linux-cve-announce mailing list - 2025/07

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

linux-cve-announce mailing list - 2025/07

Mon	Tue	Wed	Thu	Fri	Sat	Sun
	¹	² 3	³ 78	⁴ 61	⁵	⁶ 1
⁷	⁸ 2	⁹ 26	¹⁰ 84	¹¹	¹²	¹³
¹⁴	¹⁵ 1	¹⁶	¹⁷	¹⁸ 1	¹⁹ 2	²⁰
²¹	²² 1	²³	²⁴	²⁵ 115	²⁶	²⁷
²⁸ 30	²⁹	³⁰ 1	³¹

Messages by day:

July 2 (3 messages)

CVE-2025-38091: drm/amd/display: check stream id dml21 wrapper to get plane_id (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38092: ksmbd: use list_first_entry_or_null for opinfo_get_list() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38093: arm64: dts: qcom: x1e80100: Add GPU cooling (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

July 3 (78 messages)

CVE-2025-38095: dma-buf: insert memory barrier before updating num_fences (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38094: net: cadence: macb: Fix a possible deadlock in macb_halt_tx. (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38097: espintcp: remove encap socket caching to avoid reference leak (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38096: wifi: iwlwifi: don't warn when if there is a FW error (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38098: drm/amd/display: Don't treat wb connector as physical in create_validate_stream_for_sink (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38099: Bluetooth: Disable SCO support if READ_VOICE_SETTING is unsupported/broken (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38101: ring-buffer: Fix buffer locking in ring_buffer_subbuf_order_set() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38100: x86/iopl: Cure TIF_IO_BITMAP inconsistencies (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38111: net/mdiobus: Fix potential out-of-bounds read/write access (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38112: net: Fix TOCTOU issue in sk_is_readable() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38115: net_sched: sch_sfq: fix a potential crash on gso_skb handling (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38113: ACPI: CPPC: Fix NULL pointer dereference when nosmp is used (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38114: e1000: Move cancel_work_sync to avoid deadlock (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38116: wifi: ath12k: fix uaf in ath12k_core_init() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38117: Bluetooth: MGMT: Protect mgmt_pending list with its own lock (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38119: scsi: core: ufs: Fix a hang in the error handler (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38120: netfilter: nf_set_pipapo_avx2: fix initial map fill (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38102: VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38123: net: wwan: t7xx: Fix napi rx poll issue (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38121: wifi: iwlwifi: mld: avoid panic on init failure (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38122: gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38126: net: stmmac: make sure that ptp_rate is not 0 before configuring timestamping (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38118: Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38124: net: fix udp gso skb_segment after pull from frag_list (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38127: ice: fix Tx scheduler error handling in XDP callback (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38125: net: stmmac: make sure that ptp_rate is not 0 before configuring EST (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38129: page_pool: Fix use-after-free in page_pool_recycle_in_ring (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38128: Bluetooth: MGMT: reject malformed HCI_CMD_SYNC commands (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38103: HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38106: io_uring: fix use-after-free of sq->thread in __io_uring_show_fdinfo() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38107: net_sched: ets: fix a race in ets_qdisc_change() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38105: ALSA: usb-audio: Kill timer properly at removal (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38108: net_sched: red: fix a race in __red_change() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38109: net/mlx5: Fix ECVF vports unload on shutdown flow (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38110: net/mdiobus: Fix potential out-of-bounds clause 45 read/write access (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38131: coresight: prevent deactivate active config while enabling the config (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38143: backlight: pm8941: Add NULL check in wled_configure() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38144: watchdog: lenovo_se30_wdt: Fix possible devm_ioremap() NULL pointer dereference in lenovo_se30_wdt_probe… (Greg Kroah-Hartman <gregkh@...uxfoundat…)
CVE-2025-38147: calipso: Don't call calipso functions for AF_INET sk. (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38149: net: phy: clear phydev->devlink when the link is deleted (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38141: dm: fix dm_blk_report_zones (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38140: dm: limit swapping tables for devices with zone write plugs (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38142: hwmon: (asus-ec-sensors) check sensor index in read_string() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38154: bpf, sockmap: Avoid using sk_socket after free when sending (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38155: wifi: mt76: mt7915: Fix null-ptr-deref in mt7915_mmio_wed_init() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38157: wifi: ath9k_htc: Abort software beacon handling if disabled (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38146: net: openvswitch: Fix the dead loop of MPLS parse (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38160: clk: bcm: rpi: Add NULL check in raspberrypi_clk_register() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38145: soc: aspeed: Add NULL check in aspeed_lpc_enable_snoop() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38151: RDMA/cma: Fix hang when cma_netevent_callback fails to queue_work (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38148: net: phy: mscc: Fix memory leak when using one step timestamping (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38150: af_packet: move notifier's packet_dev_mc out of rcu critical section (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38153: net: usb: aqc111: fix error handling of usbnet read calls (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38137: PCI/pwrctrl: Cancel outstanding rescan work when unregistering (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38162: netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38159: wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38132: coresight: holding cscfg_csdev_lock while removing cscfg from csdev (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38133: iio: adc: ad4851: fix ad4858 chan pointer handling (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38161: RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38138: dmaengine: ti: Add NULL check in udma_probe() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38134: usb: acpi: Prevent null pointer dereference in usb_acpi_add_usb4_devlink() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38164: f2fs: zone: fix to avoid inconsistence in between SIT and SSA (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38173: crypto: marvell/cesa - Handle zero-length skcipher requests (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38168: perf: arm-ni: Unregister PMUs on probe failure (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38170: arm64/fpsimd: Discard stale CPU state when handling SME traps (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38156: wifi: mt76: mt7996: Fix null-ptr-deref in mt7996_mmio_wed_init() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38158: hisi_acc_vfio_pci: fix XQE dma address error (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38135: serial: Fix potential null-ptr-deref in mlb_usio_probe() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38136: usb: renesas_usbhs: Reorder clock handling and power management in probe (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38139: netfs: Fix oops in write-retry from mis-resetting the subreq iterator (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38130: drm/connector: only call HDMI audio helper plugged cb if non-null (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38165: bpf, sockmap: Fix panic when calling skb_linearize (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38166: bpf: fix ktls panic with sockmap (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38167: fs/ntfs3: handle hdr_first_de() return value (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38169: arm64/fpsimd: Avoid clobbering kernel FPSIMD state with SMSTOP (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38171: power: supply: max77705: Fix workqueue error handling in probe (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38163: f2fs: fix to do sanity check on sbi->total_valid_block_count (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38172: erofs: avoid using multiple devices with different type (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

July 4 (61 messages)

CVE-2025-38175: binder: fix yet another UAF in binder_devices (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38174: thunderbolt: Do not double dequeue a configuration request (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38176: binder: fix use-after-free in binderfs_evict_inode() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38177: sch_hfsc: make hfsc_qlen_notify() idempotent (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38179: smb: client: fix max_sge overflow in smb_extract_folioq_to_rdma() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38178: EDAC/igen6: Fix NULL pointer dereference (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38188: drm/msm/a7xx: Call CP_RESET_CONTEXT_STATE (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38189: drm/v3d: Avoid NULL pointer dereference in `v3d_job_update_stats()` (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38190: atm: Revert atm_account_tx() if copy_from_iter_full() fails. (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38191: ksmbd: fix null pointer dereference in destroy_previous_session (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38192: net: clear the dst when changing skb protocol (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38193: net_sched: sch_sfq: reject invalid perturb period (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38194: jffs2: check that raw node were preallocated before writing summary (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38195: LoongArch: Fix panic caused by NULL-PMD in huge_pte_offset() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38196: io_uring/rsrc: validate buffer count with offset for cloning (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38197: platform/x86: dell_rbu: Fix list usage (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38180: net: atm: fix /proc/net/atm/lec handling (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38198: fbcon: Make sure modelist not set on unregistered console (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38199: wifi: ath12k: Fix memory leak due to multiple rx_stats allocation (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38200: i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38202: bpf: Check rcu_read_lock_trace_held() in bpf_map_lookup_percpu_elem() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38201: netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38203: jfs: Fix null-ptr-deref in jfs_ioc_trim (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38204: jfs: fix array-index-out-of-bounds read in add_missing_indices (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38205: drm/amd/display: Avoid divide by zero by initializing dummy pitch to 1 (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38206: exfat: fix double free in delayed_free (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38207: mm: fix uprobe pte be overwritten when expanding vma (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38181: calipso: Fix null-ptr-deref in calipso_req_{set,del}attr(). (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38208: smb: client: add NULL check in automount_fullpath (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38209: nvme-tcp: remove tag set when second admin queue config fails (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38182: ublk: santizize the arguments from userspace when adding a device (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38183: net: lan743x: fix potential out-of-bounds write in lan743x_ptp_io_event_clock_get() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38184: tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38185: atm: atmtcp: Free invalid length skb in atmtcp_c_send(). (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38186: bnxt_en: Fix double invocation of bnxt_ulp_stop()/bnxt_ulp_start() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38187: drm/nouveau: fix a use-after-free in r535_gsp_rpc_push() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38211: RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38220: ext4: only dirty folios when data journaling regular files (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38221: ext4: fix out of bounds punch offset (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38222: ext4: inline: fix len overflow in ext4_prepare_inline_data (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38223: ceph: avoid kernel BUG for encrypted inode with unaligned file size (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38224: can: kvaser_pciefd: refine error prone echo_skb_max handling logic (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38227: media: vidtv: Terminating the subsequent process of initialization failure (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38229: media: cxusb: no longer judge rbuf when the write fails (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38225: media: imx-jpeg: Cleanup after an allocation error (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38232: NFSD: fix race between nfsd registration and exports_proc (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38234: sched/rt: Fix race in push_rt_task (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38213: vgacon: Add check for vc_origin address range in vgacon_scroll() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38215: fbdev: Fix do_register_framebuffer to prevent null-ptr-deref in fb_videomode_to_var (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38219: f2fs: prevent kernel warning due to negative i_nlink from corrupted image (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38212: ipc: fix to protect IPCS lookups using RCU (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38230: jfs: validate AG parameters in dbMount() to prevent crashes (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38226: media: vivid: Change the siize of the composing (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38228: media: imagination: fix a potential memory leak in e5010_probe() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38231: nfsd: Initialize ssc before laundromat_work to prevent NULL dereference (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38210: configfs-tsm-report: Fix NULL dereference of tsm_ops (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38214: fbdev: Fix fb_set_var to prevent null-ptr-deref in fb_videomode_to_var (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38216: iommu/vt-d: Restore context entry setup order for aliased devices (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38217: hwmon: (ftsteutates) Fix TOCTOU race in fts_read() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38233: powerpc64/ftrace: fix clobbered r15 during livepatching (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38218: f2fs: fix to do sanity check on sit_bitmap_size (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

July 6 (1 message)

CVE-2025-38235: HID: appletb-kbd: fix "appletb_backlight" backlight device reference counting (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

July 8 (2 messages)

CVE-2025-38236: af_unix: Don't leave consecutive consumed OOB skbs. (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38237: media: platform: exynos4-is: Add hardware sync wait to fimc_is_hw_change_mode() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

July 9 (26 messages)

CVE-2025-38250: Bluetooth: hci_core: Fix use-after-free in vhci_flush() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38253: HID: wacom: fix crash in wacom_aes_battery_handler() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38254: drm/amd/display: Add sanity checks for drm_edid_raw() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38239: scsi: megaraid_sas: Fix invalid node index (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38256: io_uring/rsrc: fix folio unpinning (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38257: s390/pkey: Prevent overflow in size calculation for memdup_user() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38260: btrfs: handle csum tree error with rescue=ibadroots correctly (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38263: bcache: fix NULL pointer in cache_set_flush() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38252: cxl/ras: Fix CPER handler device confusion (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38249: ALSA: usb-audio: Fix out-of-bounds read in snd_usb_get_audioformat_uac3() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38264: nvme-tcp: sanitize request list handling (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38258: mm/damon/sysfs-schemes: free old damon_sysfs_scheme_filter->memcg_path on write (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38261: riscv: save the SR_SUM status over switches (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38251: atm: clip: prevent NULL deref in clip_push() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38255: lib/group_cpus: fix NULL pointer dereference from group_cpus_evenly() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38245: atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister(). (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38259: ASoC: codecs: wcd9335: Fix missing free of regulator supplies (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38246: bnxt: properly flush XDP redirect lists (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38262: tty: serial: uartlite: register uart driver in init (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38248: bridge: mcast: Fix use-after-free during router port configuration (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38238: scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38247: userns and mnt_idmap leak in open_tree_attr(2) (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38244: smb: client: fix potential deadlock when reconnecting channels (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38241: mm/shmem, swap: fix softlockup with mTHP swapin (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38242: mm: userfaultfd: fix race of userfaultfd_move and swap cache (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38243: btrfs: fix invalid inode pointer dereferences during log replay (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

July 10 (84 messages)

CVE-2025-38266: pinctrl: mediatek: eint: Fix invalid pointer dereference for v1 platforms (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38265: serial: jsm: fix NPE during jsm_uart_port_init (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38268: usb: typec: tcpm: move tcpm_queue_vdm_unlocked to asynchronous work (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38277: mtd: nand: ecc-mxic: Fix use of uninitialized variable ret (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38278: octeontx2-pf: QOS: Refactor TC_HTB_LEAF_DEL_LAST callback (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38280: bpf: Avoid __bpf_prog_ret0_warn when jit fails (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38281: wifi: mt76: mt7996: Add NULL check in mt7996_thermal_init (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38282: kernfs: Relax constraint in draining guard (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38283: hisi_acc_vfio_pci: bugfix live migration function without VF device driver (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38288: scsi: smartpqi: Fix smp_processor_id() call trace for preemptible kernels (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38267: ring-buffer: Do not trigger WARN_ON() due to a commit_overrun (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38289: scsi: lpfc: Avoid potential ndlp use-after-free in dev_loss_tmo_callbk (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38279: bpf: Do not include stack ptr register in precision backtracking bookkeeping (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38286: pinctrl: at91: Fix possible out-of-boundary access (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38293: wifi: ath11k: fix node corruption in ar->arvifs list (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38287: IB/cm: Drop lockdep assert and WARN when freeing old msg (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38294: wifi: ath12k: fix NULL access in assign channel context handler (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38295: perf/amlogic: Replace smp_processor_id() with raw_smp_processor_id() in meson_ddr_pmu_create() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38292: wifi: ath12k: fix invalid access to memory (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38296: ACPI: platform_profile: Avoid initializing on non-ACPI platforms (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38270: net: drv: netdevsim: don't napi_complete() from netpoll (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38299: ASoC: mediatek: mt8195: Set ETDM1/2 IN/OUT to COMP_DUMMY() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38303: Bluetooth: eir: Fix possible crashes on eir_create_adv_data (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38305: ptp: remove ptp->n_vclocks check logic in ptp_vclock_in_use() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38271: net: prevent a NULL deref in rtnl_create_link() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38307: ASoC: Intel: avs: Verify content returned by parse_int_array() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38290: wifi: ath12k: fix node corruption in ar->arvifs list (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38273: net: tipc: fix refcount warning in tipc_aead_encrypt (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38274: fpga: fix potential null pointer deref in fpga_mgr_test_img_load_sgt() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38275: phy: qcom-qmp-usb: Fix an NULL vs IS_ERR() bug (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38276: fs/dax: Fix "don't skip locked entries when scanning entries" (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38309: drm/xe/vm: move xe_svm_init() earlier (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38318: perf: arm-ni: Fix missing platform_set_drvdata() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38272: net: dsa: b53: do not enable EEE on bcm63xx (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38319: drm/amd/pp: Fix potential NULL pointer dereference in atomctrl_initialize_mc_reg_table (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38310: seg6: Fix validation of nexthop addresses (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38312: fbdev: core: fbcvt: avoid division by 0 in fb_cvt_hperiod() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38269: btrfs: exit after state insertion failure at btrfs_convert_extent_bit() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38311: iavf: get rid of the crit lock (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38313: bus: fsl-mc: fix double-free on mc_dev (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38314: virtio-pci: Fix result size returned for the admin command completion (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38315: Bluetooth: btintel: Check dsbr size from EFI variable (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38316: wifi: mt76: mt7996: avoid NULL pointer dereference in mt7996_set_monitor() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38317: wifi: ath12k: Fix buffer overflow in debugfs (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38308: ASoC: Intel: avs: Fix possible null-ptr-deref when initing hw (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38297: PM: EM: Fix potential division-by-zero error in em_compute_costs() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38300: crypto: sun8i-ce-cipher - fix error handling in sun8i_ce_cipher_prepare() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38285: bpf: Fix WARN() in get_bpf_raw_tp_regs (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38291: wifi: ath12k: Prevent sending WMI commands to firmware during firmware crash (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38284: wifi: rtw89: pci: configure manual DAC mode via PCI config API only (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38302: block: don't use submit_bio_noacct_nocheck in blk_zone_wplug_bio_work (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38304: Bluetooth: Fix NULL pointer deference on eir_get_service_data (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38301: nvmem: zynqmp_nvmem: unbreak driver after cleanup (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38306: fs/fhandle.c: fix a race in call of has_locked_children() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38298: EDAC/skx_common: Fix general protection fault (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38321: smb: Log an error when close_all_cached_dirs fails (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38320: arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38330: firmware: cs_dsp: Fix OOB memory read access in KUnit test (ctl cache) (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38332: scsi: lpfc: Use memcpy() for BIOS version (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38331: net: ethernet: cortina: Use TOE/TSO on all TCP (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38333: f2fs: fix to bail out in get_new_segment() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38334: x86/sgx: Prevent attempts to reclaim poisoned pages (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38335: Input: gpio-keys - fix a sleep while atomic with PREEMPT_RT (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38336: ata: pata_via: Force PIO for ATAPI devices on VT6415/VT6330 (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38342: software node: Correct a OOB check in software_node_get_reference_args() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38338: fs/nfs/read: fix double-unlock bug in nfs_return_empty_folio() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38341: eth: fbnic: avoid double free when failing to DMA-map FW msg (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38337: jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38339: powerpc/bpf: fix JIT code size calculation of bpf trampoline (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38322: perf/x86/intel: Fix crash in icl_update_topdown_event() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38340: firmware: cs_dsp: Fix OOB memory read access in KUnit test (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38343: wifi: mt76: mt7996: drop fragments with multicast or broadcast RA (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38345: ACPICA: fix acpi operand cache leak in dswstate.c (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38344: ACPICA: fix acpi parse and parseext cache leaks (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38324: mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu(). (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38325: ksmbd: add free_transport ops in ksmbd connection (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38327: fgraph: Do not enable function_graph tracer when setting funcgraph-args (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38323: net: atm: add lec_mutex (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38347: f2fs: fix to do sanity check on ino and xnid (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38329: firmware: cs_dsp: Fix OOB memory read access in KUnit test (wmfw info) (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38326: aoe: clean device rq_list in aoedev_downdev() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38328: jffs2: check jffs2_prealloc_raw_node_refs() result in few other places (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38346: ftrace: Fix UAF when lookup kallsym after ftrace disabled (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38348: wifi: p54: prevent buffer-overflow in p54_rx_eeprom_readback() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

July 15 (1 message)

REJECTED: CVE-2023-53001: drm/drm_vma_manager: Add drm_vma_node_allow_once() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

July 18 (1 message)

CVE-2025-38349: eventpoll: don't decrement ep refcount while still holding the ep mutex (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

July 19 (2 messages)

CVE-2025-38350: net/sched: Always pass notifications when child class becomes empty (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38351: KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

July 22 (1 message)

CVE-2025-38352: posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

July 25 (115 messages)

CVE-2025-38354: drm/msm/gpu: Fix crash when throttling GPU immediately during boot (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38353: drm/xe: Fix taking invalid lock on wedge (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38363: drm/tegra: Fix a possible null pointer dereference (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38364: maple_tree: fix MA_STATE_PREALLOC flag in mas_preallocate() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38365: btrfs: fix a race between renames and directory logging (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38366: LoongArch: KVM: Check validity of "num_cpu" from user space (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38367: LoongArch: KVM: Avoid overflow with array index (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38368: misc: tps6594-pfsm: Add NULL pointer check in tps6594_pfsm_probe() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38369: dmaengine: idxd: Check availability of workqueue allocated by idxd wq driver before using (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38355: drm/xe: Process deferred GGTT node removals on device unwind (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38356: drm/xe/guc: Explicitly exit CT safe mode on unwind (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38357: fuse: fix runtime warning on truncate_folio_batch_exceptionals() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38358: btrfs: fix race between async reclaim worker and close_ctree() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38359: s390/mm: Fix in_atomic() handling in do_secure_storage_access() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38360: drm/amd/display: Add more checks for DSC / HUBP ONO guarantees (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38361: drm/amd/display: Check dce_hwseq before dereferencing it (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38362: drm/amd/display: Add null pointer check for get_first_active_display() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38371: drm/v3d: Disable interrupts before resetting the GPU (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38370: btrfs: fix failure to rebuild free space tree using multiple transactions (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38380: i2c/designware: Fix an initialization issue (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38381: Input: cs40l50-vibra - fix potential NULL dereference in cs40l50_upload_owt() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38382: btrfs: fix iteration of extrefs during log replay (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38383: mm/vmalloc: fix data race in show_numa_info() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38384: mtd: spinand: fix memory leak of ECC engine conf (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38385: net: usb: lan78xx: fix WARN in __netif_napi_del_locked on disconnect (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38386: ACPICA: Refuse to evaluate a method if arguments are missing (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38387: RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38389: drm/i915/gt: Fix timeline left held on VMA alloc error (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38388: firmware: arm_ffa: Replace mutex with rwlock to avoid sleep in atomic context (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38391: usb: typec: altmodes/displayport: do not index invalid pin_assignments (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38392: idpf: convert control queue mutex to a spinlock (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38393: NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38372: RDMA/mlx5: Fix unsafe xarray access in implicit ODP handling (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38396: fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38397: nvme-multipath: fix suspicious RCU usage warning (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38394: HID: appletb-kbd: fix memory corruption of input_handler_list (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38398: spi: spi-qpic-snand: reallocate BAM transactions (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38390: firmware: arm_ffa: Fix memory leak by freeing notifier callback node (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38399: scsi: target: Fix NULL pointer dereference in core_scsi3_decode_spec_i_port() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38373: IB/mlx5: Fix potential deadlock in MR deregistration (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38395: regulator: gpio: Fix the out-of-bounds access to drvdata::gpiods (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38400: nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails. (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38374: optee: ffa: fix sleep in atomic context (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38375: virtio-net: ensure the received length does not exceed allocated size (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38376: usb: chipidea: udc: disconnect/reconnect from host when do suspend/resume (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38377: rose: fix dangling neighbour pointers in rose_rt_device_down() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38378: HID: appletb-kbd: fix slab use-after-free bug in appletb_kbd_probe (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38379: smb: client: fix warning when reconnecting channel (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38402: idpf: return 0 size for RSS key if not supported (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38401: mtk-sd: Prevent memory corruption from DMA map failure (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38403: vsock/vmci: Clear the vmci transport packet properly when initializing it (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38404: usb: typec: displayport: Fix potential deadlock (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38405: nvmet: fix memory leak of bio integrity (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38406: wifi: ath6kl: remove WARN on bad firmware input (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38408: genirq/irq_sim: Initialize work context pointers properly (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38407: riscv: cpu_ops_sbi: Use static array for boot_data (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38409: drm/msm: Fix another leak in the submit error path (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38410: drm/msm: Fix a fence leak in submit error path (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38411: netfs: Fix double put of request (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38413: virtio-net: xsk: rx: fix the frame's length check (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38412: platform/x86: dell-wmi-sysman: Fix WMI data block retrieval in sysfs callbacks (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38414: wifi: ath12k: fix GCC_GCC_PCIE_HOT_RST definition for WCN7850 (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38415: Squashfs: check return result of sb_min_blocksize (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38416: NFC: nci: uart: Set tty->disc_data only in success path (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38418: remoteproc: core: Release rproc->clean_table after rproc_attach() fails (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38417: ice: fix eswitch code memory leak in reset scenario (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38419: remoteproc: core: Cleanup acquired resources when rproc_handle_resources() fails in rproc_attach() (Greg Kroah-Hartman <gregkh@...uxfoundation.o…)
CVE-2025-38422: net: lan743x: Modify the EEPROM and OTP size for PCI1xxxx devices (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38425: i2c: tegra: check msg length in SMBUS block read (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38429: bus: mhi: ep: Update read pointer only after buffer is written (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38421: platform/x86/amd: pmf: Use device managed allocations (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38430: nfsd: nfsd4_spo_must_allow() must check this is a v4 compound request (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38423: ASoC: codecs: wcd9375: Fix double free of regulator supplies (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38424: perf: Fix sample vs do_exit() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38427: video: screen_info: Relocate framebuffers behind PCI bridges (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38426: drm/amdgpu: Add basic validation for RAS header (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38428: Input: ims-pcu - check record size in ims_pcu_flash_firmware() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38420: wifi: carl9170: do not ping device which has failed to load firmware (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38431: smb: client: fix regression with native SMB symlinks (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38432: net: netpoll: Initialize UDP checksum field before checksumming (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38434: Revert "riscv: Define TASK_SIZE_MAX for __access_ok()" (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38433: riscv: fix runtime constant support for nommu kernels (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38435: riscv: vector: Fix context save/restore with xtheadvector (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38436: drm/scheduler: signal scheduled fence when kill job (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38450: wifi: mt76: mt7925: prevent NULL pointer dereference in mt7925_sta_set_decap_offload() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38449: drm/gem: Acquire references on GEM handles for framebuffers (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38438: ASoC: SOF: Intel: hda: Use devm_kstrdup() to avoid memleak. (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38452: net: ethernet: rtsn: Fix a null pointer dereference in rtsn_probe() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38453: io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38451: md/md-bitmap: fix GPF in bitmap_get_stats() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38440: net/mlx5e: Fix race between DIM disable and net_dim() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38437: ksmbd: fix potential use-after-free in oplock/lease break ack (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38447: mm/rmap: fix potential out-of-bounds page table access during batched unmap (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38454: ALSA: ad1816a: Fix potential NULL pointer deref in snd_card_ad1816a_pnp() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38448: usb: gadget: u_serial: Fix race condition in TTY wakeup (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38445: md/raid1: Fix stack memory use after return in raid1_reshape (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38455: KVM: SVM: Reject SEV{-ES} intra host migration if vCPU creation is in-flight (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38456: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38439: bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
16 more messages

July 28 (30 messages)

REJECTED: CVE-2025-38178: EDAC/igen6: Fix NULL pointer dereference (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38468: net/sched: Return NULL when htb_lookup_leaf encounters an empty rbtree (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38469: KVM: x86/xen: Fix cleanup logic in emulation of Xen schedop poll hypercalls (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38470: net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38480: comedi: Fix use of uninitialized data in insn_rw_emulate_bits() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38481: comedi: Fail COMEDI_INSNLIST ioctl if n_insns is too large (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38482: comedi: das6402: Fix bit shift out of bounds (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38483: comedi: das16m1: Fix bit shift out of bounds (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38484: iio: backend: fix out-of-bound write (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38485: iio: accel: fxls8962af: Fix use after free in fxls8962af_fifo_flush (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38486: soundwire: Revert "soundwire: qcom: Add set_channel_map api support" (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38487: soc: aspeed: lpc-snoop: Don't disable channels that aren't enabled (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38489: s390/bpf: Fix bpf_arch_text_poke() with new_addr == NULL again (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38488: smb: client: fix use-after-free in crypt_message when using async crypto (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38471: tls: always refresh the queue when reading sock (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38490: net: libwx: remove duplicate page_pool_put_full_page() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38491: mptcp: make fallback action and fallback decision atomic (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38492: netfs: Fix race between cache write completion and ALL_QUEUED being set (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38493: tracing/osnoise: Fix crash in timerlat_dump_stack() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38494: HID: core: do not bypass hid_hw_raw_request (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38495: HID: core: ensure the allocated report buffer can contain the reserved report ID (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38496: dm-bufio: fix sched in atomic context (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38497: usb: gadget: configfs: Fix OOB read on empty string write (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38472: netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38473: Bluetooth: Fix null-ptr-deref in l2cap_sock_resume_cb() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38474: usb: net: sierra: check for no status endpoint (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38475: smc: Fix various oops due to inet_sock type confusion. (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38476: rpl: Fix use-after-free in rpl_do_srh_inline(). (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38477: net/sched: sch_qfq: Fix race condition on qfq_aggregate (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38478: comedi: Fix initialization of data for instructions that write to subdevice (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

July 30 (1 message)

CVE-2025-38498: do_change_type(): refuse to operate on unmounted/not ours mounts (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

406 messages

Powered by blists - more mailing lists