linux-cve-announce mailing list - 2025/01

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

linux-cve-announce mailing list - 2025/01

Mon	Tue	Wed	Thu	Fri	Sat	Sun
		¹	² 1	³	⁴	⁵
⁶ 15	⁷ 3	⁸ 18	⁹ 4	¹⁰	¹¹ 79	¹²
¹³	¹⁴	¹⁵ 34	¹⁶	¹⁷ 1	¹⁸	¹⁹ 50
²⁰ 2	²¹ 26	²² 3	²³ 1	²⁴	²⁵	²⁶
²⁷ 1	²⁸	²⁹	³⁰	³¹ 20

Messages by day:

January 2 (1 message)

CVE-2022-49035: media: s5p_cec: limit msg.len to CEC_MAX_MSG_SIZE (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

January 6 (15 messages)

CVE-2024-56758: btrfs: check folio mapping after unlock in relocate_one_folio() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-56767: dmaengine: at_xdmac: avoid null_prt_deref in at_xdmac_prep_dma_memset (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-56768: bpf: Fix bpf_get_smp_processor_id() on !CONFIG_SMP (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-56769: media: dvb-frontends: dib3000mb: fix uninit-value in dib3000_write_reg (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-56759: btrfs: fix use-after-free when COWing tree bock and tracing is enabled (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-56761: x86/fred: Clear WFE in missing-ENDBRANCH #CPs (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-56763: tracing: Prevent bad count for tracing_cpumask_write (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-56765: powerpc/pseries/vas: Add close() callback in vas_vm_ops struct (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-56757: Bluetooth: btusb: mediatek: add intf release flow when usb disconnect (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-56760: PCI/MSI: Handle lack of irqdomain gracefully (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-56762: io_uring/sqpoll: fix sqpoll error handling races (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-56764: ublk: detach gendisk from ublk device if add_disk() fails (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-56766: mtd: rawnand: fix double free in atmel_pmecc_create_user() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2024-26929: scsi: qla2xxx: Fix double free of fcport (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
Re: CVE-2024-50106: nfsd: fix race between laundromat and free_stateid (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

January 7 (3 messages)

REJECTED: CVE-2024-49967: ext4: no need to continue when the number of entries is 1 (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2024-56686: ext4: fix race in buffer_head read fault injection (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2024-56762: io_uring/sqpoll: fix sqpoll error handling races (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

January 8 (18 messages)

CVE-2024-56770: net/sched: netem: account for backlog updates from child qdisc (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-56772: kunit: string-stream: Fix a UAF bug in kunit_init_suite() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-56771: mtd: spinand: winbond: Fix 512GW, 01GW, 01JW and 02JW ECC information (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-56773: kunit: Fix potential null dereference in kunit_device_driver_test() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-56774: btrfs: add a sanity check for btrfs root in btrfs_search_slot() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-56775: drm/amd/display: Fix handling of plane refcount (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-56776: drm/sti: avoid potential dereference of error pointers (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-56777: drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-56778: drm/sti: avoid potential dereference of error pointers in sti_hqvdp_atomic_check (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-56779: nfsd: fix nfs4_openowner leak when concurrent nfsd4_open occur (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-56780: quota: flush quota_release_work upon quota writeback (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-56782: ACPI: x86: Add adev NULL check to acpi_quirk_skip_serdev_enumeration() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-56781: powerpc/prom_init: Fixup missing powermac #size-cells (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-56783: netfilter: nft_socket: remove WARN_ON_ONCE on maximum cgroup level (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-56784: drm/amd/display: Adding array index check to prevent memory corruption (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-56785: MIPS: Loongson64: DTS: Really fix PCIe port nodes for ls7a (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-56786: bpf: put bpf_link's program when link is safe to be deallocated (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-56787: soc: imx8m: Probe the SoC driver as platform driver (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

January 9 (4 messages)

REJECTED: CVE-2024-46758: hwmon: (lm95234) Fix underflows seen when writing limit attributes (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2024-46756: hwmon: (w83627ehf) Fix underflows seen when writing limit attributes (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2024-53159: hwmon: (nct6775-core) Fix overflows seen when writing limit attributes (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2024-46757: hwmon: (nct6775-core) Fix underflows seen when writing limit attributes (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

January 11 (79 messages)

CVE-2024-41935: f2fs: fix to shrink read extent node in batches (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-41932: sched: fix warning in sched_setaffinity (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-48876: stackdepot: fix stack_depot_save_flags() in NMI context (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-48881: bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-49569: nvme-rdma: unquiesce admin_q before destroy it (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-50051: spi: mpc52xx: Add cancel_work_sync before module remove (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-52332: igb: Fix potential invalid memory access in igb_init_module() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53680: ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-43098: i3c: Use i3cdev->desc->info instead of calling i3c_device_get_info() to avoid deadlock (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-45828: i3c: mipi-i3c-hci: Mask ring interrupts before ring stop request (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-47141: pinmux: Use sequential access to access desc->pinmux data (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-47143: dma-debug: fix a possible deadlock on radix_lock (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-47794: bpf: Prevent tailcall infinite loop caused by freplace (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-47809: dlm: fix possible lkb_resource null dereference (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-48873: wifi: rtw89: check return value of ieee80211_probereq_get() for RNR (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-48875: btrfs: don't take dev_replace rwsem on task already holding it (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53687: riscv: Fix IPIs usage in kfence_protect_page() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53682: regulator: axp20x: AXP717: set ramp_delay (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53689: block: Fix potential deadlock while freezing queue and acquiring sysfs_lock (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-54191: Bluetooth: iso: Fix circular lock in iso_conn_big_sync (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-54460: Bluetooth: iso: Fix circular lock in iso_listen_bis (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-54683: netfilter: IDLETIMER: Fix for possible ABBA deadlock (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-55639: net: renesas: rswitch: avoid use-after-put for a device tree node (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-55641: xfs: unlock inodes when erroring out of xfs_trans_alloc_dir (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-55642: block: Prevent potential deadlocks in zone write plug error recovery (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-46896: drm/amdgpu: don't access invalid sched (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-41149: block: avoid to reuse `hctx` not removed from cpuhp callback list (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-54193: accel/ivpu: Fix WARN in ivpu_ipc_send_receive_internal() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-54455: accel/ivpu: Fix general protection fault in ivpu_bo_list() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-54680: smb: client: fix TCP timers deadlock after rmmod (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-55881: KVM: x86: Play nice with protected guests in complete_hypercall_exit() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-55916: Drivers: hv: util: Avoid accessing a ringbuffer not initialized yet (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-56368: ring-buffer: Fix overflow in __rb_map_vma (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-56369: drm/modes: Avoid divide by zero harder in drm_mode_vrefresh() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-56372: net: tun: fix tun_napi_alloc_frags() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-57791: net/smc: check return value of sock_recvmsg when draining clc data (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-56788: net: ethernet: oa_tc6: fix tx skb race condition between reference pointers (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-47408: net/smc: check smcd_v2_ext_offset when receiving proposal msg (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-49568: net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-49571: net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-49573: sched/fair: Fix NEXT_BUDDY (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-51729: mm: use aligned address in copy_user_gigantic_page() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-52319: mm: use aligned address in clear_gigantic_page() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53685: ceph: give up on paths longer than PATH_MAX (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53690: nilfs2: prevent use of deleted inode (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-57793: virt: tdx-guest: Just leak decrypted memory on unrecoverable errors (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-57792: power: supply: gpio-charger: Fix set charge current limits (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-57798: drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-57799: phy: rockchip: samsung-hdptx: Set drvdata before enabling runtime PM (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-57800: ALSA: memalloc: prefer dma_mapping_error() over explicit address checking (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-57804: scsi: mpi3mr: Fix corrupt config pages PHY state is switched in sysfs (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-57807: scsi: megaraid_sas: Fix for a potential deadlock (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-57805: ASoC: SOF: Intel: hda-dai: Do not release the link DMA on STOP (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-57806: btrfs: fix transaction atomicity bug when enabling simple quotas (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-57838: s390/entry: Mark IRQ entries to fix stack depot warnings (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-57809: PCI: imx6: Fix suspend/resume support on i.MX6QDL (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-57843: virtio-net: fix overflow inside virtnet_rq_alloc (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-57839: Revert "readahead: properly shorten readahead when falling back to do_page_cache_ra()" (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-57849: s390/cpum_sf: Handle CPU hotplug remove during sampling (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-57850: jffs2: Prevent rtime decompress memory corruption (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-57872: scsi: ufs: pltfrm: Dellocate HBA during ufshcd_pltfrm_remove() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-23124: block: RCU protect disk->conv_zones_bitmap (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-23125: drm/dp_mst: Fix resetting msg rx state after topology removal (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-23126: arm64: ptrace: fix partial SETREGSET for NT_ARM_POE (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-23127: arm64: ptrace: fix partial SETREGSET for NT_ARM_FPMR (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-23128: arm64: ptrace: fix partial SETREGSET for NT_ARM_TAGGED_ADDR_CTRL (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2025-23124: block: RCU protect disk->conv_zones_bitmap (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2025-23125: drm/dp_mst: Fix resetting msg rx state after topology removal (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2025-23126: arm64: ptrace: fix partial SETREGSET for NT_ARM_POE (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2025-23127: arm64: ptrace: fix partial SETREGSET for NT_ARM_FPMR (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2025-23128: arm64: ptrace: fix partial SETREGSET for NT_ARM_TAGGED_ADDR_CTRL (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-57874: arm64: ptrace: fix partial SETREGSET for NT_ARM_TAGGED_ADDR_CTRL (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-57876: drm/dp_mst: Fix resetting msg rx state after topology removal (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-57875: block: RCU protect disk->conv_zones_bitmap (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-57877: arm64: ptrace: fix partial SETREGSET for NT_ARM_POE (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-57878: arm64: ptrace: fix partial SETREGSET for NT_ARM_FPMR (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-57880: ASoC: Intel: sof_sdw: Add space for a terminator into DAIs array (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-57879: Bluetooth: iso: Always release hdev at the end of iso_listen_bis (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-57881: mm/page_alloc: don't call pfn_to_page() on possibly non-existent PFN in split_large_buddy() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

January 15 (34 messages)

CVE-2024-57882: mptcp: fix TCP options overflow. (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-57892: ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-57893: ALSA: seq: oss: Fix races at processing SysEx messages (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-57894: Bluetooth: hci_core: Fix sleeping function called from invalid context (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-57895: ksmbd: set ATTR_CTIME flags when setting mtime (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-57883: mm: hugetlb: independent PMD page table shared count (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-57885: mm/kmemleak: fix sleeping function called from invalid context at print message (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-57886: mm/damon/core: fix new damon_target objects leaks on damon_commit_targets() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-57884: mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-57887: drm: adv7511: Fix use-after-free in adv7533_attach_dsi() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-57888: workqueue: Do not warn when cancelling WQ_MEM_RECLAIM work from !WQ_MEM_RECLAIM worker (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-57889: pinctrl: mcp23s08: Fix sleeping in atomic context due to regmap locking (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-57890: RDMA/uverbs: Prevent integer overflow issue (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-57891: sched_ext: Fix invalid irq restore in scx_ops_bypass() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-57897: drm/amdkfd: Correct the migration DMA map direction (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-57898: wifi: cfg80211: clear link ID from bitmap during link delete after clean up (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-57899: wifi: mac80211: fix mbss changed flags corruption on 32 bit systems (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-57900: ila: serialize calls to nf_register_net_hooks() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-57901: af_packet: fix vlan_get_protocol_dgram() vs MSG_PEEK (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-57902: af_packet: fix vlan_get_tci() vs MSG_PEEK (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-57903: net: restrict SO_REUSEPORT to inet sockets (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21629: net: reenable NETIF_F_IPV6_CSUM offload for BIG TCP packets (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-57896: btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21630: io_uring/net: always initialize kmsg->msg.msg_inq upfront (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-36476: RDMA/rtrs: Ensure 'ib_sge list' is accessible (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-39282: net: wwan: t7xx: Fix FSM command timeout issue (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-53681: nvmet: Don't overflow subsysnqn (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-54031: netfilter: nft_set_hash: unaligned atomic read on struct nft_set_ext (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-57795: RDMA/rxe: Remove the direct link to net_device (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-57801: net/mlx5e: Skip restore TC rules for vport rep without loaded flag (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-57844: drm/xe: Fix fault on fd close after unbind (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-57857: RDMA/siw: Remove direct link to net_device (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-57802: netrom: check buffer length before accessing it (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-57841: net: fix memory leak in tcp_conn_request() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

January 17 (1 message)

REJECTED: CVE-2025-21630: io_uring/net: always initialize kmsg->msg.msg_inq upfront (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

January 19 (50 messages)

CVE-2025-21632: x86/fpu: Ensure shadow stack is active before "getting" registers (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21631: block, bfq: fix waker_bfqq UAF after bfq_split_bfqq() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21641: mptcp: sysctl: blackhole timeout: avoid using current->nsproxy (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21642: mptcp: sysctl: sched: avoid using current->nsproxy (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21643: netfs: Fix kernel async DIO (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21644: drm/xe: Fix tlb invalidation when wedging (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21645: platform/x86/amd/pmc: Only disable IRQ1 wakeup where i8042 actually enabled it (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21646: afs: Fix the maximum cell name length (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21647: sched: sch_cake: add bounds checks to host bulk flow fairness counts (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21648: netfilter: conntrack: clamp maximum hashtable size to INT_MAX (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21633: io_uring/sqpoll: zero sqd->thread on tctx errors (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21634: cgroup/cpuset: remove kernfs active break (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21635: rds: sysctl: rds_tcp_{rcv,snd}buf: avoid using current->nsproxy (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21636: sctp: sysctl: plpmtud_probe_interval: avoid using current->nsproxy (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21637: sctp: sysctl: udp_port: avoid using current->nsproxy (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21638: sctp: sysctl: auth_enable: avoid using current->nsproxy (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21639: sctp: sysctl: rto_min/max: avoid using current->nsproxy (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21640: sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21650: net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21651: net: hns3: don't auto enable misc vector (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21652: ipvlan: Fix use-after-free in ipvlan_get_iflink(). (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21653: net_sched: cls_flow: validate TCA_FLOW_RSHIFT attribute (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21654: ovl: support encoding fid from inode with no alias (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21649: net: hns3: fix kernel crash when 1588 is sent on HIP08 devices (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-57905: iio: adc: ti-ads1119: fix information leak in triggered buffer (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-57904: iio: adc: at91: call input_free_device() on allocated iio_dev (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-57914: usb: typec: tcpci: fix NULL pointer issue on shared irq case (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-57915: usb: gadget: u_serial: Disable ep before setting port to null to fix the crash caused by port being null (Greg Kroah-Hartman <gregkh@...uxfoundat…)
CVE-2024-57916: misc: microchip: pci1xxxx: Resolve kernel panic during GPIO IRQ handling (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-57917: topology: Keep the cpumask unchanged when printing cpumap (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-57918: drm/amd/display: fix page fault due to max surface definition mismatch (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-57919: drm/amd/display: fix divide error in DM plane scale calcs (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-57920: drm/amdkfd: wq_release signals dma_fence only when available (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-57923: btrfs: zlib: fix avail_in bytes for s390 zlib HW compression path (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-57926: drm/mediatek: Set private->all_drm_private[i]->drm to NULL if mtk_drm_bind returns err (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-57906: iio: adc: ti-ads8688: fix information leak in triggered buffer (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-57924: fs: relax assertions on failure to encode file handles (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-57925: ksmbd: fix a missing return value check bug (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-57922: drm/amd/display: Add check for granularity in dml ceil/floor helpers (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-57921: drm/amdgpu: Add a lock when accessing the buddy trim function (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-57907: iio: adc: rockchip_saradc: fix information leak in triggered buffer (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-57927: nfs: Fix oops in nfs_netfs_init_request() when copying to cache (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-57928: netfs: Fix enomem handling in buffered reads (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-57929: dm array: fix releasing a faulty array block twice in dm_array_cursor_end (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-57909: iio: light: bh1745: fix information leak in triggered buffer (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-57911: iio: dummy: iio_simply_dummy_buffer: fix information leak in triggered buffer (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-57908: iio: imu: kmx61: fix information leak in triggered buffer (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-57910: iio: light: vcnl4035: fix information leak in triggered buffer (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-57912: iio: pressure: zpa2326: fix information leak in triggered buffer (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-57913: usb: gadget: f_fs: Remove WARN_ON in functionfs_bind (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

January 20 (2 messages)

CVE-2023-52923: netfilter: nf_tables: adapt set backend to use GC transaction API (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21655: io_uring/eventfd: ensure io_eventfd_signal() defers another RCU period (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

January 21 (26 messages)

CVE-2024-57931: selinux: ignore unknown extended permissions (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-57930: tracing: Have process_string() also allow arrays (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-57932: gve: guard XDP xmit NDO on existence of xdp queues (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-57933: gve: guard XSK operations on the existence of queues (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-57934: fgraph: Add READ_ONCE() when accessing fgraph_array[] (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-57935: RDMA/hns: Fix accessing invalid dip_ctx during destroying QP (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-57936: RDMA/bnxt_re: Fix max SGEs for the Work Request (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-57938: net/sctp: Prevent autoclose integer overflow in sctp_association_init() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-57937: mm: reinstate ability to map write-sealed memfd mappings read-only (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-57940: exfat: fix the infinite loop in exfat_readdir() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-57939: riscv: Fix sleeping in invalid context in die() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21659: netdev: prevent accessing NAPI instances from another namespace (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21660: ksmbd: fix unexpectedly changed path in ksmbd_vfs_kern_path_locked (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21661: gpio: virtuser: fix missing lookup table cleanups (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21662: net/mlx5: Fix variable not being completed when function returns (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21663: net: stmmac: dwmac-tegra: Read iommu stream id from device tree (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21664: dm thin: make get_first_thin use rcu-safe list first function (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-57941: netfs: Fix the (non-)cancellation of copy when cache is temporarily disabled (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-57942: netfs: Fix ceph copy to cache on write-begin (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-57943: exfat: fix the new buffer was not zeroed before writing (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-57944: iio: adc: ti-ads1298: Add NULL check in ads1298_init (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-57945: riscv: mm: Fix the out of bound issue of vmemmap address (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21656: hwmon: (drivetemp) Fix driver producing garbage data when SCSI errors occur (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21658: btrfs: avoid NULL pointer dereference if no valid extent tree (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21657: sched_ext: Replace rq_lock() to raw_spin_rq_lock() in scx_ops_bypass() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-57946: virtio-blk: don't keep queue frozen during system suspend (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

January 22 (3 messages)

Re: CVE-2024-57937: mm: reinstate ability to map write-sealed memfd mappings read-only (Greg KH <gregkh@...uxfoundation.org>)
REJECTED: CVE-2024-57937: mm: reinstate ability to map write-sealed memfd mappings read-only (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
Re: CVE-2024-57937: mm: reinstate ability to map write-sealed memfd mappings read-only (Greg KH <gregkh@...uxfoundation.org>)

January 23 (1 message)

CVE-2024-57947: netfilter: nf_set_pipapo: fix initial map fill (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

January 27 (1 message)

Re: CVE-2021-47341: KVM: mmio: Fix use-after-free Read in kvm_vm_ioctl_unregister_coalesced_mmio (Greg KH <gregkh@...uxfoundation.org>)

January 31 (20 messages)

CVE-2025-21665: filemap: avoid truncating 64-bit offset to 32 bits (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-57948: mac802154: check local interfaces before deleting sdata list (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21674: net/mlx5e: Fix inversion dependency warning while enabling IPsec tunnel (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21675: net/mlx5: Clear port select structure when fail to create (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21676: net: fec: handle page_pool_dev_alloc_pages error (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21677: pfcp: Destroy device along with udp socket's netns dismantle. (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21678: gtp: Destroy device along with udp socket's netns dismantle. (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21679: btrfs: add the missing error handling inside get_canonical_dev_path (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21680: pktgen: Avoid out-of-bounds access in get_imix_entries (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21681: openvswitch: fix lockup on tx to unregistering netdev with carrier (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21682: eth: bnxt: always recalculate features after XDP clearing, fix null-deref (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21683: bpf: Fix bpf_sk_select_reuseport() memory leak (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21666: vsock: prevent null-ptr-deref in vsock_*[has_data|has_space] (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21667: iomap: avoid avoid truncating 64-bit offset to 32 bits (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21668: pmdomain: imx8mp-blk-ctrl: add missing loop break condition (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21669: vsock/virtio: discard packets if the transport changes (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21670: vsock/bpf: return early if transport is not assigned (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21671: zram: fix potential UAF of zram table (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21672: afs: Fix merge preference rule failure condition (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21673: smb: client: fix double free of TCP_Server_Info::hostname (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

258 messages

Powered by blists - more mailing lists