Summary
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Linux Kernel ausnutzen, um einen Denial of Service Angriff durchzuführen oder nicht spezifizierte Effekte zu erzielen.
Product
Der Kernel stellt den Kern des Linux Betriebssystems dar.
Vulnerabilities 130
-
Critical 9.8
cifs: Fix oops due to uncleared server->smbd_conn in reconnect
In the Linux kernel, the following vulnerability has been resolved: cifs: Fix oops due to uncleared server->smbd_conn in reconnect In smbd_destroy(), clear the server->smbd_conn pointer after freeing the smbd_connection struct that it points to so that reconn…
-
High 8.8
iommu/vt-d: Fix suspicious RCU usage
In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Fix suspicious RCU usage Commit <d74169ceb0d2> ("iommu/vt-d: Allocate DMAR fault interrupts locally") moved the call to enable_drhd_fault_handling() to a code path that does not h…
-
High 8.2
idpf: fix checksums set in idpf_rx_rsc()
In the Linux kernel, the following vulnerability has been resolved: idpf: fix checksums set in idpf_rx_rsc() idpf_rx_rsc() uses skb_transport_offset(skb) while the transport header is not set yet. This triggers the following warning for CONFIG_DEBUG_NET=y bui…
-
High 7.8
dmaengine: Fix double increment of client_count in dma_chan_get()
In the Linux kernel, the following vulnerability has been resolved: dmaengine: Fix double increment of client_count in dma_chan_get() The first time dma_chan_get() is called for a channel the channel client_count is incorrectly incremented twice for public ch…
-
High 7.8
Bluetooth: Fix a buffer overflow in mgmt_mesh_add()
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix a buffer overflow in mgmt_mesh_add() Smatch Warning: net/bluetooth/mgmt_util.c:375 mgmt_mesh_add() error: __memcpy() 'mesh_tx->param' too small (48 vs 50) Analysis: 'mesh_tx->p…
-
High 7.8
usb: gadget: f_fs: Prevent race during ffs_ep0_queue_wait
In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_fs: Prevent race during ffs_ep0_queue_wait While performing fast composition switch, there is a possibility that the process of ffs_ep0_write/ffs_ep0_read get into a race condi…
-
High 7.8
mm/hugetlb: fix PTE marker handling in hugetlb_change_protection()
In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix PTE marker handling in hugetlb_change_protection() Patch series "mm/hugetlb: uffd-wp fixes for hugetlb_change_protection()". Playing with virtio-mem and background snapshots (…
-
High 7.8
btrfs: always report error in run_one_delayed_ref()
In the Linux kernel, the following vulnerability has been resolved: btrfs: always report error in run_one_delayed_ref() Currently we have a btrfs_debug() for run_one_delayed_ref() failure, but if end users hit such problem, there will be no chance that btrfs_…
-
High 7.8
drm/i915: Fix potential bit_17 double-free
In the Linux kernel, the following vulnerability has been resolved: drm/i915: Fix potential bit_17 double-free A userspace with multiple threads racing I915_GEM_SET_TILING to set the tiling to I915_TILING_NONE could trigger a double free of the bit_17 bitmask…
-
High 7.8
drm/i915: Avoid potential vm use-after-free
In the Linux kernel, the following vulnerability has been resolved: drm/i915: Avoid potential vm use-after-free Adding the vm to the vm_xa table makes it visible to userspace, which could try to race with us to close the vm. So we need to take our extra refer…
-
High 7.8
mm/MADV_COLLAPSE: catch !none !huge !bad pmd lookups
In the Linux kernel, the following vulnerability has been resolved: mm/MADV_COLLAPSE: catch !none !huge !bad pmd lookups In commit 34488399fa08 ("mm/madvise: add file and shmem support to MADV_COLLAPSE") we make the following change to find_pmd_or_thp_or_none…
-
High 7.8
mm/khugepaged: fix ->anon_vma race
In the Linux kernel, the following vulnerability has been resolved: mm/khugepaged: fix ->anon_vma race If an ->anon_vma is attached to the VMA, collapse_and_free_pmd() requires it to be locked. Page table traversal is allowed under any one of the mmap lock, t…
-
High 7.8
vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
In the Linux kernel, the following vulnerability has been resolved: vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF After a call to console_unlock() in vcs_read() the vc_data struct can be freed by vc_deallocate(). Because of that, t…
-
High 7.8
scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
In the Linux kernel, the following vulnerability has been resolved: scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress If during iscsi_sw_tcp_session_create() iscsi_tcp_r2tpool_alloc() fails, userspace could be accessing the host's ipadd…
-
High 7.8
scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
In the Linux kernel, the following vulnerability has been resolved: scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress Bug report and analysis from Ding Hui. During iSCSI session logout, if another task accesses the shost ipaddress attr…
-
High 7.8
drm/i915: Fix request ref counting during error capture & debugfs dump
In the Linux kernel, the following vulnerability has been resolved: drm/i915: Fix request ref counting during error capture & debugfs dump When GuC support was added to error capture, the reference counting around the request object was broken. Fix it up. The…
-
High 7.8
block, bfq: fix uaf for bfqq in bic_set_bfqq()
In the Linux kernel, the following vulnerability has been resolved: block, bfq: fix uaf for bfqq in bic_set_bfqq() After commit 64dc8c732f5c ("block, bfq: fix possible uaf for 'bfqq->bic'"), bic->bfqq will be accessed in bic_set_bfqq(), however, in some conte…
-
High 7.8
ASoC: SOF: ipc4-mtrace: prevent underflow in sof_ipc4_priority_mask_dfs_write()
In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc4-mtrace: prevent underflow in sof_ipc4_priority_mask_dfs_write() The "id" comes from the user. Change the type to unsigned to prevent an array underflow.
-
High 7.8
ALSA: hda/via: Avoid potential array out-of-bound in add_secret_dac_path()
In the Linux kernel, the following vulnerability has been resolved: ALSA: hda/via: Avoid potential array out-of-bound in add_secret_dac_path() snd_hda_get_connections() can return a negative error code. It may lead to accessing 'conn' array at a negative inde…
-
High 7.8
net: fix UaF in netns ops registration error path
In the Linux kernel, the following vulnerability has been resolved: net: fix UaF in netns ops registration error path If net_assign_generic() fails, the current error path in ops_init() tries to clear the gen pointer slot. Anyway, in such error path, the gen …
-
High 7.8
EDAC/qcom: Do not pass llcc_driv_data as edac_device_ctl_info's pvt_info
In the Linux kernel, the following vulnerability has been resolved: EDAC/qcom: Do not pass llcc_driv_data as edac_device_ctl_info's pvt_info The memory for llcc_driv_data is allocated by the LLCC driver. But when it is passed as the private driver info to the…
-
High 7.8
drm/amdkfd: Add sync after creating vram bo
In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Add sync after creating vram bo There will be data corruption on vram allocated by svm if the initialization is not complete and application is writting on the memory. Adding sync…
-
High 7.8
net/sched: sch_taprio: fix possible use-after-free
In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_taprio: fix possible use-after-free syzbot reported a nasty crash [1] in net_tx_action() which made little sense until we got a repro. This repro installs a taprio qdisc, but p…
-
High 7.8
net: nfc: Fix use-after-free in local_cleanup()
In the Linux kernel, the following vulnerability has been resolved: net: nfc: Fix use-after-free in local_cleanup() Fix a use-after-free that occurs in kfree_skb() called from local_cleanup(). This could happen when killing nfc daemon (e.g. neard) after detac…
-
High 7.8
RDMA/core: Fix ib block iterator counter overflow
In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Fix ib block iterator counter overflow When registering a new DMA MR after selecting the best aligned page size for it, we iterate over the given sglist to split each entry to smal…
-
High 7.8
Revert "wifi: mac80211: fix memory leak in ieee80211_if_add()"
In the Linux kernel, the following vulnerability has been resolved: Revert "wifi: mac80211: fix memory leak in ieee80211_if_add()" This reverts commit 13e5afd3d773c6fc6ca2b89027befaaaa1ea7293. ieee80211_if_free() is already called from free_netdev(ndev) becau…
-
High 7.8
netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits If the offset + length goes over the ethernet + vlan header, then the length is adjusted to copy the bytes that ar…
-
High 7.8
drm/fbdev-dma: Add shadow buffering for deferred I/O
In the Linux kernel, the following vulnerability has been resolved: drm/fbdev-dma: Add shadow buffering for deferred I/O DMA areas are not necessarily backed by struct page, so we cannot rely on it for deferred I/O. Allocate a shadow buffer for drivers that r…
-
High 7.8
bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type()
In the Linux kernel, the following vulnerability has been resolved: bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() KMSAN reported a use-after-free issue in eth_skb_pkt_type()[1]. The cause of the issue was that eth_skb_pkt_type() accessed skb's…
-
High 7.8
ASoC: SOF: ipc4-topology: Harden loops for looking up ALH copiers
In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc4-topology: Harden loops for looking up ALH copiers Other, non DAI copier widgets could have the same stream name (sname) as the ALH copier and in that case the copier->data is …
-
High 7.8
mptcp: always handle address removal under msk socket lock
In the Linux kernel, the following vulnerability has been resolved: mptcp: always handle address removal under msk socket lock Syzkaller reported a lockdep splat in the PM control path: WARNING: CPU: 0 PID: 6693 at ./include/net/sock.h:1711 sock_owned_by_me i…
-
High 7.8
btrfs: fix use-after-free on inode when scanning root during em shrinking
In the Linux kernel, the following vulnerability has been resolved: btrfs: fix use-after-free on inode when scanning root during em shrinking At btrfs_scan_root() we are accessing the inode's root (and fs_info) in a call to btrfs_fs_closing() after we have sc…
-
High 7.8
net/mlx5: Fix vport QoS cleanup on error
In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix vport QoS cleanup on error When enabling vport QoS fails, the scheduling node was never freed, causing a leak. Add the missing free and reset the vport scheduling node pointer t…
-
High 7.8
net: better track kernel sockets lifetime
In the Linux kernel, the following vulnerability has been resolved: net: better track kernel sockets lifetime While kernel sockets are dismantled during pernet_operations->exit(), their freeing can be delayed by any tx packets still held in qdisc or device qu…
-
High 7.8
ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
In the Linux kernel, the following vulnerability has been resolved: ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up The issue was caused by dput(upper) being called before ovl_dentry_update_reval(), while upper->d_flags was still acces…
-
High 7.8
perf/core: Add RCU read lock protection to perf_iterate_ctx()
In the Linux kernel, the following vulnerability has been resolved: perf/core: Add RCU read lock protection to perf_iterate_ctx() The perf_iterate_ctx() function performs RCU list traversal but currently lacks RCU read lock protection. This causes lockdep war…
-
High 7.5
can: j1939: fix errant WARN_ON_ONCE in j1939_session_deactivate
In the Linux kernel, the following vulnerability has been resolved: can: j1939: fix errant WARN_ON_ONCE in j1939_session_deactivate The conclusion "j1939_session_deactivate() should be called with a session ref-count of at least 2" is incorrect. In some concu…
-
High 7.5
ovl: Use "buf" flexible array for memcpy() destination
In the Linux kernel, the following vulnerability has been resolved: ovl: Use "buf" flexible array for memcpy() destination The "buf" flexible array needs to be the memcpy() destination to avoid false positive run-time warning from the recent FORTIFY_SOURCE ha…
-
High 7.5
net: fix NULL pointer in skb_segment_list
In the Linux kernel, the following vulnerability has been resolved: net: fix NULL pointer in skb_segment_list Commit 3a1296a38d0c ("net: Support GRO/GSO fraglist chaining.") introduced UDP listifyed GRO. The segmentation relies on frag_list being untouched wh…
-
High 7.5
net: allow small head cache usage with large MAX_SKB_FRAGS values
In the Linux kernel, the following vulnerability has been resolved: net: allow small head cache usage with large MAX_SKB_FRAGS values Sabrina reported the following splat: WARNING: CPU: 0 PID: 1 at net/core/dev.c:6935 netif_napi_add_weight_locked+0x8f2/0xba0 …
-
High 7.5
RDMA/bnxt_re: Fix the page details for the srq created by kernel consumers
In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Fix the page details for the srq created by kernel consumers While using nvme target with use_srq on, below kernel panic is noticed. [ 549.698111] bnxt_en 0000:41:00.0 enp65s0np…
-
High 7.1
f2fs: fix to do sanity check on i_extra_isize in is_alive()
In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check on i_extra_isize in is_alive() syzbot found a f2fs bug: BUG: KASAN: slab-out-of-bounds in data_blkaddr fs/f2fs/f2fs.h:2891 [inline] BUG: KASAN: slab-out-of-bounds…
-
High 7.1
gfs2: Always check inode size of inline inodes
In the Linux kernel, the following vulnerability has been resolved: gfs2: Always check inode size of inline inodes Check if the inode size of stuffed (inline) inodes is within the allowed range when reading inodes from disk (gfs2_dinode_in()). This prevents u…
-
High 7.1
wifi: brcmfmac: Check the count value of channel spec to prevent out-of-bounds reads
In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: Check the count value of channel spec to prevent out-of-bounds reads This patch fixes slab-out-of-bounds reads in brcmfmac that occur in brcmf_construct_chaninfo() and brcmf_e…
-
Medium 5.5
fbdev: smscufx: fix error handling code in ufx_usb_probe
In the Linux kernel, the following vulnerability has been resolved: fbdev: smscufx: fix error handling code in ufx_usb_probe The current error handling code in ufx_usb_probe have many unmatching issues, e.g., missing ufx_free_usb_list, destroy_modedb label sh…
-
Medium 5.5
f2fs: initialize locks earlier in f2fs_fill_super()
In the Linux kernel, the following vulnerability has been resolved: f2fs: initialize locks earlier in f2fs_fill_super() syzbot is reporting lockdep warning at f2fs_handle_error() [1], for spin_lock(&sbi->error_lock) is called before spin_lock_init() is called…
-
Medium 5.5
dmaengine: imx-sdma: Fix a possible memory leak in sdma_transfer_init
In the Linux kernel, the following vulnerability has been resolved: dmaengine: imx-sdma: Fix a possible memory leak in sdma_transfer_init If the function sdma_load_context() fails, the sdma_desc will be freed, but the allocated desc->bd is forgot to be freed.…
-
Medium 5.5
perf/x86/amd: fix potential integer overflow on shift of a int
In the Linux kernel, the following vulnerability has been resolved: perf/x86/amd: fix potential integer overflow on shift of a int The left shift of int 32 bit integer constant 1 is evaluated using 32 bit arithmetic and then passed as a 64 bit function argume…
-
Medium 5.5
i2c: designware: use casting of u64 in clock multiplication to avoid overflow
In the Linux kernel, the following vulnerability has been resolved: i2c: designware: use casting of u64 in clock multiplication to avoid overflow In functions i2c_dw_scl_lcnt() and i2c_dw_scl_hcnt() may have overflow by depending on the values of the given pa…
-
Medium 5.5
cpufreq: CPPC: Add u64 casts to avoid overflowing
In the Linux kernel, the following vulnerability has been resolved: cpufreq: CPPC: Add u64 casts to avoid overflowing The fields of the _CPC object are unsigned 32-bits values. To avoid overflows while using _CPC's values, add 'u64' casts.
-
Medium 5.5
w1: fix WARNING after calling w1_process()
In the Linux kernel, the following vulnerability has been resolved: w1: fix WARNING after calling w1_process() I got the following WARNING message while removing driver(ds2482): ------------[ cut here ]------------ do not call blocking ops when !TASK_RUNNING;…
-
Medium 5.5
device property: fix of node refcount leak in fwnode_graph_get_next_endpoint()
In the Linux kernel, the following vulnerability has been resolved: device property: fix of node refcount leak in fwnode_graph_get_next_endpoint() The 'parent' returned by fwnode_graph_get_port_parent() with refcount incremented when 'prev' is not NULL, it ne…
-
Medium 5.5
phy: usb: sunplus: Fix potential null-ptr-deref in sp_usb_phy_probe()
In the Linux kernel, the following vulnerability has been resolved: phy: usb: sunplus: Fix potential null-ptr-deref in sp_usb_phy_probe() sp_usb_phy_probe() will call platform_get_resource_byname() that may fail and return NULL. devm_ioremap() will use usbphy…
-
Medium 5.5
EDAC/highbank: Fix memory leak in highbank_mc_probe()
In the Linux kernel, the following vulnerability has been resolved: EDAC/highbank: Fix memory leak in highbank_mc_probe() When devres_open_group() fails, it returns -ENOMEM without freeing memory allocated by edac_mc_alloc(). Call edac_mc_free() on the error …
-
Medium 5.5
reset: uniphier-glue: Fix possible null-ptr-deref
In the Linux kernel, the following vulnerability has been resolved: reset: uniphier-glue: Fix possible null-ptr-deref It will cause null-ptr-deref when resource_size(res) invoked, if platform_get_resource() returns NULL.
-
Medium 5.5
VMCI: Use threaded irqs instead of tasklets
In the Linux kernel, the following vulnerability has been resolved: VMCI: Use threaded irqs instead of tasklets The vmci_dispatch_dgs() tasklet function calls vmci_read_data() which uses wait_event() resulting in invalid sleep in an atomic context (and theref…
-
Medium 5.5
mm/swapfile: add cond_resched() in get_swap_pages()
In the Linux kernel, the following vulnerability has been resolved: mm/swapfile: add cond_resched() in get_swap_pages() The softlockup still occurs in get_swap_pages() under memory pressure. 64 CPU cores, 64GB memory, and 28 zram devices, the disksize of each…
-
Medium 5.5
kernel/irq/irqdomain.c: fix memory leak with using debugfs_lookup()
In the Linux kernel, the following vulnerability has been resolved: kernel/irq/irqdomain.c: fix memory leak with using debugfs_lookup() When calling debugfs_lookup() the result must have dput() called on it, otherwise the memory will leak over time. To make t…
-
Medium 5.5
HV: hv_balloon: fix memory leak with using debugfs_lookup()
In the Linux kernel, the following vulnerability has been resolved: HV: hv_balloon: fix memory leak with using debugfs_lookup() When calling debugfs_lookup() the result must have dput() called on it, otherwise the memory will leak over time. To make things si…
-
Medium 5.5
usb: typec: ucsi: Don't attempt to resume the ports before they exist
In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: Don't attempt to resume the ports before they exist This will fix null pointer dereference that was caused by the driver attempting to resume ports that were not yet registe…
-
Medium 5.5
mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
In the Linux kernel, the following vulnerability has been resolved: mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() As commit 18365225f044 ("hwpoison, memcg: forcibly uncharge LRU pages"), hwpoison will forcibly uncharg a LRU hwpoison…
-
Medium 5.5
efi: fix potential NULL deref in efi_mem_reserve_persistent
In the Linux kernel, the following vulnerability has been resolved: efi: fix potential NULL deref in efi_mem_reserve_persistent When iterating on a linked list, a result of memremap is dereferenced without checking it for NULL. This patch adds a check that fa…
-
Medium 5.5
net: openvswitch: fix flow memory leak in ovs_flow_cmd_new
In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: fix flow memory leak in ovs_flow_cmd_new Syzkaller reports a memory leak of new_flow in ovs_flow_cmd_new() as it is not freed when an allocation of a key fails. BUG: memory …
-
Medium 5.5
riscv: kprobe: Fixup kernel panic when probing an illegal position
In the Linux kernel, the following vulnerability has been resolved: riscv: kprobe: Fixup kernel panic when probing an illegal position The kernel would panic when probed for an illegal position. eg: (CONFIG_RISCV_ISA_C=n) echo 'p:hello kernel_clone+0x16 a0=%a…
-
Medium 5.5
net: phy: dp83822: Fix null pointer access on DP83825/DP83826 devices
In the Linux kernel, the following vulnerability has been resolved: net: phy: dp83822: Fix null pointer access on DP83825/DP83826 devices The probe() function is only used for the DP83822 PHY, leaving the private data pointer uninitialized for the smaller DP8…
-
Medium 5.5
firewire: fix memory leak for payload of request subaction to IEC 61883-1 FCP region
In the Linux kernel, the following vulnerability has been resolved: firewire: fix memory leak for payload of request subaction to IEC 61883-1 FCP region This patch is fix for Linux kernel v2.6.33 or later. For request subaction to IEC 61883-1 FCP region, Linu…
-
Medium 5.5
x86/i8259: Mark legacy PIC interrupts with IRQ_LEVEL
In the Linux kernel, the following vulnerability has been resolved: x86/i8259: Mark legacy PIC interrupts with IRQ_LEVEL Baoquan reported that after triggering a crash the subsequent crash-kernel fails to boot about half of the time. It triggers a NULL pointe…
-
Medium 5.5
acpi: Fix suspend with Xen PV
In the Linux kernel, the following vulnerability has been resolved: acpi: Fix suspend with Xen PV Commit f1e525009493 ("x86/boot: Skip realmode init code when running as Xen PV guest") missed one code path accessing real_mode_header, leading to dereferencing …
-
Medium 5.5
drm/i915: Fix a memory leak with reused mmap_offset
In the Linux kernel, the following vulnerability has been resolved: drm/i915: Fix a memory leak with reused mmap_offset drm_vma_node_allow() and drm_vma_node_revoke() should be called in balanced pairs. We call drm_vma_node_allow() once per-file everytime a u…
-
Medium 5.5
trace_events_hist: add check for return value of 'create_hist_field'
In the Linux kernel, the following vulnerability has been resolved: trace_events_hist: add check for return value of 'create_hist_field' Function 'create_hist_field' is called recursively at trace_events_hist.c:1954 and can return NULL-value that's why we hav…
-
Medium 5.5
cifs: fix potential memory leaks in session setup
In the Linux kernel, the following vulnerability has been resolved: cifs: fix potential memory leaks in session setup Make sure to free cifs_ses::auth_key.response before allocating it as we might end up leaking memory in reconnect or mounting.
-
Medium 5.5
net: stmmac: enable all safety features by default
In the Linux kernel, the following vulnerability has been resolved: net: stmmac: enable all safety features by default In the original implementation of dwmac5 commit 8bf993a5877e ("net: stmmac: Add support for DWMAC5 and implement Safety Features") all safet…
-
Medium 5.5
ptdma: pt_core_execute_cmd() should use spinlock
In the Linux kernel, the following vulnerability has been resolved: ptdma: pt_core_execute_cmd() should use spinlock The interrupt handler (pt_core_irq_handler()) of the ptdma driver can be called from interrupt context. The code flow in this function can lea…
-
Medium 5.5
dmaengine: tegra: Fix memory leak in terminate_all()
In the Linux kernel, the following vulnerability has been resolved: dmaengine: tegra: Fix memory leak in terminate_all() Terminate vdesc when terminating an ongoing transfer. This will ensure that the vdesc is present in the desc_terminated list The descripto…
-
Medium 5.5
HID: betop: check shape of output reports
In the Linux kernel, the following vulnerability has been resolved: HID: betop: check shape of output reports betopff_init() only checks the total sum of the report counts for each report field to be at least 4, but hid_betopff_play() expects 4 report fields.…
-
Medium 5.5
Bluetooth: Fix possible deadlock in rfcomm_sk_state_change
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix possible deadlock in rfcomm_sk_state_change syzbot reports a possible deadlock in rfcomm_sk_state_change [1]. While rfcomm_sock_connect acquires the sk lock and waits for the r…
-
Medium 5.5
Bluetooth: hci_sync: fix memory leak in hci_update_adv_data()
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: fix memory leak in hci_update_adv_data() When hci_cmd_sync_queue() failed in hci_update_adv_data(), inst_ptr is not freed, which will cause memory leak, convert to use ER…
-
Medium 5.5
Bluetooth: hci_conn: Fix memory leaks
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_conn: Fix memory leaks When hci_cmd_sync_queue() failed in hci_le_terminate_big() or hci_le_big_terminate(), the memory pointed by variable d is not freed, which will cause mem…
-
Medium 5.5
net: enetc: avoid deadlock in enetc_tx_onestep_tstamp()
In the Linux kernel, the following vulnerability has been resolved: net: enetc: avoid deadlock in enetc_tx_onestep_tstamp() This lockdep splat says it better than I could: ================================ WARNING: inconsistent lock state 6.2.0-rc2-07010-ga9b9…
-
Medium 5.5
ipvlan: ensure network headers are in skb linear part
In the Linux kernel, the following vulnerability has been resolved: ipvlan: ensure network headers are in skb linear part syzbot found that ipvlan_process_v6_outbound() was assuming the IPv6 network header isis present in skb->head [1] Add the needed pskb_net…
-
Medium 4.7
l2tp: close all race conditions in l2tp_tunnel_register()
In the Linux kernel, the following vulnerability has been resolved: l2tp: close all race conditions in l2tp_tunnel_register() The code in l2tp_tunnel_register() is racy in several ways: 1. It modifies the tunnel socket _after_ publishing it. 2. It calls setup…
-
Unscored —
mm/uffd: fix pte marker when fork() without fork event
In the Linux kernel, the following vulnerability has been resolved: mm/uffd: fix pte marker when fork() without fork event Patch series "mm: Fixes on pte markers". Patch 1 resolves the syzkiller report from Pengfei. Patch 2 further harden pte markers when use…
-
Unscored —
fpga: m10bmc-sec: Fix probe rollback
In the Linux kernel, the following vulnerability has been resolved: fpga: m10bmc-sec: Fix probe rollback Handle probe error rollbacks properly to avoid leaks.
-
Unscored —
erofs/zmap.c: Fix incorrect offset calculation
In the Linux kernel, the following vulnerability has been resolved: erofs/zmap.c: Fix incorrect offset calculation Effective offset to add to length was being incorrectly calculated, which resulted in iomap->length being set to 0, triggering a WARN_ON in ioma…
-
Unscored —CVE-2023-0179 Public exploit
A buffer overflow vulnerability was found in the Netfilter subsystem in the Linux Kernel. This issue could allow the le…
-
Unscored —
bpf: Skip invalid kfunc call in backtrack_insn
In the Linux kernel, the following vulnerability has been resolved: bpf: Skip invalid kfunc call in backtrack_insn The verifier skips invalid kfunc call in check_kfunc_call(), which would be captured in fixup_kfunc_call() if such insn is not eliminated by dea…
-
Unscored —
nvmem: core: fix cleanup after dev_set_name()
In the Linux kernel, the following vulnerability has been resolved: nvmem: core: fix cleanup after dev_set_name() If dev_set_name() fails, we leak nvmem->wp_gpio as the cleanup does not put this. While a minimal fix for this would be to add the gpiod_put() ca…
-
Unscored —
Squashfs: fix handling and sanity checking of xattr_ids count
In the Linux kernel, the following vulnerability has been resolved: Squashfs: fix handling and sanity checking of xattr_ids count A Sysbot [1] corrupted filesystem exposes two flaws in the handling and sanity checking of the xattr_ids count in the filesystem.…
-
Unscored —
mm: multi-gen LRU: fix crash during cgroup migration
In the Linux kernel, the following vulnerability has been resolved: mm: multi-gen LRU: fix crash during cgroup migration lru_gen_migrate_mm() assumes lru_gen_add_mm() runs prior to itself. This isn't true for the following scenario: CPU 1 CPU 2 clone() cgroup…
-
Unscored —
can: isotp: split tx timer into transmission and timeout
In the Linux kernel, the following vulnerability has been resolved: can: isotp: split tx timer into transmission and timeout The timer for the transmission of isotp PDUs formerly had two functions: 1. send two consecutive frames with a given time gap 2. monit…
-
Unscored —
cgroup/cpuset: Fix wrong check in update_parent_subparts_cpumask()
In the Linux kernel, the following vulnerability has been resolved: cgroup/cpuset: Fix wrong check in update_parent_subparts_cpumask() It was found that the check to see if a partition could use up all the cpus from the parent cpuset in update_parent_subparts…
-
Unscored —CVE-2023-52979 Rejected
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
-
Unscored —
block: ublk: extending queue_size to fix overflow
In the Linux kernel, the following vulnerability has been resolved: block: ublk: extending queue_size to fix overflow When validating drafted SPDK ublk target, in a case that assigning large queue depth to multiqueue ublk device, ublk target would run into a …
-
Unscored —
fscache: Use wait_on_bit() to wait for the freeing of relinquished volume
In the Linux kernel, the following vulnerability has been resolved: fscache: Use wait_on_bit() to wait for the freeing of relinquished volume The freeing of relinquished volume will wake up the pending volume acquisition by using wake_up_bit(), however it is …
-
Unscored —
arm64: dts: imx8mm-verdin: Do not power down eth-phy
In the Linux kernel, the following vulnerability has been resolved: arm64: dts: imx8mm-verdin: Do not power down eth-phy Currently if suspending using either freeze or memory state, the fec driver tries to power down the phy which leads to crash of the kernel…
-
Unscored —
bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener
In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener A listening socket linked to a sockmap has its sk_prot overridden. It points to one of the struct proto variants in tcp_bp…
-
Unscored —CVE-2023-52990 Rejected
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
-
Unscored —
bpf: Skip task with pid=1 in send_signal_common()
In the Linux kernel, the following vulnerability has been resolved: bpf: Skip task with pid=1 in send_signal_common() The following kernel panic can be triggered when a task with pid=1 attaches a prog that attempts to send killing signal to itself, also see […
-
Unscored —
riscv/kprobe: Fix instruction simulation of JALR
In the Linux kernel, the following vulnerability has been resolved: riscv/kprobe: Fix instruction simulation of JALR Set kprobe at 'jalr 1140(ra)' of vfs_write results in the following crash: [ 32.092235] Unable to handle kernel access to user memory without …
-
Unscored —
ipv4: prevent potential spectre v1 gadget in fib_metrics_match()
In the Linux kernel, the following vulnerability has been resolved: ipv4: prevent potential spectre v1 gadget in fib_metrics_match() if (!type) continue; if (type > RTAX_MAX) return false; ... fi_val = fi->fib_metrics->metrics[type - 1]; @type being used as a…
-
Unscored —
ipv4: prevent potential spectre v1 gadget in ip_metrics_convert()
In the Linux kernel, the following vulnerability has been resolved: ipv4: prevent potential spectre v1 gadget in ip_metrics_convert() if (!type) continue; if (type > RTAX_MAX) return -EINVAL; ... metrics[type - 1] = val; @type being used as an array index, we…
-
Unscored —
net: fec: Use page_pool_put_full_page when freeing rx buffers
In the Linux kernel, the following vulnerability has been resolved: net: fec: Use page_pool_put_full_page when freeing rx buffers The page_pool_release_page was used when freeing rx buffers, and this function just unmaps the page (if mapped) and does not recy…
-
Unscored —
netlink: prevent potential spectre v1 gadgets
In the Linux kernel, the following vulnerability has been resolved: netlink: prevent potential spectre v1 gadgets Most netlink attributes are parsed and validated from __nla_validate_parse() or validate_nla() u16 type = nla_type(nla); if (type == 0 || type > …
-
Unscored —CVE-2023-53001 Rejected
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
-
Unscored —
ovl: fix tmpfile leak
In the Linux kernel, the following vulnerability has been resolved: ovl: fix tmpfile leak Missed an error cleanup.
-
Unscored —
tracing: Make sure trace_printk() can output as soon as it can be used
In the Linux kernel, the following vulnerability has been resolved: tracing: Make sure trace_printk() can output as soon as it can be used Currently trace_printk() can be used as soon as early_trace_init() is called from start_kernel(). But if a crash happens…
-
Unscored —
bnxt: Do not read past the end of test names
In the Linux kernel, the following vulnerability has been resolved: bnxt: Do not read past the end of test names Test names were being concatenated based on a offset beyond the end of the first name, which tripped the buffer overflow detection logic: detected…
-
Unscored —
thermal: core: call put_device() only after device_register() fails
In the Linux kernel, the following vulnerability has been resolved: thermal: core: call put_device() only after device_register() fails put_device() shouldn't be called before a prior call to device_register(). __thermal_cooling_device_register() doesn't foll…
-
Unscored —
net: mdio: validate parameter addr in mdiobus_get_phy()
In the Linux kernel, the following vulnerability has been resolved: net: mdio: validate parameter addr in mdiobus_get_phy() The caller may pass any value as addr, what may result in an out-of-bounds access to array mdio_map. One existing case is stmmac_init_p…
-
Unscored —
bpf: Fix pointer-leak due to insufficient speculative store bypass mitigation
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix pointer-leak due to insufficient speculative store bypass mitigation To mitigate Spectre v4, 2039f26f3aca ("bpf: Fix leakage due to insufficient speculative store bypass mitigation")…
-
Unscored —CVE-2023-53025 Rejected
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
-
Unscored —CVE-2023-53027 Rejected
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
-
Unscored —
octeontx2-pf: Fix the use of GFP_KERNEL in atomic context on rt
In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: Fix the use of GFP_KERNEL in atomic context on rt The commit 4af1b64f80fb ("octeontx2-pf: Fix lmtst ID used in aura free") uses the get/put_cpu() to protect the usage of percpu …
-
Unscored —
octeontx2-pf: Avoid use of GFP_KERNEL in atomic context
In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: Avoid use of GFP_KERNEL in atomic context Using GFP_KERNEL in preemption disable context, causing below warning when CONFIG_DEBUG_ATOMIC_SLEEP is enabled. [ 32.542271] BUG: slee…
-
Unscored —
powerpc/imc-pmu: Fix use of mutex in IRQs disabled section
In the Linux kernel, the following vulnerability has been resolved: powerpc/imc-pmu: Fix use of mutex in IRQs disabled section Current imc-pmu code triggers a WARNING with CONFIG_DEBUG_ATOMIC_SLEEP and CONFIG_PROVE_LOCKING enabled, while running a thread_imc …
-
Unscored —
netfilter: ipset: Fix overflow before widen in the bitmap_ip_create() function.
In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: Fix overflow before widen in the bitmap_ip_create() function. When first_ip is 0, last_ip is 0xFFFFFFFF, and netmask is 31, the value of an arithmetic expression 2 << (netma…
-
Unscored —
sched/core: Prevent rescheduling when interrupts are disabled
In the Linux kernel, the following vulnerability has been resolved: sched/core: Prevent rescheduling when interrupts are disabled David reported a warning observed while loop testing kexec jump: Interrupts enabled after irqrouter_resume+0x0/0x50 WARNING: CPU:…
-
Unscored —
powerpc/code-patching: Disable KASAN report during patching via temporary mm
In the Linux kernel, the following vulnerability has been resolved: powerpc/code-patching: Disable KASAN report during patching via temporary mm Erhard reports the following KASAN hit on Talos II (power9) with kernel 6.13: [ 12.028126] =======================…
-
Unscored —
tee: optee: Fix supplicant wait loop
In the Linux kernel, the following vulnerability has been resolved: tee: optee: Fix supplicant wait loop OP-TEE supplicant is a user-space daemon and it's possible for it be hung or crashed or killed in the middle of processing an OP-TEE RPC call. It becomes …
-
Unscored —
efi: Don't map the entire mokvar table to determine its size
In the Linux kernel, the following vulnerability has been resolved: efi: Don't map the entire mokvar table to determine its size Currently, when validating the mokvar table, we (re)map the entire table on each iteration of the loop, adding space as we discove…
-
Unscored —
scsi: ufs: core: bsg: Fix crash when arpmb command fails
In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: bsg: Fix crash when arpmb command fails If the device doesn't support arpmb we'll crash due to copying user data in bsg_transport_sg_io_fn(). In the case where ufs_bsg_exec_a…
-
Unscored —
dm-integrity: Avoid divide by zero in table status in Inline mode
In the Linux kernel, the following vulnerability has been resolved: dm-integrity: Avoid divide by zero in table status in Inline mode In Inline mode, the journal is unused, and journal_sectors is zero. Calculating the journal watermark requires dividing by jo…
-
Unscored —
usbnet: gl620a: fix endpoint checking in genelink_bind()
In the Linux kernel, the following vulnerability has been resolved: usbnet: gl620a: fix endpoint checking in genelink_bind() Syzbot reports [1] a warning in usb_submit_urb() triggered by inconsistencies between expected and actually present endpoints in gl620…
-
Unscored —
i2c: npcm: disable interrupt enable bit before devm_request_irq
In the Linux kernel, the following vulnerability has been resolved: i2c: npcm: disable interrupt enable bit before devm_request_irq The customer reports that there is a soft lockup issue related to the i2c driver. After checking, the i2c module was doing a tx…
-
Unscored —
drm/xe/userptr: fix EFAULT handling
In the Linux kernel, the following vulnerability has been resolved: drm/xe/userptr: fix EFAULT handling Currently we treat EFAULT from hmm_range_fault() as a non-fatal error when called from xe_vm_userptr_pin() with the idea that we want to avoid killing the …
-
Unscored —
uprobes: Reject the shared zeropage in uprobe_write_opcode()
In the Linux kernel, the following vulnerability has been resolved: uprobes: Reject the shared zeropage in uprobe_write_opcode() We triggered the following crash in syzkaller tests: BUG: Bad page state in process syz.7.38 pfn:1eff3 page: refcount:0 mapcount:0…
-
Unscored —
ice: Fix deinitializing VF in error path
In the Linux kernel, the following vulnerability has been resolved: ice: Fix deinitializing VF in error path If ice_ena_vfs() fails after calling ice_create_vf_entries(), it frees all VFs without removing them from snapshot PF-VF mailbox list, leading to list…
-
Unscored —
RDMA/mlx5: Fix implicit ODP hang on parent deregistration
In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix implicit ODP hang on parent deregistration Fix the destroy_unused_implicit_child_mr() to prevent hanging during parent deregistration as of below [1]. Upon entering destroy_unu…
-
Unscored —
RDMA/mlx5: Fix a WARN during dereg_mr for DM type
In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix a WARN during dereg_mr for DM type Memory regions (MR) of type DM (device memory) do not have an associated umem. In the __mlx5_ib_dereg_mr() -> mlx5_free_priv_descs() flow, th…
-
Unscored —
RDMA/mlx5: Fix the recovery flow of the UMR QP
In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix the recovery flow of the UMR QP This patch addresses an issue in the recovery flow of the UMR QP, ensuring tasks do not get stuck, as highlighted by the call trace [1]. During …
Revision history
-
#119
Neue Updates von Dell aufgenommen
-
#118
Neue Updates von Siemens aufgenommen
-
#117
Neue Updates von Oracle Linux aufgenommen
-
#116
Neue Updates von Oracle Linux aufgenommen
-
#115
Neue Updates von Oracle Linux aufgenommen
-
#114
Neue Updates von Oracle Linux aufgenommen
-
#113
Neue Updates von Oracle Linux aufgenommen
-
#112
Neue Updates von Oracle Linux aufgenommen
-
#111
Neue Updates von Ubuntu aufgenommen
-
#110
Neue Updates von Oracle Linux aufgenommen
-
#109
Neue Updates von SUSE aufgenommen
-
#108
Neue Updates von Ubuntu aufgenommen
-
#107
Neue Updates von Oracle Linux aufgenommen
-
#106
Neue Updates von Ubuntu aufgenommen
-
#105
Neue Updates von Ubuntu aufgenommen
-
#104
Neue Updates von Ubuntu aufgenommen
-
#103
Neue Updates von Ubuntu und Oracle Linux aufgenommen
-
#102
Neue Updates von SUSE aufgenommen
-
#101
Neue Updates von SUSE aufgenommen
-
#100
Neue Updates von SUSE aufgenommen
-
#99
Neue Updates von Ubuntu und Debian aufgenommen
-
#98
Neue Updates von Dell aufgenommen
-
#97
Neue Updates von SUSE aufgenommen
-
#96
Neue Updates von SUSE aufgenommen
-
#95
Neue Updates von Ubuntu aufgenommen
References
-
Kernel CVE Announce Mailingliste
https://lore.kernel.org/linux-cve-announce/
-
Linux Kernel CVE Announcement CVE-2021-4454
https://lore.kernel.org/linux-cve-announce/2025032716-CVE-2021-4454-f4a4@gregkh/
-
Linux Kernel CVE Announcement CVE-2022-49738
https://lore.kernel.org/linux-cve-announce/2025032756-CVE-2022-49738-c2ef@gregkh/
-
Linux Kernel CVE Announcement CVE-2022-49739
https://lore.kernel.org/linux-cve-announce/2025032756-CVE-2022-49739-a93e@gregkh/
-
Linux Kernel CVE Announcement CVE-2022-49740
https://lore.kernel.org/linux-cve-announce/2025032757-CVE-2022-49740-7f6e@gregkh/
-
Linux Kernel CVE Announcement CVE-2022-49741
https://lore.kernel.org/linux-cve-announce/2025032757-CVE-2022-49741-65a7@gregkh/
-
Linux Kernel CVE Announcement CVE-2022-49742
https://lore.kernel.org/linux-cve-announce/2025032757-CVE-2022-49742-e3d5@gregkh/
-
Linux Kernel CVE Announcement CVE-2022-49743
https://lore.kernel.org/linux-cve-announce/2025032758-CVE-2022-49743-a049@gregkh/
-
Linux Kernel CVE Announcement CVE-2022-49744
https://lore.kernel.org/linux-cve-announce/2025032758-CVE-2022-49744-8c5a@gregkh/
-
Linux Kernel CVE Announcement CVE-2022-49745
https://lore.kernel.org/linux-cve-announce/2025032758-CVE-2022-49745-903a@gregkh/
-
Linux Kernel CVE Announcement CVE-2022-49746
https://lore.kernel.org/linux-cve-announce/2025032758-CVE-2022-49746-251b@gregkh/
-
Linux Kernel CVE Announcement CVE-2022-49747
https://lore.kernel.org/linux-cve-announce/2025032759-CVE-2022-49747-f361@gregkh/
-
Linux Kernel CVE Announcement CVE-2022-49748
https://lore.kernel.org/linux-cve-announce/2025032759-CVE-2022-49748-4658@gregkh/
-
Linux Kernel CVE Announcement CVE-2022-49749
https://lore.kernel.org/linux-cve-announce/2025032759-CVE-2022-49749-ed85@gregkh/
-
Linux Kernel CVE Announcement CVE-2022-49750
https://lore.kernel.org/linux-cve-announce/2025032700-CVE-2022-49750-743d@gregkh/
-
Linux Kernel CVE Announcement CVE-2022-49751
https://lore.kernel.org/linux-cve-announce/2025032700-CVE-2022-49751-bf8f@gregkh/
-
Linux Kernel CVE Announcement CVE-2022-49752
https://lore.kernel.org/linux-cve-announce/2025032700-CVE-2022-49752-19a3@gregkh/
-
Linux Kernel CVE Announcement CVE-2022-49753
https://lore.kernel.org/linux-cve-announce/2025032701-CVE-2022-49753-d1ce@gregkh/
-
Linux Kernel CVE Announcement CVE-2022-49754
https://lore.kernel.org/linux-cve-announce/2025032701-CVE-2022-49754-cc36@gregkh/
-
Linux Kernel CVE Announcement CVE-2022-49755
https://lore.kernel.org/linux-cve-announce/2025032701-CVE-2022-49755-dfb6@gregkh/
-
Linux Kernel CVE Announcement CVE-2022-49756
https://lore.kernel.org/linux-cve-announce/2025032701-CVE-2022-49756-7fd9@gregkh/
-
Linux Kernel CVE Announcement CVE-2022-49757
https://lore.kernel.org/linux-cve-announce/2025032702-CVE-2022-49757-a990@gregkh/
-
Linux Kernel CVE Announcement CVE-2022-49758
https://lore.kernel.org/linux-cve-announce/2025032702-CVE-2022-49758-10e5@gregkh/
-
Linux Kernel CVE Announcement CVE-2022-49759
https://lore.kernel.org/linux-cve-announce/2025032702-CVE-2022-49759-5392@gregkh/
-
Linux Kernel CVE Announcement CVE-2022-49760
https://lore.kernel.org/linux-cve-announce/2025032703-CVE-2022-49760-97be@gregkh/
-
Linux Kernel CVE Announcement CVE-2022-49761
https://lore.kernel.org/linux-cve-announce/2025032703-CVE-2022-49761-9b1e@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-52928
https://lore.kernel.org/linux-cve-announce/2025032718-CVE-2023-52928-e380@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-52929
https://lore.kernel.org/linux-cve-announce/2025032719-CVE-2023-52929-7900@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-52930
https://lore.kernel.org/linux-cve-announce/2025032719-CVE-2023-52930-4bbc@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-52931
https://lore.kernel.org/linux-cve-announce/2025032719-CVE-2023-52931-593f@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-52932
https://lore.kernel.org/linux-cve-announce/2025032720-CVE-2023-52932-434b@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-52933
https://lore.kernel.org/linux-cve-announce/2025032720-CVE-2023-52933-f292@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-52934
https://lore.kernel.org/linux-cve-announce/2025032720-CVE-2023-52934-bd3c@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-52935
https://lore.kernel.org/linux-cve-announce/2025032720-CVE-2023-52935-1c3c@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-52936
https://lore.kernel.org/linux-cve-announce/2025032721-CVE-2023-52936-d459@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-52937
https://lore.kernel.org/linux-cve-announce/2025032721-CVE-2023-52937-605d@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-52938
https://lore.kernel.org/linux-cve-announce/2025032721-CVE-2023-52938-ee34@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-52939
https://lore.kernel.org/linux-cve-announce/2025032722-CVE-2023-52939-8bb1@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-52940
https://lore.kernel.org/linux-cve-announce/2025032722-CVE-2023-52940-2e53@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-52941
https://lore.kernel.org/linux-cve-announce/2025032722-CVE-2023-52941-7c12@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-52942
https://lore.kernel.org/linux-cve-announce/2025032723-CVE-2023-52942-6a3c@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-52973
https://lore.kernel.org/linux-cve-announce/2025032703-CVE-2023-52973-a993@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-52974
https://lore.kernel.org/linux-cve-announce/2025032704-CVE-2023-52974-0aa2@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-52975
https://lore.kernel.org/linux-cve-announce/2025032704-CVE-2023-52975-155c@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-52976
https://lore.kernel.org/linux-cve-announce/2025032704-CVE-2023-52976-eda3@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-52977
https://lore.kernel.org/linux-cve-announce/2025032704-CVE-2023-52977-f91d@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-52978
https://lore.kernel.org/linux-cve-announce/2025032705-CVE-2023-52978-6a05@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-52979
https://lore.kernel.org/linux-cve-announce/2025032705-CVE-2023-52979-ca3f@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-52980
https://lore.kernel.org/linux-cve-announce/2025032705-CVE-2023-52980-0fea@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-52981
https://lore.kernel.org/linux-cve-announce/2025032706-CVE-2023-52981-070c@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-52982
https://lore.kernel.org/linux-cve-announce/2025032706-CVE-2023-52982-7291@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-52983
https://lore.kernel.org/linux-cve-announce/2025032706-CVE-2023-52983-4a16@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-52984
https://lore.kernel.org/linux-cve-announce/2025032707-CVE-2023-52984-19ad@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-52985
https://lore.kernel.org/linux-cve-announce/2025032707-CVE-2023-52985-3f52@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-52986
https://lore.kernel.org/linux-cve-announce/2025032707-CVE-2023-52986-91fe@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-52987
https://lore.kernel.org/linux-cve-announce/2025032707-CVE-2023-52987-bcc0@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-52988
https://lore.kernel.org/linux-cve-announce/2025032708-CVE-2023-52988-5520@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-52989
https://lore.kernel.org/linux-cve-announce/2025032708-CVE-2023-52989-1b68@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-52990
https://lore.kernel.org/linux-cve-announce/2025032708-CVE-2023-52990-befd@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-52991
https://lore.kernel.org/linux-cve-announce/2025032709-CVE-2023-52991-6358@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-52992
https://lore.kernel.org/linux-cve-announce/2025032709-CVE-2023-52992-bf46@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-52993
https://lore.kernel.org/linux-cve-announce/2025032709-CVE-2023-52993-3697@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-52994
https://lore.kernel.org/linux-cve-announce/2025032710-CVE-2023-52994-5336@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-52995
https://lore.kernel.org/linux-cve-announce/2025032710-CVE-2023-52995-c28f@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-52996
https://lore.kernel.org/linux-cve-announce/2025032710-CVE-2023-52996-7c1f@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-52997
https://lore.kernel.org/linux-cve-announce/2025032710-CVE-2023-52997-dbca@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-52998
https://lore.kernel.org/linux-cve-announce/2025032711-CVE-2023-52998-0671@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-52999
https://lore.kernel.org/linux-cve-announce/2025032711-CVE-2023-52999-e28e@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-53000
https://lore.kernel.org/linux-cve-announce/2025032711-CVE-2023-53000-fded@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-53001
https://lore.kernel.org/linux-cve-announce/2025032712-CVE-2023-53001-f28f@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-53002
https://lore.kernel.org/linux-cve-announce/2025032712-CVE-2023-53002-1f76@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-53003
https://lore.kernel.org/linux-cve-announce/2025032712-CVE-2023-53003-8256@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-53004
https://lore.kernel.org/linux-cve-announce/2025032713-CVE-2023-53004-e58b@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-53005
https://lore.kernel.org/linux-cve-announce/2025032713-CVE-2023-53005-9bf0@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-53006
https://lore.kernel.org/linux-cve-announce/2025032713-CVE-2023-53006-209f@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-53007
https://lore.kernel.org/linux-cve-announce/2025032713-CVE-2023-53007-6ed4@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-53008
https://lore.kernel.org/linux-cve-announce/2025032714-CVE-2023-53008-415c@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-53009
https://lore.kernel.org/linux-cve-announce/2025032714-CVE-2023-53009-82cd@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-53010
https://lore.kernel.org/linux-cve-announce/2025032714-CVE-2023-53010-56af@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-53011
https://lore.kernel.org/linux-cve-announce/2025032715-CVE-2023-53011-6f98@gregkh/