linux-cve-announce mailing list - 2024/11

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [year] [list]

linux-cve-announce mailing list - 2024/11

Mon	Tue	Wed	Thu	Fri	Sat	Sun
				¹	²	³
⁴	⁵ 51	⁶	⁷ 34	⁸ 30	⁹ 52	¹⁰ 2
¹¹ 3	¹²	¹³	¹⁴	¹⁵	¹⁶	¹⁷
¹⁸	¹⁹	²⁰	²¹	²²	²³	²⁴
²⁵	²⁶	²⁷	²⁸	²⁹	³⁰

Messages by day:

November 5 (51 messages)

CVE-2023-52920: bpf: support non-r10 register spill/fill to/from stack in precision tracking (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50090: drm/xe/oa: Fix overflow in oa batch buffer (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50089: unicode: Don't special case ignorable code points (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50091: dm vdo: don't refer to dedupe_context after releasing it (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50092: net: netconsole: fix wrong warning (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50093: thermal: intel: int340x: processor: Fix warning during module unload (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50094: sfc: Don't invoke xdp_do_flush() from netpoll. (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50095: RDMA/mad: Improve handling of timed out WRs of mad agent (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50096: nouveau/dmem: Fix vulnerability in migrate_to_ram upon copy error (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50097: net: fec: don't save PTP state if PTP is unsupported (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50099: arm64: probes: Remove broken LDR (literal) uprobe support (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50098: scsi: ufs: core: Set SDEV_OFFLINE when UFS is shut down (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50100: USB: gadget: dummy-hcd: Fix "task hung" problem (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50101: iommu/vt-d: Fix incorrect pci_for_each_dma_alias() for non-PCI devices (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50102: x86: fix user address masking non-canonical speculation issue (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50103: ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50113: firewire: core: fix invalid port index for parent device (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50112: x86/lam: Disable ADDRESS_MASKING in most cases (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50114: KVM: arm64: Unregister redistributor for failed vCPU creation (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50115: KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50116: nilfs2: fix kernel bug due to missing clearing of buffer delay flag (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50117: drm/amd: Guard against bad data for ATIF ACPI method (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50118: btrfs: reject ro->rw reconfiguration if there are hard ro requirements (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50119: cifs: fix warning when destroy 'cifs_io_request_pool' (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50120: smb: client: Handle kstrdup failures for passwords (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50121: nfsd: cancel nfsd_shrinker_work using sync mode in nfs4_state_shutdown_net (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50104: ASoC: qcom: sdm845: add missing soundwire runtime stream alloc (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50122: PCI: Hold rescan lock while adding devices during host probe (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50124: Bluetooth: ISO: Fix UAF on iso_sock_timeout (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50123: bpf: Add the missing BPF_LINK_TYPE invocation for sockmap (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50125: Bluetooth: SCO: Fix UAF on sco_sock_timeout (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50126: net: sched: use RCU read-side critical section in taprio_dump() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50127: net: sched: fix use-after-free in taprio_change() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50109: md/raid10: fix null ptr dereference in raid10_size() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50105: ASoC: qcom: sc7280: Fix missing Soundwire runtime stream alloc (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50106: nfsd: fix race between laundromat and free_stateid (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50107: platform/x86/intel/pmc: Fix pmc_core_iounmap to call iounmap for valid addresses (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50108: drm/amd/display: Disable PSR-SU on Parade 08-01 TCON too (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50110: xfrm: fix one more kernel-infoleak in algo dumping (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50111: LoongArch: Enable IRQ if do_ale() triggered in irq-enabled context (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50129: net: pse-pd: Fix out of bound for loop (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50138: bpf: Use raw_spinlock_t in ringbuf (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50130: netfilter: bpf: must hold reference on net namespace (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50131: tracing: Consider the NULL character when validating the event length (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50132: tracing/probes: Fix MAX_TRACE_ARGS limit handling (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50133: LoongArch: Don't crash in stack_top() for tasks without vDSO (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50134: drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50135: nvme-pci: fix race condition between reset and nvme_dev_disable() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50136: net/mlx5: Unregister notifier on eswitch init failure (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50137: reset: starfive: jh71x0: Fix accessing the empty member on JH7110 SoC (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50128: net: wwan: fix global oob in wwan_rtnl_policy (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

November 7 (34 messages)

CVE-2024-50140: sched/core: Disable page allocation in task_tick_mm_cid() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50139: KVM: arm64: Fix shift-out-of-bounds bug (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50149: drm/xe: Don't free job in TDR (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50150: usb: typec: altmode should keep reference to parent (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50151: smb: client: fix OOBs when building SMB2_IOCTL request (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50152: smb: client: fix possible double free in smb2_set_ea() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50153: scsi: target: core: Fix null-ptr-deref in target_alloc_device() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50154: tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50142: xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50143: udf: fix uninit-value use in udf_get_fileshortad (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50141: ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50144: drm/xe: fix unbalanced rpm put() with fence_fini() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50145: octeon_ep: Add SKB allocation failures handling in __octep_oq_process_rx() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50146: net/mlx5e: Don't call cleanup on profile rollback failure (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50147: net/mlx5: Fix command bitmask initialization (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50148: Bluetooth: bnep: fix wild-memory-access in proto_unregister (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50156: drm/msm: Avoid NULL dereference in msm_disp_state_print_regs() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50165: bpf: Preserve param->string when parsing mount options (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50166: fsl/fman: Fix refcount handling of fman-related devices (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50168: net/sun3_82586: fix potential memory leak in sun3_82586_send_packet() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50167: be2net: fix potential memory leak in be_xmit() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50169: vsock: Update rx_bytes on read_skb() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50171: net: systemport: fix potential memory leak in bcm_sysport_xmit() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50157: RDMA/bnxt_re: Avoid CPU lockups due fifo occupancy check loop (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50170: net: bcmasp: fix potential memory leak in bcmasp_xmit() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50158: RDMA/bnxt_re: Fix out of bound check (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50159: firmware: arm_scmi: Fix the double free in scmi_debugfs_common_setup() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50172: RDMA/bnxt_re: Fix a possible memory leak (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50161: bpf: Check the remaining info_cnt before repeating btf fields (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50160: ALSA: hda/cs8409: Fix possible NULL dereference (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50162: bpf: devmap: provide rxq after redirect (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50163: bpf: Make sure internal and UAPI bpf_redirect flags don't overlap (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50164: bpf: Fix overloading of MEM_UNINIT's meaning (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50155: netdevsim: use cond_resched() in nsim_dev_trap_report_work() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

November 8 (30 messages)

CVE-2024-50174: drm/panthor: Fix race when converting group handle to group object (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50173: drm/panthor: Fix access to uninitialized variable in tick_ctx_cleanup() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50175: media: qcom: camss: Remove use_count guard in stop_streaming (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50176: remoteproc: k3-r5: Fix error handling when power-up failed (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50177: drm/amd/display: fix a UBSAN warning in DML2.1 (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50178: cpufreq: loongson3: Use raw_smp_processor_id() in do_service_request() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50179: ceph: remove the incorrect Fw reference check when dirtying pages (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50181: clk: imx: Remove CLK_SET_PARENT_GATE for DRAM mux for i.MX7D (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50180: fbdev: sisfb: Fix strbuf array overflow (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50182: secretmem: disable memfd_secret() if arch cannot set direct map (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50183: scsi: lpfc: Ensure DA_ID handling completion before deleting an NPIV instance (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50184: virtio_pmem: Check device status before requesting flush (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50185: mptcp: handle consistently DSS corruption (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50186: net: explicitly clear the sk pointer, when pf->create fails (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50187: drm/vc4: Stop the active perfmon before being destroyed (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50188: net: phy: dp83869: fix memory corruption when enabling fiber (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50190: ice: fix memleak in ice_init_tx_topology() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50189: HID: amd_sfh: Switch to device-managed dmam_alloc_coherent() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50191: ext4: don't set SB_RDONLY after filesystem errors (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50202: nilfs2: propagate directory read errors from nilfs_find_entry() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50201: drm/radeon: Fix encoder->possible_clones (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50204: fs: don't try and remove empty rbtree node (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50203: bpf, arm64: Fix address emission with tag-based KASAN enabled (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50205: ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50206: net: ethernet: mtk_eth_soc: fix memory corruption during fq dma init (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50207: ring-buffer: Fix reader locking when changing the sub buffer order (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50208: RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50209: RDMA/bnxt_re: Add a check for memory allocation (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50210: posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50211: udf: refactor inode_bmap() to handle error (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

November 9 (52 messages)

REJECTED: CVE-2024-44952: driver core: Fix uevent_show() vs driver detach race (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50213: drm/tests: hdmi: Fix memory leaks in drm_display_mode_from_cea_vic() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50212: lib: alloc_tag_module_unload must wait for pending kfree_rcu calls (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50222: iov_iter: fix copy_page_from_iter_atomic() if KMAP_LOCAL_FORCE_MAP (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50223: sched/numa: Fix the potential null pointer dereference in task_numa_work() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50224: spi: spi-fsl-dspi: Fix crash when not using GPIO chip select (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50225: btrfs: fix error propagation of split bios (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50214: drm/connector: hdmi: Fix memory leak in drm_display_mode_from_cea_vic() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50216: xfs: fix finding a last resort AG in xfs_filestream_pick_ag (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50215: nvmet-auth: assign dh_key to NULL after kfree_sensitive (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50217: btrfs: fix use-after-free of block device file in __btrfs_free_extra_devids() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50218: ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50219: mm/page_alloc: let GFP_ATOMIC order-0 allocs access highatomic reserves (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50220: fork: do not invoke uffd on fork if error occurs (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50221: drm/amd/pm: Vangogh: Fix kernel memory out of bounds write (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50227: thunderbolt: Fix KASAN reported stack out-of-bounds read in tb_retimer_scan() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50236: wifi: ath10k: Fix memory leak in management tx (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50237: wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50238: phy: qcom: qmp-usbc: fix NULL-deref on runtime suspend (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50239: phy: qcom: qmp-usb-legacy: fix NULL-deref on runtime suspend (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50240: phy: qcom: qmp-usb: fix NULL-deref on runtime suspend (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50241: NFSD: Initialize struct nfsd4_copy earlier (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50242: fs/ntfs3: Additional check in ntfs_file_release (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50243: fs/ntfs3: Fix general protection fault in run_is_mapped_full (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50244: fs/ntfs3: Additional check in ni_clear() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50245: fs/ntfs3: Fix possible deadlock in mi_read (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50228: mm: shmem: fix data-race in shmem_getattr() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50246: fs/ntfs3: Add rough attr alloc_size check (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50247: fs/ntfs3: Check if more than chunk-size bytes are written (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50248: ntfs3: Add bounds checking to mi_enum_attr() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50249: ACPI: CPPC: Make rmw_lock a raw_spin_lock (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50250: fsdax: dax_unshare_iter needs to copy entire blocks (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50251: netfilter: nft_payload: sanitize offset and length before calling skb_checksum() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50252: mlxsw: spectrum_ipip: Fix memory leak when changing remote IPv6 address (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50254: bpf: Free dynamically allocated bits in bpf_iter_bits_destroy() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50253: bpf: Check the validity of nr_words in bpf_iter_bits_new() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50255: Bluetooth: hci: fix null-ptr-deref in hci_read_supported_codecs (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50229: nilfs2: fix potential deadlock with newly created symlinks (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50256: netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50257: netfilter: Fix use-after-free in get_info() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50258: net: fix crash when config small gso_max_size/gso_ipv4_max_size (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50230: nilfs2: fix kernel bug due to missing clearing of checked flag (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50231: iio: gts-helper: Fix memory leaks in iio_gts_build_avail_scale_table() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50232: iio: adc: ad7124: fix division by zero in ad7124_set_channel_odr() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50233: staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50235: wifi: cfg80211: clear wdev->cqm_config pointer on free (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50234: wifi: iwlegacy: Clear stale interrupts before resuming device (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50226: cxl/port: Fix use-after-free, permit out-of-order decoder shutdown (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50260: sock_map: fix a NULL pointer dereference in sock_map_link_update_prog() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50261: macsec: Fix use-after-free while sending the offloading packet (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50259: netdevsim: Add trailing zero to terminate the string in nsim_nexthop_bucket_activity_write() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50262: bpf: Fix out-of-bounds write in trie_get_next_key() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

November 10 (2 messages)

REJECTED: CVE-2024-49993: iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
Re: CVE-2024-49993: iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count (Greg KH <gregkh@...uxfoundation.org>)

November 11 (3 messages)

CVE-2024-50263: fork: only invoke khugepaged, ksm hooks if no error (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
Re: CVE-2024-50219: mm/page_alloc: let GFP_ATOMIC order-0 allocs access highatomic reserves (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2024-50219: mm/page_alloc: let GFP_ATOMIC order-0 allocs access highatomic reserves (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

172 messages

Powered by blists - more mailing lists