linux-cve-announce mailing list - 2024/09

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

linux-cve-announce mailing list - 2024/09

Mon	Tue	Wed	Thu	Fri	Sat	Sun
						¹
² 1	³	⁴ 61	⁵	⁶ 2	⁷	⁸ 1
⁹	¹⁰ 1	¹¹ 23	¹²	¹³ 41	¹⁴	¹⁵
¹⁶	¹⁷	¹⁸ 88	¹⁹	²⁰	²¹	²²
²³ 1	²⁴	²⁵	²⁶	²⁷ 67	²⁸	²⁹
³⁰ 1

Messages by day:

September 2 (1 message)

CVE-2024-44947: fuse: Initialize beyond-EOF page contents before setting uptodate (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

September 4 (61 messages)

CVE-2024-44949: parisc: fix a possible DMA corruption (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-44948: x86/mtrr: Check if fixed MTRRs exist before saving them (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-44958: sched/smt: Fix unbalance sched_smt_present dec/inc (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-44959: tracefs: Use generic inode RCU for synchronizing freeing (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-44960: usb: gadget: core: Check for unset descriptor (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-44961: drm/amdgpu: Forward soft recovery errors to userspace (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-44962: Bluetooth: btnxpuart: Shutdown timer and prevent rearming when driver unloading (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-44963: btrfs: do not BUG_ON() when freeing tree block after error (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-44964: idpf: fix memory leaks and crashes while performing a soft reset (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-44965: x86/mm: Fix pti_clone_pgtable() alignment assumption (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-44950: serial: sc16is7xx: fix invalid FIFO access with special register set (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-44951: serial: sc16is7xx: fix TX fifo corruption (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-44953: scsi: ufs: core: Fix deadlock during RTC update (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-44952: driver core: Fix uevent_show() vs driver detach race (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-44954: ALSA: line6: Fix racy access to midibuf (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-44955: drm/amd/display: Don't refer to dc_sink in is_dsc_need_re_compute (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-44956: drm/xe/preempt_fence: enlarge the fence critical section (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-44957: xen: privcmd: Switch from mutex to spinlock for irqfds (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-44966: binfmt_flat: Fix corruption when not offsetting data start (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-44969: s390/sclp: Prevent release of buffer in I/O (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-44967: drm/mgag200: Bind I2C lifetime to DRM device (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-44968: tick/broadcast: Move per CPU pointer access into the atomic section (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-44970: net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-44971: net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-44972: btrfs: do not clear page dirty inside extent_write_locked_range() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-44973: mm, slub: do not call do_slab_free for kfence object (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-44975: cgroup/cpuset: fix panic caused by partcmd_update (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-44974: mptcp: pm: avoid possible UaF when selecting endp (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-44984: bnxt_en: Fix double DMA unmapping for XDP_REDIRECT (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-44986: ipv6: fix possible UAF in ip6_finish_output2() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-44985: ipv6: prevent possible UAF in ip6_xmit() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-44987: ipv6: prevent UAF in ip6_send_skb() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-44988: net: dsa: mv88e6xxx: Fix out-of-bound access (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-44989: bonding: fix xfrm real_dev null pointer dereference (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-44990: bonding: fix null pointer deref in bond_ipsec_offload_ok (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-44976: ata: pata_macio: Fix DMA table overflow (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-44977: drm/amdgpu: Validate TA binary size (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-44979: drm/xe: Fix missing workqueue destroy in xe_gt_pagefault (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-44978: drm/xe: Free job before xe_exec_queue_put (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-44980: drm/xe: Fix opregion leak (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-44981: workqueue: Fix UBSAN 'subtraction overflow' error in shift_and_mask() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-44982: drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-44983: netfilter: flowtable: validate vlan header (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-44992: smb/client: avoid possible NULL dereference in cifs_free_subrequest() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-45001: net: mana: Fix RX buf alloc_size alignment and atomic op panic (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-45002: rtla/osnoise: Prevent NULL dereference in error handling (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-45003: vfs: Don't evict inode under the inode lru traversing context (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-45004: KEYS: trusted: dcp: fix leak of blob encryption key (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-45005: KVM: s390: fix validity interception issue when gisa is switched off (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-45006: xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-45008: Input: MT - limit max slots (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-45007: char: xillybus: Don't destroy workqueue from work item running on it (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-44994: iommu: Restore lost return in iommu_report_device_fault() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-44995: net: hns3: fix a deadlock problem when config TC during resetting (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-44993: drm/v3d: Fix out-of-bounds read in `v3d_csd_job_run()` (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-44996: vsock: fix recursive ->recvmsg calls (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-44997: net: ethernet: mtk_wed: fix use-after-free panic in mtk_wed_setup_tc_block_cb() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-44998: atm: idt77252: prevent use after free in dequeue_rx() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-44999: gtp: pull network headers in gtp_dev_xmit() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-45000: fs/netfs/fscache_cookie: add missing "n_accesses" check (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-44991: tcp: prevent concurrent execution of tcp_sk_exit_batch (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

September 6 (2 messages)

CVE-2023-52916: media: aspeed: Fix memory overwrite if timing is 1600x900 (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52915: media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

September 8 (1 message)

Re: CVE-2024-43867: drm/nouveau: prime: fix refcount underflow (Greg KH <gregkh@...uxfoundation.org>)

September 10 (1 message)

REJECTED: CVE-2024-43898: ext4: sanity check for NULL pointer after ext4_force_shutdown (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

September 11 (23 messages)

CVE-2024-45010: mptcp: pm: only mark 'subflow' endp as available (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-45009: mptcp: pm: only decrement add_addr_accepted for MPJ req (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-45019: net/mlx5e: Take state lock during tx timeout reporter (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-45020: bpf: Fix a kernel verifier crash in stacksafe() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-45021: memcg_write_event_control(): fix a user-triggerable oops (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-45023: md/raid1: Fix data corruption for degraded array with slow disk (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-45024: mm/hugetlb: fix hugetlb vs. core-mm PT locking (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-45025: fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-45011: char: xillybus: Check USB endpoints when probing device (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-45013: nvme: move stopping keep-alive into nvme_uninit_ctrl() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-45012: nouveau/firmware: use dma non-coherent allocator (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-45014: s390/boot: Avoid possible physmem_info segment corruption (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-45015: drm/msm/dpu: move dpu_encoder's connector assignment to atomic_enable() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-45016: netem: fix return value if duplicate enqueue fails (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-45017: net/mlx5: Fix IPsec RoCE MPV trace call (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-45018: netfilter: flowtable: initialise extack before use (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-45028: mmc: mmc_test: Fix NULL dereference on allocation failure (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-45029: i2c: tegra: Do not mark ACPI devices as irq safe (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46672: wifi: brcmfmac: cfg80211: Handle SSID based pmksa deletion (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-45026: s390/dasd: fix error recovery leading to data corruption on ESE devices (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-45027: usb: xhci: Check for xhci->interrupters being allocated in xhci_mem_clearup() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-45022: mm/vmalloc: fix page mapping if vm_area_alloc_pages() with high order fallback to order 0 (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-45030: igb: cope with large MAX_SKB_FRAGS (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

September 13 (41 messages)

CVE-2024-46674: usb: dwc3: st: fix probed platform device ref count on probe error path (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46673: scsi: aacraid: Fix double-free on probe failure (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46684: binfmt_elf_fdpic: fix AUXV size calculation when ELF_HWCAP2 is defined (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46683: drm/xe: prevent UAF around preempt fence (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46685: pinctrl: single: fix potential NULL dereference in pcs_get_function() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46686: smb/client: avoid dereferencing rdata=NULL in smb2_new_read_req() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46688: erofs: fix out-of-bound access when z_erofs_gbuf_growsize() partially fails (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46687: btrfs: fix a use-after-free when hitting errors inside btrfs_submit_chunk() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46689: soc: qcom: cmd-db: Map shared memory as WC, not WB (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46690: nfsd: fix nfsd4_deleg_getattr_conflict in presence of third party lease (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46691: usb: typec: ucsi: Move unregister out of atomic section (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46692: firmware: qcom: scm: Mark get_wq_ctx() as atomic call (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46694: drm/amd/display: avoid using null object of framebuffer (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46675: usb: dwc3: core: Prevent USB core invalid event buffer address access (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46695: selinux,smack: don't bypass permissions check in inode_setsecctx hook (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46693: soc: qcom: pmic_glink: Fix race during initialization (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46697: nfsd: ensure that nfsd4_fattr_args.context is zeroed out (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46696: nfsd: fix potential UAF in nfsd4_cb_getattr_release (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46698: video/aperture: optionally match the device in sysfb_disable() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46699: drm/v3d: Disable preemption while updating GPU stats (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46700: drm/amdgpu/mes: fix mes ring buffer overflow (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46676: nfc: pn533: Add poll mod list filling check (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46677: gtp: fix a potential NULL pointer dereference (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46678: bonding: change ipsec_lock from spin lock to mutex (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46679: ethtool: check device is present when getting link settings (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46680: Bluetooth: btnxpuart: Fix random crash seen while removing driver (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46681: pktgen: use cpus_read_lock() in pg_net_init() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46682: nfsd: prevent panic for nfsv4.0 closed files in nfs4_show_open (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46702: thunderbolt: Mark XDomain as unplugged when router is removed (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46701: libfs: fix infinite directory reads for offset dir (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46703: Revert "serial: 8250_omap: Set the console genpd always on if no console suspend" (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46704: workqueue: Fix spruious data race in __flush_work() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46705: drm/xe: reset mmio mappings with devm (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46706: tty: serial: fsl_lpuart: mark last busy before uart_add_one_port (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46707: KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3 (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46709: drm/vmwgfx: Fix prime with external buffers (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46708: pinctrl: qcom: x1e80100: Fix special pin offsets (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46710: drm/vmwgfx: Prevent unmapping active read buffers (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46711: mptcp: pm: fix ID 0 endp usage after multiple re-creations (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46712: drm/vmwgfx: Disable coherent dumb buffers without 3d (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46713: perf/aux: Fix AUX buffer serialization (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

September 18 (88 messages)

CVE-2024-46715: driver: iio: add missing checks on iio_info's callback access (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46714: drm/amd/display: Skip wbscl_set_scaler_filter if filter is null (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46716: dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46717: net/mlx5e: SHAMPO, Fix incorrect page release (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46718: drm/xe: Don't overmap identity VRAM mapping (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46719: usb: typec: ucsi: Fix null pointer dereference in trace (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46720: drm/amdgpu: fix dereference after null check (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46721: apparmor: fix possible NULL pointer dereference (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46726: drm/amd/display: Ensure index calculation will not overflow (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46722: drm/amdgpu: fix mc_data out-of-bounds read warning (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46723: drm/amdgpu: fix ucode out-of-bounds read warning (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46727: drm/amd/display: Add otg_master NULL check within resource_log_pipe_topology_update (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46728: drm/amd/display: Check index for aux_rd_interval before using (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46725: drm/amdgpu: Fix out-of-bounds write warning (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46729: drm/amd/display: Fix incorrect size calculation for loop (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46730: drm/amd/display: Ensure array index tg_inst won't be -1 (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46731: drm/amd/pm: fix the Out-of-bounds read warning (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46732: drm/amd/display: Assign linear_pitch_alignment even for VM (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46724: drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46733: btrfs: fix qgroup reserve leaks in cow_file_range (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46735: ublk_drv: fix NULL pointer dereference in ublk_ctrl_start_recovery() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46734: btrfs: fix race between direct IO write and fsync when using same fd (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46744: Squashfs: sanity check symbolic link size (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46745: Input: uinput - reject requests with unreasonable number of slots (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46746: HID: amd_sfh: free driver_data after destroying hid device (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46747: HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46748: cachefiles: Set the max subreq size for cache writes to MAX_RW_COUNT (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46749: Bluetooth: btnxpuart: Fix Null pointer dereference in btnxpuart_flush() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46750: PCI: Add missing bridge lock to pci_bus_lock() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46751: btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46752: btrfs: replace BUG_ON() with error handling at update_ref_for_cow() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46753: btrfs: handle errors from btrfs_dec_ref() properly (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46736: smb: client: fix double put of @cfile in smb2_rename_path() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46754: bpf: Remove tst_run from lwt_seg6local_prog_ops. (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46755: wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46756: hwmon: (w83627ehf) Fix underflows seen when writing limit attributes (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46757: hwmon: (nct6775-core) Fix underflows seen when writing limit attributes (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46758: hwmon: (lm95234) Fix underflows seen when writing limit attributes (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46759: hwmon: (adc128d818) Fix underflows seen when writing limit attributes (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46737: nvmet-tcp: fix kernel crash if commands allocation fails (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46738: VMCI: Fix use-after-free when removing resource in vmci_resource_remove() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46739: uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46740: binder: fix UAF caused by offsets overwrite (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46741: misc: fastrpc: Fix double free of 'buf' in error path (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46742: smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46743: of/irq: Prevent device address out-of-bounds read in interrupt map walk (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46770: ice: Add netif_device_attach/detach into PF reset flow (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46761: pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46771: can: bcm: Remove proc entry when dev is unregistered. (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46772: drm/amd/display: Check denominator crb_pipes before used (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46773: drm/amd/display: Check denominator pbn_div before used (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46774: powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46775: drm/amd/display: Validate function returns (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46776: drm/amd/display: Run DC_LOG_DC after checking link->link_enc (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46778: drm/amd/display: Check UnboundedRequestEnabled's value (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46779: drm/imagination: Free pvr_vm_gpuva after unlink (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46762: xen: privcmd: Fix possible access to a freed kirqfd instance (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46777: udf: Avoid excessive partition lengths (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46780: nilfs2: protect references to superblock parameters exposed in sysfs (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46781: nilfs2: fix missing cleanup on rollforward recovery error (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46793: ASoC: Intel: Boards: Fix NULL pointer deref in BYT/CHT boards harder (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46782: ila: call nf_unregister_net_hooks() sooner (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46783: tcp_bpf: fix return value of tcp_bpf_sendmsg() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46785: eventfs: Use list_del_rcu() for SRCU protected list variable (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46784: net: mana: Fix error handling in mana_create_txq/rxq's NAPI cleanup (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46787: userfaultfd: fix checks for huge PMDs (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46763: fou: Fix null-ptr-deref in GRO. (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46786: fscache: delete fscache_cookie_lru_timer when fscache exits to avoid UAF (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46767: net: phy: Fix missing of_node_put() for leds (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46764: bpf: add check for invalid name in btf_name_valid_section() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46768: hwmon: (hp-wmi-sensors) Check if WMI event data exists (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46769: spi: intel: Add check devm_kasprintf() returned value (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46789: mm/slub: add check for s->flags in the alloc_tagging_slab_free_hook (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46799: net: ethernet: ti: am65-cpsw: Fix NULL dereference on XDP_TX (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46801: libfs: fix get_stashed_dentry() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46765: ice: protect XDP configuration with a mutex (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46766: ice: move netif_queue_set_napi to rtnl-protected sections (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46790: codetag: debug: mark codetags for poisoned page as empty (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46791: can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46800: sch/netem: fix use after free in netem_dequeue (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46792: riscv: misaligned: Restrict user access to kernel memory (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46794: x86/tdx: Fix data leak in mmio_read() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46760: wifi: rtw88: usb: schedule rx work after everything is set up (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46798: ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46788: tracing/osnoise: Use a cpumask to know what threads are kthreads (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46797: powerpc/qspinlock: Fix deadlock in MCS queue (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46795: ksmbd: unset the binding mark of a reused connection (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46796: smb: client: fix double put of @cfile in smb2_set_path_size() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

September 23 (1 message)

CVE-2022-48945: media: vivid: fix compose size exceed boundary (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

September 27 (67 messages)

CVE-2024-46803: drm/amdkfd: Check debug trap enable before write dbg_ev_file (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46802: drm/amd/display: added NULL check at start of dc_validate_stream (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46812: drm/amd/display: Skip inactive planes within ModeSupportAndSystemConfiguration (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46813: drm/amd/display: Check link_index before accessing dc->links[] (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46814: drm/amd/display: Check msg_id before processing transcation (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46815: drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[] (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46816: drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46817: drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6 (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46818: drm/amd/display: Check gpio_id before used as array index (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46819: drm/amdgpu: the warning dereferencing obj for nbio_v7_4 (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46820: drm/amdgpu/vcn: remove irq disabling in vcn 5 suspend (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46821: drm/amd/pm: Fix negative array index read (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46804: drm/amd/display: Add array index check for hdcp ddc access (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46805: drm/amdgpu: fix the waring dereferencing hive (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46806: drm/amdgpu: Fix the warning division or modulo by zero (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46807: drm/amd/amdgpu: Check tbo resource pointer (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46808: drm/amd/display: Add missing NULL pointer check within dpcd_extend_address_range (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46809: drm/amd/display: Check BIOS images before it is used (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46810: drm/bridge: tc358767: Check if fully initialized before signalling HPD event via IRQ (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46811: drm/amd/display: Fix index may exceed array range within fpu_update_bw_bounding_box (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46823: kunit/overflow: Fix UB in overflow_allocation_test (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46822: arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46824: iommufd: Require drivers to supply the cache_invalidate_user ops (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46825: wifi: iwlwifi: mvm: use IWL_FW_CHECK for link ID check (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46826: ELF: fix kernel.randomize_va_space double read (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46827: wifi: ath12k: fix firmware crash due to invalid peer nss (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46828: sched: sch_cake: fix bulk flow accounting logic for host fairness (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46829: rtmutex: Drop rt_mutex::wait_lock before scheduling (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46830: KVM: x86: Acquire kvm->srcu when handling KVM_SET_VCPU_EVENTS (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46832: MIPS: cevt-r4k: Don't call get_c0_compare_int if timer irq is installed (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46841: btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46842: scsi: lpfc: Handle mailbox timeouts in lpfc_get_sfp_info (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46843: scsi: ufs: core: Remove SCSI host only if added (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46844: um: line: always fill *error_out in setup_one_line() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46845: tracing/timerlat: Only clear timer if a kthread exists (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46846: spi: rockchip: Resolve unbalanced runtime PM / system PM handling (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46847: mm: vmalloc: ensure vmap_block is initialised before adding to queue (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46848: perf/x86/intel: Limit the period on Haswell (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46833: net: hns3: void array out of bound when loop tnl_num (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46834: ethtool: fail closed if we can't get max channel used in indirection tables (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46835: drm/amdgpu: Fix smatch static checker warning (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46836: usb: gadget: aspeed_udc: validate endpoint index for ast udc (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46840: btrfs: clean up our handling of refs == 0 in snapshot delete (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46837: drm/panthor: Restrict high priorities on group_create (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46838: userfaultfd: don't BUG_ON() if khugepaged yanks our page table (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46839: workqueue: Improve scalability of workqueue watchdog touch (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46831: net: microchip: vcap: Fix use-after-free error in kunit test (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46849: ASoC: meson: axg-card: fix 'use-after-free' (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46850: drm/amd/display: Avoid race between dcn35_set_drr() and dc_state_destruct() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46860: wifi: mt76: mt7921: fix NULL pointer access in mt7921_ipv6_addr_change (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46859: platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46861: usbnet: ipheth: do not stop RX on failing RX callback (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46862: ASoC: Intel: soc-acpi-intel-mtl-match: add missing empty item (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46863: ASoC: Intel: soc-acpi-intel-lnl-match: add missing empty item (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46864: x86/hyperv: fix kexec crash due to VP assist page corruption (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46865: fou: fix initialization of grc (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46866: drm/xe/client: add missing bo locking in show_meminfo() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46867: drm/xe/client: fix deadlock in show_meminfo() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46851: drm/amd/display: Avoid race between dcn10_set_drr() and dc_state_destruct() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46852: dma-buf: heaps: Fix off-by-one in CMA heap fault handler (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46853: spi: nxp-fspi: fix the KASAN report out-of-bounds bug (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46855: netfilter: nft_socket: fix sk refcount leaks (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46857: net/mlx5: Fix bridge mode operations when there are no VFs (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46856: net: phy: dp83822: Fix NULL pointer dereference on DP83825 devices (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46858: mptcp: pm: Fix uaf in __timer_delete_sync (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46854: net: dpaa: Pad packets to ETH_ZLEN (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46868: firmware: qcom: uefisecapp: Fix deadlock in qcuefi_acquire() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

September 30 (1 message)

CVE-2024-46869: Bluetooth: btintel_pcie: Allocate memory for driver private data (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

287 messages

Powered by blists - more mailing lists