linux-cve-announce mailing list - 2024/08

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

linux-cve-announce mailing list - 2024/08

Mon	Tue	Wed	Thu	Fri	Sat	Sun
			¹	²	³	⁴
⁵	⁶ 2	⁷ 19	⁸ 7	⁹	¹⁰	¹¹ 2
¹² 1	¹³	¹⁴ 1	¹⁵	¹⁶	¹⁷ 110	¹⁸
¹⁹	²⁰ 8	²¹ 71	²² 48	²³ 1	²⁴	²⁵ 1
²⁶ 44	²⁷	²⁸ 1	²⁹ 1	³⁰ 4	³¹ 2

Messages by day:

August 6 (2 messages)

Re: CVE-2024-41008: May I get more infomation about this issue (Greg KH <gregkh@...uxfoundation.org>)
Re: CVE-2021-47188: scsi: ufs: core: Improve SCSI abort handling (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

August 7 (19 messages)

CVE-2024-42233: filemap: replace pte_offset_map() with pte_offset_map_nolock() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42242: mmc: sdhci: Fix max_seg_size for 64KiB PAGE_SIZE (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42236: usb: gadget: configfs: Prevent OOB read/write in usb_string_copy() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42235: s390/mm: Add NULL pointer check to crst_table_free() base_crst_free() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42238: firmware: cs_dsp: Return error if block header overflows file (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42240: x86/bhi: Avoid warning in #DB handler due to BHI mitigation (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42241: mm/shmem: disable PMD-sized page cache if needed (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42245: Revert "sched/fair: Make sure to try to detach at least one movable task" (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42247: wireguard: allowedips: avoid unaligned 64-bit memory accesses (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42248: tty: serial: ma35d1: Add a NULL check for of_node (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42249: spi: don't unoptimize message in spi_async() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42250: cachefiles: add missing lock protection when polling (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42243: mm/filemap: make MAX_PAGECACHE_ORDER acceptable to xarray (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42232: libceph: fix race between delayed_work() and ceph_monc_stop() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42234: mm: fix crashes from deferred split racing folio migration (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42237: firmware: cs_dsp: Validate payload length before processing block (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42239: bpf: Fail bpf_timer_cancel when callback is being cancelled (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42246: net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42244: USB: serial: mos7840: fix crash on resume (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

August 8 (7 messages)

CVE-2024-42252: closures: Change BUG_ON() to WARN_ON() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42251: mm: page_ref: remove folio_try_get_rcu() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42253: gpio: pca953x: fix pca953x_irq_bus_sync_unlock race (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42255: tpm: Use auth only after NULL check in tpm_buf_check_hmac_response() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42254: io_uring: fix error pbuf checking (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42256: cifs: Fix server re-repick on subrequest retry (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42257: ext4: use memtostr_pad() for s_volume_name (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

August 11 (2 messages)

REJECTED: CVE-2024-42226: usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB (Greg Kroah-Hartman <gregkh@...uxfoundation.…)
Re: CVE-2024-42226: usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB (Greg KH <gregkh@...uxfoundation.org>)

August 12 (1 message)

CVE-2024-42258: mm: huge_memory: use !CONFIG_64BIT to relax huge page alignment on 32 bit machines (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

August 14 (1 message)

CVE-2024-42259: drm/i915/gem: Fix Virtual Memory mapping boundaries calculation (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

August 17 (110 messages)

CVE-2024-42261: drm/v3d: Validate passed in drm syncobj handles in the timestamp extension (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42260: drm/v3d: Validate passed in drm syncobj handles in the performance extension (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42262: drm/v3d: Fix potential memory leak in the performance extension (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42263: drm/v3d: Fix potential memory leak in the timestamp extension (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42264: drm/v3d: Prevent out of bounds access in performance query extensions (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42265: protect the fetch of ->fd[fd] in do_dup2() from mispredictions (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42267: riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42268: net/mlx5: Fix missing lock on sync reset reload (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42269: netfilter: iptables: Fix potential null-ptr-deref in ip6table_nat_table_init(). (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42270: netfilter: iptables: Fix null-ptr-deref in iptable_nat_table_init(). (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42274: Revert "ALSA: firewire-lib: operate for period elapse event in process context" (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42271: net/iucv: fix use after free in iucv_sock_close() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42272: sched: act_ct: take care of padding in struct zones_ht_key (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42273: f2fs: assign CURSEG_ALL_DATA_ATGC if blkaddr is valid (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42275: drm/client: Fix error code in drm_client_buffer_vmap_local() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42266: btrfs: make cow_file_range_inline() honor locked_page on error (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42276: nvme-pci: add missing condition check for existence of mapped data (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52889: apparmor: Fix null pointer deref when receiving skb during sock creation (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42287: scsi: qla2xxx: Complete command early within lock (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42277: iommu: sprd: Avoid NULL deref in sprd_iommu_hw_en (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42285: RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42278: ASoC: TAS2781: Fix tasdev_load_calibrated_data() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42286: scsi: qla2xxx: validate nvme_local_port correctly (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42279: spi: microchip-core: ensure TX and RX FIFOs are empty at start of a transfer (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42280: mISDN: Fix a use after free in hfcmulti_tx() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42281: bpf: Fix a segment issue when downgrading gso_size (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42282: net: mediatek: Fix potential NULL pointer dereference in dummy net_device handling (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42284: tipc: Return non-zero value from tipc_udp_addr2str() on error (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42289: scsi: qla2xxx: During vport delete send async logout explicitly (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42283: net: nexthop: Initialize all fields in dumped nexthops (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42299: fs/ntfs3: Update log->page_{mask,bits} if log->page_size changed (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42298: ASoC: fsl: fsl_qmc_audio: Check devm_kasprintf() returned value (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42300: erofs: fix race in z_erofs_get_gbuf() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42301: dev/parport: fix the array out-of-bounds risk (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42302: PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42303: media: imx-pxp: Fix ERR_PTR dereference in pxp_probe() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42304: ext4: make sure the first directory block is not a hole (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42305: ext4: check dot and dotdot of dx_root before making dir indexed (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42306: udf: Avoid using corrupted block bitmap buffer (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42307: cifs: fix potential null pointer use in destroy_workqueue in init_cifs error path (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42290: irqchip/imx-irqsteer: Handle runtime power management correctly (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42308: drm/amd/display: Check for NULL pointer (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42309: drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42313: media: venus: fix use after free in vdec_close (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42310: drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42311: hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42312: sysctl: always initialize i_uid/i_gid (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42314: btrfs: fix extent map use-after-free when adding pages to compressed bio (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42315: exfat: fix potential deadlock on __exfat_get_dentry_set (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42316: mm/mglru: fix div-by-zero in vmpressure_calc_level() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42317: mm/huge_memory: avoid PMD-size page cache if needed (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42291: ice: Add a per-VF limit on number of FDIR filters (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42318: landlock: Don't lose track of restrictions on cred_transfer (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42319: mailbox: mtk-cmdq: Move devm_mbox_controller_register() after devm_pm_runtime_enable() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42320: s390/dasd: fix error checks in dasd_copy_pair_store() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42292: kobject_uevent: Fix OOB access within zap_modalias_env() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42293: arm64: mm: Fix lockless walks with static and dynamic page-table folding (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42294: block: fix deadlock between sd_remove & sd_release (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42295: nilfs2: handle inconsistent state in nilfs_btnode_create_block() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42296: f2fs: fix return value of f2fs_convert_inline_inode() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42297: f2fs: fix to don't dirty inode for readonly filesystem (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42288: scsi: qla2xxx: Fix for possible memory corruption (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42322: ipvs: properly dereference pe in ip_vs_add_service (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-42321: net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-43816: scsi: lpfc: Revise lpfc_prep_embed_io routine with proper endian macro usages (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-43815: crypto: mxs-dcp - Ensure payload is zero when using key slot (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-43817: net: missing check virtio (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-43818: ASoC: amd: Adjust error handling in case of absent codec device (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-43819: kvm: s390: Reject memory region operations for ucontrol VMs (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-43820: dm-raid: Fix WARN_ON_ONCE check for sync_thread in raid_resume (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-43821: scsi: lpfc: Fix a possible null pointer dereference (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-43825: iio: Fix the sorting functionality in iio_gts_build_avail_time_table (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-43822: ASoc: PCM6240: Return directly after a failed devm_kzalloc() in pcmdevice_i2c_probe() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-43823: PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-43834: xdp: fix invalid wait context of page_pool_destroy() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-43838: bpf: fix overflow check in adjust_jmp_off() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-43835: virtio_net: Fix napi_skb_cache_put warning (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-43836: net: ethtool: pse-pd: Fix possible null-deref (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-43837: bpf: Fix null pointer dereference in resolve_prog_type() for BPF_PROG_TYPE_EXT (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-43839: bna: adjust 'name' buf size of bna_tcb and bna_ccb structures (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-43840: bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-43841: wifi: virt_wifi: avoid reporting connection success with wrong SSID (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-43842: wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-43843: riscv, bpf: Fix out-of-bounds issue when preparing trampoline image (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-43826: nfs: pass explicit offset/count to trace events (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-43844: wifi: rtw89: wow: fix GTK offload H2C skbuff issue (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-43845: udf: Fix bogus checksum computation in udf_rename() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-43846: lib: objagg: Fix general protection fault (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-43847: wifi: ath12k: fix invalid memory access while processing fragmented packets (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-43848: wifi: mac80211: fix TTLM teardown work (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-43849: soc: qcom: pdr: protect locator_addr with the main mutex (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-43850: soc: qcom: icc-bwmon: Fix refcount imbalance seen during bwmon_remove (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-43851: soc: xilinx: rename cpu_number1 to dummy_cpu_number (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-43852: hwmon: (ltc2991) re-order conditions to fix off by one bug (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-43853: cgroup/cpuset: Prevent UAF in proc_cpuset_show() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-43827: drm/amd/display: Add null check before access structs (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-43855: md: fix deadlock between mddev_suspend and flush bio (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-43854: block: initialize integrity buffer to zero before writing it to media (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-43828: ext4: fix infinite loop when replaying fast_commit (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
11 more messages

August 20 (8 messages)

CVE-2024-43861: net: usb: qmi_wwan: fix memory leak for not ip packets (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-43863: drm/vmwgfx: Fix a deadlock in dma buf fence polling (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-43862: net: wan: fsl_qmc_hdlc: Convert carrier_lock spinlock to a mutex (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-43864: net/mlx5e: Fix CT entry update leaks of modify header context (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-43865: s390/fpu: Re-add exception handling in load_fpu_state() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-43866: net/mlx5: Always drain health in shutdown callback (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-43867: drm/nouveau: prime: fix refcount underflow (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-43868: riscv/purgatory: align riscv_kernel_entry (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

August 21 (71 messages)

CVE-2024-43869: perf: Fix event leak upon exec and file release (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-43870: perf: Fix event leak upon exit (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-43879: wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-43880: mlxsw: spectrum_acl_erp: Fix object nesting warning (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-43881: wifi: ath12k: change DMA direction while mapping reinjected packets (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-43871: devres: Fix memory leakage caused by driver API devm_free_percpu() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-43872: RDMA/hns: Fix soft lockup under heavy CEQE load (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-43873: vhost/vsock: always initialize seqpacket_allow (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-43874: crypto: ccp - Fix null pointer dereference in __sev_snp_shutdown_locked (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-43875: PCI: endpoint: Clean up error handling in vpci_scan_bus() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-43876: PCI: rcar: Demote WARN() to dev_warn_ratelimited() in rcar_pcie_wakeup() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-43877: media: pci: ivtv: Add check for DMA map result (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-43878: xfrm: Fix input error path memory access (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-43882: exec: Fix ToCToU between perm check and set-uid/gid usage (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48868: dmaengine: idxd: Let probe fail when workqueue cannot be enabled (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48867: dmaengine: idxd: Prevent use after free on completion memory (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48877: f2fs: let's avoid panic if extent_tree is not created (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48878: Bluetooth: hci_qca: Fix driver shutdown on closed serdev (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48879: efi: fix NULL-deref in init error path (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48880: platform/surface: aggregator: Add missing call to ssam_request_sync_free() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48880: platform/surface: aggregator: Add missing call to ssam_request_sync_free() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48881: platform/x86/amd: Fix refcount leak in amd_pmc_probe (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48882: net/mlx5e: Fix macsec possible null dereference when updating MAC security entity (SecY) (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48883: net/mlx5e: IPoIB, Block PKEY interfaces with less rx queues than parent (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48884: net/mlx5: Fix command stats access after free (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48885: ice: Fix potential memory leak in ice_gnss_tty_write() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48886: ice: Add check for kzalloc (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48869: USB: gadgetfs: Fix race between mounting and unmounting (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48870: tty: fix possible null-ptr-defer in spk_ttyio_release (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48871: tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48872: misc: fastrpc: Fix use-after-free race condition for maps (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48873: misc: fastrpc: Don't remove map on creater_process and device_release (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48874: misc: fastrpc: Fix use-after-free and race in fastrpc_map_find (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48875: wifi: mac80211: sdata can be NULL during AMPDU start (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48876: wifi: mac80211: fix initialization of rx->link and rx->link_sta (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48888: drm/msm/dpu: Fix memory leak in msm_mdss_parse_data_bus_icc_path (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48897: arm64/mm: fix incorrect file_map_count for invalid pmd (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48898: drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48899: drm/virtio: Fix GEM handle creation UAF (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52893: gsmi: fix null-deref in gsmi_get_variable (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52894: usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52895: io_uring/poll: don't reissue in case of poll race on multishot request (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52896: btrfs: fix race between quota rescan and disable leading to NULL pointer deref (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52897: btrfs: qgroup: do not warn on record without old_roots populated (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52898: xhci: Fix null pointer dereference when host dies (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52899: Add exception protection processing for vd in axi_chan_handle_err function (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48889: ASoC: Intel: sof-nau8825: fix module alias overflow (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52900: nilfs2: fix general protection fault in nilfs_btree_insert() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52901: usb: xhci: Check endpoint is valid before dereferencing it (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52902: nommu: fix memory leak in do_mmap() error path (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52903: io_uring: lock overflowing for IOPOLL (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52904: ALSA: usb-audio: Fix possible NULL pointer dereference in snd_usb_pcm_has_fixed_rate() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52905: octeontx2-pf: Fix resource leakage in VF driver unbind (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52906: net/sched: act_mpls: Fix warning during failed attribute validation (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52907: nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52908: drm/amdgpu: Fix potential NULL dereference (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52909: nfsd: fix handling of cached open files in nfsd4_open codepath (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48890: scsi: storvsc: Fix swiotlb bounce buffer leak in confidential VM (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48891: regulator: da9211: Use irq handler when ready (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48892: sched/core: Fix use-after-free bug in dup_user_cpus_ptr() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48893: drm/i915/gt: Cleanup partial engine discovery failures (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48895: iommu/arm-smmu: Don't unregister on shutdown (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48896: ixgbe: fix pci device refcount leak (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48887: drm/vmwgfx: Remove rcu locks from user resources (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48894: iommu/arm-smmu-v3: Don't unregister on shutdown (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52913: drm/i915: Fix potential context UAFs (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52910: iommu/iova: Fix alloc iova overflows issue (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52911: drm/msm: another fix for the headless Adreno GPU (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52912: drm/amdgpu: Fixed bug on error when unloading amdgpu (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52914: io_uring/poll: add hash if ready poll request can't complete inline (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2024-37353: virtio: delete vq in vp_find_vqs_msix() when request_irq() fails (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

August 22 (48 messages)

REJECTED: CVE-2024-42143: orangefs: fix out-of-bounds fsid access (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
Re: CVE-2024-42143: orangefs: fix out-of-bounds fsid access (Greg KH <gregkh@...uxfoundation.org>)
CVE-2022-48903: btrfs: fix relocation crash due to premature return from btrfs_commit_transaction() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48902: btrfs: do not WARN_ON() if we have PageError set (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48900: xen/netfront: react properly to failing gnttab_end_foreign_access_ref() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48901: btrfs: do not start relocation until in progress drops are done (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48904: iommu/amd: Fix I/O page table memory leak (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-4441: spi: spi-zynq-qspi: Fix a NULL pointer dereference in zynq_qspi_exec_mem_op() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48906: mptcp: Correctly set DATA_FIN timeout when number of retransmits is large (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48915: thermal: core: Fix TZ_GET_TRIP NULL pointer dereference (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48916: iommu/vt-d: Fix double list_add when enabling VMD in scalable mode (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48917: ASoC: ops: Shift tested values in snd_soc_put_volsw() by +min (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48918: iwlwifi: mvm: check debugfs_dir ptr before use (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48919: cifs: fix double free race when mount fails in cifs_get_root() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48920: btrfs: get rid of warning on transaction commit when using flushoncommit (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48921: sched/fair: Fix fault in reweight_entity (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48922: riscv: fix oops caused by irqsoff latency tracer (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48923: btrfs: prevent copying too big compressed lzo segment (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48924: thermal: int340x: fix memory leak in int3400_notify() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48907: auxdisplay: lcd2s: Fix memory leak in ->remove() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48926: usb: gadget: rndis: add spinlock for rndis response list (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48927: iio: adc: tsc2046: fix memory corruption by preventing array overflow (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48925: RDMA/cma: Do not change route.addr.src_addr outside state checks (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48928: iio: adc: men_z188_adc: Fix a resource leak in an error handling path (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48930: RDMA/ib_srp: Fix a deadlock (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48929: bpf: Fix crash due to out of bounds access into reg2btf_ids. (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48931: configfs: fix a race in configfs_{,un}register_subsystem() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48932: net/mlx5: DR, Fix slab-out-of-bounds in mlx5_cmd_dr_create_fte (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48933: netfilter: nf_tables: fix memory leak during stateful obj update (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48908: net: arcnet: com20020: Fix null-ptr-deref in com20020pci_probe() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48909: net/smc: fix connection leak (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48910: net: ipv6: ensure we call ipv6_mc_down() at most once (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48911: netfilter: nf_queue: fix possible use-after-free (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48912: netfilter: fix use-after-free in __nf_register_net_hook() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48913: blktrace: fix use after free for struct blk_trace (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48914: xen/netfront: destroy queues before real_num_tx_queues is zeroed (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48905: ibmvnic: free reset-work-item when flushing (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48935: netfilter: nf_tables: unregister flowtable hooks on netns exit (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48936: gso: do not skip outer ip header in case of ipip and net_failover (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48937: io_uring: add a schedule point in io_add_buffers() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48938: CDC-NCM: avoid overflow in sanity checking (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48939: bpf: Add schedule points in batch ops (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48940: bpf: Fix crash due to incorrect copy_map_value (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48941: ice: fix concurrent reset and removal of VFs (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48942: hwmon: Handle failure to register sensor with thermal zone correctly (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48943: KVM: x86/mmu: make apf token non-zero to fix bug (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48934: nfp: flower: Fix a potential leak in nfp_tunnel_add_shared_mac() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2022-48900: xen/netfront: react properly to failing gnttab_end_foreign_access_ref() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

August 23 (1 message)

CVE-2024-43883: usb: vhci-hcd: Do not drop references before new references are gained (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

August 25 (1 message)

Re: CVE-2022-48921: sched/fair: Fix fault in reweight_entity (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

August 26 (44 messages)

CVE-2024-43884: Bluetooth: MGMT: Add error handling to pair_device() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-43886: drm/amd/display: Add null check in resource_log_pipe_topology_update (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-43887: net/tcp: Disable TCP-AO static key after RCU grace period (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-43885: btrfs: fix double inode unlock for direct IO sync writes (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-43895: drm/amd/display: Skip Recompute DSC Params if no Stream on Link (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-43888: mm: list_lru: fix UAF for memory cgroup (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-43889: padata: Fix possible divide-by-0 panic in padata_mt_helper() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-43890: tracing: Fix overflow in get_free_elt() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-43891: tracing: Have format file honor EVENT_FILE_FL_FREED (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-43892: memcg: protect concurrent access to mem_cgroup_idr (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-43893: serial: core: check uartclk for zero to avoid divide by zero (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-43894: drm/client: fix null pointer dereference in drm_client_modeset_probe (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-43897: net: drop bad gso csum_start and offset in virtio_net_hdr (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-43897: net: drop bad gso csum_start and offset in virtio_net_hdr (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-43906: drm/admgpu: fix dereferencing null pointer context (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-43907: drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-43898: ext4: sanity check for NULL pointer after ext4_force_shutdown (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-43899: drm/amd/display: Fix null pointer deref in dcn20_resource.c (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-43900: media: xc2028: avoid use-after-free in load_firmware_cb() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-43901: drm/amd/display: Fix NULL pointer dereference for DTN log in DCN401 (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-43902: drm/amd/display: Add null checker before passing variables (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-43903: drm/amd/display: Add NULL check for 'afb' before dereferencing in amdgpu_dm_plane_handle_cursor_update (Greg Kroah-Hartman <gregkh@...uxfoundati…)
CVE-2024-43904: drm/amd/display: Add null checks for 'stream' and 'plane' before dereferencing (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-43905: drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-43896: ASoC: cs-amp-lib: Fix NULL pointer crash if efi.get_variable is NULL (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-43909: drm/amdgpu/pm: Fix the null pointer dereference for smu7 (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-44934: net: bridge: mcast: wait for previous gc cycles when removing port (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-44935: sctp: Fix null-ptr-deref in reuseport_add_sock(). (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-44936: power: supply: rt5033: Bring back i2c_set_clientdata (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-43910: bpf: add missing check_func_arg_reg_off() to prevent out-of-bounds memory accesses (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-44937: platform/x86: intel-vbtn: Protect ACPI notify handler against recursion (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-43911: wifi: mac80211: fix NULL dereference at band check in starting tx ba session (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-43912: wifi: nl80211: disallow setting special AP channel widths (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-43913: nvme: apple: fix device reference counting (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-43914: md/raid5: avoid BUG_ON() while continue reshape after reassembling (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-44931: gpio: prevent potential speculation leaks in gpio_device_get_desc() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-44933: bnxt_en : Fix memory out-of-bounds in bnxt_fill_hw_rss_tbl() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-44932: idpf: fix UAFs when destroying the queues (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-43908: drm/amdgpu: Fix the null pointer dereference to ras_manager (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-44939: jfs: fix null ptr deref in dtInsertEntry (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-44938: jfs: Fix shift-out-of-bounds in dbDiscardAG (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-44940: fou: remove warn in gue_gro_receive on unsupported protocol (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-44941: f2fs: fix to cover read extent cache access with lock (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-44942: f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

August 28 (1 message)

CVE-2024-44943: mm: gup: stop abusing try_grab_folio (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

August 29 (1 message)

CVE-2021-4442: tcp: add sanity tests to TCP_QUEUE_SEQ (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

August 30 (4 messages)

CVE-2024-44944: netfilter: ctnetlink: use helper function to calculate expect ID (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2022-48936: gso: do not skip outer ip header in case of ipip and net_failover (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
Re: CVE-2022-48921: sched/fair: Fix fault in reweight_entity (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48944: sched: Fix yet more sched_fork() races (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

August 31 (2 messages)

CVE-2024-44945: netfilter: nfnetlink: Initialise extack before use in ACKs (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-44946: kcm: Serialise kcm_sendmsg() for the same socket. (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

323 messages

Powered by blists - more mailing lists