Week: 2024-W50

mptcp: cope racing subflow creation in mptcp_rcv_space_adjust

2024-12-10 CVE-2024-53122

net: af_can: do not leave a dangling sk pointer in can_create()

2024-12-10 CVE-2024-56603

net: avoid potential UAF in default_operstate()

2024-12-10 CVE-2024-56635

net: defer final 'struct net' free in netns dismantle

2024-12-10 CVE-2024-56658

net: enetc: Do not configure preemptible TCs if SIs do not support

2024-12-10 CVE-2024-56649

net: Fix icmp host relookup triggering ip_rt_bug

2024-12-10 CVE-2024-56647

net: hsr: avoid potential out-of-bound access in fill_frame_info()

2024-12-10 CVE-2024-56648

net: ieee802154: do not leave a dangling sk pointer in ieee802154_create()

2024-12-10 CVE-2024-56602

net: inet: do not leave a dangling sk pointer in inet_create()

2024-12-10 CVE-2024-56601

net: inet6: do not leave a dangling sk pointer in inet6_create()

2024-12-10 CVE-2024-56600

net: lapb: increase LAPB_HEADER_LEN

2024-12-10 CVE-2024-56659

net: mscc: ocelot: fix incorrect IFH SRC_PORT field in ocelot_ifh_set_basic()

2024-12-10 CVE-2024-56717

net: stmmac: fix TSO DMA API usage causing oops

2024-12-10 CVE-2024-56719

net: usb: lan78xx: Fix double free issue with interrupt buffer allocation

2024-12-10 CVE-2024-53213

net/smc: fix LGR and link use-after-free issue

2024-12-10 CVE-2024-56640

net/smc: initialize close_work early to avoid warning

2024-12-10 CVE-2024-56641

netdevsim: prevent bad user input in nsim_dev_health_break_write()

2024-12-10 CVE-2024-56716

netfilter: ipset: add missing range check in bitmap_ip_uadt

2024-12-10 CVE-2024-53141

netfilter: nf_tables: do not defer rule destruction via call_rcu

2024-12-10 CVE-2024-56655

netfilter: x_tables: fix LED ID check in led_tg_check()

2024-12-10 CVE-2024-56650

netlink: terminate outstanding dump on socket close

2024-12-10 CVE-2024-53140

netrc and redirect credential leak

2024-12-10 CVE-2024-11053

NFSD: Prevent a potential integer overflow

2024-12-10 CVE-2024-53146

NFSv4.0: Fix a use-after-free problem in the asynchronous open()

2024-12-10 CVE-2024-53173

nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint

2024-12-10 CVE-2024-53130

nommu: pass NULL argument to vma_iter_prealloc()

2024-12-10 CVE-2024-53109

Non-linear parsing of case-insensitive content in golang.org/x/net/html

2024-12-10 CVE-2024-45338

nvme-pci: fix freeing of the HMB descriptor table

2024-12-10 CVE-2024-56756

ocfs2: fix uninitialized value in ocfs2_file_read_iter()

2024-12-10 CVE-2024-53155

octeontx2-pf: handle otx2_mbox_get_rsp errors in cn10k.c

2024-12-10 CVE-2024-56726

octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_dcbnl.c

2024-12-10 CVE-2024-56725

octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_dmac_flt.c

2024-12-10 CVE-2024-56707

octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_flows.c

2024-12-10 CVE-2024-56727

PCI: Fix reset_method_store() memory leak

2024-12-10 CVE-2024-56745

phy: realtek: usb: fix NULL deref in rtk_usb3phy_probe

2024-12-10 CVE-2024-53204

quic-go affected by an ICMP Packet Too Large Injection Attack on Linux

2024-12-10 CVE-2024-53259

RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()

2024-12-10 CVE-2024-53226

readline.sh in socat before1.8.0.2 relies on the /tmp/$USER/stderr2 file.

2024-12-10 CVE-2024-54661

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

2024-12-10 CVE-2024-56741

Remote Desktop Client Remote Code Execution Vulnerability

2024-12-10 CVE-2024-49105

Revert "mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K"

2024-12-10 CVE-2024-53127

rtc: check if __rtc_read_time was successful in rtc_timer_do_work()

2024-12-10 CVE-2024-56739

Rustls: rustls network-reachable panic in `acceptor::accept`

2024-12-10 CVE-2024-11738

sched/task_stack: fix object_is_on_stack() for KASAN tagged pointers

2024-12-10 CVE-2024-53128

scsi: bfa: Fix use-after-free in bfad_im_module_exit()

2024-12-10 CVE-2024-53227

scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()

2024-12-10 CVE-2024-56748

scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()

2024-12-10 CVE-2024-56747

scsi: qla2xxx: Fix use after free on unload

2024-12-10 CVE-2024-56623

scsi: sg: Fix slab-use-after-free read in sg_release()

2024-12-10 CVE-2024-56631

sctp: fix possible UAF in sctp_v6_available()

2024-12-10 CVE-2024-53139

sh: intc: Fix use-after-free bug in register_intc_controller()

2024-12-10 CVE-2024-53165

shadow-utils (aka shadow) 4.4 through 4.17.0 establishes a default /etc/subuid behavior (e.g., uid 100000 through 165535 for the first user account) that can realistically conflict

2024-12-10 CVE-2024-56433

smb: client: fix NULL ptr deref in crypto_aead_setkey()

2024-12-10 CVE-2024-53185

smb: client: fix use-after-free of signing key

2024-12-10 CVE-2024-53179

smb: prevent use-after-free due to open_cached_dir error paths

2024-12-10 CVE-2024-53177

ssl fails to validate incorrect extened key usage

2024-12-10 CVE-2024-53846

svcrdma: Address an integer overflow

2024-12-10 CVE-2024-53151

svcrdma: fix miss destroy percpu_counter in svc_rdma_proc_init()

2024-12-10 CVE-2024-53215

tcp: Fix use-after-free of nreq in reqsk_timer_handler().

2024-12-10 CVE-2024-53206