linux-cve-announce mailing list - 2026/01

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

linux-cve-announce mailing list - 2026/01

Mon	Tue	Wed	Thu	Fri	Sat	Sun
			¹	² 4	³	⁴
⁵ 23	⁶ 1	⁷	⁸	⁹ 1	¹⁰	¹¹
¹²	¹³ 95	¹⁴ 43	¹⁵	¹⁶	¹⁷	¹⁸
¹⁹	²⁰	²¹ 2	²²	²³ 35	²⁴	²⁵ 20
²⁶	²⁷	²⁸ 1	²⁹	³⁰	³¹ 38

Messages by day:

January 2 (4 messages)

REJECTED: CVE-2025-68224: scsi: core: Fix a regression triggered by scsi_host_busy() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2025-38073: block: fix race between set_blocksize and read paths (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2025-37942: HID: pidff: Make sure to fetch pool before checking SIMULTANEOUS_MAX (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2025-68203: drm/amdgpu: fix lock warning in amdgpu_userq_fence_driver_process (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

January 5 (23 messages)

CVE-2025-68761: hfs: fix potential use after free in hfs_correct_next_unused_CNID() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68752: iavf: Implement settime64 with -EOPNOTSUPP (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68751: s390/fpu: Fix false-positive kmsan report in fpu_vstl() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68762: net: netpoll: initialize work queue before error checks (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68763: crypto: starfive - Correctly handle return of sg_nents_for_len (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68753: ALSA: firewire-motu: add bounds check in put_user loop for DSP events (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68754: rtc: amlogic-a4: fix double free caused by devm (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68755: staging: most: remove broken i2c driver (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68756: block: Use RCU in blk_mq_[un]quiesce_tagset() instead of set->tag_list_lock (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68758: backlight: led-bl: Add devlink to supplier LEDs (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68759: wifi: rtl818x: Fix potential memory leaks in rtl8180_init_rx_ring() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68760: iommu/amd: Fix potential out-of-bounds read in iommu_mmio_show (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68757: drm/vgem-fence: Fix potential deadlock on release (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68765: mt76: mt7615: Fix memory leak in mt7615_mcu_wtbl_sta_add() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68766: irqchip/mchp-eic: Fix error code in mchp_eic_domain_alloc() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68764: NFS: Automounted filesystems should inherit ro,noexec,nodev,sync flags (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2023-53779: mfd: dln2: Fix memory leak in dln2_probe() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2023-54029: wifi: iwlwifi: fix iwl_mvm_max_amsdu_size() for MLO (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2023-53183: btrfs: exit gracefully if reloc roots don't match (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2024-36923: fs/9p: fix uninitialized values during inode evict (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2024-56781: powerpc/prom_init: Fixup missing powermac #size-cells (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2024-47672: wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2024-44972: btrfs: do not clear page dirty inside extent_write_locked_range() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

January 6 (1 message)

Re: CVE-2025-68211: ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Greg KH <gregkh@...uxfoundation.org>)

January 9 (1 message)

REJECTED: CVE-2025-40361: fs: ext4: change GFP_KERNEL to GFP_NOFS to avoid deadlock (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

January 13 (95 messages)

CVE-2025-68768: inet: frags: flush pending skbs in fqdir_pre_exit() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68813: ipvs: fix ipv4 null-ptr-deref in route error path (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68767: hfsplus: Verify inode mode when loading from disk (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68814: io_uring: fix filename leak in __io_openat_prep() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68778: btrfs: don't log conflicting inode if it's a dir moved in the current transaction (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68780: sched/deadline: only set free_cpus for online runqueues (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68769: f2fs: fix return value of f2fs_recover_fsync_data() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68770: bnxt_en: Fix XDP_TX path (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68773: spi: fsl-cpm: Check length parity before switching to 16 bit mode (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68815: net/sched: ets: Remove drr class from the active list if it changes to strict (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68816: net/mlx5: fw_tracer, Validate format string parameters (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68775: net/handshake: duplicate handshake cancellations leak socket (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68786: ksmbd: skip lock-range check on equal size to avoid size==0 underflow (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68796: f2fs: fix to avoid updating zero-sized extent in extent cache (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68797: char: applicom: fix NULL pointer dereference in ac_ioctl (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68810: KVM: Disallow toggling KVM_MEM_GUEST_MEMFD on an existing memslot (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68798: perf/x86/amd: Check event before enable to avoid GPF (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68811: svcrdma: use rc_pageoff for memcpy byte offset (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68804: platform/chrome: cros_ec_ishtp: Fix UAF after unbinding driver (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68817: ksmbd: fix use-after-free in ksmbd_tree_connect_put under concurrency (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68818: scsi: Revert "scsi: qla2xxx: Perform lockless command completion in abort path" (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68819: media: dvb-usb: dtv5100: fix out-of-bounds in dtv5100_i2c_msg() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68789: hwmon: (ibmpex) fix use-after-free in high/low store (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68790: net/mlx5: Fix double unregister of HCA_PORTS component (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68791: fuse: missing copy_finish in fuse-over-io-uring argument copies (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68788: fsnotify: do not generate ACCESS/MODIFY events on child for special files (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68793: drm/amdgpu: fix a job->pasid access race in gpu recovery (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68785: net: openvswitch: fix middle attribute validation in push_nsh() action (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68794: iomap: adjust read range correctly for non-block-aligned positions (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68779: net/mlx5e: Avoid unregistering PSP twice (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68822: Input: alps - fix use-after-free bugs caused by dev3_register_work (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68821: fuse: fix readahead reclaim deadlock (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68777: Input: ti_am335x_tsc - fix off-by-one error in wire_order validation (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68823: ublk: fix deadlock when reading partition table (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68820: ext4: xattr: fix null pointer deref in ext4_raw_inode() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68781: usb: phy: fsl-usb: Fix use-after-free in delayed work during device removal (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68782: scsi: target: Reset t_task_cdb pointer in error case (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-71065: f2fs: fix to avoid potential deadlock (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68771: ocfs2: fix kernel BUG in ocfs2_find_victim_chain (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-71074: functionfs: fix the open/removal races (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-71075: scsi: aic94xx: fix use-after-free in device removal path (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-71076: drm/xe/oa: Limit num_syncs to prevent oversized allocations (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-71077: tpm: Cap the number of PCR banks (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-71066: net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-71064: net: hns3: using the num_tqps in the vf driver to apply for resources (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68800: mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68795: ethtool: Avoid overflowing userspace buffer on stats query (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68799: caif: fix integer underflow in cffrml_receive() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68776: net/hsr: fix NULL pointer dereference in prp_get_untagged_frame() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68787: netrom: Fix memory leak in nr_sendmsg() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-71078: powerpc/64s/slb: Fix SLB multihit issue during SLB preload (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68806: ksmbd: fix buffer validation by including null terminator size in EA length (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68805: fuse: fix io-uring list corruption for terminated non-committed requests (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-71071: iommu/mediatek: fix use-after-free on probe deferral (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68809: ksmbd: vfs: fix race on m_flags in vfs_cache (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-71072: shmem: fix recovery on rename failures (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-71067: ntfs: set dummy blocksize to read boot_block when mounting (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-71069: f2fs: invalidate dentry cache on failed whiteout creation (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-71070: ublk: clean up user copy references on ublk server exit (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-71092: RDMA/bnxt_re: Fix OOB write in bnxt_re_copy_err_stats() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-71093: e1000: fix OOB in e1000_tbi_should_accept() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-71087: iavf: fix off-by-one issues in iavf_config_rss_reg() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-71101: platform/x86: hp-bioscfg: Fix out-of-bounds array access in ACPI package parsing (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-71086: net: rose: fix invalid array index in rose_kill_by_device() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68783: ALSA: usb-mixer: us16x08: validate meter packet indices (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68784: xfs: fix a UAF problem in xattr repair (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-71080: ipv6: fix a BUG in rt6_get_pcpu_route() under PREEMPT_RT (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68772: f2fs: fix to avoid updating compression context during writeback (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-71090: nfsd: fix nfsd_file reference leak in nfsd4_add_rdaccess_to_wrdeleg() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-71091: team: fix check for port enabled in team_queue_override_port_prio_changed() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-71095: net: stmmac: fix the crash issue for zero copy XDP_TX action (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-71097: ipv4: Fix reference count leak when using error routes with nexthop objects (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-71098: ip6_gre: make ip6gre_header() robust (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-71081: ASoC: stm32: sai: fix OF node leak on probe (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68774: hfsplus: fix missing hfs_bnode_get() in __hfs_bnode_create (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-71100: wifi: rtlwifi: 8192cu: fix tid out of range in rtl92cu_tx_fill_desc() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-71082: Bluetooth: btusb: revert use of devm_kzalloc in btusb (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-71084: RDMA/cm: Fix leaking the multicast GID table reference (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-71085: ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68801: mlxsw: spectrum_router: Fix neighbour use-after-free (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68802: drm/xe: Limit num_syncs to prevent oversized allocations (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68803: NFSD: NFSv4 file creation neglects setting ACL (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68807: block: fix race between wbt_enable_default and IO submission (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68808: media: vidtv: initialize local pointers upon transfer of memory ownership (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68812: media: iris: Add sanity check for stop streaming (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-68792: tpm2-sessions: Fix out of range indexing in name_size (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-71068: svcrdma: bound check rq_pages index in inline path (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-71073: Input: lkkbd - disable pending work before freeing device (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-71089: iommu: disable SVA when CONFIG_X86 is set (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-71094: net: usb: asix: validate PHY address before use (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-71096: RDMA/core: Check for the presence of LS_NLA_TYPE_DGID correctly (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-71099: drm/xe/oa: Fix potential UAF in xe_oa_add_config_ioctl() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-71083: drm/ttm: Avoid NULL pointer deref for evicted BOs (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-71088: mptcp: fallback earlier on simult connection (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-71079: net: nfc: fix deadlock between nfc_unregister_device and rfkill_fop_write (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

January 14 (43 messages)

CVE-2025-71118: ACPICA: Avoid walking the Namespace if start_node is NULL (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-71120: SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-71121: parisc: Do not reprogram affinitiy on ASP chip (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-71104: KVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV timer (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-71122: iommufd/selftest: Check for overflow in IOMMU_TEST_OP_ADD_RESERVED (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-71123: ext4: fix string copying in parse_apply_sb_mount_options() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-71125: tracing: Do not register unsupported perf events (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-71126: mptcp: avoid deadlock on fallback while reinjecting (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-71103: drm/msm: adreno: fix deferencing ifpc_reglist when not declared (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-71106: fs: PM: Fix reverse check in filesystems_freeze_callback() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-71102: scs: fix a wrong parameter in __scs_magic (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-71115: um: init cpu_tasks[] earlier (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-71116: libceph: make decode_pool() more resilient against corrupted osdmaps (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-71119: powerpc/kexec: Enable SMT before waking offline CPUs (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-71105: f2fs: use global inline_xattr_slab instead of per-sb slab cache (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-71107: f2fs: ensure node page reads complete before f2fs_put_super() finishes (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-71111: hwmon: (w83791d) Convert macros to functions to avoid TOCTOU (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-71129: LoongArch: BPF: Sign extend kfunc call arguments (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-71136: media: adv7842: Avoid possible out-of-bounds array accesses in adv7842_cp_log_status() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-71138: drm/msm/dpu: Add missing NULL pointer check for pingpong interface (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-71139: kernel/kexec: fix IMA when allocation happens in CMA area (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-71141: drm/tilcdc: Fix removal actions in case of failed probe (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-71142: cpuset: fix warning when disabling remote partition (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-71143: clk: samsung: exynos-clkout: Assign .num before accessing .hws (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-71131: crypto: seqiv - Do not use req->iv after crypto_aead_encrypt (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-71134: mm/page_alloc: change all pageblocks migrate type on coalescing (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-71113: crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-71112: net: hns3: add VLAN id validation before using (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-71114: via_wdt: fix critical boot hang due to unnamed resource allocation (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-71117: block: Remove queue freezing from several sysfs store callbacks (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-71124: drm/msm/a6xx: move preempt_prepare_postamble after error check (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-71108: usb: typec: ucsi: Handle incorrect num_connectors capability (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-71109: MIPS: ftrace: Fix memory corruption when kernel is located beyond 32 bits (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-71110: mm/slub: reset KASAN tag in defer_free() before accessing freed memory (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-71128: erspan: Initialize options_len before referencing options. (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-71127: wifi: mac80211: Discard Beacon frames to non-broadcast address (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-71130: drm/i915/gem: Zero-initialize the eb.vma array in i915_gem_do_execbuffer (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-71132: smc91x: fix broken irq-context in PREEMPT_RT (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-71133: RDMA/irdma: avoid invalid read in irdma_net_event (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-71135: md/raid5: fix possible null-pointer dereferences in raid5_store_group_thread_cnt() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-71137: octeontx2-pf: fix "UBSAN: shift-out-of-bounds error" (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-71144: mptcp: ensure context reset on disconnect() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-71140: media: mediatek: vcodec: Use spinlock for context list protection lock (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

January 21 (2 messages)

CVE-2026-22976: net/sched: sch_qfq: Fix NULL deref when deactivating inactive aggregate in qfq_reset (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2026-22977: net: sock: fix hardened usercopy panic in sock_recv_errqueue (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

January 23 (35 messages)

CVE-2025-71145: usb: phy: isp1301: fix non-OF device reference imbalance (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-71147: KEYS: trusted: Fix a memory leak in tpm2_load_cmd (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-71146: netfilter: nf_conncount: fix leaked ct in error paths (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-71148: net/handshake: restore destructor on submit failure (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-71149: io_uring/poll: correctly handle io_poll_add() return value on update (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-71150: ksmbd: Fix refcount leak when invalid session is found on session lookup (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-71151: cifs: Fix memory and information leak in smb3_reconfigure() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-71153: ksmbd: Fix memory leak in get_file_all_info() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-71156: gve: defer interrupt enabling until NAPI registration (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-71157: RDMA/core: always drop device refcount in ib_del_sub_device_and_put() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-71154: net: usb: rtl8150: fix memory leak on usb_submit_urb() failure (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-71152: net: dsa: properly keep track of conduit reference (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-71155: KVM: s390: Fix gmap_helper_zap_one_page() again (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2026-22984: libceph: prevent potential out-of-bounds reads in handle_auth_done() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-71159: btrfs: fix use-after-free warning in btrfs_get_or_create_delayed_node() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2026-22985: idpf: Fix RSS LUT NULL pointer crash on early ethtool operations (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-71158: gpio: mpsse: ensure worker is torn down (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2026-22987: net/sched: act_api: avoid dereferencing ERR_PTR in tcf_idrinfo_destroy (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2026-22986: gpiolib: fix race condition for gdev->srcu (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2026-22988: arp: do not assume dev_hard_header() does not change skb->head (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-71160: netfilter: nf_tables: avoid chain re-validation if possible (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2026-22989: nfsd: check that server is running in unlock_filesystem (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2026-22994: bpf: Fix reference count leak in bpf_prog_test_run_xdp() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2026-22990: libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2026-22991: libceph: make free_choose_arg_map() resilient to partial allocation (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2026-22992: libceph: return the handler error from mon_handle_auth_done() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2026-22993: idpf: Fix RSS LUT NULL ptr issue after soft reset (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2026-22995: ublk: fix use-after-free in ublk_partition_scan_work (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2026-22983: net: do not write to msg_get_inq in callee (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2026-22982: net: mscc: ocelot: Fix crash when adding interface under a lag (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-71161: dm-verity: disable recursive forward error correction (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2026-22978: wifi: avoid kernel-infoleak from struct iw_point (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2026-22980: nfsd: provide locking for v4_end_grace (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2026-22981: idpf: detach and close netdevs while handling a reset (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2026-22979: net: fix memory leak in skb_segment_list for GRO packets (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

January 25 (20 messages)

CVE-2025-71163: dmaengine: idxd: fix device leaks on compat bind and unbind (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-71162: dmaengine: tegra-adma: Fix use-after-free (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2026-23004: dst: fix races in rt6_uncached_list_del() and rt_del_uncached_list() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2026-23005: x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2026-23006: ASoC: tlv320adcx140: fix null pointer (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2026-23007: block: zero non-PI portion of auto integrity buffer (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2026-23008: drm/vmwgfx: Fix KMS with 3D on HW version 10 (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2026-23009: xhci: sideband: don't dereference freed ring when removing sideband endpoint (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2026-23010: ipv6: Fix use-after-free in inet6_addr_del(). (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2026-23011: ipv4: ip_gre: make ipgre_header() robust (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2026-23012: mm/damon/core: remove call_control in inactive contexts (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2026-23013: net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2026-22996: net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2026-22997: net: can: j1939: j1939_xtp_rx_rts_session_active(): deactivate session upon receiving the second rts (Greg Kroah-Hartman <gregkh@...uxfoundation…)
CVE-2026-22998: nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2026-22999: net/sched: sch_qfq: do not free existing class in qfq_change_class() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2026-23000: net/mlx5e: Fix crash on profile change rollback failure (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2026-23001: macvlan: fix possible UAF in macvlan_forward_source() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2026-23002: lib/buildid: use __kernel_read() for sleepable context (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2026-23003: ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

January 28 (1 message)

CVE-2026-23014: perf: Ensure swevent hrtimer is properly destroyed (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

January 31 (38 messages)

CVE-2025-71181: rust_binder: remove spin_lock() in rust_shrink_free_page() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-71180: counter: interrupt-cnt: Drop IRQF_NO_THREAD flag (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2026-23020: net: 3com: 3c59x: fix possible null dereference in vortex_probe1() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2026-23021: net: usb: pegasus: fix memory leak in update_eth_regs_async() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2026-23022: idpf: fix memory leak in idpf_vc_core_deinit() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2026-23023: idpf: fix memory leak in idpf_vport_rel() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2026-23024: idpf: fix memory leak of flow steer list on rmmod (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-71182: can: j1939: make j1939_session_activate() fail if device is no longer registered (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-71183: btrfs: always detect conflicting inodes when logging inode refs (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-71184: btrfs: fix NULL dereference on root when tracing inode eviction (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2026-23015: gpio: mpsse: fix reference leak in gpio_mpsse_probe() error paths (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2026-23016: inet: frags: drop fraglist conntrack references (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2026-23017: idpf: fix error handling in the init_task on load (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2026-23018: btrfs: release path before initializing extent tree in btrfs_read_locked_inode() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2026-23019: net: marvell: prestera: fix NULL dereference on devlink_alloc() failure (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-71186: dmaengine: stm32: dmamux: fix device leak on route allocation (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-71185: dmaengine: ti: dma-crossbar: fix device leak on am335x route allocation (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2026-23028: LoongArch: KVM: Fix kvm_device leak in kvm_ipi_destroy() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2026-23029: LoongArch: KVM: Fix kvm_device leak in kvm_eiointc_destroy() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2026-23030: phy: rockchip: inno-usb2: Fix a double free bug in rockchip_usb2phy_probe() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2026-23031: can: gs_usb: gs_usb_receive_bulk_callback(): fix URB memory leak (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2026-23032: null_blk: fix kmemleak by releasing references to fault configfs items (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2026-23033: dmaengine: omap-dma: fix dma_pool resource leak in error paths (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2026-23034: drm/amdgpu/userq: Fix fence reference leak on queue teardown v2 (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2026-23035: net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-71187: dmaengine: sh: rz-dmac: fix device leak on probe failure (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-71188: dmaengine: lpc18xx-dmamux: fix device leak on route allocation (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-71189: dmaengine: dw: dmamux: fix OF node leak on route allocation failure (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-71190: dmaengine: bcm-sba-raid: fix device leak on probe (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2025-71191: dmaengine: at_hdmac: fix device leak on of_dma_xlate() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2026-23038: pnfs/flexfiles: Fix memory leak in nfs4_ff_alloc_deviceid_node() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2026-23025: mm/page_alloc: prevent pcp corruption with SMP=n (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2026-23026: dmaengine: qcom: gpi: Fix memory leak in gpi_peripheral_config() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2026-23027: LoongArch: KVM: Fix kvm_device leak in kvm_pch_pic_destroy() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2026-23037: can: etas_es58x: allow partial RX URB allocation to succeed (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2026-23039: drm/gud: fix NULL fb and crtc dereferences on USB disconnect (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2026-23036: btrfs: release path before iget_failed() in btrfs_read_locked_inode() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
REJECTED: CVE-2024-42130: nfc/nci: Add the inconsistency check between the input data length and count (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

263 messages

Powered by blists - more mailing lists