linux-cve-announce mailing list - 2024/07

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

linux-cve-announce mailing list - 2024/07

Mon	Tue	Wed	Thu	Fri	Sat	Sun
¹	² 4	³	⁴	⁵ 16	⁶ 1	⁷
⁸	⁹ 1	¹⁰ 6	¹¹	¹² 125	¹³	¹⁴ 1
¹⁵ 3	¹⁶ 99	¹⁷ 2	¹⁸ 1	¹⁹	²⁰	²¹
²²	²³ 1	²⁴	²⁵	²⁶ 1	²⁷ 1	²⁸
²⁹ 125	³⁰ 77	³¹ 1

Messages by day:

July 2 (4 messages)

REJECTED: CVE-2024-39362: i2c: acpi: Unbind mux adapters before delete (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2024-38391: cxl/region: Fix cxlr_pmem leaks (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2021-47285: net/nfc/rawsock.c: fix a permission check bug (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
Re: CVE-2021-47285: net/nfc/rawsock.c: fix a permission check bug (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

July 5 (16 messages)

CVE-2024-39472: xfs: fix log recovery buffer allocation for the legacy h_size fixup (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2022-48736: ASoC: ops: Reject out of bounds values in snd_soc_put_xr_sx() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2022-48737: ASoC: ops: Reject out of bounds values in snd_soc_put_volsw_sx() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-39474: mm/vmalloc: fix vmalloc which may return null if called with __GFP_NOFAIL (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-39473: ASoC: SOF: ipc4-topology: Fix input format query of process modules without base extension (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-39475: fbdev: savage: Handle err return when savagefb_check_var failed (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-39477: mm/hugetlb: do not call vma_add_reservation upon ENOMEM (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-39478: crypto: starfive - Do not free stack buffer (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-39479: drm/i915/hwmon: Get rid of devm (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-39480: kdb: Fix buffer overflow during tab-complete (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-39481: media: mc: Fix graph walk in media_pipeline_start (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-39482: bcache: fix variable length array abuse in btree_iter (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-39484: mmc: davinci: Don't strip remove function when driver is builtin (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-39483: KVM: SVM: WARN on vNMI + NMI window iff NMIs are outright masked (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-39485: media: v4l: async: Properly re-initialise notifier entry in unregister (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-39476: md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

July 6 (1 message)

CVE-2024-39486: drm/drm_file: Fix pid refcounting race (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

July 9 (1 message)

CVE-2024-39487: bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

July 10 (6 messages)

CVE-2024-39488: arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-39489: ipv6: sr: fix memleak in seg6_hmac_init_algo (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-39490: ipv6: sr: fix missing sk_buff release in seg6_input_core (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-39491: ALSA: hda: cs35l56: Fix lifetime of cs_dsp instance (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-39492: mailbox: mtk-cmdq: Fix pm_runtime_get_sync() warning in mbox shutdown (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-39493: crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

July 12 (125 messages)

CVE-2024-39495: greybus: Fix use-after-free bug in gb_interface_release due to race condition. (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-39494: ima: Fix use-after-free on a dentry's dname.name (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-39504: netfilter: nft_inner: validate mandatory meta and payload (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-39505: drm/komeda: check for error-valued pointer (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-39506: liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-39507: net: hns3: fix kernel crash problem in concurrent scenario (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-39508: io_uring/io-wq: Use set_bit() and test_bit() at worker->flags (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-39509: HID: core: remove unnecessary WARN_ON() in implement() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-39510: cachefiles: fix slab-use-after-free in cachefiles_ondemand_daemon_read() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-40899: cachefiles: fix slab-use-after-free in cachefiles_ondemand_get_fd() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-40900: cachefiles: remove requests from xarray during flushing requests (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-40901: scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-39496: btrfs: zoned: fix use-after-free due to race with dev replace (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-40902: jfs: xattr: fix buffer overflow for invalid xattr (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-40903: usb: typec: tcpm: fix use-after-free case in tcpm_register_source_caps (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-40904: USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-40905: ipv6: fix possible race in __fib6_drop_pcpu_from() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-40906: net/mlx5: Always stop health timer during driver removal (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-40907: ionic: fix kernel panic in XDP_TX action (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-40908: bpf: Set run context for rawtp test_run callback (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-40909: bpf: Fix a potential use-after-free in bpf_link_free() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-40910: ax25: Fix refcount imbalance on inbound connections (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-40911: wifi: cfg80211: Lock wiphy in cfg80211_get_station (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-39497: drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE) (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-39499: vmci: prevent speculation leaks by sanitizing event in event_deliver() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-39498: drm/mst: Fix NULL pointer dereference at drm_dp_add_payload_part2 (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-39500: sock_map: avoid race between sock_map_close and sk_psock_put (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-39501: drivers: core: synchronize really_probe() and dev_uevent() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-39502: ionic: fix use after netif_napi_del() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-39503: netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-40912: wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-40923: vmxnet3: disable rx data ring on dma allocation failure (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-40914: mm/huge_memory: don't unpoison huge_zero_folio (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-40913: cachefiles: defer exposing anon_fd until after copy_to_user() succeeds (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-40925: block: fix request.queuelist usage in flush (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-40924: drm/i915/dpt: Make DPT object unshrinkable (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-40926: drm/nouveau: don't attempt to schedule hpd_work on headless cards (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-40927: xhci: Handle TD clearing for multiple streams case (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-40928: net: ethtool: fix the error condition in ethtool_get_phy_stats_ethtool() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-40915: riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-40916: drm/exynos: hdmi: report safe 640x480 mode as a fallback when no EDID found (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-40917: memblock: make memblock_set_node() also warn about use of MAX_NUMNODES (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-40918: parisc: Try to fix random segmentation faults in package builds (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-40919: bnxt_en: Adjust logging of firmware messages in case of released token in __hwrm_send() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-40920: net: bridge: mst: fix suspicious rcu usage in br_mst_set_state (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-40921: net: bridge: mst: pass vlan group directly to br_mst_vlan_set_state (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-40922: io_uring/rsrc: don't lock while !TASK_RUNNING (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-40930: wifi: cfg80211: validate HE operation element parsing (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-40939: net: wwan: iosm: Fix tainted pointer delete is case of region creation fail (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-40940: net/mlx5: Fix tainted pointer delete is case of flow rules creation fail (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-40941: wifi: iwlwifi: mvm: don't read past the mfuart notifcation (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-40942: wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-40943: ocfs2: fix races between hole punching and AIO+DIO (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-40944: x86/kexec: Fix bug with call depth tracking (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-40945: iommu: Return right value in iommu_sva_bind_device() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-40931: mptcp: ensure snd_una is properly initialized on connect (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-40932: drm/exynos/vidi: fix memory leak in .get_modes() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-40933: iio: temperature: mlx90635: Fix ERR_PTR dereference in mlx90635_probe() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-40934: HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-40935: cachefiles: flush all requests after setting CACHEFILES_DEAD (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-40936: cxl/region: Fix memregion leaks in devm_cxl_add_region() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-40937: gve: Clear napi->skb before dev_kfree_skb_any() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-40938: landlock: Fix d_parent walk (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-40929: wifi: iwlwifi: mvm: check n_ssids before accessing the ssids (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-40947: ima: Avoid blocking in RCU read-side critical section (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-40946: hid: asus: asus_report_fixup: fix potential read out of bounds (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-40956: dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-40957: seg6: fix parameter passing when calling NF_HOOK() in End.DX4 and End.DX6 behaviors (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-40958: netns: Make get_net_ns() handle zero refcount net (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-40959: xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-40960: ipv6: prevent possible NULL dereference in rt6_probe() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-40961: ipv6: prevent possible NULL deref in fib6_nh_init() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-40962: btrfs: zoned: allocate dummy checksums for zoned NODATASUM writes (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-40963: mips: bmips: BCM6358: make sure CBR is correctly set (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-40964: ALSA: hda: cs35l41: Possible null pointer dereference in cs35l41_hda_unbind() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-40965: i2c: lpi2c: Avoid calling clk_get_rate during transfer (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-40948: mm/page_table_check: fix crash on ZONE_DEVICE (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-40966: tty: add the option to have a tty reject a new ldisc (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-40967: serial: imx: Introduce timeout when waiting on transmitter empty (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-40968: MIPS: Octeon: Add PCIe link status check (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-40951: ocfs2: fix NULL pointer dereference in ocfs2_abort_trigger() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-40969: f2fs: don't set RO when shutting down f2fs (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-40949: mm: shmem: fix getting incorrect lruvec when replacing a shmem folio (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-40950: mm: huge_memory: fix misused mapping_large_folio_support() for anon folios (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-40952: ocfs2: fix NULL pointer dereference in ocfs2_journal_dirty() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-40953: KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-40954: net: do not leave a dangling sk pointer, when socket creation fails (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-40955: ext4: fix slab-out-of-bounds in ext4_mb_find_good_group_avg_frag_lists() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-40971: f2fs: remove clear SB_INLINECRYPT flag in default_options (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-40980: drop_monitor: replace spin_lock by raw_spin_lock (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-40981: batman-adv: bypass empty buckets in batadv_purge_orig_ref() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-40982: ssb: Fix potential NULL pointer dereference in ssb_device_uevent() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-40972: ext4: do not create EA inode under buffer lock (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-40973: media: mtk-vcodec: potential null pointer deference in SCP (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-40974: powerpc/pseries: Enforce hcall result buffer validity and size (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-40975: platform/x86: x86-android-tablets: Unregister devices in reverse order (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-40976: drm/lima: mask irqs in timeout path before hard reset (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-40977: wifi: mt76: mt7921s: fix potential hung tasks during chip recovery (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-40983: tipc: force a dst refcount before doing decryption (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
26 more messages

July 14 (1 message)

CVE-2023-52885: SUNRPC: Fix UAF in svc_tcp_listen_data_ready() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

July 15 (3 messages)

REJECTED: CVE-2024-40946: hid: asus: asus_report_fixup: fix potential read out of bounds (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-41007: tcp: avoid too many retransmit packets (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
Re: CVE-2024-40938: landlock: Fix d_parent walk (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

July 16 (99 messages)

CVE-2024-41008: drm/amdgpu: change vm->task_info handling (Lee Jones <lee@...nel.org>)
CVE-2023-52886: USB: core: Fix race by not overwriting udev->descriptor in hub_port_init() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48774: dmaengine: ptdma: Fix the error handling path in pt_core_init() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48773: xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48783: net: dsa: lantiq_gswip: fix use after free in gswip_remove() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48784: cfg80211: fix race in netlink owner interface destruction (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48785: ipv6: mcast: use rcu-safe version of ipv6_get_lladdr() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48775: Drivers: hv: vmbus: Fix memory leak in vmbus_add_channel_kobj (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48776: mtd: parsers: qcom: Fix missing free for pparts in cleanup (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48777: mtd: parsers: qcom: Fix kernel panic on skipped partition (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48778: mtd: rawnand: gpmi: don't leak PM reference in error path (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48779: net: mscc: ocelot: fix use-after-free in ocelot_vlan_del() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48781: crypto: af_alg - get rid of alg_memory_allocated (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48782: mctp: fix use after free (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48780: net/smc: Avoid overwriting the copies of clcsock callback functions (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47623: powerpc/fixmap: Fix VM debug warning on unmap (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47622: scsi: ufs: Fix a deadlock in the error handler (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47624: net/sunrpc: fix reference count leaks in rpc_sysfs_xprt_state_change (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48787: iwlwifi: fix use-after-free (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48786: vsock: remove vsock from connected table when connect is interrupted by a signal (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48788: nvme-rdma: fix possible use-after-free in transport error_recovery work (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48789: nvme-tcp: fix possible use-after-free in transport error_recovery work (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48790: nvme: fix a possible use-after-free in controller reset during load (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48791: scsi: pm8001: Fix use-after-free for aborted TMF sas_task (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48793: KVM: x86: nSVM: fix potential NULL derefernce on nested migration (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48802: fs/proc: task_mmu.c: don't read mapcount for migration entry (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48803: phy: ti: Fix missing sentinel for clk_div_table (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48804: vt_ioctl: fix array_index_nospec in vt_setactivate (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48805: net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48806: eeprom: ee1004: limit i2c reads to I2C_SMBUS_BLOCK_MAX (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48807: ice: Fix KASAN error in LAG NETDEV_UNREGISTER handler (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48808: net: dsa: fix panic when DSA master device unbinds on shutdown (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48809: net: fix a memleak when uncloning an skb dst and its metadata (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48810: ipmr,ip6mr: acquire RTNL before calling ip[6]mr_free_table() on failure path (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48811: ibmvnic: don't release napi in __ibmvnic_open() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48794: net: ieee802154: at86rf230: Stop leaking skb's (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48812: net: dsa: lantiq_gswip: don't use devres for mdiobus (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48813: net: dsa: felix: don't use devres for mdiobus (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48814: net: dsa: seville: register the mdiobus under devres (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48815: net: dsa: bcm_sf2: don't use devres for mdiobus (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48816: SUNRPC: lock against ->sock changing during sysfs read (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48817: net: dsa: ar9331: register the mdiobus under devres (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48818: net: dsa: mv88e6xxx: don't use devres for mdiobus (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48819: tcp: take care of mixed splice()/sendmsg(MSG_ZEROCOPY) case (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48820: phy: stm32: fix a refcount leak in stm32_usbphyc_pll_enable() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48821: misc: fastrpc: avoid double fput() on failed usercopy (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48795: parisc: Fix data TLB miss in sba_unmap_sg (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48822: usb: f_fs: Fix use-after-free for epfile (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48823: scsi: qedf: Fix refcount issue when LOGO is received during TMF (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48824: scsi: myrs: Fix crash in error case (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48796: iommu: Fix potential use-after-free during probe (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48797: mm: don't try to NUMA-migrate COW pages that have other uses (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48798: s390/cio: verify the driver availability for path_event call (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48799: perf: Fix list corruption in perf_cgroup_switch() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48800: mm: vmscan: remove deadlock due to throttling failing to make progress (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48801: iio: buffer: Fix file related error handling in IIO_BUFFER_GET_FD_IOCTL (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48792: scsi: pm8001: Fix use-after-free for aborted SSP/STP sas_task (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48827: NFSD: Fix the behavior of READ near OFFSET_MAX (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48828: NFSD: Fix ia_size underflow (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48826: drm/vc4: Fix deadlock on DSI device attach error (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48829: NFSD: Fix NFSv3 SETATTR/CREATE's handling of large file sizes (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48830: can: isotp: fix potential CAN frame reception race in isotp_rcv() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48831: ima: fix reference leak in asymmetric_verify() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48832: audit: don't deref the syscall args when checking the openat2 open_how::flags (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48825: scsi: qedf: Add stag_work to all the vports (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48834: usb: usbtmc: Fix bug in pipe direction for control transfers (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48833: btrfs: skip reserved bytes warning on unmount after log cleanup failure (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48843: drm/vrr: Set VRR capable prop only if it is attached to connector (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48844: Bluetooth: hci_core: Fix leaking sent_cmd skb (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48845: MIPS: smp: fill in sibling and core maps earlier (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48847: watch_queue: Fix filter limit check (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48848: tracing/osnoise: Do not unregister events twice (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48846: block: release rq qos structures for queue without disk (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48849: drm/amdgpu: bypass tiling flag check in virtual display case (v2) (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48850: net-sysfs: add check for netdevice being present to speed_show (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48851: staging: gdm724x: fix use after free in gdm_lte_rx() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48852: drm/vc4: hdmi: Unregister codec device on unbind (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48835: scsi: mpt3sas: Page fault in reply q processing (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48853: swiotlb: fix info leak with DMA_FROM_DEVICE (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48854: net: arc_emac: Fix use after free in arc_mdio_probe() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48856: gianfar: ethtool: Fix refcount leak in gfar_get_ts_info (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48855: sctp: fix kernel-infoleak for SCTP sockets (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48857: NFC: port100: fix use-after-free in port100_send_complete (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48858: net/mlx5: Fix a race on command flush flow (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48859: net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48860: ethernet: Fix error handling in xemaclite_of_probe (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48861: vdpa: fix use-after-free on vp_vdpa_remove (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48864: vdpa/mlx5: add validation for VIRTIO_NET_CTRL_MQ_VQ_PAIRS_SET command (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48862: vhost: fix hung thread due to erroneous iotlb entries (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48836: Input: aiptek - properly check endpoint type (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48863: mISDN: Fix memory leak in dsp_pipeline_build() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48837: usb: gadget: rndis: prevent integer overflow in rndis_set_response() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48838: usb: gadget: Fix use-after-free bug by not setting udc->dev.driver (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48839: net/packet: fix slab-out-of-bounds access in packet_recvmsg() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48840: iavf: Fix hang during reboot/shutdown (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48841: ice: fix NULL pointer dereference in ice_update_vsi_tx_ring_stats() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48842: ice: Fix race condition during interface enslave (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48866: HID: hid-thrustmaster: fix OOB read in thrustmaster_interrupts (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48865: tipc: fix kernel panic when enabling bearer (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

July 17 (2 messages)

CVE-2024-41010: bpf: Fix too early release of tcx_entry (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-41009: bpf: Fix overrunning reservations in ringbuf (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

July 18 (1 message)

CVE-2024-41011: drm/amdkfd: don't allow mapping the MMIO HDP page with large pages (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

July 23 (1 message)

CVE-2024-41012: filelock: Remove locks reliably when fcntl/close race is detected (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

July 26 (1 message)

Re: CVE-2024-35918: randomize_kstack: Improve entropy diffusion (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

July 27 (1 message)

Re: CVE-2024-35918: randomize_kstack: Improve entropy diffusion (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

July 29 (125 messages)

CVE-2024-41091: tun: add missing verification for short frame (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-41090: tap: add missing verification for short frame (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-41014: xfs: add bounds checking to xlog_recover_process_data (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-41013: xfs: don't walk off the end of a directory data block (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-41015: ocfs2: add bounds checking to ocfs2_check_dir_entry() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-41016: ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-41017: jfs: don't walk off the end of ealist (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-41018: fs/ntfs3: Add a check for attr_names and oatbl (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-41019: fs/ntfs3: Validate ff offset (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
Re: CVE-2024-26905: btrfs: fix data races when accessing the reserved amount of block reserves (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2024-26905: btrfs: fix data races when accessing the reserved amount of block reserves (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-41021: s390/mm: Fix VM_FAULT_HWPOISON handling in do_exception() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-41020: filelock: Fix fcntl/close race recovery compat path (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-41022: drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-41024: misc: fastrpc: Restrict untrusted app to attach to privileged PD (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-41023: sched/deadline: Fix task_struct reference leak (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-41033: cachestat: do not flush stats in recency check (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-41034: nilfs2: fix kernel bug on rename operation of broken directory (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-41035: USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-41036: net: ks8851: Fix deadlock with the SPI chip variant (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-41037: ASoC: SOF: Intel: hda: fix null deref on system suspend entry (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-41039: firmware: cs_dsp: Fix overflow checking of wmfw header (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-41040: net/sched: Fix UAF when resolving a clash (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-41042: netfilter: nf_tables: prefer nft_chain_validate (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-41038: firmware: cs_dsp: Prevent buffer overrun when processing V2 alg headers (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-41025: misc: fastrpc: Fix memory leak in audio daemon attach operation (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-41044: ppp: reject claimed-as-LCP but actually malformed packets (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-41043: netfilter: nfnetlink_queue: drop bogus WARN_ON (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-41041: udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port(). (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-41048: skmsg: Skip zero length skb in sk_msg_recvmsg (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-41045: bpf: Defer work in bpf_timer_cancel_and_free (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-41050: cachefiles: cyclic allocation of msg_id to avoid reuse (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-41049: filelock: fix potential use-after-free in posix_lock_inode (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-41046: net: ethernet: lantiq_etop: fix double free in detach (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-41047: i40e: Fix XDP program unloading while removing the driver (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-41052: vfio/pci: Init the count variable in collecting hot-reset devices (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-41053: scsi: ufs: core: Fix ufshcd_abort_one racing issue (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-41026: mmc: davinci_mmc: Prevent transmitted data size from exceeding sgm's length (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-41028: platform/x86: toshiba_acpi: Fix array out-of-bounds access (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-41051: cachefiles: wait for ondemand_object_worker to finish when dropping object (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-41029: nvmem: core: limit cell sysfs permissions to main attribute ones (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-41031: mm/filemap: skip to create PMD-sized page cache if needed (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-41032: mm: vmalloc: check if a hash-index is in cpu_possible_mask (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-41027: Fix userfaultfd_api to return EINVAL as expected (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-41030: ksmbd: discard write access to the directory open (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-41054: scsi: ufs: core: Fix ufshcd_clear_cmd racing issue (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-41055: mm: prevent derefencing NULL ptr in pfn_section_valid() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-41056: firmware: cs_dsp: Use strnlen() on name fields in V1 wmfw files (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-41058: cachefiles: fix slab-use-after-free in fscache_withdraw_volume() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-41057: cachefiles: fix slab-use-after-free in cachefiles_withdraw_cookie() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-41059: hfsplus: fix uninit-value in copy_name (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-41060: drm/radeon: check bo_va->bo is non-NULL before using it (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-41061: drm/amd/display: Fix array-index-out-of-bounds in dml2/FCLKChangeSupport (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-41062: bluetooth/l2cap: sync sock recv cb and release (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-41063: Bluetooth: hci_core: cancel all works upon hci_unregister_dev() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-41064: powerpc/eeh: avoid possible crash when edev->pdev changes (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-41065: powerpc/pseries: Whitelist dtl slub object for copying to userspace (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-41066: ibmvnic: Add tx check to prevent skb leak (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-41068: s390/sclp: Fix sclp_init() cleanup on failure (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-41069: ASoC: topology: Fix references to freed memory (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-41077: null_blk: fix validation of block size (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-41070: KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-41072: wifi: cfg80211: wext: add extra SIOCSIWSCAN data check (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-41074: cachefiles: Set object to close if ondemand_id < 0 in copen (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-41071: wifi: mac80211: Avoid address calculations via out of bounds array indexing (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-41073: nvme: avoid double free special payload (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-41075: cachefiles: add consistency check for copen/cread (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-41076: NFSv4: Fix memory leak in nfs4_set_security_label (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-41067: btrfs: scrub: handle RST lookup error correctly (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-41079: nvmet: always initialize cqe.result (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-41078: btrfs: qgroup: fix quota root leak after quota disable failure (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-41080: io_uring: fix possible deadlock in io_register_iowq_max_workers() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-41081: ila: block BH in ila_output() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-41082: nvme-fabrics: use reserved tag for reg read/write command (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-41084: cxl/region: Avoid null pointer dereference in region lookup (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-41083: netfs: Fix netfs_page_mkwrite() to check folio->mapping is valid (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-41096: PCI/MSI: Fix UAF in msi_capability_init (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-41095: drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-41097: usb: atm: cxacru: fix endpoint checking in cxacru_bind() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-41098: ata: libata-core: Fix null pointer dereference on error (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-41085: cxl/mem: Fix no cxl_nvd during pmem region auto-assembling (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-41086: bcachefs: Fix sb_field_downgrade validation (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-41087: ata: libata-core: Fix double free on error (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-41088: can: mcp251xfd: fix infinite loop when xmit fails (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-41089: drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-41093: drm/amdgpu: avoid using null object of framebuffer (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-41094: drm/fbdev-dma: Only set smem_start is enable per module option (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-41092: drm/i915/gt: Fix potential UAF by revoke of fence registers (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42063: bpf: Mark bpf prog stack with kmsan_unposion_memory in interpreter mode (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52887: net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new (Greg Kroah-Hartman <gregkh@...uxfoundation…)
CVE-2024-42072: bpf: Fix may_goto with negative offset. (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42074: ASoC: amd: acp: add a null check for chip_pdev structure (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42075: bpf: Fix remap of arena. (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42076: net: can: j1939: Initialize unused data in j1939_send_one() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42073: mlxsw: spectrum_buffers: Fix memory corruptions on Spectrum-4 systems (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42079: gfs2: Fix NULL pointer dereference in gfs2_log_flush (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42080: RDMA/restrack: Fix potential invalid address access (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42077: ocfs2: fix DIO failure due to insufficient transaction credits (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42078: nfsd: initialise nfsd_info.mutex early. (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
26 more messages

July 30 (77 messages)

Re: CVE-2024-41067: btrfs: scrub: handle RST lookup error correctly (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2024-35918: randomize_kstack: Improve entropy diffusion (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
Re: CVE-2024-35918: randomize_kstack: Improve entropy diffusion (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42099: s390/dasd: Fix invalid dereferencing of indirect CCW data pointer (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42108: net: rswitch: Avoid use-after-free in rswitch_poll() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42109: netfilter: nf_tables: unconditionally flush pending work before notifier (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42100: clk: sunxi-ng: common: Don't call hw_to_ccu_common on hw without common (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42101: drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42102: Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again" (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42103: btrfs: fix adding block group to a reclaim list and the unused list during reclaim (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42104: nilfs2: add missing check for inode numbers on directory entries (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42105: nilfs2: fix inode number range checks (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42106: inet_diag: Initialize pad field in struct inet_diag_req_v2 (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42107: ice: Don't process extts if PTP is disabled (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52888: media: mediatek: vcodec: Only free buffer VA that is not NULL (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42111: btrfs: always do the basic checks for btrfs_qgroup_inherit structure (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42120: drm/amd/display: Check pipe offset before setting vblank (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42121: drm/amd/display: Check index msg_id before read or write (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42122: drm/amd/display: Add NULL pointer check for kzalloc (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42123: drm/amdgpu: fix double free err_addr pointer warnings (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42124: scsi: qedf: Make qedf_execute_tmf() non-preemptible (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42128: leds: an30259a: Use devm_mutex_init() for mutex initialization (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42125: wifi: rtw89: fw: scan offload prohibit all 6 GHz channel if no 6 GHz sband (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42126: powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt. (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42127: drm/lima: fix shared irq handling on driver remove (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42129: leds: mlxreg: Use devm_mutex_init() for mutex initialization (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42112: net: txgbe: free isb resources at the right time (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42130: nfc/nci: Add the inconsistency check between the input data length and count (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42131: mm: avoid overflows in dirty throttling logic (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42132: bluetooth/hci: disallow setting handle bigger than HCI_CONN_HANDLE_MAX (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42133: Bluetooth: Ignore too large handle values in BIG (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42134: virtio-pci: Check if is_avq is NULL (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42136: cdrom: rearrange last_media_change check to avoid unintentional overflow (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42135: vhost_task: Handle SIGKILL by flushing work and exiting (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42137: Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42138: mlxsw: core_linecards: Fix double memory deallocation in case of invalid INI file (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42141: Bluetooth: ISO: Check socket flag instead of hcon (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42139: ice: Fix improper extts handling (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42113: net: txgbe: initialize num_q_vectors for MSI/INTx interrupts (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42140: riscv: kexec: Avoid deadlock in kexec crash path (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42142: net/mlx5: E-switch, Create ingress ACL when needed (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42143: orangefs: fix out-of-bounds fsid access (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42144: thermal/drivers/mediatek/lvts_thermal: Check NULL ptr on lvts_data (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42114: wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42115: jffs2: Fix potential illegal address access in jffs2_free_inode (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42116: igc: fix a log entry using uninitialized netdev (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42117: drm/amd/display: ASSERT when failing to find index by plane/stream id (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42118: drm/amd/display: Do not return negative stream id for array (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42119: drm/amd/display: Skip finding free audio for unknown engine_id (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42110: net: ntb_netdev: Move ntb_netdev_rx_handler() to call netif_rx() from __netif_rx() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42146: drm/xe: Add outer runtime_pm protection to xe_live_ktest@...dma_buf (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42155: s390/pkey: Wipe copies of protected- and secure-keys (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42156: s390/pkey: Wipe copies of clear-key structures on failure (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42157: s390/pkey: Wipe sensitive data on failure (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42158: s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42160: f2fs: check validation of fault attrs in f2fs_build_fault_attr() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42159: scsi: mpi3mr: Sanitise num_phys (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42161: bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42162: gve: Account for stopped queues when reading NIC stats (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42223: media: dvb-frontends: tda10048: Fix integer overflow (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42224: net: dsa: mv88e6xxx: Correct check for empty list (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42147: crypto: hisilicon/debugfs - Fix debugfs uninit process issue (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42225: wifi: mt76: replace skb_put with skb_put_zero (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42226: usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42227: drm/amd/display: Fix overlapping copy within dml_core_mode_programming (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42229: crypto: aead,cipher - zeroize key buffer after use (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42230: powerpc/pseries: Fix scv instruction crash with kexec (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42148: bnx2x: Fix multiple UBSAN array-index-out-of-bounds (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42231: btrfs: zoned: fix calc_available_free_space() for zoned mode (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42149: fs: don't misleadingly warn during thaw operations (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42228: drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42150: net: txgbe: remove separate irq request for MSI and INTx (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42151: bpf: mark bpf_dummy_struct_ops.test_1 parameter as nullable (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42152: nvmet: fix a possible leak when destroy a ctrl during qp establishment (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42153: i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42154: tcp_metrics: validate source addr length (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42145: IB/core: Implement a limit on UMAD receive List (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

July 31 (1 message)

Re: CVE-2024-41067: btrfs: scrub: handle RST lookup error correctly (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

465 messages

Powered by blists - more mailing lists