linux-cve-announce mailing list

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [year] [list]

linux-cve-announce mailing list - 2025/06

Mon	Tue	Wed	Thu	Fri	Sat	Sun
						¹
²	³	⁴ 2	⁵ 1	⁶ 3	⁷	⁸ 2
⁹	¹⁰	¹¹	¹²	¹³	¹⁴	¹⁵
¹⁶	¹⁷	¹⁸ 388	¹⁹ 11	²⁰	²¹	²²
²³	²⁴	²⁵	²⁶	²⁷	²⁸	²⁹
³⁰

Messages by day:

June 4 (2 messages)

REJECTED: CVE-2025-37832: cpufreq: sun50i: prevent out-of-bounds access (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2025-37782: hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

June 5 (1 message)

REJECTED: CVE-2023-53025: NFSD: fix use-after-free in nfsd4_ssc_setup_dul() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

June 6 (3 messages)

CVE-2025-38000: sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38001: net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38002: io_uring/fdinfo: grab ctx->uring_lock around io_uring_show_fdinfo() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

June 8 (2 messages)

CVE-2025-38004: can: bcm: add locking for bcm_op runtime updates (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38003: can: bcm: add missing rcu read protection for procfs content (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

June 18 (388 messages)

CVE-2025-38006: net: mctp: Don't access ifa_index when missing (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38007: HID: uclogic: Add NULL check in uclogic_input_configured() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38028: NFS/localio: Fix a race in nfs_local_open_fh() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38005: dmaengine: ti: k3-udma: Add missing locking (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38017: fs/eventpoll: fix endless busy loop after timeout has expired (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38018: net/tls: fix kernel panic when alloc_page failed (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38013: wifi: mac80211: Set n_channels after allocating struct cfg80211_scan_request (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38025: iio: adc: ad7606: check for NULL before calling sw_mode_config() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38011: drm/amdgpu: csa unmap use uninterruptible lock (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38009: wifi: mt76: disable napi on driver removal (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38012: sched_ext: bpf_iter_scx_dsq_new() should always initialize iterator (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38014: dmaengine: idxd: Refactor remove call with idxd_cleanup() helper (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38019: mlxsw: spectrum_router: Fix use-after-free when deleting GRE net devices (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38022: RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38023: nfs: handle failure of nfs_get_lock_context in unlock path (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38024: RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38008: mm/page_alloc: fix race condition in unaccepted memory handling (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38020: net/mlx5e: Disable MACsec offload for uplink representor profile (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38021: drm/amd/display: Fix null check of pipe_ctx->plane_state for update_dchubp_dpp (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38026: x86/sev: Do not touch VMSA pages during SNP guest memory kdump (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38027: regulator: max20086: fix invalid memory access (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38010: phy: tegra: xusb: Use a bitmask for UTMI pad power state tracking (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38015: dmaengine: idxd: fix memory leak in error handling path of idxd_alloc (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38037: vxlan: Annotate FDB data races (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38065: orangefs: Do not truncate file size (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38066: dm cache: prevent BUG_ON by blocking retries on failed device resumes (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38039: net/mlx5e: Avoid WARN_ON when configuring MQPRIO with HTB offload enabled (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38068: crypto: lzo - Fix compression buffer overrun (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38044: media: cx231xx: set device_caps for 417 (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38054: ptp: ocp: Limit signal/freq counts in summary output functions (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38074: vhost-scsi: protect vq->log_used with vq->mutex (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38075: scsi: target: iscsi: Fix timeout on deleted connection (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38046: xen: Add support for XenServer 6.1 platform device (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38030: Revert "drm/amd: Keep display off while going into S4" (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38047: x86/fred: Fix system hang during S4 resume with FRED enabled (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38029: kasan: avoid sleepable page allocation from atomic context (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38041: clk: sunxi-ng: h616: Reparent GPU clock during frequency changes (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38042: dmaengine: ti: k3-udma-glue: Drop skip_fdq argument from k3_udma_glue_reset_rx_chn (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38035: nvmet-tcp: don't restore null sk_state_change (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38036: drm/xe/vf: Perform early GT MMIO initialization to read GMDID (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38053: idpf: fix null-ptr-deref in idpf_features_check (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38038: cpufreq: amd-pstate: Remove unnecessary driver_lock in set_boost (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38062: genirq/msi: Store the IOMMU IOVA directly in msi_desc instead of iommu_cookie (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38063: dm: fix unconditional IO throttle caused by REQ_PREFLUSH (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38045: wifi: iwlwifi: fix debug actions order (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38055: perf/x86/intel: Fix segfault with PEBS-via-PT with sample_freq (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38048: virtio_ring: Fix data race by tagging event_triggered as racy for KCSAN (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38050: mm/hugetlb: fix kernel NULL pointer dereference when replacing free hugetlb folios (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38032: mr: consolidate the ipmr_can_free_table() checks. (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38033: x86/Kconfig: make CFI_AUTO_DEFAULT depend on !RUST or Rust >= 1.88 (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38016: HID: bpf: abort dispatch if device destroyed (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38064: virtio: break and reset virtio devices on device_shutdown() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38070: ASoC: sma1307: Add NULL check in sma1307_setting_loaded() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38071: x86/mm: Check return value from memblock_phys_alloc_range() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38077: platform/x86: dell-wmi-sysman: Avoid buffer overflow in current_password_store() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38079: crypto: algif_hash - fix double free in hash_accept (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38056: ASoC: SOF: Intel: hda: Fix UAF when reloading module (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38057: espintcp: fix skb leaks (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38058: __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38069: PCI: endpoint: pci-epf-test: Fix double free that causes kernel to oops (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38078: ALSA: pcm: Fix race of buffer access at PCM OSS layer (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38081: spi-rockchip: Fix register out of bounds access (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38060: bpf: copy_verifier_state() should copy 'loop_entry' field (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38061: net: pktgen: fix access outside of user given buffer in pktgen_thread_write() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38052: net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38082: gpio: virtuser: fix potential out-of-bound write (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38040: serial: mctrl_gpio: split disable_ms into sync and no_sync APIs (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38043: firmware: arm_ffa: Set dma_mask for ffa devices (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38031: padata: do not leak refcount in reorder_work (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38051: smb: client: Fix use-after-free in cifs_fill_dirent (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38034: btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38067: rseq: Fix segfault on registration when rseq_cs is non-zero (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38072: libnvdimm/labels: Fix divide error in nd_label_data_init() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38073: block: fix race between set_blocksize and read paths (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38076: alloc_tag: allocate percpu counters for module tags dynamically (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38080: drm/amd/display: Increase block_sequence array size (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38059: btrfs: avoid NULL pointer dereference if no valid csum tree (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49935: dma-buf/dma-resv: check if the new fence is really later (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49934: wifi: mac80211: Fix UAF in ieee80211_scan_rx() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49936: USB: core: Prevent nested device-reset calls (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49937: media: mceusb: Use new usb_control_msg_*() routines (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49938: cifs: fix small mempool leak in SMB2_negotiate() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49939: binder: fix UAF of ref->proc caused by race condition (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49940: tty: n_gsm: add sanity check for gsm->receive in gsm_receive_buf() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49941: tty: n_gsm: avoid call of sleeping functions from atomic context (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49952: misc: fastrpc: fix memory corruption on probe (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49954: Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49955: powerpc/rtas: Fix RTAS MSR[HV] handling for Cell (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49956: staging: rtl8712: fix use after free bugs (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49957: kcm: fix strp_init() order and cleanup (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49943: USB: gadget: Fix obscure lockdep violation for udc_mutex (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49959: openvswitch: fix memory leak at failed datapath creation (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49953: iio: light: cm3605: Fix an error handling path in cm3605_probe() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49958: net/sched: fix netdevice reference leaks in attach_default_qdiscs() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49961: bpf: Do mark_chain_precision for ARG_CONST_ALLOC_SIZE_OR_ZERO (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49960: drm/i915: fix null pointer dereference (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49944: Revert "usb: typec: ucsi: add a common function ucsi_unregister_connectors()" (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49962: xhci: Fix null pointer dereference in remove if xHC has only one roothub (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-49946: clk: bcm: rpi: Prevent out-of-bounds access (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
289 more messages

June 19 (11 messages)

REJECTED: CVE-2025-38030: Revert "drm/amd: Keep display off while going into S4" (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2023-52733: s390/decompressor: specify __decompress() buf len to avoid overflow (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2024-35788: drm/amd/display: Fix bounds check for dcn35 DcfClocks (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2024-57920: drm/amdkfd: wq_release signals dma_fence only when available (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2024-26794: btrfs: fix race between ordered extent completion and fiemap (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2024-46700: drm/amdgpu/mes: fix mes ring buffer overflow (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2024-56786: bpf: put bpf_link's program when link is safe to be deallocated (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2021-47144: drm/amd/amdgpu: fix refcount leak (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2022-49299: usb: dwc2: gadget: don't reset gadget's driver->bus (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2024-44955: drm/amd/display: Don't refer to dc_sink in is_dsc_need_re_compute (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2024-36022: drm/amdgpu: Init zone device and drm client after mode-1 reset on reload (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

407 messages