linux-cve-announce mailing list - 2025/09

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [year] [list]

linux-cve-announce mailing list - 2025/09

Mon	Tue	Wed	Thu	Fri	Sat	Sun
¹	²	³ 1	⁴ 52	⁵ 63	⁶	⁷ 7
⁸	⁹	¹⁰	¹¹ 55	¹² 8	¹³	¹⁴
¹⁵ 216	¹⁶ 121	¹⁷ 57	¹⁸ 124	¹⁹	²⁰	²¹
²²	²³	²⁴	²⁵	²⁶	²⁷	²⁸
²⁹	³⁰

Messages by day:

September 3 (1 message)

CVE-2025-38678: netfilter: nf_tables: reject duplicate device on updates (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

September 4 (52 messages)

CVE-2025-38679: media: venus: Fix OOB read due to missing payload bound check (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38690: drm/xe/migrate: prevent infinite recursion (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38689: x86/fpu: Fix NULL dereference in avx512_status() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38680: media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38692: exfat: add cluster chain loop check for dir (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38691: pNFS: Fix uninited ptr deref in block/scsi layout (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38693: media: dvb-frontends: w7090p: fix null-ptr-deref in w7090p_tuner_write_serpar and w7090p_tuner_read_serp… (Greg Kroah-Hartman <gregkh@...uxfoundat…)
CVE-2025-38681: mm/ptdump: take the memory hotplug lock inside ptdump_walk_pgd() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38683: hv_netvsc: Fix panic during namespace deletion with VF (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38684: net/sched: ets: use old 'nbands' while purging unused classes (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38682: i2c: core: Fix double-free of fwnode in i2c_unregister_device() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38685: fbdev: Fix vmalloc out-of-bounds write in fast_imageblit (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38686: userfaultfd: fix a crash in UFFDIO_MOVE when PMD is a migration entry (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38687: comedi: fix race between polling and detaching (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38688: iommufd: Prevent ALIGN() overflow (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38695: scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38704: rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer access (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38705: drm/amd/pm: fix null pointer access (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38706: ASoC: core: Check for rtd == NULL in snd_soc_remove_pcm_runtime() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38707: fs/ntfs3: Add sanity check for file name (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38708: drbd: add missing kref_get in handle_write_conflicts (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38709: loop: Avoid updating block size under exclusive owner (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38710: gfs2: Validate i_depth for exhash directories (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38711: smb/server: avoid deadlock when linking with ReplaceIfExists (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38712: hfsplus: don't use BUG_ON() in hfsplus_create_attributes_file() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38713: hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38696: MIPS: Don't crash in stack_top() for tasks without ABI or vDSO (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38714: hfsplus: fix slab-out-of-bounds in hfsplus_bnode_read() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38717: net: kcm: Fix race condition in kcm_unattach() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38718: sctp: linearize cloned gso packets in sctp_rcv (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38715: hfs: fix slab-out-of-bounds in hfs_bnode_read() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38719: net: hibmcge: fix the division by zero issue (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38716: hfs: fix general protection fault in hfs_find_init() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38697: jfs: upper bound check of tree index in dbAllocAG (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38720: net: hibmcge: fix rtnl deadlock issue (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38723: LoongArch: BPF: Fix jump offset calculation in tailcall (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38725: net: usb: asix_devices: add phy_mask for ax88772 mdio bus (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38721: netfilter: ctnetlink: fix refcount leak on table dump (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38698: jfs: Regular file corruption check (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38722: habanalabs: fix UAF in export_dmabuf() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38724: nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38726: net: ftgmac100: fix potential NULL pointer access in ftgmac100_phy_disconnect (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38700: scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38699: scsi: bfa: Double-free fix (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38701: ext4: do not BUG when INLINE_DATA_FL lacks system.data xattr (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38702: fbdev: fix potential buffer overflow in do_register_framebuffer() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38729: ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38703: drm/xe: Make dma-fences compliant with the safe access rules (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38694: media: dvb-frontends: dib7090p: fix null-ptr-deref in dib7090p_rw_on_apb() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38728: smb3: fix for slab out of bounds on mount to ksmbd (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38730: io_uring/net: commit partial buffers on retry (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38727: netlink: avoid infinite retry looping in netlink_unicast() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

September 5 (63 messages)

REJECTED: CVE-2025-38603: drm/amdgpu: fix slab-use-after-free in amdgpu_userq_mgr_fini+0x70c (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39676: scsi: qla4xxx: Prevent a potential error pointer dereference (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39677: net/sched: Fix backlog accounting in qdisc_dequeue_internal (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38732: netfilter: nf_reject: don't leak dst refcount for loopback packets (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39678: platform/x86/amd/hsmp: Ensure sock->metric_tbl_addr is non-NULL (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39681: x86/cpu/hygon: Add missing resctrl_cpu_detect() in bsp_init helper (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39680: i2c: rtl9300: Fix out-of-bounds bug in rtl9300_i2c_smbus_xfer (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39684: comedi: Fix use of uninitialized memory in do_insn_ioctl() and do_insnlist_ioctl() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38733: s390/mm: Do not map lowcore with identity mapping (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39686: comedi: Make insn_rw_emulate_bits() do insn->n samples (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39689: ftrace: Also allocate and copy hash for reading of filter files (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39690: iio: accel: sca3300: fix uninitialized iio scan data (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39683: tracing: Limit access to parser->buffer when trace_get_user failed (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39691: fs/buffer: fix use-after-free when call bh_read() helper (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39685: comedi: pcl726: Prevent invalid irq number (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39687: iio: light: as73211: Ensure buffer holes are zeroed (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39693: drm/amd/display: Avoid a NULL pointer dereference (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39695: RDMA/rxe: Flush delayed SKBs while releasing RXE resources (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39692: smb: server: split ksmbd_rdma_stop_listening() out of ksmbd_rdma_destroy() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39694: s390/sclp: Fix SCCB present check (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38734: net/smc: fix UAF on smcsk after smc_listen_out() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39698: io_uring/futex: ensure io_futex_wait() cleans up properly on failure (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39696: ALSA: hda: tas2781: Fix wrong reference of tasdevice_priv (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39701: ACPI: pfr_update: Fix the driver update version check (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39697: NFS: Fix a race when updating an existing write (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39699: iommu/riscv: prevent NULL deref in iova_to_phys (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39700: mm/damon/ops-common: ignore migration request to invalid nodes (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39706: drm/amdkfd: Destroy KFD debugfs after destroy KFD wq (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39679: drm/nouveau/nvif: Fix potential memory leak in nvif_vmm_ctor(). (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39704: LoongArch: KVM: Fix stack protector issue in send_ipi_data() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39682: tls: fix handling of zero-length records on the rx_list (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39702: ipv6: sr: Fix MAC comparison to be constant-time (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38735: gve: prevent ethtool ops after shutdown (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39707: drm/amdgpu: check if hubbub is NULL in debugfs/amdgpu_dm_capabilities (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39708: media: iris: Fix NULL pointer dereference (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39709: media: venus: protect against spurious interrupts during probe (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39710: media: venus: Add a check for packet size after reading from shared memory (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38736: net: usb: asix_devices: Fix PHY address mask in MDIO bus initialization (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39673: ppp: fix race conditions in ppp_fill_forward_path (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39705: drm/amd/display: fix a Null pointer dereference vulnerability (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38737: cifs: Fix oops due to uninitialised variable (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39674: scsi: ufs: ufs-qcom: Fix ESI null pointer dereference (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-38731: drm/xe: Fix vm_bind_ioctl double free bug (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39712: media: mt9m114: Fix deadlock in get_frame_interval/set_frame_interval (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39721: crypto: qat - flush misc workqueue during device shutdown (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39722: crypto: caam - Prevent crash on suspend with iMX8QM / iMX8ULP (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39713: media: rainshadow-cec: fix TOCTOU race condition in rain_interrupt() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39723: netfs: Fix unbuffered write error handling (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39714: media: usbtv: Lock resolution while streaming (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39719: iio: imu: bno055: fix OOB access of hw_xlate array (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39724: serial: 8250: fix panic due to PSLVERR (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39703: net, hsr: reject HSR frame if skb can't hold tag (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39716: parisc: Revise __get_user() to probe user read access (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39718: vsock/virtio: Validate length in packet header before skb_put() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39720: ksmbd: fix refcount leak causing resource not released (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39711: media: ivsc: Fix crash at shutdown due to missing mei_cldev_disable() calls (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39717: open_tree_attr: do not allow id-mapping changes without OPEN_TREE_CLONE (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39675: drm/amd/display: Add null pointer check in mod_hdcp_hdcp1_create_session() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39715: parisc: Revise gateway LWS calls to probe user read access (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39726: s390/ism: fix concurrency management in ism_cmd() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39725: mm/vmscan: fix hwpoisoned large folio handling in shrink_folio_list (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2025-38611: vmci: Prevent the dispatching of uninitialized payloads (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2023-53137: ext4: Fix possible corruption when moving a directory (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

September 7 (7 messages)

CVE-2025-39729: crypto: ccp - Fix dereferencing uninitialized error pointer (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39727: mm: swap: fix potential buffer overflow in setup_clusters() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39730: NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39731: f2fs: vm_unmap_ram() may be called from an invalid context (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39732: wifi: ath11k: fix sleeping-in-atomic in ath11k_mac_op_set_bitrate_mask() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39733: team: replace team lock with rtnl lock (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39734: Revert "fs/ntfs3: Replace inode_trylock with inode_lock" (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

September 11 (55 messages)

CVE-2025-40300: x86/vmscape: Add conditional IBPB mitigation (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39737: mm/kmemleak: avoid soft lockup in __kmemleak_do_cleanup() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39736: mm/kmemleak: avoid deadlock by moving pr_warn() outside kmemleak_lock (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39746: wifi: ath10k: shutdown driver when hardware is unreliable (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39747: drm/msm: Add error handling for krealloc in metadata setup (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39739: iommu/arm-smmu-qcom: Add SM6115 MDSS compatible (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39748: bpf: Forget ranges when refining tnum after JSET (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39749: rcu: Protect ->defer_qs_iw_pending from data race (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39738: btrfs: do not allow relocation of partially dropped subvolumes (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39740: drm/xe/migrate: prevent potential UAF (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39741: drm/xe/migrate: don't overflow max copy size (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39742: RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39743: jfs: truncate good inode pages when hard link is 0 (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39744: rcu: Fix rcu_read_unlock() deadloop due to IRQ work (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39745: rcutorture: Fix rcutorture_one_extend_check() splat in RT kernels (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39751: ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39761: wifi: ath12k: Decrement TID on RX peer frag setup error handling (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39762: drm/amd/display: add null check (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39763: ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39764: netfilter: ctnetlink: remove refcounting in expectation dumpers (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39752: ARM: rockchip: fix kernel hang during smp initialization (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39753: gfs2: Set .migrate_folio in gfs2_{rgrp,meta}_aops (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39754: mm/smaps: fix race between smaps_hugetlb_range and migration (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39756: fs: Prevent file descriptor table allocations exceeding INT_MAX (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39757: ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39758: RDMA/siw: Fix the sendmsg byte count in siw_tcp_sendpages (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39759: btrfs: qgroup: fix race between quota disable and quota rescan ioctl (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39760: usb: core: config: Prevent OOB read in SS endpoint companion parsing (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39750: wifi: ath12k: Correct tid cleanup when tid setup fails (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39766: net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39775: mm/mremap: fix WARN with uffd that has remap events disabled (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39765: ALSA: timer: fix ida_free call while not allocated (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39776: mm/debug_vm_pgtable: clear page table entries at destroy_args() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39777: crypto: acomp - Fix CFI failure due to type punning (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39779: btrfs: subpage: keep TOWRITE tag until folio is cleaned (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39780: sched/ext: Fix invalid task state transitions on class switch (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39783: PCI: endpoint: Fix configfs group list head handling (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39781: parisc: Drop WARN_ON_ONCE() from flush_cache_vmap (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39782: jbd2: prevent softlockup in jbd2_log_do_checkpoint() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39784: PCI: Fix link speed calculation on retrain failure (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39767: LoongArch: Optimize module load time by optimizing PLT/GOT counting (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39785: drm/hisilicon/hibmc: fix irq_request()'s irq name variable is local (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39786: iio: adc: ad7173: fix channels index for syscalib_mode (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39790: bus: mhi: host: Detect events pointing to unexpected TREs (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39768: net/mlx5: HWS, fix complex rules rehash error flow (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39791: dm: dm-crypt: Do not partially accept write BIOs with zoned targets (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39771: regulator: pca9450: Use devm_register_sys_off_handler (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39769: bnxt_en: Fix lockdep warning during rmmod (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39770: net: gso: Forbid IPv6 TSO with extensions on devices with only IPV6_CSUM (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39787: soc: qcom: mdt_loader: Ensure we don't read past the ELF header (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39788: scsi: ufs: exynos: Fix programming of HCI_UTRL_NEXUS_TYPE (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39789: crypto: x86/aegis - Add missing error checks (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39772: drm/hisilicon/hibmc: fix the hibmc loaded failed bug (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39773: net: bridge: fix soft lockup in br_multicast_query_expired() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39774: iio: adc: rzg2l_adc: Set driver data before enabling runtime PM (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

September 12 (8 messages)

CVE-2025-39793: io_uring/memmap: cast nr_pages to size_t before shifting (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39792: dm: Always split write BIOs to zoned device limits (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39794: ARM: tegra: Use I/O memcpy to write to IRAM (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39795: block: avoid possible overflow for chunk_sectors check in blk_stack_limits() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39796: net: lapbether: ignore ops-locked netdevs (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39797: xfrm: Duplicate SPI Handling (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39798: NFS: Fix the setting of capabilities when automounting a new filesystem (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39799: ACPI: processor: perflib: Move problematic pr->performance check (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

September 15 (216 messages)

CVE-2025-39801: usb: dwc3: Remove WARN_ON for device endpoint command timeouts (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39800: btrfs: abort transaction on unexpected eb generation at btrfs_copy_root() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39802: lib/crypto: arm/poly1305: Fix register corruption in no-SIMD contexts (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39803: scsi: ufs: core: Remove WARN_ON_ONCE() call from ufshcd_uic_cmd_compl() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39804: lib/crypto: arm64/poly1305: Fix register corruption in no-SIMD contexts (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50250: regulator: core: fix use_count leakage when handling boot-on (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50252: igb: Do not free q_vector unless new one was allocated (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50235: NFSD: Protect against send buffer overflow in NFSv2 READDIR (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50247: usb: xhci-mtk: fix leakage of shared hcd when fail to set wakeup irq (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50253: bpf: make sure skb->len != 0 when redirecting to a tunneling device (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50248: wifi: iwlwifi: mvm: fix double free on tx path. (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50249: memory: of: Fix refcount leak bug in of_get_ddr_timings() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50251: mmc: vub300: fix return value check of mmc_add_host() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50246: usb: typec: tcpci: fix of node refcount leak in tcpci_register_port() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50255: tracing: Fix reading strings from synthetic events (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50256: drm/meson: remove drm bridges at aggregate driver unbind time (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50239: cpufreq: qcom: fix writes in read-only memory region (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50240: binder: fix UAF of alloc->vma in race with munmap() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50241: NFSD: fix use-after-free on source server when doing inter-server copy (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50243: sctp: handle the error returned from sctp_auth_asoc_init_active_key (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50254: media: ov8865: Fix an error handling path in ov8865_probe() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50236: iommu/mediatek: Fix crash on isr after kexec() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50242: drivers: net: qlcnic: Fix potential memory leak in qlcnic_sriov_init() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50244: cxl: fix possible null-ptr-deref in cxl_pci_init_afu|adapter() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50245: rapidio: fix possible UAF when kfifo_alloc() fails (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53152: drm/amdgpu: fix calltrace warning in amddrm_buddy_fini (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53153: wifi: cfg80211: Fix use after free for wext (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53163: fs/ntfs3: don't hold ni_lock when calling truncate_setsize() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53165: udf: Fix uninitialized array access for some pathnames (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53164: irqchip/ti-sci: Fix refcount leak in ti_sci_intr_irq_domain_probe (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53168: usb: ucsi_acpi: Increase the command completion timeout (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53169: x86/resctrl: Clear staged_config[] before and after it is used (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50234: io_uring/af_unix: defer registered files gc to io_uring release (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50258: wifi: brcmfmac: Fix potential stack-out-of-bounds in brcmf_c_preinit_dcmds() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53170: net: dsa: Removed unneeded of_node_put in felix_parse_ports_node (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53166: power: supply: bq25890: Fix external_power_changed race (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53167: tracing: Fix null pointer dereference in tracing_err_log_open() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53171: vfio/type1: prevent underflow of locked_vm via exec() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50259: bpf, sockmap: fix race in sock_map_free() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53176: serial: 8250: Reinit port->pm on port specific driver unbind (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53179: netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53173: tty: pcn_uart: fix memory leak with using debugfs_lookup() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53175: PCI: hv: Fix a crash in hv_pci_restore_msi_msg() during hibernation (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53180: wifi: ath12k: Avoid NULL pointer access during management transmit cleanup (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53182: ACPICA: Avoid undefined behavior: applying zero offset to null pointer (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53183: btrfs: exit gracefully if reloc roots don't match (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53184: arm64/sme: Set new vector length before reallocating (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53185: wifi: ath9k: don't allow to overwrite ENDPOINT0 attributes (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53172: fsverity: reject FS_IOC_ENABLE_VERITY on mode 3 fds (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53186: skbuff: Fix a race between coalescing and releasing SKBs (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53174: scsi: core: Fix possible memory leak if device_add() fails (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53187: btrfs: fix use-after-free of new block group that became unused (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53188: net: openvswitch: fix race on port output (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53177: media: hi846: fix usage of pm_runtime_get_if_in_use() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53178: mm: fix zswap writeback race condition (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50260: drm/msm: Make .remove and .shutdown HW shutdown consistent (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53181: dma-buf/dma-resv: Stop leaking on krealloc() failure (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50261: drm/sti: Fix return type of sti_{dvo,hda,hdmi}_connector_mode_valid() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53192: vxlan: Fix nexthop hash size (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53189: ipv6/addrconf: fix a potential refcount underflow for idev (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53190: vxlan: Fix memory leaks in error path (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53191: irqchip/alpine-msi: Fix refcount leak in alpine_msix_init_domains (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53193: drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v10_0_hw_fini (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53194: fs/ntfs3: Add length check in indx_get_root (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53195: mlxsw: minimal: fix potential memory leak in mlxsw_m_linecards_init (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53150: scsi: qla2xxx: Pointer may be dereferenced (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53151: md/raid10: prevent soft lockup while flush writes (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50257: xen/gntdev: Prevent leaking grants (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53198: raw: Fix NULL deref in raw_get_next(). (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53196: usb: dwc3: qcom: Fix potential memory leak (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53197: USB: uhci: fix memory leak with using debugfs_lookup() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53147: xfrm: add NULL check in xfrm_update_ae_params (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53148: igb: Fix igb_down hung on surprise removal (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53149: ext4: avoid deadlock in fs reclaim with page writeback (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50263: vdpasim: fix memory leak when freeing IOTLBs (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50272: media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50273: f2fs: fix to do sanity check on destination blkaddr during recovery (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50274: media: dvbdev: adopts refcnt to avoid UAF (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50281: MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50264: clk: socfpga: Fix memory leak in socfpga_gate_init() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50284: ipc: fix memory leak in init_mqueue_fs() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50285: mm,hugetlb: take hugetlb_lock before decrementing h->resv_huge_pages (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50286: ext4: fix delayed allocation bug in ext4_clu_mapped for bigalloc + inline (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53199: wifi: ath9k: hif_usb: clean up skbs if ath9k_hif_usb_rx_stream() fails (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50283: mtd: core: add missing of_node_get() in dynamic partitions code (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53200: netfilter: x_tables: fix percpu counter block leak on error path when creating new netns (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50287: drm/i915/bios: fix a memory leak in generate_lfp_data_ptrs (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53201: RDMA/bnxt_re: wraparound mbox producer index (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53204: af_unix: Fix data-races around user->unix_inflight. (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53202: PM: domains: fix memory leak with using debugfs_lookup() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50290: wifi: mac80211: fix memory leak in ieee80211_if_add() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50275: drm/radeon: Add the missed acpi_put_table() to fix memory leak (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50276: power: supply: fix null pointer dereferencing in power_supply_get_battery_info (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50277: ext4: don't allow journal inode to have encrypt flag (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50278: PNP: fix name memory leak in pnp_alloc_dev() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50279: wifi: rtlwifi: Fix global-out-of-bounds bug in _rtl8812ae_phy_set_txpower_limit() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50280: pnode: terminate at peers of source (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53207: ublk: fail to recover device if queue setup is interrupted (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53205: KVM: s390/diag: fix racy access of physical cpu number in diag 9c handler (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
117 more messages

September 16 (121 messages)

CVE-2023-53264: clk: imx: clk-imxrt1050: fix memory leak in imxrt1050_clocks_probe (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53267: driver: soc: xilinx: fix memory leak in xlnx_add_cb_for_notify_event() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53268: ASoC: fsl_mqs: move of_node_put() to the correct location (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53265: ubi: ensure that VID header offset + VID header size <= alloc, size (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53263: drm/nouveau/disp: fix use-after-free in error handling of nouveau_connector_create (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53266: arm64: acpi: Fix possible memory leak of ffh_ctxt (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53269: block: ublk: make sure that block size is set correctly (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53272: net: ena: fix shift-out-of-bounds in exponential backoff (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53271: ubi: Fix unreferenced object reported by kmemleak in ubi_resize_volume() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53270: ext4: fix i_disksize exceeding i_size problem in paritally written case (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53274: clk: mediatek: mt8183: Add back SSPM related clocks (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53283: xen/virtio: Fix NULL deref when a bridge of PCI root bus has no parent (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53285: ext4: add bounds checking in get_max_inline_xattr_value_size() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53284: drm/msm/dpu: check for null return of devm_kzalloc() in dpu_writeback_init() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53286: RDMA/mlx5: Return the firmware result upon destroying QP/RQ (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53287: usb: cdns3: Put the cdns set active part outside the spin lock (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53278: ubifs: Fix memory leak in ubifs_sysfs_init() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53275: ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53277: wifi: iwl3945: Add missing check for create_singlethread_workqueue (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53276: ubifs: Free memory for tmpfile name (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53279: misc: vmw_balloon: fix memory leak with using debugfs_lookup() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53280: scsi: qla2xxx: Remove unused nvme_ls_waitq wait queue (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53281: drivers: staging: rtl8723bs: Fix locking in _rtw_join_timeout_handler() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53282: scsi: lpfc: Fix use-after-free KFENCE violation during sysfs firmware write (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53273: Drivers: vmbus: Check for channel allocation before looking up relids (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53289: media: bdisp: Add missing check for create_workqueue (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53298: nfc: fix memory leak of se_io context in nfc_genl_se_io (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53299: md/raid10: fix leak of 'r10bio->remaining' for recovery (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53300: media: hi846: Fix memleak in hi846_init_controls() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53301: f2fs: fix kernel crash due to null io->bio (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53302: wifi: iwl4965: Add missing check for create_singlethread_workqueue() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53303: net: microchip: vcap api: Fix possible memory leak for vcap_dup_rule() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53290: samples/bpf: Fix fout leak in hbm's run_bpf_prog (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53291: rcu/rcuscale: Stop kfree_scale_thread thread(s) after unloading rcuscale (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53292: blk-mq: fix NULL dereference on q->elevator in blk_mq_elv_switch_none (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53293: Bluetooth: btrtl: check for NULL in btrtl_set_quirks() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53295: udf: Do not update file length for failed writes to inline files (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53294: fs/ntfs3: Fix null-ptr-deref on inode->i_op in ntfs_lookup() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53296: sctp: check send stream number after wait_for_sndbuf (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53297: Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53288: drm/client: Fix memory leak in drm_client_modeset_probe (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2023-53283: xen/virtio: Fix NULL deref when a bridge of PCI root bus has no parent (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2022-50290: wifi: mac80211: fix memory leak in ieee80211_if_add() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2023-53227: ubifs: dirty_cow_znode: Fix memleak in error handling path (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39816: io_uring/kbuf: always use READ_ONCE() to read ring provided buffer lengths (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39808: HID: hid-ntrig: fix unable to handle page fault in ntrig_report_version() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39822: io_uring/kbuf: fix signedness in this_len calculation (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39806: HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39805: net: macb: fix unregister_netdev call order in macb_remove() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39817: efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39825: smb: client: fix race with concurrent opens in rename(2) (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39819: fs/smb: Fix inconsistent refcnt update (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39820: drm/msm/dpu: Add a null ptr check for dpu_encoder_needs_modeset (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39821: perf: Avoid undefined behavior from stopping/starting inactive events (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39815: RISC-V: KVM: fix stack overrun when loading vlenb (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39818: HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39823: KVM: x86: use array_index_nospec with indices that come from guest (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39824: HID: asus: fix UAF via HID_CLAIMED_INPUT validation (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39807: drm/mediatek: Add error handling for old state CRTC in atomic_disable (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39826: net: rose: convert 'use' field to refcount_t (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39827: net: rose: include node references in rose_neigh refcount (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39829: trace/fgraph: Fix the warning caused by missing unregister notifier (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39828: atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control(). (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39809: HID: intel-thc-hid: intel-quicki2c: Fix ACPI dsd ICRS/ISUB length (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39810: bnxt_en: Fix memory corruption when FW resources change during ifdown (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39811: drm/xe/vm: Clear the scratch_pt pointer on error (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39812: sctp: initialize more fields in sctp_v6_from_sk() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39813: ftrace: Fix potential warning in trace_printk_seq during ftrace_dump (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39814: ice: fix NULL pointer dereference in ice_unplug_aux_dev() on reset (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39831: fbnic: Move phylink resume out of service_task and into open/close (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39830: net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39834: net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39833: mISDN: hfcpci: Fix warning when deleting uninitialized timer (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39836: efi: stmm: Fix incorrect buffer allocation method (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39832: net/mlx5: Fix lockdep assertion on sync reset unload event (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39835: xfs: do not propagate ENODATA disk errors into xattr code (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50340: media: vimc: Fix wrong function called when vimc_init() fails (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50350: scsi: target: iscsi: Fix a race condition between login_work and the login thread (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53308: net: fec: Better handle pm_runtime_get() failing in .remove() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50345: NFSD: Protect against send buffer overflow in NFSv3 READ (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50346: ext4: init quota for 'old.inode' in 'ext4_rename' (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50342: floppy: Fix memory leak in do_floppy_init() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53320: scsi: mpi3mr: Fix issues in mpi3mr_get_all_tgt_info() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53324: drm/msm/mdp5: Don't leak some plane state (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53329: workqueue: fix data race with the pwq->stats[] increment (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53333: netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53318: recordmcount: Fix memory leaks in the uwrite function (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50352: net: hns: fix possible memory leak in hnae_ae_register() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53315: wifi: ath11k: Fix SKB corruption in REO destination ring (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53305: Bluetooth: L2CAP: Fix use-after-free (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53309: drm/radeon: Fix integer overflow in radeon_cs_parser_init (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50344: ext4: fix null-ptr-deref in ext4_write_info (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53311: nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53325: drm/mediatek: dp: Change logging to dev for mtk_dp_aux_transfer() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53316: drm/msm/dp: Free resources after unregistering them (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53328: fs/ntfs3: Enhance sanity check while generating attr_list (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53312: net: fix net_dev_start_xmit trace event vs skb_transport_offset() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53334: USB: chipidea: fix memory leak with using debugfs_lookup() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53313: md/raid10: fix wrong setting of max_corr_read_errors (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
22 more messages

September 17 (57 messages)

REJECTED: CVE-2025-38380: i2c/designware: Fix an initialization issue (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50354: drm/amdkfd: Fix kfd_process_device_init_vm error handling (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50365: skbuff: Account for tail adjustment during pull operations (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50364: i2c: mux: reg: check return value after calling platform_get_resource() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50370: i2c: designware: Fix handling of real but unexpected device interrupts (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53336: media: ipu-bridge: Fix null pointer deref on SSDB/PLD parsing warnings (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53341: of/fdt: run soc memory setup when early_init_dt_scan_memory fails (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53353: accel/habanalabs: postpone mem_mgr IDR destruction to hpriv_release() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50373: fs: dlm: fix race in lowcomms (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53367: accel/habanalabs: fix mem leak in capture user mappings (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53357: md/raid10: check slab-out-of-bounds in md_bitmap_get_counter (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53360: NFSv4.2: Rework scratch handling for READ_PLUS (again) (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53354: skbuff: skb_segment, Call zero copy functions before using skbuff frags (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53340: net/mlx5: Collect command failures data only for known commands (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50363: skmsg: pass gfp argument to alloc_sk_msg() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53352: drm/ttm: check null pointer before accessing when swapping (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53349: media: ov2740: Fix memleak in ov2740_init_controls() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50358: brcmfmac: return error when getting invalid max_flowrings from dongle (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53355: staging: pi433: fix memory leak with using debugfs_lookup() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53363: PCI: Fix use-after-free in pci_bus_release_domain_nr() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50353: mmc: wmt-sdmmc: fix return value check of mmc_add_host() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50368: drm/msm/dsi: fix memory corruption with too many bridges (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50367: fs: fix UAF/GPF bug in nilfs_mdt_destroy (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50372: cifs: Fix memory leak when build ntlmssp negotiate blob failed (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53343: icmp6: Fix null-ptr-deref of ip6_null_entry->rt6i_idev in icmp6_dev(). (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50356: net: sched: sfb: fix null pointer access issue when sfb_init() fails (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53351: drm/sched: Check scheduler work queue before calling timeout handling (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53337: nilfs2: do not write dirty data after degenerating to read-only (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50359: media: cx88: Fix a null-ptr-deref bug in buffer_prepare() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50366: powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53338: lwt: Fix return values of BPF xmit ops (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53366: block: be a bit more careful in checking for NULL bdev while polling (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50369: drm/vkms: Fix null-ptr-deref in vkms_release() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53350: accel/qaic: Fix slicing memory leak (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50371: led: qcom-lpg: Fix sleeping in atomic (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53358: ksmbd: fix racy issue under cocurrent smb2 tree disconnect (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53347: net/mlx5: Handle pairing of E-switch via uplink un/load APIs (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50355: staging: vt6655: fix some erroneous memory clean-up loops (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50374: Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53335: RDMA/cxgb4: Fix potential null-ptr-deref in pass_establish() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53356: usb: gadget: u_serial: Add null pointer check in gserial_suspend (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53339: btrfs: fix BUG_ON condition in btrfs_cancel_balance (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53342: net: marvell: prestera: fix handling IPv4 routes with nhid (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53364: regulator: da9063: better fix null deref with partial DT (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53345: rxrpc: Fix potential data race in rxrpc_wait_to_be_connected() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53344: can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53348: btrfs: fix deadlock when aborting transaction during relocation with scrub (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53346: kernel/fail_function: fix memory leak with using debugfs_lookup() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50361: wifi: wilc1000: add missing unregister_netdev() in wilc_netdev_ifc_init() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50357: usb: dwc3: core: fix some leaks in probe (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53368: tracing: Fix race issue between cpu buffer write and swap (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50362: dmaengine: hisilicon: Add multi-thread support for a DMA channel (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53361: LoongArch: mm: Add p?d_leaf() definitions (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53359: USB: fix memory leak with using debugfs_lookup() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53365: ip6mr: Fix skb_under_panic in ip6mr_cache_report() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50360: drm/msm/dp: fix aux-bus EP lifetime (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53362: bus: fsl-mc: don't assume child devices are all fsl-mc devices (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

September 18 (124 messages)

CVE-2022-50385: NFS: Fix an Oops in nfs_d_automount() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50391: mm/mempolicy: fix memory leak in set_mempolicy_home_node system call (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50376: orangefs: Fix kmemleak in orangefs_{kernel,client}_debug_init() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50375: tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50388: nvme: fix multipath crash caused by flush request when blktrace is enabled (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50386: Bluetooth: L2CAP: Fix user-after-free (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50389: tpm: tpm_crb: Add the missed acpi_put_table() to fix memory leak (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50393: drm/amdgpu: SDMA update use unlocked iterator (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50390: drm/ttm: fix undefined behavior in bit shift for TTM_TT_FLAG_PRIV_POPULATED (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50394: i2c: ismt: Fix an out-of-bounds bug in ismt_access() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50392: ASoC: mediatek: mt8183: fix refcount leak in mt8183_mt6358_ts3a227_max98357_dev_probe() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50377: ext4: check and assert if marking an no_delete evicting inode dirty (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50397: net/ieee802154: reject zero-sized raw_sendmsg() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50396: net: sched: fix memory leak in tcindex_set_parms (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53369: net: dcb: choose correct policy to parse DCB_ATTR_BCN (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53372: sctp: fix a potential overflow in sctp_ifwdtsn_skip (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53370: drm/amdgpu: fix memory leak in mes self test (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53371: net/mlx5e: fix memory leak in mlx5e_fs_tt_redirect_any_create (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53373: crypto: seqiv - Handle EBUSY correctly (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50380: mm: /proc/pid/smaps_rollup: fix no vma's null-deref (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50378: drm/meson: reorder driver deinit sequence to fix use-after-free bug (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50382: padata: Always leave BHs disabled when running ->parallel() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53374: Bluetooth: hci_conn: fail SCO/ISO via hci_conn_failed if ACL gone early (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50381: md: fix a crash in mempool_free (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53386: Bluetooth: Fix potential use-after-free when clear keys (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50383: media: mediatek: vcodec: Can't set dst buffer to done when lat decode error (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53387: scsi: ufs: core: Fix device management cmd timeout flow (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53388: drm/mediatek: Clean dangling pointer on bind error path (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53376: scsi: mpi3mr: Use number of bits to manage bitmap sizes (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50384: staging: vme_user: Fix possible UAF in tsi148_dma_list_add (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53392: HID: intel-ish-hid: Fix kernel panic during warm reset (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53385: media: mdp3: Fix resource leaks in of_find_device_by_node (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53390: drivers: base: dd: fix memory leak with using debugfs_lookup() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53377: cifs: prevent use-after-free by freeing the cfile later (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53396: ubifs: Fix memory leak in do_rename (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53398: mlx5: fix possible ptp queue fifo use-after-free (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53391: shmem: use ramfs_kill_sb() for kill_sb method of ramfs-based tmpfs (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53399: ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53393: RDMA/mlx5: Fix mlx5_ib_get_hw_stats when used for device (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53394: net/mlx5e: xsk: Fix crash on regular rq reactivation (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53378: drm/i915/dpt: Treat the DPT BO as a framebuffer (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53379: usb: phy: phy-tahvo: fix memory leak in tahvo_usb_probe() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53380: md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53381: NFSD: fix leaked reference count of nfsd4_ssc_umount_item (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53383: irqchip/gicv3: Workaround for NVIDIA erratum T241-FABRIC-4 (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53397: modpost: fix off by one in is_executable_section() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53400: ALSA: hda: Fix Oops by 9.1 surround channel names (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53401: mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50387: net: hinic: fix the issue of CMDQ memory leaks (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53382: net/smc: Reset connection when trying to use SMCRv2 fails. (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53384: wifi: mwifiex: avoid possible NULL skb pointer dereference (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53375: tracing: Free error logs of tracing instances (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50395: integrity: Fix memory leakage in keyring allocation error path (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50398: drm/msm/dp: add atomic_check to bridge ops (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50379: btrfs: fix race between quota enable and quota rescan ioctl (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50399: media: atomisp: prevent integer overflow in sh_css_set_black_frame() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53389: drm/mediatek: dp: Only trigger DRM HPD events if bridge is attached (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53395: ACPICA: Add AML_NO_OPERAND_RESOLVE flag to Timer (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53402: kernel/printk/index.c: fix memory leak with using debugfs_lookup() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50400: staging: greybus: audio_helper: remove unused and wrong debugfs usage (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53411: PM: EM: fix memory leak with using debugfs_lookup() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53412: USB: gadget: bcm63xx_udc: fix memory leak with using debugfs_lookup() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53413: USB: isp116x: fix memory leak with using debugfs_lookup() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53414: scsi: snic: Fix memory leak with using debugfs_lookup() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53415: USB: dwc3: fix memory leak with using debugfs_lookup() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53416: USB: isp1362: fix memory leak with using debugfs_lookup() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53417: USB: sl811: fix memory leak with using debugfs_lookup() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53418: USB: gadget: lpc32xx_udc: fix memory leak with using debugfs_lookup() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53410: USB: ULPI: fix memory leak with using debugfs_lookup() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53406: USB: gadget: pxa25x_udc: fix memory leak with using debugfs_lookup() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53403: time/debug: Fix memory leak with using debugfs_lookup() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53408: trace/blktrace: fix memory leak with using debugfs_lookup() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53409: drivers: base: component: fix memory leak with using debugfs_lookup() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53407: USB: gadget: pxa27x_udc: fix memory leak with using debugfs_lookup() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53404: USB: fotg210: fix memory leak with using debugfs_lookup() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53405: USB: gadget: gr_udc: fix memory leak with using debugfs_lookup() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50401: nfsd: under NFSv4.1, fix double svc_xprt_put on rpc_create failure (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53426: xsk: Fix xsk_diag use-after-free error during socket cleanup (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53424: clk: mediatek: fix of_iomap memory leak (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53423: objtool: Fix memory leak in create_static_call_sections() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53428: powercap: arm_scmi: Remove recursion while parsing zones (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53439: net: skb_partial_csum_set() fix against transport header magic value (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53438: x86/MCE: Always save CS register on AMD Zen IF Poison errors (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50417: drm/panfrost: Fix GEM handle creation ref-counting (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53437: media: uvcvideo: Handle cameras with invalid descriptors (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53436: scsi: snic: Fix possible memory leak if device_add() fails (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50402: drivers/md/md-bitmap: check the return value of md_bitmap_get_counter() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50411: ACPICA: Fix error code path in acpi_ds_call_control_method() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50403: ext4: fix undefined behavior in bit shift for ext4_check_flag_values (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50406: iomap: iomap: fix memory corruption when recording errors during writeback (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50412: drm: bridge: adv7511: unregister cec i2c device after cec adapter (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50407: crypto: hisilicon/qm - increase the memory of local variables (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50408: wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53425: media: platform: mediatek: vpu: fix NULL ptr dereference (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50415: parisc: led: Fix potential null-ptr-deref in start_task() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50404: fbdev: fbcon: release buffer when fbcon_do_set_font() failed (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50413: wifi: mac80211: fix use-after-free (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50405: net/tunnel: wait until all sk_user_data reader finish before releasing the sock (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50410: NFSD: Protect against send buffer overflow in NFSv2 READ (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
25 more messages

704 messages

Powered by blists - more mailing lists