linux-cve-announce mailing list - 2025/03

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

linux-cve-announce mailing list - 2025/03

Mon	Tue	Wed	Thu	Fri	Sat	Sun
					¹	² 3
³ 4	⁴	⁵	⁶ 48	⁷ 9	⁸	⁹
¹⁰ 1	¹¹	¹² 26	¹³	¹⁴ 1	¹⁵	¹⁶ 1
¹⁷ 1	¹⁸	¹⁹	²⁰	²¹	²²	²³
²⁴	²⁵ 1	²⁶	²⁷ 131	²⁸ 3	²⁹	³⁰ 1
³¹ 2

Messages by day:

March 2 (3 messages)

REJECTED: CVE-2025-21818: x86/xen: fix xen_hypercall_hvm() to not clobber %rbx (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2022-49045: ALSA: pcm: Test for "silence" field in struct "pcm_format_data" (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49733: ALSA: pcm: oss: Fix race at SNDCTL_DSP_SYNC (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

March 3 (4 messages)

REJECTED: CVE-2023-52917: ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2024-56741: apparmor: test: Fix memory leak for aa_unpack_strdup() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2024-50181: clk: imx: Remove CLK_SET_PARENT_GATE for DRAM mux for i.MX7D (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2021-47469: spi: Fix deadlock when adding SPI controllers on SPI buses (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

March 6 (48 messages)

Re: CVE-2022-49623: powerpc/xive/spapr: correct bitmap allocation size (Greg KH <gregkh@...uxfoundation.org>)
REJECTED: CVE-2022-49614: nvme: use struct group for generic command dwords (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-58052: drm/amdgpu: Fix potential NULL pointer dereference in atomctrl_get_smc_sclk_range_table (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-58051: ipmi: ipmb: Add check devm_kasprintf() returned value (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-58061: wifi: mac80211: prohibit deactivating all links (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-58067: clk: mmp: pxa1908-mpmu: Fix a NULL vs IS_ERR() check (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-58062: wifi: iwlwifi: mvm: avoid NULL pointer dereference (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-58063: wifi: rtlwifi: fix memory leaks and invalid access at probe error path (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-58066: clk: mmp: pxa1908-apbcp: Fix a NULL vs IS_ERR() check (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-58065: clk: mmp: pxa1908-apbc: Fix NULL vs IS_ERR() check (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-58069: rtc: pcf85063: fix potential OOB write in PCF85063 NVMEM read (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-58070: bpf: bpf_local_storage: Always use bpf_mem_alloc in PREEMPT_RT (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-58053: rxrpc: Fix handling of received connection abort (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-58071: team: prevent adding a device which is already a team device lower (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-58064: wifi: cfg80211: tests: Fix potential NULL dereference in test_cfg80211_parse_colocated_ap() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-58072: wifi: rtlwifi: remove unused check_buddy_priv (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-58073: drm/msm/dpu: check dpu_plane_atomic_print_state() for valid sspp (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-58068: OPP: fix dev_pm_opp_find_bw_*() when bandwidth table not initialized (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-58054: staging: media: max96712: fix kernel oops when removing module (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-58055: usb: gadget: f_tcm: Don't free command immediately (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-58056: remoteproc: core: Fix ida_free call while not allocated (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-58057: idpf: convert workqueues to unbound (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-58058: ubifs: skip dumping tnc tree when zroot is null (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-58059: media: uvcvideo: Fix deadlock during uvc_probe (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-58060: bpf: Reject struct_ops registration that uses module ptr and the module btf_id is missing (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-58074: drm/i915: Grab intel_display from the encoder to avoid potential oopsies (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-58075: crypto: tegra - do not transfer req when tegra init fails (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21825: bpf: Cancel the running bpf_timer through kworker for PREEMPT_RT (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21826: netfilter: nf_tables: reject mismatching sum of field_len with set key length (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21827: Bluetooth: btusb: mediatek: Add locks for usb_driver_claim_interface() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21828: wifi: mac80211: don't flush non-uploaded STAs (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21830: landlock: Handle weird files (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21829: RDMA/rxe: Fix the warning "__rxe_cleanup+0x12c/0x170 [rdma_rxe]" (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-58077: ASoC: soc-pcm: don't use soc_pcm_ret() on .prepare callback (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-58076: clk: qcom: gcc-sm6350: Add missing parent_map for two clocks (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-58078: misc: misc_minor_alloc to use ida for all dynamic/misc dynamic minors (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-58079: media: uvcvideo: Fix crash during unbind if gpio unit is in use (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-58080: clk: qcom: dispcc-sm6350: Add missing parent_map for a clock (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-58081: clk: mmp2: call pm_genpd_init() only after genpd.name is set (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-58082: media: nuvoton: Fix an error check in npcm_video_ece_init() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-58083: KVM: Explicitly verify target vCPU is online in kvm_get_vcpu() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21831: PCI: Avoid putting some root ports into D3 on TUXEDO Sirius Gen1 (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-58085: tomoyo: don't emit warning in tomoyo_write_control() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21832: block: don't revert iter for -EIOCBQUEUED (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-58084: firmware: qcom: scm: Fix missing read barrier in qcom_scm_get_tzmem_pool() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21833: iommu/vt-d: Avoid use of NULL after WARN_ON_ONCE (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21834: seccomp: passthrough uretprobe systemcall without filtering (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-58086: drm/v3d: Stop active perfmon if it is being destroyed (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

March 7 (9 messages)

CVE-2025-21836: io_uring/kbuf: reallocate buf lists on upgrade (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21835: usb: gadget: f_midi: fix MIDI Streaming descriptor lengths (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21837: io_uring/uring_cmd: unconditionally copy SQEs at prep time (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21838: usb: gadget: core: flush gadget workqueue after device removal (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21839: KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21840: thermal/netlink: Prevent userspace segmentation fault by adjusting UAPI header (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21841: cpufreq/amd-pstate: Fix cpufreq_policy ref counting (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21842: amdkfd: properly free gang_ctx_bo when failed to init user queue (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21843: drm/panthor: avoid garbage value in panthor_ioctl_dev_query() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

March 10 (1 message)

REJECTED: CVE-2024-27055: workqueue: Don't call cpumask_test_cpu() with -1 CPU in wq_update_node_max_active() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

March 12 (26 messages)

CVE-2024-58087: ksmbd: fix racy issue from session lookup and expire (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-58089: btrfs: fix double accounting race when btrfs_run_delalloc_range() failed (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-58088: bpf: Fix deadlock when freeing cgroup storage (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21852: net: Add rx_skb of kfree_skb to raw_tp_null_args[]. (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21853: bpf: avoid holding freeze_mutex during mmap operation (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21854: sockmap, vsock: For connectible sockets allow only connected (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21855: ibmvnic: Don't reference skb after sending to VIOS (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21856: s390/ism: add release function for struct device (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21857: net/sched: cls_api: fix error handling causing NULL dereference (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21859: USB: gadget: f_midi: f_midi_complete to call queue_work (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21858: geneve: Fix use-after-free in geneve_find_dev(). (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21861: mm/migrate_device: don't add folio to be freed to LRU in migrate_device_finalize() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21844: smb: client: Add check for next_buffer in receive_encrypted_standard() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21860: mm/zswap: fix inconsistency when zswap_store_page() fails (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21862: drop_monitor: fix incorrect initialization order (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21863: io_uring: prevent opcode speculation (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21864: tcp: drop secpath at the same time as we currently drop dst (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21865: gtp: Suppress list corruption splat in gtp_net_exit_batch_rtnl(). (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21866: powerpc/code-patching: Fix KASAN hit by not flagging text patching area as VM_ALLOC (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21845: mtd: spi-nor: sst: Fix SST write failure (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21846: acct: perform last write from workqueue (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21847: ASoC: SOF: stream-ipc: Check for cstream nullity in sof_ipc_msg_data() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21848: nfp: bpf: Add check for nfp_app_ctrl_msg_alloc() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21849: drm/i915/gt: Use spin_lock_irqsave() in interruptible context (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21850: nvmet: Fix crash when a namespace is disabled (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21851: bpf: Fix softlockup in arena_map_free on 64k page kernel (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

March 14 (1 message)

CVE-2023-52927: netfilter: allow exp not to be removed in nf_ct_find_expectation (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

March 16 (1 message)

Re: CVE-2022-49562: KVM: x86: Use __try_cmpxchg_user() to update guest PTE A/D bits (Greg KH <gregkh@...uxfoundation.org>)

March 17 (1 message)

Re: CVE-2022-49444: module: fix [e_shstrndx].sh_size=0 OOB access (Greg KH <gregkh@...uxfoundation.org>)

March 25 (1 message)

REJECTED: CVE-2025-21757: net: ipv6: fix dst refleaks in rpl, seg6 and ioam6 lwtunnels (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

March 27 (131 messages)

CVE-2025-21867: bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21869: powerpc/code-patching: Disable KASAN report during patching via temporary mm (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21868: net: allow small head cache usage with large MAX_SKB_FRAGS values (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21870: ASoC: SOF: ipc4-topology: Harden loops for looking up ALH copiers (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21871: tee: optee: Fix supplicant wait loop (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2025-21755: vsock: Orphan socket after transport release (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2025-21740: KVM: x86/mmu: Ensure NX huge page recovery thread is alive before waking (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21872: efi: Don't map the entire mokvar table to determine its size (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-58091: drm/fbdev-dma: Add shadow buffering for deferred I/O (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21885: RDMA/bnxt_re: Fix the page details for the srq created by kernel consumers (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21873: scsi: ufs: core: bsg: Fix crash when arpmb command fails (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21882: net/mlx5: Fix vport QoS cleanup on error (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21883: ice: Fix deinitializing VF in error path (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21886: RDMA/mlx5: Fix implicit ODP hang on parent deregistration (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21874: dm-integrity: Avoid divide by zero in table status in Inline mode (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21879: btrfs: fix use-after-free on inode when scanning root during em shrinking (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-58090: sched/core: Prevent rescheduling when interrupts are disabled (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21880: drm/xe/userptr: fix EFAULT handling (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21881: uprobes: Reject the shared zeropage in uprobe_write_opcode() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21884: net: better track kernel sockets lifetime (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21889: perf/core: Add RCU read lock protection to perf_iterate_ctx() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21892: RDMA/mlx5: Fix the recovery flow of the UMR QP (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21877: usbnet: gl620a: fix endpoint checking in genelink_bind() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21887: ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21888: RDMA/mlx5: Fix a WARN during dereg_mr for DM type (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21890: idpf: fix checksums set in idpf_rx_rsc() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21891: ipvlan: ensure network headers are in skb linear part (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21875: mptcp: always handle address removal under msk socket lock (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21876: iommu/vt-d: Fix suspicious RCU usage (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21878: i2c: npcm: disable interrupt enable bit before devm_request_irq (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52928: bpf: Skip invalid kfunc call in backtrack_insn (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-4454: can: j1939: fix errant WARN_ON_ONCE in j1939_session_deactivate (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52939: mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52942: cgroup/cpuset: Fix wrong check in update_parent_subparts_cpumask() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52930: drm/i915: Fix potential bit_17 double-free (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52931: drm/i915: Avoid potential vm use-after-free (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52933: Squashfs: fix handling and sanity checking of xattr_ids count (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52929: nvmem: core: fix cleanup after dev_set_name() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52937: HV: hv_balloon: fix memory leak with using debugfs_lookup() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52938: usb: typec: ucsi: Don't attempt to resume the ports before they exist (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52940: mm: multi-gen LRU: fix crash during cgroup migration (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52941: can: isotp: split tx timer into transmission and timeout (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52934: mm/MADV_COLLAPSE: catch !none !huge !bad pmd lookups (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52932: mm/swapfile: add cond_resched() in get_swap_pages() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52935: mm/khugepaged: fix ->anon_vma race (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52936: kernel/irq/irqdomain.c: fix memory leak with using debugfs_lookup() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49739: gfs2: Always check inode size of inline inodes (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49738: f2fs: fix to do sanity check on i_extra_isize in is_alive() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49750: cpufreq: CPPC: Add u64 casts to avoid overflowing (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49748: perf/x86/amd: fix potential integer overflow on shift of a int (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52997: ipv4: prevent potential spectre v1 gadget in ip_metrics_convert() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49749: i2c: designware: use casting of u64 in clock multiplication to avoid overflow (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49751: w1: fix WARNING after calling w1_process() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49752: device property: fix of node refcount leak in fwnode_graph_get_next_endpoint() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49753: dmaengine: Fix double increment of client_count in dma_chan_get() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49757: EDAC/highbank: Fix memory leak in highbank_mc_probe() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49754: Bluetooth: Fix a buffer overflow in mgmt_mesh_add() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49755: usb: gadget: f_fs: Prevent race during ffs_ep0_queue_wait (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49758: reset: uniphier-glue: Fix possible null-ptr-deref (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49759: VMCI: Use threaded irqs instead of tasklets (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49756: phy: usb: sunplus: Fix potential null-ptr-deref in sp_usb_phy_probe() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49745: fpga: m10bmc-sec: Fix probe rollback (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49743: ovl: Use "buf" flexible array for memcpy() destination (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49740: wifi: brcmfmac: Check the count value of channel spec to prevent out-of-bounds reads (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49761: btrfs: always report error in run_one_delayed_ref() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49742: f2fs: initialize locks earlier in f2fs_fill_super() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49744: mm/uffd: fix pte marker when fork() without fork event (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49741: fbdev: smscufx: fix error handling code in ufx_usb_probe (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49746: dmaengine: imx-sdma: Fix a possible memory leak in sdma_transfer_init (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49747: erofs/zmap.c: Fix incorrect offset calculation (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52982: fscache: Use wait_on_bit() to wait for the freeing of relinquished volume (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52983: block, bfq: fix uaf for bfqq in bic_set_bfqq() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52984: net: phy: dp83822: Fix null pointer access on DP83825/DP83826 devices (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52985: arm64: dts: imx8mm-verdin: Do not power down eth-phy (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53009: drm/amdkfd: Add sync after creating vram bo (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52988: ALSA: hda/via: Avoid potential array out-of-bound in add_secret_dac_path() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52993: x86/i8259: Mark legacy PIC interrupts with IRQ_LEVEL (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52994: acpi: Fix suspend with Xen PV (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52999: net: fix UaF in netns ops registration error path (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52973: vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52998: net: fec: Use page_pool_put_full_page when freeing rx buffers (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52992: bpf: Skip task with pid=1 in send_signal_common() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52981: drm/i915: Fix request ref counting during error capture & debugfs dump (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52996: ipv4: prevent potential spectre v1 gadget in fib_metrics_match() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52986: bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52987: ASoC: SOF: ipc4-mtrace: prevent underflow in sof_ipc4_priority_mask_dfs_write() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52989: firewire: fix memory leak for payload of request subaction to IEC 61883-1 FCP region (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52990: s390: workaround invalid gcc-11 out of bounds read warning (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52991: net: fix NULL pointer in skb_segment_list (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52995: riscv/kprobe: Fix instruction simulation of JALR (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53001: drm/drm_vma_manager: Add drm_vma_node_allow_once() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53002: drm/i915: Fix a memory leak with reused mmap_offset (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53000: netlink: prevent potential spectre v1 gadgets (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52974: scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53003: EDAC/qcom: Do not pass llcc_driv_data as edac_device_ctl_info's pvt_info (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53004: ovl: fix tmpfile leak (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52977: net: openvswitch: fix flow memory leak in ovs_flow_cmd_new (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52975: scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52976: efi: fix potential NULL deref in efi_mem_reserve_persistent (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
32 more messages

March 28 (3 messages)

REJECTED: CVE-2024-57894: Bluetooth: hci_core: Fix sleeping function called from invalid context (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2023-53027: erofs: fix kvcalloc() misuse with __GFP_NOFAIL (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
Re: CVE-2023-53027: erofs: fix kvcalloc() misuse with __GFP_NOFAIL (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

March 30 (1 message)

CVE-2025-0927: heap overflow in the hfs and hfsplus filesystems with manually crafted filesystem (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

March 31 (2 messages)

CVE-2025-21893: keys: Fix UAF in key_put() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
Re: CVE-2022-49761: btrfs: always report error in run_one_delayed_ref() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

232 messages

Powered by blists - more mailing lists