Summary
Ein Angreifer kann mehrere Schwachstellen im Linux-Kernel ausnutzen, um nicht näher spezifizierte Angriffe durchzuführen, die möglicherweise zu einer Denial-of-Service- Bedingung führen oder eine Speicherbeschädigung verursachen können.
Product
Der Kernel stellt den Kern des Linux Betriebssystems dar.
Vulnerabilities 121
-
Critical 9.8
ceph: fix potential use-after-free bug when trimming caps
In the Linux kernel, the following vulnerability has been resolved: ceph: fix potential use-after-free bug when trimming caps When trimming the caps and just after the 'session->s_cap_lock' is released in ceph_iterate_session_caps() the cap maybe removed by a…
-
Critical 9.8
btrfs: fix double free of qgroup record after failure to add delayed ref head
In the Linux kernel, the following vulnerability has been resolved: btrfs: fix double free of qgroup record after failure to add delayed ref head In the previous code it was possible to incur into a double kfree() scenario when calling add_delayed_ref_head().…
-
Critical 9.8
crypto: aead - Fix reqsize handling
In the Linux kernel, the following vulnerability has been resolved: crypto: aead - Fix reqsize handling Commit afddce13ce81d ("crypto: api - Add reqsize to crypto_alg") introduced cra_reqsize field in crypto_alg struct to replace type specific reqsize fields.…
-
Critical 9.3
x86/sev: Make enc_dec_hypercall() accept a size instead of npages
In the Linux kernel, the following vulnerability has been resolved: x86/sev: Make enc_dec_hypercall() accept a size instead of npages enc_dec_hypercall() accepted a page count instead of a size, which forced its callers to round up. As a result, non-page alig…
-
High 8.8
ice: fix wrong fallback logic for FDIR
In the Linux kernel, the following vulnerability has been resolved: ice: fix wrong fallback logic for FDIR When adding a FDIR filter, if ice_vc_fdir_set_irq_ctx returns failure, the inserted fdir entry will not be removed and if ice_vc_fdir_write_fltr returns…
-
High 8.6
mips: bmips: BCM6358: disable RAC flush for TP1
In the Linux kernel, the following vulnerability has been resolved: mips: bmips: BCM6358: disable RAC flush for TP1 RAC flush causes kernel panics on BCM6358 with EHCI/OHCI when booting from TP1: [ 3.881739] usb 1-1: new high-speed USB device number 2 using e…
-
High 8.2
wifi: mt76: wed: use proper wed reference in mt76 wed driver callabacks
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: wed: use proper wed reference in mt76 wed driver callabacks MT7996 driver can use both wed and wed_hif2 devices to offload traffic from/to the wireless NIC. In the current codebas…
-
High 8.2
fs/ntfs3: Initialize allocated memory before use
In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Initialize allocated memory before use KMSAN reports: Multiple uninitialized values detected: - KMSAN: uninit-value in ntfs_read_hdr (3) - KMSAN: uninit-value in bcmp (3) Memory is …
-
High 7.8
mrp: introduce active flags to prevent UAF when applicant uninit
In the Linux kernel, the following vulnerability has been resolved: mrp: introduce active flags to prevent UAF when applicant uninit The caller of del_timer_sync must prevent restarting of the timer, If we have no this synchronization, there is a small probab…
-
High 7.8
fs/ntfs3: Fix slab-out-of-bounds read in hdr_delete_de()
In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Fix slab-out-of-bounds read in hdr_delete_de() Here is a BUG report from syzbot: BUG: KASAN: slab-out-of-bounds in hdr_delete_de+0xe0/0x150 fs/ntfs3/index.c:806 Read of size 1684296…
-
High 7.8
SMB3: Add missing locks to protect deferred close file list
In the Linux kernel, the following vulnerability has been resolved: SMB3: Add missing locks to protect deferred close file list cifs_del_deferred_close function has a critical section which modifies the deferred close file list. We must acquire deferred_lock …
-
High 7.8
thermal: of: fix double-free on unregistration
In the Linux kernel, the following vulnerability has been resolved: thermal: of: fix double-free on unregistration Since commit 3d439b1a2ad3 ("thermal/core: Alloc-copy-free the thermal zone parameters structure"), thermal_zone_device_register() allocates a co…
-
High 7.8
net: fix stack overflow when LRO is disabled for virtual interfaces
In the Linux kernel, the following vulnerability has been resolved: net: fix stack overflow when LRO is disabled for virtual interfaces When the virtual interface's feature is updated, it synchronizes the updated feature for its own lower interface. This prop…
-
High 7.8
sched/psi: use kernfs polling functions for PSI trigger polling
In the Linux kernel, the following vulnerability has been resolved: sched/psi: use kernfs polling functions for PSI trigger polling Destroying psi trigger in cgroup_file_release causes UAF issues when a cgroup is removed from under a polling process. This is …
-
High 7.8
opp: Fix use-after-free in lazy_opp_tables after probe deferral
In the Linux kernel, the following vulnerability has been resolved: opp: Fix use-after-free in lazy_opp_tables after probe deferral When dev_pm_opp_of_find_icc_paths() in _allocate_opp_table() returns -EPROBE_DEFER, the opp_table is freed again, to wait until…
-
High 7.8
netfilter: nf_tables: fix underflow in chain reference counter
In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: fix underflow in chain reference counter Set element addition error path decrements reference counter on chains twice: once on element release and again via nft_data_rel…
-
High 7.8
powerpc/64s: Fix VAS mm use after free
In the Linux kernel, the following vulnerability has been resolved: powerpc/64s: Fix VAS mm use after free The refcount on mm is dropped before the coprocessor is detached.
-
High 7.8
ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events
In the Linux kernel, the following vulnerability has been resolved: ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events The DSP event handling code in hwdep_read() could write more bytes to the user buffer than requested, when a user provide…
-
High 7.8
spi: ch341: fix out-of-bounds memory access in ch341_transfer_one
In the Linux kernel, the following vulnerability has been resolved: spi: ch341: fix out-of-bounds memory access in ch341_transfer_one Discovered by Atuin - Automated Vulnerability Discovery Engine. The 'len' variable is calculated as 'min(32, trans->len + 1)'…
-
High 7.8
coresight: tmc: add the handle of the event to the path
In the Linux kernel, the following vulnerability has been resolved: coresight: tmc: add the handle of the event to the path The handle is essential for retrieving the AUX_EVENT of each CPU and is required in perf mode. It has been added to the coresight_path …
-
High 7.8
RDMA/rxe: Fix null deref on srq->rq.queue after resize failure
In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix null deref on srq->rq.queue after resize failure A NULL pointer dereference can occur in rxe_srq_chk_attr() when ibv_modify_srq() is invoked twice in succession under certain er…
-
High 7.8
crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id
In the Linux kernel, the following vulnerability has been resolved: crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id Use check_add_overflow() to guard against potential integer overflows when adding the binary blob lengths and the size…
-
High 7.8
accel/ivpu: Fix page fault in ivpu_bo_unbind_all_bos_from_context()
In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Fix page fault in ivpu_bo_unbind_all_bos_from_context() Don't add BO to the vdev->bo_list in ivpu_gem_create_object(). When failure happens inside drm_gem_shmem_create(), the BO i…
-
High 7.5
wifi: ath10k: Delay the unmapping of the buffer
In the Linux kernel, the following vulnerability has been resolved: wifi: ath10k: Delay the unmapping of the buffer On WCN3990, we are seeing a rare scenario where copy engine hardware is sending a copy complete interrupt to the host driver while still proces…
-
High 7.5
udplite: Fix NULL pointer dereference in __sk_mem_raise_allocated().
In the Linux kernel, the following vulnerability has been resolved: udplite: Fix NULL pointer dereference in __sk_mem_raise_allocated(). syzbot reported [0] a null-ptr-deref in sk_get_rmem0() while using IPPROTO_UDPLITE (0x88): 14:25:52 executing program 1: r…
-
High 7.5
NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid
In the Linux kernel, the following vulnerability has been resolved: NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid Fixes a crash when layout is null during this call stack: write_inode -> nfs4_write_inode -> pnfs_layoutcommit_inode…
-
High 7.5
ntfs3: init run lock for extend inode
In the Linux kernel, the following vulnerability has been resolved: ntfs3: init run lock for extend inode After setting the inode mode of $Extend to a regular file, executing the truncate system call will enter the do_truncate() routine, causing the run_lock …
-
High 7.1
wifi: mt76: mt7921s: fix slab-out-of-bounds access in sdio host
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921s: fix slab-out-of-bounds access in sdio host SDIO may need addtional 511 bytes to align bus operation. If the tailroom of this skb is not big enough, we would access invali…
-
Medium 5.5
Kernel: xfrm: out-of-bounds read of xfrma_mtimer_thresh nlattr
A flaw was found in the Linux kernel’s IP framework for transforming packets (XFRM subsystem). This issue may allow a malicious user with CAP_NET_ADMIN privileges to cause a 4 byte out-of-bounds read of XFRMA_MTIMER_THRESH when parsing netlink attributes, lea…
-
Unscored —
ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
In the Linux kernel, the following vulnerability has been resolved: ASoC: da7219: Fix an error handling path in da7219_register_dai_clks() If clk_hw_register() fails, the corresponding clk should not be unregistered. To handle errors from loops, clean up part…
-
Unscored —
selinux: enable use of both GFP_KERNEL and GFP_ATOMIC in convert_context()
In the Linux kernel, the following vulnerability has been resolved: selinux: enable use of both GFP_KERNEL and GFP_ATOMIC in convert_context() The following warning was triggered on a hardware environment: SELinux: Converting 162 SID table entries... BUG: sle…
-
Unscored —
vdpa_sim: fix possible memory leak in vdpasim_net_init() and vdpasim_blk_init()
In the Linux kernel, the following vulnerability has been resolved: vdpa_sim: fix possible memory leak in vdpasim_net_init() and vdpasim_blk_init() Inject fault while probing module, if device_register() fails in vdpasim_net_init() or vdpasim_blk_init(), but …
-
Unscored —
soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
In the Linux kernel, the following vulnerability has been resolved: soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe() There are two refcount leak bugs in qcom_smsm_probe(): (1) The 'local_node' is escaped out from for_each_child_of_node() as the br…
-
Unscored —
USB: gadget: Fix use-after-free during usb config switch
In the Linux kernel, the following vulnerability has been resolved: USB: gadget: Fix use-after-free during usb config switch In the process of switching USB config from rndis to other config, if the hardware does not support the ->pullup callback, or the hard…
-
Unscored —
io_uring/rw: defer fsnotify calls to task context
In the Linux kernel, the following vulnerability has been resolved: io_uring/rw: defer fsnotify calls to task context We can't call these off the kiocb completion as that might be off soft/hard irq context. Defer the calls to when we process the task_work for…
-
Unscored —
net/ieee802154: don't warn zero-sized raw_sendmsg()
In the Linux kernel, the following vulnerability has been resolved: net/ieee802154: don't warn zero-sized raw_sendmsg() syzbot is hitting skb_assert_len() warning at __dev_queue_xmit() [1], for PF_IEEE802154 socket's zero-sized raw_sendmsg() request is hittin…
-
Unscored —
virtio-crypto: fix memory leak in virtio_crypto_alg_skcipher_close_session()
In the Linux kernel, the following vulnerability has been resolved: virtio-crypto: fix memory leak in virtio_crypto_alg_skcipher_close_session() 'vc_ctrl_req' is alloced in virtio_crypto_alg_skcipher_close_session(), and should be freed in the invalid ctrl_st…
-
Unscored —
HSI: ssi_protocol: fix potential resource leak in ssip_pn_open()
In the Linux kernel, the following vulnerability has been resolved: HSI: ssi_protocol: fix potential resource leak in ssip_pn_open() ssip_pn_open() claims the HSI client's port with hsi_claim_port(). When hsi_register_port_event() gets some error and returns …
-
Unscored —
wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
In the Linux kernel, the following vulnerability has been resolved: wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg() syzbot is reporting uninit value at ath9k_htc_rx_msg() [1], for ioctl(USB_RAW_IOCTL_EP_WRITE) can call ath9k_hif_usb_rx_stream() wi…
-
Unscored —
ice: set tx_tstamps when creating new Tx rings via ethtool
In the Linux kernel, the following vulnerability has been resolved: ice: set tx_tstamps when creating new Tx rings via ethtool When the user changes the number of queues via ethtool, the driver allocates new rings. This allocation did not initialize tx_tstamp…
-
Unscored —
net: ethernet: mtk_eth_soc: fix possible memory leak in mtk_probe()
In the Linux kernel, the following vulnerability has been resolved: net: ethernet: mtk_eth_soc: fix possible memory leak in mtk_probe() If mtk_wed_add_hw() has been called, mtk_wed_exit() needs be called in error path or removing module to free the memory all…
-
Unscored —
ping: Fix potentail NULL deref for /proc/net/icmp.
In the Linux kernel, the following vulnerability has been resolved: ping: Fix potentail NULL deref for /proc/net/icmp. After commit dbca1596bbb0 ("ping: convert to RCU lookups, get rid of rwlock"), we use RCU for ping sockets, but we should use spinlock for /…
-
Unscored —
arm64: mm: fix VA-range sanity check
In the Linux kernel, the following vulnerability has been resolved: arm64: mm: fix VA-range sanity check Both create_mapping_noalloc() and update_mapping_prot() sanity-check their 'virt' parameter, but the check itself doesn't make much sense. The condition u…
-
Unscored —
drm/msm/dpu: Disallow unallocated resources to be returned
In the Linux kernel, the following vulnerability has been resolved: drm/msm/dpu: Disallow unallocated resources to be returned In the event that the topology requests resources that have not been created by the system (because they are typically not represent…
-
Unscored —
wifi: cfg80211: ocb: don't leave if not joined
In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: ocb: don't leave if not joined If there's no OCB state, don't ask the driver/mac80211 to leave, since that's just confusing. Since set/clear the chandef state, that's a simple…
-
Unscored —
PCI/DOE: Fix memory leak with CONFIG_DEBUG_OBJECTS=y
In the Linux kernel, the following vulnerability has been resolved: PCI/DOE: Fix memory leak with CONFIG_DEBUG_OBJECTS=y After a pci_doe_task completes, its work_struct needs to be destroyed to avoid a memory leak with CONFIG_DEBUG_OBJECTS=y.
-
Unscored —
ionic: remove WARN_ON to prevent panic_on_warn
In the Linux kernel, the following vulnerability has been resolved: ionic: remove WARN_ON to prevent panic_on_warn Remove unnecessary early code development check and the WARN_ON that it uses. The irq alloc and free paths have long been cleaned up and this ch…
-
Unscored —
net: ipv4: fix one memleak in __inet_del_ifa()
In the Linux kernel, the following vulnerability has been resolved: net: ipv4: fix one memleak in __inet_del_ifa() I got the below warning when do fuzzing test: unregister_netdevice: waiting for bond0 to become free. Usage count = 2 It can be repoduced via: i…
-
Unscored —
hwrng: virtio - Fix race on data_avail and actual data
In the Linux kernel, the following vulnerability has been resolved: hwrng: virtio - Fix race on data_avail and actual data The virtio rng device kicks off a new entropy request whenever the data available reaches zero. When a new request occurs at the end of …
-
Unscored —
net/mlx5e: TC, Fix internal port memory leak
In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: TC, Fix internal port memory leak The flow rule can be splited, and the extra post_act rules are added to post_act table. It's possible to trigger memleak when the rule forwards pa…
-
Unscored —
net: hns3: fix deadlock issue when externel_lb and reset are executed together
In the Linux kernel, the following vulnerability has been resolved: net: hns3: fix deadlock issue when externel_lb and reset are executed together When externel_lb and reset are executed together, a deadlock may occur: [ 3147.217009] INFO: task kworker/u321:0…
-
Unscored —
staging: r8712: Fix memory leak in _r8712_init_xmit_priv()
In the Linux kernel, the following vulnerability has been resolved: staging: r8712: Fix memory leak in _r8712_init_xmit_priv() In the above mentioned routine, memory is allocated in several places. If the first succeeds and a later one fails, the routine will…
-
Unscored —
btrfs: fix assertion of exclop condition when starting balance
In the Linux kernel, the following vulnerability has been resolved: btrfs: fix assertion of exclop condition when starting balance Balance as exclusive state is compatible with paused balance and device add, which makes some things more complicated. The asser…
-
Unscored —
RDMA/core: Fix GID entry ref leak when create_ah fails
In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Fix GID entry ref leak when create_ah fails If AH create request fails, release sgid_attr to avoid GID entry referrence leak reported while releasing GID table
-
Unscored —
binder: fix memory leak in binder_init()
In the Linux kernel, the following vulnerability has been resolved: binder: fix memory leak in binder_init() In binder_init(), the destruction of binder_alloc_shrinker_init() is not performed in the wrong path, which will cause memory leaks. So this commit in…
-
Unscored —
af_unix: Fix data-race around unix_tot_inflight.
In the Linux kernel, the following vulnerability has been resolved: af_unix: Fix data-race around unix_tot_inflight. unix_tot_inflight is changed under spin_lock(unix_gc_lock), but unix_release_sock() reads it locklessly. Let's use READ_ONCE() for unix_tot_in…
-
Unscored —
vmci_host: fix a race condition in vmci_host_poll() causing GPF
In the Linux kernel, the following vulnerability has been resolved: vmci_host: fix a race condition in vmci_host_poll() causing GPF During fuzzing, a general protection fault is observed in vmci_host_poll(). general protection fault, probably for non-canonica…
-
Unscored —
virtio_vdpa: build affinity masks conditionally
In the Linux kernel, the following vulnerability has been resolved: virtio_vdpa: build affinity masks conditionally We try to build affinity mask via create_affinity_masks() unconditionally which may lead several issues: - the affinity mask is not used for pa…
-
Unscored —
i2c: cadence: cdns_i2c_master_xfer(): Fix runtime PM leak on error path
In the Linux kernel, the following vulnerability has been resolved: i2c: cadence: cdns_i2c_master_xfer(): Fix runtime PM leak on error path The cdns_i2c_master_xfer() function gets a runtime PM reference when the function is entered. This reference is release…
-
Unscored —
ACPICA: ACPICA: check null return of ACPI_ALLOCATE_ZEROED in acpi_db_display_objects
In the Linux kernel, the following vulnerability has been resolved: ACPICA: ACPICA: check null return of ACPI_ALLOCATE_ZEROED in acpi_db_display_objects ACPICA commit 0d5f467d6a0ba852ea3aad68663cbcbd43300fd4 ACPI_ALLOCATE_ZEROED may fails, object_info might b…
-
Unscored —
scsi: mpi3mr: Fix an issue found by KASAN
In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Fix an issue found by KASAN Write only correct size (32 instead of 64 bytes).
-
Unscored —
interconnect: Fix locking for runpm vs reclaim
In the Linux kernel, the following vulnerability has been resolved: interconnect: Fix locking for runpm vs reclaim For cases where icc_bw_set() can be called in callbaths that could deadlock against shrinker/reclaim, such as runpm resume, we need to decouple …
-
Unscored —
scsi: qla2xxx: Check valid rport returned by fc_bsg_to_rport()
In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Check valid rport returned by fc_bsg_to_rport() Klocwork reported warning of rport maybe NULL and will be dereferenced. rport returned by call to fc_bsg_to_rport() could be NUL…
-
Unscored —
net/mlx5: Devcom, fix error flow in mlx5_devcom_register_device
In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Devcom, fix error flow in mlx5_devcom_register_device In case devcom allocation is failed, mlx5 is always freeing the priv. However, this priv might have been allocated by a differe…
-
Unscored —
wifi: ath12k: Fix memory leak in rx_desc and tx_desc
In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Fix memory leak in rx_desc and tx_desc Currently when ath12k_dp_cc_desc_init() is called we allocate memory to rx_descs and tx_descs. In ath12k_dp_cc_cleanup(), during descripto…
-
Unscored —
powerpc/pseries: fix possible memory leak in ibmebus_bus_init()
In the Linux kernel, the following vulnerability has been resolved: powerpc/pseries: fix possible memory leak in ibmebus_bus_init() If device_register() returns error in ibmebus_bus_init(), name of kobject which is allocated in dev_set_name() called in device…
-
Unscored —
drm/msm/hdmi: Add missing check for alloc_ordered_workqueue
In the Linux kernel, the following vulnerability has been resolved: drm/msm/hdmi: Add missing check for alloc_ordered_workqueue Add check for the return value of alloc_ordered_workqueue as it may return NULL pointer and cause NULL pointer dereference in `hdmi…
-
Unscored —
dmaengine: sf-pdma: pdma_desc memory leak fix
In the Linux kernel, the following vulnerability has been resolved: dmaengine: sf-pdma: pdma_desc memory leak fix Commit b2cc5c465c2c ("dmaengine: sf-pdma: Add multithread support for a DMA channel") changed sf_pdma_prep_dma_memcpy() to unconditionally alloca…
-
Unscored —
ext4: set goal start correctly in ext4_mb_normalize_request
In the Linux kernel, the following vulnerability has been resolved: ext4: set goal start correctly in ext4_mb_normalize_request We need to set ac_g_ex to notify the goal start used in ext4_mb_find_by_goal. Set ac_g_ex instead of ac_f_ex in ext4_mb_normalize_r…
-
Unscored —
ALSA: usb-audio: Fix potential memory leaks at error path for UMP open
In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix potential memory leaks at error path for UMP open The allocation and initialization errors at alloc_midi_urbs() that is called at MIDI 2.0 / UMP device are supposed to be…
-
Unscored —
btrfs: fix race between balance and cancel/pause
In the Linux kernel, the following vulnerability has been resolved: btrfs: fix race between balance and cancel/pause Syzbot reported a panic that looks like this: assertion failed: fs_info->exclusive_operation == BTRFS_EXCLOP_BALANCE_PAUSED, in fs/btrfs/ioctl…
-
Unscored —
KVM: Destroy target device if coalesced MMIO unregistration fails
In the Linux kernel, the following vulnerability has been resolved: KVM: Destroy target device if coalesced MMIO unregistration fails Destroy and free the target coalesced MMIO device if unregistering said device fails. As clearly noted in the code, kvm_io_bu…
-
Unscored —
wifi: rsi: Do not configure WoWlan in shutdown hook if not enabled
In the Linux kernel, the following vulnerability has been resolved: wifi: rsi: Do not configure WoWlan in shutdown hook if not enabled In case WoWlan was never configured during the operation of the system, the hw->wiphy->wowlan_config will be NULL. rsi_confi…
-
Unscored —
iio: core: Prevent invalid memory access when there is no parent
In the Linux kernel, the following vulnerability has been resolved: iio: core: Prevent invalid memory access when there is no parent Commit 813665564b3d ("iio: core: Convert to use firmware node handle instead of OF node") switched the kind of nodes to use fo…
-
Unscored —
RDMA/rxe: Fix the error "trying to register non-static key in rxe_cleanup_task"
In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix the error "trying to register non-static key in rxe_cleanup_task" In the function rxe_create_qp(), rxe_qp_from_init() is called to initialize qp, internally things like rxe_init…
-
Unscored —CVE-2023-54029 Rejected
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
-
Unscored —
io_uring/net: don't overflow multishot recv
In the Linux kernel, the following vulnerability has been resolved: io_uring/net: don't overflow multishot recv Don't allow overflowing multishot recv CQEs, it might get out of hand, hurt performance, and in the worst case scenario OOM the task.
-
Unscored —
vdpa: Add queue index attr to vdpa_nl_policy for nlattr length check
In the Linux kernel, the following vulnerability has been resolved: vdpa: Add queue index attr to vdpa_nl_policy for nlattr length check The vdpa_nl_policy structure is used to validate the nlattr when parsing the incoming nlmsg. It will ensure the attribute …
-
Unscored —
btrfs: fix race when deleting quota root from the dirty cow roots list
In the Linux kernel, the following vulnerability has been resolved: btrfs: fix race when deleting quota root from the dirty cow roots list When disabling quotas we are deleting the quota root from the list fs_info->dirty_cowonly_roots without taking the lock …
-
Unscored —
bpf: fix a memory leak in the LRU and LRU_PERCPU hash maps
In the Linux kernel, the following vulnerability has been resolved: bpf: fix a memory leak in the LRU and LRU_PERCPU hash maps The LRU and LRU_PERCPU maps allocate a new element on update before locking the target hash table bucket. Right after that the maps …
-
Unscored —
iommufd: Make sure to zero vfio_iommu_type1_info before copying to user
In the Linux kernel, the following vulnerability has been resolved: iommufd: Make sure to zero vfio_iommu_type1_info before copying to user Missed a zero initialization here. Most of the struct is filled with a copy_from_user(), however minsz for that copy is…
-
Unscored —
wifi: rtl8xxxu: Fix memory leaks with RTL8723BU, RTL8192EU
In the Linux kernel, the following vulnerability has been resolved: wifi: rtl8xxxu: Fix memory leaks with RTL8723BU, RTL8192EU The wifi + bluetooth combo chip RTL8723BU can leak memory (especially?) when it's connected to a bluetooth audio device. The busy bl…
-
Unscored —
ice: prevent NULL pointer deref during reload
In the Linux kernel, the following vulnerability has been resolved: ice: prevent NULL pointer deref during reload Calling ethtool during reload can lead to call trace, because VSI isn't configured for some time, but netdev is alive. To fix it add rtnl lock fo…
-
Unscored —
Bluetooth: hci_conn: return ERR_PTR instead of NULL when there is no link
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_conn: return ERR_PTR instead of NULL when there is no link hci_connect_sco currently returns NULL when there is no link (i.e. when hci_conn_link() returns NULL). sco_connect() …
-
Unscored —
can: j1939: j1939_tp_tx_dat_new(): fix out-of-bounds memory access
In the Linux kernel, the following vulnerability has been resolved: can: j1939: j1939_tp_tx_dat_new(): fix out-of-bounds memory access In the j1939_tp_tx_dat_new() function, an out-of-bounds memory access could occur during the memcpy() operation if the size …
-
Unscored —
io_uring: fix memory leak when removing provided buffers
In the Linux kernel, the following vulnerability has been resolved: io_uring: fix memory leak when removing provided buffers When removing provided buffers, io_buffer structs are not being disposed of, leading to a memory leak. They can't be freed individuall…
-
Unscored —
ALSA: wavefront: Fix integer overflow in sample size validation
In the Linux kernel, the following vulnerability has been resolved: ALSA: wavefront: Fix integer overflow in sample size validation The wavefront_send_sample() function has an integer overflow issue when validating sample size. The header->size field is u32 b…
-
Unscored —
ALSA: hda: cs35l41: Fix NULL pointer dereference in cs35l41_hda_read_acpi()
In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: cs35l41: Fix NULL pointer dereference in cs35l41_hda_read_acpi() The acpi_get_first_physical_node() function can return NULL, in which case the get_device() function also returns N…
-
Unscored —
ALSA: dice: fix buffer overflow in detect_stream_formats()
In the Linux kernel, the following vulnerability has been resolved: ALSA: dice: fix buffer overflow in detect_stream_formats() The function detect_stream_formats() reads the stream_count value directly from a FireWire device without validating it. This can le…
-
Unscored —
block: fix memory leak in __blkdev_issue_zero_pages
In the Linux kernel, the following vulnerability has been resolved: block: fix memory leak in __blkdev_issue_zero_pages Move the fatal signal check before bio_alloc() to prevent a memory leak when BLKDEV_ZERO_KILLABLE is set and a fatal signal is pending. Pre…
-
Unscored —
exfat: fix divide-by-zero in exfat_allocate_bitmap
In the Linux kernel, the following vulnerability has been resolved: exfat: fix divide-by-zero in exfat_allocate_bitmap The variable max_ra_count can be 0 in exfat_allocate_bitmap(), which causes a divide-by-zero error in the subsequent modulo operation (i % m…
-
Unscored —
exfat: fix refcount leak in exfat_find
In the Linux kernel, the following vulnerability has been resolved: exfat: fix refcount leak in exfat_find Fix refcount leaks in `exfat_find` related to `exfat_get_dentry_set`. Function `exfat_get_dentry_set` would increase the reference counter of `es->bh` o…
-
Unscored —
net: vxlan: prevent NULL deref in vxlan_xmit_one
In the Linux kernel, the following vulnerability has been resolved: net: vxlan: prevent NULL deref in vxlan_xmit_one Neither sock4 nor sock6 pointers are guaranteed to be non-NULL in vxlan_xmit_one, e.g. if the iface is brought down. This can lead to the foll…
-
Unscored —
regulator: core: Protect regulator_supply_alias_list with regulator_list_mutex
In the Linux kernel, the following vulnerability has been resolved: regulator: core: Protect regulator_supply_alias_list with regulator_list_mutex regulator_supply_alias_list was accessed without any locking in regulator_supply_alias(), regulator_register_sup…
-
Unscored —
bpf: Fix exclusive map memory leak
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix exclusive map memory leak When excl_prog_hash is 0 and excl_prog_hash_size is non-zero, the map also needs to be freed. Otherwise, the map memory will not be reclaimed, just like the…
-
Unscored —
gfs2: Prevent recursive memory reclaim
In the Linux kernel, the following vulnerability has been resolved: gfs2: Prevent recursive memory reclaim Function new_inode() returns a new inode with inode->i_mapping->gfp_mask set to GFP_HIGHUSER_MOVABLE. This value includes the __GFP_FS flag, so allocati…
-
Unscored —
iomap: allocate s_dio_done_wq for async reads as well
In the Linux kernel, the following vulnerability has been resolved: iomap: allocate s_dio_done_wq for async reads as well Since commit 222f2c7c6d14 ("iomap: always run error completions in user context"), read error completions are deferred to s_dio_done_wq. …
-
Unscored —
btrfs: fix racy bitfield write in btrfs_clear_space_info_full()
In the Linux kernel, the following vulnerability has been resolved: btrfs: fix racy bitfield write in btrfs_clear_space_info_full() From the memory-barriers.txt document regarding memory barrier ordering guarantees: (*) These guarantees do not apply to bitfie…
-
Unscored —
erofs: limit the level of fs stacking for file-backed mounts
In the Linux kernel, the following vulnerability has been resolved: erofs: limit the level of fs stacking for file-backed mounts Otherwise, it could cause potential kernel stack overflow (e.g., EROFS mounting itself).
-
Unscored —
bpf: Check skb->transport_header is set in bpf_skb_check_mtu
In the Linux kernel, the following vulnerability has been resolved: bpf: Check skb->transport_header is set in bpf_skb_check_mtu The bpf_skb_check_mtu helper needs to use skb->transport_header when the BPF_MTU_CHK_SEGS flag is used: bpf_skb_check_mtu(skb, ifi…
-
Unscored —
ocfs2: relax BUG() to ocfs2_error() in __ocfs2_move_extent()
In the Linux kernel, the following vulnerability has been resolved: ocfs2: relax BUG() to ocfs2_error() in __ocfs2_move_extent() In '__ocfs2_move_extent()', relax 'BUG()' to 'ocfs2_error()' just to avoid crashing the whole kernel due to a filesystem corruptio…
-
Unscored —
nbd: defer config unlock in nbd_genl_connect
In the Linux kernel, the following vulnerability has been resolved: nbd: defer config unlock in nbd_genl_connect There is one use-after-free warning when running NBD_CMD_CONNECT and NBD_CLEAR_SOCK: nbd_genl_connect nbd_alloc_and_init_config // config_refs=1 n…
-
Unscored —
macintosh/mac_hid: fix race condition in mac_hid_toggle_emumouse
In the Linux kernel, the following vulnerability has been resolved: macintosh/mac_hid: fix race condition in mac_hid_toggle_emumouse The following warning appears when running syzkaller, and this issue also exists in the mainline code. ------------[ cut here …
-
Unscored —
md: init bioset in mddev_init
In the Linux kernel, the following vulnerability has been resolved: md: init bioset in mddev_init IO operations may be needed before md_run(), such as updating metadata after writing sysfs. Without bioset, this triggers a NULL pointer dereference as below: BU…
-
Unscored —
scsi: smartpqi: Fix device resources accessed after device removal
In the Linux kernel, the following vulnerability has been resolved: scsi: smartpqi: Fix device resources accessed after device removal Correct possible race conditions during device removal. Previously, a scheduled work item to reset a LUN could still execute…
-
Unscored —
nbd: defer config put in recv_work
In the Linux kernel, the following vulnerability has been resolved: nbd: defer config put in recv_work There is one uaf issue in recv_work when running NBD_CLEAR_SOCK and NBD_CMD_RECONFIGURE: nbd_genl_connect // conf_ref=2 (connect and recv_work A) nbd_open /…
-
Unscored —
md: avoid repeated calls to del_gendisk
In the Linux kernel, the following vulnerability has been resolved: md: avoid repeated calls to del_gendisk There is a uaf problem which is found by case 23rdev-lifetime: Oops: general protection fault, probably for non-canonical address 0xdead000000000122 RI…
-
Unscored —
md: fix rcu protection in md_wakeup_thread
In the Linux kernel, the following vulnerability has been resolved: md: fix rcu protection in md_wakeup_thread We attempted to use RCU to protect the pointer 'thread', but directly passed the value when calling md_wakeup_thread(). This means that the RCU poin…
-
Unscored —
perf/x86: Fix NULL event access and potential PEBS record loss
In the Linux kernel, the following vulnerability has been resolved: perf/x86: Fix NULL event access and potential PEBS record loss When intel_pmu_drain_pebs_icl() is called to drain PEBS records, the perf_event_overflow() could be called to process the last P…
-
Unscored —
coresight: ETR: Fix ETR buffer use-after-free issue
In the Linux kernel, the following vulnerability has been resolved: coresight: ETR: Fix ETR buffer use-after-free issue When ETR is enabled as CS_MODE_SYSFS, if the buffer size is changed and enabled again, currently sysfs_buf will point to the newly allocate…
-
Unscored —
ns: initialize ns_list_node for initial namespaces
In the Linux kernel, the following vulnerability has been resolved: ns: initialize ns_list_node for initial namespaces Make sure that the list is always initialized for initial namespaces.
-
Unscored —
bpf: Fix stackmap overflow check in __bpf_get_stackid()
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix stackmap overflow check in __bpf_get_stackid() Syzkaller reported a KASAN slab-out-of-bounds write in __bpf_get_stackid() when copying stack trace data. The issue occurs when the per…
-
Unscored —
wifi: ath11k: fix peer HE MCS assignment
In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix peer HE MCS assignment In ath11k_wmi_send_peer_assoc_cmd(), peer's transmit MCS is sent to firmware as receive MCS while peer's receive MCS sent as transmit MCS, which goes …
-
Unscored —
bpf: Do not let BPF test infra emit invalid GSO types to stack
In the Linux kernel, the following vulnerability has been resolved: bpf: Do not let BPF test infra emit invalid GSO types to stack Yinhao et al. reported that their fuzzer tool was able to trigger a skb_warn_bad_offload() from netif_skb_features() -> gso_feat…
-
Unscored —
ntfs3: Fix uninit buffer allocated by __getname()
In the Linux kernel, the following vulnerability has been resolved: ntfs3: Fix uninit buffer allocated by __getname() Fix uninit errors caused after buffer allocation given to 'de'; by initializing the buffer with zeroes. The fix was found by using KMSAN.
-
Unscored —
ntfs3: fix uninit memory after failed mi_read in mi_format_new
In the Linux kernel, the following vulnerability has been resolved: ntfs3: fix uninit memory after failed mi_read in mi_format_new Fix a KMSAN un-init bug found by syzkaller. ntfs_get_bh() expects a buffer from sb_getblk(), that buffer may not be uptodate. We…
-
Unscored —
wifi: ath12k: Fix MSDU buffer types handling in RX error path
In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Fix MSDU buffer types handling in RX error path Currently, packets received on the REO exception ring from unassociated peers are of MSDU buffer type, while the driver expects l…
-
Unscored —
accel/amdxdna: Fix an integer overflow in aie2_query_ctx_status_array()
In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix an integer overflow in aie2_query_ctx_status_array() The unpublished smatch static checker reported a warning. drivers/accel/amdxdna/aie2_pci.c:904 aie2_query_ctx_status_ar…
-
Unscored —
gpu: host1x: Fix race in syncpt alloc/free
In the Linux kernel, the following vulnerability has been resolved: gpu: host1x: Fix race in syncpt alloc/free Fix race condition between host1x_syncpt_alloc() and host1x_syncpt_put() by using kref_put_mutex() instead of kref_put() + manual mutex locking. Thi…
-
Unscored —
smack: fix bug: unprivileged task can create labels
In the Linux kernel, the following vulnerability has been resolved: smack: fix bug: unprivileged task can create labels If an unprivileged task is allowed to relabel itself (/smack/relabel-self is not empty), it can freely create new labels by writing their n…
-
Unscored —
isdn: mISDN: hfcsusb: fix memory leak in hfcsusb_probe()
In the Linux kernel, the following vulnerability has been resolved: isdn: mISDN: hfcsusb: fix memory leak in hfcsusb_probe() In hfcsusb_probe(), the memory allocated for ctrl_urb gets leaked when setup_instance() fails with an error code. Fix that by freeing …
Revision history
-
#115
Neue Updates von Debian aufgenommen
-
#114
Neue Updates von SUSE aufgenommen
-
#113
Neue Updates von SUSE aufgenommen
-
#112
Neue Updates von Debian aufgenommen
-
#111
Neue Updates von SUSE aufgenommen
-
#110
Neue Updates von SUSE aufgenommen
-
#109
Neue Updates von SUSE aufgenommen
-
#108
Neue Updates von Debian aufgenommen
-
#107
Neue Updates von Red Hat aufgenommen
-
#106
Neue Updates von IBM aufgenommen
-
#105
Neue Updates von SUSE aufgenommen
-
#104
Neue Updates von openSUSE aufgenommen
-
#103
Neue Updates von Ubuntu aufgenommen
-
#102
Neue Updates von Ubuntu aufgenommen
-
#101
Neue Updates von Dell aufgenommen
-
#100
Neue Updates von SUSE aufgenommen
-
#99
Neue Updates von SUSE aufgenommen
-
#98
Neue Updates von SUSE aufgenommen
-
#97
Neue Updates von SUSE aufgenommen
-
#96
Neue Updates von Ubuntu aufgenommen
-
#95
Neue Updates von SUSE aufgenommen
-
#94
Neue Updates von SUSE aufgenommen
-
#93
Neue Updates von Oracle Linux aufgenommen
-
#92
Neue Updates von IBM aufgenommen
-
#91
Neue Updates von Oracle Linux aufgenommen
References
-
Kernel CVE Announce Mailingliste
https://lore.kernel.org/linux-cve-announce/
-
Linux Kernel CVE Announcement CVE-2022-50697
https://lore.kernel.org/linux-cve-announce/2025122415-CVE-2022-50697-6281@gregkh/
-
Linux Kernel CVE Announcement CVE-2022-50698
https://lore.kernel.org/linux-cve-announce/2025122417-CVE-2022-50698-0d67@gregkh/
-
Linux Kernel CVE Announcement CVE-2022-50699
https://lore.kernel.org/linux-cve-announce/2025122417-CVE-2022-50699-ddde@gregkh/
-
Linux Kernel CVE Announcement CVE-2022-50700
https://lore.kernel.org/linux-cve-announce/2025122418-CVE-2022-50700-9cf6@gregkh/
-
Linux Kernel CVE Announcement CVE-2022-50701
https://lore.kernel.org/linux-cve-announce/2025122418-CVE-2022-50701-32f6@gregkh/
-
Linux Kernel CVE Announcement CVE-2022-50702
https://lore.kernel.org/linux-cve-announce/2025122418-CVE-2022-50702-c339@gregkh/
-
Linux Kernel CVE Announcement CVE-2022-50703
https://lore.kernel.org/linux-cve-announce/2025122419-CVE-2022-50703-1c22@gregkh/
-
Linux Kernel CVE Announcement CVE-2022-50704
https://lore.kernel.org/linux-cve-announce/2025122419-CVE-2022-50704-ca2b@gregkh/
-
Linux Kernel CVE Announcement CVE-2022-50705
https://lore.kernel.org/linux-cve-announce/2025122419-CVE-2022-50705-8196@gregkh/
-
Linux Kernel CVE Announcement CVE-2022-50706
https://lore.kernel.org/linux-cve-announce/2025122420-CVE-2022-50706-930a@gregkh/
-
Linux Kernel CVE Announcement CVE-2022-50707
https://lore.kernel.org/linux-cve-announce/2025122420-CVE-2022-50707-8f32@gregkh/
-
Linux Kernel CVE Announcement CVE-2022-50708
https://lore.kernel.org/linux-cve-announce/2025122420-CVE-2022-50708-dfe3@gregkh/
-
Linux Kernel CVE Announcement CVE-2022-50709
https://lore.kernel.org/linux-cve-announce/2025122421-CVE-2022-50709-54af@gregkh/
-
Linux Kernel CVE Announcement CVE-2022-50710
https://lore.kernel.org/linux-cve-announce/2025122421-CVE-2022-50710-3f0d@gregkh/
-
Linux Kernel CVE Announcement CVE-2022-50711
https://lore.kernel.org/linux-cve-announce/2025122421-CVE-2022-50711-30c0@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-53867
https://lore.kernel.org/linux-cve-announce/2025122422-CVE-2023-53867-cb3e@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-53986
https://lore.kernel.org/linux-cve-announce/2025122422-CVE-2023-53986-14c4@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-53987
https://lore.kernel.org/linux-cve-announce/2025122422-CVE-2023-53987-9f08@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-53988
https://lore.kernel.org/linux-cve-announce/2025122423-CVE-2023-53988-7ea3@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-53989
https://lore.kernel.org/linux-cve-announce/2025122423-CVE-2023-53989-1b3b@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-53990
https://lore.kernel.org/linux-cve-announce/2025122423-CVE-2023-53990-b239@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-53991
https://lore.kernel.org/linux-cve-announce/2025122424-CVE-2023-53991-037d@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-53992
https://lore.kernel.org/linux-cve-announce/2025122424-CVE-2023-53992-d45e@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-53993
https://lore.kernel.org/linux-cve-announce/2025122424-CVE-2023-53993-7ec2@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-53994
https://lore.kernel.org/linux-cve-announce/2025122425-CVE-2023-53994-2d1b@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-53995
https://lore.kernel.org/linux-cve-announce/2025122425-CVE-2023-53995-1860@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-53996
https://lore.kernel.org/linux-cve-announce/2025122425-CVE-2023-53996-2c23@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-53997
https://lore.kernel.org/linux-cve-announce/2025122426-CVE-2023-53997-8776@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-53998
https://lore.kernel.org/linux-cve-announce/2025122426-CVE-2023-53998-2282@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-53999
https://lore.kernel.org/linux-cve-announce/2025122426-CVE-2023-53999-57a4@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-54000
https://lore.kernel.org/linux-cve-announce/2025122426-CVE-2023-54000-b0c0@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-54001
https://lore.kernel.org/linux-cve-announce/2025122427-CVE-2023-54001-7e74@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-54002
https://lore.kernel.org/linux-cve-announce/2025122427-CVE-2023-54002-10d8@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-54003
https://lore.kernel.org/linux-cve-announce/2025122427-CVE-2023-54003-01b7@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-54004
https://lore.kernel.org/linux-cve-announce/2025122428-CVE-2023-54004-34a0@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-54005
https://lore.kernel.org/linux-cve-announce/2025122428-CVE-2023-54005-d9ae@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-54006
https://lore.kernel.org/linux-cve-announce/2025122428-CVE-2023-54006-d646@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-54007
https://lore.kernel.org/linux-cve-announce/2025122429-CVE-2023-54007-89b1@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-54008
https://lore.kernel.org/linux-cve-announce/2025122429-CVE-2023-54008-cfde@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-54009
https://lore.kernel.org/linux-cve-announce/2025122429-CVE-2023-54009-38dc@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-54010
https://lore.kernel.org/linux-cve-announce/2025122430-CVE-2023-54010-9ff1@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-54011
https://lore.kernel.org/linux-cve-announce/2025122430-CVE-2023-54011-258c@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-54012
https://lore.kernel.org/linux-cve-announce/2025122430-CVE-2023-54012-a617@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-54013
https://lore.kernel.org/linux-cve-announce/2025122431-CVE-2023-54013-c6e4@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-54014
https://lore.kernel.org/linux-cve-announce/2025122431-CVE-2023-54014-9b8c@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-54015
https://lore.kernel.org/linux-cve-announce/2025122431-CVE-2023-54015-13a3@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-54016
https://lore.kernel.org/linux-cve-announce/2025122432-CVE-2023-54016-522e@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-54017
https://lore.kernel.org/linux-cve-announce/2025122432-CVE-2023-54017-f83d@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-54018
https://lore.kernel.org/linux-cve-announce/2025122432-CVE-2023-54018-0a10@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-54019
https://lore.kernel.org/linux-cve-announce/2025122433-CVE-2023-54019-95e0@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-54020
https://lore.kernel.org/linux-cve-announce/2025122433-CVE-2023-54020-3f2f@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-54021
https://lore.kernel.org/linux-cve-announce/2025122433-CVE-2023-54021-15bf@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-54022
https://lore.kernel.org/linux-cve-announce/2025122434-CVE-2023-54022-ae26@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-54023
https://lore.kernel.org/linux-cve-announce/2025122434-CVE-2023-54023-1300@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-54024
https://lore.kernel.org/linux-cve-announce/2025122434-CVE-2023-54024-30aa@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-54025
https://lore.kernel.org/linux-cve-announce/2025122435-CVE-2023-54025-68db@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-54026
https://lore.kernel.org/linux-cve-announce/2025122435-CVE-2023-54026-123c@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-54027
https://lore.kernel.org/linux-cve-announce/2025122435-CVE-2023-54027-c1a0@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-54028
https://lore.kernel.org/linux-cve-announce/2025122436-CVE-2023-54028-2399@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-54029
https://lore.kernel.org/linux-cve-announce/2025122436-CVE-2023-54029-0d67@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-54030
https://lore.kernel.org/linux-cve-announce/2025122436-CVE-2023-54030-e7f3@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-54031
https://lore.kernel.org/linux-cve-announce/2025122437-CVE-2023-54031-90af@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-54032
https://lore.kernel.org/linux-cve-announce/2025122437-CVE-2023-54032-cb33@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-54033
https://lore.kernel.org/linux-cve-announce/2025122437-CVE-2023-54033-ad11@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-54034
https://lore.kernel.org/linux-cve-announce/2025122438-CVE-2023-54034-3089@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-54035
https://lore.kernel.org/linux-cve-announce/2025122438-CVE-2023-54035-76a5@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-54036
https://lore.kernel.org/linux-cve-announce/2025122438-CVE-2023-54036-ae42@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-54037
https://lore.kernel.org/linux-cve-announce/2025122439-CVE-2023-54037-0d5e@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-54038
https://lore.kernel.org/linux-cve-announce/2025122439-CVE-2023-54038-41bb@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-54039
https://lore.kernel.org/linux-cve-announce/2025122439-CVE-2023-54039-82a4@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-54040
https://lore.kernel.org/linux-cve-announce/2025122440-CVE-2023-54040-83dd@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-54041
https://lore.kernel.org/linux-cve-announce/2025122440-CVE-2023-54041-57f4@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-54042
https://lore.kernel.org/linux-cve-announce/2025122440-CVE-2023-54042-2617@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-68344
https://lore.kernel.org/linux-cve-announce/2025122449-CVE-2025-68344-3af5@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-68345
https://lore.kernel.org/linux-cve-announce/2025122452-CVE-2025-68345-eea0@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-68346
https://lore.kernel.org/linux-cve-announce/2025122453-CVE-2025-68346-10ef@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-68347
https://lore.kernel.org/linux-cve-announce/2025122453-CVE-2025-68347-74dd@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-68348
https://lore.kernel.org/linux-cve-announce/2025122453-CVE-2025-68348-2088@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-68349
https://lore.kernel.org/linux-cve-announce/2025122453-CVE-2025-68349-12d5@gregkh/