linux-cve-announce mailing list - 2024/12

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [year] [list]

linux-cve-announce mailing list - 2024/12

Mon	Tue	Wed	Thu	Fri	Sat	Sun
						¹
² 22	³ 1	⁴ 16	⁵ 1	⁶ 2	⁷ 1	⁸
⁹	¹⁰	¹¹	¹² 4	¹³	¹⁴	¹⁵
¹⁶	¹⁷ 2	¹⁸ 1	¹⁹ 12	²⁰	²¹	²²
²³	²⁴	²⁵	²⁶	²⁷	²⁸	²⁹
³⁰	³¹

Messages by day:

December 2 (22 messages)

CVE-2024-53104: media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53103: hv_sock: Initializing vsk->trans to NULL to prevent a dangling pointer (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53105: mm: page_alloc: move mlocked flag clearance into free_pages_prepare() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53116: drm/panthor: Fix handling of partial GPU mapping of BOs (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53117: virtio/vsock: Improve MSG_ZEROCOPY error handling (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53119: virtio/vsock: Fix accept_queue memory leak (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53123: mptcp: error out earlier on disconnect (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53120: net/mlx5e: CT: Fix null-ptr-deref in add rule err flow (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53121: net/mlx5: fs, lock FTE when checking if active (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53122: mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53124: net: fix data-races around sk->sk_forward_alloc (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53109: nommu: pass NULL argument to vma_iter_prealloc() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53111: mm/mremap: fix address wraparound in move_page_tables() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53114: x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53107: fs/proc/task_mmu: prevent integer overflow in pagemap_scan_get_args() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53106: ima: fix buffer overrun in ima_eventdigest_init_common (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53108: drm/amd/display: Adjust VSDB parser for replay feature (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53110: vp_vdpa: fix id_table array not null terminated error (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53113: mm: fix NULL pointer dereference in alloc_pages_bulk_noprof (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53118: vsock: Fix sk_error_queue memory leak (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53112: ocfs2: uncache inode which has failed entering the group (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53115: drm/vmwgfx: avoid null_ptr_deref in vmw_framebuffer_surface_create_handle (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

December 3 (1 message)

Re: Possible wrong fix patch for some stable branches (Greg KH <gregkh@...uxfoundation.org>)

December 4 (16 messages)

CVE-2024-53125: bpf: sync_linked_regs() must preserve subreg_def (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53126: vdpa: solidrun: Fix UB bug with devres (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53139: sctp: fix possible UAF in sctp_v6_available() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53140: netlink: terminate outstanding dump on socket close (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53129: drm/rockchip: vop: Fix a dereferenced before check warning (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53131: nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53136: mm: revert "mm: shmem: fix data-race in shmem_getattr()" (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53137: ARM: fix cacheflush with PAN (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53128: sched/task_stack: fix object_is_on_stack() for KASAN tagged pointers (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53132: drm/xe/oa: Fix "Missing outer runtime PM protection" warning (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53134: pmdomain: imx93-blk-ctrl: correct remove path (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53135: KVM: VMX: Bury Intel PT virtualization (guest/host mode) behind CONFIG_BROKEN (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53130: nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53133: drm/amd/display: Handle dml allocation failure to avoid crash (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53127: Revert "mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K" (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53138: net/mlx5e: kTLS, Fix incorrect page refcounting (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

December 5 (1 message)

REJECTED: CVE-2021-47488: cgroup: Fix memory leak caused by missing cgroup_bpf_offline (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

December 6 (2 messages)

CVE-2024-53142: initramfs: avoid filename buffer overrun (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53141: netfilter: ipset: add missing range check in bitmap_ip_uadt (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

December 7 (1 message)

CVE-2024-53143: fsnotify: Fix ordering of iput() and watched_objects decrement (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

December 12 (4 messages)

REJECTED: CVE-2024-50018: net: napi: Prevent overflow of napi_defer_hard_irqs (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2024-50089: unicode: Don't special case ignorable code points (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
Re: CVE-2024-53102: nvme: make keep-alive synchronous operation (Greg KH <gregkh@...uxfoundation.org>)
REJECTED: CVE-2024-53102: nvme: make keep-alive synchronous operation (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

December 17 (2 messages)

CVE-2024-53144: Bluetooth: hci_event: Align BR/EDR JUST_WORKS paring with LE (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
Re: CVE-2024-50106: nfsd: fix race between laundromat and free_stateid (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

December 18 (1 message)

Re: CVE-2024-53144: Bluetooth: hci_event: Align BR/EDR JUST_WORKS paring with LE (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

December 19 (12 messages)

REJECTED: CVE-2021-47615: RDMA/mlx5: Fix releasing unallocated memory in dereg MR flow (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2022-48700: vfio/type1: Unpin zero pages (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2023-52759: gfs2: ignore negated quota changes (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2024-26713: powerpc/pseries/iommu: Fix iommu initialisation during DLPAR add (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2024-26720: mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2024-26972: ubifs: ubifs_symlink: Fix memleak of inode->i_link in error path (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2024-35928: drm/amd/amdgpu: Fix potential ioremap() memory leaks in amdgpu_device_init() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2024-36885: drm/nouveau/firmware: Fix SG_DEBUG error with nvkm_firmware_ctor() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2024-41024: misc: fastrpc: Restrict untrusted app to attach to privileged PD (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2024-42116: igc: fix a log entry using uninitialized netdev (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2024-43903: drm/amd/display: Add NULL check for 'afb' before dereferencing in amdgpu_dm_plane_handle_curso… (Greg Kroah-Hartman <gregkh@...uxfoundat…)
REJECTED: CVE-2024-26848: afs: Fix endless loop in directory parsing (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

62 messages

Powered by blists - more mailing lists