linux-cve-announce mailing list - 2025/02

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

linux-cve-announce mailing list - 2025/02

Mon	Tue	Wed	Thu	Fri	Sat	Sun
					¹	²
³	⁴	⁵ 2	⁶ 1	⁷	⁸	⁹ 3
¹⁰ 9	¹¹	¹² 8	¹³ 6	¹⁴	¹⁵	¹⁶
¹⁷	¹⁸ 2	¹⁹	²⁰	²¹	²² 1	²³
²⁴ 2	²⁵	²⁶ 727	²⁷ 183	²⁸

Messages by day:

February 5 (2 messages)

CVE-2023-52925: netfilter: nf_tables: don't fail inserts if duplicate has expired (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52924: netfilter: nf_tables: don't skip expired elements during walk (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

February 6 (1 message)

REJECTED: CVE-2024-41071: wifi: mac80211: Avoid address calculations via out of bounds array indexing (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

February 9 (3 messages)

CVE-2025-21684: gpio: xilinx: Convert gpio_lock to raw spinlock (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-57949: irqchip/gic-v3-its: Don't enable interrupts in its_irq_set_vcpu_affinity() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21685: platform/x86: lenovo-yoga-tab2-pro-1380-fastcharger: fix serdev race (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

February 10 (9 messages)

CVE-2025-21686: io_uring/rsrc: require cloned buffers to share accounting contexts (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-57950: drm/amd/display: Initialize denominator defaults to 1 (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21691: cachestat: fix page cache statistics permission checking (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21688: drm/v3d: Assign job pointer to NULL before signaling the fence (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21689: USB: serial: quatech2: fix null-ptr-deref in qt2_process_read_urb() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21692: net: sched: fix ets qdisc OOB Indexing (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21690: scsi: storvsc: Ratelimit warning logs to prevent VM denial of service (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21687: vfio/platform: check the bounds of read/write syscalls (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21693: mm: zswap: properly synchronize freeing resources during CPU hotunplug (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

February 12 (8 messages)

CVE-2024-57951: hrtimers: Handle CPU state correctly on hotplug (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21694: fs/proc: fix softlockup in __read_vmcore (part 2) (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21695: platform/x86: dell-uart-backlight: fix serdev race (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21696: mm: clear uffd-wp PTE/PMD state on mremap() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21697: drm/v3d: Ensure job pointer is set to NULL after job completion (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21698: Revert "usb: gadget: u_serial: Disable ep before setting port to null to fix the crash caused by port be… (Greg Kroah-Hartman <gregkh@...uxfoundat…)
CVE-2024-57952: Revert "libfs: fix infinite directory reads for offset dir" (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21699: gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

February 13 (6 messages)

CVE-2025-21700: net: sched: Disallow replacing of child qdisc from one parent to another (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2025-21698: Revert "usb: gadget: u_serial: Disable ep before setting port to null to fix the crash caused … (Greg Kroah-Hartman <gregkh@...uxfoundat…)
CVE-2025-21701: net: avoid race between device unregistration and ethnl ops (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2024-53689: block: Fix potential deadlock while freezing queue and acquiring sysfs_lock (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2024-57915: usb: gadget: u_serial: Disable ep before setting port to null to fix the crash caused by port … (Greg Kroah-Hartman <gregkh@...uxfoundat…)
REJECTED: CVE-2024-56571: media: uvcvideo: Require entities to have a non-zero unique ID (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

February 18 (2 messages)

CVE-2025-21703: netem: Update sch->q.qlen before qdisc_tree_reduce_backlog() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21702: pfifo_tail_enqueue: Drop new packet when sch->limit == 0 (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

February 22 (1 message)

CVE-2025-21704: usb: cdc-acm: Check control transfer buffer size before access (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

February 24 (2 messages)

CVE-2023-52926: io_uring/rw: split io_read() into a helper (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2024-40982: ssb: Fix potential NULL pointer dereference in ssb_device_uevent() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

February 26 (727 messages)

CVE-2021-47633: ath5k: fix OOB in ath5k_eeprom_read_pcal_info_5111 (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47634: ubi: Fix race condition between ctrl_cdev_ioctl and ubi_cdev_ioctl (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47635: ubifs: Fix to add refcount once page is set private (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47636: ubifs: Fix read out-of-bounds in ubifs_wbuf_write_nolock() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47642: video: fbdev: nvidiafb: Use strscpy() to prevent buffer overflow (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47654: samples/landlock: Fix path_list memory leak (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47651: soc: qcom: rpmpd: Check for null return of devm_kcalloc (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47652: video: fbdev: smscufx: Fix null-ptr-deref in ufx_usb_probe() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49044: dm integrity: fix memory corruption when tag_size is less than digest size (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49046: i2c: dev: check return value when calling dev_set_name() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47643: media: ir_toy: free before error exiting (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49047: ep93xx: clock: Fix UAF in ep93xx_clk_register_gate() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49048: ipv6: fix panic when forwarding a pkt with no in6 dev (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47657: drm/virtio: Ensure that objs is not NULL in virtio_gpu_array_put_free() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49045: ALSA: pcm: Test for "silence" field in struct "pcm_format_data" (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49049: mm/secretmem: fix panic when growing a memfd_secret (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49050: memory: renesas-rpc-if: fix platform-device leak in error path (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47655: media: venus: vdec: fixed possible memory leak issue (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49052: mm: fix unexpected zeroed page mapping with zram swap (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47645: media: staging: media: zoran: calculate the right buffer number for zoran_reap_stat_com (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49056: io_uring: abort file assignment prior to assigning creds (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47644: media: staging: media: zoran: move videodev alloc (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49057: block: null_blk: end timed out poll request (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49058: cifs: potential buffer overflow in handling symlinks (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49059: nfc: nci: add flush_workqueue to prevent uaf (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49060: net/smc: Fix NULL pointer dereference in smc_pnet_find_ib() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49062: cachefiles: Fix KASAN slab-out-of-bounds in cachefiles_set_volume_xattr (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49063: ice: arfs: fix use-after-free when freeing @rx_cpu_rmap (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49064: cachefiles: unmark inode in use in error path (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49053: scsi: target: tcmu: Fix possible page UAF (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49054: Drivers: hv: vmbus: Deactivate sysctl_record_panic_msg by default in isolated guests (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49067: powerpc: Fix virt_addr_valid() for 64-bit Book3E & 32-bit (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49066: veth: Ensure eth header is in skb's linear part (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49068: btrfs: release correct delalloc amount in direct IO write path (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47646: Revert "Revert "block, bfq: honor already-setup queue merges"" (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47647: clk: qcom: ipq8074: fix PCI-E clock oops (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49087: rxrpc: fix a race in rxrpc_exit_net() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47648: gpu: host1x: Fix a memory leak in 'host1x_remove()' (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49113: powerpc/secvar: fix refcount leak in format_show() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49071: drm/panel: ili9341: fix optional regulator handling (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49116: Bluetooth: use memset avoid memory leaks (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49134: mlxsw: spectrum: Guard against invalid local ports (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49139: Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49092: net: ipv4: fix route with nexthop object delete warning (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49123: ath11k: Fix frames flush failure caused by deadlock (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49095: scsi: zorro7xx: Fix a resource leak in zorro7xx_remove_one() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49097: NFS: Avoid writeback threads getting stuck in mempool_alloc() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49088: dpaa2-ptp: Fix refcount leak in dpaa2_ptp_probe (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49101: xen: delay xen_hvm_init_time_ops() if kdump is boot on vcpu>=32 (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49102: habanalabs: fix possible memory leak in MMU DR fini (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49089: IB/rdmavt: add lock to call to rvt_error_qp to prevent a race condition (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49192: drivers: ethernet: cpsw: fix panic when interrupt coaleceing is set via ethtool (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49103: NFSv4.2: fix reference count leaks in _nfs42_proc_copy_notify() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49194: net: bcmgenet: Use stronger register read/writes to assure ordering (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49075: btrfs: fix qgroup reserve overflow the qgroup limit (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49105: staging: wfx: fix an error handling in wfx_init_common() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49162: video: fbdev: sm712fb: Fix crash in smtcfb_write() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49165: media: imx-jpeg: Prevent decoding NV12M jpegs into single-planar buffers (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49108: clk: mediatek: Fix memory leaks on probe (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49126: scsi: mpi3mr: Fix memory leaks (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49128: drm/bridge: Add missing pm_runtime_put_sync (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49129: mt76: mt7921: fix crash when startup fails. (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49130: ath11k: mhi: use mhi_sync_power_up() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49096: net: sfc: add missing xdp queue reinitialization (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49218: drm/dp: Fix OOB read when handling Post Cursor2 register (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49099: Drivers: hv: vmbus: Fix initialization of device object in vmbus_device_register() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49073: ata: sata_dwc_460ex: Fix crash due to OOB write (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49100: virtio_console: eliminate anonymous module_init & module_exit (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49115: PCI: endpoint: Fix misused goto label (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49124: x86/mce: Work around an erratum on fast string copy instructions (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49203: drm/amd/display: Fix double free during GPU reset on DC streams (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49106: staging: vchiq_arm: Avoid NULL ptr deref in vchiq_dump_platform_instances (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49107: ceph: fix memory leak in ceph_readdir when note_last_dentry returns error (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49074: irqchip/gic-v3: Fix GICR_CTLR.RWP polling (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49236: bpf: Fix UAF due to race between btf_try_get_module and load_module (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49110: netfilter: conntrack: revisit gc autotuning (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49127: ref_tracker: implement use-after-free detection (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49111: Bluetooth: Fix use after free in hci_send_acl (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49245: ASoC: rockchip: Fix PM usage reference of rockchip_i2s_tdm_resume (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49135: drm/amd/display: Fix memory leak (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49152: XArray: Fix xas_create_range() when multi-order entry present (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49207: bpf, sockmap: Fix memleak in sk_psock_queue_msg (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49078: lz4: fix LZ4_decompress_safe_partial read out of bound (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49079: btrfs: zoned: traverse devices under chunk_mutex in btrfs_can_activate_zone (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49140: Revert "nbd: fix possible overflow on 'first_minor' in nbd_dev_add()" (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49136: Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49141: net: dsa: felix: fix possible NULL pointer dereference (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49137: drm/amd/amdgpu/amdgpu_cs: fix refcount leak of a dma_fence obj (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49070: fbdev: Fix unregistering of framebuffers without device (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49144: io_uring: fix memory leak of uid in files registration (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49114: scsi: libfc: Fix use after free in fc_exch_abts_resp() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49158: scsi: qla2xxx: Fix warning message due to adisc being flushed (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49146: virtio: use virtio_device_ready() in virtio_device_restore() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49167: btrfs: do not double complete bio on errors during compressed reads (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49147: block: Fix the maximum minor value is blk_alloc_ext_minor() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49168: btrfs: do not clean up repair bio if submit fails (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49169: f2fs: use spin_lock to avoid hang (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49170: f2fs: fix to do sanity check on curseg->alloc_type (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49131: ath11k: fix kernel panic during unload/load ath11k modules (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
628 more messages

February 27 (183 messages)

REJECTED: CVE-2022-49140: Revert "nbd: fix possible overflow on 'first_minor' in nbd_dev_add()" (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-57973: rdma/cxgb4: Prevent potential integer overflow on 32bit (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-57982: xfrm: state: fix out-of-bounds read during lookup (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-57984: i3c: dw: Fix use-after-free in dw_i3c_master driver due to race condition (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-57983: mailbox: th1520: Fix memory corruption due to incorrect array size (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-57987: Bluetooth: btrtl: check for NULL in btrtl_setup_realtek() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-57985: firmware: qcom: scm: Cleanup global '__scm' on probe failures (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-57988: Bluetooth: btbcm: Fix NULL deref in btbcm_get_board_name() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-57989: wifi: mt76: mt7925: fix NULL deref check in mt7925_change_vif_links (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-57986: HID: core: Fix assumption that Resolution Multipliers must be in Logical Collections (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-57990: wifi: mt76: mt7925: fix off by one in mt7925_load_clc() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-57991: wifi: rtw89: chan: fix soft lockup in rtw89_entity_recalc_mgnt_roles() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-57974: udp: Deal with race between UDP socket address change and rehash (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-57992: wifi: wilc1000: unregister wiphy only if it has been registered (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-57993: HID: hid-thrustmaster: Fix warning in thrustmaster_probe by adding endpoint check (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-57995: wifi: ath12k: fix read pointer after free in ath12k_mac_assign_vif_to_vdev() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-57953: rtc: tps6594: Fix integer overflow on 32bit systems (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-57997: wifi: wcn36xx: fix channel survey memory allocation size (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-57996: net_sched: sch_sfq: don't allow 1 packet limit (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-57994: ptr_ring: do not block hard interrupts in ptr_ring_resize_multiple() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21720: xfrm: delete intermediate secpath entry in packet offload mode (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-57999: powerpc/pseries/iommu: IOMMU incorrectly marks MMIO range in DDW (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21721: nilfs2: handle errors that nilfs_prepare_chunk() may return (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21722: nilfs2: do not force clear folio if buffer is referenced (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-57975: btrfs: do proper folio cleanup when run_delalloc_nocow() failed (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21706: mptcp: pm: only set fullmesh for subflow endp (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-57978: media: imx-jpeg: Fix potential error pointer dereference in detach_pm() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-57980: media: uvcvideo: Fix double free in error path (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-57981: usb: xhci: Fix NULL pointer dereference on certain command aborts (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21719: ipmr: do not call mr_mfc_uses_dev() for unres entries (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21725: smb: client: fix oops due to unset link speed (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21728: bpf: Send signals asynchronously if !preemptible (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21711: net/rose: prevent integer overflows in rose_setsockopt() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21723: scsi: mpi3mr: Fix possible crash when setting up bsg fails (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21724: iommufd/iova_bitmap: Fix shift-out-of-bounds in iova_bitmap_offset_to_index() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21726: padata: avoid UAF for reorder_work (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21729: wifi: rtw89: fix race between cancel_hw_scan and hw_scan completion (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21731: nbd: don't allow reconnect after disconnect (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21712: md/md-bitmap: Synchronize bitmap_get_stats() with bitmap lifetime (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21713: powerpc/pseries/iommu: Don't unset window if it was never set (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21716: vxlan: Fix uninit-value in vxlan_vnifilter_dump() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21714: RDMA/mlx5: Fix implicit ODP use after free (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-57998: OPP: add index check to assert to avoid buffer overflow in _read_freq() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21718: net: rose: fix timer races against user threads (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21705: mptcp: handle fastopen disconnect correctly (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-58000: io_uring: prevent reg-wait speculations (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21709: kernel: be more careful about dup_mmap() failures and uprobe registering (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21707: mptcp: consolidate suboption status (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21708: net: usb: rtl8150: enable basic endpoint checking (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-57976: btrfs: do proper folio cleanup when cow_file_range() failed (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-57977: memcg: fix soft lockup in the OOM process (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-57979: pps: Fix a use-after-free (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21710: tcp: correct handling of extreme memory squeeze (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21727: padata: fix UAF in padata_reorder (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21730: wifi: rtw89: avoid to init mgnt_entry list twice when WoWLAN failed (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21715: net: davicom: fix UAF in dm9000_drv_remove (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21717: net/mlx5e: add missing cpu_to_node to kvzalloc_node in mlx5e_open_xdpredirect_sq (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-58002: media: uvcvideo: Remove dangling pointers (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-58011: platform/x86: int3472: Check for adev == NULL (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-58012: ASoC: SOF: Intel: hda-dai: Ensure DAI widget is valid during params (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-58015: wifi: ath12k: Fix for out-of bound access error (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-58013: Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-58004: media: intel/ipu6: remove cpu latency qos request on error (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-58003: media: i2c: ds90ub9x3: Fix extra fwnode_handle_put() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-58014: wifi: brcmsmac: add gain range check to wlc_phy_iqcal_gainparams_nphy() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-58007: soc: qcom: socinfo: Avoid out of bounds read of serial number (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-58005: tpm: Change to kvalloc() in eventlog/acpi.c (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21739: scsi: ufs: core: Fix use-after free in init error and remove paths (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-58006: PCI: dwc: ep: Prevent changing BAR size/flags in pci_epc_set_bar() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21741: usbnet: ipheth: fix DPE OoB read (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-58008: KEYS: trusted: dcp: fix improper sg use with CONFIG_VMAP_STACK=y (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-58010: binfmt_flat: Fix integer overflow bug on 32 bit systems (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-58009: Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-58019: nvkm/gsp: correctly advance the read pointer of GSP message queue (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21738: ata: libata-sff: Ensure that we cannot write outside the allocated buffer (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-58001: ocfs2: handle a symlink read error correctly (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21743: usbnet: ipheth: fix possible overflow in DPE length check (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21746: Input: synaptics - fix crash when enabling pass-through port (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21737: ceph: fix memory leak in ceph_mds_auth_match() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-58017: printk: Fix signed integer overflow when defining LOG_BUF_LEN_MAX (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-58016: safesetid: check size of policy writes (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21745: blk-cgroup: Fix class @block_class's subsystem refcount leakage (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21747: drm/ast: astdp: Fix timeout for enabling video signal (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21740: KVM: x86/mmu: Ensure NX huge page recovery thread is alive before waking (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-58018: nvkm: correctly calculate the available space of the GSP cmdq buffer (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21751: net/mlx5: HWS, change error flow on matcher disconnect (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21748: ksmbd: fix integer overflows on 32 bit systems (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21742: usbnet: ipheth: use static NDP16 location in URB (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21744: wifi: brcmfmac: fix NULL pointer dereference in brcmf_txfinalize() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21733: tracing/osnoise: Fix resetting of tracepoints (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21749: net: rose: lock the socket in rose_bind() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21735: NFC: nci: Add bounds checking in nci_hci_create_pipe() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21750: wifi: brcmfmac: Check the return value of of_property_read_string_index() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21736: nilfs2: fix possible int overflows in nilfs_fiemap() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21752: btrfs: don't use btrfs_set_item_key_safe on RAID stripe-extents (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21753: btrfs: fix use-after-free when attempting to join an aborted transaction (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21754: btrfs: fix assertion failure when splitting ordered extent after transaction abort (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21732: RDMA/mlx5: Fix a race for an ODP MR which leads to CQE with error (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21734: misc: fastrpc: Fix copy buffer page size (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
84 more messages

944 messages

Powered by blists - more mailing lists