linux-cve-announce mailing list - 2025/08

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

linux-cve-announce mailing list - 2025/08

Mon	Tue	Wed	Thu	Fri	Sat	Sun
				¹	²	³
⁴	⁵	⁶	⁷ 1	⁸	⁹ 2	¹⁰
¹¹ 4	¹² 1	¹³	¹⁴	¹⁵	¹⁶ 59	¹⁷
¹⁸	¹⁹ 62	²⁰ 1	²¹	²² 60	²³	²⁴
²⁵	²⁶ 1	²⁷	²⁸ 1	²⁹	³⁰ 1	³¹

Messages by day:

August 7 (1 message)

Re: CVE-2024-57884 patch review feedback (https://lore.kernel.org/linux-cve-announce/2025011510-CVE-2024-57884-4cf8@...gk… (Greg KH <gregkh@...uxfoundation.org>)

August 9 (2 messages)

CVE-2022-50233: Bluetooth: eir: Fix using strlen with hdev->{dev_name,short_name} (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-58238: Bluetooth: btnxpuart: Resolve TX timeout error in power save stress test (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

August 11 (4 messages)

Re: mm:fix duplicate accounting of free pages in should_reclaim_retry() (Greg KH <gregkh@...uxfoundation.org>)
REJECTED: CVE-2022-50031: scsi: iscsi: Fix HW conn removal use after free (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2025-38213: vgacon: Add check for vc_origin address range in vgacon_scroll() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38499: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

August 12 (1 message)

CVE-2025-38500: xfrm: interface: fix use-after-free after changing collect_md xfrm interface (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

August 16 (59 messages)

CVE-2025-38501: ksmbd: limit repeated connections from clients with the same IP (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38502: bpf: Fix oob access in cgroup local storage (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38504: io_uring/zcrx: fix pp destruction warnings (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38503: btrfs: fix assertion when building free space tree (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38515: drm/sched: Increment job count before swapping tail spsc queue (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38517: lib/alloc_tag: do not acquire non-existent lock in alloc_tag_top_users() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38518: x86/CPU/AMD: Disable INVLPGB on Zen2 (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38506: KVM: Allow CPU to reschedule while setting per-page memory attributes (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38507: HID: nintendo: avoid bluetooth suspend/resume stalls (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38508: x86/sev: Use TSC_FACTOR for Secure TSC frequency calculation (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38510: kasan: remove kasan_find_vm_area() to prevent possible deadlock (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38520: drm/amdkfd: Don't call mmput from MMU notifier callback (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38505: wifi: mwifiex: discard erroneous disassoc frames on STA interface (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38513: wifi: zd1211rw: Fix potential NULL pointer dereference in zd_mac_tx_to_dev() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38514: rxrpc: Fix oops due to non-existence of prealloc backlog struct (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38521: drm/imagination: Fix kernel crash when hard resetting the GPU (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38516: pinctrl: qcom: msm: mark certain pins as invalid for interrupts (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38519: mm/damon: fix divide by zero in damon_get_intervals_score() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38509: wifi: mac80211: reject VHT opmode for unsupported channel widths (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38511: drm/xe/pf: Clear all LMTT pages on alloc (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38512: wifi: prevent A-MSDU attacks in mesh networks (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38523: cifs: Fix the smbd_response slab to allow usercopy (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38522: sched/ext: Prevent update_locked_rq() calls with NULL rq (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38532: net: libwx: properly reset Rx ring descriptor (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38533: net: libwx: fix the using of Rx buffer DMA (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38534: netfs: Fix copy-to-cache so that it performs collection with ceph+fscache (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38535: phy: tegra: xusb: Fix unbalanced regulator disable in UTMI PHY mode (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38536: net: airoha: fix potential use-after-free in airoha_npu_get() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38537: net: phy: Don't register LEDs for genphy (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38538: dmaengine: nbpfaxi: Fix memory corruption in probe() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38539: tracing: Add down_write(trace_event_sem) when adding trace event (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38525: rxrpc: Fix irq-disabled in local_bh_enable() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38531: iio: common: st_sensors: Fix use of uninitialize device structs (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38524: rxrpc: Fix recv-recv race of completed call (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38526: ice: add NULL check in eswitch lag check (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38527: smb: client: fix use-after-free in cifs_oplock_break (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38528: bpf: Reject %p% format string in bprintf-like helpers (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38529: comedi: aio_iiro_16: Fix bit shift out of bounds (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38530: comedi: pcl812: Fix bit shift out of bounds (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38540: HID: quirks: Add quirk for 2 Chicony Electronics HP 5MP Cameras (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38542: net: appletalk: Fix device refcount leak in atrtr_create() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38543: drm/tegra: nvdec: Fix dma_alloc_coherent error check (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38544: rxrpc: Fix bug due to prealloc collision (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38545: net: ethernet: ti: am65-cpsw-nuss: Fix skb size by accounting for skb_shared_info (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38546: atm: clip: Fix memory leak of struct clip_vcc. (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38541: wifi: mt76: mt7925: Fix null-ptr-deref in mt7925_thermal_init() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38548: hwmon: (corsair-cpro) Validate the size of the received input buffer (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38547: iio: adc: axp20x_adc: Add missing sentinel to AXP717 ADC channel maps (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38549: efivarfs: Fix memory leak of efivarfs_fs_info in fs_context error paths (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38550: ipv6: mcast: Delay put pmc->idev in mld_del_delrec() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38551: virtio-net: fix recursived rtnl_lock() during probe() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38552: mptcp: plug races between subflow fail and subflow creation (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-32246: ksmbd: call rcu_barrier() in ksmbd_server_exit() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-4515: ksmbd: validate command request size (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-32249: ksmbd: not allow guest user on multichannel (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-3866: ksmbd: validate session id and tree id in the compound request (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-4130: ksmbd: fix wrong next length validation of ea buffer in smb2_set_ea() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-3865: ksmbd: fix out-of-bound read in smb2_write (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-3867: ksmbd: fix out of bounds read in smb2_sess_setup (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

August 19 (62 messages)

CVE-2025-38553: net/sched: Restrict conditions for adding duplicating netems to qdisc tree (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38554: mm: fix a UAF when vma->mm is freed after vma->vm_refcnt got dropped (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38564: perf/core: Handle buffer mapping fail correctly in perf_mmap() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38566: sunrpc: fix handling of server side tls alerts (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38567: nfsd: avoid ref leak in nfsd_open_local_fh() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38568: net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38569: benet: fix BUG when creating VFs (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38570: eth: fbnic: unlink NAPIs from queues on error to open (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38571: sunrpc: fix client side handling of tls alerts (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38572: ipv6: reject malicious packets in ipv6_gso_segment() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38573: spi: cs42l43: Property entry should be a null-terminated array (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38576: powerpc/eeh: Make EEH driver device hotplug safe (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38555: usb: gadget : fix use-after-free in composite_dev_cleanup() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38565: perf/core: Exit early on perf_mmap() fail (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38556: HID: core: Harden s32ton() against conversion to 0 bits (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38574: pptp: ensure minimal skb length in pptp_xmit() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38559: platform/x86/intel/pmt: fix a crashlog NULL pointer access (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38561: ksmbd: fix Preauh_HashValue race condition (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38562: ksmbd: fix null pointer dereference error in generate_encryptionkey (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38563: perf/core: Prevent VMA split of buffer mappings (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38587: ipv6: fix possible infinite loop in fib6_info_uses_dev() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38588: ipv6: prevent infinite loop in rt6_nlmsg_size() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38590: net/mlx5e: Remove skb secpath if xfrm state is not found (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38591: bpf: Reject narrower access to pointer ctx fields (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38592: Bluetooth: hci_devcd_dump: fix out-of-bounds via dev_coredumpv (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38593: Bluetooth: hci_sync: fix double free in 'hci_discovery_filter_clear()' (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38595: xen: fix UAF in dmabuf_exp_from_pages() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38579: f2fs: fix KMSAN uninit-value in extent_info usage (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38598: drm/amdgpu: fix use-after-free in amdgpu_userq_suspend+0x51a/0x5a0 (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38597: drm/rockchip: vop2: fail cleanly if missing a primary plane for a video-port (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38599: wifi: mt76: mt7996: Fix possible OOB access in mt7996_tx() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38557: HID: apple: validate feature-report field count to prevent NULL pointer dereference (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38600: wifi: mt76: mt7925: fix off by one in mt7925_mcu_hw_scan() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38601: wifi: ath11k: clear initialized flag for deinit-ed srng lists (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38602: iwlwifi: Add missing check for alloc_ordered_workqueue (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38558: usb: gadget: uvc: Initialize frame-based format color matching descriptor (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38560: x86/sev: Evict cache lines during SNP memory validation (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38604: wifi: rtl818x: Kill URBs before clearing tx status queue (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38608: bpf, ktls: Fix data corruption when using bpf_msg_pop_data() in ktls (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38578: f2fs: fix to avoid UAF in f2fs_sync_inode_meta() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38589: neighbour: Fix null-ptr-deref in neigh_flush_dev(). (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38581: crypto: ccp - Fix crash when rebind ccp device for ccp.ko (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38594: iommu/vt-d: Fix UAF on sva unbind with pending IOPFs (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38596: drm/panthor: Fix UAF in panthor_gem_create_with_handle() debugfs code (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38603: drm/amdgpu: fix slab-use-after-free in amdgpu_userq_mgr_fini+0x70c (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38584: padata: Fix pd UAF once and for all (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38605: wifi: ath12k: Pass ab pointer directly to ath12k_dp_tx_get_encap_type() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38585: staging: media: atomisp: Fix stack buffer overflow in gmin_get_var_int() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38577: f2fs: fix to avoid panic in f2fs_evict_inode (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38580: ext4: fix inode use after free in ext4_end_io_rsv_work() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38607: bpf: handle jset (if a & b ...) as a jump in CFG computation (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38614: eventpoll: Fix semi-unbounded recursion (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38611: vmci: Prevent the dispatching of uninitialized payloads (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38610: powercap: dtpm_cpu: Fix NULL pointer dereference in get_pd_power_uw() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38606: wifi: ath12k: Avoid accessing uninitialized arvif->ar during beacon miss (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38609: PM / devfreq: Check governor before using governor->name (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38612: staging: fbtft: fix potential memory leak in fbtft_framebuffer_alloc() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38613: staging: gpib: fix unset padding field copy back to userspace (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38615: fs/ntfs3: cancle set bad inode after removing name fails (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38582: RDMA/hns: Fix double destruction of rsv_qp (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38583: clk: xilinx: vcu: unregister pll_post only if registered correctly (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38586: bpf, arm64: Fix fp initialization for exception boundary (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

August 20 (1 message)

REJECTED: CVE-2022-50083: ext4: add EXT4_INODE_HAS_XATTR_SPACE macro in xattr.h (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

August 22 (60 messages)

CVE-2025-38618: vsock: Do not allow binding to VMADDR_PORT_ANY (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-58239: tls: stop recv() if initial process_rx_list gave us non-DATA (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38616: tls: handle data disappearing from under the TLS ULP (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38617: net/packet: fix a race in packet_set_ring() and packet_notifier() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38630: fbdev: imxfb: Check fb_add_videomode to prevent null-ptr-deref (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38634: power: supply: cpcap-charger: Fix null check for power_supply_get_by_name (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38636: rv: Use strings in da monitors tracepoints (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38627: f2fs: compress: fix UAF of f2fs_inode_info in f2fs_free_dic (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38647: wifi: rtw89: sar: drop lockdep assertion in rtw89_set_sar_from_acpi (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38620: zloop: fix KASAN use-after-free of tag set (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38629: ALSA: usb: scarlett2: Fix missing NULL check (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38631: clk: imx95-blk-ctl: Fix synchronous abort (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38632: pinmux: fix race causing mux_owner NULL with active mux_usecount (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38635: clk: davinci: Add NULL check in davinci_lpsc_clk_register() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38638: ipv6: add a retry logic in net6_rt_notify() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38619: media: ti: j721e-csi2rx: fix list_del corruption (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38622: net: drop UFO packets in udp_rcv_segment() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38623: PCI: pnv_php: Fix surprise plug detection and recovery (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38633: clk: spacemit: mark K1 pll1_d8 as critical (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38640: bpf: Disable migration in nf_hook_run_bpf(). (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38624: PCI: pnv_php: Clean up allocated IRQs on unplug (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38639: netfilter: xt_nfacct: don't assume acct name is null-terminated (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38625: vfio/pds: Fix missing detach_ioas op (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38621: md: make rdev_addable usable for rcu mode (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38626: f2fs: fix to trigger foreground gc during f2fs_map_blocks() in lfs mode (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38642: wifi: mac80211: fix WARN_ON for monitor mode on some devices (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38628: vdpa/mlx5: Fix release of uninitialized resources on error path (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38651: landlock: Fix warning from KUnit tests (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38662: ASoC: mediatek: mt8365-dai-i2s: pass correct size to mt8365_dai_set_priv (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38652: f2fs: fix to avoid out-of-boundary access in devs.path (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38653: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38655: pinctrl: canaan: k230: add NULL check in DT parse (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38654: pinctrl: canaan: k230: Fix order of DT parse and pinctrl register (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38656: wifi: iwlwifi: Fix error code in iwl_op_mode_dvm_start() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38673: Revert "drm/gem-framebuffer: Use dma_buf from GEM object instance" (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38657: wifi: rtw89: mcc: prevent shift wrapping in rtw89_core_mlsr_switch() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38658: nvmet: pci-epf: Do not complete commands twice if nvmet_req_init() fails (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38659: gfs2: No more self recovery (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38643: wifi: cfg80211: Add missing lock in cfg80211_check_and_end_cac() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38645: net/mlx5: Check device memory pointer before usage (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38660: [ceph] parse_longname(): strrchr() expects NUL-terminated string (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38649: arm64: dts: qcom: qcs615: fix a crash issue caused by infinite loop for Coresight (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38648: spi: stm32: Check for cfg availability in stm32_spi_probe (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38646: wifi: rtw89: avoid NULL dereference when RX problematic packet on unsupported 6 GHz band (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38644: wifi: mac80211: reject TDLS operations when station is not associated (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38661: platform/x86: alienware-wmi-wmax: Fix `dmi_system_id` array (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38672: Revert "drm/gem-dma: Use dma_buf from GEM object instance" (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38650: hfsplus: remove mutex_lock check in hfsplus_free_extents (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38664: ice: Fix a null pointer dereference in ice_copy_and_init_pkg() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38665: can: netlink: can_changelink(): fix NULL pointer deref of struct can_priv::do_set_mode (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38668: regulator: core: fix NULL dereference on unbind due to stale coupling data (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38675: xfrm: state: initialize state_ptrs earlier in xfrm_state_find (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38641: Bluetooth: btusb: Fix potential NULL dereference on kmalloc failure (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38667: iio: fix potential out-of-bound write (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38663: nilfs2: reject invalid file types when reading inodes (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38671: i2c: qup: jump out of the loop in case of timeout (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38674: Revert "drm/prime: Use dma_buf from GEM object instance" (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38666: net: appletalk: Fix use-after-free in AARP proxy probe (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38669: Revert "drm/gem-shmem: Use dma_buf from GEM object instance" (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38670: arm64/entry: Mask DAIF in cpu_switch_to(), call_on_irq_stack() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

August 26 (1 message)

CVE-2025-38676: iommu/amd: Avoid stack buffer overflow from kernel cmdline (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

August 28 (1 message)

CVE-2024-58240: tls: separate no-async decryption request handling from async (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

August 30 (1 message)

CVE-2025-38677: f2fs: fix to avoid out-of-boundary access in dnode page (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

193 messages

Powered by blists - more mailing lists