_tp_user: Fix array out-of-bound access (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
Re: CVE-2023-52823: kernel: kexec: copy user-array safely (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2023-52823: kernel: kexec: copy user-array safely (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2023-52823: kernel: kexec: copy user-array safely (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
Re: CVE-2024-35906: drm/amd/display: Send DTBCLK disable message on first commit (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47500: iio: mma8452: Fix trigger reference couting (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47499: iio: accel: kxcjk-1013: Fix possible memory leak in probe and remove (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47501: i40e: Fix NULL pointer dereference in i40e_dbg_dump_desc (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47502: ASoC: codecs: wcd934x: handle channel mappping list correctly (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47503: scsi: pm80xx: Do not call scsi_remove_host() in pm8001_alloc() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47504: io_uring: ensure task_work gets run as part of cancelations (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47505: aio: fix use-after-free due to missing POLLFREE handling (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47506: nfsd: fix use-after-free due to delegation race (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47507: nfsd: Fix nsfd startup race (again) (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47508: btrfs: free exchange changeset on failures (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47510: btrfs: fix re-dirty process of tree-log nodes (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47509: ALSA: pcm: oss: Limit the period size to 16MB (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47519: can: m_can: m_can_read_fifo: fix memory leak in error branch (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47520: can: pch_can: pch_can_rx_normal: fix use after free (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47521: can: sja1000: fix use after free in ems_pcmcia_add_card() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47522: HID: bigbenff: prevent null pointer dereference (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47523: IB/hfi1: Fix leak of rcvhdrtail_dummy_kvaddr (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47524: serial: liteuart: fix minor-number leak on probe errors (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47525: serial: liteuart: fix use-after-free and memleak on unbind (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47526: serial: liteuart: Fix NULL pointer dereference in ->remove() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47527: serial: core: fix transmit-buffer reset and memleak (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47528: usb: cdnsp: Fix a NULL pointer dereference in cdnsp_endpoint_init() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47511: ALSA: pcm: oss: Fix negative period/buffer sizes (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47529: iwlwifi: Fix memory leaks in error handling path (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47530: drm/msm: Fix wait_fence submitqueue leak (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47531: drm/msm: Fix mmap to include VM_IO and VM_DONTDUMP (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47534: drm/vc4: kms: Add missing drm_crtc_commit_put (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47514: devlink: fix netns refcount leak in devlink_nl_cmd_reload() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47512: net/sched: fq_pie: prevent dismantle issue (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47532: drm/msm/devfreq: Fix OPP refcnt leak (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47533: drm/vc4: kms: Clear the HVS FIFO commit pointer once done (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47516: nfp: Fix memory leak in nfp_cpp_area_cache_add() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47513: net: dsa: felix: Fix memory leak in felix_setup_mmio_filtering (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47518: nfc: fix potential NULL pointer deref in nfc_genl_dump_ses_done (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47536: net/smc: fix wrong list_del in smc_lgr_cleanup_early (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47515: seg6: fix the iif in the IPv6 socket control block (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47517: ethtool: do not perform operations on net devices being unregistered (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47545: perf hist: Fix memory leak of a perf_hpp_fmt (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47546: ipv6: fix memory leak in fib6_rule_suppress (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47547: net: tulip: de4x5: fix the problem that the array 'lp->phy[8]' may be out of bound (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47548: ethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array overflow in hns_dsaf_ge_srst_by_port() (Greg Kroah-Hartman <gregkh@...uxfoundation…)
CVE-2021-47549: sata_fsl: fix UAF in sata_fsl_port_stop when rmmod sata_fsl (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47550: drm/amd/amdgpu: fix potential memleak (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47551: drm/amd/amdkfd: Fix kernel panic when reset failed and been triggered again (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47552: blk-mq: cancel blk-mq dispatch work in both blk_cleanup_queue and disk_release() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47553: sched/scs: Reset task stack state in bringup_cpu() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47554: vdpa_sim: avoid putting an uninitialized iova_domain (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47537: octeontx2-af: Fix a memleak bug in rvu_mbox_init() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47555: net: vlan: fix underflow for the real_dev refcnt (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47556: ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47557: net/sched: sch_ets: don't peek at classes beyond 'nbands' (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47558: net: stmmac: Disable Tx queues when reconfiguring the interface (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47538: rxrpc: Fix rxrpc_local leak in rxrpc_lookup_peer() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47539: rxrpc: Fix rxrpc_peer leak in rxrpc_look_up_bundle() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47540: mt76: mt7915: fix NULL pointer dereference in mt7915_get_phy_mode (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47541: net/mlx4_en: Fix an use-after-free bug in mlx4_en_try_alloc_resources() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47542: net: qlogic: qlcnic: Fix a NULL pointer dereference in qlcnic_83xx_add_rings() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47543: perf report: Fix memory leaks around perf_tip() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47544: tcp: fix page frag corruption on page fault (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47535: drm/msm/a6xx: Allocate enough space for GMU registers (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47560: mlxsw: spectrum: Protect driver from buggy firmware (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47559: net/smc: Fix NULL pointer dereferencing in smc_vlan_by_tcpsk() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47569: io_uring: fail cancellation for EXITING tasks (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47570: staging: r8188eu: fix a memory leak in rtw_wx_read32() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47572: net: nexthop: fix null pointer dereference when IPv6 is not enabled (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47561: i2c: virtio: disable timeout handling (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47571: staging: rtl8192e: Fix use after free in _rtl92e_pci_disconnect() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47562: ice: fix vsi->txq_map sizing (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47563: ice: avoid bpf_prog refcount underflow (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47564: net: marvell: prestera: fix double free issue on err path (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47565: scsi: mpt3sas: Fix kernel panic during drive powercycle test (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47566: proc/vmcore: fix clearing user buffer by properly using clear_user() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47567: powerpc/32: Fix hardlockup on vmap stack overflow (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47568: ksmbd: fix memleak in get_file_stream_info() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
Re: CVE-2024-26821: fs: relax mount_setattr() permission checks (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
Re: CVE-2024-35906: drm/amd/display: Send DTBCLK disable message on first commit (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2023-52822: drm: vmwgfx_surface.c: copy user-array safely (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2023-52824: kernel: watch_queue: copy user-array safely (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2023-52820: drm_lease.c: copy user-array safely (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
Re: CVE-2023-52823: kernel: kexec: copy user-array safely (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2023-52758: i2c: dev: copy userspace array safely (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
Re: CVE-2023-52823: kernel: kexec: copy user-array safely (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52880: tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

May 25 (19 messages)

Re: CVE-2023-52656: io_uring: drop any code related to SCM_RIGHTS (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2023-52656: io_uring: drop any code related to SCM_RIGHTS (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2024-27420: netrom: Fix a data-race around sysctl_netrom_link_fails_count (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2024-27421: netrom: Fix a data-race around sysctl_netrom_routing_control (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2024-27422: netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2024-27423: netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2024-27424: netrom: Fix a data-race around sysctl_netrom_transport_busy_delay (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2024-27425: netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2024-27426: netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2024-27427: netrom: Fix a data-race around sysctl_netrom_transport_timeout (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2024-27428: netrom: Fix data-races around sysctl_netrom_network_ttl_initialiser (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2024-27430: netrom: Fix a data-race around sysctl_netrom_default_path_quality (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
Re: CVE-2024-27429: netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2021-47411: io_uring: allow conditional reschedule for intensive iterators (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2024-35923: io_uring: clear opcode specific data for an early failure (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2024-35820: io_uring: fix io_queue_proc modifying req->flags (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
Re: CVE-2023-52656: io_uring: drop any code related to SCM_RIGHTS (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52656: io_uring: drop any code related to SCM_RIGHTS (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
Re: CVE-2023-52656: io_uring: drop any code related to SCM_RIGHTS (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

May 28 (8 messages)

REJECTED: CVE-2021-47487: drm/amdgpu: fix out of bounds write (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
Re: CVE-2023-52685: pstore: ram_core: fix possible overflow in persistent_ram_init_ecc() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2021-47377: xen/balloon: use a kernel thread instead a workqueue (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
Re: CVE-2021-47377: kernel: xen/balloon: use a kernel thread instead a workqueue (Greg KH <gregkh@...uxfoundation.org>)
Re: CVE-2023-52734: net: sched: sch: Bounds check priority (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2023-52734: net: sched: sch: Bounds check priority (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
Re: CVE-2024-35802: x86/sev: Fix position dependent variable references in startup code (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2024-35802: x86/sev: Fix position dependent variable references in startup code (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

May 29 (5 messages)

CVE-2024-36014: drm/arm/malidp: fix a possible null pointer dereference (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36015: ppdev: Add an error check in register_device (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
Re: CVE-2023-52734: net: sched: sch: Bounds check priority (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52881: tcp: do not accept ACK of bytes we never sent (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36016: tty: n_gsm: fix possible out-of-bounds in gsm0_receive() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

May 30 (98 messages)

CVE-2024-36017: rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36019: regmap: maple: Fix cache corruption in regcache_maple_drop() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36018: nouveau/uvmm: fix addr/range calcs for remap operations (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36020: i40e: fix vf may be used uninitialized in this function warning (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36021: net: hns3: fix kernel crash when devlink reload during pf initialization (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36023: Julia Lawall reported this null pointer dereference, this should fix it. (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36022: drm/amdgpu: Init zone device and drm client after mode-1 reset on reload (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36024: drm/amd/display: Disable idle reallow as part of command/gpint execution (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36025: scsi: qla2xxx: Fix off by one in qla_edif_app_getstats() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36026: drm/amd/pm: fixes a random hang in S4 for SMU v13.0.4/11 (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36027: btrfs: zoned: do not flag ZEROOUT on non-dirty extent buffer (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36029: mmc: sdhci-msm: pervent access to suspended controller (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36028: mm/hugetlb: fix DEBUG_LOCKS_WARN_ON(1) when dissolve_free_hugetlb_folio() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36030: octeontx2-af: fix the double free in rvu_npc_freemem() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36031: keys: Fix overwrite of key expiration on instantiation (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52882: clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36032: Bluetooth: qca: fix info leak when fetching fw build id (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36033: Bluetooth: qca: fix info leak when fetching board id (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36881: mm/userfaultfd: reset ptes when close() for wr-protected ones (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36890: mm/slab: make __free(kfree) accept error pointers (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36891: maple_tree: fix mas_empty_area_rev() null pointer dereference (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36892: mm/slub: avoid zeroing outside-object freepointer for single free (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36893: usb: typec: tcpm: Check for port partner validity before consuming it (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36894: usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36895: usb: gadget: uvc: use correct buffer size when parsing configfs lists (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36896: USB: core: Fix access violation during port device removal (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36898: gpiolib: cdev: fix uninitialised kfifo (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36897: drm/amd/display: Atom Integrated System Info v2_2 for DCN35 (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36899: gpiolib: cdev: Fix use after free in lineinfo_changed_notify (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36882: mm: use memalloc_nofs_save() in page_cache_ra_order() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36900: net: hns3: fix kernel crash when devlink reload during initialization (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36901: ipv6: prevent NULL dereference in ip6_output() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36902: ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36903: ipv6: Fix potential uninit-value access in __ip6_make_skb() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36905: tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36904: tcp: Use refcount_inc_not_zero() in tcp_twsk_unique(). (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36906: ARM: 9381/1: kasan: clear stale stack poison (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36883: net: fix out-of-bounds access in ops_init (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36884: iommu/arm-smmu: Use the correct type in nvidia_smmu_context_fault() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36887: e1000e: change usleep_range to udelay in PHY mdic access (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36886: tipc: fix UAF in error path (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36889: mptcp: ensure snd_nxt is properly initialized on connect (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36888: workqueue: Fix selection of wake_cpu in kick_pool() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36885: drm/nouveau/firmware: Fix SG_DEBUG error with nvkm_firmware_ctor() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36880: Bluetooth: qca: add missing firmware sanity checks (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36908: blk-iocost: do not WARN if iocg was already offlined (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36917: block: fix overflow in blk_ioctl_discard() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36918: bpf: Check bloom filter map value size (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36919: scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36920: scsi: mpi3mr: Avoid memcpy field-spanning write WARNING (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36922: wifi: iwlwifi: read txq->read_ptr under lock (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36921: wifi: iwlwifi: mvm: guard against invalid STA ID on removal (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36923: fs/9p: fix uninitialized values during inode evict (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36924: scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36925: swiotlb: initialise restricted pool list_head when SWIOTLB_DYNAMIC=y (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36926: powerpc/pseries/iommu: LPAR panics during boot up with a frozen PE (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36928: s390/qeth: Fix kernel panic after setting hsuid (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36929: net: core: reject skb_copy(_expand) for fraglist GSO skbs (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36909: Drivers: hv: vmbus: Don't free ring buffers that couldn't be re-encrypted (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36927: ipv4: Fix uninit-value access in __ip_make_skb() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36930: spi: fix null pointer dereference within spi_sync (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36931: s390/cio: Ensure the copied buf is NUL terminated (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36932: thermal/debugfs: Prevent use-after-free from occurring after cdev removal (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36933: nsh: Restore skb->{protocol,data,mac_header} for outer header in nsh_gso_segment(). (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36934: bna: ensure the copied buf is NUL terminated (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36935: ice: ensure the copied buf is NUL terminated (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36936: efi/unaccepted: touch soft lockup during memory accept (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36910: uio_hv_generic: Don't free decrypted memory (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36937: xdp: use flags field to disambiguate broadcast redirect (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36938: bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36939: nfs: Handle error of rpc_proc_register() in nfs_net_init(). (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36940: pinctrl: core: delete incorrect free in pinctrl_enable() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36941: wifi: nl80211: don't free NULL coalescing rule (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36911: hv_netvsc: Don't free decrypted memory (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36912: Drivers: hv: vmbus: Track decrypted status in vmbus_gpadl (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36913: Drivers: hv: vmbus: Leak pages if set_memory_encrypted() fails (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36914: drm/amd/display: Skip on writeback when it's not applicable (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36915: nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36916: blk-iocost: avoid out of bounds shift (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36907: SUNRPC: add a missing rpc_stat for TCP TLS (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36943: fs/proc/task_mmu: fix loss of young/dirty bits during pagemap scan (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36952: scsi: lpfc: Move NPIV's transport unregistration to after resource clean up (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36953: KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36955: ALSA: hda: intel-sdw-acpi: fix usage of device_get_named_child_node() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36954: tipc: fix a possible memleak in tipc_buf_append (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36956: thermal/debugfs: Free all thermal zone debug memory on zone removal (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36957: octeontx2-af: avoid off-by-one read from userspace (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36958: NFSD: Fix nfsd4_encode_fattr4() crasher (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36959: pinctrl: devicetree: fix refcount leak in pinctrl_dt_to_map() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36944: Reapply "drm/qxl: simplify qxl_fence_wait" (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36945: net/smc: fix neighbour and rtable leak in smc_ib_find_route() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36946: phonet: fix rtm_phonet_notify() skb allocation (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36947: qibfs: fix dentry leak (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36948: drm/xe/xe_migrate: Cast to output precision before multiplying operands (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36949: amd/amdkfd: sync all devices to wait all processes being evicted (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36950: firewire: ohci: mask bus reset interrupts between ISR and bottom half (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36951: drm/amdkfd: range check cp bad op exception interrupts (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36942: Bluetooth: qca: fix firmware check error path (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

1203 messages

Powered by blists - more mailing lists