linux-cve-announce mailing list - 2024/10

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

linux-cve-announce mailing list - 2024/10

Mon	Tue	Wed	Thu	Fri	Sat	Sun
	¹ 3	²	³ 1	⁴	⁵	⁶
⁷	⁸	⁹ 19	¹⁰	¹¹	¹²	¹³
¹⁴	¹⁵ 1	¹⁶	¹⁷	¹⁸	¹⁹	²⁰
²¹ 384	²² 2	²³ 5	²⁴	²⁵	²⁶	²⁷
²⁸ 1	²⁹ 22	³⁰	³¹

Messages by day:

October 1 (3 messages)

Re: CVE-2024-46839: workqueue: Improve scalability of workqueue watchdog touch (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2024-46839: workqueue: Improve scalability of workqueue watchdog touch (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
Re: CVE-2024-46839: workqueue: Improve scalability of workqueue watchdog touch (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

October 3 (1 message)

REJECTED: CVE-2021-47220: usb: dwc3: core: fix kernel panic when do reboot (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

October 9 (19 messages)

REJECTED: CVE-2024-42308: drm/amd/display: Check for NULL pointer (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46871: drm/amd/display: Correct the defined value for AMDGPU_DMUB_NOTIFICATION_MAX (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46870: drm/amd/display: Disable DMCUB timeout for DCN35 (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-47658: crypto: stm32/cryp - call finalize with bh disabled (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-47659: smack: tcp: ipv4, fix incorrect labeling (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-47660: fsnotify: clear PARENT_WATCHED flags lazily (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-47662: drm/amd/display: Remove register from DCN35 DMCUB diagnostic collection (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-47661: drm/amd/display: Avoid overflow from uint32_t to uint8_t (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-47664: spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-47663: staging: iio: frequency: ad9834: Validate frequency parameter value (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-47665: i3c: mipi-i3c-hci: Error out instead on BUG_ON() in IBI DMA setup (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-47666: scsi: pm80xx: Set phy->enable_completion only when we wait for it (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-47667: PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0) (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-47668: lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-47669: nilfs2: fix state management in error path of log writing function (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-47671: USB: usbtmc: prevent kernel-usb-infoleak (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-47670: ocfs2: add bounds checking to ocfs2_xattr_find_entry() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-47672: wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-47673: wifi: iwlwifi: mvm: pause TCM when the firmware is stopped (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

October 15 (1 message)

CVE-2024-47674: mm: avoid leaving partial pfn mappings around in error case (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

October 21 (384 messages)

CVE-2024-47676: mm/hugetlb.c: fix UAF of vma in hugetlb fault pathway (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-47675: bpf: Fix use-after-free in bpf_uprobe_multi_link_attach() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-47685: netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-47686: ep93xx: clock: Fix off by one in ep93xx_div_recalc_rate() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-47688: driver core: Fix a potential null-ptr-deref in module_add_driver() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-47687: vdpa/mlx5: Fix invalid mr resource destroy (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-47689: f2fs: fix to don't set SB_RDONLY in f2fs_handle_critical_error() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-47690: f2fs: get rid of online repaire on corrupted directory (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-47691: f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-47692: nfsd: return -EINVAL when namelen is 0 (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-47693: IB/core: Fix ib_cache_setup_one error flow cleanup (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-47694: IB/mlx5: Fix UMR pd cleanup on error flow of driver init (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-47677: exfat: resolve memory leak from exfat_create_upcase_table() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-47695: RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-47696: RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-47697: drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-47698: drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-47700: ext4: check stripe size compatibility on remount as well (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-47699: nilfs2: fix potential null-ptr-deref in nilfs_btree_insert() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-47701: ext4: avoid OOB when system.data xattr changes underneath the filesystem (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-47702: bpf: Fail verification for sign-extension of packet data/data_end/data_meta (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-47678: icmp: change the order of rate limits (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-47679: vfs: fix race between evice_inodes() and find_inode()&iput() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-47681: wifi: mt76: mt7996: fix NULL pointer dereference in mt7996_mcu_sta_bfer_he (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-47683: drm/amd/display: Skip Recompute DSC Params if no Stream on Link (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-47680: f2fs: check discard support for conventional zones (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-47704: drm/amd/display: Check link_res->hpo_dp_link_enc before using it (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-47684: tcp: check skb is non-NULL in tcp_rto_delta_us() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-47713: wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-47682: scsi: sd: Fix off-by-one error in sd_read_block_characteristics() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-47714: wifi: mt76: mt7996: use hweight16 to get correct tx antenna (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-47715: wifi: mt76: mt7915: fix oops on non-dbdc mt7986 (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-47717: RISC-V: KVM: Don't zero-out PMU snapshot area before freeing data (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-47716: ARM: 9410/1: vfp: Use asm volatile in fmrx/fmxr macros (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-47718: wifi: rtw88: always wait for both firmware loading attempts (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-47719: iommufd: Protect against overflow of ALIGN() during iova allocation (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-47720: drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-47721: wifi: rtw89: remove unused C2H event ID RTW89_MAC_C2H_FUNC_READ_WOW_CAM to prevent out-of-bounds reading (Greg Kroah-Hartman <gregkh@...uxfoundat…)
CVE-2024-47705: block: fix potential invalid pointer dereference in blk_add_partition (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-47706: block, bfq: fix possible UAF for bfqq->bic with merge chain (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-47707: ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-47708: netkit: Assign missing bpf_net_context (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-47710: sock_map: Add a cond_resched() in sock_hash_free() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-47709: can: bcm: Clear bo->bcm_proc_read after remove_proc_entry(). (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-47712: wifi: wilc1000: fix potential RCU dereference issue in wilc_parse_join_bss_param (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-47711: af_unix: Don't return OOB skb in manage_oob(). (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-47703: bpf, lsm: Add check for BPF LSM return value (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-47722: xen: use correct end address of kernel for conflict checking (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52917: ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-47723: jfs: fix out-of-bounds in dbNextAG() and diAlloc() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-47724: wifi: ath11k: use work queue to process beacon tx event (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-47725: dm-verity: restart or panic on an I/O error (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-47727: x86/tdx: Fix "in-kernel MMIO" check (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-47736: erofs: handle overlapped pclusters out of crafted images properly (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-47737: nfsd: call cache_put if xdr_reserve_space returns NULL (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-47738: wifi: mac80211: don't use rate mask for offchannel TX either (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-47740: f2fs: Require FMODE_WRITE for atomic write ioctls (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-47739: padata: use integer wrap around to prevent deadlock on seq_nr overflow (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-47742: firmware_loader: Block path traversal (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-47741: btrfs: fix race setting file private on concurrent lseek using same fd (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-47743: KEYS: prevent NULL pointer dereference in find_asymmetric_key() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-47744: KVM: Use dedicated mutex to protect kvm_usage_count to avoid deadlock (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-47745: mm: call the security_mmap_file() LSM hook in remap_file_pages() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-47728: bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-47746: fuse: use exclusive lock when FUSE_I_CACHE_IO_MODE is set (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-47748: vhost_vdpa: assign irq bypass producer token correctly (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-47749: RDMA/cxgb4: Added NULL check for lookup_atid (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-47747: net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-47751: PCI: kirin: Fix buffer overflow in kirin_pcie_parse_port() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-47750: RDMA/hns: Fix Use-After-Free of rsv_qp on HIP08 (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-47752: media: mediatek: vcodec: Fix H264 stateless decoder smatch warning (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-47753: media: mediatek: vcodec: Fix VP8 stateless decoder smatch warning (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-47754: media: mediatek: vcodec: Fix H264 multi stateless decoder smatch warning (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-47755: nvdimm: Fix devs leaks in scan_labels() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-47756: PCI: keystone: Fix if-statement expression in ks_pcie_quirk() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-47757: nilfs2: fix potential oob read in nilfs_btree_check_delete() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-47729: drm/xe: Use reserved copy engine for user binds on faulting devices (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-47730: crypto: hisilicon/qm - inject error before stopping queue (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-47731: drivers/perf: Fix ali_drw_pmu driver interrupt status clearing (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-47732: crypto: iaa - Fix potential use after free bug (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-47733: netfs: Delete subtree of 'fs/netfs' when netfs module exits (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-47734: bonding: Fix unnecessary warnings and logs from bond_xdp_get_xmit_slave() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-47726: f2fs: fix to wait dio completion (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-47735: RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-49851: tpm: Clean up TPM space after command failure (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-49853: firmware: arm_scmi: Fix double free in OPTEE transport (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-49850: bpf: correctly handle malformed BPF_CORE_TYPE_ID_LOCAL relos (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-49852: scsi: elx: libefc: Fix potential use after free in efc_nport_vport_del() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-49854: block, bfq: fix uaf for accessing waker_bfqq after splitting (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-49856: x86/sgx: Fix deadlock in SGX NUMA node search (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-49855: nbd: fix race between timeout and normal completion (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-49857: wifi: iwlwifi: mvm: set the cipher for secured NDP ranging (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-49859: f2fs: fix to check atomic_file in f2fs ioctl interfaces (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-49860: ACPI: sysfs: validate return type of _STR method (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-49861: bpf: Fix helper writes to read-only maps (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-49862: powercap: intel_rapl: Fix off by one in get_rpi() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-49858: efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2024-47722: xen: use correct end address of kernel for conflict checking (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-49873: mm/filemap: fix filemap_get_folios_contig THP panic (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
285 more messages

October 22 (2 messages)

CVE-2023-52919: nfc: nci: fix possible NULL pointer dereference in send_acknowledge() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52918: media: pci: cx23885: check cx23885_vdev_init() return (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

October 23 (5 messages)

CVE-2024-50066: mm/mremap: fix move_normal_pmd/retract_page_tables race (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
Re: CVE-2024-47725: dm-verity: restart or panic on an I/O error (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2024-47725: dm-verity: restart or panic on an I/O error (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2024-47755: nvdimm: Fix devs leaks in scan_labels() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2022-48993: fbcon: Use kzalloc() in fbcon_prepare_logo() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

October 28 (1 message)

CVE-2024-50067: uprobe: avoid out-of-bounds memory access of fetching args (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

October 29 (22 messages)

CVE-2024-50069: pinctrl: apple: check devm_kasprintf() returned value (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50078: Bluetooth: Call iso_exit() on module unload (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50068: mm/damon/tests/sysfs-kunit.h: fix memory leak in damon_sysfs_test_add_targets() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50071: pinctrl: nuvoton: fix a double free in ma35_pinctrl_dt_node_to_map_func() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50072: x86/bugs: Use code segment selector for VERW operand (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50073: tty: n_gsm: Fix use-after-free in gsm_cleanup_mux (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50070: pinctrl: stm32: check devm_kasprintf() returned value (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50075: xhci: tegra: fix checked USB2 port number (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50074: parport: Proper fix for array out-of-bounds access (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50076: vt: prevent kernel-infoleak in con_font_get() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50077: Bluetooth: ISO: Fix multiple init when debugfs is disabled (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50080: ublk: don't allow user copy for unprivileged device (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50081: blk-mq: setup queue ->tag_set before initializing hctx (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50083: tcp: fix mptcp DSS corruption due to large pmtu xmit (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50084: net: microchip: vcap api: Fix memory leaks in vcap_api_encode_rule_test() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50082: blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50086: ksmbd: fix user-after-free from session log off (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50087: btrfs: fix uninitialized pointer free on read_alloc_one_name() error (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50079: io_uring/sqpoll: ensure task state is TASK_RUNNING when running task_work (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50085: mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50088: btrfs: fix uninitialized pointer free in add_inode_ref() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2024-43885: btrfs: fix double inode unlock for direct IO sync writes (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

438 messages

Powered by blists - more mailing lists