linux-cve-announce mailing list - 2025/03

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [year] [list]

linux-cve-announce mailing list - 2025/03

Mon	Tue	Wed	Thu	Fri	Sat	Sun
					¹	² 3
³ 4	⁴	⁵	⁶ 48	⁷ 9	⁸	⁹
¹⁰ 1	¹¹	¹² 26	¹³	¹⁴ 1	¹⁵	¹⁶ 1
¹⁷ 1	¹⁸	¹⁹	²⁰	²¹	²²	²³
²⁴	²⁵	²⁶	²⁷	²⁸	²⁹	³⁰
³¹

Messages by day:

March 2 (3 messages)

REJECTED: CVE-2025-21818: x86/xen: fix xen_hypercall_hvm() to not clobber %rbx (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2022-49045: ALSA: pcm: Test for "silence" field in struct "pcm_format_data" (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49733: ALSA: pcm: oss: Fix race at SNDCTL_DSP_SYNC (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

March 3 (4 messages)

REJECTED: CVE-2023-52917: ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2024-56741: apparmor: test: Fix memory leak for aa_unpack_strdup() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2024-50181: clk: imx: Remove CLK_SET_PARENT_GATE for DRAM mux for i.MX7D (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2021-47469: spi: Fix deadlock when adding SPI controllers on SPI buses (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

March 6 (48 messages)

Re: CVE-2022-49623: powerpc/xive/spapr: correct bitmap allocation size (Greg KH <gregkh@...uxfoundation.org>)
REJECTED: CVE-2022-49614: nvme: use struct group for generic command dwords (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-58052: drm/amdgpu: Fix potential NULL pointer dereference in atomctrl_get_smc_sclk_range_table (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-58051: ipmi: ipmb: Add check devm_kasprintf() returned value (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-58061: wifi: mac80211: prohibit deactivating all links (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-58067: clk: mmp: pxa1908-mpmu: Fix a NULL vs IS_ERR() check (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-58062: wifi: iwlwifi: mvm: avoid NULL pointer dereference (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-58063: wifi: rtlwifi: fix memory leaks and invalid access at probe error path (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-58066: clk: mmp: pxa1908-apbcp: Fix a NULL vs IS_ERR() check (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-58065: clk: mmp: pxa1908-apbc: Fix NULL vs IS_ERR() check (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-58069: rtc: pcf85063: fix potential OOB write in PCF85063 NVMEM read (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-58070: bpf: bpf_local_storage: Always use bpf_mem_alloc in PREEMPT_RT (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-58053: rxrpc: Fix handling of received connection abort (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-58071: team: prevent adding a device which is already a team device lower (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-58064: wifi: cfg80211: tests: Fix potential NULL dereference in test_cfg80211_parse_colocated_ap() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-58072: wifi: rtlwifi: remove unused check_buddy_priv (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-58073: drm/msm/dpu: check dpu_plane_atomic_print_state() for valid sspp (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-58068: OPP: fix dev_pm_opp_find_bw_*() when bandwidth table not initialized (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-58054: staging: media: max96712: fix kernel oops when removing module (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-58055: usb: gadget: f_tcm: Don't free command immediately (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-58056: remoteproc: core: Fix ida_free call while not allocated (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-58057: idpf: convert workqueues to unbound (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-58058: ubifs: skip dumping tnc tree when zroot is null (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-58059: media: uvcvideo: Fix deadlock during uvc_probe (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-58060: bpf: Reject struct_ops registration that uses module ptr and the module btf_id is missing (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-58074: drm/i915: Grab intel_display from the encoder to avoid potential oopsies (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-58075: crypto: tegra - do not transfer req when tegra init fails (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21825: bpf: Cancel the running bpf_timer through kworker for PREEMPT_RT (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21826: netfilter: nf_tables: reject mismatching sum of field_len with set key length (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21827: Bluetooth: btusb: mediatek: Add locks for usb_driver_claim_interface() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21828: wifi: mac80211: don't flush non-uploaded STAs (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21830: landlock: Handle weird files (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21829: RDMA/rxe: Fix the warning "__rxe_cleanup+0x12c/0x170 [rdma_rxe]" (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-58077: ASoC: soc-pcm: don't use soc_pcm_ret() on .prepare callback (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-58076: clk: qcom: gcc-sm6350: Add missing parent_map for two clocks (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-58078: misc: misc_minor_alloc to use ida for all dynamic/misc dynamic minors (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-58079: media: uvcvideo: Fix crash during unbind if gpio unit is in use (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-58080: clk: qcom: dispcc-sm6350: Add missing parent_map for a clock (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-58081: clk: mmp2: call pm_genpd_init() only after genpd.name is set (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-58082: media: nuvoton: Fix an error check in npcm_video_ece_init() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-58083: KVM: Explicitly verify target vCPU is online in kvm_get_vcpu() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21831: PCI: Avoid putting some root ports into D3 on TUXEDO Sirius Gen1 (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-58085: tomoyo: don't emit warning in tomoyo_write_control() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21832: block: don't revert iter for -EIOCBQUEUED (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-58084: firmware: qcom: scm: Fix missing read barrier in qcom_scm_get_tzmem_pool() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21833: iommu/vt-d: Avoid use of NULL after WARN_ON_ONCE (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21834: seccomp: passthrough uretprobe systemcall without filtering (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-58086: drm/v3d: Stop active perfmon if it is being destroyed (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

March 7 (9 messages)

CVE-2025-21836: io_uring/kbuf: reallocate buf lists on upgrade (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21835: usb: gadget: f_midi: fix MIDI Streaming descriptor lengths (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21837: io_uring/uring_cmd: unconditionally copy SQEs at prep time (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21838: usb: gadget: core: flush gadget workqueue after device removal (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21839: KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21840: thermal/netlink: Prevent userspace segmentation fault by adjusting UAPI header (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21841: cpufreq/amd-pstate: Fix cpufreq_policy ref counting (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21842: amdkfd: properly free gang_ctx_bo when failed to init user queue (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21843: drm/panthor: avoid garbage value in panthor_ioctl_dev_query() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

March 10 (1 message)

REJECTED: CVE-2024-27055: workqueue: Don't call cpumask_test_cpu() with -1 CPU in wq_update_node_max_active() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

March 12 (26 messages)

CVE-2024-58087: ksmbd: fix racy issue from session lookup and expire (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-58089: btrfs: fix double accounting race when btrfs_run_delalloc_range() failed (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-58088: bpf: Fix deadlock when freeing cgroup storage (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21852: net: Add rx_skb of kfree_skb to raw_tp_null_args[]. (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21853: bpf: avoid holding freeze_mutex during mmap operation (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21854: sockmap, vsock: For connectible sockets allow only connected (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21855: ibmvnic: Don't reference skb after sending to VIOS (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21856: s390/ism: add release function for struct device (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21857: net/sched: cls_api: fix error handling causing NULL dereference (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21859: USB: gadget: f_midi: f_midi_complete to call queue_work (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21858: geneve: Fix use-after-free in geneve_find_dev(). (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21861: mm/migrate_device: don't add folio to be freed to LRU in migrate_device_finalize() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21844: smb: client: Add check for next_buffer in receive_encrypted_standard() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21860: mm/zswap: fix inconsistency when zswap_store_page() fails (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21862: drop_monitor: fix incorrect initialization order (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21863: io_uring: prevent opcode speculation (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21864: tcp: drop secpath at the same time as we currently drop dst (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21865: gtp: Suppress list corruption splat in gtp_net_exit_batch_rtnl(). (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21866: powerpc/code-patching: Fix KASAN hit by not flagging text patching area as VM_ALLOC (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21845: mtd: spi-nor: sst: Fix SST write failure (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21846: acct: perform last write from workqueue (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21847: ASoC: SOF: stream-ipc: Check for cstream nullity in sof_ipc_msg_data() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21848: nfp: bpf: Add check for nfp_app_ctrl_msg_alloc() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21849: drm/i915/gt: Use spin_lock_irqsave() in interruptible context (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21850: nvmet: Fix crash when a namespace is disabled (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21851: bpf: Fix softlockup in arena_map_free on 64k page kernel (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

March 14 (1 message)

CVE-2023-52927: netfilter: allow exp not to be removed in nf_ct_find_expectation (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

March 16 (1 message)

Re: CVE-2022-49562: KVM: x86: Use __try_cmpxchg_user() to update guest PTE A/D bits (Greg KH <gregkh@...uxfoundation.org>)

March 17 (1 message)

Re: CVE-2022-49444: module: fix [e_shstrndx].sh_size=0 OOB access (Greg KH <gregkh@...uxfoundation.org>)

94 messages

Powered by blists - more mailing lists