linux-cve-announce mailing list - 2024/12

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

linux-cve-announce mailing list - 2024/12

Mon	Tue	Wed	Thu	Fri	Sat	Sun
						¹
² 22	³ 1	⁴ 16	⁵ 1	⁶ 2	⁷ 1	⁸
⁹	¹⁰	¹¹	¹² 4	¹³	¹⁴	¹⁵
¹⁶	¹⁷ 2	¹⁸ 1	¹⁹ 12	²⁰	²¹	²²
²³	²⁴ 21	²⁵	²⁶	²⁷ 222	²⁸ 33	²⁹ 41
³⁰ 2	³¹

Messages by day:

December 2 (22 messages)

CVE-2024-53104: media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53103: hv_sock: Initializing vsk->trans to NULL to prevent a dangling pointer (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53105: mm: page_alloc: move mlocked flag clearance into free_pages_prepare() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53116: drm/panthor: Fix handling of partial GPU mapping of BOs (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53117: virtio/vsock: Improve MSG_ZEROCOPY error handling (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53119: virtio/vsock: Fix accept_queue memory leak (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53123: mptcp: error out earlier on disconnect (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53120: net/mlx5e: CT: Fix null-ptr-deref in add rule err flow (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53121: net/mlx5: fs, lock FTE when checking if active (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53122: mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53124: net: fix data-races around sk->sk_forward_alloc (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53109: nommu: pass NULL argument to vma_iter_prealloc() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53111: mm/mremap: fix address wraparound in move_page_tables() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53114: x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53107: fs/proc/task_mmu: prevent integer overflow in pagemap_scan_get_args() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53106: ima: fix buffer overrun in ima_eventdigest_init_common (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53108: drm/amd/display: Adjust VSDB parser for replay feature (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53110: vp_vdpa: fix id_table array not null terminated error (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53113: mm: fix NULL pointer dereference in alloc_pages_bulk_noprof (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53118: vsock: Fix sk_error_queue memory leak (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53112: ocfs2: uncache inode which has failed entering the group (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53115: drm/vmwgfx: avoid null_ptr_deref in vmw_framebuffer_surface_create_handle (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

December 3 (1 message)

Re: Possible wrong fix patch for some stable branches (Greg KH <gregkh@...uxfoundation.org>)

December 4 (16 messages)

CVE-2024-53125: bpf: sync_linked_regs() must preserve subreg_def (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53126: vdpa: solidrun: Fix UB bug with devres (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53139: sctp: fix possible UAF in sctp_v6_available() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53140: netlink: terminate outstanding dump on socket close (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53129: drm/rockchip: vop: Fix a dereferenced before check warning (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53131: nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53136: mm: revert "mm: shmem: fix data-race in shmem_getattr()" (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53137: ARM: fix cacheflush with PAN (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53128: sched/task_stack: fix object_is_on_stack() for KASAN tagged pointers (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53132: drm/xe/oa: Fix "Missing outer runtime PM protection" warning (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53134: pmdomain: imx93-blk-ctrl: correct remove path (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53135: KVM: VMX: Bury Intel PT virtualization (guest/host mode) behind CONFIG_BROKEN (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53130: nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53133: drm/amd/display: Handle dml allocation failure to avoid crash (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53127: Revert "mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K" (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53138: net/mlx5e: kTLS, Fix incorrect page refcounting (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

December 5 (1 message)

REJECTED: CVE-2021-47488: cgroup: Fix memory leak caused by missing cgroup_bpf_offline (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

December 6 (2 messages)

CVE-2024-53142: initramfs: avoid filename buffer overrun (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53141: netfilter: ipset: add missing range check in bitmap_ip_uadt (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

December 7 (1 message)

CVE-2024-53143: fsnotify: Fix ordering of iput() and watched_objects decrement (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

December 12 (4 messages)

REJECTED: CVE-2024-50018: net: napi: Prevent overflow of napi_defer_hard_irqs (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2024-50089: unicode: Don't special case ignorable code points (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
Re: CVE-2024-53102: nvme: make keep-alive synchronous operation (Greg KH <gregkh@...uxfoundation.org>)
REJECTED: CVE-2024-53102: nvme: make keep-alive synchronous operation (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

December 17 (2 messages)

CVE-2024-53144: Bluetooth: hci_event: Align BR/EDR JUST_WORKS paring with LE (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
Re: CVE-2024-50106: nfsd: fix race between laundromat and free_stateid (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

December 18 (1 message)

Re: CVE-2024-53144: Bluetooth: hci_event: Align BR/EDR JUST_WORKS paring with LE (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

December 19 (12 messages)

REJECTED: CVE-2021-47615: RDMA/mlx5: Fix releasing unallocated memory in dereg MR flow (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2022-48700: vfio/type1: Unpin zero pages (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2023-52759: gfs2: ignore negated quota changes (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2024-26713: powerpc/pseries/iommu: Fix iommu initialisation during DLPAR add (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2024-26720: mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2024-26972: ubifs: ubifs_symlink: Fix memleak of inode->i_link in error path (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2024-35928: drm/amd/amdgpu: Fix potential ioremap() memory leaks in amdgpu_device_init() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2024-36885: drm/nouveau/firmware: Fix SG_DEBUG error with nvkm_firmware_ctor() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2024-41024: misc: fastrpc: Restrict untrusted app to attach to privileged PD (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2024-42116: igc: fix a log entry using uninitialized netdev (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2024-43903: drm/amd/display: Add NULL check for 'afb' before dereferencing in amdgpu_dm_plane_handle_curso… (Greg Kroah-Hartman <gregkh@...uxfoundat…)
REJECTED: CVE-2024-26848: afs: Fix endless loop in directory parsing (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

December 24 (21 messages)

CVE-2024-53240: xen/netfront: fix crash when removing device (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53241: x86/xen: don't do PV iret hypercall through hypercall page (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53146: NFSD: Prevent a potential integer overflow (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53145: um: Fix potential integer overflow during physmem setup (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53155: ocfs2: fix uninitialized value in ocfs2_file_read_iter() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53156: wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53157: firmware: arm_scpi: Check the DVFS OPP count returned by the firmware (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53158: soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53159: hwmon: (nct6775-core) Fix overflows seen when writing limit attributes (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53160: rcu/kvfree: Fix data-race in __mod_timer / kvfree_call_rcu (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53161: EDAC/bluefield: Fix potential integer overflow (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53162: crypto: qat/qat_4xxx - fix off by one in uof_get_name() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53163: crypto: qat/qat_420xx - fix off by one in uof_get_name() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53147: exfat: fix out-of-bounds access of directory entries (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53148: comedi: Flush partial mappings in error case (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53149: usb: typec: ucsi: glink: fix off-by-one in connector_status (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53150: ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53151: svcrdma: Address an integer overflow (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53152: PCI: tegra194: Move controller cleanups to pex_ep_event_pex_rst_deassert() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53153: PCI: qcom-ep: Move controller cleanups to qcom_pcie_perst_deassert() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53154: clk: clk-apple-nco: Add NULL check in applnco_probe (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

December 27 (222 messages)

CVE-2024-53164: net: sched: fix ordering of qlen adjustment (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53165: sh: intc: Fix use-after-free bug in register_intc_controller() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49034: sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53174: SUNRPC: make sure cache entry active before cache_show (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53175: ipc: fix memleak if msg_init_ns failed in create_ipc_ns (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53176: smb: During unmount, ensure all cached dir instances drop their dentry (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53177: smb: prevent use-after-free due to open_cached_dir error paths (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53178: smb: Don't leak cfid when reconnect races with open_cached_dir (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53179: smb: client: fix use-after-free of signing key (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53166: block, bfq: fix bfqq uaf in bfq_limit_depth() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53167: nfs/blocklayout: Don't attempt unregister for invalid block device (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53168: sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53169: nvme-fabrics: fix kernel crash while shutting down controller (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53170: block: fix uaf for flush rq while iterating tags (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53171: ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53172: ubi: fastmap: Fix duplicate slab cache names while attaching (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53173: NFSv4.0: Fix a use-after-free problem in the asynchronous open() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53181: um: vector: Do not use drvdata in release (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53190: wifi: rtlwifi: Drastically reduce the attempts to read efuse in case of failures (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53191: wifi: ath12k: fix warning when unbinding (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53192: clk: clk-loongson2: Fix potential buffer overflow in flexible-array member access (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53193: clk: clk-loongson2: Fix memory corruption bug in struct loongson2_clk_provider (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53194: PCI: Fix use-after-free of slot->bus on hot remove (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53195: KVM: arm64: Get rid of userspace_irqchip_in_use (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53196: KVM: arm64: Don't retire aborted MMIO instruction (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53197: ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53198: xen: Fix the issue of resource not being properly released in xenbus_dev_probe() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53199: ASoC: imx-audmix: Add NULL check in imx_audmix_probe (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53182: Revert "block, bfq: merge bfq_release_process_ref() into bfq_put_cooperator()" (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53200: drm/amd/display: Fix null check for pipe_ctx->plane_state in hwss_setup_dpp (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53201: drm/amd/display: Fix null check for pipe_ctx->plane_state in dcn20_program_pipe (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53202: firmware_loader: Fix possible resource leak in fw_log_firmware_info() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53203: usb: typec: fix potential array underflow in ucsi_ccg_sync_control() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53204: phy: realtek: usb: fix NULL deref in rtk_usb3phy_probe (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53205: phy: realtek: usb: fix NULL deref in rtk_usb2phy_probe (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53206: tcp: Fix use-after-free of nreq in reqsk_timer_handler(). (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53207: Bluetooth: MGMT: Fix possible deadlocks (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53208: Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53209: bnxt_en: Fix receive ring space parameters when XDP is active (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53183: um: net: Do not use drvdata in release (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53210: s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53211: net/l2tp: fix warning in l2tp_exit_net found by syzbot (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53184: um: ubd: Do not use drvdata in release (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53185: smb: client: fix NULL ptr deref in crypto_aead_setkey() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53186: ksmbd: fix use-after-free in SMB request handling (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53187: io_uring: check for overflows in io_pin_pages (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53188: wifi: ath12k: fix crash when unbinding (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53189: wifi: nl80211: fix bounds checker error in nl80211_parse_sched_scan (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53180: ALSA: pcm: Add sanity NULL check for the default mmap fault handler (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53213: net: usb: lan78xx: Fix double free issue with interrupt buffer allocation (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53222: zram: fix NULL pointer in comp_algorithm_show() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53223: clk: ralink: mtmips: fix clocks probe order in oldest ralink SoCs (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53224: RDMA/mlx5: Move events notifier registration to be after device registration (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53225: iommu/tegra241-cmdqv: Fix alignment failure at max_n_shift (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53226: RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53227: scsi: bfa: Fix use-after-free in bfad_im_module_exit() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53228: riscv: kvm: Fix out-of-bounds array access (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53229: RDMA/rxe: Fix the qp flush warnings in req (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53230: cpufreq: CPPC: Fix possible null-ptr-deref for cppc_get_cpu_cost() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53231: cpufreq: CPPC: Fix possible null-ptr-deref for cpufreq_cpu_get_raw() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53214: vfio/pci: Properly hide first-in-list PCIe extended capability (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53232: iommu/s390: Implement blocking domain (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53233: unicode: Fix utf8_load() error path (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53234: erofs: handle NONHEAD !delta[1] lclusters gracefully (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53235: erofs: fix file-backed mounts over FUSE (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53236: xsk: Free skb when TX metadata options are invalid (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53237: Bluetooth: fix use-after-free in device_for_each_child() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53238: Bluetooth: btmtk: adjust the position to init iso data anchor (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53239: ALSA: 6fire: Release resources at card release (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53215: svcrdma: fix miss destroy percpu_counter in svc_rdma_proc_init() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53216: nfsd: release svc_expkey/svc_export with rcu_work (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53217: NFSD: Prevent NULL dereference in nfsd4_process_cb_update() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53218: f2fs: fix race in concurrent f2fs_stop_gc_thread (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53219: virtiofs: use pages instead of pointer for kernel direct IO (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53220: f2fs: fix to account dirty data in __get_secs_required() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53221: f2fs: fix null-ptr-deref in f2fs_submit_page_bio() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53212: netlink: fix false positive warning in extack during dumps (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-56532: ALSA: us122l: Use snd_card_free_when_closed() at disconnection (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-56531: ALSA: caiaq: Use snd_card_free_when_closed() at disconnection (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-56541: wifi: ath12k: fix use-after-free in ath12k_dp_cc_cleanup() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-56542: drm/amd/display: fix a memleak issue when driver is removed (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-56543: wifi: ath12k: Skip Rx TID cleanup for self peer (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-56544: udmabuf: change folios array from kmalloc to kvmalloc (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-56545: HID: hyperv: streamline driver probe to avoid devres issues (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-56546: drivers: soc: xilinx: add the missing kfree in xlnx_add_cb_for_suspend() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-56547: rcu/nocb: Fix missed RCU barrier on deoffloading (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-56548: hfsplus: don't query the device logical block size multiple times (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-56549: cachefiles: Fix NULL pointer dereference in object->file (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-56533: ALSA: usx2y: Use snd_card_free_when_closed() at disconnection (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-56534: isofs: avoid memory leak in iocharset (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-56535: wifi: rtw89: coex: check NULL return of kmalloc in btc_fw_set_monreg() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-56536: wifi: cw1200: Fix potential NULL dereference (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-56537: drm: xlnx: zynqmp_disp: layer may be null while releasing (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-56538: drm: zynqmp_kms: Unplug DRM device before removal (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-56539: wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-56540: accel/ivpu: Prevent recovery invocation during probe and resume (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-56551: drm/amdgpu: fix usage slab after free (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-56552: drm/xe/guc_submit: fix race around suspend_pending (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-56550: s390/stacktrace: Use break instead of return statement (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
123 more messages

December 28 (33 messages)

CVE-2024-56677: powerpc/fadump: Move fadump_cma_init to setup_arch() after initmem_init() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-56676: thermal: testing: Initialize some variables annoteded with _free() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-56686: ext4: fix race in buffer_head read fault injection (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-56687: usb: musb: Fix hardware lockup on first Rx endpoint request (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-56688: sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-56689: PCI: endpoint: epf-mhi: Avoid NULL dereference if DT lacks 'mmio' (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-56690: crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-56678: powerpc/mm/fault: Fix kfence page fault reporting (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-56691: mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-56692: f2fs: fix to do sanity check on node blkaddr in truncate_node() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-56693: brd: defer automatic disk creation until module initialization succeeds (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-56679: octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_common.c (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-56680: media: intel/ipu6: do not handle interrupts when device is disabled (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-56681: crypto: bcm - add error check in the ahash_hmac_init function (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-56682: irqchip/riscv-aplic: Prevent crash when MSI domain is missing (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-56683: drm/vc4: hdmi: Avoid hang with debug registers when suspended (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-56684: mailbox: mtk-cmdq: fix wrong use of sizeof in cmdq_get_clocks() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-56685: ASoC: mediatek: Check num_codecs is not zero to avoid panic during probe (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-56695: drm/amdkfd: Use dynamic allocation for CU occupancy array in 'kfd_get_cu_occupancy()' (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-56704: 9p/xen: fix release of IRQ (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-56705: media: atomisp: Add check for rgby_data memory allocation failure (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-56706: s390/cpum_sf: Fix and protect memory allocation of SDBs with mutex (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-56707: octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_dmac_flt.c (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-56708: EDAC/igen6: Avoid segmentation fault on module unload (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-56696: ALSA: core: Fix possible NULL dereference caused by kunit_kzalloc() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-56697: drm/amdgpu: Fix the memory allocation issue in amdgpu_discovery_get_nps_info() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-56698: usb: dwc3: gadget: Fix looping of queued SG entries (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-56699: s390/pci: Fix potential double remove of hotplug slot (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-56700: media: wl128x: Fix atomicity violation in fmc_send_cmd() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-56701: powerpc/pseries: Fix dtl_access_lock to be a rw_semaphore (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-56703: ipv6: Fix soft lockups in fib6_select_path under high next hop churn (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-56702: bpf: Mark raw_tp arguments with PTR_MAYBE_NULL (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-56694: bpf: fix recursive lock when verdict program return SK_PASS (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

December 29 (41 messages)

Re: CVE-2024-26929: scsi: qla2xxx: Fix double free of fcport (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-56709: io_uring: check if iowq is killed before queuing (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-56711: drm/panel: himax-hx83102: Add a check to prevent NULL pointer dereference (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-56710: ceph: fix memory leak in ceph_direct_read_write() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-56712: udmabuf: fix memory leak on last export_udmabuf() error path (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-56713: net: netdevsim: fix nsim_pp_hold_write() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-56715: ionic: Fix netdev notifier unregister on failure (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-56714: ionic: no double destroy workqueue (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-56716: netdevsim: prevent bad user input in nsim_dev_health_break_write() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-56717: net: mscc: ocelot: fix incorrect IFH SRC_PORT field in ocelot_ifh_set_basic() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-56718: net/smc: protect link down work from execute after lgr freed (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-56719: net: stmmac: fix TSO DMA API usage causing oops (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-56721: x86/CPU/AMD: Terminate the erratum_1386_microcode array (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-56720: bpf, sockmap: Several fixes to bpf_msg_pop_data (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-56730: net/9p/usbg: fix handling of the failed kzalloc() memory allocation (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-56739: rtc: check if __rtc_read_time was successful in rtc_timer_do_work() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-56740: nfs/localio: must clear res.replen in nfs_local_read_done (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-56741: apparmor: test: Fix memory leak for aa_unpack_strdup() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-56742: vfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-56743: nfs_common: must not hold RCU while calling nfsd_file_put_local (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-56744: f2fs: fix to avoid potential deadlock in f2fs_record_stop_reason() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-56745: PCI: Fix reset_method_store() memory leak (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-56746: fbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-56747: scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-56722: RDMA/hns: Fix cpu stuck caused by printings during reset (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-56748: scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-56749: dlm: fix dlm_recover_members refcount on error (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-56750: erofs: fix blksize < PAGE_SIZE for file-backed mounts (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-56751: ipv6: release nexthop on device removal (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-56752: drm/nouveau/gr/gf100: Fix missing unlock in gf100_gr_chan_new() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-56753: drm/amdgpu/gfx9: Add Cleaner Shader Deinitialization in gfx_v9_0 Module (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-56726: octeontx2-pf: handle otx2_mbox_get_rsp errors in cn10k.c (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-56723: mfd: intel_soc_pmic_bxtwc: Use IRQ domain for PMIC devices (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-56724: mfd: intel_soc_pmic_bxtwc: Use IRQ domain for TMU device (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-56725: octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_dcbnl.c (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-56727: octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_flows.c (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-56728: octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-56729: smb: Initialize cfid->tcon before performing network ops (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-56755: netfs/fscache: Add a memory barrier for FSCACHE_VOLUME_CREATING (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-56756: nvme-pci: fix freeing of the HMB descriptor table (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-56754: crypto: caam - Fix the pointer passed to caam_qi_shutdown() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

December 30 (2 messages)

Re: CVE-2024-50191: ext4: don't set SB_RDONLY after filesystem errors (Greg KH <gregkh@...uxfoundation.org>)
Re: CVE-2024-50191: ext4: don't set SB_RDONLY after filesystem errors (Greg KH <gregkh@...uxfoundation.org>)

381 messages

Powered by blists - more mailing lists