linux-cve-announce mailing list - 2024/05

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [year] [list]

linux-cve-announce mailing list - 2024/05

Mon	Tue	Wed	Thu	Fri	Sat	Sun
		¹ 165	² 1	³ 26	⁴	⁵
⁶	⁷	⁸ 6	⁹	¹⁰ 1	¹¹	¹²
¹³ 6	¹⁴	¹⁵	¹⁶ 2	¹⁷ 153	¹⁸	¹⁹
²⁰	²¹	²²	²³	²⁴	²⁵	²⁶
²⁷	²⁸	²⁹	³⁰	³¹

Messages by day:

May 1 (165 messages)

CVE-2023-52647: media: nxp: imx8-isi: Check whether crossbar pad is non-NULL before access (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52648: drm/vmwgfx: Unmap the surface before resetting it on a plane state (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26938: drm/i915/bios: Tolerate devdata==NULL in intel_bios_encoder_supports_dp_dual_mode() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26940: drm/vmwgfx: Create debugfs ttm_resource_manager entry only if needed (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26939: drm/i915/vma: Fix UAF on destroy against retire race (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26941: drm/dp: Fix divide-by-zero regression on DP MST unplug with nouveau (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26942: net: phy: qcom: at803x: fix kernel panic with at8031_probe (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26943: nouveau/dmem: handle kcalloc() allocation failure (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26944: btrfs: zoned: fix use-after-free in do_zone_finish() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26945: crypto: iaa - Fix nr_cpus < nr_iaa case (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26946: kprobes/x86: Use copy_from_kernel_nofault() to read from unsafe address (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26947: ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26929: scsi: qla2xxx: Fix double free of fcport (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26948: drm/amd/display: Add a dc_state NULL check in dc_state_release (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26949: drm/amdgpu/pm: Fix NULL pointer dereference when get power limit (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26950: wireguard: netlink: access device through ctx instead of peer (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26951: wireguard: netlink: check for dangling peer via is_dead instead of empty list (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26952: ksmbd: fix potencial out-of-bounds when buffer offset is invalid (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26953: net: esp: fix bad handling of pages from page_pool (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26954: ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26955: nilfs2: prevent kernel bug at submit_bh_wbc() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26956: nilfs2: fix failure to detect DAT corruption in btree and direct mappings (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26957: s390/zcrypt: fix reference counting on zcrypt card objects (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26930: scsi: qla2xxx: Fix double free of the ha->vp_map pointer (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26958: nfs: fix UAF in direct writes (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26959: Bluetooth: btnxpuart: Fix btnxpuart_close (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26960: mm: swap: fix race between free_swap_and_cache() and swapoff() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26961: mac802154: fix llsec key resources release in mac802154_llsec_key_del (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26962: dm-raid456, md/raid456: fix a deadlock for dm-raid456 while io concurrent with reshape (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26963: usb: dwc3-am62: fix module unload/reload behavior (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26964: usb: xhci: Add error handling in xhci_map_urb_for_dma (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26931: scsi: qla2xxx: Fix command flush on cable pull (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26932: usb: typec: tcpm: fix double-free issue in tcpm_port_unregister_pd() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26933: USB: core: Fix deadlock in port "disable" sysfs attribute (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26934: USB: core: Fix deadlock in usb_deauthorize_interface() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26935: scsi: core: Fix unremoved procfs host directory regression (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26937: drm/i915/gt: Reset queue_priority_hint on parking (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26966: clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26975: powercap: intel_rapl: Fix a NULL pointer dereference (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26976: KVM: Always flush async #PF workqueue when vCPU is being destroyed (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26977: pci_iounmap(): Fix MMIO mapping leak (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26978: serial: max310x: fix NULL pointer dereference in I2C instantiation (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26979: drm/vmwgfx: Fix possible null pointer derefence with invalid contexts (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26967: clk: qcom: camcc-sc8280xp: fix terminating of frequency table arrays (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26968: clk: qcom: gcc-ipq9574: fix terminating of frequency table arrays (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26969: clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26970: clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26971: clk: qcom: gcc-ipq5018: fix terminating of frequency table arrays (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26972: ubifs: ubifs_symlink: Fix memleak of inode->i_link in error path (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26973: fat: fix uninitialized field in nostale filehandles (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26965: clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26974: crypto: qat - resolve race condition during AER recovery (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26980: ksmbd: fix slab-out-of-bounds in smb2_allocate_rsp_buf (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26936: ksmbd: validate request buffer size in smb2_allocate_rsp_buf() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26989: arm64: hibernate: Fix level3 translation fault in swsusp_save() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26990: KVM: x86/mmu: Write-protect L2 SPTEs in TDP MMU when clearing dirty status (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26991: KVM: x86/mmu: x86: Don't overflow lpage_info when checking attributes (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26992: KVM: x86/pmu: Disable support for adaptive PEBS (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26993: fs: sysfs: Fix reference leak in sysfs_break_active_protection() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26994: speakup: Avoid crash on very long word (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26995: usb: typec: tcpm: Correct the PDO counting in pd_set (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26996: usb: gadget: f_ncm: Fix UAF ncm object at re-bind after usb ep transport error (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26997: usb: dwc2: host: Fix dereference issue in DDMA completion flow. (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26998: serial: core: Clearing the circular buffer before NULLifying it (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26981: nilfs2: fix OOB in nilfs_set_de_type (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26999: serial/pmac_zilog: Remove flawed mitigation for rx irq flood (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27000: serial: mxs-auart: add spinlock around changing cts state (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27001: comedi: vmk80xx: fix incomplete endpoint checking (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27002: clk: mediatek: Do a runtime PM get on controllers during probe (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27003: clk: Get runtime PM before walking tree for clk_summary (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27004: clk: Get runtime PM before walking tree during disable_unused (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27005: interconnect: Don't access req_list while it's being manipulated (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27006: thermal/debugfs: Add missing count increment to thermal_debug_tz_trip_up() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27007: userfaultfd: change src_folio after ensuring it's unpinned in UFFDIO_MOVE (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27008: drm: nv04: Fix out of bounds access (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26982: Squashfs: check the inode number is not the invalid value of zero (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27009: s390/cio: fix race condition during online processing (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27010: net/sched: Fix mirred deadlock on device recursion (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27011: netfilter: nf_tables: fix memleak in map from abort path (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27012: netfilter: nf_tables: restore set elements when delete set fails (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26983: bootconfig: use memblock_free_late to free xbc memory to buddy (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26984: nouveau: fix instmem race condition around ptr stores (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26986: drm/amdkfd: Fix memory leak in create_process failure (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26985: drm/xe: Fix bo leak in intel_fb_bo_framebuffer_init (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26987: mm/memory-failure: fix deadlock when hugetlb_optimize_vmemmap is enabled (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-26988: init/main.c: Fix potential static_command_line memory overflow (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27014: net/mlx5e: Prevent deadlock while disabling aRFS (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27016: netfilter: flowtable: validate pppoe header (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27017: netfilter: nft_set_pipapo: walk over current view on netlink dump (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27015: netfilter: flowtable: incorrect pppoe tuple (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27018: netfilter: br_netfilter: skip conntrack input hook for promisc packets (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27019: netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27020: netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27021: r8169: fix LED-related deadlock on module removal (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27013: tun: limit printing rate when illegal packet received by tun dev (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27022: fork: defer linking file vma until vma is fully initialized (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27024: net/rds: fix WARNING in rds_conn_connect_if_down (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27026: vmxnet3: Fix missing reserved tailroom (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27023: md: Fix missing release of 'active_io' for flush (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
66 more messages

May 2 (1 message)

REJECTED: CVE-2023-52651: wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev() (Greg Kroah-Hartman <gregkh@...uxfoundation.or…)

May 3 (26 messages)

CVE-2022-48671: cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48670: peci: cpu: Fix use-after-free in adev_release() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48672: of: fdt: fix off-by-one error in unflatten_dt_nodes() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48673: net/smc: Fix possible access to freed memory in link clear (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48674: erofs: fix pcluster use-after-free on UP platforms (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48675: IB/core: Fix a nested dead lock as part of ODP flow (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48687: ipv6: sr: fix out-of-bounds read when setting HMAC data. (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48686: nvme-tcp: fix UAF when detecting digest errors (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48696: regmap: spi: Reserve space for register address/padding (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48697: nvmet: fix a use-after-free (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48698: drm/amd/display: fix memory leak when using debugfs_lookup() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48688: i40e: Fix kernel crash during module removal (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48689: tcp: TX zerocopy should not sense pfmemalloc status (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48690: ice: Fix DMA mappings leak (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48691: netfilter: nf_tables: clean up hook list when offload flags check fails (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48692: RDMA/srp: Set scmnd->result only when scmnd is not NULL (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48693: soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48694: RDMA/irdma: Fix drain SQ hang with no completion (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48695: scsi: mpt3sas: Fix use-after-free warning (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48700: vfio/type1: Unpin zero pages (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48701: ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48702: ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48703: thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48705: wifi: mt76: mt7921e: fix crash in chip reset fail (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48704: drm/radeon: add a force flush to delay work when radeon (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2022-48699: sched/debug: fix dentry leak in update_sched_domain_debugfs (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

May 8 (6 messages)

CVE-2024-27393: xen-netfront: Add missing skb_mark_for_recycle (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52654: io_uring/af_unix: disable sending io_uring over sockets (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27394: tcp: Fix Use-After-Free in tcp_ao_connect_init (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27395: net: openvswitch: Fix Use-After-Free in ovs_ct_exit (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27396: net: gtp: Fix Use-After-Free in gtp_dellink (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27397: netfilter: nf_tables: use timestamp to check for set element timeout (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

May 10 (1 message)

Re: CVE-2024-26898: aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts ("gregkh@...uxfoundation.org" <gregkh@...uxfoundation.org>)

May 13 (6 messages)

CVE-2023-52655: usb: aqc111: check packet for fixup for true limit (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27398: Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27399: Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27400: drm/amdgpu: once more fix the call oder in amdgpu_ttm_move() v2 (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27401: firewire: nosy: ensure user_length is taken into account when fetching packet contents (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52656: io_uring: drop any code related to SCM_RIGHTS (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

May 16 (2 messages)

REJECTED: CVE-2024-26821: fs: relax mount_setattr() permission checks (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
Re: CVE-2024-26821: fs: relax mount_setattr() permission checks (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

May 17 (153 messages)

CVE-2024-27403: netfilter: nft_flow_offload: reset dst in route object after setting up flow (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27402: phonet/pep: fix racy skb_queue_empty() use (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27404: mptcp: fix data races on remote_id (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27405: usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27406: lib/Kconfig.debug: TEST_IOV_ITER depends on MMU (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27407: fs/ntfs3: Fixed overflow check in mi_enum_attr() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27408: dmaengine: dw-edma: eDMA: Add sync read before starting the DMA transfer in remote setup (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52657: Revert "drm/amd/pm: resolve reboot exception for si oland" (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27409: dmaengine: dw-edma: HDMA: Add sync read before starting the DMA transfer in remote setup (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27410: wifi: nl80211: reject iftype change with mesh ID change (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27411: drm/nouveau: keep DMA buffers required for suspend/resume (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27412: power: supply: bq27xxx-i2c: Do not free non existing IRQ (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27414: rtnetlink: fix error logic of IFLA_BRIDGE_FLAGS writing back (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27415: netfilter: bridge: confirm multicast packets before passing them up the stack (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27416: Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27417: ipv6: fix potential "struct net" leak in inet6_rtm_getaddr() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27418: net: mctp: take ownership of skb in mctp_local_output (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27413: efi/capsule-loader: fix incorrect allocation size (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27419: netrom: Fix data-races around sysctl_net_busy_read (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52658: Revert "net/mlx5: Block entering switchdev mode with ns inconsistency" (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27428: netrom: Fix data-races around sysctl_netrom_network_ttl_initialiser (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27429: netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27430: netrom: Fix a data-race around sysctl_netrom_default_path_quality (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27431: cpumap: Zero-initialise xdp_rxq_info struct before running XDP program (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27420: netrom: Fix a data-race around sysctl_netrom_link_fails_count (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27421: netrom: Fix a data-race around sysctl_netrom_routing_control (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27422: netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27424: netrom: Fix a data-race around sysctl_netrom_transport_busy_delay (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27423: netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27425: netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27426: netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27427: netrom: Fix a data-race around sysctl_netrom_transport_timeout (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52660: media: rkisp1: Fix IRQ handling due to shared interrupts (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52659: x86/mm: Ensure input to pfn_to_kaddr() is treated as a 64-bit type (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27432: net: ethernet: mtk_eth_soc: fix PPE hanging issue (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27433: clk: mediatek: mt7622-apmixedsys: Fix an error handling path in clk_mt8135_apmixed_probe() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27434: wifi: iwlwifi: mvm: don't set the MFP flag for the GTK (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27436: ALSA: usb-audio: Stop parsing channels bits when all channels are found. (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-27435: nvme: fix reconnection fail due to reserved tag allocation (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35785: tee: optee: Fix kernel panic caused by incorrect error handling (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35794: dm-raid: really frozen sync_thread during suspend (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35784: btrfs: fix deadlock with fiemap and extent locking (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35786: drm/nouveau: fix stale locked mutex in nouveau_gem_ioctl_pushbuf (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35787: md/md-bitmap: fix incorrect usage for sb_index (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35788: drm/amd/display: Fix bounds check for dcn35 DcfClocks (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35789: wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35790: usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35791: KVM: SVM: Flush pages under kvm->lock to fix UAF in svm_register_enc_region() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35792: crypto: rk3288 - Fix use after free in unprepare (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35793: debugfs: fix wait/cancellation handling during remove (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35796: net: ll_temac: platform_get_resource replaced by wrong function (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35795: drm/amdgpu: fix deadlock while reading mqd from debugfs (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35805: dm snapshot: fix lockup in dm_exception_table_exit (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35806: soc: fsl: qbman: Always disable interrupts when taking cgr_lock (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35807: ext4: fix corruption during on-line resize (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35808: md/dm-raid: don't call md_reap_sync_thread() directly (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35810: drm/vmwgfx: Fix the lifetime of the bo cursor memory (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35809: PCI/PM: Drain runtime-idle callbacks before driver removal (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35811: wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35812: usb: cdc-wdm: close race between read and workqueue (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35813: mmc: core: Avoid negative index with array access (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35814: swiotlb: Fix double-allocation of slots due to broken alignment handling (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35797: mm: cachestat: fix two shmem bugs (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35815: fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35816: firewire: ohci: prevent leak of left-over IRQ on unbind (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35817: drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35818: LoongArch: Define the __io_aw() hook as mmiowb() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35819: soc: fsl: qbman: Use raw spinlock for cgr_lock (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35820: io_uring: fix io_queue_proc modifying req->flags (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35821: ubifs: Set page uptodate in the correct place (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35822: usb: udc: remove warning when queue disabled ep (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35823: vt: fix unicode buffer corruption when deleting characters (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35798: btrfs: fix race in read_extent_buffer_pages() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35799: drm/amd/display: Prevent crash when disable stream (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35800: efi: fix panic in kdump kernel (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35801: x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35802: x86/sev: Fix position dependent variable references in startup code (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35803: x86/efistub: Call mixed mode boot services on the firmware's stack (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35804: KVM: x86: Mark target gfn of emulated atomic instruction as dirty (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35825: usb: gadget: ncm: Fix handling of zero block length packets (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35824: misc: lis3lv02d_i2c: Fix regulators getting en-/dis-abled twice on suspend/resume (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35826: block: Fix page refcounts for unaligned buffers in __bio_release_pages() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52662: drm/vmwgfx: fix a memleak in vmw_gmrid_man_get_node (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52661: drm/tegra: rgb: Fix missing clk_put() in the error handling paths of tegra_dc_rgb_probe() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52663: ASoC: SOF: amd: Fix memory leak in amd_sof_acp_probe() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35827: io_uring/net: fix overflow check in io_recvmsg_mshot_prep() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35828: wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35829: drm/lima: fix a memleak in lima_heap_alloc (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35830: media: tc358743: register v4l2 async device only after successful setup (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35831: io_uring: Fix release of pinned pages when __io_uaddr_map fails (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52664: net: atlantic: eliminate double free in error handling logic (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35833: dmaengine: fsl-qdma: Fix a memory leak related to the queue command DMA (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35832: bcachefs: kvfree bch_fs::snapshots in bch2_fs_snapshots_exit (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52666: ksmbd: fix potential circular locking issue in smb2_set_ea() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52665: powerpc/ps3_defconfig: Disable PPC64_BIG_ENDIAN_ELF_ABI_V2 (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2023-52667: net/mlx5e: fix a potential double-free in fs_any_create_groups (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35835: net/mlx5e: fix a double-free in arfs_create_groups (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35836: dpll: fix pin dump crash for rebound module (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
CVE-2024-35837: net: mvpp2: clear BM pool before initialization (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
54 more messages

360 messages

Powered by blists - more mailing lists