linux-cve-announce mailing list - 2025/04

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

linux-cve-announce mailing list - 2025/04

Mon	Tue	Wed	Thu	Fri	Sat	Sun
	¹ 95	² 9	³ 13	⁴	⁵	⁶
⁷	⁸ 11	⁹	¹⁰	¹¹	¹²	¹³
¹⁴	¹⁵	¹⁶ 128	¹⁷ 5	¹⁸ 23	¹⁹	²⁰
²¹ 1	²² 1	²³ 4	²⁴ 3	²⁵	²⁶	²⁷
²⁸	²⁹ 1	³⁰ 1

Messages by day:

April 1 (95 messages)

REJECTED: CVE-2023-52990: s390: workaround invalid gcc-11 out of bounds read warning (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2023-52990: s390: workaround invalid gcc-11 out of bounds read warning (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21895: perf/core: Order the PMU list to fix warning about unordered pmu_ctx_list (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21894: net: enetc: VFs do not support HWTSTAMP_TX_ONESTEP_SYNC (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21896: fuse: revert back to __readahead_folio() for readahead (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21897: sched_ext: Fix pick_task_scx() picking non-queued tasks when it's called without balance() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21898: ftrace: Avoid potential division by zero in function_stat_show() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21899: tracing: Fix bad hist from corrupting named_triggers list (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21900: NFSv4: Fix a deadlock when recovering state on a sillyrenamed file (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21901: RDMA/bnxt_re: Add sanity checks on rdev validity (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21903: mctp i3c: handle NULL header address (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21902: acpi: typec: ucsi: Introduce a ->poll_cci method (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21927: nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21913: x86/amd_nb: Use rdmsr_safe() in amd_get_mmconfig_range() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21917: usb: renesas_usbhs: Flush the notify_hotplug_work (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21925: llc: do not use skb_get() before dev_queue_xmit() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21930: wifi: iwlwifi: mvm: don't try to talk to a dead firmware (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21935: rapidio: add check for rio_add_net() in rio_scan_alloc_net() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21938: mptcp: fix 'scheduling while atomic' in mptcp_pm_nl_append_new_local_addr (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21918: usb: typec: ucsi: Fix NULL pointer access (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21912: gpio: rcar: Use raw_spinlock to protect register access (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21920: vlan: enforce underlying device type (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21940: drm/amdkfd: Fix NULL Pointer Dereference in KFD queue (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21914: slimbus: messaging: Free transaction ID in delayed interrupt scenario (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21904: caif_virtio: fix wrong pointer check in cfv_probe() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21915: cdx: Fix possible UAF error in driver_override_show() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21916: usb: atm: cxacru: fix a flaw in existing endpoint checks (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21923: HID: hid-steam: Fix use-after-free when detaching device (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21924: net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21919: sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21921: net: ethtool: netlink: Allow NULL nlattrs when getting a phy_device (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21929: HID: intel-ish-hid: Fix use-after-free issue in hid_ishtp_cl_remove() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21926: net: gso: fix ownership in __udp_gso_segment (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21922: ppp: Fix KMSAN uninit-value warning with bpf (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21937: Bluetooth: Add check for mgmt_alloc_skb() in mgmt_remote_name() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21928: HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21941: drm/amd/display: Fix null check for pipe_ctx->plane_state in resource_build_scaling_params (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21906: wifi: iwlwifi: mvm: clean up ROC on failure (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21933: arm: pgtable: fix NULL pointer dereference issue (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21931: hwpoison, memory_hotplug: lock folio before unmap hwpoisoned folio (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21905: wifi: iwlwifi: limit printed string from FW file (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21945: ksmbd: fix use-after-free in smb2_lock (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21942: btrfs: zoned: fix extent range end unlock in cow_file_range() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21932: mm: abort vma_modify() on merge out of memory failure (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21934: rapidio: fix an API misues when rio_add_net() fails (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21936: Bluetooth: Add check for mgmt_alloc_skb() in mgmt_device_connected() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21939: drm/xe/hmm: Don't dereference struct page pointers without notifier lock (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21949: LoongArch: Set hugetlb mmap base address aligned with pmd size (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21951: bus: mhi: host: pci_generic: Use pci_try_reset_function() to avoid deadlock (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21907: mm: memory-failure: update ttu flag inside unmap_poisoned_folio (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21952: HID: corsair-void: Update power supply values with a unified work handler (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21908: NFS: fix nfs_release_folio() to not deadlock via kcompactd writeback (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21909: wifi: nl80211: reject cooked mode if it is set along with other flags (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21943: gpio: aggregator: protect driver attr handlers against module unload (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21944: ksmbd: fix bug on trap in smb2_lock (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21946: ksmbd: fix out-of-bounds in parse_sec_desc() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21947: ksmbd: fix type confusion via race condition when using ipc_msg_send_request (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21948: HID: appleir: Fix potential NULL dereference at raw event handle (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21950: drivers: virt: acrn: hsm: Use kzalloc to avoid info leak in pmcmd_ioctl (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21911: drm/imagination: avoid deadlock on fence release (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21910: wifi: cfg80211: regulatory: improve invalid hints checking (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21954: netmem: prevent TX of unreadable skbs (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21957: scsi: qla1280: Fix kernel oops when debug level > 2 (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21962: cifs: Fix integer overflow while processing closetimeo mount option (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21968: drm/amd/display: Fix slab-use-after-free on hdcp_work (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21977: fbdev: hyperv_fb: Fix hang in kdump kernel when on Hyper-V Gen 2 VMs (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21980: sched: address a potential NULL pointer dereference in the GRED scheduler. (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21955: ksmbd: prevent connection release during oplock break notification (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21958: Revert "openvswitch: switch to per-action label counting in conntrack" (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21982: pinctrl: nuvoton: npcm8xx: Add NULL check in npcm8xx_gpio_fw (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21984: mm: fix kernel BUG when userfaultfd_move encounters swapcache (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21971: net_sched: Prevent creation of classes with TC_H_ROOT (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21953: net: mana: cleanup mana struct after debugfs_remove() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21979: wifi: cfg80211: cancel wiphy_work before freeing wiphy (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21981: ice: fix memory leak in aRFS after reset (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21976: fbdev: hyperv_fb: Allow graceful removal of framebuffer (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21966: dm-flakey: Fix memory corruption in optional corrupt_bio_byte feature (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21967: ksmbd: fix use-after-free in ksmbd_free_work_struct (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21959: netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert_tree() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21960: eth: bnxt: do not update checksum in bnxt_xdp_build_skb() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21961: eth: bnxt: fix truesize for mb-xdp-pass case (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21973: eth: bnxt: fix kernel panic in the bnxt_get_queue_stats{rx | tx} (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21974: eth: bnxt: return fail if interface is down in bnxt_queue_mem_alloc() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21963: cifs: Fix integer overflow while processing acdirmax mount option (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21964: cifs: Fix integer overflow while processing acregmax mount option (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21965: sched_ext: Validate prev_cpu in scx_bpf_select_cpu_dfl() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21956: drm/amd/display: Assign normalized_pix_clk when color depth = 14 (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21978: drm/hyperv: Fix address space leak when Hyper-V DRM device is removed (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21983: mm/slab/kvfree_rcu: Switch to WQ_MEM_RECLAIM wq (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21985: drm/amd/display: Fix out-of-bound accesses (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21986: net: switchdev: Convert blocking notification chain to a raw one (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21969: Bluetooth: L2CAP: Fix slab-use-after-free Read in l2cap_send_cmd (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21970: net/mlx5: Bridge, fix the crash caused by LAG state check (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21972: net: mctp: unshare packets when reassembling (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21975: net/mlx5: handle errors in mlx5_chains_create_table() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

April 2 (9 messages)

CVE-2025-21987: drm/amdgpu: init return value in amdgpu_ttm_clear_buffer (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21991: x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21988: fs/netfs/read_collect: add to next->prev_donated (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21989: drm/amd/display: fix missing .is_two_pixels_per_container (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21990: drm/amdgpu: NULL-check BO's backing store when determining GFX12 PTE flags (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21992: HID: ignore non-functional sensor in HP 5MP Camera (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21993: iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21994: ksmbd: fix incorrect validation for num_aces field of smb_acl (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2024-54680: smb: client: fix TCP timers deadlock after rmmod (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

April 3 (13 messages)

CVE-2025-21996: drm/radeon: fix uninitialized size issue in radeon_vce_cs_parse() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21995: drm/sched: Fix fence reference count leak (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-22005: ipv6: Fix memleak of nhc_pcpu_rth_output in fib_check_nh_v6_gw(). (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-22006: net: ethernet: ti: am65-cpsw: Fix NAPI registration sequence (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-22007: Bluetooth: Fix error code in chan_alloc_skb_cb() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21997: xsk: fix an integer overflow in xp_create_and_assign_umem() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21998: firmware: qcom: uefisecapp: fix efivars registration race (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-21999: proc: fix UAF in proc_get_inode() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-22000: mm/huge_memory: drop beyond-EOF folios with the right number of refs (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-22002: netfs: Call `invalidate_cache` only if implemented (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-22003: can: ucan: fix out of bound read in strscpy() source (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-22004: net: atm: fix use after free in lec_send() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-22001: accel/qaic: Fix integer overflow in qaic_validate_req() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

April 8 (11 messages)

REJECTED: CVE-2025-0927: heap overflow in the hfs and hfsplus filesystems with manually crafted filesystem (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-22010: RDMA/hns: Fix soft lockup during bt pages loop (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-22013: KVM: arm64: Unconditionally save+flush host FPSIMD/SVE/SME state (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-22008: regulator: check that dummy regulator has been probed before using it (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-22012: Revert "arm64: dts: qcom: sdm845: Affirm IDR0.CCTW on apps_smmu" (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-22014: soc: qcom: pdr: Fix the potential deadlock (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-22016: dpll: fix xa_alloc_cyclic() error handling (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-22015: mm/migrate: fix shmem xarray update during migration (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-22009: regulator: dummy: force synchronous probing (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-22011: ARM: dts: bcm2711: Fix xHCI power-domain (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-22017: devlink: fix xa_alloc_cyclic() error handling (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

April 16 (128 messages)

CVE-2025-22018: atm: Fix NULL pointer dereference (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-22020: memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-22019: bcachefs: bch2_ioctl_subvolume_destroy() fixes (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-22021: netfilter: socket: Lookup orig tuple for IPv6 SNAT (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-22023: usb: xhci: Don't skip on Stopped - Length Invalid (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-22022: usb: xhci: Apply the link chain quirk on NEC isoc endpoints (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-58092: nfsd: fix legacy client tracking initialization (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-22024: nfsd: fix management of listener transports (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-22059: udp: Fix multiple wraparounds of sk->sk_rmem_alloc. (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-22077: smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-22073: spufs: fix a leak on spufs_new_file() failure (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-58093: PCI/ASPM: Fix link state exit during switch upstream function removal (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-58094: jfs: add check read-only before truncation in jfs_truncate_nolock() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-22117: ice: fix using untrusted value of pkt_len in ice_vc_fdir_parse_raw() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-23130: f2fs: fix to avoid panic once fallocation fails for pinfile (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-22027: media: streamzap: fix race between device disconnection and urb callback (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-22034: mm/gup: reject FOLL_SPLIT_PMD with hugetlb VMAs (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-22051: staging: gpib: Fix Oops after disconnect in agilent usb (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-22052: staging: gpib: Fix Oops after disconnect in ni_usb (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-22035: tracing: Fix use-after-free in print_graph_function_flags during tracer switching (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53034: ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-22054: arcnet: Add NULL check in com20020pci_probe() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-22055: net: fix geneve_opt length integer overflow (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-22056: netfilter: nft_tunnel: fix geneve_opt type confusion addition (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-22029: exec: fix the racy usage of fs_struct->in_exec (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-22030: mm: zswap: fix crypto_free_acomp() deadlock in zswap_cpu_comp_dead() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-22061: net: airoha: Fix qid report in airoha_tc_get_htb_get_leaf_queue() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-22032: wifi: mt76: mt7921: fix kernel panic due to null pointer dereference (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-22063: netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-22038: ksmbd: validate zero num_subauth before sub_auth is accessed (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-22039: ksmbd: fix overflow in dacloffset bounds check (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-58097: wifi: ath11k: fix RCU stall while reaping monitor destination ring (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-22026: nfsd: don't ignore the return code of svc_proc_register() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-22081: fs/ntfs3: Fix a couple integer overflows on 32bit systems (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-22050: usbnet:fix NPE during rx_complete (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-58096: wifi: ath11k: add srng->lock for ath11k_hal_srng_* in monitor mode (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-22044: acpi: nfit: fix narrowing conversion in acpi_nfit_ctl (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-22045: x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-22046: uprobes/x86: Harden uretprobe syscall trampoline check (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-22028: media: vimc: skip .s_stream() for stopped entities (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-22085: RDMA/core: Fix use-after-free when rename device name (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-22068: ublk: make sure ubq->canceling is set when queue is frozen (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-22086: RDMA/mlx5: Fix mlx5_poll_one() cur_qp update flow (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-22088: RDMA/erdma: Prevent use-after-free in erdma_accept_newconn() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-22057: net: decrease cached dst counters in dst_release (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-22058: udp: Fix memory accounting leak. (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-22060: net: mvpp2: Prevent parser TCAM memory corruption (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-22062: sctp: add mutual exclusion in proc_sctp_do_udp_port() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-22037: ksmbd: fix null pointer dereference in alloc_preauth_hash() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-22047: x86/microcode/AMD: Fix __apply_microcode_amd()'s return value (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-22092: PCI: Fix NULL dereference in SR-IOV VF creation error path (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-22041: ksmbd: fix use-after-free in ksmbd_sessions_deregister() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-22067: spi: cadence: Fix out-of-bounds array access in cdns_mrvl_xspi_setup_clock() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-22078: staging: vchiq_arm: Fix possible NPR of keep-alive thread (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-22079: ocfs2: validate l_tree_depth to avoid out-of-bounds access (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-22095: PCI: brcmstb: Fix error path after a call to regulator_bulk_get() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-22069: riscv: fgraph: Fix stack layout to match __arch_ftrace_regs argument of ftrace_return_to_handler (Greg Kroah-Hartman <gregkh@...uxfoundation.org…)
CVE-2025-22096: drm/msm/gem: Fix error code msm_parse_deps() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-22071: spufs: fix a leak in spufs_create_context() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-22082: iio: backend: make sure to NULL terminate stack buffer (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-22109: ax25: Remove broken autobind (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-22043: ksmbd: add bounds check for durable handle context (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-22116: idpf: check error for register_netdev() on init (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-22115: btrfs: fix block group refcount race in btrfs_create_pending_block_groups() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-22100: drm/panthor: Fix race condition when gathering fdinfo group samples (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-22113: ext4: avoid journaling sb update on error if journal is destroying (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-22087: bpf: Fix array bounds error with may_goto (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-22125: md/raid1,raid10: don't ignore IO flags (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-22127: f2fs: fix potential deadloop in prepare_compress_overwrite() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-22098: drm: zynqmp_dp: Fix a deadlock in zynqmp_dp_ignore_hpd_set() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-22107: net: dsa: sja1105: fix kasan out-of-bounds warning in sja1105_table_delete_entry() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-23134: ALSA: timer: Don't take register_mutex with copy_from/to_user() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-22103: net: fix NULL pointer dereference in l3mdev_l3_rcv (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-23129: wifi: ath11k: Clear affinity hint before calling ath11k_pcic_free_irq() in error path (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-22093: drm/amd/display: avoid NPD when ASIC does not support DMUB (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-23136: thermal: int340x: Add NULL check for adev (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-22094: powerpc/perf: Fix ref-counting on the PMU 'vpa_pmu' (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-23131: dlm: prevent NPD when writing a positive value to event_done (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-22072: spufs: fix gang directory lifetimes (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-22049: LoongArch: Increase ARCH_DMA_MINALIGN up to 16 (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-22083: vhost-scsi: Fix handling of multiple calls to vhost_scsi_set_endpoint (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-22074: ksmbd: fix r_count dec/increment mismatch (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-22099: drm: xlnx: zynqmp_dpsub: Add NULL check in zynqmp_audio_init (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-22108: bnxt_en: Mask the bd_cnt field in the TX BD properly (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-22110: netfilter: nfnetlink_queue: Initialize ctx to avoid memory allocation error (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-22097: drm/vkms: Fix use after free and double free on init error (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-22036: exfat: fix random stack corruption after get_block (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-22111: net: Remove RTNL dance for SIOCBRADDIF and SIOCBRDELIF. (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-22112: eth: bnxt: fix out-of-range access of vnic_info array (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-22118: ice: validate queue quanta parameters to prevent OOB access (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-22119: wifi: cfg80211: init wiphy_work before allocating rfkill fails (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-22122: block: fix adding folio to bio (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-22126: md: fix mddev uaf while iterating all_mddevs list (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-22105: bonding: check xdp prog when set bond mode (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-23133: wifi: ath11k: update channel list in reg notifier instead reg worker (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-22066: ASoC: imx-card: Add NULL check in imx_card_probe() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-22065: idpf: fix adapter NULL pointer dereference on reboot (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-23138: watch_queue: fix pipe accounting mismatch (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-22121: ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
29 more messages

April 17 (5 messages)

CVE-2021-47668: can: dev: can_restart: fix use after free bug (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47671: can: etas_es58x: es58x_rx_err_msg(): fix memory leak in error path (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2020-36789: can: dev: can_get_echo_skb(): prevent call to kfree_skb() in hard IRQ context (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47669: can: vxcan: vxcan_xmit: fix use after free bug (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2021-47670: can: peak_usb: fix use after free bugs (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

April 18 (23 messages)

CVE-2025-38637: net_sched: skbprio: Remove overly strict queue assertions (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39728: clk: samsung: Fix UBSAN panic in samsung_clk_init() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39735: jfs: fix slab-out-of-bounds read in ea_get() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39930: ASoC: simple-card-utils: Don't use __free(device_node) at graph_util_parse_dai() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37893: LoongArch: BPF: Fix off-by-one error in build_prologue() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37785: ext4: fix OOB read when checking dotdot dir (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40014: objtool, spi: amd: Fix out-of-bounds stack access in amd_set_spi_freq() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40325: md/raid10: wait barrier before returning discard request with REQ_NOWAIT (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38152: remoteproc: core: Clear table_sz when rproc_shutdown (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37860: sfc: fix NULL dereferences in ef100_process_design_param() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39688: nfsd: allow SC_STATUS_FREEABLE when searching via nfs4_lookup_stateid() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38240: drm/mediatek: dp: drm_err => dev_err in HPD path to avoid NULL ptr (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38479: dmaengine: fsl-edma: free irq correctly in remove path (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38575: ksmbd: use aead_request_free to match aead_request_alloc (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39755: staging: gpib: Fix cb7210 pcmcia Oops (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39778: objtool, nvmet: Fix out-of-bounds stack access in nvmet_ctrl_state_show() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39989: x86/mce: use is_copy_from_user() to determine copy-from-user context (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40114: iio: light: Add check for array bounds in veml6075_read_int_time_ms (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37925: jfs: reject on-disk inodes of an unsupported type (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38049: x86/resctrl: Fix allocation of cleanest CLOSID on platforms with no monitors (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38104: drm/amdgpu: Replace Mutex with Spinlock for RLCG register access to avoid Priority Inversion in SRIOV (Greg Kroah-Hartman <gregkh@...uxfoundatio…)
CVE-2025-40364: io_uring: fix io_req_prep_async with provided buffers (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37838: HSI: ssi_protocol: Fix use after free vulnerability in ssi_protocol Driver Due to Race Condition (Greg Kroah-Hartman <gregkh@...uxfoundation.org…)

April 21 (1 message)

Re: CVE-2025-22077: smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Greg KH <gregkh@...uxfoundation.org>)

April 22 (1 message)

Re: CVE-2025-22077: smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Greg KH <gregkh@...uxfoundation.org>)

April 23 (4 messages)

Re: CVE-2025-22032: wifi: mt76: mt7921: fix kernel panic due to null pointer dereference (Greg KH <gregkh@...uxfoundation.org>)
Re: CVE-2024-56705: media: atomisp: Add check for rgby_data memory allocation failure (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
Re: CVE-2024-56705: media: atomisp: Add check for rgby_data memory allocation failure (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
Re: CVE-2024-56705: media: atomisp: Add check for rgby_data memory allocation failure (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

April 24 (3 messages)

REJECTED: CVE-2024-49995: tipc: guard against string buffer overrun (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
Re: CVE-2024-49995: tipc: guard against string buffer overrun (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
Re: CVE-2024-56705: media: atomisp: Add check for rgby_data memory allocation failure (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

April 29 (1 message)

CVE-2024-58099: vmxnet3: Fix packet corruption in vmxnet3_xdp_xmit_frame (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

April 30 (1 message)

Re: CVE-2025-22029: exec: fix the racy usage of fs_struct->in_exec (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

295 messages

Powered by blists - more mailing lists