linux-cve-announce mailing list - 2025/12

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

[an error occurred while processing this directive]

[<prev month] [next month>] [year] [list]

linux-cve-announce mailing list - 2025/12

Mon	Tue	Wed	Thu	Fri	Sat	Sun
¹	² 1	³	⁴ 53	⁵	⁶ 23	⁷
⁸ 81	⁹ 160	¹⁰	¹¹	¹² 1	¹³	¹⁴
¹⁵	¹⁶ 160	¹⁷	¹⁸ 3	¹⁹	²⁰	²¹
²² 18	²³ 7	²⁴ 328	²⁵	²⁶	²⁷	²⁸
²⁹ 7	³⁰ 255	³¹

Messages by day:

December 2 (1 message)

REJECTED: CVE-2022-49909: Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

December 4 (53 messages)

CVE-2025-40215: xfrm: delete x->tunnel as we delete x (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40214: af_unix: Initialise scc_index in unix_add_edge(). (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40216: io_uring/rsrc: don't rely on user vaddr alignment (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40218: mm/damon/vaddr: do not repeat pte_offset_map_lock() until success (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40220: fuse: fix livelock in synchronous file put from fuseblk workers (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40217: pidfs: validate extensible ioctls (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40219: PCI/IOV: Add PCI rescan-remove locking when enabling/disabling SR-IOV (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40221: media: pci: mg4b: fix uninitialized iio scan data (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40235: btrfs: directly free partially initialized fs_info in btrfs_check_leaked_roots() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40224: hwmon: (cgbc-hwmon) Add missing NULL check after devm_kzalloc() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40238: net/mlx5: Fix IPsec cleanup over MPV device (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40240: sctp: avoid NULL dereference when chunk data buffer is missing (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40241: erofs: fix crafted invalid cases for encoded extents (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40242: gfs2: Fix unlikely race in gdlm_put_lock (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40243: hfs: fix KMSAN uninit-value issue in hfs_find_set_zero_bits() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40245: nios2: ensure that memblock.current_limit is set when setting pfn limits (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40225: drm/panthor: Fix kernel panic on partial unmap of a GPU VA region (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40228: mm/damon/sysfs: catch commit test ctx alloc failure (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40229: mm/damon/core: fix potential memory leak by cleaning ops_filter in damon_destroy_scheme (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40227: mm/damon/sysfs: dealloc commit test ctx always (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40230: mm: prevent poison consumption when splitting THP (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40231: vsock: fix lock inversion in vsock_assign_transport() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40226: firmware: arm_scmi: Account for failed debug initialization (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40223: most: usb: Fix use-after-free in hdm_disconnect (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40222: tty: serial: sh-sci: fix RSCI FIFO overrun handling (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40232: rv: Fully convert enabled_monitors to use list_head as iterator (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40233: ocfs2: clear extent cache after moving/defragmenting extents (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40234: platform/x86: alienware-wmi-wmax: Fix NULL pointer dereference in sleep handlers (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40236: virtio-net: zero unused hash fields (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40237: fs/notify: call exportfs_encode_fid with s_umount (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40239: net: phy: micrel: always set shared->phydev for LAN8814 (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40244: hfsplus: fix KMSAN uninit-value issue in __hfsplus_ext_cache_extent() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40247: drm/msm: Fix pgtable prealloc error path (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40257: mptcp: fix a race in mptcp_pm_del_add_timer() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40259: scsi: sg: Do not sleep in atomic context (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40249: gpio: cdev: make sure the cdev fd is still active before emitting events (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40250: net/mlx5: Clean up only new IRQ glue on request_irq() failure (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40251: devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40252: net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40253: s390/ctcm: Fix double-kfree (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40254: net: openvswitch: remove never-working support for setting nsh fields (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40255: net: core: prevent NULL deref in generic_hwtstamp_ioctl_lower() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40265: vfat: fix missing sb_min_blocksize() return value checks (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40248: vsock: Ignore signal/timeout on connect() if already established (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40246: xfs: fix out of bounds memory read error in symlink repair (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40256: xfrm: also call xfrm_state_delete_tunnel at destroy time for states that were never added (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40258: mptcp: fix race condition in mptcp_schedule_work() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40260: sched_ext: Fix scx_enable() crash on helper kthread creation failure (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40262: Input: imx_sc_key - fix memory corruption on unload (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40263: Input: cros_ec_keyb - fix an invalid memory access (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40264: be2net: pass wrb_params in case of OS2BMC (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40266: KVM: arm64: Check the untrusted offset in FF-A memory share (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40261: nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

December 6 (23 messages)

CVE-2025-40276: drm/panthor: Flush shmem writes before mapping buffers CPU-uncached (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40274: KVM: guest_memfd: Remove bindings on memslot deletion when gmem is dying (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40268: cifs: client: fix memory leak in smb3_fs_context_parse_param (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40267: io_uring/rw: ensure allocated iovec gets cleared for early failure (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40277: drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40278: net: sched: act_ife: initialize struct tc_ife to fix KMSAN kernel-infoleak (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40279: net: sched: act_connmark: initialize struct tc_ife to fix kernel leak (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40280: tipc: Fix use-after-free in tipc_mon_reinit_self(). (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40281: sctp: prevent possible shift-out-of-bounds in sctp_transport_update_rto (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40282: Bluetooth: 6lowpan: reset link-local header on ipv6 recv path (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40283: Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40269: ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40284: Bluetooth: MGMT: cancel mesh send timer when hdev removed (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40287: exfat: fix improper check of dentry.stream.valid_size (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40285: smb/server: fix possible refcount leak in smb2_sess_setup() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40286: smb/server: fix possible memory leak in smb2_read() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40289: drm/amdgpu: hide VRAM sysfs attributes on GPUs without VRAM (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40270: mm, swap: fix potential UAF issue for VMA readahead (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40275: ALSA: usb-audio: Fix NULL pointer dereference in snd_usb_mixer_controls_badd (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40271: fs/proc: fix uaf in proc_readdir_de() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40272: mm/secretmem: fix use-after-free race in fault handler (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40273: NFSD: free copynotify stateid in nfs4_free_ol_stateid() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40288: drm/amdgpu: Fix NULL pointer dereference in VRAM logic for APU devices (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

December 8 (81 messages)

CVE-2025-40290: xsk: avoid data corruption on cq descriptor number (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40292: virtio-net: fix received length check in big packets (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40291: io_uring: fix regbuf vector size truncation (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40302: media: videobuf2: forbid remove_bufs when legacy fileio is active (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40303: btrfs: ensure no dirty metadata is written back for an fs with errors (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40304: fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40305: 9p/trans_fd: p9_fd_request: kick rx thread if EPOLLIN (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40306: orangefs: fix xattr related buffer overflow... (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40307: exfat: validate cluster allocation bits of the allocation bitmap (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40308: Bluetooth: bcsp: receive data only if registered (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40309: Bluetooth: SCO: Fix UAF on sco_conn_free (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40310: amd/amdkfd: resolve a race in amdgpu_amdkfd_device_fini_sw (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40311: accel/habanalabs: support mapping cb with vmalloc-backed coherent memory (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40293: iommufd: Don't overflow during division for dirty tracking (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40312: jfs: Verify inode mode when loading from disk (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40313: ntfs3: pretend $Extend records as regular files (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40314: usb: cdns3: gadget: Use-after-free during failed initialization and exit of cdnsp gadget (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40315: usb: gadget: f_fs: Fix epfile null pointer access after ep enable. (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40316: drm/mediatek: Fix device use-after-free on unbind (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40321: wifi: brcmfmac: fix crash while sending Action Frames in standalone AP Mode (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40317: regmap: slimbus: fix bus_context pointer in regmap init calls (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40318: Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40319: bpf: Sync pending IRQ work before freeing ring buffer (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40322: fbdev: bitblit: bound-check glyph index in bit_putcs* (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40295: fscrypt: fix left shift underflow when inode->i_blkbits > PAGE_SHIFT (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40320: smb: client: fix potential cfid UAF in smb2_query_info_compound (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40294: Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40297: net: bridge: fix use-after-free due to MST port state bypass (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40298: gve: Implement settime64 with -EOPNOTSUPP (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40296: platform/x86: int3472: Fix double free of GPIO device during unregister (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40299: gve: Implement gettimex64 with -EOPNOTSUPP (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40301: Bluetooth: hci_event: validate skb length for unknown CC opcode (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40324: NFSD: Fix crash in nfsd4_read_release() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40326: NFSD: Define actions for the new time_deleg FATTR4 attributes (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40323: fbcon: Set fb_display[i]->mode to NULL when the mode is released (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50583: md/raid0, raid10: Don't set discard sectors for request queue (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50615: perf/x86/intel/uncore: Fix reference count leak in snr_uncore_mmio_map() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50614: misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50624: net: netsec: fix error handling in netsec_register_mdio() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50625: serial: amba-pl011: avoid SBSA UART accessing DMACR register (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50626: media: dvb-usb: fix memory leak in dvb_usb_adapter_init() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50627: wifi: ath11k: fix monitor mode bringup crash (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50628: drm/gud: Fix UBSAN warning (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50629: wifi: rsi: Fix memory leak in rsi_coex_attach() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50630: mm: hugetlb: fix UAF in hugetlb_handle_userfault (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50616: regulator: core: Use different devices for resource allocation and DT lookup (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50617: drm/amdgpu/powerplay/psm: Fix memory leak in power state init (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50618: mmc: meson-gx: fix return value check of mmc_add_host() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50619: drm/amdkfd: Fix memory leak in kfd_mem_dmamap_userptr() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50620: f2fs: fix to invalidate dcc->f2fs_issue_discard in error path (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50621: dm: verity-loadpin: Only trust verity targets with enforcement (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50622: ext4: fix potential memory leak in ext4_fc_record_modified_inode() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50623: fpga: prevent integer overflow in dfl_feature_ioctl_set_irq() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53743: PCI: Free released resource after coalescing (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53742: kcsan: Avoid READ_ONCE() in read_instrumented_memory() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53752: net: deal with integer overflows in kmalloc_reserve() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53753: drm/amd/display: fix mapping to non-allocated address (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53754: scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53755: dmaengine: ptdma: check for null desc before calling pt_cmd_callback (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53756: KVM: VMX: Fix crash due to uninitialized current_vmcs (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53757: irqchip/irq-mvebu-gicp: Fix refcount leak in mvebu_gicp_probe (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53760: scsi: ufs: core: mcq: Fix &hwq->cq_lock deadlock issue (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53758: spi: atmel-quadspi: Free resources even if runtime resume failed in .remove() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53761: USB: usbtmc: Fix direction for 0-length ioctl control messages (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53759: HID: hidraw: fix data race on device refcount (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53744: soc: ti: pm33xx: Fix refcount leak in am33xx_pm_probe (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53762: Bluetooth: hci_sync: Fix UAF in hci_disconnect_all_sync (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53763: Revert "f2fs: fix to do sanity check on extent cache correctly" (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53764: wifi: ath12k: Handle lock during peer_id find (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53765: dm cache: free background tracker's queued work in btracker_destroy (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53766: FS: JFS: Check for read-only mounted filesystem in txBegin (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53767: wifi: ath12k: fix memory leak in ath12k_qmi_driver_event_work() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53768: regmap-irq: Fix out-of-bounds access when allocating config buffers (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53745: um: vector: Fix memory leak in vector_config (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53746: s390/vfio-ap: fix memory leak in vfio_ap device driver (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53747: vc_screen: reload load of struct vc_data pointer in vcs_write() to avoid UAF (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53748: media: mediatek: vcodec: Fix potential array out-of-bounds in decoder queue_setup (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53750: pinctrl: freescale: Fix a memory out of bounds when num_configs is 1 (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53751: cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53749: x86: fix clear_user_rep_good() exception handling annotation (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53769: virt/coco/sev-guest: Double-buffer messages (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

December 9 (160 messages)

CVE-2022-50632: drivers: perf: marvell_cn10k: Fix hotplug callback leak in tad_pmu_init() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50631: RISC-V: kexec: Fix memory leak of fdt buffer (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50641: HSI: omap_ssi: Fix refcount leak in ssi_probe (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50643: cifs: Fix xid leak in cifs_copy_file_range() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50642: platform/chrome: cros_ec_typec: zero out stale pointers (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50644: clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50645: EDAC/i10nm: fix refcount leak in pci_get_dev_wrapper() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50646: scsi: hpsa: Fix possible memory leak in hpsa_init_one() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50647: RISC-V: Make port I/O string accessors actually work (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50633: usb: dwc3: qcom: Fix memory leak in dwc3_qcom_interconnect_init (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50634: power: supply: cw2015: Fix potential null-ptr-deref in cw_bat_probe() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50635: powerpc/kprobes: Fix null pointer reference in arch_prepare_kprobe() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50636: PCI: Fix pci_device_is_present() for VFs by checking PF (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50636: PCI: Fix pci_device_is_present() for VFs by checking PF (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50637: cpufreq: qcom-hw: Fix memory leak in qcom_cpufreq_hw_read_lut() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50638: ext4: fix bug_on in __es_tree_search caused by bad boot loader inode (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50639: io-wq: Fix memory leak in worker creation (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50640: mmc: core: Fix kernel panic when remove non-standard SDIO card (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53781: smc: Fix use-after-free in tcp_write_timer_handler(). (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50649: power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53782: dccp: Fix out of bounds access in DCCP error handler (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53778: accel/qaic: Clean up integer overflow checking in map_user_pages() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53783: blk-iocost: fix divide by 0 error in calc_lcoefs() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53780: drm/amd/display: fix FCLK pstate change underflow (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53779: mfd: dln2: Fix memory leak in dln2_probe() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53784: drm: bridge: dw_hdmi: fix connector access for scdc (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53785: mt76: mt7921: don't assume adequate headroom for SDIO headers (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53786: dm flakey: fix a crash with invalid table line (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53787: regulator: da9063: fix null pointer deref with partial DT config (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50650: bpf: Fix reference state management for synchronous callbacks (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53788: ALSA: hda/ca0132: fixup buffer overrun at tuning_ctl_set() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53789: iommu/amd: Improve page fault error reporting (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53790: bpf: Zeroing allocated object from slab in bpf memory allocator (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53791: md: fix warning for holder mismatch from export_rdev() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53792: nvme-core: fix memory leak in dhchap_ctrl_secret (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53793: perf tool x86: Fix perf_env memory leak (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53794: cifs: fix session state check in reconnect to avoid use-after-free issue (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53795: iommufd: IOMMUFD_DESTROY should not increase the refcount (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53796: f2fs: fix information leak in f2fs_move_inline_dirents() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53797: HID: wacom: Use ktime_t rather than int when dealing with timestamps (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50651: ethtool: eeprom: fix null-deref on genl_info in dump (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53801: iommu/sprd: Release dma buffer to avoid memory leak (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53798: ethtool: Fix uninitialized number of lanes (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53799: crypto: api - Use work queue in crypto_destroy_instance (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53802: wifi: ath9k: htc_hst: free skb in ath9k_htc_rx_msg() if there is no callback function (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53800: ubi: Fix use-after-free when volume resizing failed (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53803: scsi: ses: Fix slab-out-of-bounds in ses_enclosure_data_process() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53804: nilfs2: fix use-after-free bug of nilfs_root in nilfs_evict_inode() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53805: tty: n_gsm: fix UAF in gsm_cleanup_mux (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53806: drm/amd/display: populate subvp cmd info only for the top pipe (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53807: clk: clocking-wizard: Fix Oops in clk_wzrd_register_divider() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50652: uio: uio_dmem_genirq: Fix missing unlock in irq configuration (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53808: wifi: mwifiex: fix memory leak in mwifiex_histogram_read() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53813: ext4: fix rbtree traversal bug in ext4_mb_use_preallocated (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53809: l2tp: Avoid possible recursive deadlock in l2tp_tunnel_register() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53810: blk-mq: release crypto keyslot before reporting I/O complete (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53815: posix-timers: Prevent RT livelock in itimer_delete() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53812: media: mediatek: vcodec: fix decoder disable pm crash (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53811: RDMA/irdma: Cap MSIX used to online CPUs + 1 (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53817: crypto: lib/mpi - avoid null pointer deref in mpi_cmp_ui() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53814: PCI: Fix dropping valid root bus resources with .end = zero (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53818: ARM: zynq: Fix refcount leak in zynq_early_slcr_init (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53816: drm/amdkfd: fix potential kgd_mem UAFs (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50654: bpf: Fix panic due to wrong pageattr of im->image (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50653: mmc: atmel-mci: fix return value check of mmc_add_host() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53819: amdgpu: validate offset_in_bo of drm_amdgpu_gem_va (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50655: ppp: associate skb with a device at tx (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50656: nfc: pn533: Clear nfc_target before being used (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53777: erofs: kill hooked chains to avoid loops on deduplicated compressed images (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50648: ftrace: Fix recursive locking direct_mutex in ftrace_modify_direct_caller (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53820: loop: loop_set_status_from_info() check before assignment (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50658: cpufreq: qcom: fix memory leak in error path (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50667: drm/vmwgfx: Fix memory leak in vmw_mksstat_add_ioctl() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50669: misc: ocxl: fix possible name leak in ocxl_file_register_afu() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50670: mmc: omap_hsmmc: fix return value check of mmc_add_host() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50671: RDMA/rxe: Fix "kernel NULL pointer dereference" error (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50672: mailbox: zynq-ipi: fix error handling while device_register() fails (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50673: ext4: fix use-after-free in ext4_orphan_cleanup (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50674: riscv: vdso: fix NULL deference in vdso_join_timens() when vfork (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50675: arm64: mte: Avoid setting PG_mte_tagged if no tags cleared or restored (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50676: net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50657: riscv: mm: add missing memcpy in kasan_init (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50659: hwrng: geode - Fix PCI device refcount leak (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50668: ext4: fix deadlock due to mbcache entry corruption (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50678: wifi: brcmfmac: fix invalid address access when enabling SCAN log level (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50679: i40e: Fix DMA mappings leak (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53821: ip6_vti: fix slab-use-after-free in decode_session6 (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50677: ipmi: fix use after free in _ipmi_destroy_user() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53822: wifi: ath11k: Ignore frags from uninitialized peer in dp. (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53823: block/rq_qos: protect rq_qos apis with a new lock (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50662: RDMA/hns: fix memory leak in hns_roce_alloc_mr() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50660: wifi: ipw2200: fix memory leak in ipw_wdev_init() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50661: seccomp: Move copy_seccomp() to no failure path. (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53834: iio: adc: ina2xx: avoid NULL pointer dereference on OF device match (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50664: media: dvb-frontends: fix leak of memory fw (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50665: wifi: ath11k: fix failed to find the peer with peer_id 0 when disconnected (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50666: RDMA/siw: Fix QP destroy to wait for all references dropped. (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53825: kcm: Fix error handling for SOCK_DGRAM in kcm_sendmsg(). (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53835: ext4: don't clear SB_RDONLY when remounting r/w until quota is re-enabled (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
61 more messages

December 12 (1 message)

CVE-2025-40345: usb: storage: sddr55: Reject out-of-bound new_pba (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

December 16 (160 messages)

CVE-2025-40353: arm64: mte: Do not warn if the page is already tagged in copy_highpage() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40354: drm/amd/display: increase max link count and fix link->enc NULL pointer access (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40357: net/smc: fix general protection fault in __smc_diag_dump (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40351: hfsplus: fix KMSAN uninit-value issue in hfsplus_delete_cat() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40346: arch_topology: Fix incorrect error check in topology_parse_cpu_capacity() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40356: spi: rockchip-sfc: Fix DMA-API usage (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40349: hfs: validate record offset in hfsplus_bmap_alloc (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40347: net: enetc: fix the deadlock of enetc_mdio_lock (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40350: net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40352: platform/mellanox: mlxbf-pmc: add sysfs_attr_init() to count_clock init (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40358: riscv: stacktrace: Disable KASAN checks for non-current tasks (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40359: perf/x86/intel: Fix KASAN global-out-of-bounds warning (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40361: fs: ext4: change GFP_KERNEL to GFP_NOFS to avoid deadlock (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40362: ceph: fix multifs mds auth caps issue (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40360: drm/sysfb: Do not dereference NULL pointer in plane reset (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68213: idpf: fix possible vport_config NULL pointer deref in remove (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68214: timers: Fix NULL function pointer race in timer_shutdown_sync() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68222: pinctrl: s32cc: fix uninitialized memory in s32_pinctrl_desc (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68225: lib/test_kho: check if KHO is enabled (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68226: smb: client: fix incomplete backport in cfids_invalidation_worker() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68227: mptcp: Fix proto fallback detection with BPF (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68228: drm/plane: Fix create_in_format_blob() return value (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68212: fs: Fix uninitialized 'offp' in statmount_string() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68223: drm/radeon: delete radeon_fence_process in is_signaled, no deadlock (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68224: scsi: core: Fix a regression triggered by scsi_host_busy() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68201: drm/amdgpu: remove two invalid BUG_ON()s (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68178: blk-cgroup: fix possible deadlock while configuring policy (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68175: media: nxp: imx8-isi: Fix streaming cleanup on release (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68172: crypto: aspeed - fix double free caused by devm (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68177: cpufreq/longhaul: handle NULL policy in longhaul_exit (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68199: codetag: debug: handle existing CODETAG_EMPTY in mark_objexts_empty for slabobj_ext (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68168: jfs: fix uninitialized waitqueue in transaction manager (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68194: media: imon: make send_packet() more robust (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68182: wifi: iwlwifi: fix potential use after free in iwl_mld_remove_link() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68187: net: mdio: Check regmap pointer returned by device_node_to_regmap() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68197: bnxt_en: Fix null pointer dereference in bnxt_bs_trace_check_wrap() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68190: drm/amdgpu/atom: Check kcalloc() for WS buffer in amdgpu_atom_execute_table_locked() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68191: udp_tunnel: use netdev_warn() instead of netdev_WARN() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68211: ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68167: gpiolib: fix invalid pointer access in debugfs (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68179: s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68195: x86/CPU/AMD: Add missing terminator for zen5_rdseed_microcode (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68207: drm/xe/guc: Synchronize Dead CT worker with unbind (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68203: drm/amdgpu: fix lock warning in amdgpu_userq_fence_driver_process (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68198: crash: fix crashkernel resource shrink (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68204: pmdomain: arm: scmi: Fix genpd leak on provider registration failure (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68173: ftrace: Fix softlockup in ftrace_module_enable (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68196: drm/amd/display: Cache streams targeting link when performing LT automation (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68200: bpf: Add bpf_prog_run_data_pointers() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68202: sched_ext: Fix unsafe locking in the scx_dump_state() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68209: mlx5: Fix default values in create CQ (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68208: bpf: account for current allocated stack depth in widen_imprecise_scalars() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68210: erofs: avoid infinite loop due to incomplete zstd-compressed data (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68233: drm/tegra: Add call to put_pid() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68232: veth: more robust handing of race to avoid txq getting stuck (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68234: io_uring/cmd_net: fix wrong argument types for skb_queue_splice() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68240: nilfs2: avoid having an active sc_timer before freeing sci (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68242: NFS: Fix LTP test failures when timestamps are delegated (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68244: drm/i915: Avoid lock inversion when pinning to GGTT on CHV/BXT+VTD (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68246: ksmbd: close accepted socket when per-IP limit rejects connection (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68237: mtdchar: fix integer overflow in read/write ioctls (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68236: scsi: ufs: ufs-qcom: Fix UFS OCP issue during UFS power down (PC=3) (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40348: slab: Avoid race on slab->obj_exts in alloc_slab_obj_exts (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68241: ipv4: route: Prevent rt_bind_exception() from rebinding stale fnhe (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68239: binfmt_misc: restore write access before closing files opened by open_exec() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68243: NFS: Check the TLS certificate fields in nfs_match_client() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68245: net: netpoll: fix incorrect refcount handling causing incorrect cleanup (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68247: posix-timers: Plug potential memory leak in do_timer_create() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68231: mm/mempool: fix poisoning order>0 pages with HIGHMEM (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68215: ice: fix PTP cleanup on driver removal in error path (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68229: scsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68250: hung_task: fix warnings caused by unaligned lock pointers (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68251: erofs: avoid infinite loops due to corrupted subpage compact indexes (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68235: nouveau/firmware: Add missing kfree() of nvkm_falcon_fw::boot (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68253: mm: don't spin in add_stack_record when gfp flags don't allow (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68238: mtd: rawnand: cadence: fix DMA device NULL pointer dereference (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-40363: net: ipv6: fix field-spanning memcpy warning in AH output (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68252: misc: fastrpc: Fix dma_buf object leak in fastrpc_map_lookup (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68186: ring-buffer: Do not warn in ring_buffer_map_get_reader() when reader catches up (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68189: drm/msm: Fix GEM free for imported dma-bufs (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68248: vmw_balloon: indicate success when effectively deflating during migration (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68249: most: usb: hdm_probe: Fix calling put_device() before device initialization (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68184: drm/mediatek: Disable AFBC support on Mediatek DRM driver (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68176: PCI: cadence: Check for the existence of cdns_pcie::ops before using it (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68185: nfs4_setup_readdir(): insufficient locking for ->d_parent->d_inode dereferencing (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68169: netpoll: Fix deadlock in memory allocation under spinlock (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68174: amd/amdkfd: enhance kfd process check in switch partition (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68193: drm/xe/guc: Add devm release action to safely tear down CT (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68171: x86/fpu: Ensure XFD state on signal delivery (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68181: drm/radeon: Remove calls to drm_put_dev() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68183: ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68180: drm/amd/display: Fix NULL deref in debugfs odm_combine_segments (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68254: staging: rtl8723bs: fix out-of-bounds read in OnBeacon ESR IE parsing (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68220: net: ethernet: ti: netcp: Standardize knav_dma_open_channel to return NULL on error (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68218: nvme-multipath: fix lockdep WARN due to partition scan work (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68188: tcp: use dst_dev_rcu() in tcp_fastopen_active_disable_ofo_check() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68230: drm/amdgpu: fix gpu page fault after hibernation on PF passthrough (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68256: staging: rtl8723bs: fix out-of-bounds read in rtw_get_ie() parser (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68170: drm/radeon: Do not kfree() devres managed rdev (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
61 more messages

December 18 (3 messages)

CVE-2025-68324: scsi: imm: Fix use-after-free bug caused by unfinished delayed work (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68323: usb: typec: ucsi: fix use-after-free caused by uec->work (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68325: net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

December 22 (18 messages)

CVE-2025-68326: drm/xe/guc: Fix stack_depot usage (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68328: firmware: stratix10-svc: fix bug in saving controller data (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68329: tracing: Fix WARN_ON in tracing_buffers_mmap_close for split VMAs (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68330: iio: accel: bmc150: Fix irq assumption regression (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68331: usb: uas: fix urb unmapping issue when the uas device is remove during ongoing data transfer (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68327: usb: renesas_usbhs: Fix synchronous external abort on unbind (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68326: drm/xe/guc: Fix stack_depot usage (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68337: jbd2: avoid bug_on in jbd2_journal_get_create_access() when file system corrupted (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68330: iio: accel: bmc150: Fix irq assumption regression (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68331: usb: uas: fix urb unmapping issue when the uas device is remove during ongoing data transfer (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68333: sched_ext: Fix possible deadlock in the deferred_irq_workfn() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68334: platform/x86/amd/pmc: Add support for Van Gogh SoC (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68335: comedi: pcl818: fix null-ptr-deref in pcl818_ai_cancel() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68327: usb: renesas_usbhs: Fix synchronous external abort on unbind (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68336: locking/spinlock/debug: Fix data-race in do_raw_write_lock (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68328: firmware: stratix10-svc: fix bug in saving controller data (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68329: tracing: Fix WARN_ON in tracing_buffers_mmap_close for split VMAs (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68332: comedi: c6xdigio: Fix invalid PNP driver unregistration (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

December 23 (7 messages)

REJECTED: CVE-2022-49730: scsi: lpfc: Resolve NULL ptr dereference after an ELS LOGO is aborted (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68339: atm/fore200e: Fix possible data race in fore200e_open() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68338: net: dsa: microchip: Don't free uninitialized ksz_irq (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68341: veth: reduce XDP no_direct return section to fix race (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68340: team: Move team device type change at the end of team_port_add (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68342: can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing data (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68343: can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing header (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

December 24 (328 messages)

CVE-2025-68345: ALSA: hda: cs35l41: Fix NULL pointer dereference in cs35l41_hda_read_acpi() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68344: ALSA: wavefront: Fix integer overflow in sample size validation (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68354: regulator: core: Protect regulator_supply_alias_list with regulator_list_mutex (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68356: gfs2: Prevent recursive memory reclaim (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68357: iomap: allocate s_dio_done_wq for async reads as well (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68358: btrfs: fix racy bitfield write in btrfs_clear_space_info_full() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68360: wifi: mt76: wed: use proper wed reference in mt76 wed driver callabacks (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68361: erofs: limit the level of fs stacking for file-backed mounts (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68366: nbd: defer config unlock in nbd_genl_connect (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68368: md: init bioset in mddev_init (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68371: scsi: smartpqi: Fix device resources accessed after device removal (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68347: ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68370: coresight: tmc: add the handle of the event to the path (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68369: ntfs3: init run lock for extend inode (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68355: bpf: Fix exclusive map memory leak (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68348: block: fix memory leak in __blkdev_issue_zero_pages (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68349: NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68359: btrfs: fix double free of qgroup record after failure to add delayed ref head (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68351: exfat: fix refcount leak in exfat_find (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68352: spi: ch341: fix out-of-bounds memory access in ch341_transfer_one (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68726: crypto: aead - Fix reqsize handling (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68727: ntfs3: Fix uninit buffer allocated by __getname() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68728: ntfs3: fix uninit memory after failed mi_read in mi_format_new (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68729: wifi: ath12k: Fix MSDU buffer types handling in RX error path (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68733: smack: fix bug: unprivileged task can create labels (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68730: accel/ivpu: Fix page fault in ivpu_bo_unbind_all_bos_from_context() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68731: accel/amdxdna: Fix an integer overflow in aie2_query_ctx_status_array() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68732: gpu: host1x: Fix race in syncpt alloc/free (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68375: perf/x86: Fix NULL event access and potential PEBS record loss (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68376: coresight: ETR: Fix ETR buffer use-after-free issue (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68377: ns: initialize ns_list_node for initial namespaces (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68378: bpf: Fix stackmap overflow check in __bpf_get_stackid() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68725: bpf: Do not let BPF test infra emit invalid GSO types to stack (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68362: wifi: rtl818x: rtl8187: Fix potential buffer underflow in rtl8187_rx_cb() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68373: md: avoid repeated calls to del_gendisk (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68379: RDMA/rxe: Fix null deref on srq->rq.queue after resize failure (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68380: wifi: ath11k: fix peer HE MCS assignment (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68363: bpf: Check skb->transport_header is set in bpf_skb_check_mtu (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68346: ALSA: dice: fix buffer overflow in detect_stream_formats() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68364: ocfs2: relax BUG() to ocfs2_error() in __ocfs2_move_extent() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68365: fs/ntfs3: Initialize allocated memory before use (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68367: macintosh/mac_hid: fix race condition in mac_hid_toggle_emumouse (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68372: nbd: defer config put in recv_work (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68350: exfat: fix divide-by-zero in exfat_allocate_bitmap (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68353: net: vxlan: prevent NULL deref in vxlan_xmit_one (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68374: md: fix rcu protection in md_wakeup_thread (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68724: crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50698: ASoC: da7219: Fix an error handling path in da7219_register_dai_clks() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50707: virtio-crypto: fix memory leak in virtio_crypto_alg_skcipher_close_session() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50708: HSI: ssi_protocol: fix potential resource leak in ssip_pn_open() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50710: ice: set tx_tstamps when creating new Tx rings via ethtool (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50711: net: ethernet: mtk_eth_soc: fix possible memory leak in mtk_probe() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50697: mrp: introduce active flags to prevent UAF when applicant uninit (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53867: ceph: fix potential use-after-free bug when trimming caps (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50700: wifi: ath10k: Delay the unmapping of the buffer (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50709: wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50701: wifi: mt76: mt7921s: fix slab-out-of-bounds access in sdio host (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50702: vdpa_sim: fix possible memory leak in vdpasim_net_init() and vdpasim_blk_init() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50699: selinux: enable use of both GFP_KERNEL and GFP_ATOMIC in convert_context() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50703: soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50704: USB: gadget: Fix use-after-free during usb config switch (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50705: io_uring/rw: defer fsnotify calls to task context (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50706: net/ieee802154: don't warn zero-sized raw_sendmsg() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53996: x86/sev: Make enc_dec_hypercall() accept a size instead of npages (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53987: ping: Fix potentail NULL deref for /proc/net/icmp. (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53997: thermal: of: fix double-free on unregistration (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53998: hwrng: virtio - Fix race on data_avail and actual data (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53999: net/mlx5e: TC, Fix internal port memory leak (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-54000: net: hns3: fix deadlock issue when externel_lb and reset are executed together (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-54001: staging: r8712: Fix memory leak in _r8712_init_xmit_priv() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-54002: btrfs: fix assertion of exclop condition when starting balance (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-54003: RDMA/core: Fix GID entry ref leak when create_ah fails (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-54004: udplite: Fix NULL pointer dereference in __sk_mem_raise_allocated(). (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-54005: binder: fix memory leak in binder_init() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53988: fs/ntfs3: Fix slab-out-of-bounds read in hdr_delete_de() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-54006: af_unix: Fix data-race around unix_tot_inflight. (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-54007: vmci_host: fix a race condition in vmci_host_poll() causing GPF (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-54008: virtio_vdpa: build affinity masks conditionally (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-54009: i2c: cadence: cdns_i2c_master_xfer(): Fix runtime PM leak on error path (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-54013: interconnect: Fix locking for runpm vs reclaim (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-54010: ACPICA: ACPICA: check null return of ACPI_ALLOCATE_ZEROED in acpi_db_display_objects (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-54014: scsi: qla2xxx: Check valid rport returned by fc_bsg_to_rport() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-54011: scsi: mpi3mr: Fix an issue found by KASAN (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-54012: net: fix stack overflow when LRO is disabled for virtual interfaces (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53989: arm64: mm: fix VA-range sanity check (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-54016: wifi: ath12k: Fix memory leak in rx_desc and tx_desc (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-54015: net/mlx5: Devcom, fix error flow in mlx5_devcom_register_device (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-54018: drm/msm/hdmi: Add missing check for alloc_ordered_workqueue (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-54017: powerpc/pseries: fix possible memory leak in ibmebus_bus_init() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53991: drm/msm/dpu: Disallow unallocated resources to be returned (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-54019: sched/psi: use kernfs polling functions for PSI trigger polling (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53992: wifi: cfg80211: ocb: don't leave if not joined (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-54020: dmaengine: sf-pdma: pdma_desc memory leak fix (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53990: SMB3: Add missing locks to protect deferred close file list (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53993: PCI/DOE: Fix memory leak with CONFIG_DEBUG_OBJECTS=y (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53994: ionic: remove WARN_ON to prevent panic_on_warn (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-54022: ALSA: usb-audio: Fix potential memory leaks at error path for UMP open (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53995: net: ipv4: fix one memleak in __inet_del_ifa() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-53986: mips: bmips: BCM6358: disable RAC flush for TP1 (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
229 more messages

December 29 (7 messages)

REJECTED: CVE-2022-48843: drm/vrr: Set VRR capable prop only if it is attached to connector (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2023-54061: x86: fix clear_user_rep_good() exception handling annotation (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2023-53749: x86: fix clear_user_rep_good() exception handling annotation (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2024-43895: drm/amd/display: Skip Recompute DSC Params if no Stream on Link (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2023-54082: af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2023-53469: af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2023-54161: af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

December 30 (255 messages)

CVE-2022-50785: fsi: occ: Prevent use after free (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50784: wifi: iwlwifi: mei: fix potential NULL-ptr deref after clone (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50786: media: s5p-mfc: Clear workbit to handle error condition (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-54162: ksmbd: fix possible memory leak in smb2_lock() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50809: xhci: dbc: Fix memory leak in xhci_alloc_dbc() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50810: rapidio: devices: fix missing put_device in mport_cdev_open (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50819: udmabuf: Set ubuf->sg = NULL if the creation of sg table fails (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50820: perf/arm_dmc620: Fix hotplug callback leak in dmc620_pmu_init() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50821: SUNRPC: Don't leak netobj memory when gss_read_proxy_verf() fails (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50822: RDMA/restrack: Release MR restrack when delete (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50823: clk: tegra: Fix refcount leak in tegra114_clock_init (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50827: scsi: lpfc: Fix memory leak in lpfc_create_port() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50824: tpm: tpm_tis: Add the missed acpi_put_table() to fix memory leak (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50825: usb: typec: wusb3801: fix fwnode refcount leak in wusb3801_probe() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50826: ipu3-imgu: Fix NULL pointer dereference in imgu_subdev_set_selection() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-54164: Bluetooth: ISO: fix iso_conn related locking and validity issues (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50811: erofs: fix missing unmap if z_erofs_get_extent_compressedlen() fails (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-54165: zsmalloc: move LRU update from zs_map_object() to zs_malloc() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-54166: igc: Fix Kernel Panic during ndo_tx_timeout callback (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-54167: m68k: mm: Move initrd phys_to_virt handling after paging_init() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-54170: keys: Fix linking a duplicate key to a keyring's assoc_array (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-54168: RDMA/mlx4: Prevent shift wrapping in set_user_sq_size() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-54171: tracing: Fix memory leak of iter->temp when reading trace_pipe (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-54169: net/mlx5e: fix memory leak in mlx5e_ptp_open (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-54172: x86/hyperv: Disable IBT when hypercall page lacks ENDBR instruction (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50813: drivers: mcb: fix resource leak in mcb_probe() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50815: ext2: Add sanity checks for group and filesystem size (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50812: security: Restrict CONFIG_ZERO_CALL_USED_REGS to gcc or clang > 15.0.6 (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50816: ipv6: ensure sane device mtu in tunnels (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50814: crypto: hisilicon/zip - fix mismatch in get/set sgl_sge_nr (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-54185: btrfs: remove BUG_ON()'s in add_new_free_space() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50817: net: hsr: avoid possible NULL deref in skb_clone() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50818: scsi: pm8001: Fix running_req for internal abort commands (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-54187: f2fs: fix potential corruption when moving a directory (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-54174: vfio: Fix NULL pointer dereference caused by uninitialized group->iommufd (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-54183: media: v4l2-core: Fix a potential resource leak in v4l2_fwnode_parse_link() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-54184: scsi: target: iscsit: Free cmds before session free (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-54190: leds: led-core: Fix refcount leak in of_led_get() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-54186: usb: typec: altmodes/displayport: fix pin_assignment_show (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-54175: i2c: xiic: xiic_xfer(): Fix runtime PM leak on error path (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-54188: dmaengine: apple-admac: Fix 'current_tx' not getting freed (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-54194: exfat: use kvmalloc_array/kvfree instead of kmalloc_array/kfree (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-54189: pstore/ram: Add check for kstrdup (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-54196: fs/ntfs3: Fix NULL pointer dereference in 'ni_write_inode' (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-54195: rxrpc: Fix timeout of a call that hasn't yet been granted a channel (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-54191: wifi: mt76: mt7996: fix memory leak in mt7996_mcu_exit (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-54192: f2fs: fix null pointer panic in tracepoint in __replace_atomic_write_block (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-54193: net/sched: cls_api: remove block_cb from driver_list before freeing (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-54197: Revert "Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work" (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-54176: mptcp: stricter state check in mptcp_worker (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-54203: ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-54178: of: unittest: fix null pointer dereferencing in of_unittest_find_node_by_name() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-54200: netfilter: nf_tables: always release netdev hooks from notifier (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-54201: RDMA/efa: Fix wrong resources deallocation order (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-54202: drm/i915: fix race condition UAF in i915_perf_add_config_ioctl (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-54198: tty: fix out-of-bounds access in tty_driver_lookup_tty() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-54199: drm/msm/adreno: Fix null ptr access in adreno_gpu_cleanup() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-54177: quota: fix warning in dqgrab() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-54179: scsi: qla2xxx: Array index may go out of bound (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-54180: btrfs: handle case when repair happens with dev-replace (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-54181: bpf: Fix issue in verifying allow_ptr_leaks (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-54182: f2fs: fix to check readonly condition correctly (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-54173: bpf: Disable preemption in bpf_event_output (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50829: wifi: ath9k: hif_usb: Fix use-after-free in ath9k_hif_usb_reg_in_cb() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50828: clk: zynqmp: Fix stack-out-of-bounds in strncpy` (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50838: net: stream: purge sk_error_queue in sk_stream_kill_queues() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50839: jbd2: fix potential buffer head reference count leak (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50840: scsi: snic: Fix possible UAF in snic_tgt_create() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50841: fs/ntfs3: Add overflow check for attribute size (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50842: drm/virtio: Check whether transferred 2D BO is shmem (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50843: dm clone: Fix UAF in clone_dtr() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50844: drm/amdgpu: Fix type of second parameter in odn_edit_dpm_table() callback (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50845: ext4: fix inode leak in ext4_xattr_inode_create() on an error path (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50846: mmc: via-sdmmc: fix return value check of mmc_add_host() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50830: auxdisplay: hd44780: Fix potential memory leak in hd44780_remove() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50834: nfc: Fix potential resource leaks (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50831: wifi: mac80211: fix MBSSID parsing use-after-free (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50832: wifi: wilc1000: fix potential memory leak in wilc_mac_xmit() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50833: Bluetooth: use hdev->workqueue when queuing hdev->{cmd,ncmd}_timer works (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50835: jbd2: add miss release buffer head in fc_do_one_pass() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50837: net: dsa: tag_8021q: avoid leaking ctx on dsa_tag_8021q_register() error path (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-50836: remoteproc: sysmon: fix memory leak in qcom_add_sysmon_subdev() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-54204: mmc: sunplus: fix return value check of mmc_add_host() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-54213: USB: sisusbvga: Add endpoint checks (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-54215: virtio-vdpa: Fix cpumask memory leak in virtio_vdpa_find_vqs() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-54214: Bluetooth: L2CAP: Fix potential user-after-free (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-54216: net/mlx5e: TC, Fix using eswitch mapping in nic mode (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-54217: Revert "drm/msm: Add missing check and destroy for alloc_ordered_workqueue" (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-54218: net: Fix load-tearing on sk->sk_stamp in sock_recv_cmsgs(). (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-54219: Revert "IB/isert: Fix incorrect release of isert connection" (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-54220: serial: 8250: Fix oops for port->pm on uart_change_pm() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-54221: clk: imx93: fix memory leak and missing unwind goto in imx93_clocks_probe (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-54225: net: ipa: only reset hashed tables when supported (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-54222: hte: tegra-194: Fix off by one in tegra_hte_map_to_line_id() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-54205: pinctrl: stm32: Fix refcount leak in stm32_pctrl_get_irq_domain (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-54223: net/mlx5e: xsk: Fix invalid buffer access for legacy rq (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-54224: btrfs: fix lockdep splat and potential deadlock after failure running delayed items (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-54226: af_unix: Fix data races around sk->sk_shutdown. (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-54227: blk-mq: fix tags leak when shrink nr_hw_queues (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
156 more messages

1097 messages

Powered by blists - more mailing lists