linux-cve-announce mailing list - 2025/05

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [year] [list]

linux-cve-announce mailing list - 2025/05

Mon	Tue	Wed	Thu	Fri	Sat	Sun
			¹ 256	² 115	³ 3	⁴
⁵ 4	⁶	⁷ 1	⁸ 43	⁹ 56	¹⁰ 8	¹¹
¹²	¹³	¹⁴ 1	¹⁵	¹⁶ 1	¹⁷	¹⁸
¹⁹ 1	²⁰ 104	²¹	²²	²³ 1	²⁴	²⁵
²⁶ 4	²⁷	²⁸	²⁹ 7	³⁰ 2	³¹

Messages by day:

May 1 (256 messages)

CVE-2025-23140: misc: pci_endpoint_test: Avoid issue of interrupts remaining after request_irq error (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-23139: Bluetooth: hci_uart: Fix another race during initialization (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-23150: ext4: fix off-by-one error in do_split (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-23149: tpm: do not start chip while suspended (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-23151: bus: mhi: host: Fix race between unprepare and queue_buf (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-23152: arm64/crc-t10dif: fix use of out-of-scope array in crc_t10dif_arch() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-23153: arm/crc-t10dif: fix use of out-of-scope array in crc_t10dif_arch() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-23154: io_uring/net: fix io_req_post_cqe abuse by send bundle (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-23155: net: stmmac: Fix accessing freed irq affinity_hint (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-23156: media: venus: hfi_parser: refactor hfi packet parsing logic (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-23157: media: venus: hfi_parser: add check to avoid out of bound access (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-23158: media: venus: hfi: add check to handle incorrect queue size (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-23141: KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-23159: media: venus: hfi: add a check to handle OOB in sfr region (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-23160: media: mediatek: vcodec: Fix a resource leak related to the scp device in FW initialization (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-23161: PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-23162: drm/xe/vf: Don't try to trigger a full GT reset if VF (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-23163: net: vlan: don't propagate flags on open (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-23142: sctp: detect and prevent references to a freed transport in sendmsg (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-23143: net: Fix null-ptr-deref by sock_lock_init_class_and_name() and rmmod. (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-23144: backlight: led_bl: Hold led_access lock when calling led_sysfs_disable() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-23145: mptcp: fix NULL pointer in can_accept_new_subflow (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-23146: mfd: ene-kb3930: Fix a potential NULL pointer dereference (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-23147: i3c: Add NULL pointer check in i3c_master_queue_ibi() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-23148: soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37739: f2fs: fix to avoid out-of-bounds access in f2fs_truncate_inode_blocks() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37748: iommu/mediatek: Fix NULL pointer deference in mtk_iommu_device_group (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37749: net: ppp: Add bound checking for skb data on ppp_sync_txmung (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37750: smb: client: fix UAF in decryption with multichannel (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37751: x86/cpu: Avoid running off the end of an AMD erratum table (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37752: net_sched: sch_sfq: move the limit validation (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37753: s390/cpumf: Fix double free on error in cpumf_pmu_event_init() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37754: drm/i915/huc: Fix fence not released on early probe errors (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37755: net: libwx: handle page_pool_dev_alloc_pages error (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37756: net: tls: explicitly disallow disconnect (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37757: tipc: fix memory leak in tipc_link_xmit (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37740: jfs: add sanity check for agwidth in dbMount (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37758: ata: pata_pxa: Fix potential NULL pointer dereference in pxa_ata_probe() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37759: ublk: fix handling recovery & reissue in ublk_abort_queue() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37741: jfs: Prevent copying of nlink with value 0 from disk inode (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37742: jfs: Fix uninit-value access of imap allocated in the diMount() function (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37743: wifi: ath12k: Avoid memory leak while enabling statistics (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37744: wifi: ath12k: fix memory leak in ath12k_pci_remove() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37745: PM: hibernate: Avoid deadlock in hibernate_compressor_param_set() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37746: perf/dwc_pcie: fix duplicate pci_dev devices (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37747: perf: Fix hang while freeing sigtrap event (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37738: ext4: ignore xattrs past end (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37770: drm/amd/pm: Prevent division by zero (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37761: drm/xe: Fix an out-of-bounds shift when invalidating TLB (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37771: drm/amd/pm: Prevent division by zero (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37772: RDMA/cma: Fix workqueue crash in cma_netevent_work_handler (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37762: drm/virtio: Fix missed dmabuf unpinning in error path of prepare_fb() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37763: drm/imagination: take paired job reference (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37760: mm/vma: add give_up_on_oom option on modify/merge, use in uffd release (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37764: drm/imagination: fix firmware memory leaks (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37765: drm/nouveau: prime: fix ttm_bo_delayed_delete oops (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37766: drm/amd/pm: Prevent division by zero (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37767: drm/amd/pm: Prevent division by zero (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37768: drm/amd/pm: Prevent division by zero (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37769: drm/amd/pm/smu11: Prevent division by zero (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37774: slab: ensure slab->obj_exts is clear in a newly allocated slab page (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37783: drm/msm/dpu: Fix error pointers in dpu_plane_virtual_atomic_check (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37784: net: ti: icss-iep: Fix possible NULL pointer dereference for perout request (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37786: net: dsa: free routing table on probe failure (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37787: net: dsa: mv88e6xxx: avoid unregistering devlink regions which were never registered (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37788: cxgb4: fix memory leak in cxgb4_init_ethtool_filters() error path (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37789: net: openvswitch: fix nested key length validation in the set() action (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37790: net: mctp: Set SOCK_RCU_FREE (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37791: ethtool: cmis_cdb: use correct rpl size in ethtool_cmis_module_poll() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37792: Bluetooth: btrtl: Prevent potential NULL dereference (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37793: ASoC: Intel: avs: Fix null-ptr-deref in avs_component_probe() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37775: ksmbd: fix the warning from __kernel_write_iter (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37794: wifi: mac80211: Purge vif txq in ieee80211_do_stop() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37795: wifi: mac80211: Update skb's control block key in ieee80211_tx_dequeue() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37796: wifi: at76c50x: fix use after free access in at76_disconnect (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37776: ksmbd: fix use-after-free in smb_break_all_levII_oplock() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37777: ksmbd: fix use-after-free in __smb2_lease_break_noti() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37778: ksmbd: Fix dangling pointer in krb_authenticate (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37779: lib/iov_iter: fix to increase non slab folio refcount (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37781: i2c: cros-ec-tunnel: defer probe if parent EC is not present (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37780: isofs: Prevent the use of too small fid (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37782: hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37773: virtiofs: add filesystem context source name check (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49763: ntfs: fix use-after-free in ntfs_attr_find() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49765: net/9p: use a dedicated spinlock for trans_fd (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49762: ntfs: check overflow when iterating ATTR_RECORDs (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2020-36790: nvmet: fix a memory leak (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49767: 9p/trans_fd: always use O_NONBLOCK read/write (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49766: netlink: Bounds-check struct nlmsgerr creation (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49764: bpf: Prevent bpf program recursion for raw tracepoint probes (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49768: 9p: trans_fd/p9_conn_cancel: drop client lock earlier (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49769: gfs2: Check sb_bsize_shift after reading superblock (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49770: ceph: avoid putting the realm twice when decoding snaps fails (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49781: perf/x86/amd: Fix crash due to race between amd_pmu_enable_all, perf NMI and throttling (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49782: perf: Improve missing SIGTRAP checking (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49784: perf/x86/amd/uncore: Fix memory leak for events array (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49785: x86/sgx: Add overflow check in sgx_validate_offset_length() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49772: ALSA: usb-audio: Drop snd_BUG_ON() from snd_usbmidi_output_open() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49786: blk-cgroup: properly pin the parent in blkcg_css_online (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
157 more messages

May 2 (115 messages)

REJECTED: CVE-2022-49816: xen/pcpu: fix possible memory leak in register_pcpu() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37798: codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37797: net_sched: hfsc: Fix a UAF vulnerability in class handling (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49933: KVM: VMX: Reset eVMCS controls in VP assist page during hardware disabling (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53043: arm64: dts: qcom: sc7280: Mark PCIe controller as cache coherent (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53044: dm stats: check for and propagate alloc_percpu failure (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49932: KVM: VMX: Do _all_ initialization before exposing /dev/kvm to userspace (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53036: drm/amdgpu: Fix call trace warning and hang when removing amdgpu device (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53037: scsi: mpi3mr: Bad drive in topology results kernel crash (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53040: ca8210: fix mac_len negative array access (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53038: scsi: lpfc: Check kzalloc() in lpfc_sli4_cgn_params_read() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53045: usb: gadget: u_audio: don't let userspace block driver unbind (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53035: nilfs2: fix kernel-infoleak in nilfs_ioctl_wrap_copy() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53041: scsi: qla2xxx: Perform lockless command completion in abort path (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53042: drm/amd/display: Do not set DRR on pipe Commit (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53039: HID: intel-ish-hid: ipc: Fix potential use-after-free in work function (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53047: tee: amdtee: fix race condition in amdtee_open_session (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53056: scsi: qla2xxx: Synchronize the IOCB count to be in order (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53057: Bluetooth: HCI: Fix global-out-of-bounds (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53058: net/mlx5: E-Switch, Fix an Oops in error handling code (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53059: platform/chrome: cros_ec_chardev: fix kernel data leak from ioctl (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53060: igb: revert rtnl_lock() that causes deadlock (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53062: net: usb: smsc95xx: Limit packet length to skb->len (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53061: ksmbd: fix possible refcount leak in smb2_open() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53063: Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53064: iavf: fix hang on reboot with ice (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53065: perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53048: usb: typec: tcpm: fix warning when handle discover_identity message (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53066: qed/qed_sriov: guard against NULL derefs from qed_iov_get_vf_info (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53067: LoongArch: Only call get_timer_irq() once in constant_clockevent_init() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53068: net: usb: lan78xx: Limit packet length to skb->len (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53069: octeontx2-vf: Add missing free for alloc_percpu (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53072: mptcp: use the workqueue to destroy unaccepted sockets (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53071: wifi: mt76: do not run mt76_unregister_device() on unregistered hw (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53070: ACPI: PPTT: Fix to avoid sleep in the atomic context when PPTT is absent (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53073: perf/x86/amd/core: Always clear status for idx (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53074: drm/amdgpu: fix ttm_bo calltrace warning in psp_hw_fini (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53075: ftrace: Fix invalid address access in lookup_rec() when index is 0 (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53049: usb: ucsi: Fix NULL pointer deref in ucsi_connector_change() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53076: bpf: Adjust insufficient default bpf_jit_limit (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53077: drm/amd/display: fix shift-out-of-bounds in CalculateVMAndRowBytes (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53050: thunderbolt: Fix memory leak in margining (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53051: dm crypt: add cond_resched() to dmcrypt_write() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53052: cifs: fix use-after-free bug in refresh_cache_worker() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53053: erspan: do not use skb_mac_header() in ndo_start_xmit() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53054: usb: dwc2: fix a devres leak in hw_enable upon suspend resume (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53055: fscrypt: destroy keyring after security_sb_delete() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53046: Bluetooth: Fix race condition in hci_cmd_sync_clear (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53079: net/mlx5: Fix steering rules cleanup (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53089: ext4: fix task hung in ext4_xattr_delete_inode (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53090: drm/amdkfd: Fix an illegal memory access (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53091: ext4: update s_journal_inum if it changes after journal replay (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53092: interconnect: exynos: fix node leak in probe PM QoS error path (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53094: tty: serial: fsl_lpuart: fix race on RX DMA shutdown (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53095: drm/ttm: Fix a NULL pointer dereference (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53088: mptcp: fix UaF in listener shutdown (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53096: interconnect: fix mem leak when freeing nodes (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53099: firmware: xilinx: don't make a sleepable memory allocation from an atomic context (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53097: powerpc/iommu: fix memory leak with using debugfs_lookup() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53080: xsk: Add missing overflow check in xdp_umem_reg (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53100: ext4: fix WARNING in ext4_update_inline_data (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53093: tracing: Do not let histogram values have some modifiers (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53101: ext4: zero i_disksize when initializing the bootloader inode (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53102: ice: xsk: disable txq irq before flushing hw (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53103: bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53098: media: rc: gpio-ir-recv: add remove function (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53104: net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53081: ocfs2: fix data corruption after failed write (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53105: net/mlx5e: Fix cleanup null-ptr deref on encap lock (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53083: nfsd: don't replace page in rq_pages if it's a continuation of last page (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53106: nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53107: veth: Fix use after free in XDP_REDIRECT (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53108: net/iucv: Fix size of interrupt data (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53084: drm/shmem-helper: Remove another errant put in error path (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53085: drm/edid: fix info leak when failing to get panel id (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53082: vp_vdpa: fix the crash in hot unplug with vp_vdpa (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53086: wifi: mt76: connac: do not check WED status for non-mmio devices (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53087: drm/i915/active: Fix misuse of non-idle barriers as fence trackers (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53078: scsi: scsi_dh_alua: Fix memleak for 'qdata' in alua_activate() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53110: net/smc: fix NULL sndbuf_desc in smc_cdc_tx_handler() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53119: nfc: pn533: initialize struct pn533_out_arg properly (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53120: scsi: mpi3mr: Fix config page DMA memory leak (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53121: tcp: tcp_make_synack() can be called from process context (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53122: RISC-V: fix taking the text_mutex twice during sifive errata patching (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53123: PCI: s390: Fix use-after-free of PCI resources with per-function hotplug (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53124: scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53125: net: usb: smsc75xx: Limit packet length to skb->len (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53126: scsi: mpi3mr: Fix sas_hba.phy memory leak in mpi3mr_remove() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53129: ext4: Fix deadlock during directory rename (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53130: block: fix wrong mode for blkdev_put() from disk_scan_partitions() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53131: SUNRPC: Fix a server shutdown leak (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53132: scsi: mpi3mr: Fix mpi3mr_hba_port memory leak in mpi3mr_remove() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53111: loop: Fix use-after-free issues (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53127: scsi: mpi3mr: Fix expander node leak in mpi3mr_remove() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53134: bnxt_en: Avoid order-5 memory allocation for TPA data (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53136: af_unix: fix struct pid leaks in OOB support (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53137: ext4: Fix possible corruption when moving a directory (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53138: net: caif: Fix use-after-free in cfusbl_device_notify() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53128: scsi: mpi3mr: Fix throttle_groups memory leak (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
16 more messages

May 3 (3 messages)

CVE-2025-37799: vmxnet3: Fix malformed packet sizing in vmxnet3_process_xdp (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
Re: CVE-2025-37799: vmxnet3: Fix malformed packet sizing in vmxnet3_process_xdp (Greg KH <gregkh@...uxfoundation.org>)
CVE-2025-37799: vmxnet3: Fix malformed packet sizing in vmxnet3_process_xdp (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

May 5 (4 messages)

REJECTED: CVE-2023-53076: bpf: Adjust insufficient default bpf_jit_limit (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-58098: bpf: track changes_pkt_data property for global functions (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-58100: bpf: check changes_pkt_data property for extension programs (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-58237: bpf: consider that tail calls invalidate packet pointers (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

May 7 (1 message)

CVE-2020-36791: net_sched: keep alloc_hash updated after hash allocation (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

May 8 (43 messages)

CVE-2025-37801: spi: spi-imx: Add check for spi_imx_setupxfer() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37800: driver core: fix potential NULL pointer dereference in dev_uevent() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37810: usb: dwc3: gadget: check that event count does not exceed event buffer length (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37811: usb: chipidea: ci_hdrc_imx: fix usbmisc handling (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37812: usb: cdns3: Fix deadlock when using NCM gadget (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37813: usb: xhci: Fix invalid pointer dereference in Etron workaround (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37814: tty: Require CAP_SYS_ADMIN for all usages of TIOCL_SELMOUSEREPORT (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37815: misc: microchip: pci1xxxx: Fix Kernel panic during IRQ handler registration (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37816: mei: vsc: Fix fortify-panic caused by invalid counted_by() use (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37817: mcb: fix a double free bug in chameleon_parse_gdd() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37818: LoongArch: Return NULL from huge_pte_offset() for invalid PMD (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37819: irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37802: ksmbd: fix WARNING "do not call blocking ops when !TASK_RUNNING" (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37820: xen-netfront: handle NULL returned by xdp_convert_buff_to_frame() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37822: riscv: uprobes: Add missing fence.i after building the XOL buffer (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37821: sched/eevdf: Fix se->slice being set to U64_MAX and resulting crash (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37803: udmabuf: fix a buf size overflow issue during udmabuf creation (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37804: io_uring: always do atomic put from iowq (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37805: sound/virtio: Fix cancel_sync warnings on uninitialized work_structs (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37806: fs/ntfs3: Keep write operations atomic (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37807: bpf: Fix kmemleak warning for percpu hashmap (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37808: crypto: null - Use spin lock instead of mutex (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37809: usb: typec: class: Fix NULL pointer access (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37824: tipc: fix NULL pointer dereference in tipc_mon_reinit_self() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37833: net/niu: Niu requires MSIX ENTRY_DATA fields touch before entry reads (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37825: nvmet: fix out-of-bounds access in nvmet_enable_port (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37834: mm/vmscan: don't try to reclaim hwpoison folio (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37829: cpufreq: scpi: Fix null-ptr-deref in scpi_cpufreq_get_rate() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37832: cpufreq: sun50i: prevent out-of-bounds access (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37830: cpufreq: scmi: Fix null-ptr-deref in scmi_cpufreq_get_rate() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37823: net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37826: scsi: ufs: core: Add NULL check in ufshcd_mcq_compl_pending_transfer() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37827: btrfs: zoned: return EIO on RAID1 block group write pointer mismatch (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37828: scsi: ufs: mcq: Add NULL check in ufshcd_mcq_abort() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37831: cpufreq: apple-soc: Fix null-ptr-deref in apple_soc_cpufreq_get_rate() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2022-49856: net: tun: call napi_schedule_prep() to ensure we own a napi (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2022-49843: drm/amdkfd: Migrate in CPU page fault use current mm (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2022-49897: fscrypt: fix keyring memory leak on mount failure (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2025-23139: Bluetooth: hci_uart: Fix another race during initialization (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2023-53122: RISC-V: fix taking the text_mutex twice during sifive errata patching (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2023-53104: net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2023-53129: ext4: Fix deadlock during directory rename (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2023-53130: block: fix wrong mode for blkdev_put() from disk_scan_partitions() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

May 9 (56 messages)

CVE-2022-21546: scsi: target: Fix WRITE_SAME No Data Buffer crash (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37835: smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37837: iommu/tegra241-cmdqv: Fix warnings due to dmam_free_coherent() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37836: PCI: Fix reference leak in pci_register_host_bridge() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37847: accel/ivpu: Fix deadlock in ivpu_ms_cleanup() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37848: accel/ivpu: Fix PM related deadlocks in MS IOCTLs (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37849: KVM: arm64: Tear down vGIC on failed vCPU creation (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37850: pwm: mediatek: Prevent divide-by-zero in pwm_mediatek_config() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37851: fbdev: omapfb: Add 'plane' value check (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37852: drm/amdgpu: handle amdgpu_cgs_create_device() errors in amd_powerplay_create() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37853: drm/amdkfd: debugfs hang_hws skip GPU with MES (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37854: drm/amdkfd: Fix mode1 reset crash issue (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37855: drm/amd/display: Guard Possible Null Pointer Dereference (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37856: btrfs: harden block_group::bg_list against list_del() races (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37839: jbd2: remove wrong sb->s_sequence check (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37857: scsi: st: Fix array overflow in st_setup() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37858: fs/jfs: Prevent integer overflow in AG size calculation (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37859: page_pool: avoid infinite loop to schedule delayed worker (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37861: scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37862: HID: pidff: Fix null pointer dereference in pidff_find_fields (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37840: mtd: rawnand: brcmnand: fix PM resume warning (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37841: pm: cpupower: bench: Prevent NULL dereference on malloc failure (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37843: PCI: pciehp: Avoid unnecessary device replacement check (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37844: cifs: avoid NULL pointer dereference in dbg call (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37846: arm64: mops: Do not dereference src reg for a set operation (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37842: spi: fsl-qspi: use devm function instead of driver remove (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37873: eth: bnxt: fix missing ring index trim on error path (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37845: tracing: fprobe events: Fix possible UAF on modules (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37863: ovl: don't allow datadir only (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37874: net: ngbe: fix memory leak in ngbe_probe() error path (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37864: net: dsa: clean up FDB, MDB, VLAN entries on unbind (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37875: igc: fix PTM cycle trigger logic (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37865: net: dsa: mv88e6xxx: fix -ENOENT when deleting VLANs and MST is unsupported (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37866: mlxbf-bootctl: use sysfs_emit_at() in secure_boot_fuse_state_show() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37867: RDMA/core: Silence oversized kvmalloc() warning (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37868: drm/xe/userptr: fix notifier vs folio deadlock (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37869: drm/xe: Use local fence in error path of xe_migrate_clear (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37870: drm/amd/display: prevent hang on link training fail (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37871: nfsd: decrease sc_count directly if fail to queue dl_recall (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37872: net: txgbe: fix memory leak in txgbe_probe() error path (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37877: iommu: Clear iommu-dma ops on cleanup (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37876: netfs: Only create /proc/fs/netfs with CONFIG_PROC_FS (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37886: pds_core: make wait_context part of q_info (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37887: pds_core: handle unsupported PDS_CORE_CMD_FW_CONTROL result (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37878: perf/core: Fix WARN_ON(!ctx) in __free_event() for partial init (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37879: 9p/net: fix improper handling of bogus negative read/write replies (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37882: usb: xhci: Fix isochronous Ring Underrun/Overrun event handling (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37880: um: work around sched_yield not yielding in time-travel mode (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37885: KVM: x86: Reset IRTE to host control if *new* route isn't postable (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37881: usb: gadget: aspeed: Add NULL pointer check in ast_vhub_init_dev() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37888: net/mlx5: Fix null-ptr-deref in mlx5_create_{inner_,}ttc_table() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37883: s390/sclp: Add check for get_zeroed_page() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37884: bpf: Fix deadlock between rcu_tasks_trace and event_mutex. (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
Re: REJECTED: CVE-2025-0927: heap overflow in the hfs and hfsplus filesystems with manually crafted filesystem (Greg KH <gregkh@...uxfoundation.org>)
Re: REJECTED: CVE-2025-0927: heap overflow in the hfs and hfsplus filesystems with manually crafted filesystem (Greg KH <gregkh@...uxfoundation.org>)
Re: REJECTED: CVE-2025-0927: heap overflow in the hfs and hfsplus filesystems with manually crafted filesystem (Greg KH <gregkh@...uxfoundation.org>)

May 10 (8 messages)

REJECTED: CVE-2025-37835: smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2025-37795: wifi: mac80211: Update skb's control block key in ieee80211_tx_dequeue() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2024-50016: drm/amd/display: Avoid overflow assignment in link_dp_cts (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2022-48917: ASoC: ops: Shift tested values in snd_soc_put_volsw() by +min (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37889: ASoC: ops: Consistently treat platform_max as control value (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2024-39501: drivers: core: synchronize really_probe() and dev_uevent() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53145: Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2023-53063: Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

May 14 (1 message)

CVE-2023-53146: media: dw2102: Fix null-ptr-deref in dw2102_i2c_transfer() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

May 16 (1 message)

CVE-2025-37890: net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

May 19 (1 message)

CVE-2025-37891: ALSA: ump: Fix buffer overflow at UMP SysEx message conversion (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

May 20 (104 messages)

CVE-2025-37892: mtd: inftlcore: Add error check for inftl_read_oob() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2025-21686: io_uring/rsrc: require cloned buffers to share accounting contexts (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2025-21837: io_uring/uring_cmd: unconditionally copy SQEs at prep time (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2025-37804: io_uring: always do atomic put from iowq (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2022-49056: io_uring: abort file assignment prior to assigning creds (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2022-49933: KVM: VMX: Reset eVMCS controls in VP assist page during hardware disabling (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2025-21633: io_uring/sqpoll: zero sqd->thread on tctx errors (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37905: firmware: arm_scmi: Balance device refcount when destroying devices (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37894: net: use sock_gen_put() when sk_state is TCP_TIME_WAIT (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37904: btrfs: fix the inode leak in btrfs_iget() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37913: net_sched: qfq: Fix double list add in class with netem as child qdisc (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37908: mm, slab: clean up slab->obj_exts always (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37909: net: lan743x: Fix memleak issue when GSO enabled (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37896: spi: spi-mem: Add fix to avoid divide error (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37918: Bluetooth: btusb: avoid NULL pointer dereference in skb_dequeue() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37914: net_sched: ets: Fix double list add in class with netem as child qdisc (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37929: arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37916: pds_core: remove write-after-free of client_id (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37897: wifi: plfxlc: Remove erroneous assert in plfxlc_mac_release (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37933: octeon_ep: Fix host hang issue during device reboot (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37898: powerpc64/ftrace: fix module loading without patchable function entries (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37899: ksmbd: fix use-after-free in session logoff (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37900: iommu: Fix two issues in iommu_copy_struct_from_user() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37903: drm/amd/display: Fix slab-use-after-free in hdcp (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37934: ASoC: simple-card-utils: Fix pointer check in graph_util_parse_link_direction (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37928: dm-bufio: don't schedule in atomic context (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37930: drm/nouveau: Fix WARN_ON in nouveau_fence_context_kill() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37924: ksmbd: fix use-after-free in kerberos authentication (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37936: perf/x86/intel: KVM: Mask PEBS_ENABLE loaded for guest with vCPU's value. (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37920: xsk: Fix race condition in AF_XDP generic RX path (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37922: book3s64/radix : Align section vmemmap start address to PAGE_SIZE (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37927: iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37917: net: ethernet: mtk-star-emac: fix spinlock recursion issues on rx/tx poll (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37906: ublk: fix race between io_uring_cmd_complete_in_task and ublk_cancel_cmd (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37912: ice: Check VF VSI Pointer Value in ice_vc_add_fdir_fltr() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37910: ptp: ocp: Fix NULL dereference in Adva board SMA sysfs operations (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37915: net_sched: drr: Fix double list add in class with netem as child qdisc (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37907: accel/ivpu: Fix locking order in ivpu_job_submit (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37895: bnxt_en: Fix error handling path in bnxt_init_chip() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37901: irqchip/qcom-mpm: Prevent crash when trying to handle non-wake GPIOs (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37902: dm: fix copying after src array boundaries (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37931: btrfs: adjust subpage bit start based on sectorsize (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37932: sch_htb: make htb_qlen_notify() idempotent (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37935: net: ethernet: mtk_eth_soc: fix SER panic with 4GB+ RAM (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37919: ASoC: amd: acp: Fix NULL pointer deref in acp_i2s_set_tdm_slot (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37921: vxlan: vnifilter: Fix unlocked deletion of default FDB entry (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37923: tracing: Fix oob write in trace_seq_to_buffer() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37926: ksmbd: fix use-after-free in ksmbd_session_rpc_open (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37911: bnxt_en: Fix out-of-bound memcpy() during ethtool -w (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37939: libbpf: Fix accessing BTF.ext core_relo header (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37938: tracing: Verify event formats that have "%*p.." (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37937: objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37940: ftrace: Add cond_resched() to ftrace_graph_set_hash() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37943: wifi: ath12k: Fix invalid data access in ath12k_dp_rx_h_undecap_nwifi (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37941: ASoC: codecs: wcd937x: fix a potential memory leak in wcd937x_soc_codec_probe() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37942: HID: pidff: Make sure to fetch pool before checking SIMULTANEOUS_MAX (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37944: wifi: ath12k: Fix invalid entry fetch in ath12k_dp_mon_srng_process (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37945: net: phy: allow MDIO bus PM ops to start/stop state machine for phylink-controlled PHY (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37948: arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37947: ksmbd: prevent out-of-bounds stream writes by validating *pos (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37946: s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37956: ksmbd: prevent rename with empty string (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37954: smb: client: Avoid race in open_cached_dir with lease breaks (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37955: virtio-net: free xsk_buffs on error in virtnet_xsk_pool_enable() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37957: KVM: SVM: Forcibly leave SMM mode on SHUTDOWN interception (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37952: ksmbd: Fix UAF in __close_file_table_ids (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37949: xenbus: Use kref to track req lifetime (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37963: arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37953: sch_htb: make htb_deactivate() idempotent (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37962: ksmbd: fix memory leak in parse_lease_state() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37950: ocfs2: fix panic in failed foilio allocation (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37951: drm/v3d: Add job to pending list if the reset was skipped (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37959: bpf: Scrub packet on bpf_redirect_peer (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37964: x86/mm: Eliminate window where TLB flushes may be inadvertently skipped (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37960: memblock: Accept allocated memory before use in memblock_double_array() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37958: mm/huge_memory: fix dereferencing invalid pmd migration entry (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37961: ipvs: fix uninit-value for saddr in do_output_route4 (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37966: riscv: Fix kernel crash due to PR_SET_TAGGED_ADDR_CTRL (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37965: drm/amd/display: Fix invalid context error in dml helper (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37967: usb: typec: ucsi: displayport: Fix deadlock (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37968: iio: light: opt3001: fix deadlock due to concurrent flag access (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37969: iio: imu: st_lsm6dsx: fix possible lockup in st_lsm6dsx_read_tagged_fifo (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37970: iio: imu: st_lsm6dsx: fix possible lockup in st_lsm6dsx_read_fifo (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37971: staging: bcm2835-camera: Initialise dev in v4l2_dev (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37972: Input: mtk-pmic-keys - fix possible null pointer dereference (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37973: wifi: cfg80211: fix out-of-bounds access during multi-link element defragmentation (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37974: s390/pci: Fix missing check for zpci_create_device() error return (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37976: wifi: ath12k: Fix invalid entry fetch in ath12k_dp_mon_srng_process (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37975: riscv: module: Fix out-of-bounds relocation access (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37977: scsi: ufs: exynos: Disable iocc if dma-coherent property isn't set (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37978: block: integrity: Do not call set_page_dirty_lock() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37979: ASoC: qcom: Fix sc7280 lpass potential buffer overflow (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37980: block: fix resource leak in blk_register_queue() error path (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37982: wifi: wl1251: fix memory leak in wl1251_tx_work (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37981: scsi: smartpqi: Use is_kdump_kernel() to check for kdump (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37984: crypto: ecdsa - Harden against integer overflows in DIV_ROUND_UP() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37983: qibfs: fix _another_ leak (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37985: USB: wdm: close race between wdm_open and wdm_wwan_port_stop (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37986: usb: typec: class: Invalidate USB device pointers on partner unregistration (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
5 more messages

May 23 (1 message)

Re: REJECTED: CVE-2025-0927: heap overflow in the hfs and hfsplus filesystems with manually crafted filesystem (Greg KH <gregkh@...uxfoundation.org>)

May 26 (4 messages)

REJECTED: CVE-2025-37753: s390/cpumf: Fix double free on error in cpumf_pmu_event_init() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2025-37902: dm: fix copying after src array boundaries (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2024-36907: SUNRPC: add a missing rpc_stat for TCP TLS (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37992: net_sched: Flush gso_skb list too during ->change() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

May 29 (7 messages)

CVE-2025-37994: usb: typec: ucsi: displayport: Fix NULL pointer access (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37993: can: m_can: m_can_class_allocate_dev(): initialize spin lock on device probe (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37995: module: ensure that kobject_put() is safe for module type kobjects (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37996: KVM: arm64: Fix uninitialized memcache pointer in user_mem_abort() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37997: netfilter: ipset: fix region locking in hash types (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37998: openvswitch: Fix unsafe attribute parsing in output_userspace() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-37999: fs/erofs/fileio: call erofs_onlinefolio_split() after bio_add_folio() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

May 30 (2 messages)

Re: CVE-2025-37832: cpufreq: sun50i: prevent out-of-bounds access (Greg KH <gregkh@...uxfoundation.org>)
Re: CVE-2025-37832: cpufreq: sun50i: prevent out-of-bounds access (Greg KH <gregkh@...uxfoundation.org>)

607 messages

Powered by blists - more mailing lists