linux-cve-announce mailing list - 2025/10

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [year] [list]

linux-cve-announce mailing list - 2025/10

Mon	Tue	Wed	Thu	Fri	Sat	Sun
		¹ 176	²	³	⁴ 147	⁵ 1
⁶ 1	⁷ 119	⁸	⁹ 11	¹⁰ 4	¹¹	¹²
¹³ 2	¹⁴	¹⁵ 34	¹⁶	¹⁷	¹⁸ 3	¹⁹
²⁰ 13	²¹	²² 68	²³ 1	²⁴ 9	²⁵	²⁶
²⁷	²⁸ 58	²⁹ 5	³⁰ 20	³¹ 1

Messages by day:

October 1 (176 messages)

REJECTED: CVE-2022-50397: net/ieee802154: reject zero-sized raw_sendmsg() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39892: ASoC: soc-core: care NULL dirver name on snd_soc_lookup_component_nolocked() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39891: wifi: mwifiex: Initialize the chan_stats array to zero (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39901: i40e: remove read access to debugfs files (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39903: of_numa: fix uninitialized memory nodes causing kernel panic (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39902: mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39893: spi: spi-qpic-snand: unregister ECC engine on probe error and device remove (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39894: netfilter: br_netfilter: do not check confirmed bit in br_nf_local_in() after confirm (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39897: net: xilinx: axienet: Add error handling for RX metadata pointer retrieval (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39896: accel/ivpu: Prevent recovery work from being queued during device removal (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39895: sched: Fix sched_numa_find_nth_cpu() if mask offline (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39898: e1000e: fix heap overflow in e1000_set_eeprom (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39899: mm/userfaultfd: fix kmap_local LIFO ordering for CONFIG_HIGHPTE (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39900: net_sched: gen_estimator: fix est_timer() vs CONFIG_PREEMPT_RT=y (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39905: net: phylink: add lock for serializing concurrent pl->phydev writes with resolver (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39904: arm64: kexec: initialize kexec_buf struct in load_other_segments() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39914: tracing: Silence warning when chunk allocation fails in trace_pid_write (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39915: net: phy: transfer phy_config_inband() locking responsibility to phylink (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39916: mm/damon/reclaim: avoid divide-by-zero in damon_reclaim_apply_parameters() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39917: bpf: Fix out-of-bounds dynptr write in bpf_crypto_crypt (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39908: net: dev_ioctl: take ops lock in hwtstamp lower paths (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39906: drm/amd/display: remove oem i2c adapter on finish (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39907: mtd: rawnand: stm32_fmc2: avoid overlapping mappings on ECC buffer (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39910: mm/vmalloc, mm/kasan: respect gfp mask in kasan_populate_vmalloc() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39909: mm/damon/lru_sort: avoid divide-by-zero in damon_lru_sort_apply_parameters() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39911: i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39912: nfs/localio: restore creds before releasing pageio data (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39913: tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock->cork. (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39919: wifi: mt76: mt7996: add missing check for rx wcid entries (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39918: wifi: mt76: fix linked list corruption (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39920: pcmcia: Add error handling for add_interval() in do_validate_mem() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39921: spi: microchip-core-qspi: stop checking viability of op->max_freq in supports_op callback (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39922: ixgbe: fix incorrect map used in eee linkmode (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39924: erofs: fix invalid algorithm for encoded extents (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39923: dmaengine: qcom: bam_dma: Fix DT error handling for num-channels/ees (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39925: can: j1939: implement NETDEV_UNREGISTER notification handler (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39926: genetlink: fix genl_bind() invoking bind() after -EPERM (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39927: ceph: fix race condition validating r_parent before applying state (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39928: i2c: rtl9300: ensure data length is within supported range (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50421: rpmsg: char: Avoid double destroy of default endpoint (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50430: mmc: vub300: fix warning - do not call blocking ops when !TASK_RUNNING (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50431: ALSA: aoa: i2sbus: fix possible memory leak in i2sbus_add_dev() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50432: kernfs: fix use-after-free in __kernfs_remove (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50433: efi: ssdt: Don't free memory if ACPI table was loaded successfully (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50434: blk-mq: fix possible memleak when register 'hctx' failed (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50435: ext4: avoid crash when inline data creation follows DIO write (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50436: ext4: don't set up encryption key during jbd2 transaction (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50437: drm/msm/hdmi: fix memory corruption with too many bridges (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50438: net: hinic: fix memory leak when reading function table (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50439: ASoC: mediatek: mt8173: Enable IRQ when pdata is ready (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50422: scsi: libsas: Fix use-after-free bug in smp_execute_task_sg() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50440: drm/vmwgfx: Validate the box size for the snooped cursor (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50441: net/mlx5: Lag, fix failure to cancel delayed bond work (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50442: fs/ntfs3: Validate buffer length while parsing index (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50443: drm/rockchip: lvds: fix PM usage counter unbalance in poweron (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50444: clk: tegra20: Fix refcount leak in tegra20_clock_init (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53448: fbdev: imxfb: Removed unneeded release_mem_region (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53449: s390/dasd: Fix potential memleak in dasd_eckd_init() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53450: ext4: remove a BUG_ON in ext4_mb_release_group_pa() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50423: ACPICA: Fix use-after-free in acpi_ut_copy_ipackage_to_ipackage() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50424: wifi: mt76: mt7921: resource leaks at mt7921_check_offload_capability() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50425: x86/fpu: Fix copy_xstate_to_uabi() to copy init states correctly (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50426: remoteproc: imx_dsp_rproc: Add mutex protection for workqueue (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50427: ALSA: ac97: fix possible memory leak in snd_ac97_dev_register() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50428: ext4: fix off-by-one errors in fast-commit block filling (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50429: memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50420: crypto: hisilicon/hpre - fix resource leak in remove process (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53452: wifi: rtw89: fix potential race condition between napi_init and napi_enable (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53461: io_uring: wait interruptibly for request completions on exit (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53462: hsr: Fix uninit-value access in fill_frame_info() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53463: ibmvnic: Do not reset dql stats on NON_FATAL err (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53464: scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53465: soundwire: qcom: fix storing port config out-of-bounds (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53466: wifi: mt76: mt7915: fix memory leak in mt7915_mcu_exit (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53467: wifi: rtw89: fix potential leak in rtw89_append_probe_req_ie() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53468: ubifs: Fix memory leak in alloc_wbufs() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53470: ionic: catch failure from devlink_alloc (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53469: af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53453: drm/radeon: free iio for atombios when driver shutdown (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53471: drm/amdgpu/gfx: disable gfx9 cp_ecc_error_irq only when enabling legacy gfx ras (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53472: pwm: lpc32xx: Remove handling of PWM channels (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53473: ext4: improve error handling from ext4_dirhash() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53474: x86/MCE/AMD: Use an u64 for bank_map (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53475: usb: xhci: tegra: fix sleep in atomic call (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53476: iw_cxgb4: Fix potential NULL dereference in c4iw_fill_res_cm_id_entry() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53477: ipv6: Add lwtunnel encap size of all siblings in nexthop calculation (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53478: tracing/synthetic: Fix races on freeing last_cmd (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53479: cxl/acpi: Fix a use-after-free in cxl_parse_cfmws() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53480: kobject: Add sanity check for kset->kobj.ktype in kset_register() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53454: HID: multitouch: Correct devm device reference for hidinput input_dev name (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53481: ubi: ubi_wl_put_peb: Fix infinite loop when wear-leveling work failed (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53482: iommu: Fix error unwind in iommu_group_alloc() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53483: ACPI: processor: Check for null return of devm_kzalloc() in fch_misc_setup() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53484: lib: cpu_rmap: Avoid use after free on rmap->obj array entries (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53455: drm/vc4: drop all currently held locks if deadlock happens (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53485: fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53456: scsi: qla4xxx: Add length check when parsing nlattrs (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53486: fs/ntfs3: Enhance the attribute size check (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53457: FS: JFS: Fix null-ptr-deref Read in txBegin (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
77 more messages

October 4 (147 messages)

CVE-2025-39931: crypto: af_alg - Set merge to zero early in af_alg_sendmsg (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39929: smb: client: fix smbdirect_recv_io leak in smbd_negotiate() error path (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39940: dm-stripe: fix a possible integer overflow (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39941: zram: fix slot write race condition (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39942: ksmbd: smbdirect: verify remaining_data_length respects max_fragmented_recv_size (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39943: ksmbd: smbdirect: validate data_offset and data_length field of smb_direct_data_transfer (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39944: octeontx2-pf: Fix use-after-free bugs in otx2_sync_tstamp() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39945: cnic: Fix use-after-free bugs in cnic_delete_task (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39946: tls: make sure to abort the stream if headers are bogus (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39947: net/mlx5e: Harden uplink netdev access against device unbind (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39948: ice: fix Rx page leak on multi-buffer frames (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39949: qed: Don't collect too many protection override GRC elements (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39932: smb: client: let smbd_destroy() call disable_work_sync(&info->post_send_credits_work) (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39950: net/tcp: Fix a NULL pointer dereference when using TCP-AO with TCP_REPAIR (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39951: um: virtio_uml: Fix use-after-free after put_device in probe (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39952: wifi: wilc1000: avoid buffer overflow in WID string configuration (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39953: cgroup: split cgroup_destroy_wq into 3 workqueues (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39933: smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39934: drm: bridge: anx7625: Fix NULL pointer dereference with early IRQ (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39935: ASoC: codec: sma1307: Fix memory corruption in sma1307_setting_loaded() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39936: crypto: ccp - Always pass in an error pointer to __sev_platform_shutdown_locked() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39937: net: rfkill: gpio: Fix crash due to dereferencering uninitialized pointer (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39938: ASoC: qcom: q6apm-lpass-dais: Fix NULL pointer dereference if source graph failed (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39939: iommu/s390: Fix memory corruption when using identity domain (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50471: xen/gntdev: Accommodate VMA splitting (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50470: xhci: Remove device endpoints from bandwidth list when freeing the device (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50472: IB/mad: Don't call to function that might sleep while in atomic context (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50473: cpufreq: Init completion before kobject_init_and_add() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50475: RDMA/core: Make sure "ib_port" is valid when access sysfs node (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50484: ALSA: usb-audio: Fix potential memory leaks (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50485: ext4: add EXT4_IGET_BAD flag to prevent unexpected bad inode (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50486: net: ethernet: ti: Fix return type of netcp_ndo_start_xmit() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50487: NFSD: Protect against send buffer overflow in NFSv3 READDIR (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53533: Input: raspberrypi-ts - fix refcount leak in rpi_ts_probe (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53534: drm/mediatek: mtk_drm_crtc: Add checks for devm_kcalloc (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53535: net: bcmgenet: Add a check for oversized packets (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53536: blk-crypto: make blk_crypto_evict_key() more robust (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53537: f2fs: fix to avoid use-after-free for cached IPU bio (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53538: btrfs: insert tree mod log move in push_node_left (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50476: ntb_netdev: Use dev_kfree_skb_any() in interrupt context (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53539: RDMA/rxe: Fix incomplete state save in rxe_requester (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53540: wifi: cfg80211: reject auth/assoc to AP with our address (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53541: mtd: rawnand: brcmnand: Fix potential out-of-bounds access in oob write (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53542: ARM: dts: exynos: Use Exynos5420 compatible for the MIPI video phy (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53543: vdpa: Add max vqp attr to vdpa_nl_policy for nlattr length check (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53544: cpufreq: davinci: Fix clk use after free (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53545: drm/amdgpu: unmap and remove csa_va properly (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53546: net/mlx5: DR, fix memory leak in mlx5dr_cmd_create_reformat_ctx (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53547: drm/amdgpu: Fix sdma v4 sw fini error (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53548: net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50477: rtc: class: Fix potential memleak in devm_rtc_allocate_device() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53549: netfilter: ipset: Rework long task execution when adding/deleting entries (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53550: cpufreq: amd-pstate: fix global sysfs attribute type (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53551: usb: gadget: u_serial: Add null pointer check in gserial_resume (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53552: drm/i915: mark requests for GuC virtual engines to avoid use-after-free (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53553: HID: hyperv: avoid struct memcpy overrun warning (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53554: staging: ks7010: potential buffer overflow in ks_wlan_set_encode_ext() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50478: nilfs2: fix shift-out-of-bounds/overflow in nilfs_sb2_bad_offset() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50479: drm/amd: fix potential memory leak (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50480: memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50481: cxl: fix possible null-ptr-deref in cxl_guest_init_afu|adapter() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50482: iommu/vt-d: Clean up si_domain in the init_dmars() error path (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50483: net: enetc: avoid buffer leaks on xdp_do_redirect() failure (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50474: macintosh: fix possible memory leak in macio_add_one_device() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53556: iavf: Fix use-after-free in free_netdev (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53565: wifi: brcmfmac: Check for probe() id argument being NULL (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53566: netfilter: nft_set_rbtree: fix null deref on element insertion (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53567: spi: qup: Don't skip cleanup in remove's error path (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53568: s390/zcrypt: don't leak memory if dev_set_name() fails (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53569: ext2: Check block size validity during mount (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53570: wifi: nl80211: fix integer overflow in nl80211_parse_mbssid_elems() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53574: wifi: rtw88: delete timer and free skb queue when unloading (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53571: drm/i915: Make intel_get_crtc_new_encoder() less oopsy (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53572: clk: imx: scu: use _safe list iterator to avoid a use after free (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53573: clk: rs9: Fix suspend/resume (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53557: fprobe: Release rethook after the ftrace_ops is unregistered (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53578: net: qrtr: Fix an uninit variable access bug in qrtr_tx_resume() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53575: wifi: iwlwifi: mvm: fix potential array out of bounds access (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53576: null_blk: Always check queue mode setting from configfs (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53577: bpf, cpumap: Make sure kthread is running before map update returns (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53579: gpio: mvebu: fix irq domain leak (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53558: rcu-tasks: Avoid pr_info() with spin lock in cblist_init_generic() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53559: ip_vti: fix potential slab-use-after-free in decode_session6 (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53560: tracing/histograms: Add histograms to hist_vars if they have referenced variables (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53561: net: wwan: iosm: fix NULL pointer dereference when removing device (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53562: drm/msm: fix vram leak on bind errors (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53563: cpufreq: amd-pstate-ut: Fix kernel panic when loading the driver (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53564: ocfs2: fix defrag path triggering jbd2 ASSERT (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53555: mm/damon/core: initialize damo_filter->list from damos_new_filter() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50489: drm/mipi-dsi: Detach devices when removing the host (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50488: block, bfq: fix possible uaf for 'bfqq->bic' (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50498: eth: alx: take rtnl_lock on resume (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50499: media: dvb-core: Fix double free in dvb_register_device() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50500: netdevsim: fix memory leak in nsim_drv_probe() when nsim_dev_resources_register() failed (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50501: media: coda: Add check for dcoda_iram_alloc (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50502: mm: /proc/pid/smaps_rollup: fix no vma's null-deref (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50503: mtd: lpddr2_nvm: Fix possible null-ptr-deref (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50490: bpf: Propagate error from htab_lock_bucket() to userspace (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50504: powerpc/rtas: avoid scheduling in rtas_os_term() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
48 more messages

October 5 (1 message)

REJECTED: CVE-2022-50495: x86/xen: Fix memory leak in xen_smp_intr_init{_pv}() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

October 6 (1 message)

REJECTED: CVE-2025-39751: ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

October 7 (119 messages)

REJECTED: CVE-2023-52979: squashfs: harden sanity check in squashfs_read_xattr_id_table (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50510: perf/smmuv3: Fix hotplug callback leak in arm_smmu_pmu_init() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50509: media: coda: Add check for kmalloc (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50511: lib/fonts: fix undefined behavior in bit shift for get_default_font (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50512: ext4: fix potential memory leak in ext4_fc_record_regions() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50513: staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50514: usb: gadget: f_hid: fix refcount leak on error path (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50515: drm/amdgpu: Fix memory leak in hpd_rx_irq_create_workqueue() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50516: fs: dlm: fix invalid derefence of sb_lvbptr (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50517: mm/huge_memory: do not clobber swp_entry_t during THP split (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50519: nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50528: drm/amdkfd: Fix memory leakage (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50529: test_firmware: fix memory leak in test_firmware_init() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50530: blk-mq: fix null pointer dereference in blk_mq_clear_rq_mapping() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50531: tipc: fix an information leak in tipc_topsrv_kern_subscr (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50532: scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50533: wifi: mac80211: mlme: fix null-ptr deref on failed assoc (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50534: dm thin: Use last transaction's pmd->root when commit failed (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53617: soc: aspeed: socinfo: Add kfree for kstrdup (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53620: md: fix soft lockup in status_resync (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53623: mm/swap: fix swap_info_struct race between swapoff and get_swap_pages() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53625: drm/i915/gvt: fix vgpu debugfs clean in remove (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53627: scsi: hisi_sas: Grab sas_dev lock when traversing the members of sas_dev.list (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53618: btrfs: reject invalid reloc tree root keys with stack dump (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53621: memcontrol: ensure memcg acquired by id is properly set up (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53619: netfilter: conntrack: Avoid nf_ct_helper_hash uses after free (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50520: drm/radeon: Fix PCI device refcount leak in radeon_atrm_get_bios() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50523: clk: rockchip: Fix memory leak in rockchip_clk_register_pll() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53622: gfs2: Fix possible data races in gfs2_show_options() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53624: net/sched: sch_fq: fix integer overflow of "credit" (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53626: ext4: fix possible double unlock when moving a directory (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53629: fs: dlm: fix use after free in midcomms commit (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53628: drm/amdgpu: drop gfx_v11_0_cp_ecc_error_irq_funcs (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50526: drm/msm/dp: fix memory corruption with too many bridges (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53631: platform/x86: dell-sysman: Fix reference leak (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50527: drm/amdgpu: Fix size validation for non-exclusive domains (v4) (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50521: platform/x86: mxm-wmi: fix memleak in mxm_wmi_call_mx[ds|mx]() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53630: iommufd: Fix unpinning of pages when an access is present (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50522: mcb: mcb-parse: fix error handing in chameleon_parse_gdd() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50525: iommu/fsl_pamu: Fix resource leak in fsl_pamu_probe() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50524: iommu/mediatek: Check return value after calling platform_get_resource() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53632: net/mlx5e: Take RTNL lock when needed before calling xdp_set_features() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53633: accel/qaic: Fix a leak in map_user_pages() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53634: bpf, arm64: Fixed a BTI error on returning to patched function (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53647: Drivers: hv: vmbus: Don't dereference ACPI root object handle (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53649: perf trace: Really free the evsel->priv area (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53651: Input: exc3000 - properly stop timer on shutdown (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53652: vdpa: Add features attr to vdpa_nl_policy for nlattr length check (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53645: bpf: Make bpf_refcount_acquire fallible for non-owning refs (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50518: parisc: Fix locking in pdc_iodc_print() firmware call (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53636: clk: microchip: fix potential UAF in auxdev release callback (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53646: drm/i915/perf: add sentinel to xehp_oa_b_counters (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53648: ALSA: ac97: Fix possible NULL dereference in snd_ac97_mixer (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53654: octeontx2-af: Add validation before accessing cgx and lmac (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53650: fbdev: omapfb: lcd_mipid: Fix an error handling path in mipid_spi_probe() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53653: media: amphion: fix REVERSE_INULL issues reported by coverity (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53638: octeon_ep: cancel queued works in probe error path (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53640: ASoC: lpass: Fix for KASAN use_after_free out of bounds (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53641: wifi: ath9k: hif_usb: fix memory leak of remain_skbs (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53637: media: i2c: ov772x: Fix memleak in ov772x_probe() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53644: media: radio-shark: Add endpoint checks (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53639: wifi: ath6kl: reduce WARN to dev_dbg() in callback (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53642: x86: fix clear_user_rep_good() exception handling annotation (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53643: nvme-tcp: don't access released socket during error recovery (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53635: netfilter: conntrack: fix wrong ct->timeout value (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50549: dm thin: Fix ABBA deadlock between shrink_slab and dm_pool_abort_metadata (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50550: blk-iolatency: Fix memory leak on add_disk() failures (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50552: blk-mq: use quiesced elevator switch when reinitializing queues (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50553: tracing/hist: Fix out-of-bound write on 'action_data.var_ref_idx' (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50555: tipc: fix a null-ptr-deref in tipc_topsrv_accept (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50535: drm/amd/display: Fix potential null-deref in dm_resume (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50546: ext4: fix uninititialized value in 'ext4_evict_inode' (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50547: media: solo6x10: fix possible memory leak in solo_sysfs_init() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50548: media: i2c: hi846: Fix memory leak in hi846_parse_dt() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50551: wifi: brcmfmac: Fix potential shift-out-of-bounds in brcmf_fw_alloc_request() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50536: bpf, sockmap: Fix repeated calls to sock_put() when msg has more_data (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50538: vme: Fix error not catched in fake_init() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50537: firmware: raspberrypi: fix possible memory leak in rpi_firmware_probe() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53667: net: cdc_ncm: Deal with too low values of dwNtbOutMaxSize (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50542: media: si470x: Fix use-after-free in si470x_int_in_callback() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50545: r6040: Fix kmemleak in probe and remove (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50544: usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53657: ice: Don't tx before switchdev is fully configured (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53668: ring-buffer: Fix deadloop issue on reading trace_pipe (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53672: btrfs: output extra debug info if we failed to find an inline backref (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53673: Bluetooth: hci_event: call disconnect callback before deleting conn (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50554: blk-mq: avoid double ->queue_rq() because of early timeout (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53669: tcp: fix skb_copy_ubufs() vs BIG TCP (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53655: rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53670: nvme-core: fix dev_pm_qos memleak (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53671: srcu: Delegate work to the boot cpu if using SRCU_SIZE_SMALL (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50539: ARM: OMAP2+: omap4-common: Fix refcount leak bug (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53675: scsi: ses: Fix possible desc_ptr out-of-bounds accesses (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50540: dmaengine: qcom-adm: fix wrong sizeof config in slave_config (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53658: spi: bcm-qspi: return error if neither hif_mspi nor mspi is available (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50541: dmaengine: ti: k3-udma: Reset UDMA_CHAN_RT byte counters to prevent overflow (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50543: RDMA/rxe: Fix mr->map double free (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53666: ASoC: codecs: wcd938x: fix missing mbhc init error handling (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53678: drm/i915: Fix system suspend without fbdev being initialized (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
20 more messages

October 9 (11 messages)

REJECTED: CVE-2022-50450: libbpf: Use elf_getshdrnum() instead of e_shnum (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39955: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39954: clk: sunxi-ng: mp: Fix dual-divider clock rate readback (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39956: igc: don't fail igc_probe() on LED setup error (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39957: wifi: mac80211: increase scan_ies_len for S1G (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39958: iommu/s390: Make attach succeed when the device was surprise removed (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39959: ASoC: amd: acp: Fix incorrect retrival of acp_chip_info (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39961: iommu/amd/pgtbl: Fix possible race while increase page table level (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39960: gpiolib: acpi: initialize acpi_gpio_info struct (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39963: io_uring: fix incorrect io_kiocb reference in io_link_skb (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39962: rxrpc: Fix untrusted unsigned subtract (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

October 10 (4 messages)

REJECTED: CVE-2022-50455: nfs: fix possible null-ptr-deref when parsing param (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2022-50487: NFSD: Protect against send buffer overflow in NFSv3 READDIR (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2022-50338: binder: fix UAF of alloc->vma in race with munmap() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2022-50502: mm: /proc/pid/smaps_rollup: fix no vma's null-deref (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

October 13 (2 messages)

CVE-2025-39965: xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39964: crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

October 15 (34 messages)

CVE-2025-39967: fbcon: fix integer overflow in fbcon_do_set_font (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39966: iommufd: Fix race during abort for file descriptors (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39976: futex: Use correct exit on failure from futex_hash_allocate_default() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39977: futex: Prevent use-after-free during requeue-PI (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39978: octeontx2-pf: Fix potential use after free in otx2_tc_add_flow() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39982: Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39983: Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39968: i40e: add max boundary check for VF filters (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39969: i40e: fix validation of VF state in get resources (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39971: i40e: fix idx validation in config queues msg (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39979: net/mlx5: fs, fix UAF in flow counter release (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39992: mm: swap: check for stable address space before operating on the VMA (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39991: wifi: ath11k: fix NULL dereference in ath11k_qmi_m3_load() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39981: Bluetooth: MGMT: Fix possible UAFs (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39985: can: mcba_usb: populate ndo_change_mtu() to prevent buffer overflow (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39994: media: tuner: xc5000: Fix use-after-free in xc5000_release (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39995: media: i2c: tc358743: Fix use-after-free bugs caused by orphan timer in probe (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39996: media: b2c2: Fix use-after-free causing by irq_check_work in flexcop_pci_remove (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39970: i40e: fix input validation logic for action_meta (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39980: nexthop: Forbid FDB status change while nexthop is in a group (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39974: tracing/osnoise: Fix slab-out-of-bounds in _parse_integer_limit() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39984: net: tun: Update napi->skb after XDP process (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39986: can: sun4i_can: populate ndo_change_mtu() to prevent buffer overflow (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39987: can: hi311x: populate ndo_change_mtu() to prevent buffer overflow (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39988: can: etas_es58x: populate ndo_change_mtu() to prevent buffer overflow (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39990: bpf: Check the helper function is valid in get_helper_proto (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40000: wifi: rtw89: fix use-after-free in rtw89_core_tx_kick_off_and_wait() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39972: i40e: fix idx validation in i40e_validate_queue_map (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39973: i40e: add validation for ring_len param (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39975: smb: client: fix wrong index reference in smb2_compound_op() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39993: media: rc: fix races with imon_disconnect() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39997: ALSA: usb-audio: fix race condition to UAF in snd_usbmidi_free (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39999: blk-mq: fix blk_mq_tags double free while nr_requests grown (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-39998: scsi: target: target_core_configfs: Add length check to avoid buffer overflow (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

October 18 (3 messages)

CVE-2025-40002: thunderbolt: Fix use-after-free in tb_dp_dprx_work (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40001: scsi: mvsas: Fix use-after-free bugs in mvs_work_queue (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40003: net: mscc: ocelot: Fix use-after-free caused by cyclic delayed work (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

October 20 (13 messages)

CVE-2025-40004: net/9p: Fix buffer overflow in USB transport layer (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40006: mm/hugetlb: fix folio is still mapped when deleted (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40007: netfs: fix reference leak (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40009: fs/proc/task_mmu: check p->vec_buf for NULL (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40011: drm/gma500: Fix null dereference in hdmi teardown (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40005: spi: cadence-quadspi: Implement refcount to handle unbind during busy (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40008: kmsan: fix out-of-bounds access to shadow memory (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40012: net/smc: fix warning in smc_rx_splice() when calling get_page() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40010: afs: Fix potential null pointer dereference in afs_put_server (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40015: media: stm32-csi: Fix dereference before NULL check (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40013: ASoC: qcom: audioreach: fix potential null pointer dereference (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40016: media: uvcvideo: Mark invalid entities with id UVC_INVALID_ENTITY_ID (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40017: media: iris: Fix memory leak by freeing untracked persist buffer (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

October 22 (68 messages)

CVE-2022-50556: drm: Fix potential null-ptr-deref due to drmm_mode_config_init() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50570: platform/chrome: fix memory corruption in ioctl (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50571: btrfs: call __btrfs_remove_free_space_cache_locked on cache load failure (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50573: wifi: mt76: mt7915: fix mt7915_rate_txpower_get() resource leaks (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50575: xen/privcmd: Fix a possible warning in privcmd_ioctl_mmap_resource() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50558: regmap-irq: Use the new num_config_regs property in regmap_add_irq_chip_fwnode (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50577: ima: Fix memory leak in __ima_inode_hash() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50578: class: fix possible memory leak in __class_register() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50579: arm64: ftrace: fix module PLTs with mcount (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50580: blk-throttle: prevent overflow while calculating wait time (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50582: regulator: core: Prevent integer underflow (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50559: clk: imx: scu: fix memleak on platform_device_add() fails (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50560: drm/meson: explicitly remove aggregate driver at module unload time (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50561: iio: fix memory leak in iio_device_register_eventset() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50563: dm thin: Fix UAF in run_timer_softirq() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53703: HID: amd_sfh: Fix for shift-out-of-bounds (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53704: clk: imx: clk-imx8mp: improve error handling in imx8mp_clocks_probe() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53705: ipv6: Fix out-of-bounds access in ipv6_find_tlv() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53707: drm/amdgpu: Fix integer overflow in amdgpu_cs_pass1 (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53708: ACPI: x86: s2idle: Catch multiple ACPI_TYPE_PACKAGE objects (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53709: ring-buffer: Handle race between rb_move_tail and rb_check_pages (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53712: ARM: 9317/1: kexec: Make smp stop calls asynchronous (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53695: udf: Detect system inodes linked into directory hierarchy (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53713: arm64: sme: Use STR P to clear FFR context field in streaming SVE mode (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53715: wifi: brcmfmac: cfg80211: Pass the PMK in binary instead of hex (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53714: drm/stm: ltdc: fix late dereference check (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53716: net: fix skb leak in __skb_tstamp_tx() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53717: wifi: ath9k: Fix potential stack-out-of-bounds write in ath9k_wmi_rsp_callback() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53724: mfd: pcf50633-adc: Fix potential memleak in pcf50633_adc_async_read() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53720: net/mlx5e: Release the label when replacing existing ct entry (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53726: arm64: csum: Fix OoB access in IP checksum code for negative lengths (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53728: posix-timers: Ensure timer ID search-loop limit is valid (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53729: soc: qcom: qmi_encdec: Restrict string length in decode (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53730: blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53696: scsi: qla2xxx: Fix memory leak in qla2x00_probe_one() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53731: netlink: fix potential deadlock in netlink_set_err() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53700: media: max9286: Fix memleak in max9286_v4l2_register() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53701: netfilter: nf_tables: deactivate anonymous set from preparation phase (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53702: s390/crypto: use vector instructions only if available for ChaCha20 (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53699: riscv: move memblock_allow_resize() after linear mapping is ready (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50576: serial: pch: Fix PCI device refcount leak in pch_request_dma() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50581: hfs: fix OOB Read in __hfs_brec_find (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50574: drm/omap: dss: Fix refcount leak bugs (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50566: mtd: Fix device name leak when register device failed in add_mtd_device() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50569: xfrm: Update ipcomp_scratches with NULL when freed (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53694: riscv: ftrace: Fixup panic by disabling preemption (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53692: ext4: fix use-after-free read in ext4_find_extent for bigalloc + inline (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53710: wifi: mt76: mt7921: fix error code of return in mt7921_acpi_read (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53706: mm/vmemmap/devdax: fix kernel crash when probing devdax devices (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53719: serial: arc_uart: fix of_iomap leak in `arc_serial_probe` (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53723: drm/amdgpu: disable sdma ecc irq only when sdma RAS is enabled in suspend (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50564: s390/netiucv: Fix return type of netiucv_tx() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53711: NFS: Fix a potential data corruption (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53718: ring-buffer: Do not swap cpu_buffer during resize process (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53721: wifi: ath12k: Fix a NULL pointer dereference in ath12k_mac_op_hw_scan() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50568: usb: gadget: f_hid: fix f_hidg lifetime vs cdev (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50572: ASoC: audio-graph-card: fix refcount leak of cpu_ep in __graph_for_each_link() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53727: net/sched: fq_pie: avoid stalls in fq_pie_timer() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50567: fs: jfs: fix shift-out-of-bounds in dbAllocAG (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53722: md: raid1: fix potential OOB in raid1_remove_disk() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53698: xsk: fix refcount underflow in error path (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53725: clocksource/drivers/cadence-ttc: Fix memory leak in ttc_timer_probe (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53732: fs/ntfs3: Fix NULL dereference in ni_write_inode (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50557: pinctrl: thunderbay: fix possible memory leak in thunderbay_build_functions() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50565: wifi: plfxlc: fix potential memory leak in __lf_x_usb_enable_rx() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53693: USB: gadget: Fix the memory leak in raw_gadget driver (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53697: nvdimm: Fix memleak of pmu attr_groups in unregister_nvdimm_pmu() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50562: tpm: acpi: Call acpi_put_table() to fix memory leak (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

October 23 (1 message)

REJECTED: CVE-2023-53701: netfilter: nf_tables: deactivate anonymous set from preparation phase (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

October 24 (9 messages)

REJECTED: CVE-2025-39898: e1000e: fix heap overflow in e1000_set_eeprom (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40019: crypto: essiv - Check ssize for decryption and in-place encryption (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister during netns cleanup (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53733: net: sched: cls_u32: Undo tcf_bind_filter if u32_replace_hw_knode (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40021: tracing: dynevent: Add a missing lockdown check on dynevent (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40020: can: peak_usb: fix shift-out-of-bounds issue (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40022: crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40023: drm/xe/vf: Don't expose sysfs attributes not applicable for VFs (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40024: vhost: Take a reference on the task in struct vhost_task. (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

October 28 (58 messages)

CVE-2025-40025: f2fs: fix to do sanity check on node footer for non inode dnode (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40027: net/9p: fix double req put in p9_fd_cancelled (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40026: KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40028: binder: fix double-free in dbitmap (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40041: LoongArch: BPF: Sign-extend struct ops return values properly (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40042: tracing: Fix race condition in kprobe initialization causing NULL pointer dereference (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40049: Squashfs: fix uninit-value in squashfs_get_parent (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40050: bpf: Skip scalar adjustment for BPF_NEG if dst is a pointer (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40030: pinctrl: check the return value of pinmux_ops::get_function_name() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40039: ksmbd: Fix race condition in RPC handle list access (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40040: mm/ksm: fix flag-dropping behavior in ksm_madvise (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40033: remoteproc: pru: Fix potential NULL pointer dereference in pru_rproc_set_ctable() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40043: net: nfc: nci: Add parameter validation for packet data (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40044: fs: udf: fix OOB read in lengthAllocDescs handling (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40045: ASoC: codecs: wcd937x: set the comp soundwire port correctly (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40046: io_uring/zcrx: fix overshooting recv limit (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40047: io_uring/waitid: always prune wait queue entry in io_waitid_wait() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40048: uio_hv_generic: Let userspace take care of interrupt mask (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40029: bus: fsl-mc: Check return value of platform_get_resource() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40053: net: dlink: handle copy_thresh allocation failure (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40031: tee: fix register_shm_helper() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40062: crypto: hisilicon/qm - set NULL to qm->debug.qm_diff_regs (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40063: crypto: comp - Use same definition of context alloc and free ops (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40065: RISC-V: KVM: Write hgatp register with valid mode bits (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40051: vhost: vringh: Modify the return value check (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40066: wifi: mt76: mt7996: Check phy before init msta_link in mt7996_mac_sta_add_links() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40035: Input: uinput - zero-initialize uinput_ff_upload_compat to avoid info leak (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40036: misc: fastrpc: fix possible map leak in fastrpc_put_args (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40037: fbdev: simplefb: Fix use after free in simplefb_detach_genpds() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40070: pps: fix warning in pps_register_cdev when register device fail (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40064: smc: Fix use-after-free in __pnet_find_base_ndev(). (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40067: fs/ntfs3: reject index allocation if $BITMAP is empty but blocks exist (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40072: fanotify: Validate the return value of mnt_ns_from_dentry() before dereferencing (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40068: fs: ntfs3: Fix integer overflow in run_unpack() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40054: f2fs: fix UAF issue in f2fs_merge_page_bio() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40074: ipv4: start using dst_dev_rcu() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40075: tcp_metrics: use dst_dev_net_rcu() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40073: drm/msm: Do not validate SSPP when it is not ready (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40032: PCI: endpoint: pci-epf-test: Add NULL check for DMA channels before release (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40076: PCI: rcar-host: Pass proper IRQ domain to generic_handle_domain_irq() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40077: f2fs: fix to avoid overflow while left shift operation (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40034: PCI/AER: Avoid NULL pointer dereference in aer_ratelimit() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40038: KVM: SVM: Skip fastpath emulation on VM-Exit if next RIP isn't valid (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40080: nbd: restrict sockets to TCP and UDP (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40081: perf: arm_spe: Prevent overflow in PERF_IDX2OFF() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40056: vhost: vringh: Fix copy_to_iter return value check (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40060: coresight: trbe: Return NULL pointer for allocation failures (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40079: riscv, bpf: Sign extend struct ops return values properly (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40082: hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40069: drm/msm: Fix obj leak in VM_BIND error path (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40058: iommu/vt-d: Disallow dirty tracking if incoherent page walk (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40071: tty: n_gsm: Don't block input queue by waiting MSC (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40059: coresight: Fix incorrect handling for return value of devm_kzalloc (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40078: bpf: Explicitly check accesses to bpf_sock_addr (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40055: ocfs2: fix double free in user_cluster_connect() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40057: ptp: Add a upper bound on max_vclocks (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40061: RDMA/rxe: Fix race in do_task() when draining (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40052: smb: client: fix crypto buffers in non-linear memory (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

October 29 (5 messages)

REJECTED: CVE-2023-53293: Bluetooth: btrtl: check for NULL in btrtl_set_quirks() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40084: ksmbd: transport_ipc: validate payload size before reading handle (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40085: ALSA: usb-audio: Fix NULL pointer deference in try_to_register_card (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40083: net/sched: sch_qfq: Fix null-deref in agg_dequeue (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-7324: scsi: ses: Fix possible addl_desc_ptr out-of-bounds accesses (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

October 30 (20 messages)

CVE-2025-40086: drm/xe: Don't allow evicting of BOs in same VM in array of VM binds (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40098: ALSA: hda: cs35l41: Fix NULL pointer dereference in cs35l41_get_acpi_mute_state() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40096: drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40101: btrfs: fix memory leaks when rejecting a non SINGLE data profile without an RST (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40097: ALSA: hda: Fix missing pointer check in hda_component_manager_init function (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40104: ixgbevf: fix mailbox API compatibility by negotiating supported features (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40088: hfsplus: fix slab-out-of-bounds read in hfsplus_strcasecmp() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40103: smb: client: Fix refcount leak for cifs_sb_tlink (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40092: usb: gadget: f_ncm: Refactor bind path to use __free() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40089: cxl/features: Add check for no entries in cxl_feature_info (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40087: NFSD: Define a proc_layoutcommit for the FlexFiles layout type (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40094: usb: gadget: f_acm: Refactor bind path to use __free() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40099: cifs: parse_dfs_referrals: prevent oob on malformed input (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40100: btrfs: do not assert we found block group item when creating free space tree (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40102: KVM: arm64: Prevent access to vCPU events before init (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40105: vfs: Don't leak disconnected dentries on umount (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40090: ksmbd: fix recursive locking in RPC handle list access (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40091: ixgbe: fix too early devlink_free() in ixgbe_remove() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40093: usb: gadget: f_ecm: Refactor bind path to use __free() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40095: usb: gadget: f_rndis: Refactor bind path to use __free() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

October 31 (1 message)

CVE-2025-40106: comedi: fix divide-by-zero in comedi_buf_munge() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

673 messages

Powered by blists - more mailing lists