linux-cve-announce mailing list - 2024/06

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

linux-cve-announce mailing list - 2024/06

Mon	Tue	Wed	Thu	Fri	Sat	Sun
					¹	²
³ 5	⁴ 4	⁵	⁶	⁷	⁸ 10	⁹
¹⁰ 2	¹¹	¹² 3	¹³ 5	¹⁴	¹⁵	¹⁶
¹⁷ 6	¹⁸ 6	¹⁹ 127	²⁰ 74	²¹ 42	²²	²³
²⁴ 14	²⁵ 25	²⁶	²⁷	²⁸	²⁹	³⁰

Messages by day:

June 3 (5 messages)

CVE-2024-36961: thermal/debugfs: Fix two locking issues with thermal zone debug (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36960: drm/vmwgfx: Fix invalid reads in fence signaled events (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36963: tracefs: Reset permissions on remount if permissions are options (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36962: net: ks8851: Queue RX packets in IRQ handler instead of disabling BHs (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36964: fs/9p: only translate RWX permissions for plain 9P2000 (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

June 4 (4 messages)

REJECTED: CVE-2024-35941: net: skbuff: add overflow debug check to pull/push helpers (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
Re: CVE-2024-35941: net: skbuff: add overflow debug check to pull/push helpers (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2024-35812: usb: cdc-wdm: close race between read and workqueue (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
Re: CVE-2024-35812: usb: cdc-wdm: close race between read and workqueue ("gregkh@...uxfoundation.org" <gregkh@...uxfoundation.org>)

June 8 (10 messages)

Re: pwm: Fix double shift bug (Greg KH <gregkh@...uxfoundation.org>)
REJECTED: CVE-2023-52756: pwm: Fix double shift bug (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2023-52802: iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
Re: iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe() (Greg KH <gregkh@...uxfoundation.org>)
CVE-2024-36966: erofs: reliably distinguish block based and fscache mode (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36965: remoteproc: mediatek: Make sure IPI buffer fits in L2TCM (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36967: KEYS: trusted: Fix memory leak in tpm2_key_encode() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36968: Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36969: drm/amd/display: Fix division by zero in setup_dsc_config (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36970: wifi: iwlwifi: Use request_module_nowait (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

June 10 (2 messages)

CVE-2024-36971: net: fix __dst_negative_advice() race (Lee Jones <lee@...nel.org>)
CVE-2024-36972: af_unix: Update unix_sk(sk)->oob_skb under sk_receive_queue lock. (Lee Jones <lee@...nel.org>)

June 12 (3 messages)

Re: CVE-2023-52666: ksmbd: fix potential circular locking issue in smb2_set_ea() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2023-52666: ksmbd: fix potential circular locking issue in smb2_set_ea() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2024-26979: drm/vmwgfx: Fix possible null pointer derefence with invalid contexts (Lee Jones <lee@...nel.org>)

June 13 (5 messages)

Re: CVE-2024-36966: erofs: reliably distinguish block based and fscache mode (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
Re: CVE-2024-26831: net/handshake: Fix handshake_req_destroy_test1 (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2021-47543: perf report: Fix memory leaks around perf_tip() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2021-47545: perf hist: Fix memory leak of a perf_hpp_fmt (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
Re: CVE-2021-47543: perf report: Fix memory leaks around perf_tip() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

June 17 (6 messages)

Re: CVE-2024-35840: mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
Re: CVE-2024-35840: mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
Re: CVE-2021-47472: net: mdiobus: Fix memory leak in __mdiobus_register (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2021-47472: net: mdiobus: Fix memory leak in __mdiobus_register (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
Re: CVE-2024-35840: mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36973: misc: microchip: pci1xxxx: fix double free in the error handling of gp_aux_bus_probe() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

June 18 (6 messages)

REJECTED: CVE-2023-52685: pstore: ram_core: fix possible overflow in persistent_ram_init_ecc() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
Re: CVE-2023-52685: pstore: ram_core: fix possible overflow in persistent_ram_init_ecc() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36974: net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36975: KEYS: trusted: Do not use WARN when encode fails (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36976: Revert "media: v4l2-ctrls: show all owned controls in log_status" (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36977: usb: dwc3: Wait unconditionally after issuing EndXfer command (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

June 19 (127 messages)

CVE-2024-36978: net: sched: sch_multiq: fix possible OOB write in multiq_tune() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-38538: net: bridge: xmit: make sure we have at least eth header len bytes (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-38547: media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-38548: drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-38549: drm/mediatek: Add 0 size check to mtk_drm_gem_obj (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-38550: ASoC: kirkwood: Fix potential NULL dereference (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-38551: ASoC: mediatek: Assign dummy when codec not specified for a DAI link (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-38552: drm/amd/display: Fix potential index out of bounds in color transformation function (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-38553: net: fec: remove .ndo_poll_controller to avoid deadlocks (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-38554: ax25: Fix reference count leak issue of net_device (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-38556: net/mlx5: Add a timeout to acquire the command queue semaphore (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-38555: net/mlx5: Discard command completions in internal error (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-38539: RDMA/cma: Fix kmemleak in rdma_core observed during blktests nvme/rdma use siw (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-38557: net/mlx5: Reload only IB representors upon lag disable/enable (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-38558: net: openvswitch: fix overwriting ct original tuple for ICMPv6 (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-38559: scsi: qedf: Ensure the copied buf is NUL terminated (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-38560: scsi: bfa: Ensure the copied buf is NUL terminated (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-38561: kunit: Fix kthread reference (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-38562: wifi: nl80211: Avoid address calculations via out of bounds array indexing (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-38563: wifi: mt76: mt7996: fix potential memory leakage when reading chip temperature (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-38564: bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-38565: wifi: ar5523: enable proper endpoint verification (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-38566: bpf: Fix verifier assumptions about socket->sk (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-38540: bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-38567: wifi: carl9170: add a proper sanity check for endpoints (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-38541: of: module: add buffer overflow check in of_modalias() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-38542: RDMA/mana_ib: boundary check before installing cq callbacks (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-38543: lib/test_hmm.c: handle src_pfns and dst_pfns allocation failure (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-38544: RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-38545: RDMA/hns: Fix UAF for cq async event (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-38546: drm: vc4: Fix possible null pointer dereference (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36979: net: bridge: mst: fix vlan use-after-free (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-38569: drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-38570: gfs2: Fix potential glock use-after-free on unmount (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-38571: thermal/drivers/tsens: Fix null pointer dereference (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-38572: wifi: ath12k: fix out-of-bound access of qmi_invoke_handler() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-38573: cppc_cpufreq: Fix possible null pointer dereference (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-38574: libbpf: Prevent null-pointer dereference when prog to load has no BTF (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-38568: drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-38585: tools/nolibc/stdlib: fix memory error in realloc() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-38576: rcu: Fix buffer overflow in print_cpu_stall_info() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-38586: r8169: Fix possible ring buffer corruption on fragmented Tx packets. (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-38588: ftrace: Fix possible use-after-free issue in ftrace_location() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-38587: speakup: Fix sizeof() vs ARRAY_SIZE() bug (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-38577: rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-38578: ecryptfs: Fix buffer size for tag 66 packet (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-38579: crypto: bcm - Fix pointer arithmetic (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-38580: epoll: be better about file lifetimes (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-38581: drm/amdgpu/mes: fix use-after-free issue (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-38582: nilfs2: fix potential hang in nilfs_detach_log_writer() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-38583: nilfs2: fix use-after-free of timer for log writer thread (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-38584: net: ti: icssg_prueth: Fix NULL pointer dereference in prueth_probe() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-38575: wifi: brcmfmac: pcie: handle randbuf allocation failure (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-38590: RDMA/hns: Modify the print level of CQE error (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-38589: netrom: fix possible dead-lock in nr_rt_ioctl() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-38599: jffs2: prevent xattr node from overflowing the eraseblock (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-38600: ALSA: Fix deadlocks with kctl removals at disconnection (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-38591: RDMA/hns: Fix deadlock on SRQ async events. (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-38592: drm/mediatek: Init `ddp_comp` with devm_kcalloc() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-38593: net: micrel: Fix receiving the timestamp in the frame for lan8841 (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-38594: net: stmmac: move the EST lock to struct stmmac_priv (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-38595: net/mlx5: Fix peer devlink set for SF representor devlink port (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-38596: af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-38597: eth: sungem: remove .ndo_poll_controller to avoid deadlocks (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-38598: md: fix resync softlockup when bitmap size is less than array size (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-38602: ax25: Fix reference count leak issues of ax25_dev (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-38601: ring-buffer: Fix a race between readers and resize checks (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-38603: drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-38605: ALSA: core: Fix NULL module pointer assignment at card init (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-38607: macintosh/via-macii: Fix "BUG: sleeping function called from invalid context" (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-38606: crypto: qat - validate slices count returned by FW (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-38604: block: refine the EOF check in blkdev_iomap_begin (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-38609: wifi: mt76: connac: check for null before dereferencing (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-38618: ALSA: timer: Set lower bound of start tick time (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-38608: net/mlx5e: Fix netif state handling (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-38610: drivers/virt/acrn: fix PFNMAP PTE checks in acrn_vm_ram_map() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-38611: media: i2c: et8ek8: Don't strip remove function when driver is builtin (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-38612: ipv6: sr: fix invalid unregister error path (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-38613: m68k: Fix spinlock race in kernel thread creation (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-38614: openrisc: traps: Don't send signals to kernel mode threads (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-38615: cpufreq: exit() callback is optional (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-38616: wifi: carl9170: re-fix fortified-memset warning (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-38617: kunit/fortify: Fix mismatched kvalloc()/vfree() usage (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47574: xen/netfront: harden netfront against event channel storms (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47573: xen/blkfront: harden blkfront against event channel storms (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47583: media: mxl111sf: change mutex_init() location (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47584: iocost: Fix divide-by-zero on donation from low hweight cgroup (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47585: btrfs: fix memory leak in __add_inode_ref() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47587: net: systemport: Add global locking for descriptor lifecycle (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47586: net: stmmac: dwmac-rk: fix oob read in rk_gmac_setup (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47588: sit: do not call ipip6_dev_free() from sit_init_net() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47589: igbvf: fix double free in `igbvf_probe` (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47590: mptcp: fix deadlock in __mptcp_push_pending() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47591: mptcp: remove tcp ulp setsockopt support (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47592: net: stmmac: fix tc flower deletion for VLAN priority Rx steering (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47575: xen/console: harden hvc_xen against event channel storms (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47593: mptcp: clear 'kern' flag from fallback sockets (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47594: mptcp: never allow the PM to close a listener subflow (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47595: net/sched: sch_ets: don't remove idle classes from the round-robin list (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
28 more messages

June 20 (74 messages)

CVE-2024-38619: usb-storage: alauda: Check whether the media is initialized (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-38620: Bluetooth: HCI: Remove HCI_AMP support (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2021-47574: xen/netfront: harden netfront against event channel storms (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2021-47575: xen/console: harden hvc_xen against event channel storms (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2021-47581: xen/netback: don't queue unlimited number of packages (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2021-47573: xen/blkfront: harden blkfront against event channel storms (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2024-26639: mm, kmsan: fix infinite recursion due to RCU critical section (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47618: ARM: 9170/1: fix panic when kasan and kprobe are enabled (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47617: PCI: pciehp: Fix infinite loop in IRQ handler upon power fault (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47620: Bluetooth: refactor malicious adv data check (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47619: i40e: Fix queues reservation for XDP (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48712: ext4: fix error handling in ext4_fc_record_modified_inode() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48711: tipc: improve size validations for received domain records (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48713: perf/x86/intel/pt: Fix crash with stop filters in single-range mode (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48714: bpf: Use VM_MAP instead of VM_ALLOC for ringbuf (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48715: scsi: bnx2fc: Make bnx2fc_recv_frame() mp safe (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48716: ASoC: codecs: wcd938x: fix incorrect used of portid (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48717: ASoC: max9759: fix underflow in speaker_gain_control_put() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48718: drm: mxsfb: Fix NULL pointer dereference (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48720: net: macsec: Fix offload support for NETDEV_UNREGISTER event (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48729: IB/hfi1: Fix panic with larger ipoib send_queue_size (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48730: dma-buf: heaps: Fix potential spectre v1 gadget (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48731: mm/kmemleak: avoid scanning potential huge holes (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48732: drm/nouveau: fix off by one in BIOS boundary checking (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48733: btrfs: fix use-after-free after failure to create a snapshot (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48734: btrfs: fix deadlock between quota disable and qgroup rescan worker (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48735: ALSA: hda: Fix UAF of leds class devs at unbinding (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48736: ASoC: ops: Reject out of bounds values in snd_soc_put_xr_sx() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48721: net/smc: Forward wakeup to smc socket waitqueue after fallback (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48738: ASoC: ops: Reject out of bounds values in snd_soc_put_volsw() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48739: ASoC: hdmi-codec: Fix OOB memory accesses (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48737: ASoC: ops: Reject out of bounds values in snd_soc_put_volsw_sx() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48741: ovl: fix NULL pointer dereference in copy up warning (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48740: selinux: fix double free of cond_list on error paths (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48742: rtnetlink: make sure to refresh master_dev/m_ops in __rtnl_newlink() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48743: net: amd-xgbe: Fix skb data length underflow (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48744: net/mlx5e: Avoid field-overflowing memcpy() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48745: net/mlx5: Use del_timer_sync in fw reset flow of halting poll (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48746: net/mlx5e: Fix handling of wrong devices during bond netevent (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48747: block: Fix wrong offset in bio_truncate() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48748: net: bridge: vlan: fix memory leak in __allowed_ingress (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48722: net: ieee802154: ca8210: Stop leaking skb's (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48749: drm/msm/dpu: invalid parameter check in dpu_setup_dspp_pcc (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48750: hwmon: (nct6775) Fix crash in clear_caseopen (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48751: net/smc: Transitional solution for clcsock race issue (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48752: powerpc/perf: Fix power_pmu_disable to call clear_pmi_irq_pending only if PMI is pending (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48723: spi: uniphier: fix reference count leak in uniphier_spi_probe() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48724: iommu/vt-d: Fix potential memory leak in intel_setup_irq_remapping() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48725: RDMA/siw: Fix refcounting leak in siw_create_qp() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48727: KVM: arm64: Avoid consuming a stale esr value when SError occur (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48726: RDMA/ucma: Protect mc during concurrent multicast leaves (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48728: IB/hfi1: Fix AIP early init panic (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48719: net, neigh: Do not trigger immediate probes on NUD_FAILED from neigh_managed_work (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48754: phylib: fix potential use-after-free (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48763: KVM: x86: Forcibly leave nested virt when SMM state is toggled (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48764: KVM: x86: Free kvm_cpuid_entry2 array on post-KVM_RUN KVM_SET_CPUID{,2} (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48765: KVM: LAPIC: Also cancel preemption timer during SET_LAPIC (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48766: drm/amd/display: Wrap dcn301_calculate_wm_and_dlg for FPU. (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48767: ceph: properly put ceph_string reference after async create attempt (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48771: drm/vmwgfx: Fix stale file descriptors on failed usercopy (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48768: tracing/histogram: Fix a potential memory leak for kstrdup() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48769: efi: runtime: avoid EFIv2 runtime services on Apple x86 machines (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48770: bpf: Guard against accessing NULL pt_regs in bpf_get_task_stack() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48755: powerpc64/bpf: Limit 'ldbrx' to processors compliant with ISA v2.06 (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48756: drm/msm/dsi: invalid parameter check in msm_dsi_phy_enable (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48757: net: fix information leakage in /proc/net/ptype (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48758: scsi: bnx2fc: Flush destroy_work queue before calling bnx2fc_interface_put() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48759: rpmsg: char: Fix race between the release of rpmsg_ctrldev and cdev (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48760: USB: core: Fix hang in usb_kill_urb by adding memory barriers (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48761: usb: xhci-plat: fix crash when suspend if remote wake enable (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48762: arm64: extable: fix load_unaligned_zeropad() reg indices (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48753: block: fix memory leak in disk_register_independent_access_ranges (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52883: drm/amdgpu: Fix possible null pointer dereference (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-4439: isdn: cpai: check ctr->cnr to avoid array index out of bound (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

June 21 (42 messages)

CVE-2024-31076: genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52884: Input: cyapa - add missing input core locking to suspend/resume functions (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36489: tls: fix missing memory barrier in tls_init (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-37353: virtio: delete vq in vp_find_vqs_msix() when request_irq() fails (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-37356: tcp: Fix shift-out-of-bounds in dctcp_update_alpha(). (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-38381: nfc: nci: Fix uninit-value in nci_rx_work (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-38388: ALSA: hda/cs_dsp_ctl: Use private_free for control cleanup (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-38390: drm/msm/a6xx: Avoid a nullptr dereference when speedbin setting fails (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-38391: cxl/region: Fix cxlr_pmem leaks (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-38621: media: stk1160: fix bounds checking in stk1160_copy_video() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-38622: drm/msm/dpu: Add callback function pointer check before its call (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-38623: fs/ntfs3: Use variable length array instead of fixed size (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-33619: efi: libstub: only free priv.runtime_map when allocated (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-38624: fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-38625: fs/ntfs3: Check 'folio' pointer for NULL (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-38628: usb: gadget: u_audio: Fix race condition use of controls after free during gadget unbind. (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-38626: fuse: clear FR_SENT when re-adding requests into pending list (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-38627: stm class: Fix a double free in stm_register_device() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-38629: dmaengine: idxd: Avoid unnecessary destruction of file_ida (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-38630: watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-38632: vfio/pci: fix potential memory leak in vfio_intx_enable() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-38631: iio: adc: PAC1934: fix accessing out of bounds array index (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-38633: serial: max3100: Update uart_driver_registered on driver removal (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-33621: ipvlan: Dont Use skb->sk in ipvlan_process_v{4,6}_outbound (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36270: netfilter: tproxy: bail out if IP has been disabled on the device (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36244: net/sched: taprio: extend minimum interval restriction to entire cycle too (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36286: netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36281: net/mlx5: Use mlx5_ipsec_rx_status_destroy to correctly delete status rules (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36478: null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues' (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36484: net: relax socket state check at accept time. (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-38635: soundwire: cadence: fix invalid PDI offset (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-38637: greybus: lights: check return of get_channel_from_mode (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-38636: f2fs: multidev: fix to recognize valid zero block address (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-38634: serial: max3100: Lock port->lock when calling uart_handle_cts_change() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-38659: enic: Validate length of nl attributes in enic_set_vf_port (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-38780: dma-buf/sw-sync: don't enable IRQ from sync_print_obj() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-38662: bpf: Allow delete from sockmap/sockhash only if update is allowed (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-39277: dma-mapping: benchmark: handle NUMA_NO_NODE correctly (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36288: SUNRPC: Fix loop termination condition in gss_free_in_token_pages() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-34777: dma-mapping: benchmark: fix node id validation (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36481: tracing/probes: fix error check in parse_btf_field() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36477: tpm_tis_spi: Account for SPI header when allocating TPM SPI xfer buffer (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

June 24 (14 messages)

CVE-2024-38663: blk-cgroup: fix list corruption from resetting io stat (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-38664: drm: zynqmp_dpsub: Always register bridge (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-38384: blk-cgroup: fix list corruption from reorder of WRITE ->lqueued (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-39291: drm/amdgpu: Fix buffer size in gfx_v9_4_3_init_ cp_compute_microcode() and rlc_microcode() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-38667: riscv: prevent pt_regs corruption for secondary idle threads (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-39292: um: Add winch to winch_handlers before registering winch IRQ (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-33847: f2fs: compress: don't allow unaligned truncation on released compress inode (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-34027: f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-32936: media: ti: j721e-csi2rx: Fix races while restarting DMA (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35247: fpga: region: add owner module and take its refcount (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-34030: PCI: of_property: Return error for int_map allocation failure (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-37021: fpga: manager: add owner module and take its refcount (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-37026: drm/xe: Only use reserved BCS instances for usm migrate exec queue (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36479: fpga: bridge: add owner module and take its refcount (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

June 25 (25 messages)

CVE-2021-4440: x86/xen: Drop USERGS_SYSRET64 paravirt call (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-37078: nilfs2: fix potential kernel bug due to lack of writeback flag waiting (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48772: media: lgdt3306a: Add a check against null-pointer-def (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-39301: net/9p: fix uninit-value in p9_client_rpc() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-39362: i2c: acpi: Unbind mux adapters before delete (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-39371: io_uring: check for non-NULL file pointer in io_file_can_poll() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-37354: btrfs: fix crash on racing fsync and size-extending write into prealloc (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-38306: btrfs: protect folio::private when attaching extent buffer folios (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-38385: genirq/irqdesc: Prevent use-after-free in irq_find_at_or_after() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-38661: s390/ap: Fix crash in AP internal function modify_bitmap() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-39276: ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-39293: Revert "xsk: Support redirect to any socket bound to the same umem" (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-39296: bonding: fix oops during rmmod (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-39298: mm/memory-failure: fix handling of dissolved but not taken off from buddy pages (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-39462: clk: bcm: dvp: Assign ->num before accessing ->hws (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-39463: 9p: add missing locking around taking dentry fid list (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-39461: clk: bcm: rpi: Assign ->num before accessing ->hws (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-39464: media: v4l: async: Fix notifier list entry init (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-39466: thermal/drivers/qcom/lmh: Check for SCM availability at probe (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-39465: media: mgb4: Fix double debugfs remove (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-39467: f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-39469: nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-39468: smb: client: fix deadlock in smb2_find_smb_tcon() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-39471: drm/amdgpu: add error handle to avoid out-of-bounds (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-39470: eventfs: Fix a possible null pointer dereference in eventfs_find_events() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

323 messages

Powered by blists - more mailing lists