linux-cve-announce mailing list - 2024/11

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

linux-cve-announce mailing list - 2024/11

Mon	Tue	Wed	Thu	Fri	Sat	Sun
				¹	²	³
⁴	⁵ 51	⁶	⁷ 34	⁸ 30	⁹ 52	¹⁰ 2
¹¹ 3	¹²	¹³	¹⁴	¹⁵	¹⁶	¹⁷
¹⁸	¹⁹ 91	²⁰	²¹ 7	²²	²³	²⁴
²⁵ 8	²⁶	²⁷	²⁸ 5	²⁹	³⁰

Messages by day:

November 5 (51 messages)

CVE-2023-52920: bpf: support non-r10 register spill/fill to/from stack in precision tracking (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50090: drm/xe/oa: Fix overflow in oa batch buffer (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50089: unicode: Don't special case ignorable code points (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50091: dm vdo: don't refer to dedupe_context after releasing it (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50092: net: netconsole: fix wrong warning (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50093: thermal: intel: int340x: processor: Fix warning during module unload (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50094: sfc: Don't invoke xdp_do_flush() from netpoll. (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50095: RDMA/mad: Improve handling of timed out WRs of mad agent (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50096: nouveau/dmem: Fix vulnerability in migrate_to_ram upon copy error (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50097: net: fec: don't save PTP state if PTP is unsupported (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50099: arm64: probes: Remove broken LDR (literal) uprobe support (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50098: scsi: ufs: core: Set SDEV_OFFLINE when UFS is shut down (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50100: USB: gadget: dummy-hcd: Fix "task hung" problem (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50101: iommu/vt-d: Fix incorrect pci_for_each_dma_alias() for non-PCI devices (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50102: x86: fix user address masking non-canonical speculation issue (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50103: ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50113: firewire: core: fix invalid port index for parent device (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50112: x86/lam: Disable ADDRESS_MASKING in most cases (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50114: KVM: arm64: Unregister redistributor for failed vCPU creation (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50115: KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50116: nilfs2: fix kernel bug due to missing clearing of buffer delay flag (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50117: drm/amd: Guard against bad data for ATIF ACPI method (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50118: btrfs: reject ro->rw reconfiguration if there are hard ro requirements (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50119: cifs: fix warning when destroy 'cifs_io_request_pool' (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50120: smb: client: Handle kstrdup failures for passwords (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50121: nfsd: cancel nfsd_shrinker_work using sync mode in nfs4_state_shutdown_net (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50104: ASoC: qcom: sdm845: add missing soundwire runtime stream alloc (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50122: PCI: Hold rescan lock while adding devices during host probe (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50124: Bluetooth: ISO: Fix UAF on iso_sock_timeout (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50123: bpf: Add the missing BPF_LINK_TYPE invocation for sockmap (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50125: Bluetooth: SCO: Fix UAF on sco_sock_timeout (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50126: net: sched: use RCU read-side critical section in taprio_dump() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50127: net: sched: fix use-after-free in taprio_change() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50109: md/raid10: fix null ptr dereference in raid10_size() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50105: ASoC: qcom: sc7280: Fix missing Soundwire runtime stream alloc (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50106: nfsd: fix race between laundromat and free_stateid (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50107: platform/x86/intel/pmc: Fix pmc_core_iounmap to call iounmap for valid addresses (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50108: drm/amd/display: Disable PSR-SU on Parade 08-01 TCON too (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50110: xfrm: fix one more kernel-infoleak in algo dumping (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50111: LoongArch: Enable IRQ if do_ale() triggered in irq-enabled context (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50129: net: pse-pd: Fix out of bound for loop (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50138: bpf: Use raw_spinlock_t in ringbuf (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50130: netfilter: bpf: must hold reference on net namespace (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50131: tracing: Consider the NULL character when validating the event length (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50132: tracing/probes: Fix MAX_TRACE_ARGS limit handling (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50133: LoongArch: Don't crash in stack_top() for tasks without vDSO (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50134: drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50135: nvme-pci: fix race condition between reset and nvme_dev_disable() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50136: net/mlx5: Unregister notifier on eswitch init failure (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50137: reset: starfive: jh71x0: Fix accessing the empty member on JH7110 SoC (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50128: net: wwan: fix global oob in wwan_rtnl_policy (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

November 7 (34 messages)

CVE-2024-50140: sched/core: Disable page allocation in task_tick_mm_cid() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50139: KVM: arm64: Fix shift-out-of-bounds bug (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50149: drm/xe: Don't free job in TDR (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50150: usb: typec: altmode should keep reference to parent (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50151: smb: client: fix OOBs when building SMB2_IOCTL request (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50152: smb: client: fix possible double free in smb2_set_ea() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50153: scsi: target: core: Fix null-ptr-deref in target_alloc_device() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50154: tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50142: xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50143: udf: fix uninit-value use in udf_get_fileshortad (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50141: ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50144: drm/xe: fix unbalanced rpm put() with fence_fini() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50145: octeon_ep: Add SKB allocation failures handling in __octep_oq_process_rx() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50146: net/mlx5e: Don't call cleanup on profile rollback failure (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50147: net/mlx5: Fix command bitmask initialization (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50148: Bluetooth: bnep: fix wild-memory-access in proto_unregister (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50156: drm/msm: Avoid NULL dereference in msm_disp_state_print_regs() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50165: bpf: Preserve param->string when parsing mount options (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50166: fsl/fman: Fix refcount handling of fman-related devices (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50168: net/sun3_82586: fix potential memory leak in sun3_82586_send_packet() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50167: be2net: fix potential memory leak in be_xmit() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50169: vsock: Update rx_bytes on read_skb() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50171: net: systemport: fix potential memory leak in bcm_sysport_xmit() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50157: RDMA/bnxt_re: Avoid CPU lockups due fifo occupancy check loop (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50170: net: bcmasp: fix potential memory leak in bcmasp_xmit() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50158: RDMA/bnxt_re: Fix out of bound check (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50159: firmware: arm_scmi: Fix the double free in scmi_debugfs_common_setup() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50172: RDMA/bnxt_re: Fix a possible memory leak (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50161: bpf: Check the remaining info_cnt before repeating btf fields (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50160: ALSA: hda/cs8409: Fix possible NULL dereference (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50162: bpf: devmap: provide rxq after redirect (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50163: bpf: Make sure internal and UAPI bpf_redirect flags don't overlap (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50164: bpf: Fix overloading of MEM_UNINIT's meaning (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50155: netdevsim: use cond_resched() in nsim_dev_trap_report_work() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

November 8 (30 messages)

CVE-2024-50174: drm/panthor: Fix race when converting group handle to group object (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50173: drm/panthor: Fix access to uninitialized variable in tick_ctx_cleanup() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50175: media: qcom: camss: Remove use_count guard in stop_streaming (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50176: remoteproc: k3-r5: Fix error handling when power-up failed (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50177: drm/amd/display: fix a UBSAN warning in DML2.1 (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50178: cpufreq: loongson3: Use raw_smp_processor_id() in do_service_request() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50179: ceph: remove the incorrect Fw reference check when dirtying pages (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50181: clk: imx: Remove CLK_SET_PARENT_GATE for DRAM mux for i.MX7D (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50180: fbdev: sisfb: Fix strbuf array overflow (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50182: secretmem: disable memfd_secret() if arch cannot set direct map (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50183: scsi: lpfc: Ensure DA_ID handling completion before deleting an NPIV instance (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50184: virtio_pmem: Check device status before requesting flush (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50185: mptcp: handle consistently DSS corruption (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50186: net: explicitly clear the sk pointer, when pf->create fails (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50187: drm/vc4: Stop the active perfmon before being destroyed (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50188: net: phy: dp83869: fix memory corruption when enabling fiber (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50190: ice: fix memleak in ice_init_tx_topology() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50189: HID: amd_sfh: Switch to device-managed dmam_alloc_coherent() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50191: ext4: don't set SB_RDONLY after filesystem errors (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50202: nilfs2: propagate directory read errors from nilfs_find_entry() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50201: drm/radeon: Fix encoder->possible_clones (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50204: fs: don't try and remove empty rbtree node (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50203: bpf, arm64: Fix address emission with tag-based KASAN enabled (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50205: ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50206: net: ethernet: mtk_eth_soc: fix memory corruption during fq dma init (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50207: ring-buffer: Fix reader locking when changing the sub buffer order (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50208: RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50209: RDMA/bnxt_re: Add a check for memory allocation (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50210: posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50211: udf: refactor inode_bmap() to handle error (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

November 9 (52 messages)

REJECTED: CVE-2024-44952: driver core: Fix uevent_show() vs driver detach race (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50213: drm/tests: hdmi: Fix memory leaks in drm_display_mode_from_cea_vic() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50212: lib: alloc_tag_module_unload must wait for pending kfree_rcu calls (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50222: iov_iter: fix copy_page_from_iter_atomic() if KMAP_LOCAL_FORCE_MAP (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50223: sched/numa: Fix the potential null pointer dereference in task_numa_work() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50224: spi: spi-fsl-dspi: Fix crash when not using GPIO chip select (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50225: btrfs: fix error propagation of split bios (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50214: drm/connector: hdmi: Fix memory leak in drm_display_mode_from_cea_vic() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50216: xfs: fix finding a last resort AG in xfs_filestream_pick_ag (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50215: nvmet-auth: assign dh_key to NULL after kfree_sensitive (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50217: btrfs: fix use-after-free of block device file in __btrfs_free_extra_devids() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50218: ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50219: mm/page_alloc: let GFP_ATOMIC order-0 allocs access highatomic reserves (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50220: fork: do not invoke uffd on fork if error occurs (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50221: drm/amd/pm: Vangogh: Fix kernel memory out of bounds write (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50227: thunderbolt: Fix KASAN reported stack out-of-bounds read in tb_retimer_scan() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50236: wifi: ath10k: Fix memory leak in management tx (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50237: wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50238: phy: qcom: qmp-usbc: fix NULL-deref on runtime suspend (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50239: phy: qcom: qmp-usb-legacy: fix NULL-deref on runtime suspend (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50240: phy: qcom: qmp-usb: fix NULL-deref on runtime suspend (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50241: NFSD: Initialize struct nfsd4_copy earlier (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50242: fs/ntfs3: Additional check in ntfs_file_release (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50243: fs/ntfs3: Fix general protection fault in run_is_mapped_full (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50244: fs/ntfs3: Additional check in ni_clear() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50245: fs/ntfs3: Fix possible deadlock in mi_read (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50228: mm: shmem: fix data-race in shmem_getattr() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50246: fs/ntfs3: Add rough attr alloc_size check (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50247: fs/ntfs3: Check if more than chunk-size bytes are written (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50248: ntfs3: Add bounds checking to mi_enum_attr() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50249: ACPI: CPPC: Make rmw_lock a raw_spin_lock (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50250: fsdax: dax_unshare_iter needs to copy entire blocks (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50251: netfilter: nft_payload: sanitize offset and length before calling skb_checksum() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50252: mlxsw: spectrum_ipip: Fix memory leak when changing remote IPv6 address (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50254: bpf: Free dynamically allocated bits in bpf_iter_bits_destroy() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50253: bpf: Check the validity of nr_words in bpf_iter_bits_new() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50255: Bluetooth: hci: fix null-ptr-deref in hci_read_supported_codecs (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50229: nilfs2: fix potential deadlock with newly created symlinks (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50256: netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50257: netfilter: Fix use-after-free in get_info() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50258: net: fix crash when config small gso_max_size/gso_ipv4_max_size (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50230: nilfs2: fix kernel bug due to missing clearing of checked flag (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50231: iio: gts-helper: Fix memory leaks in iio_gts_build_avail_scale_table() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50232: iio: adc: ad7124: fix division by zero in ad7124_set_channel_odr() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50233: staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50235: wifi: cfg80211: clear wdev->cqm_config pointer on free (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50234: wifi: iwlegacy: Clear stale interrupts before resuming device (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50226: cxl/port: Fix use-after-free, permit out-of-order decoder shutdown (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50260: sock_map: fix a NULL pointer dereference in sock_map_link_update_prog() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50261: macsec: Fix use-after-free while sending the offloading packet (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50259: netdevsim: Add trailing zero to terminate the string in nsim_nexthop_bucket_activity_write() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50262: bpf: Fix out-of-bounds write in trie_get_next_key() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

November 10 (2 messages)

REJECTED: CVE-2024-49993: iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
Re: CVE-2024-49993: iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count (Greg KH <gregkh@...uxfoundation.org>)

November 11 (3 messages)

CVE-2024-50263: fork: only invoke khugepaged, ksm hooks if no error (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
Re: CVE-2024-50219: mm/page_alloc: let GFP_ATOMIC order-0 allocs access highatomic reserves (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2024-50219: mm/page_alloc: let GFP_ATOMIC order-0 allocs access highatomic reserves (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

November 19 (91 messages)

CVE-2023-52921: drm/amdgpu: fix possible UAF in amdgpu_cs_pass1() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50265: ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50264: vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50267: USB: serial: io_edgeport: fix use after free in debug printk (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50266: clk: qcom: videocc-sm8350: use HW_CTRL_TRIGGER for vcodec GDSCs (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50274: idpf: avoid vport access in idpf_get_link_ksettings (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50268: usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50269: usb: musb: sunxi: Fix accessing an released usb phy (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50270: mm/damon/core: avoid overflow in damon_feed_loop_next_input() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50271: signal: restore the override_rlimit logic (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50272: filemap: Fix bounds checking in filemap_read() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50273: btrfs: reinitialize delayed ref list after deleting it from the list (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50276: net: vertexcom: mse102x: Fix possible double free of TX skb (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50285: ksmbd: check outstanding simultaneous SMB operations (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50286: ksmbd: fix slab-use-after-free in ksmbd_smb2_session_create (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50277: dm: fix a crash if blk_alloc_disk fails (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50287: media: v4l2-tpg: prevent the risk of a division by zero (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50278: dm cache: fix potential out-of-bounds access on the first resume (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50279: dm cache: fix out-of-bounds access to the dirty bitset when resizing (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50279: dm cache: fix out-of-bounds access to the dirty bitset when resizing (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50281: KEYS: trusted: dcp: fix NULL dereference in AEAD crypto operation (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50280: dm cache: fix flushing uninitialized delayed_work on cache_ctr error (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50282: drm/amdgpu: add missing size check in amdgpu_debugfs_gprwave_read() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50284: ksmbd: Fix the missing xa_store error check (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50275: arm64/sve: Discard stale CPU state when handling SVE traps (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50283: ksmbd: fix slab-use-after-free in smb3_preauth_hash_rsp (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50298: net: enetc: allocate vf_state during PF probes (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50289: media: av7110: fix a spectre vulnerability (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50290: media: cx24116: prevent overflows on SNR calculus (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50299: sctp: properly validate chunk size in sctp_sf_ootb() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50300: regulator: rtq2208: Fix uninitialized use of regulator_config (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50292: ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50293: net/smc: do not leave a dangling sk pointer in __smc_create() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50291: media: dvb-core: add missing buffer index check (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50295: net: arc: fix the device for dma_map_single/dma_unmap_single (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50294: rxrpc: Fix missing locking causing hanging calls (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50296: net: hns3: fix kernel crash when uninstalling driver (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50297: net: xilinx: axienet: Enqueue Tx packets in dql before dmaengine starts (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50288: media: vivid: fix buffer overwrite when using > 32 buffers (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50302: HID: core: zero-initialize the report buffer (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50301: security/keys: fix slab-out-of-bounds in key_task_permission (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50304: ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50303: resource,kexec: walk_system_ram_res_rev must retain resource flags (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53052: io_uring/rw: fix missing NOWAIT check for O_DIRECT start write (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53053: scsi: ufs: core: Fix another deadlock during RTC update (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53055: wifi: iwlwifi: mvm: fix 6 GHz scan construction (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53054: cgroup/bpf: use a dedicated workqueue for cgroup bpf destruction (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53056: drm/mediatek: Fix potential NULL dereference in mtk_crtc_destroy() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53057: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53058: net: stmmac: TSO: Fix unbalanced DMA map/unmap for non-paged SKB data (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53059: wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53044: net/sched: sch_api: fix xa_insert() error path in tcf_block_get_ext() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53046: arm64: dts: imx8ulp: correct the flexspi compatible string (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53047: mptcp: init: protect sched with rcu_read_lock (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53048: ice: fix crash on probe for DPLL enabled E810 LOM (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53042: ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_init_flow() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53043: mctp i2c: handle NULL header address (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53061: media: s5p-jpeg: prevent buffer overflows (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53070: usb: dwc3: fix fault at system suspend if device was already runtime suspended (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53071: drm/panthor: Be stricter about IO mapping flags (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53072: platform/x86/amd/pmc: Detect when STB is not available (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53062: media: mgb4: protect driver against spectre (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53063: media: dvbdev: prevent the risk of out of memory access (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53065: mm/slab: fix warning caused by duplicate kmem_cache creation in kmem_buckets_create (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53066: nfs: Fix KMSAN warning in decode_getfattr_attrs() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53068: firmware: arm_scmi: Fix slab-use-after-free in scmi_bus_notifier() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53060: drm/amdgpu: prevent NULL pointer dereference if ATIF is not supported (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53073: NFSD: Never decrement pending_async_copies on error (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53075: riscv: Prevent a bad reference count on CPU nodes (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53076: iio: gts-helper: Fix memory leaks for the error path of iio_gts_build_avail_scale_table() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53077: rpcrdma: Always release the rpcrdma_device's xa_array (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53078: drm/tegra: Fix NULL vs IS_ERR() check in probe() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53050: drm/i915/hdcp: Add encoder check in hdcp2_get_capability (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53051: drm/i915/hdcp: Add encoder check in intel_hdcp_get_capability (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53080: drm/panthor: Lock XArray when getting entries for the VM (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53079: mm/thp: fix deferred split unqueue naming and locking (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53082: virtio_net: Add hash_key_length check (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53083: usb: typec: qcom-pmic: init value of hdr_len/txbuf_len earlier (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53084: drm/imagination: Break an object reference loop (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53086: drm/xe: Drop VM dma-resv lock on xe_sync_in_fence_get failure in exec IOCTL (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53087: drm/xe: Fix possible exec queue leak in exec IOCTL (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53088: i40e: fix race condition by adding filter's intermediate sync state (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53049: slub/kunit: fix a WARNING due to unwrapped __kmalloc_cache_noprof (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53074: wifi: iwlwifi: mvm: don't leak a link on AP removal (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53055: wifi: iwlwifi: mvm: fix 6 GHz scan construction (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53045: ASoC: dapm: fix bounds checker error in dapm_widget_list_create (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53069: firmware: qcom: scm: fix a NULL-pointer dereference (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53064: idpf: fix idpf_vc_core_init error path (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53067: scsi: ufs: core: Start the RTC update work later (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53081: media: ar0521: don't overflow when checking PLL values (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53085: tpm: Lock TPM chip in tpm_pm_suspend() first (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

November 21 (7 messages)

CVE-2024-53090: afs: Fix lock recursion (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53089: LoongArch: KVM: Mark hrtimer to expire in hard interrupt context (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53091: bpf: Add sk_is_inet and IS_ICSK check in tls_sw_has_ctx_tx/rx (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53092: virtio_pci: Fix admin vq cleanup by using correct info pointer (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53093: nvme-multipath: defer partition scanning (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53094: RDMA/siw: Add sendpage_ok() check to disable MSG_SPLICE_PAGES (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53095: smb: client: Fix use-after-free of network namespace. (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

November 25 (8 messages)

Re: CVE-2024-50228: mm: shmem: fix data-race in shmem_getattr() (Greg KH <gregkh@...uxfoundation.org>)
CVE-2024-53096: mm: resolve faulty mmap_region() error path behaviour (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53098: drm/xe/ufence: Prefetch ufence addr to catch bogus address (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53097: mm: krealloc: Fix MTE false alarm in __do_krealloc (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53101: fs: Fix uninitialized value issue in from_kuid and from_kgid (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53102: nvme: make keep-alive synchronous operation (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53099: bpf: Check validity of link->type in bpf_link_show_fdinfo() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53100: nvme: tcp: avoid race between queue_lock lock and destroy (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

November 28 (5 messages)

CVE-2023-52922: can: bcm: Fix UAF in bcm_proc_show() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2024-53054: cgroup/bpf: use a dedicated workqueue for cgroup bpf destruction (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
Re: CVE-2024-53054: cgroup/bpf: use a dedicated workqueue for cgroup bpf destruction (Greg KH <gregkh@...uxfoundation.org>)
REJECTED: CVE-2024-50228: mm: shmem: fix data-race in shmem_getattr() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
Re: CVE-2024-50228: mm: shmem: fix data-race in shmem_getattr() (Greg KH <gregkh@...uxfoundation.org>)

283 messages

Powered by blists - more mailing lists