Week: 2024-W50

acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl

2024-12-10 CVE-2024-56662

ad7780: fix division by zero in ad7780_write_raw()

2024-12-10 CVE-2024-56567

af_packet: avoid erroring out after sock_init_data() in packet_create()

2024-12-10 CVE-2024-56606

ALSA: 6fire: Release resources at card release

2024-12-10 CVE-2024-53239

ALSA: control: Avoid WARN() for symlink errors

2024-12-10 CVE-2024-56657

ALSA: pcm: Add sanity NULL check for the default mmap fault handler

2024-12-10 CVE-2024-53180

ALSA: usb-audio: Fix out of bounds reads when finding clock sources

2024-12-10 CVE-2024-53150

Apache Subversion: mod_dav_svn denial-of-service via control characters in paths

2024-12-10 CVE-2024-46901

blk-cgroup: Fix UAF in blkcg_unpin_online()

2024-12-10 CVE-2024-56672

block, bfq: fix bfqq uaf in bfq_limit_depth()

2024-12-10 CVE-2024-53166

block: fix uaf for flush rq while iterating tags

2024-12-10 CVE-2024-53170

Bluetooth: btmtk: avoid UAF in btmtk_process_coredump

2024-12-10 CVE-2024-56653

Bluetooth: fix use-after-free in device_for_each_child()

2024-12-10 CVE-2024-53237

Bluetooth: hci_conn: Use disable_delayed_work_sync

2024-12-10 CVE-2024-56591

Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()

2024-12-10 CVE-2024-56605

Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync

2024-12-10 CVE-2024-53208

Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc()

2024-12-10 CVE-2024-56604

bpf, sockmap: Fix race between element replace and close()

2024-12-10 CVE-2024-56664

bpf, sockmap: Several fixes to bpf_msg_pop_data

2024-12-10 CVE-2024-56720

bpf,perf: Fix invalid prog_array access in perf_event_detach_bpf_prog

2024-12-10 CVE-2024-56665

bpf: Call free_htab_elem() after htab_unlock_bucket()

2024-12-10 CVE-2024-56592

bpf: fix OOB devmap writes when deleting elements

2024-12-10 CVE-2024-56615

bpf: Fix UAF via mismatching bpf_prog/attachment RCU flavors

2024-12-10 CVE-2024-56675

btrfs: fix use-after-free in btrfs_encoded_read_endio()

2024-12-10 CVE-2024-56582

btrfs: ref-verify: fix use-after-free after invalid ref action

2024-12-10 CVE-2024-56581

can: hi311x: hi3110_can_ist(): fix potential use-after-free

2024-12-10 CVE-2024-56651

ceph: fix memory leak in ceph_direct_read_write()

2024-12-10 CVE-2024-56710

Cert-manager: potential dos when parsing specially crafted pem inputs

2024-12-10 CVE-2024-12401

clk: clk-apple-nco: Add NULL check in applnco_probe

2024-12-10 CVE-2024-53154

cpufreq: CPPC: Fix possible null-ptr-deref for cppc_get_cpu_cost()

2024-12-10 CVE-2024-53230

crypto: caam - Fix the pointer passed to caam_qi_shutdown()

2024-12-10 CVE-2024-56754

dccp: Fix memory leak in dccp_feat_change_recv

2024-12-10 CVE-2024-56643

drm: zynqmp_kms: Unplug DRM device before removal

2024-12-10 CVE-2024-56538

drm/amd/display: Adjust VSDB parser for replay feature

2024-12-10 CVE-2024-53108

drm/amd/display: Fix null check for pipe_ctx->plane_state in dcn20_program_pipe

2024-12-10 CVE-2024-53201

drm/amd/display: Handle dml allocation failure to avoid crash

2024-12-10 CVE-2024-53133

drm/amdgpu: fix usage slab after free

2024-12-10 CVE-2024-56551

drm/i915: Fix NULL pointer dereference in capture_engine

2024-12-10 CVE-2024-56667

drm/nouveau/gr/gf100: Fix missing unlock in gf100_gr_chan_new()

2024-12-10 CVE-2024-56752

drm/rockchip: vop: Fix a dereferenced before check warning

2024-12-10 CVE-2024-53129

EDAC/bluefield: Fix potential integer overflow

2024-12-10 CVE-2024-53161

EDAC/igen6: Avoid segmentation fault on module unload

2024-12-10 CVE-2024-56708

erofs: handle NONHEAD !delta[1] lclusters gracefully

2024-12-10 CVE-2024-53234

exfat: fix out-of-bounds access of directory entries

2024-12-10 CVE-2024-53147

f2fs: fix null-ptr-deref in f2fs_submit_page_bio()

2024-12-10 CVE-2024-53221

f2fs: fix to account dirty data in __get_secs_required()

2024-12-10 CVE-2024-53220

f2fs: fix to avoid potential deadlock in f2fs_record_stop_reason()

2024-12-10 CVE-2024-56744

f2fs: fix to drop all discards after creating snapshot on lvm device

2024-12-10 CVE-2024-56565