Update 25May23
diff --git a/CHANGES.md b/CHANGES.md index 69c8dcb..64229d1 100644 --- a/CHANGES.md +++ b/CHANGES.md
@@ -1,35 +1,29 @@ # **Linux Kernel CVE Changes** -## Last Update - 19May23 13:14 +## Last Update - 25May23 19:34 ### **New CVEs Added:** -[CVE-2023-33203](cves/CVE-2023-33203) +[CVE-2020-36694](cves/CVE-2020-36694) +[CVE-2023-32250](cves/CVE-2023-32250) +[CVE-2023-32254](cves/CVE-2023-32254) +[CVE-2023-33250](cves/CVE-2023-33250) +[CVE-2023-33288](cves/CVE-2023-33288) ### **New Versions Checked:** -[4.14.315](streams/4.14) -[4.19.283](streams/4.19) -[5.10.180](streams/5.10) -[5.15.112](streams/5.15) -[5.4.243](streams/5.4) -[6.1.29](streams/6.1) -[6.2.16](streams/6.2) +[5.15.113](streams/5.15) +[6.1.30](streams/6.1) ### **Updated CVEs:** -[CVE-2022-39189](cves/CVE-2022-39189) -[CVE-2023-1380](cves/CVE-2023-1380) -[CVE-2023-2002](cves/CVE-2023-2002) -[CVE-2023-2269](cves/CVE-2023-2269) -[CVE-2023-32233](cves/CVE-2023-32233) -[CVE-2023-1195](cves/CVE-2023-1195) -[CVE-2023-1859](cves/CVE-2023-1859) +[CVE-2022-48425](cves/CVE-2022-48425) +[CVE-2023-28410](cves/CVE-2023-28410) +[CVE-2023-31084](cves/CVE-2023-31084) +[CVE-2023-33203](cves/CVE-2023-33203) [CVE-2023-21102](cves/CVE-2023-21102) [CVE-2023-21106](cves/CVE-2023-21106) -[CVE-2023-2124](cves/CVE-2023-2124) -[CVE-2023-2156](cves/CVE-2023-2156) -[CVE-2023-2513](cves/CVE-2023-2513) +[CVE-2023-2483](cves/CVE-2023-2483)
diff --git a/data/3.12/3.12_CVEs.txt b/data/3.12/3.12_CVEs.txt index 2c6d073..9019222 100644 --- a/data/3.12/3.12_CVEs.txt +++ b/data/3.12/3.12_CVEs.txt
@@ -1268,15 +1268,18 @@ CVE-2023-2513: Fix not seen in stream CVE-2023-26607: Fix not seen in stream CVE-2023-28328: Fix not seen in stream -CVE-2023-28410: Fix unknown +CVE-2023-28410: Fix not seen in stream CVE-2023-28772: Fix not seen in stream CVE-2023-30456: Fix not seen in stream CVE-2023-31081: Fix unknown CVE-2023-31082: Fix unknown CVE-2023-31083: Fix unknown -CVE-2023-31084: Fix unknown +CVE-2023-31084: Fix not seen in stream CVE-2023-31085: Fix unknown CVE-2023-31436: Fix not seen in stream CVE-2023-32233: Fix not seen in stream +CVE-2023-32250: Fix not seen in stream +CVE-2023-32254: Fix not seen in stream CVE-2023-32269: Fix not seen in stream -CVE-2023-33203: Fix not seen in stream +CVE-2023-33250: Fix unknown +CVE-2023-33288: Fix not seen in stream
diff --git a/data/3.12/3.12_security.txt b/data/3.12/3.12_security.txt index 45e5bef..2d1ab18 100644 --- a/data/3.12/3.12_security.txt +++ b/data/3.12/3.12_security.txt
@@ -1406,15 +1406,18 @@ CVE-2023-2513: (unk) ext4: fix use-after-free in ext4_xattr_set_entry CVE-2023-26607: (unk) ntfs: fix out-of-bounds read in ntfs_attr_find() CVE-2023-28328: (unk) media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer() - CVE-2023-28410: (unk) + CVE-2023-28410: (unk) drm/i915/gem: add missing boundary check in vm_access CVE-2023-28772: (unk) seq_buf: Fix overflow in seq_buf_putmem_hex() CVE-2023-30456: (unk) KVM: nVMX: add missing consistency checks for CR0 and CR4 CVE-2023-31081: (unk) CVE-2023-31082: (unk) CVE-2023-31083: (unk) - CVE-2023-31084: (unk) + CVE-2023-31084: (unk) media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() CVE-2023-31085: (unk) CVE-2023-31436: (unk) net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg CVE-2023-32233: (unk) netfilter: nf_tables: deactivate anonymous set from preparation phase + CVE-2023-32250: (unk) ksmbd: fix racy issue from session setup and logoff + CVE-2023-32254: (unk) ksmbd: fix racy issue under cocurrent smb2 tree disconnect CVE-2023-32269: (unk) netrom: Fix use-after-free caused by accept on already connected socket - CVE-2023-33203: (unk) net: qcom/emac: Fix use after free bug in emac_remove due to race condition + CVE-2023-33250: (unk) + CVE-2023-33288: (unk) power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
diff --git a/data/3.14/3.14_CVEs.txt b/data/3.14/3.14_CVEs.txt index 7712a3a..337b4bd 100644 --- a/data/3.14/3.14_CVEs.txt +++ b/data/3.14/3.14_CVEs.txt
@@ -1237,15 +1237,18 @@ CVE-2023-2513: Fix not seen in stream CVE-2023-26607: Fix not seen in stream CVE-2023-28328: Fix not seen in stream -CVE-2023-28410: Fix unknown +CVE-2023-28410: Fix not seen in stream CVE-2023-28772: Fix not seen in stream CVE-2023-30456: Fix not seen in stream CVE-2023-31081: Fix unknown CVE-2023-31082: Fix unknown CVE-2023-31083: Fix unknown -CVE-2023-31084: Fix unknown +CVE-2023-31084: Fix not seen in stream CVE-2023-31085: Fix unknown CVE-2023-31436: Fix not seen in stream CVE-2023-32233: Fix not seen in stream +CVE-2023-32250: Fix not seen in stream +CVE-2023-32254: Fix not seen in stream CVE-2023-32269: Fix not seen in stream -CVE-2023-33203: Fix not seen in stream +CVE-2023-33250: Fix unknown +CVE-2023-33288: Fix not seen in stream
diff --git a/data/3.14/3.14_security.txt b/data/3.14/3.14_security.txt index 0186cc1..ccd34bf 100644 --- a/data/3.14/3.14_security.txt +++ b/data/3.14/3.14_security.txt
@@ -1371,15 +1371,18 @@ CVE-2023-2513: (unk) ext4: fix use-after-free in ext4_xattr_set_entry CVE-2023-26607: (unk) ntfs: fix out-of-bounds read in ntfs_attr_find() CVE-2023-28328: (unk) media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer() - CVE-2023-28410: (unk) + CVE-2023-28410: (unk) drm/i915/gem: add missing boundary check in vm_access CVE-2023-28772: (unk) seq_buf: Fix overflow in seq_buf_putmem_hex() CVE-2023-30456: (unk) KVM: nVMX: add missing consistency checks for CR0 and CR4 CVE-2023-31081: (unk) CVE-2023-31082: (unk) CVE-2023-31083: (unk) - CVE-2023-31084: (unk) + CVE-2023-31084: (unk) media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() CVE-2023-31085: (unk) CVE-2023-31436: (unk) net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg CVE-2023-32233: (unk) netfilter: nf_tables: deactivate anonymous set from preparation phase + CVE-2023-32250: (unk) ksmbd: fix racy issue from session setup and logoff + CVE-2023-32254: (unk) ksmbd: fix racy issue under cocurrent smb2 tree disconnect CVE-2023-32269: (unk) netrom: Fix use-after-free caused by accept on already connected socket - CVE-2023-33203: (unk) net: qcom/emac: Fix use after free bug in emac_remove due to race condition + CVE-2023-33250: (unk) + CVE-2023-33288: (unk) power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
diff --git a/data/3.16/3.16_CVEs.txt b/data/3.16/3.16_CVEs.txt index 9df47d6..45c9eaf 100644 --- a/data/3.16/3.16_CVEs.txt +++ b/data/3.16/3.16_CVEs.txt
@@ -1225,15 +1225,18 @@ CVE-2023-2513: Fix not seen in stream CVE-2023-26607: Fix not seen in stream CVE-2023-28328: Fix not seen in stream -CVE-2023-28410: Fix unknown +CVE-2023-28410: Fix not seen in stream CVE-2023-28772: Fix not seen in stream CVE-2023-30456: Fix not seen in stream CVE-2023-31081: Fix unknown CVE-2023-31082: Fix unknown CVE-2023-31083: Fix unknown -CVE-2023-31084: Fix unknown +CVE-2023-31084: Fix not seen in stream CVE-2023-31085: Fix unknown CVE-2023-31436: Fix not seen in stream CVE-2023-32233: Fix not seen in stream +CVE-2023-32250: Fix not seen in stream +CVE-2023-32254: Fix not seen in stream CVE-2023-32269: Fix not seen in stream -CVE-2023-33203: Fix not seen in stream +CVE-2023-33250: Fix unknown +CVE-2023-33288: Fix not seen in stream
diff --git a/data/3.16/3.16_security.txt b/data/3.16/3.16_security.txt index 6d806f6..8ffa4a1 100644 --- a/data/3.16/3.16_security.txt +++ b/data/3.16/3.16_security.txt
@@ -1331,15 +1331,18 @@ CVE-2023-2513: (unk) ext4: fix use-after-free in ext4_xattr_set_entry CVE-2023-26607: (unk) ntfs: fix out-of-bounds read in ntfs_attr_find() CVE-2023-28328: (unk) media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer() - CVE-2023-28410: (unk) + CVE-2023-28410: (unk) drm/i915/gem: add missing boundary check in vm_access CVE-2023-28772: (unk) seq_buf: Fix overflow in seq_buf_putmem_hex() CVE-2023-30456: (unk) KVM: nVMX: add missing consistency checks for CR0 and CR4 CVE-2023-31081: (unk) CVE-2023-31082: (unk) CVE-2023-31083: (unk) - CVE-2023-31084: (unk) + CVE-2023-31084: (unk) media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() CVE-2023-31085: (unk) CVE-2023-31436: (unk) net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg CVE-2023-32233: (unk) netfilter: nf_tables: deactivate anonymous set from preparation phase + CVE-2023-32250: (unk) ksmbd: fix racy issue from session setup and logoff + CVE-2023-32254: (unk) ksmbd: fix racy issue under cocurrent smb2 tree disconnect CVE-2023-32269: (unk) netrom: Fix use-after-free caused by accept on already connected socket - CVE-2023-33203: (unk) net: qcom/emac: Fix use after free bug in emac_remove due to race condition + CVE-2023-33250: (unk) + CVE-2023-33288: (unk) power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
diff --git a/data/3.18/3.18_CVEs.txt b/data/3.18/3.18_CVEs.txt index a06920b..c02e6c2 100644 --- a/data/3.18/3.18_CVEs.txt +++ b/data/3.18/3.18_CVEs.txt
@@ -1211,15 +1211,18 @@ CVE-2023-2513: Fix not seen in stream CVE-2023-26607: Fix not seen in stream CVE-2023-28328: Fix not seen in stream -CVE-2023-28410: Fix unknown +CVE-2023-28410: Fix not seen in stream CVE-2023-28772: Fix not seen in stream CVE-2023-30456: Fix not seen in stream CVE-2023-31081: Fix unknown CVE-2023-31082: Fix unknown CVE-2023-31083: Fix unknown -CVE-2023-31084: Fix unknown +CVE-2023-31084: Fix not seen in stream CVE-2023-31085: Fix unknown CVE-2023-31436: Fix not seen in stream CVE-2023-32233: Fix not seen in stream +CVE-2023-32250: Fix not seen in stream +CVE-2023-32254: Fix not seen in stream CVE-2023-32269: Fix not seen in stream -CVE-2023-33203: Fix not seen in stream +CVE-2023-33250: Fix unknown +CVE-2023-33288: Fix not seen in stream
diff --git a/data/3.18/3.18_security.txt b/data/3.18/3.18_security.txt index 7d61ec9..f99cdd1 100644 --- a/data/3.18/3.18_security.txt +++ b/data/3.18/3.18_security.txt
@@ -1445,15 +1445,18 @@ CVE-2023-2513: (unk) ext4: fix use-after-free in ext4_xattr_set_entry CVE-2023-26607: (unk) ntfs: fix out-of-bounds read in ntfs_attr_find() CVE-2023-28328: (unk) media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer() - CVE-2023-28410: (unk) + CVE-2023-28410: (unk) drm/i915/gem: add missing boundary check in vm_access CVE-2023-28772: (unk) seq_buf: Fix overflow in seq_buf_putmem_hex() CVE-2023-30456: (unk) KVM: nVMX: add missing consistency checks for CR0 and CR4 CVE-2023-31081: (unk) CVE-2023-31082: (unk) CVE-2023-31083: (unk) - CVE-2023-31084: (unk) + CVE-2023-31084: (unk) media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() CVE-2023-31085: (unk) CVE-2023-31436: (unk) net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg CVE-2023-32233: (unk) netfilter: nf_tables: deactivate anonymous set from preparation phase + CVE-2023-32250: (unk) ksmbd: fix racy issue from session setup and logoff + CVE-2023-32254: (unk) ksmbd: fix racy issue under cocurrent smb2 tree disconnect CVE-2023-32269: (unk) netrom: Fix use-after-free caused by accept on already connected socket - CVE-2023-33203: (unk) net: qcom/emac: Fix use after free bug in emac_remove due to race condition + CVE-2023-33250: (unk) + CVE-2023-33288: (unk) power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
diff --git a/data/3.2/3.2_CVEs.txt b/data/3.2/3.2_CVEs.txt index d97107d..07f19c4 100644 --- a/data/3.2/3.2_CVEs.txt +++ b/data/3.2/3.2_CVEs.txt
@@ -1236,14 +1236,17 @@ CVE-2023-2513: Fix not seen in stream CVE-2023-26607: Fix not seen in stream CVE-2023-28328: Fix not seen in stream -CVE-2023-28410: Fix unknown +CVE-2023-28410: Fix not seen in stream CVE-2023-28772: Fix not seen in stream CVE-2023-30456: Fix not seen in stream CVE-2023-31081: Fix unknown CVE-2023-31082: Fix unknown CVE-2023-31083: Fix unknown -CVE-2023-31084: Fix unknown +CVE-2023-31084: Fix not seen in stream CVE-2023-31085: Fix unknown CVE-2023-32233: Fix not seen in stream +CVE-2023-32250: Fix not seen in stream +CVE-2023-32254: Fix not seen in stream CVE-2023-32269: Fix not seen in stream -CVE-2023-33203: Fix not seen in stream +CVE-2023-33250: Fix unknown +CVE-2023-33288: Fix not seen in stream
diff --git a/data/3.2/3.2_security.txt b/data/3.2/3.2_security.txt index e84c1fb..db5e4c4 100644 --- a/data/3.2/3.2_security.txt +++ b/data/3.2/3.2_security.txt
@@ -1392,14 +1392,17 @@ CVE-2023-2513: (unk) ext4: fix use-after-free in ext4_xattr_set_entry CVE-2023-26607: (unk) ntfs: fix out-of-bounds read in ntfs_attr_find() CVE-2023-28328: (unk) media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer() - CVE-2023-28410: (unk) + CVE-2023-28410: (unk) drm/i915/gem: add missing boundary check in vm_access CVE-2023-28772: (unk) seq_buf: Fix overflow in seq_buf_putmem_hex() CVE-2023-30456: (unk) KVM: nVMX: add missing consistency checks for CR0 and CR4 CVE-2023-31081: (unk) CVE-2023-31082: (unk) CVE-2023-31083: (unk) - CVE-2023-31084: (unk) + CVE-2023-31084: (unk) media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() CVE-2023-31085: (unk) CVE-2023-32233: (unk) netfilter: nf_tables: deactivate anonymous set from preparation phase + CVE-2023-32250: (unk) ksmbd: fix racy issue from session setup and logoff + CVE-2023-32254: (unk) ksmbd: fix racy issue under cocurrent smb2 tree disconnect CVE-2023-32269: (unk) netrom: Fix use-after-free caused by accept on already connected socket - CVE-2023-33203: (unk) net: qcom/emac: Fix use after free bug in emac_remove due to race condition + CVE-2023-33250: (unk) + CVE-2023-33288: (unk) power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
diff --git a/data/4.1/4.1_CVEs.txt b/data/4.1/4.1_CVEs.txt index 8030205..f2791db 100644 --- a/data/4.1/4.1_CVEs.txt +++ b/data/4.1/4.1_CVEs.txt
@@ -1177,16 +1177,19 @@ CVE-2023-26545: Fix not seen in stream CVE-2023-26607: Fix not seen in stream CVE-2023-28328: Fix not seen in stream -CVE-2023-28410: Fix unknown +CVE-2023-28410: Fix not seen in stream CVE-2023-28772: Fix not seen in stream CVE-2023-30456: Fix not seen in stream CVE-2023-30772: Fix not seen in stream CVE-2023-31081: Fix unknown CVE-2023-31082: Fix unknown CVE-2023-31083: Fix unknown -CVE-2023-31084: Fix unknown +CVE-2023-31084: Fix not seen in stream CVE-2023-31085: Fix unknown CVE-2023-31436: Fix not seen in stream CVE-2023-32233: Fix not seen in stream +CVE-2023-32250: Fix not seen in stream +CVE-2023-32254: Fix not seen in stream CVE-2023-32269: Fix not seen in stream -CVE-2023-33203: Fix not seen in stream +CVE-2023-33250: Fix unknown +CVE-2023-33288: Fix not seen in stream
diff --git a/data/4.1/4.1_security.txt b/data/4.1/4.1_security.txt index 1c5184d..de9e632 100644 --- a/data/4.1/4.1_security.txt +++ b/data/4.1/4.1_security.txt
@@ -1275,16 +1275,19 @@ CVE-2023-26545: (unk) net: mpls: fix stale pointer if allocation fails during device rename CVE-2023-26607: (unk) ntfs: fix out-of-bounds read in ntfs_attr_find() CVE-2023-28328: (unk) media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer() - CVE-2023-28410: (unk) + CVE-2023-28410: (unk) drm/i915/gem: add missing boundary check in vm_access CVE-2023-28772: (unk) seq_buf: Fix overflow in seq_buf_putmem_hex() CVE-2023-30456: (unk) KVM: nVMX: add missing consistency checks for CR0 and CR4 CVE-2023-30772: (unk) power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition CVE-2023-31081: (unk) CVE-2023-31082: (unk) CVE-2023-31083: (unk) - CVE-2023-31084: (unk) + CVE-2023-31084: (unk) media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() CVE-2023-31085: (unk) CVE-2023-31436: (unk) net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg CVE-2023-32233: (unk) netfilter: nf_tables: deactivate anonymous set from preparation phase + CVE-2023-32250: (unk) ksmbd: fix racy issue from session setup and logoff + CVE-2023-32254: (unk) ksmbd: fix racy issue under cocurrent smb2 tree disconnect CVE-2023-32269: (unk) netrom: Fix use-after-free caused by accept on already connected socket - CVE-2023-33203: (unk) net: qcom/emac: Fix use after free bug in emac_remove due to race condition + CVE-2023-33250: (unk) + CVE-2023-33288: (unk) power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
diff --git a/data/4.10/4.10_CVEs.txt b/data/4.10/4.10_CVEs.txt index 4583fcd..5e9f255 100644 --- a/data/4.10/4.10_CVEs.txt +++ b/data/4.10/4.10_CVEs.txt
@@ -1088,16 +1088,20 @@ CVE-2023-26545: Fix not seen in stream CVE-2023-26607: Fix not seen in stream CVE-2023-28328: Fix not seen in stream -CVE-2023-28410: Fix unknown +CVE-2023-28410: Fix not seen in stream CVE-2023-28772: Fix not seen in stream CVE-2023-30456: Fix not seen in stream CVE-2023-30772: Fix not seen in stream CVE-2023-31081: Fix unknown CVE-2023-31082: Fix unknown CVE-2023-31083: Fix unknown -CVE-2023-31084: Fix unknown +CVE-2023-31084: Fix not seen in stream CVE-2023-31085: Fix unknown CVE-2023-31436: Fix not seen in stream CVE-2023-32233: Fix not seen in stream +CVE-2023-32250: Fix not seen in stream +CVE-2023-32254: Fix not seen in stream CVE-2023-32269: Fix not seen in stream CVE-2023-33203: Fix not seen in stream +CVE-2023-33250: Fix unknown +CVE-2023-33288: Fix not seen in stream
diff --git a/data/4.10/4.10_security.txt b/data/4.10/4.10_security.txt index b0f59c2..91730fe 100644 --- a/data/4.10/4.10_security.txt +++ b/data/4.10/4.10_security.txt
@@ -1122,16 +1122,20 @@ CVE-2023-26545: (unk) net: mpls: fix stale pointer if allocation fails during device rename CVE-2023-26607: (unk) ntfs: fix out-of-bounds read in ntfs_attr_find() CVE-2023-28328: (unk) media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer() - CVE-2023-28410: (unk) + CVE-2023-28410: (unk) drm/i915/gem: add missing boundary check in vm_access CVE-2023-28772: (unk) seq_buf: Fix overflow in seq_buf_putmem_hex() CVE-2023-30456: (unk) KVM: nVMX: add missing consistency checks for CR0 and CR4 CVE-2023-30772: (unk) power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition CVE-2023-31081: (unk) CVE-2023-31082: (unk) CVE-2023-31083: (unk) - CVE-2023-31084: (unk) + CVE-2023-31084: (unk) media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() CVE-2023-31085: (unk) CVE-2023-31436: (unk) net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg CVE-2023-32233: (unk) netfilter: nf_tables: deactivate anonymous set from preparation phase + CVE-2023-32250: (unk) ksmbd: fix racy issue from session setup and logoff + CVE-2023-32254: (unk) ksmbd: fix racy issue under cocurrent smb2 tree disconnect CVE-2023-32269: (unk) netrom: Fix use-after-free caused by accept on already connected socket CVE-2023-33203: (unk) net: qcom/emac: Fix use after free bug in emac_remove due to race condition + CVE-2023-33250: (unk) + CVE-2023-33288: (unk) power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
diff --git a/data/4.11/4.11_CVEs.txt b/data/4.11/4.11_CVEs.txt index 23a3468..e0c4337 100644 --- a/data/4.11/4.11_CVEs.txt +++ b/data/4.11/4.11_CVEs.txt
@@ -1060,16 +1060,20 @@ CVE-2023-26545: Fix not seen in stream CVE-2023-26607: Fix not seen in stream CVE-2023-28328: Fix not seen in stream -CVE-2023-28410: Fix unknown +CVE-2023-28410: Fix not seen in stream CVE-2023-28772: Fix not seen in stream CVE-2023-30456: Fix not seen in stream CVE-2023-30772: Fix not seen in stream CVE-2023-31081: Fix unknown CVE-2023-31082: Fix unknown CVE-2023-31083: Fix unknown -CVE-2023-31084: Fix unknown +CVE-2023-31084: Fix not seen in stream CVE-2023-31085: Fix unknown CVE-2023-31436: Fix not seen in stream CVE-2023-32233: Fix not seen in stream +CVE-2023-32250: Fix not seen in stream +CVE-2023-32254: Fix not seen in stream CVE-2023-32269: Fix not seen in stream CVE-2023-33203: Fix not seen in stream +CVE-2023-33250: Fix unknown +CVE-2023-33288: Fix not seen in stream
diff --git a/data/4.11/4.11_security.txt b/data/4.11/4.11_security.txt index c872920..6e10132 100644 --- a/data/4.11/4.11_security.txt +++ b/data/4.11/4.11_security.txt
@@ -1082,16 +1082,20 @@ CVE-2023-26545: (unk) net: mpls: fix stale pointer if allocation fails during device rename CVE-2023-26607: (unk) ntfs: fix out-of-bounds read in ntfs_attr_find() CVE-2023-28328: (unk) media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer() - CVE-2023-28410: (unk) + CVE-2023-28410: (unk) drm/i915/gem: add missing boundary check in vm_access CVE-2023-28772: (unk) seq_buf: Fix overflow in seq_buf_putmem_hex() CVE-2023-30456: (unk) KVM: nVMX: add missing consistency checks for CR0 and CR4 CVE-2023-30772: (unk) power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition CVE-2023-31081: (unk) CVE-2023-31082: (unk) CVE-2023-31083: (unk) - CVE-2023-31084: (unk) + CVE-2023-31084: (unk) media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() CVE-2023-31085: (unk) CVE-2023-31436: (unk) net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg CVE-2023-32233: (unk) netfilter: nf_tables: deactivate anonymous set from preparation phase + CVE-2023-32250: (unk) ksmbd: fix racy issue from session setup and logoff + CVE-2023-32254: (unk) ksmbd: fix racy issue under cocurrent smb2 tree disconnect CVE-2023-32269: (unk) netrom: Fix use-after-free caused by accept on already connected socket CVE-2023-33203: (unk) net: qcom/emac: Fix use after free bug in emac_remove due to race condition + CVE-2023-33250: (unk) + CVE-2023-33288: (unk) power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
diff --git a/data/4.12/4.12_CVEs.txt b/data/4.12/4.12_CVEs.txt index fcfcbdd..004cd7c 100644 --- a/data/4.12/4.12_CVEs.txt +++ b/data/4.12/4.12_CVEs.txt
@@ -1047,16 +1047,20 @@ CVE-2023-26545: Fix not seen in stream CVE-2023-26607: Fix not seen in stream CVE-2023-28328: Fix not seen in stream -CVE-2023-28410: Fix unknown +CVE-2023-28410: Fix not seen in stream CVE-2023-28772: Fix not seen in stream CVE-2023-30456: Fix not seen in stream CVE-2023-30772: Fix not seen in stream CVE-2023-31081: Fix unknown CVE-2023-31082: Fix unknown CVE-2023-31083: Fix unknown -CVE-2023-31084: Fix unknown +CVE-2023-31084: Fix not seen in stream CVE-2023-31085: Fix unknown CVE-2023-31436: Fix not seen in stream CVE-2023-32233: Fix not seen in stream +CVE-2023-32250: Fix not seen in stream +CVE-2023-32254: Fix not seen in stream CVE-2023-32269: Fix not seen in stream CVE-2023-33203: Fix not seen in stream +CVE-2023-33250: Fix unknown +CVE-2023-33288: Fix not seen in stream
diff --git a/data/4.12/4.12_security.txt b/data/4.12/4.12_security.txt index cfbc2c6..410e609 100644 --- a/data/4.12/4.12_security.txt +++ b/data/4.12/4.12_security.txt
@@ -1073,16 +1073,20 @@ CVE-2023-26545: (unk) net: mpls: fix stale pointer if allocation fails during device rename CVE-2023-26607: (unk) ntfs: fix out-of-bounds read in ntfs_attr_find() CVE-2023-28328: (unk) media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer() - CVE-2023-28410: (unk) + CVE-2023-28410: (unk) drm/i915/gem: add missing boundary check in vm_access CVE-2023-28772: (unk) seq_buf: Fix overflow in seq_buf_putmem_hex() CVE-2023-30456: (unk) KVM: nVMX: add missing consistency checks for CR0 and CR4 CVE-2023-30772: (unk) power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition CVE-2023-31081: (unk) CVE-2023-31082: (unk) CVE-2023-31083: (unk) - CVE-2023-31084: (unk) + CVE-2023-31084: (unk) media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() CVE-2023-31085: (unk) CVE-2023-31436: (unk) net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg CVE-2023-32233: (unk) netfilter: nf_tables: deactivate anonymous set from preparation phase + CVE-2023-32250: (unk) ksmbd: fix racy issue from session setup and logoff + CVE-2023-32254: (unk) ksmbd: fix racy issue under cocurrent smb2 tree disconnect CVE-2023-32269: (unk) netrom: Fix use-after-free caused by accept on already connected socket CVE-2023-33203: (unk) net: qcom/emac: Fix use after free bug in emac_remove due to race condition + CVE-2023-33250: (unk) + CVE-2023-33288: (unk) power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
diff --git a/data/4.13/4.13_CVEs.txt b/data/4.13/4.13_CVEs.txt index ba2d49f..853454a 100644 --- a/data/4.13/4.13_CVEs.txt +++ b/data/4.13/4.13_CVEs.txt
@@ -1031,7 +1031,7 @@ CVE-2023-26545: Fix not seen in stream CVE-2023-26607: Fix not seen in stream CVE-2023-28328: Fix not seen in stream -CVE-2023-28410: Fix unknown +CVE-2023-28410: Fix not seen in stream CVE-2023-28466: Fix not seen in stream CVE-2023-28772: Fix not seen in stream CVE-2023-30456: Fix not seen in stream @@ -1039,9 +1039,13 @@ CVE-2023-31081: Fix unknown CVE-2023-31082: Fix unknown CVE-2023-31083: Fix unknown -CVE-2023-31084: Fix unknown +CVE-2023-31084: Fix not seen in stream CVE-2023-31085: Fix unknown CVE-2023-31436: Fix not seen in stream CVE-2023-32233: Fix not seen in stream +CVE-2023-32250: Fix not seen in stream +CVE-2023-32254: Fix not seen in stream CVE-2023-32269: Fix not seen in stream CVE-2023-33203: Fix not seen in stream +CVE-2023-33250: Fix unknown +CVE-2023-33288: Fix not seen in stream
diff --git a/data/4.13/4.13_security.txt b/data/4.13/4.13_security.txt index 43cdc76..bc77e5d 100644 --- a/data/4.13/4.13_security.txt +++ b/data/4.13/4.13_security.txt
@@ -1059,7 +1059,7 @@ CVE-2023-26545: (unk) net: mpls: fix stale pointer if allocation fails during device rename CVE-2023-26607: (unk) ntfs: fix out-of-bounds read in ntfs_attr_find() CVE-2023-28328: (unk) media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer() - CVE-2023-28410: (unk) + CVE-2023-28410: (unk) drm/i915/gem: add missing boundary check in vm_access CVE-2023-28466: (unk) net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf() CVE-2023-28772: (unk) seq_buf: Fix overflow in seq_buf_putmem_hex() CVE-2023-30456: (unk) KVM: nVMX: add missing consistency checks for CR0 and CR4 @@ -1067,9 +1067,13 @@ CVE-2023-31081: (unk) CVE-2023-31082: (unk) CVE-2023-31083: (unk) - CVE-2023-31084: (unk) + CVE-2023-31084: (unk) media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() CVE-2023-31085: (unk) CVE-2023-31436: (unk) net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg CVE-2023-32233: (unk) netfilter: nf_tables: deactivate anonymous set from preparation phase + CVE-2023-32250: (unk) ksmbd: fix racy issue from session setup and logoff + CVE-2023-32254: (unk) ksmbd: fix racy issue under cocurrent smb2 tree disconnect CVE-2023-32269: (unk) netrom: Fix use-after-free caused by accept on already connected socket CVE-2023-33203: (unk) net: qcom/emac: Fix use after free bug in emac_remove due to race condition + CVE-2023-33250: (unk) + CVE-2023-33288: (unk) power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
diff --git a/data/4.14/4.14_CVEs.txt b/data/4.14/4.14_CVEs.txt index 13b809a..249bd2a 100644 --- a/data/4.14/4.14_CVEs.txt +++ b/data/4.14/4.14_CVEs.txt
@@ -1002,7 +1002,7 @@ CVE-2023-26545: Fixed with 4.14.306 CVE-2023-26607: Fixed with 4.14.300 CVE-2023-28328: Fixed with 4.14.303 -CVE-2023-28410: Fix unknown +CVE-2023-28410: Fix not seen in stream CVE-2023-28466: Fix not seen in stream CVE-2023-28772: Fixed with 4.14.240 CVE-2023-30456: Fix not seen in stream @@ -1010,9 +1010,13 @@ CVE-2023-31081: Fix unknown CVE-2023-31082: Fix unknown CVE-2023-31083: Fix unknown -CVE-2023-31084: Fix unknown +CVE-2023-31084: Fix not seen in stream CVE-2023-31085: Fix unknown CVE-2023-31436: Fixed with 4.14.314 CVE-2023-32233: Fixed with 4.14.315 +CVE-2023-32250: Fix not seen in stream +CVE-2023-32254: Fix not seen in stream CVE-2023-32269: Fixed with 4.14.306 CVE-2023-33203: Fixed with 4.14.312 +CVE-2023-33250: Fix unknown +CVE-2023-33288: Fix not seen in stream
diff --git a/data/4.14/4.14_security.txt b/data/4.14/4.14_security.txt index a3674ff..f84f1dd 100644 --- a/data/4.14/4.14_security.txt +++ b/data/4.14/4.14_security.txt
@@ -1530,11 +1530,15 @@ CVE-2023-23000: (unk) phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function CVE-2023-23039: (unk) CVE-2023-2430: (unk) io_uring/msg_ring: fix missing lock on overflow for IOPOLL - CVE-2023-28410: (unk) + CVE-2023-28410: (unk) drm/i915/gem: add missing boundary check in vm_access CVE-2023-28466: (unk) net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf() CVE-2023-30456: (unk) KVM: nVMX: add missing consistency checks for CR0 and CR4 CVE-2023-31081: (unk) CVE-2023-31082: (unk) CVE-2023-31083: (unk) - CVE-2023-31084: (unk) + CVE-2023-31084: (unk) media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() CVE-2023-31085: (unk) + CVE-2023-32250: (unk) ksmbd: fix racy issue from session setup and logoff + CVE-2023-32254: (unk) ksmbd: fix racy issue under cocurrent smb2 tree disconnect + CVE-2023-33250: (unk) + CVE-2023-33288: (unk) power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
diff --git a/data/4.15/4.15_CVEs.txt b/data/4.15/4.15_CVEs.txt index f8b7e5d..71a727e 100644 --- a/data/4.15/4.15_CVEs.txt +++ b/data/4.15/4.15_CVEs.txt
@@ -551,6 +551,7 @@ CVE-2020-36557: Fix not seen in stream CVE-2020-36558: Fix not seen in stream CVE-2020-36691: Fix not seen in stream +CVE-2020-36694: Fix not seen in stream CVE-2020-3702: Fix not seen in stream CVE-2020-4788: Fix not seen in stream CVE-2020-7053: Fix not seen in stream @@ -954,7 +955,7 @@ CVE-2023-26545: Fix not seen in stream CVE-2023-26607: Fix not seen in stream CVE-2023-28328: Fix not seen in stream -CVE-2023-28410: Fix unknown +CVE-2023-28410: Fix not seen in stream CVE-2023-28466: Fix not seen in stream CVE-2023-28772: Fix not seen in stream CVE-2023-30456: Fix not seen in stream @@ -962,9 +963,13 @@ CVE-2023-31081: Fix unknown CVE-2023-31082: Fix unknown CVE-2023-31083: Fix unknown -CVE-2023-31084: Fix unknown +CVE-2023-31084: Fix not seen in stream CVE-2023-31085: Fix unknown CVE-2023-31436: Fix not seen in stream CVE-2023-32233: Fix not seen in stream +CVE-2023-32250: Fix not seen in stream +CVE-2023-32254: Fix not seen in stream CVE-2023-32269: Fix not seen in stream CVE-2023-33203: Fix not seen in stream +CVE-2023-33250: Fix unknown +CVE-2023-33288: Fix not seen in stream
diff --git a/data/4.15/4.15_security.txt b/data/4.15/4.15_security.txt index 3f1bfe4..c890c35 100644 --- a/data/4.15/4.15_security.txt +++ b/data/4.15/4.15_security.txt
@@ -585,6 +585,7 @@ CVE-2020-36557: (unk) vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console CVE-2020-36558: (unk) vt: vt_ioctl: fix race in VT_RESIZEX CVE-2020-36691: (unk) netlink: limit recursion depth in policy validation + CVE-2020-36694: (unk) netfilter: x_tables: Switch synchronization to RCU CVE-2020-3702: (unk) ath: Use safer key clearing with key cache entries CVE-2020-4788: (unk) powerpc/64s: flush L1D on kernel entry CVE-2020-7053: (unk) drm/i915: Introduce a mutex for file_priv->context_idr @@ -986,7 +987,7 @@ CVE-2023-26545: (unk) net: mpls: fix stale pointer if allocation fails during device rename CVE-2023-26607: (unk) ntfs: fix out-of-bounds read in ntfs_attr_find() CVE-2023-28328: (unk) media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer() - CVE-2023-28410: (unk) + CVE-2023-28410: (unk) drm/i915/gem: add missing boundary check in vm_access CVE-2023-28466: (unk) net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf() CVE-2023-28772: (unk) seq_buf: Fix overflow in seq_buf_putmem_hex() CVE-2023-30456: (unk) KVM: nVMX: add missing consistency checks for CR0 and CR4 @@ -994,9 +995,13 @@ CVE-2023-31081: (unk) CVE-2023-31082: (unk) CVE-2023-31083: (unk) - CVE-2023-31084: (unk) + CVE-2023-31084: (unk) media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() CVE-2023-31085: (unk) CVE-2023-31436: (unk) net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg CVE-2023-32233: (unk) netfilter: nf_tables: deactivate anonymous set from preparation phase + CVE-2023-32250: (unk) ksmbd: fix racy issue from session setup and logoff + CVE-2023-32254: (unk) ksmbd: fix racy issue under cocurrent smb2 tree disconnect CVE-2023-32269: (unk) netrom: Fix use-after-free caused by accept on already connected socket CVE-2023-33203: (unk) net: qcom/emac: Fix use after free bug in emac_remove due to race condition + CVE-2023-33250: (unk) + CVE-2023-33288: (unk) power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
diff --git a/data/4.16/4.16_CVEs.txt b/data/4.16/4.16_CVEs.txt index 761f5aa..7969327 100644 --- a/data/4.16/4.16_CVEs.txt +++ b/data/4.16/4.16_CVEs.txt
@@ -530,6 +530,7 @@ CVE-2020-36557: Fix not seen in stream CVE-2020-36558: Fix not seen in stream CVE-2020-36691: Fix not seen in stream +CVE-2020-36694: Fix not seen in stream CVE-2020-3702: Fix not seen in stream CVE-2020-4788: Fix not seen in stream CVE-2020-7053: Fix not seen in stream @@ -934,7 +935,7 @@ CVE-2023-26545: Fix not seen in stream CVE-2023-26607: Fix not seen in stream CVE-2023-28328: Fix not seen in stream -CVE-2023-28410: Fix unknown +CVE-2023-28410: Fix not seen in stream CVE-2023-28466: Fix not seen in stream CVE-2023-28772: Fix not seen in stream CVE-2023-30456: Fix not seen in stream @@ -942,9 +943,13 @@ CVE-2023-31081: Fix unknown CVE-2023-31082: Fix unknown CVE-2023-31083: Fix unknown -CVE-2023-31084: Fix unknown +CVE-2023-31084: Fix not seen in stream CVE-2023-31085: Fix unknown CVE-2023-31436: Fix not seen in stream CVE-2023-32233: Fix not seen in stream +CVE-2023-32250: Fix not seen in stream +CVE-2023-32254: Fix not seen in stream CVE-2023-32269: Fix not seen in stream CVE-2023-33203: Fix not seen in stream +CVE-2023-33250: Fix unknown +CVE-2023-33288: Fix not seen in stream
diff --git a/data/4.16/4.16_security.txt b/data/4.16/4.16_security.txt index 2cabb63..c2254c7 100644 --- a/data/4.16/4.16_security.txt +++ b/data/4.16/4.16_security.txt
@@ -562,6 +562,7 @@ CVE-2020-36557: (unk) vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console CVE-2020-36558: (unk) vt: vt_ioctl: fix race in VT_RESIZEX CVE-2020-36691: (unk) netlink: limit recursion depth in policy validation + CVE-2020-36694: (unk) netfilter: x_tables: Switch synchronization to RCU CVE-2020-3702: (unk) ath: Use safer key clearing with key cache entries CVE-2020-4788: (unk) powerpc/64s: flush L1D on kernel entry CVE-2020-7053: (unk) drm/i915: Introduce a mutex for file_priv->context_idr @@ -966,7 +967,7 @@ CVE-2023-26545: (unk) net: mpls: fix stale pointer if allocation fails during device rename CVE-2023-26607: (unk) ntfs: fix out-of-bounds read in ntfs_attr_find() CVE-2023-28328: (unk) media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer() - CVE-2023-28410: (unk) + CVE-2023-28410: (unk) drm/i915/gem: add missing boundary check in vm_access CVE-2023-28466: (unk) net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf() CVE-2023-28772: (unk) seq_buf: Fix overflow in seq_buf_putmem_hex() CVE-2023-30456: (unk) KVM: nVMX: add missing consistency checks for CR0 and CR4 @@ -974,9 +975,13 @@ CVE-2023-31081: (unk) CVE-2023-31082: (unk) CVE-2023-31083: (unk) - CVE-2023-31084: (unk) + CVE-2023-31084: (unk) media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() CVE-2023-31085: (unk) CVE-2023-31436: (unk) net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg CVE-2023-32233: (unk) netfilter: nf_tables: deactivate anonymous set from preparation phase + CVE-2023-32250: (unk) ksmbd: fix racy issue from session setup and logoff + CVE-2023-32254: (unk) ksmbd: fix racy issue under cocurrent smb2 tree disconnect CVE-2023-32269: (unk) netrom: Fix use-after-free caused by accept on already connected socket CVE-2023-33203: (unk) net: qcom/emac: Fix use after free bug in emac_remove due to race condition + CVE-2023-33250: (unk) + CVE-2023-33288: (unk) power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
diff --git a/data/4.17/4.17_CVEs.txt b/data/4.17/4.17_CVEs.txt index fb4b6ba..4b0bd0e 100644 --- a/data/4.17/4.17_CVEs.txt +++ b/data/4.17/4.17_CVEs.txt
@@ -510,6 +510,7 @@ CVE-2020-36557: Fix not seen in stream CVE-2020-36558: Fix not seen in stream CVE-2020-36691: Fix not seen in stream +CVE-2020-36694: Fix not seen in stream CVE-2020-3702: Fix not seen in stream CVE-2020-4788: Fix not seen in stream CVE-2020-7053: Fix not seen in stream @@ -916,7 +917,7 @@ CVE-2023-26545: Fix not seen in stream CVE-2023-26607: Fix not seen in stream CVE-2023-28328: Fix not seen in stream -CVE-2023-28410: Fix unknown +CVE-2023-28410: Fix not seen in stream CVE-2023-28466: Fix not seen in stream CVE-2023-28772: Fix not seen in stream CVE-2023-30456: Fix not seen in stream @@ -924,9 +925,13 @@ CVE-2023-31081: Fix unknown CVE-2023-31082: Fix unknown CVE-2023-31083: Fix unknown -CVE-2023-31084: Fix unknown +CVE-2023-31084: Fix not seen in stream CVE-2023-31085: Fix unknown CVE-2023-31436: Fix not seen in stream CVE-2023-32233: Fix not seen in stream +CVE-2023-32250: Fix not seen in stream +CVE-2023-32254: Fix not seen in stream CVE-2023-32269: Fix not seen in stream CVE-2023-33203: Fix not seen in stream +CVE-2023-33250: Fix unknown +CVE-2023-33288: Fix not seen in stream
diff --git a/data/4.17/4.17_security.txt b/data/4.17/4.17_security.txt index d69502b..14de9ec 100644 --- a/data/4.17/4.17_security.txt +++ b/data/4.17/4.17_security.txt
@@ -542,6 +542,7 @@ CVE-2020-36557: (unk) vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console CVE-2020-36558: (unk) vt: vt_ioctl: fix race in VT_RESIZEX CVE-2020-36691: (unk) netlink: limit recursion depth in policy validation + CVE-2020-36694: (unk) netfilter: x_tables: Switch synchronization to RCU CVE-2020-3702: (unk) ath: Use safer key clearing with key cache entries CVE-2020-4788: (unk) powerpc/64s: flush L1D on kernel entry CVE-2020-7053: (unk) drm/i915: Introduce a mutex for file_priv->context_idr @@ -948,7 +949,7 @@ CVE-2023-26545: (unk) net: mpls: fix stale pointer if allocation fails during device rename CVE-2023-26607: (unk) ntfs: fix out-of-bounds read in ntfs_attr_find() CVE-2023-28328: (unk) media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer() - CVE-2023-28410: (unk) + CVE-2023-28410: (unk) drm/i915/gem: add missing boundary check in vm_access CVE-2023-28466: (unk) net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf() CVE-2023-28772: (unk) seq_buf: Fix overflow in seq_buf_putmem_hex() CVE-2023-30456: (unk) KVM: nVMX: add missing consistency checks for CR0 and CR4 @@ -956,9 +957,13 @@ CVE-2023-31081: (unk) CVE-2023-31082: (unk) CVE-2023-31083: (unk) - CVE-2023-31084: (unk) + CVE-2023-31084: (unk) media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() CVE-2023-31085: (unk) CVE-2023-31436: (unk) net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg CVE-2023-32233: (unk) netfilter: nf_tables: deactivate anonymous set from preparation phase + CVE-2023-32250: (unk) ksmbd: fix racy issue from session setup and logoff + CVE-2023-32254: (unk) ksmbd: fix racy issue under cocurrent smb2 tree disconnect CVE-2023-32269: (unk) netrom: Fix use-after-free caused by accept on already connected socket CVE-2023-33203: (unk) net: qcom/emac: Fix use after free bug in emac_remove due to race condition + CVE-2023-33250: (unk) + CVE-2023-33288: (unk) power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
diff --git a/data/4.18/4.18_CVEs.txt b/data/4.18/4.18_CVEs.txt index 0dd4ba4..9569480 100644 --- a/data/4.18/4.18_CVEs.txt +++ b/data/4.18/4.18_CVEs.txt
@@ -488,6 +488,7 @@ CVE-2020-36557: Fix not seen in stream CVE-2020-36558: Fix not seen in stream CVE-2020-36691: Fix not seen in stream +CVE-2020-36694: Fix not seen in stream CVE-2020-3702: Fix not seen in stream CVE-2020-4788: Fix not seen in stream CVE-2020-7053: Fix not seen in stream @@ -894,7 +895,7 @@ CVE-2023-26545: Fix not seen in stream CVE-2023-26607: Fix not seen in stream CVE-2023-28328: Fix not seen in stream -CVE-2023-28410: Fix unknown +CVE-2023-28410: Fix not seen in stream CVE-2023-28466: Fix not seen in stream CVE-2023-28772: Fix not seen in stream CVE-2023-30456: Fix not seen in stream @@ -902,9 +903,13 @@ CVE-2023-31081: Fix unknown CVE-2023-31082: Fix unknown CVE-2023-31083: Fix unknown -CVE-2023-31084: Fix unknown +CVE-2023-31084: Fix not seen in stream CVE-2023-31085: Fix unknown CVE-2023-31436: Fix not seen in stream CVE-2023-32233: Fix not seen in stream +CVE-2023-32250: Fix not seen in stream +CVE-2023-32254: Fix not seen in stream CVE-2023-32269: Fix not seen in stream CVE-2023-33203: Fix not seen in stream +CVE-2023-33250: Fix unknown +CVE-2023-33288: Fix not seen in stream
diff --git a/data/4.18/4.18_security.txt b/data/4.18/4.18_security.txt index 1a98932..1027c86 100644 --- a/data/4.18/4.18_security.txt +++ b/data/4.18/4.18_security.txt
@@ -520,6 +520,7 @@ CVE-2020-36557: (unk) vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console CVE-2020-36558: (unk) vt: vt_ioctl: fix race in VT_RESIZEX CVE-2020-36691: (unk) netlink: limit recursion depth in policy validation + CVE-2020-36694: (unk) netfilter: x_tables: Switch synchronization to RCU CVE-2020-3702: (unk) ath: Use safer key clearing with key cache entries CVE-2020-4788: (unk) powerpc/64s: flush L1D on kernel entry CVE-2020-7053: (unk) drm/i915: Introduce a mutex for file_priv->context_idr @@ -926,7 +927,7 @@ CVE-2023-26545: (unk) net: mpls: fix stale pointer if allocation fails during device rename CVE-2023-26607: (unk) ntfs: fix out-of-bounds read in ntfs_attr_find() CVE-2023-28328: (unk) media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer() - CVE-2023-28410: (unk) + CVE-2023-28410: (unk) drm/i915/gem: add missing boundary check in vm_access CVE-2023-28466: (unk) net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf() CVE-2023-28772: (unk) seq_buf: Fix overflow in seq_buf_putmem_hex() CVE-2023-30456: (unk) KVM: nVMX: add missing consistency checks for CR0 and CR4 @@ -934,9 +935,13 @@ CVE-2023-31081: (unk) CVE-2023-31082: (unk) CVE-2023-31083: (unk) - CVE-2023-31084: (unk) + CVE-2023-31084: (unk) media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() CVE-2023-31085: (unk) CVE-2023-31436: (unk) net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg CVE-2023-32233: (unk) netfilter: nf_tables: deactivate anonymous set from preparation phase + CVE-2023-32250: (unk) ksmbd: fix racy issue from session setup and logoff + CVE-2023-32254: (unk) ksmbd: fix racy issue under cocurrent smb2 tree disconnect CVE-2023-32269: (unk) netrom: Fix use-after-free caused by accept on already connected socket CVE-2023-33203: (unk) net: qcom/emac: Fix use after free bug in emac_remove due to race condition + CVE-2023-33250: (unk) + CVE-2023-33288: (unk) power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
diff --git a/data/4.19/4.19_CVEs.txt b/data/4.19/4.19_CVEs.txt index c5d9877..a067858 100644 --- a/data/4.19/4.19_CVEs.txt +++ b/data/4.19/4.19_CVEs.txt
@@ -457,6 +457,7 @@ CVE-2020-36557: Fixed with 4.19.114 CVE-2020-36558: Fixed with 4.19.107 CVE-2020-36691: Fix not seen in stream +CVE-2020-36694: Fixed with 4.19.164 CVE-2020-3702: Fixed with 4.19.205 CVE-2020-4788: Fixed with 4.19.159 CVE-2020-7053: Fix not seen in stream @@ -874,7 +875,7 @@ CVE-2023-26545: Fixed with 4.19.273 CVE-2023-26607: Fixed with 4.19.267 CVE-2023-28328: Fixed with 4.19.270 -CVE-2023-28410: Fix unknown +CVE-2023-28410: Fix not seen in stream CVE-2023-28466: Fix not seen in stream CVE-2023-28772: Fixed with 4.19.198 CVE-2023-30456: Fixed with 4.19.281 @@ -882,9 +883,13 @@ CVE-2023-31081: Fix unknown CVE-2023-31082: Fix unknown CVE-2023-31083: Fix unknown -CVE-2023-31084: Fix unknown +CVE-2023-31084: Fix not seen in stream CVE-2023-31085: Fix unknown CVE-2023-31436: Fixed with 4.19.282 CVE-2023-32233: Fixed with 4.19.283 +CVE-2023-32250: Fix not seen in stream +CVE-2023-32254: Fix not seen in stream CVE-2023-32269: Fixed with 4.19.273 CVE-2023-33203: Fixed with 4.19.280 +CVE-2023-33250: Fix unknown +CVE-2023-33288: Fix not seen in stream
diff --git a/data/4.19/4.19_security.txt b/data/4.19/4.19_security.txt index 4076583..b01e426 100644 --- a/data/4.19/4.19_security.txt +++ b/data/4.19/4.19_security.txt
@@ -634,6 +634,7 @@ CVE-2020-27815: c7e31b2fecfe0ebd5bd6a8274b2fbfb9c9401738 jfs: Fix array index bounds check in dbAdjTree CVE-2020-29568: 9039eb22f99545fa80a5897496452cf9962e3289 xen/xenbus: Allow watches discard events before queueing CVE-2020-29569: 014ee1c7d184acb8986152014a570ba7c69d3616 xen-blkback: set ring->xenblkd to NULL after kthread_stop() + CVE-2020-36694: 98ab3ff5e789985ec8c24f813c7a989b445da084 netfilter: x_tables: Switch synchronization to RCU CVE-2021-0938: b207caff4176e3a6ba273243da2db2e595e4aad2 compiler.h: fix barrier_data() on clang CVEs fixed in 4.19.166: @@ -1331,10 +1332,14 @@ CVE-2023-23039: (unk) CVE-2023-2430: (unk) io_uring/msg_ring: fix missing lock on overflow for IOPOLL CVE-2023-26242: (unk) - CVE-2023-28410: (unk) + CVE-2023-28410: (unk) drm/i915/gem: add missing boundary check in vm_access CVE-2023-28466: (unk) net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf() CVE-2023-31081: (unk) CVE-2023-31082: (unk) CVE-2023-31083: (unk) - CVE-2023-31084: (unk) + CVE-2023-31084: (unk) media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() CVE-2023-31085: (unk) + CVE-2023-32250: (unk) ksmbd: fix racy issue from session setup and logoff + CVE-2023-32254: (unk) ksmbd: fix racy issue under cocurrent smb2 tree disconnect + CVE-2023-33250: (unk) + CVE-2023-33288: (unk) power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
diff --git a/data/4.20/4.20_CVEs.txt b/data/4.20/4.20_CVEs.txt index 23be7a5..9bd2dd5 100644 --- a/data/4.20/4.20_CVEs.txt +++ b/data/4.20/4.20_CVEs.txt
@@ -446,6 +446,7 @@ CVE-2020-36557: Fix not seen in stream CVE-2020-36558: Fix not seen in stream CVE-2020-36691: Fix not seen in stream +CVE-2020-36694: Fix not seen in stream CVE-2020-3702: Fix not seen in stream CVE-2020-4788: Fix not seen in stream CVE-2020-7053: Fix not seen in stream @@ -870,7 +871,7 @@ CVE-2023-26545: Fix not seen in stream CVE-2023-26607: Fix not seen in stream CVE-2023-28328: Fix not seen in stream -CVE-2023-28410: Fix unknown +CVE-2023-28410: Fix not seen in stream CVE-2023-28466: Fix not seen in stream CVE-2023-28772: Fix not seen in stream CVE-2023-30456: Fix not seen in stream @@ -878,9 +879,13 @@ CVE-2023-31081: Fix unknown CVE-2023-31082: Fix unknown CVE-2023-31083: Fix unknown -CVE-2023-31084: Fix unknown +CVE-2023-31084: Fix not seen in stream CVE-2023-31085: Fix unknown CVE-2023-31436: Fix not seen in stream CVE-2023-32233: Fix not seen in stream +CVE-2023-32250: Fix not seen in stream +CVE-2023-32254: Fix not seen in stream CVE-2023-32269: Fix not seen in stream CVE-2023-33203: Fix not seen in stream +CVE-2023-33250: Fix unknown +CVE-2023-33288: Fix not seen in stream
diff --git a/data/4.20/4.20_security.txt b/data/4.20/4.20_security.txt index a9533b9..2a4ed9e 100644 --- a/data/4.20/4.20_security.txt +++ b/data/4.20/4.20_security.txt
@@ -479,6 +479,7 @@ CVE-2020-36557: (unk) vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console CVE-2020-36558: (unk) vt: vt_ioctl: fix race in VT_RESIZEX CVE-2020-36691: (unk) netlink: limit recursion depth in policy validation + CVE-2020-36694: (unk) netfilter: x_tables: Switch synchronization to RCU CVE-2020-3702: (unk) ath: Use safer key clearing with key cache entries CVE-2020-4788: (unk) powerpc/64s: flush L1D on kernel entry CVE-2020-7053: (unk) drm/i915: Introduce a mutex for file_priv->context_idr @@ -902,7 +903,7 @@ CVE-2023-26545: (unk) net: mpls: fix stale pointer if allocation fails during device rename CVE-2023-26607: (unk) ntfs: fix out-of-bounds read in ntfs_attr_find() CVE-2023-28328: (unk) media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer() - CVE-2023-28410: (unk) + CVE-2023-28410: (unk) drm/i915/gem: add missing boundary check in vm_access CVE-2023-28466: (unk) net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf() CVE-2023-28772: (unk) seq_buf: Fix overflow in seq_buf_putmem_hex() CVE-2023-30456: (unk) KVM: nVMX: add missing consistency checks for CR0 and CR4 @@ -910,9 +911,13 @@ CVE-2023-31081: (unk) CVE-2023-31082: (unk) CVE-2023-31083: (unk) - CVE-2023-31084: (unk) + CVE-2023-31084: (unk) media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() CVE-2023-31085: (unk) CVE-2023-31436: (unk) net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg CVE-2023-32233: (unk) netfilter: nf_tables: deactivate anonymous set from preparation phase + CVE-2023-32250: (unk) ksmbd: fix racy issue from session setup and logoff + CVE-2023-32254: (unk) ksmbd: fix racy issue under cocurrent smb2 tree disconnect CVE-2023-32269: (unk) netrom: Fix use-after-free caused by accept on already connected socket CVE-2023-33203: (unk) net: qcom/emac: Fix use after free bug in emac_remove due to race condition + CVE-2023-33250: (unk) + CVE-2023-33288: (unk) power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
diff --git a/data/4.3/4.3_CVEs.txt b/data/4.3/4.3_CVEs.txt index d57253d..0f44f4b 100644 --- a/data/4.3/4.3_CVEs.txt +++ b/data/4.3/4.3_CVEs.txt
@@ -1178,16 +1178,19 @@ CVE-2023-26545: Fix not seen in stream CVE-2023-26607: Fix not seen in stream CVE-2023-28328: Fix not seen in stream -CVE-2023-28410: Fix unknown +CVE-2023-28410: Fix not seen in stream CVE-2023-28772: Fix not seen in stream CVE-2023-30456: Fix not seen in stream CVE-2023-30772: Fix not seen in stream CVE-2023-31081: Fix unknown CVE-2023-31082: Fix unknown CVE-2023-31083: Fix unknown -CVE-2023-31084: Fix unknown +CVE-2023-31084: Fix not seen in stream CVE-2023-31085: Fix unknown CVE-2023-31436: Fix not seen in stream CVE-2023-32233: Fix not seen in stream +CVE-2023-32250: Fix not seen in stream +CVE-2023-32254: Fix not seen in stream CVE-2023-32269: Fix not seen in stream -CVE-2023-33203: Fix not seen in stream +CVE-2023-33250: Fix unknown +CVE-2023-33288: Fix not seen in stream
diff --git a/data/4.3/4.3_security.txt b/data/4.3/4.3_security.txt index 8ac26cd..c1b72fd 100644 --- a/data/4.3/4.3_security.txt +++ b/data/4.3/4.3_security.txt
@@ -1194,16 +1194,19 @@ CVE-2023-26545: (unk) net: mpls: fix stale pointer if allocation fails during device rename CVE-2023-26607: (unk) ntfs: fix out-of-bounds read in ntfs_attr_find() CVE-2023-28328: (unk) media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer() - CVE-2023-28410: (unk) + CVE-2023-28410: (unk) drm/i915/gem: add missing boundary check in vm_access CVE-2023-28772: (unk) seq_buf: Fix overflow in seq_buf_putmem_hex() CVE-2023-30456: (unk) KVM: nVMX: add missing consistency checks for CR0 and CR4 CVE-2023-30772: (unk) power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition CVE-2023-31081: (unk) CVE-2023-31082: (unk) CVE-2023-31083: (unk) - CVE-2023-31084: (unk) + CVE-2023-31084: (unk) media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() CVE-2023-31085: (unk) CVE-2023-31436: (unk) net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg CVE-2023-32233: (unk) netfilter: nf_tables: deactivate anonymous set from preparation phase + CVE-2023-32250: (unk) ksmbd: fix racy issue from session setup and logoff + CVE-2023-32254: (unk) ksmbd: fix racy issue under cocurrent smb2 tree disconnect CVE-2023-32269: (unk) netrom: Fix use-after-free caused by accept on already connected socket - CVE-2023-33203: (unk) net: qcom/emac: Fix use after free bug in emac_remove due to race condition + CVE-2023-33250: (unk) + CVE-2023-33288: (unk) power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
diff --git a/data/4.4/4.4_CVEs.txt b/data/4.4/4.4_CVEs.txt index 3a5b4e9..13a858b 100644 --- a/data/4.4/4.4_CVEs.txt +++ b/data/4.4/4.4_CVEs.txt
@@ -1159,16 +1159,19 @@ CVE-2023-26545: Fix not seen in stream CVE-2023-26607: Fix not seen in stream CVE-2023-28328: Fix not seen in stream -CVE-2023-28410: Fix unknown +CVE-2023-28410: Fix not seen in stream CVE-2023-28772: Fixed with 4.4.276 CVE-2023-30456: Fix not seen in stream CVE-2023-30772: Fix not seen in stream CVE-2023-31081: Fix unknown CVE-2023-31082: Fix unknown CVE-2023-31083: Fix unknown -CVE-2023-31084: Fix unknown +CVE-2023-31084: Fix not seen in stream CVE-2023-31085: Fix unknown CVE-2023-31436: Fix not seen in stream CVE-2023-32233: Fix not seen in stream +CVE-2023-32250: Fix not seen in stream +CVE-2023-32254: Fix not seen in stream CVE-2023-32269: Fix not seen in stream -CVE-2023-33203: Fix not seen in stream +CVE-2023-33250: Fix unknown +CVE-2023-33288: Fix not seen in stream
diff --git a/data/4.4/4.4_security.txt b/data/4.4/4.4_security.txt index b9fe4da..d0ff873 100644 --- a/data/4.4/4.4_security.txt +++ b/data/4.4/4.4_security.txt
@@ -1644,15 +1644,18 @@ CVE-2023-26545: (unk) net: mpls: fix stale pointer if allocation fails during device rename CVE-2023-26607: (unk) ntfs: fix out-of-bounds read in ntfs_attr_find() CVE-2023-28328: (unk) media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer() - CVE-2023-28410: (unk) + CVE-2023-28410: (unk) drm/i915/gem: add missing boundary check in vm_access CVE-2023-30456: (unk) KVM: nVMX: add missing consistency checks for CR0 and CR4 CVE-2023-30772: (unk) power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition CVE-2023-31081: (unk) CVE-2023-31082: (unk) CVE-2023-31083: (unk) - CVE-2023-31084: (unk) + CVE-2023-31084: (unk) media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() CVE-2023-31085: (unk) CVE-2023-31436: (unk) net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg CVE-2023-32233: (unk) netfilter: nf_tables: deactivate anonymous set from preparation phase + CVE-2023-32250: (unk) ksmbd: fix racy issue from session setup and logoff + CVE-2023-32254: (unk) ksmbd: fix racy issue under cocurrent smb2 tree disconnect CVE-2023-32269: (unk) netrom: Fix use-after-free caused by accept on already connected socket - CVE-2023-33203: (unk) net: qcom/emac: Fix use after free bug in emac_remove due to race condition + CVE-2023-33250: (unk) + CVE-2023-33288: (unk) power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
diff --git a/data/4.5/4.5_CVEs.txt b/data/4.5/4.5_CVEs.txt index 3caec9e..2adc146 100644 --- a/data/4.5/4.5_CVEs.txt +++ b/data/4.5/4.5_CVEs.txt
@@ -1142,16 +1142,19 @@ CVE-2023-26545: Fix not seen in stream CVE-2023-26607: Fix not seen in stream CVE-2023-28328: Fix not seen in stream -CVE-2023-28410: Fix unknown +CVE-2023-28410: Fix not seen in stream CVE-2023-28772: Fix not seen in stream CVE-2023-30456: Fix not seen in stream CVE-2023-30772: Fix not seen in stream CVE-2023-31081: Fix unknown CVE-2023-31082: Fix unknown CVE-2023-31083: Fix unknown -CVE-2023-31084: Fix unknown +CVE-2023-31084: Fix not seen in stream CVE-2023-31085: Fix unknown CVE-2023-31436: Fix not seen in stream CVE-2023-32233: Fix not seen in stream +CVE-2023-32250: Fix not seen in stream +CVE-2023-32254: Fix not seen in stream CVE-2023-32269: Fix not seen in stream -CVE-2023-33203: Fix not seen in stream +CVE-2023-33250: Fix unknown +CVE-2023-33288: Fix not seen in stream
diff --git a/data/4.5/4.5_security.txt b/data/4.5/4.5_security.txt index f10aee8..fc41b41 100644 --- a/data/4.5/4.5_security.txt +++ b/data/4.5/4.5_security.txt
@@ -1158,16 +1158,19 @@ CVE-2023-26545: (unk) net: mpls: fix stale pointer if allocation fails during device rename CVE-2023-26607: (unk) ntfs: fix out-of-bounds read in ntfs_attr_find() CVE-2023-28328: (unk) media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer() - CVE-2023-28410: (unk) + CVE-2023-28410: (unk) drm/i915/gem: add missing boundary check in vm_access CVE-2023-28772: (unk) seq_buf: Fix overflow in seq_buf_putmem_hex() CVE-2023-30456: (unk) KVM: nVMX: add missing consistency checks for CR0 and CR4 CVE-2023-30772: (unk) power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition CVE-2023-31081: (unk) CVE-2023-31082: (unk) CVE-2023-31083: (unk) - CVE-2023-31084: (unk) + CVE-2023-31084: (unk) media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() CVE-2023-31085: (unk) CVE-2023-31436: (unk) net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg CVE-2023-32233: (unk) netfilter: nf_tables: deactivate anonymous set from preparation phase + CVE-2023-32250: (unk) ksmbd: fix racy issue from session setup and logoff + CVE-2023-32254: (unk) ksmbd: fix racy issue under cocurrent smb2 tree disconnect CVE-2023-32269: (unk) netrom: Fix use-after-free caused by accept on already connected socket - CVE-2023-33203: (unk) net: qcom/emac: Fix use after free bug in emac_remove due to race condition + CVE-2023-33250: (unk) + CVE-2023-33288: (unk) power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
diff --git a/data/4.6/4.6_CVEs.txt b/data/4.6/4.6_CVEs.txt index 082b4fa..5ca14d0 100644 --- a/data/4.6/4.6_CVEs.txt +++ b/data/4.6/4.6_CVEs.txt
@@ -1115,16 +1115,19 @@ CVE-2023-26545: Fix not seen in stream CVE-2023-26607: Fix not seen in stream CVE-2023-28328: Fix not seen in stream -CVE-2023-28410: Fix unknown +CVE-2023-28410: Fix not seen in stream CVE-2023-28772: Fix not seen in stream CVE-2023-30456: Fix not seen in stream CVE-2023-30772: Fix not seen in stream CVE-2023-31081: Fix unknown CVE-2023-31082: Fix unknown CVE-2023-31083: Fix unknown -CVE-2023-31084: Fix unknown +CVE-2023-31084: Fix not seen in stream CVE-2023-31085: Fix unknown CVE-2023-31436: Fix not seen in stream CVE-2023-32233: Fix not seen in stream +CVE-2023-32250: Fix not seen in stream +CVE-2023-32254: Fix not seen in stream CVE-2023-32269: Fix not seen in stream -CVE-2023-33203: Fix not seen in stream +CVE-2023-33250: Fix unknown +CVE-2023-33288: Fix not seen in stream
diff --git a/data/4.6/4.6_security.txt b/data/4.6/4.6_security.txt index 565f939..6067ce0 100644 --- a/data/4.6/4.6_security.txt +++ b/data/4.6/4.6_security.txt
@@ -1133,16 +1133,19 @@ CVE-2023-26545: (unk) net: mpls: fix stale pointer if allocation fails during device rename CVE-2023-26607: (unk) ntfs: fix out-of-bounds read in ntfs_attr_find() CVE-2023-28328: (unk) media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer() - CVE-2023-28410: (unk) + CVE-2023-28410: (unk) drm/i915/gem: add missing boundary check in vm_access CVE-2023-28772: (unk) seq_buf: Fix overflow in seq_buf_putmem_hex() CVE-2023-30456: (unk) KVM: nVMX: add missing consistency checks for CR0 and CR4 CVE-2023-30772: (unk) power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition CVE-2023-31081: (unk) CVE-2023-31082: (unk) CVE-2023-31083: (unk) - CVE-2023-31084: (unk) + CVE-2023-31084: (unk) media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() CVE-2023-31085: (unk) CVE-2023-31436: (unk) net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg CVE-2023-32233: (unk) netfilter: nf_tables: deactivate anonymous set from preparation phase + CVE-2023-32250: (unk) ksmbd: fix racy issue from session setup and logoff + CVE-2023-32254: (unk) ksmbd: fix racy issue under cocurrent smb2 tree disconnect CVE-2023-32269: (unk) netrom: Fix use-after-free caused by accept on already connected socket - CVE-2023-33203: (unk) net: qcom/emac: Fix use after free bug in emac_remove due to race condition + CVE-2023-33250: (unk) + CVE-2023-33288: (unk) power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
diff --git a/data/4.7/4.7_CVEs.txt b/data/4.7/4.7_CVEs.txt index 6d19dfe..b0f817b 100644 --- a/data/4.7/4.7_CVEs.txt +++ b/data/4.7/4.7_CVEs.txt
@@ -1098,16 +1098,19 @@ CVE-2023-26545: Fix not seen in stream CVE-2023-26607: Fix not seen in stream CVE-2023-28328: Fix not seen in stream -CVE-2023-28410: Fix unknown +CVE-2023-28410: Fix not seen in stream CVE-2023-28772: Fix not seen in stream CVE-2023-30456: Fix not seen in stream CVE-2023-30772: Fix not seen in stream CVE-2023-31081: Fix unknown CVE-2023-31082: Fix unknown CVE-2023-31083: Fix unknown -CVE-2023-31084: Fix unknown +CVE-2023-31084: Fix not seen in stream CVE-2023-31085: Fix unknown CVE-2023-31436: Fix not seen in stream CVE-2023-32233: Fix not seen in stream +CVE-2023-32250: Fix not seen in stream +CVE-2023-32254: Fix not seen in stream CVE-2023-32269: Fix not seen in stream -CVE-2023-33203: Fix not seen in stream +CVE-2023-33250: Fix unknown +CVE-2023-33288: Fix not seen in stream
diff --git a/data/4.7/4.7_security.txt b/data/4.7/4.7_security.txt index e3a5a5e..4149ca4 100644 --- a/data/4.7/4.7_security.txt +++ b/data/4.7/4.7_security.txt
@@ -1118,16 +1118,19 @@ CVE-2023-26545: (unk) net: mpls: fix stale pointer if allocation fails during device rename CVE-2023-26607: (unk) ntfs: fix out-of-bounds read in ntfs_attr_find() CVE-2023-28328: (unk) media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer() - CVE-2023-28410: (unk) + CVE-2023-28410: (unk) drm/i915/gem: add missing boundary check in vm_access CVE-2023-28772: (unk) seq_buf: Fix overflow in seq_buf_putmem_hex() CVE-2023-30456: (unk) KVM: nVMX: add missing consistency checks for CR0 and CR4 CVE-2023-30772: (unk) power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition CVE-2023-31081: (unk) CVE-2023-31082: (unk) CVE-2023-31083: (unk) - CVE-2023-31084: (unk) + CVE-2023-31084: (unk) media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() CVE-2023-31085: (unk) CVE-2023-31436: (unk) net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg CVE-2023-32233: (unk) netfilter: nf_tables: deactivate anonymous set from preparation phase + CVE-2023-32250: (unk) ksmbd: fix racy issue from session setup and logoff + CVE-2023-32254: (unk) ksmbd: fix racy issue under cocurrent smb2 tree disconnect CVE-2023-32269: (unk) netrom: Fix use-after-free caused by accept on already connected socket - CVE-2023-33203: (unk) net: qcom/emac: Fix use after free bug in emac_remove due to race condition + CVE-2023-33250: (unk) + CVE-2023-33288: (unk) power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
diff --git a/data/4.8/4.8_CVEs.txt b/data/4.8/4.8_CVEs.txt index b9a2395..6dbfadd 100644 --- a/data/4.8/4.8_CVEs.txt +++ b/data/4.8/4.8_CVEs.txt
@@ -1102,16 +1102,19 @@ CVE-2023-26545: Fix not seen in stream CVE-2023-26607: Fix not seen in stream CVE-2023-28328: Fix not seen in stream -CVE-2023-28410: Fix unknown +CVE-2023-28410: Fix not seen in stream CVE-2023-28772: Fix not seen in stream CVE-2023-30456: Fix not seen in stream CVE-2023-30772: Fix not seen in stream CVE-2023-31081: Fix unknown CVE-2023-31082: Fix unknown CVE-2023-31083: Fix unknown -CVE-2023-31084: Fix unknown +CVE-2023-31084: Fix not seen in stream CVE-2023-31085: Fix unknown CVE-2023-31436: Fix not seen in stream CVE-2023-32233: Fix not seen in stream +CVE-2023-32250: Fix not seen in stream +CVE-2023-32254: Fix not seen in stream CVE-2023-32269: Fix not seen in stream -CVE-2023-33203: Fix not seen in stream +CVE-2023-33250: Fix unknown +CVE-2023-33288: Fix not seen in stream
diff --git a/data/4.8/4.8_security.txt b/data/4.8/4.8_security.txt index 8fe6e9e..bf5ed1c 100644 --- a/data/4.8/4.8_security.txt +++ b/data/4.8/4.8_security.txt
@@ -1132,16 +1132,19 @@ CVE-2023-26545: (unk) net: mpls: fix stale pointer if allocation fails during device rename CVE-2023-26607: (unk) ntfs: fix out-of-bounds read in ntfs_attr_find() CVE-2023-28328: (unk) media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer() - CVE-2023-28410: (unk) + CVE-2023-28410: (unk) drm/i915/gem: add missing boundary check in vm_access CVE-2023-28772: (unk) seq_buf: Fix overflow in seq_buf_putmem_hex() CVE-2023-30456: (unk) KVM: nVMX: add missing consistency checks for CR0 and CR4 CVE-2023-30772: (unk) power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition CVE-2023-31081: (unk) CVE-2023-31082: (unk) CVE-2023-31083: (unk) - CVE-2023-31084: (unk) + CVE-2023-31084: (unk) media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() CVE-2023-31085: (unk) CVE-2023-31436: (unk) net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg CVE-2023-32233: (unk) netfilter: nf_tables: deactivate anonymous set from preparation phase + CVE-2023-32250: (unk) ksmbd: fix racy issue from session setup and logoff + CVE-2023-32254: (unk) ksmbd: fix racy issue under cocurrent smb2 tree disconnect CVE-2023-32269: (unk) netrom: Fix use-after-free caused by accept on already connected socket - CVE-2023-33203: (unk) net: qcom/emac: Fix use after free bug in emac_remove due to race condition + CVE-2023-33250: (unk) + CVE-2023-33288: (unk) power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
diff --git a/data/4.9/4.9_CVEs.txt b/data/4.9/4.9_CVEs.txt index cc76937..9cc8405 100644 --- a/data/4.9/4.9_CVEs.txt +++ b/data/4.9/4.9_CVEs.txt
@@ -1104,16 +1104,20 @@ CVE-2023-26545: Fix not seen in stream CVE-2023-26607: Fixed with 4.9.334 CVE-2023-28328: Fixed with 4.9.337 -CVE-2023-28410: Fix unknown +CVE-2023-28410: Fix not seen in stream CVE-2023-28772: Fixed with 4.9.276 CVE-2023-30456: Fix not seen in stream CVE-2023-30772: Fix not seen in stream CVE-2023-31081: Fix unknown CVE-2023-31082: Fix unknown CVE-2023-31083: Fix unknown -CVE-2023-31084: Fix unknown +CVE-2023-31084: Fix not seen in stream CVE-2023-31085: Fix unknown CVE-2023-31436: Fix not seen in stream CVE-2023-32233: Fix not seen in stream +CVE-2023-32250: Fix not seen in stream +CVE-2023-32254: Fix not seen in stream CVE-2023-32269: Fix not seen in stream CVE-2023-33203: Fix not seen in stream +CVE-2023-33250: Fix unknown +CVE-2023-33288: Fix not seen in stream
diff --git a/data/4.9/4.9_security.txt b/data/4.9/4.9_security.txt index fad115f..b9d6352 100644 --- a/data/4.9/4.9_security.txt +++ b/data/4.9/4.9_security.txt
@@ -1649,15 +1649,19 @@ CVE-2023-2430: (unk) io_uring/msg_ring: fix missing lock on overflow for IOPOLL CVE-2023-2483: (unk) net: qcom/emac: Fix use after free bug in emac_remove due to race condition CVE-2023-26545: (unk) net: mpls: fix stale pointer if allocation fails during device rename - CVE-2023-28410: (unk) + CVE-2023-28410: (unk) drm/i915/gem: add missing boundary check in vm_access CVE-2023-30456: (unk) KVM: nVMX: add missing consistency checks for CR0 and CR4 CVE-2023-30772: (unk) power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition CVE-2023-31081: (unk) CVE-2023-31082: (unk) CVE-2023-31083: (unk) - CVE-2023-31084: (unk) + CVE-2023-31084: (unk) media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() CVE-2023-31085: (unk) CVE-2023-31436: (unk) net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg CVE-2023-32233: (unk) netfilter: nf_tables: deactivate anonymous set from preparation phase + CVE-2023-32250: (unk) ksmbd: fix racy issue from session setup and logoff + CVE-2023-32254: (unk) ksmbd: fix racy issue under cocurrent smb2 tree disconnect CVE-2023-32269: (unk) netrom: Fix use-after-free caused by accept on already connected socket CVE-2023-33203: (unk) net: qcom/emac: Fix use after free bug in emac_remove due to race condition + CVE-2023-33250: (unk) + CVE-2023-33288: (unk) power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
diff --git a/data/5.0/5.0_CVEs.txt b/data/5.0/5.0_CVEs.txt index 7a531d0..5c8b969 100644 --- a/data/5.0/5.0_CVEs.txt +++ b/data/5.0/5.0_CVEs.txt
@@ -425,6 +425,7 @@ CVE-2020-36557: Fix not seen in stream CVE-2020-36558: Fix not seen in stream CVE-2020-36691: Fix not seen in stream +CVE-2020-36694: Fix not seen in stream CVE-2020-3702: Fix not seen in stream CVE-2020-4788: Fix not seen in stream CVE-2020-7053: Fix not seen in stream @@ -849,7 +850,7 @@ CVE-2023-26545: Fix not seen in stream CVE-2023-26607: Fix not seen in stream CVE-2023-28328: Fix not seen in stream -CVE-2023-28410: Fix unknown +CVE-2023-28410: Fix not seen in stream CVE-2023-28466: Fix not seen in stream CVE-2023-28772: Fix not seen in stream CVE-2023-30456: Fix not seen in stream @@ -857,9 +858,13 @@ CVE-2023-31081: Fix unknown CVE-2023-31082: Fix unknown CVE-2023-31083: Fix unknown -CVE-2023-31084: Fix unknown +CVE-2023-31084: Fix not seen in stream CVE-2023-31085: Fix unknown CVE-2023-31436: Fix not seen in stream CVE-2023-32233: Fix not seen in stream +CVE-2023-32250: Fix not seen in stream +CVE-2023-32254: Fix not seen in stream CVE-2023-32269: Fix not seen in stream CVE-2023-33203: Fix not seen in stream +CVE-2023-33250: Fix unknown +CVE-2023-33288: Fix not seen in stream
diff --git a/data/5.0/5.0_security.txt b/data/5.0/5.0_security.txt index 638c154..3ac34b2 100644 --- a/data/5.0/5.0_security.txt +++ b/data/5.0/5.0_security.txt
@@ -473,6 +473,7 @@ CVE-2020-36557: (unk) vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console CVE-2020-36558: (unk) vt: vt_ioctl: fix race in VT_RESIZEX CVE-2020-36691: (unk) netlink: limit recursion depth in policy validation + CVE-2020-36694: (unk) netfilter: x_tables: Switch synchronization to RCU CVE-2020-3702: (unk) ath: Use safer key clearing with key cache entries CVE-2020-4788: (unk) powerpc/64s: flush L1D on kernel entry CVE-2020-7053: (unk) drm/i915: Introduce a mutex for file_priv->context_idr @@ -897,7 +898,7 @@ CVE-2023-26545: (unk) net: mpls: fix stale pointer if allocation fails during device rename CVE-2023-26607: (unk) ntfs: fix out-of-bounds read in ntfs_attr_find() CVE-2023-28328: (unk) media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer() - CVE-2023-28410: (unk) + CVE-2023-28410: (unk) drm/i915/gem: add missing boundary check in vm_access CVE-2023-28466: (unk) net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf() CVE-2023-28772: (unk) seq_buf: Fix overflow in seq_buf_putmem_hex() CVE-2023-30456: (unk) KVM: nVMX: add missing consistency checks for CR0 and CR4 @@ -905,9 +906,13 @@ CVE-2023-31081: (unk) CVE-2023-31082: (unk) CVE-2023-31083: (unk) - CVE-2023-31084: (unk) + CVE-2023-31084: (unk) media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() CVE-2023-31085: (unk) CVE-2023-31436: (unk) net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg CVE-2023-32233: (unk) netfilter: nf_tables: deactivate anonymous set from preparation phase + CVE-2023-32250: (unk) ksmbd: fix racy issue from session setup and logoff + CVE-2023-32254: (unk) ksmbd: fix racy issue under cocurrent smb2 tree disconnect CVE-2023-32269: (unk) netrom: Fix use-after-free caused by accept on already connected socket CVE-2023-33203: (unk) net: qcom/emac: Fix use after free bug in emac_remove due to race condition + CVE-2023-33250: (unk) + CVE-2023-33288: (unk) power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
diff --git a/data/5.1/5.1_CVEs.txt b/data/5.1/5.1_CVEs.txt index b93e3df..f5fc7ff 100644 --- a/data/5.1/5.1_CVEs.txt +++ b/data/5.1/5.1_CVEs.txt
@@ -389,6 +389,7 @@ CVE-2020-36557: Fix not seen in stream CVE-2020-36558: Fix not seen in stream CVE-2020-36691: Fix not seen in stream +CVE-2020-36694: Fix not seen in stream CVE-2020-3702: Fix not seen in stream CVE-2020-4788: Fix not seen in stream CVE-2020-7053: Fix not seen in stream @@ -827,7 +828,7 @@ CVE-2023-26545: Fix not seen in stream CVE-2023-26607: Fix not seen in stream CVE-2023-28328: Fix not seen in stream -CVE-2023-28410: Fix unknown +CVE-2023-28410: Fix not seen in stream CVE-2023-28466: Fix not seen in stream CVE-2023-28772: Fix not seen in stream CVE-2023-30456: Fix not seen in stream @@ -835,9 +836,13 @@ CVE-2023-31081: Fix unknown CVE-2023-31082: Fix unknown CVE-2023-31083: Fix unknown -CVE-2023-31084: Fix unknown +CVE-2023-31084: Fix not seen in stream CVE-2023-31085: Fix unknown CVE-2023-31436: Fix not seen in stream CVE-2023-32233: Fix not seen in stream +CVE-2023-32250: Fix not seen in stream +CVE-2023-32254: Fix not seen in stream CVE-2023-32269: Fix not seen in stream CVE-2023-33203: Fix not seen in stream +CVE-2023-33250: Fix unknown +CVE-2023-33288: Fix not seen in stream
diff --git a/data/5.1/5.1_security.txt b/data/5.1/5.1_security.txt index 449e589..c164f10 100644 --- a/data/5.1/5.1_security.txt +++ b/data/5.1/5.1_security.txt
@@ -425,6 +425,7 @@ CVE-2020-36557: (unk) vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console CVE-2020-36558: (unk) vt: vt_ioctl: fix race in VT_RESIZEX CVE-2020-36691: (unk) netlink: limit recursion depth in policy validation + CVE-2020-36694: (unk) netfilter: x_tables: Switch synchronization to RCU CVE-2020-3702: (unk) ath: Use safer key clearing with key cache entries CVE-2020-4788: (unk) powerpc/64s: flush L1D on kernel entry CVE-2020-7053: (unk) drm/i915: Introduce a mutex for file_priv->context_idr @@ -863,7 +864,7 @@ CVE-2023-26545: (unk) net: mpls: fix stale pointer if allocation fails during device rename CVE-2023-26607: (unk) ntfs: fix out-of-bounds read in ntfs_attr_find() CVE-2023-28328: (unk) media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer() - CVE-2023-28410: (unk) + CVE-2023-28410: (unk) drm/i915/gem: add missing boundary check in vm_access CVE-2023-28466: (unk) net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf() CVE-2023-28772: (unk) seq_buf: Fix overflow in seq_buf_putmem_hex() CVE-2023-30456: (unk) KVM: nVMX: add missing consistency checks for CR0 and CR4 @@ -871,9 +872,13 @@ CVE-2023-31081: (unk) CVE-2023-31082: (unk) CVE-2023-31083: (unk) - CVE-2023-31084: (unk) + CVE-2023-31084: (unk) media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() CVE-2023-31085: (unk) CVE-2023-31436: (unk) net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg CVE-2023-32233: (unk) netfilter: nf_tables: deactivate anonymous set from preparation phase + CVE-2023-32250: (unk) ksmbd: fix racy issue from session setup and logoff + CVE-2023-32254: (unk) ksmbd: fix racy issue under cocurrent smb2 tree disconnect CVE-2023-32269: (unk) netrom: Fix use-after-free caused by accept on already connected socket CVE-2023-33203: (unk) net: qcom/emac: Fix use after free bug in emac_remove due to race condition + CVE-2023-33250: (unk) + CVE-2023-33288: (unk) power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
diff --git a/data/5.10/5.10_CVEs.txt b/data/5.10/5.10_CVEs.txt index 56aef2c..95a9633 100644 --- a/data/5.10/5.10_CVEs.txt +++ b/data/5.10/5.10_CVEs.txt
@@ -74,6 +74,7 @@ CVE-2020-36158: Fixed with 5.10.6 CVE-2020-36322: Fixed with 5.10.6 CVE-2020-36516: Fixed with 5.10.96 +CVE-2020-36694: Fixed with 5.10 CVE-2020-3702: Fixed with 5.10.61 CVE-2021-0129: Fixed with 5.10.40 CVE-2021-0399: Fix unknown @@ -569,7 +570,7 @@ CVE-2023-26607: Fixed with 5.10.156 CVE-2023-28327: Fixed with 5.10.159 CVE-2023-28328: Fixed with 5.10.163 -CVE-2023-28410: Fix unknown +CVE-2023-28410: Fixed with 5.10.110 CVE-2023-28466: Fixed with 5.10.177 CVE-2023-28772: Fixed with 5.10.51 CVE-2023-30456: Fixed with 5.10.176 @@ -577,9 +578,13 @@ CVE-2023-31081: Fix unknown CVE-2023-31082: Fix unknown CVE-2023-31083: Fix unknown -CVE-2023-31084: Fix unknown +CVE-2023-31084: Fix not seen in stream CVE-2023-31085: Fix unknown CVE-2023-31436: Fixed with 5.10.179 CVE-2023-32233: Fixed with 5.10.180 +CVE-2023-32250: Fix not seen in stream +CVE-2023-32254: Fix not seen in stream CVE-2023-32269: Fixed with 5.10.168 CVE-2023-33203: Fixed with 5.10.177 +CVE-2023-33250: Fix unknown +CVE-2023-33288: Fixed with 5.10.177
diff --git a/data/5.10/5.10_security.txt b/data/5.10/5.10_security.txt index fb3fc66..dd07e3e 100644 --- a/data/5.10/5.10_security.txt +++ b/data/5.10/5.10_security.txt
@@ -1,5 +1,6 @@ CVEs fixed in 5.10: + CVE-2020-36694: cc00bcaa589914096edef7fb87ca5cee4a166b5c netfilter: x_tables: Switch synchronization to RCU CVE-2021-3411: 0d07c0ec4381f630c801539c79ad8dcc627f6e4a x86/kprobes: Fix optprobe to detect INT3 padding correctly CVEs fixed in 5.10.4: @@ -412,6 +413,7 @@ CVE-2022-3113: bc2573abc691a269b54a6c14a2660f26d88876a5 media: mtk-vcodec: potential dereference of null pointer CVE-2022-3239: ec8a37b2d9a76a9443feb0af95bd06ac3df25444 media: em28xx: initialize refcount before kref_get CVE-2023-1249: 558564db44755dfb3e48b0d64de327d20981e950 coredump: Use the vma snapshot in fill_files_note + CVE-2023-28410: 89ddcc81914ab58cc203acc844f27d55ada8ec0e drm/i915/gem: add missing boundary check in vm_access CVEs fixed in 5.10.111: CVE-2021-4197: 4665722d36ad13c6abc6b2ef3fe5150c0a92d870 cgroup: Use open-time credentials for process migraton perm checks @@ -691,6 +693,7 @@ CVE-2023-28466: 1fde5782f187daa05919d2bebd872df8ebcc00d1 net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf() CVE-2023-30772: 75e2144291e847009fbc0350e10ec588ff96e05a power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition CVE-2023-33203: cb5879efde4f9b4de4248b835890df7b6c49ffbc net: qcom/emac: Fix use after free bug in emac_remove due to race condition + CVE-2023-33288: 2b346876b93168541a45551d5f9abd1d26102e89 power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition CVEs fixed in 5.10.178: CVE-2023-1859: 9266e939d76279d8710196d86215ba2be6345041 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition @@ -843,9 +846,11 @@ CVE-2023-23586: (unk) io_uring: remove io_identity CVE-2023-2430: (unk) io_uring/msg_ring: fix missing lock on overflow for IOPOLL CVE-2023-26242: (unk) - CVE-2023-28410: (unk) CVE-2023-31081: (unk) CVE-2023-31082: (unk) CVE-2023-31083: (unk) - CVE-2023-31084: (unk) + CVE-2023-31084: (unk) media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() CVE-2023-31085: (unk) + CVE-2023-32250: (unk) ksmbd: fix racy issue from session setup and logoff + CVE-2023-32254: (unk) ksmbd: fix racy issue under cocurrent smb2 tree disconnect + CVE-2023-33250: (unk)
diff --git a/data/5.11/5.11_CVEs.txt b/data/5.11/5.11_CVEs.txt index e2cbc41..b7579b1 100644 --- a/data/5.11/5.11_CVEs.txt +++ b/data/5.11/5.11_CVEs.txt
@@ -561,7 +561,7 @@ CVE-2023-26607: Fix not seen in stream CVE-2023-28327: Fix not seen in stream CVE-2023-28328: Fix not seen in stream -CVE-2023-28410: Fix unknown +CVE-2023-28410: Fix not seen in stream CVE-2023-28466: Fix not seen in stream CVE-2023-28772: Fix not seen in stream CVE-2023-30456: Fix not seen in stream @@ -569,9 +569,13 @@ CVE-2023-31081: Fix unknown CVE-2023-31082: Fix unknown CVE-2023-31083: Fix unknown -CVE-2023-31084: Fix unknown +CVE-2023-31084: Fix not seen in stream CVE-2023-31085: Fix unknown CVE-2023-31436: Fix not seen in stream CVE-2023-32233: Fix not seen in stream +CVE-2023-32250: Fix not seen in stream +CVE-2023-32254: Fix not seen in stream CVE-2023-32269: Fix not seen in stream CVE-2023-33203: Fix not seen in stream +CVE-2023-33250: Fix unknown +CVE-2023-33288: Fix not seen in stream
diff --git a/data/5.11/5.11_security.txt b/data/5.11/5.11_security.txt index e6b20fd..42070c1 100644 --- a/data/5.11/5.11_security.txt +++ b/data/5.11/5.11_security.txt
@@ -601,7 +601,7 @@ CVE-2023-26607: (unk) ntfs: fix out-of-bounds read in ntfs_attr_find() CVE-2023-28327: (unk) af_unix: Get user_ns from in_skb in unix_diag_get_exact(). CVE-2023-28328: (unk) media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer() - CVE-2023-28410: (unk) + CVE-2023-28410: (unk) drm/i915/gem: add missing boundary check in vm_access CVE-2023-28466: (unk) net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf() CVE-2023-28772: (unk) seq_buf: Fix overflow in seq_buf_putmem_hex() CVE-2023-30456: (unk) KVM: nVMX: add missing consistency checks for CR0 and CR4 @@ -609,9 +609,13 @@ CVE-2023-31081: (unk) CVE-2023-31082: (unk) CVE-2023-31083: (unk) - CVE-2023-31084: (unk) + CVE-2023-31084: (unk) media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() CVE-2023-31085: (unk) CVE-2023-31436: (unk) net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg CVE-2023-32233: (unk) netfilter: nf_tables: deactivate anonymous set from preparation phase + CVE-2023-32250: (unk) ksmbd: fix racy issue from session setup and logoff + CVE-2023-32254: (unk) ksmbd: fix racy issue under cocurrent smb2 tree disconnect CVE-2023-32269: (unk) netrom: Fix use-after-free caused by accept on already connected socket CVE-2023-33203: (unk) net: qcom/emac: Fix use after free bug in emac_remove due to race condition + CVE-2023-33250: (unk) + CVE-2023-33288: (unk) power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
diff --git a/data/5.12/5.12_CVEs.txt b/data/5.12/5.12_CVEs.txt index 75d5fe9..e1ef56c 100644 --- a/data/5.12/5.12_CVEs.txt +++ b/data/5.12/5.12_CVEs.txt
@@ -514,7 +514,7 @@ CVE-2023-26607: Fix not seen in stream CVE-2023-28327: Fix not seen in stream CVE-2023-28328: Fix not seen in stream -CVE-2023-28410: Fix unknown +CVE-2023-28410: Fix not seen in stream CVE-2023-28466: Fix not seen in stream CVE-2023-28772: Fixed with 5.12.18 CVE-2023-30456: Fix not seen in stream @@ -522,9 +522,13 @@ CVE-2023-31081: Fix unknown CVE-2023-31082: Fix unknown CVE-2023-31083: Fix unknown -CVE-2023-31084: Fix unknown +CVE-2023-31084: Fix not seen in stream CVE-2023-31085: Fix unknown CVE-2023-31436: Fix not seen in stream CVE-2023-32233: Fix not seen in stream +CVE-2023-32250: Fix not seen in stream +CVE-2023-32254: Fix not seen in stream CVE-2023-32269: Fix not seen in stream CVE-2023-33203: Fix not seen in stream +CVE-2023-33250: Fix unknown +CVE-2023-33288: Fix not seen in stream
diff --git a/data/5.12/5.12_security.txt b/data/5.12/5.12_security.txt index 0496dd3..ca6329f 100644 --- a/data/5.12/5.12_security.txt +++ b/data/5.12/5.12_security.txt
@@ -547,16 +547,20 @@ CVE-2023-26607: (unk) ntfs: fix out-of-bounds read in ntfs_attr_find() CVE-2023-28327: (unk) af_unix: Get user_ns from in_skb in unix_diag_get_exact(). CVE-2023-28328: (unk) media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer() - CVE-2023-28410: (unk) + CVE-2023-28410: (unk) drm/i915/gem: add missing boundary check in vm_access CVE-2023-28466: (unk) net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf() CVE-2023-30456: (unk) KVM: nVMX: add missing consistency checks for CR0 and CR4 CVE-2023-30772: (unk) power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition CVE-2023-31081: (unk) CVE-2023-31082: (unk) CVE-2023-31083: (unk) - CVE-2023-31084: (unk) + CVE-2023-31084: (unk) media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() CVE-2023-31085: (unk) CVE-2023-31436: (unk) net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg CVE-2023-32233: (unk) netfilter: nf_tables: deactivate anonymous set from preparation phase + CVE-2023-32250: (unk) ksmbd: fix racy issue from session setup and logoff + CVE-2023-32254: (unk) ksmbd: fix racy issue under cocurrent smb2 tree disconnect CVE-2023-32269: (unk) netrom: Fix use-after-free caused by accept on already connected socket CVE-2023-33203: (unk) net: qcom/emac: Fix use after free bug in emac_remove due to race condition + CVE-2023-33250: (unk) + CVE-2023-33288: (unk) power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
diff --git a/data/5.13/5.13_CVEs.txt b/data/5.13/5.13_CVEs.txt index f2e7406..17a246d 100644 --- a/data/5.13/5.13_CVEs.txt +++ b/data/5.13/5.13_CVEs.txt
@@ -483,7 +483,7 @@ CVE-2023-26607: Fix not seen in stream CVE-2023-28327: Fix not seen in stream CVE-2023-28328: Fix not seen in stream -CVE-2023-28410: Fix unknown +CVE-2023-28410: Fix not seen in stream CVE-2023-28466: Fix not seen in stream CVE-2023-28772: Fixed with 5.13.3 CVE-2023-30456: Fix not seen in stream @@ -491,9 +491,13 @@ CVE-2023-31081: Fix unknown CVE-2023-31082: Fix unknown CVE-2023-31083: Fix unknown -CVE-2023-31084: Fix unknown +CVE-2023-31084: Fix not seen in stream CVE-2023-31085: Fix unknown CVE-2023-31436: Fix not seen in stream CVE-2023-32233: Fix not seen in stream +CVE-2023-32250: Fix not seen in stream +CVE-2023-32254: Fix not seen in stream CVE-2023-32269: Fix not seen in stream CVE-2023-33203: Fix not seen in stream +CVE-2023-33250: Fix unknown +CVE-2023-33288: Fix not seen in stream
diff --git a/data/5.13/5.13_security.txt b/data/5.13/5.13_security.txt index 0544fbe..417e660 100644 --- a/data/5.13/5.13_security.txt +++ b/data/5.13/5.13_security.txt
@@ -516,16 +516,20 @@ CVE-2023-26607: (unk) ntfs: fix out-of-bounds read in ntfs_attr_find() CVE-2023-28327: (unk) af_unix: Get user_ns from in_skb in unix_diag_get_exact(). CVE-2023-28328: (unk) media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer() - CVE-2023-28410: (unk) + CVE-2023-28410: (unk) drm/i915/gem: add missing boundary check in vm_access CVE-2023-28466: (unk) net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf() CVE-2023-30456: (unk) KVM: nVMX: add missing consistency checks for CR0 and CR4 CVE-2023-30772: (unk) power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition CVE-2023-31081: (unk) CVE-2023-31082: (unk) CVE-2023-31083: (unk) - CVE-2023-31084: (unk) + CVE-2023-31084: (unk) media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() CVE-2023-31085: (unk) CVE-2023-31436: (unk) net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg CVE-2023-32233: (unk) netfilter: nf_tables: deactivate anonymous set from preparation phase + CVE-2023-32250: (unk) ksmbd: fix racy issue from session setup and logoff + CVE-2023-32254: (unk) ksmbd: fix racy issue under cocurrent smb2 tree disconnect CVE-2023-32269: (unk) netrom: Fix use-after-free caused by accept on already connected socket CVE-2023-33203: (unk) net: qcom/emac: Fix use after free bug in emac_remove due to race condition + CVE-2023-33250: (unk) + CVE-2023-33288: (unk) power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
diff --git a/data/5.14/5.14_CVEs.txt b/data/5.14/5.14_CVEs.txt index 167d255..f88a37b 100644 --- a/data/5.14/5.14_CVEs.txt +++ b/data/5.14/5.14_CVEs.txt
@@ -458,16 +458,20 @@ CVE-2023-26607: Fix not seen in stream CVE-2023-28327: Fix not seen in stream CVE-2023-28328: Fix not seen in stream -CVE-2023-28410: Fix unknown +CVE-2023-28410: Fix not seen in stream CVE-2023-28466: Fix not seen in stream CVE-2023-30456: Fix not seen in stream CVE-2023-30772: Fix not seen in stream CVE-2023-31081: Fix unknown CVE-2023-31082: Fix unknown CVE-2023-31083: Fix unknown -CVE-2023-31084: Fix unknown +CVE-2023-31084: Fix not seen in stream CVE-2023-31085: Fix unknown CVE-2023-31436: Fix not seen in stream CVE-2023-32233: Fix not seen in stream +CVE-2023-32250: Fix not seen in stream +CVE-2023-32254: Fix not seen in stream CVE-2023-32269: Fix not seen in stream CVE-2023-33203: Fix not seen in stream +CVE-2023-33250: Fix unknown +CVE-2023-33288: Fix not seen in stream
diff --git a/data/5.14/5.14_security.txt b/data/5.14/5.14_security.txt index 70c06cf..b1e393c 100644 --- a/data/5.14/5.14_security.txt +++ b/data/5.14/5.14_security.txt
@@ -492,16 +492,20 @@ CVE-2023-26607: (unk) ntfs: fix out-of-bounds read in ntfs_attr_find() CVE-2023-28327: (unk) af_unix: Get user_ns from in_skb in unix_diag_get_exact(). CVE-2023-28328: (unk) media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer() - CVE-2023-28410: (unk) + CVE-2023-28410: (unk) drm/i915/gem: add missing boundary check in vm_access CVE-2023-28466: (unk) net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf() CVE-2023-30456: (unk) KVM: nVMX: add missing consistency checks for CR0 and CR4 CVE-2023-30772: (unk) power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition CVE-2023-31081: (unk) CVE-2023-31082: (unk) CVE-2023-31083: (unk) - CVE-2023-31084: (unk) + CVE-2023-31084: (unk) media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() CVE-2023-31085: (unk) CVE-2023-31436: (unk) net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg CVE-2023-32233: (unk) netfilter: nf_tables: deactivate anonymous set from preparation phase + CVE-2023-32250: (unk) ksmbd: fix racy issue from session setup and logoff + CVE-2023-32254: (unk) ksmbd: fix racy issue under cocurrent smb2 tree disconnect CVE-2023-32269: (unk) netrom: Fix use-after-free caused by accept on already connected socket CVE-2023-33203: (unk) net: qcom/emac: Fix use after free bug in emac_remove due to race condition + CVE-2023-33250: (unk) + CVE-2023-33288: (unk) power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
diff --git a/data/5.15/5.15_CVEs.txt b/data/5.15/5.15_CVEs.txt index 5e5e080..5124166 100644 --- a/data/5.15/5.15_CVEs.txt +++ b/data/5.15/5.15_CVEs.txt
@@ -359,7 +359,7 @@ CVE-2022-4842: Fixed with 5.15.90 CVE-2022-48423: Fixed with 5.15.87 CVE-2022-48424: Fixed with 5.15.87 -CVE-2022-48425: Fix not seen in stream +CVE-2022-48425: Fixed with 5.15.113 CVE-2023-0045: Fixed with 5.15.87 CVE-2023-0047: Fixed with 5.15.3 CVE-2023-0160: Fix unknown @@ -445,16 +445,20 @@ CVE-2023-26607: Fixed with 5.15.80 CVE-2023-28327: Fixed with 5.15.83 CVE-2023-28328: Fixed with 5.15.86 -CVE-2023-28410: Fix unknown +CVE-2023-28410: Fixed with 5.15.33 CVE-2023-28466: Fixed with 5.15.105 CVE-2023-30456: Fixed with 5.15.104 CVE-2023-30772: Fixed with 5.15.105 CVE-2023-31081: Fix unknown CVE-2023-31082: Fix unknown CVE-2023-31083: Fix unknown -CVE-2023-31084: Fix unknown +CVE-2023-31084: Fix not seen in stream CVE-2023-31085: Fix unknown CVE-2023-31436: Fixed with 5.15.109 CVE-2023-32233: Fixed with 5.15.111 +CVE-2023-32250: Fix not seen in stream +CVE-2023-32254: Fix not seen in stream CVE-2023-32269: Fixed with 5.15.93 CVE-2023-33203: Fixed with 5.15.105 +CVE-2023-33250: Fix unknown +CVE-2023-33288: Fixed with 5.15.105
diff --git a/data/5.15/5.15_security.txt b/data/5.15/5.15_security.txt index cfedcb9..7b0fc55 100644 --- a/data/5.15/5.15_security.txt +++ b/data/5.15/5.15_security.txt
@@ -176,6 +176,7 @@ CVE-2022-3113: 0022dc8cafa5fcd156da8ae7bfc9ca99497bdffc media: mtk-vcodec: potential dereference of null pointer CVE-2022-3239: 332d45fe51d75a3a95c4a04e2cb7bffef284edd4 media: em28xx: initialize refcount before kref_get CVE-2023-1249: 39fd0cc079c98dafcf355997ada7b5e67f0bb10a coredump: Use the vma snapshot in fill_files_note + CVE-2023-28410: 312d3d4f49e12f97260bcf972c848c3562126a18 drm/i915/gem: add missing boundary check in vm_access CVEs fixed in 5.15.34: CVE-2022-1263: 226b4327ef5c88572fc12187193f1b5073c10837 KVM: avoid NULL pointer dereference in kvm_dirty_ring_push @@ -498,6 +499,7 @@ CVE-2023-28466: 0b54d75aa43a1edebc8a3770901f5c3557ee0daa net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf() CVE-2023-30772: 0fdb1cc4fe5255d0198c332b961bc4c1f8787982 power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition CVE-2023-33203: 8c4a180dc12303159592d15e8f077c20deeb1e55 net: qcom/emac: Fix use after free bug in emac_remove due to race condition + CVE-2023-33288: 4ca3fd39c72efa250129d2af406c3bb56eec7dd9 power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition CVEs fixed in 5.15.106: CVE-2023-1611: c976f9233ef926e090db5614a837824a0bcab3fb btrfs: fix race between quota disable and quota assign ioctls @@ -517,6 +519,9 @@ CVE-2023-2269: e11765cea2050fa25fc3e03da858e83284c5ce79 dm ioctl: fix nested locking in table_clear() to remove deadlock concern CVE-2023-32233: 21c2a454486d5e9c1517ecca19266b3be3df73ca netfilter: nf_tables: deactivate anonymous set from preparation phase +CVEs fixed in 5.15.113: + CVE-2022-48425: 2a67f26f70ab344ae6ea78638890eebc1191a501 fs/ntfs3: Validate MFT flags before replaying logs + Outstanding CVEs: CVE-2005-3660: (unk) CVE-2007-3719: (unk) @@ -611,7 +616,6 @@ CVE-2022-45888: (unk) char: xillybus: Prevent use-after-free due to race condition CVE-2022-45919: (unk) CVE-2022-47940: (unk) ksmbd: validate length in smb2_write() - CVE-2022-48425: (unk) fs/ntfs3: Validate MFT flags before replaying logs CVE-2023-0160: (unk) CVE-2023-0597: (unk) x86/mm: Randomize per-cpu entry area CVE-2023-0615: (unk) @@ -630,9 +634,11 @@ CVE-2023-23039: (unk) CVE-2023-2430: (unk) io_uring/msg_ring: fix missing lock on overflow for IOPOLL CVE-2023-26242: (unk) - CVE-2023-28410: (unk) CVE-2023-31081: (unk) CVE-2023-31082: (unk) CVE-2023-31083: (unk) - CVE-2023-31084: (unk) + CVE-2023-31084: (unk) media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() CVE-2023-31085: (unk) + CVE-2023-32250: (unk) ksmbd: fix racy issue from session setup and logoff + CVE-2023-32254: (unk) ksmbd: fix racy issue under cocurrent smb2 tree disconnect + CVE-2023-33250: (unk)
diff --git a/data/5.16/5.16_CVEs.txt b/data/5.16/5.16_CVEs.txt index 705986d..e976e8e 100644 --- a/data/5.16/5.16_CVEs.txt +++ b/data/5.16/5.16_CVEs.txt
@@ -412,16 +412,20 @@ CVE-2023-26607: Fix not seen in stream CVE-2023-28327: Fix not seen in stream CVE-2023-28328: Fix not seen in stream -CVE-2023-28410: Fix unknown +CVE-2023-28410: Fixed with 5.16.19 CVE-2023-28466: Fix not seen in stream CVE-2023-30456: Fix not seen in stream CVE-2023-30772: Fix not seen in stream CVE-2023-31081: Fix unknown CVE-2023-31082: Fix unknown CVE-2023-31083: Fix unknown -CVE-2023-31084: Fix unknown +CVE-2023-31084: Fix not seen in stream CVE-2023-31085: Fix unknown CVE-2023-31436: Fix not seen in stream CVE-2023-32233: Fix not seen in stream +CVE-2023-32250: Fix not seen in stream +CVE-2023-32254: Fix not seen in stream CVE-2023-32269: Fix not seen in stream CVE-2023-33203: Fix not seen in stream +CVE-2023-33250: Fix unknown +CVE-2023-33288: Fix not seen in stream
diff --git a/data/5.16/5.16_security.txt b/data/5.16/5.16_security.txt index a2ba6ec..f6779fc 100644 --- a/data/5.16/5.16_security.txt +++ b/data/5.16/5.16_security.txt
@@ -119,6 +119,7 @@ CVE-2022-3239: 37f808a9e734e9036f7aa42ba4864fc6e91d2572 media: em28xx: initialize refcount before kref_get CVE-2023-1249: c8015981eaa5bd8901a145c8d1253592a5619d2b coredump: Use the vma snapshot in fill_files_note CVE-2023-22996: 2ee39164a701782bb88cf4a564dc7d8cb43c9bff soc: qcom: aoss: Fix missing put_device call in qmp_get + CVE-2023-28410: 5f6e560e3e86ac053447524224e411034f41f5c7 drm/i915/gem: add missing boundary check in vm_access CVEs fixed in 5.16.20: CVE-2022-1263: a1f48251918d825785af9cab83996d4c12ef795a KVM: avoid NULL pointer dereference in kvm_dirty_ring_push @@ -448,16 +449,19 @@ CVE-2023-26607: (unk) ntfs: fix out-of-bounds read in ntfs_attr_find() CVE-2023-28327: (unk) af_unix: Get user_ns from in_skb in unix_diag_get_exact(). CVE-2023-28328: (unk) media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer() - CVE-2023-28410: (unk) CVE-2023-28466: (unk) net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf() CVE-2023-30456: (unk) KVM: nVMX: add missing consistency checks for CR0 and CR4 CVE-2023-30772: (unk) power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition CVE-2023-31081: (unk) CVE-2023-31082: (unk) CVE-2023-31083: (unk) - CVE-2023-31084: (unk) + CVE-2023-31084: (unk) media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() CVE-2023-31085: (unk) CVE-2023-31436: (unk) net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg CVE-2023-32233: (unk) netfilter: nf_tables: deactivate anonymous set from preparation phase + CVE-2023-32250: (unk) ksmbd: fix racy issue from session setup and logoff + CVE-2023-32254: (unk) ksmbd: fix racy issue under cocurrent smb2 tree disconnect CVE-2023-32269: (unk) netrom: Fix use-after-free caused by accept on already connected socket CVE-2023-33203: (unk) net: qcom/emac: Fix use after free bug in emac_remove due to race condition + CVE-2023-33250: (unk) + CVE-2023-33288: (unk) power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
diff --git a/data/5.17/5.17_CVEs.txt b/data/5.17/5.17_CVEs.txt index bfe016a..de4314b 100644 --- a/data/5.17/5.17_CVEs.txt +++ b/data/5.17/5.17_CVEs.txt
@@ -353,7 +353,7 @@ CVE-2023-26607: Fix not seen in stream CVE-2023-28327: Fix not seen in stream CVE-2023-28328: Fix not seen in stream -CVE-2023-28410: Fix unknown +CVE-2023-28410: Fixed with 5.17.2 CVE-2023-28466: Fix not seen in stream CVE-2023-28866: Fix not seen in stream CVE-2023-30456: Fix not seen in stream @@ -361,9 +361,13 @@ CVE-2023-31081: Fix unknown CVE-2023-31082: Fix unknown CVE-2023-31083: Fix unknown -CVE-2023-31084: Fix unknown +CVE-2023-31084: Fix not seen in stream CVE-2023-31085: Fix unknown CVE-2023-31436: Fix not seen in stream CVE-2023-32233: Fix not seen in stream +CVE-2023-32250: Fix not seen in stream +CVE-2023-32254: Fix not seen in stream CVE-2023-32269: Fix not seen in stream CVE-2023-33203: Fix not seen in stream +CVE-2023-33250: Fix unknown +CVE-2023-33288: Fix not seen in stream
diff --git a/data/5.17/5.17_security.txt b/data/5.17/5.17_security.txt index 28af606..b0b4ee8 100644 --- a/data/5.17/5.17_security.txt +++ b/data/5.17/5.17_security.txt
@@ -36,6 +36,7 @@ CVE-2022-3239: d96dd287ca21c5b494bdb55555b33a6afec807cb media: em28xx: initialize refcount before kref_get CVE-2023-1249: 5c6baf808f409b69ad0799a551a704177b5a7ec1 coredump: Use the vma snapshot in fill_files_note CVE-2023-22996: 863bf0d2d794de665f7d3dfa5241c55300fad591 soc: qcom: aoss: Fix missing put_device call in qmp_get + CVE-2023-28410: 8f0ebea8f6e8c474264ed97d7a64c9c09ed4f5aa drm/i915/gem: add missing boundary check in vm_access CVEs fixed in 5.17.3: CVE-2022-1263: e8d7f0dad29e634e26d4614cfbd081514c16e042 KVM: avoid NULL pointer dereference in kvm_dirty_ring_push @@ -385,7 +386,6 @@ CVE-2023-26607: (unk) ntfs: fix out-of-bounds read in ntfs_attr_find() CVE-2023-28327: (unk) af_unix: Get user_ns from in_skb in unix_diag_get_exact(). CVE-2023-28328: (unk) media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer() - CVE-2023-28410: (unk) CVE-2023-28466: (unk) net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf() CVE-2023-28866: (unk) Bluetooth: HCI: Fix global-out-of-bounds CVE-2023-30456: (unk) KVM: nVMX: add missing consistency checks for CR0 and CR4 @@ -393,9 +393,13 @@ CVE-2023-31081: (unk) CVE-2023-31082: (unk) CVE-2023-31083: (unk) - CVE-2023-31084: (unk) + CVE-2023-31084: (unk) media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() CVE-2023-31085: (unk) CVE-2023-31436: (unk) net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg CVE-2023-32233: (unk) netfilter: nf_tables: deactivate anonymous set from preparation phase + CVE-2023-32250: (unk) ksmbd: fix racy issue from session setup and logoff + CVE-2023-32254: (unk) ksmbd: fix racy issue under cocurrent smb2 tree disconnect CVE-2023-32269: (unk) netrom: Fix use-after-free caused by accept on already connected socket CVE-2023-33203: (unk) net: qcom/emac: Fix use after free bug in emac_remove due to race condition + CVE-2023-33250: (unk) + CVE-2023-33288: (unk) power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
diff --git a/data/5.18/5.18_CVEs.txt b/data/5.18/5.18_CVEs.txt index e057f59..246490b 100644 --- a/data/5.18/5.18_CVEs.txt +++ b/data/5.18/5.18_CVEs.txt
@@ -303,7 +303,7 @@ CVE-2023-26607: Fix not seen in stream CVE-2023-28327: Fix not seen in stream CVE-2023-28328: Fix not seen in stream -CVE-2023-28410: Fix unknown +CVE-2023-28410: Fixed with 5.18-rc1 CVE-2023-28466: Fix not seen in stream CVE-2023-28866: Fix not seen in stream CVE-2023-30456: Fix not seen in stream @@ -311,9 +311,13 @@ CVE-2023-31081: Fix unknown CVE-2023-31082: Fix unknown CVE-2023-31083: Fix unknown -CVE-2023-31084: Fix unknown +CVE-2023-31084: Fix not seen in stream CVE-2023-31085: Fix unknown CVE-2023-31436: Fix not seen in stream CVE-2023-32233: Fix not seen in stream +CVE-2023-32250: Fix not seen in stream +CVE-2023-32254: Fix not seen in stream CVE-2023-32269: Fix not seen in stream CVE-2023-33203: Fix not seen in stream +CVE-2023-33250: Fix unknown +CVE-2023-33288: Fix not seen in stream
diff --git a/data/5.18/5.18_security.txt b/data/5.18/5.18_security.txt index 577a461..703f7b6 100644 --- a/data/5.18/5.18_security.txt +++ b/data/5.18/5.18_security.txt
@@ -4,6 +4,9 @@ CVE-2022-1789: 9f46c187e2e680ecd9de7983e4d081c3391acc76 KVM: x86/mmu: fix NULL pointer dereference on guest INVPCID CVE-2023-1838: fb4554c2232e44d595920f4d5c66cf8f7d13f9bc Fix double fget() in vhost_net_set_backend() +CVEs fixed in 5.18-rc1: + CVE-2023-28410: 3886a86e7e6cc6ce2ce93c440fecd8f42aed0ce7 drm/i915/gem: add missing boundary check in vm_access + CVEs fixed in 5.18.1: CVE-2022-21499: eca56bf0066ef2f1e7be0e3fa7564b85a309872c lockdown: also lock down previous kgdb use @@ -337,7 +340,6 @@ CVE-2023-26607: (unk) ntfs: fix out-of-bounds read in ntfs_attr_find() CVE-2023-28327: (unk) af_unix: Get user_ns from in_skb in unix_diag_get_exact(). CVE-2023-28328: (unk) media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer() - CVE-2023-28410: (unk) CVE-2023-28466: (unk) net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf() CVE-2023-28866: (unk) Bluetooth: HCI: Fix global-out-of-bounds CVE-2023-30456: (unk) KVM: nVMX: add missing consistency checks for CR0 and CR4 @@ -345,9 +347,13 @@ CVE-2023-31081: (unk) CVE-2023-31082: (unk) CVE-2023-31083: (unk) - CVE-2023-31084: (unk) + CVE-2023-31084: (unk) media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() CVE-2023-31085: (unk) CVE-2023-31436: (unk) net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg CVE-2023-32233: (unk) netfilter: nf_tables: deactivate anonymous set from preparation phase + CVE-2023-32250: (unk) ksmbd: fix racy issue from session setup and logoff + CVE-2023-32254: (unk) ksmbd: fix racy issue under cocurrent smb2 tree disconnect CVE-2023-32269: (unk) netrom: Fix use-after-free caused by accept on already connected socket CVE-2023-33203: (unk) net: qcom/emac: Fix use after free bug in emac_remove due to race condition + CVE-2023-33250: (unk) + CVE-2023-33288: (unk) power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
diff --git a/data/5.19/5.19_CVEs.txt b/data/5.19/5.19_CVEs.txt index 0a66e42..9f028e3 100644 --- a/data/5.19/5.19_CVEs.txt +++ b/data/5.19/5.19_CVEs.txt
@@ -260,7 +260,6 @@ CVE-2023-26607: Fix not seen in stream CVE-2023-28327: Fix not seen in stream CVE-2023-28328: Fix not seen in stream -CVE-2023-28410: Fix unknown CVE-2023-28466: Fix not seen in stream CVE-2023-28866: Fix not seen in stream CVE-2023-30456: Fix not seen in stream @@ -268,9 +267,13 @@ CVE-2023-31081: Fix unknown CVE-2023-31082: Fix unknown CVE-2023-31083: Fix unknown -CVE-2023-31084: Fix unknown +CVE-2023-31084: Fix not seen in stream CVE-2023-31085: Fix unknown CVE-2023-31436: Fix not seen in stream CVE-2023-32233: Fix not seen in stream +CVE-2023-32250: Fix not seen in stream +CVE-2023-32254: Fix not seen in stream CVE-2023-32269: Fix not seen in stream CVE-2023-33203: Fix not seen in stream +CVE-2023-33250: Fix unknown +CVE-2023-33288: Fix not seen in stream
diff --git a/data/5.19/5.19_security.txt b/data/5.19/5.19_security.txt index ec29afa..4e3855b 100644 --- a/data/5.19/5.19_security.txt +++ b/data/5.19/5.19_security.txt
@@ -290,7 +290,6 @@ CVE-2023-26607: (unk) ntfs: fix out-of-bounds read in ntfs_attr_find() CVE-2023-28327: (unk) af_unix: Get user_ns from in_skb in unix_diag_get_exact(). CVE-2023-28328: (unk) media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer() - CVE-2023-28410: (unk) CVE-2023-28466: (unk) net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf() CVE-2023-28866: (unk) Bluetooth: HCI: Fix global-out-of-bounds CVE-2023-30456: (unk) KVM: nVMX: add missing consistency checks for CR0 and CR4 @@ -298,9 +297,13 @@ CVE-2023-31081: (unk) CVE-2023-31082: (unk) CVE-2023-31083: (unk) - CVE-2023-31084: (unk) + CVE-2023-31084: (unk) media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() CVE-2023-31085: (unk) CVE-2023-31436: (unk) net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg CVE-2023-32233: (unk) netfilter: nf_tables: deactivate anonymous set from preparation phase + CVE-2023-32250: (unk) ksmbd: fix racy issue from session setup and logoff + CVE-2023-32254: (unk) ksmbd: fix racy issue under cocurrent smb2 tree disconnect CVE-2023-32269: (unk) netrom: Fix use-after-free caused by accept on already connected socket CVE-2023-33203: (unk) net: qcom/emac: Fix use after free bug in emac_remove due to race condition + CVE-2023-33250: (unk) + CVE-2023-33288: (unk) power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
diff --git a/data/5.2/5.2_CVEs.txt b/data/5.2/5.2_CVEs.txt index 33301bb..3e3db31 100644 --- a/data/5.2/5.2_CVEs.txt +++ b/data/5.2/5.2_CVEs.txt
@@ -346,6 +346,7 @@ CVE-2020-36557: Fix not seen in stream CVE-2020-36558: Fix not seen in stream CVE-2020-36691: Fix not seen in stream +CVE-2020-36694: Fix not seen in stream CVE-2020-3702: Fix not seen in stream CVE-2020-4788: Fix not seen in stream CVE-2020-8428: Fix not seen in stream @@ -790,7 +791,7 @@ CVE-2023-26545: Fix not seen in stream CVE-2023-26607: Fix not seen in stream CVE-2023-28328: Fix not seen in stream -CVE-2023-28410: Fix unknown +CVE-2023-28410: Fix not seen in stream CVE-2023-28466: Fix not seen in stream CVE-2023-28772: Fix not seen in stream CVE-2023-30456: Fix not seen in stream @@ -798,9 +799,13 @@ CVE-2023-31081: Fix unknown CVE-2023-31082: Fix unknown CVE-2023-31083: Fix unknown -CVE-2023-31084: Fix unknown +CVE-2023-31084: Fix not seen in stream CVE-2023-31085: Fix unknown CVE-2023-31436: Fix not seen in stream CVE-2023-32233: Fix not seen in stream +CVE-2023-32250: Fix not seen in stream +CVE-2023-32254: Fix not seen in stream CVE-2023-32269: Fix not seen in stream CVE-2023-33203: Fix not seen in stream +CVE-2023-33250: Fix unknown +CVE-2023-33288: Fix not seen in stream
diff --git a/data/5.2/5.2_security.txt b/data/5.2/5.2_security.txt index c7b0c8f..4d8c88e 100644 --- a/data/5.2/5.2_security.txt +++ b/data/5.2/5.2_security.txt
@@ -384,6 +384,7 @@ CVE-2020-36557: (unk) vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console CVE-2020-36558: (unk) vt: vt_ioctl: fix race in VT_RESIZEX CVE-2020-36691: (unk) netlink: limit recursion depth in policy validation + CVE-2020-36694: (unk) netfilter: x_tables: Switch synchronization to RCU CVE-2020-3702: (unk) ath: Use safer key clearing with key cache entries CVE-2020-4788: (unk) powerpc/64s: flush L1D on kernel entry CVE-2020-8428: (unk) do_last(): fetch directory ->i_mode and ->i_uid before it's too late @@ -828,7 +829,7 @@ CVE-2023-26545: (unk) net: mpls: fix stale pointer if allocation fails during device rename CVE-2023-26607: (unk) ntfs: fix out-of-bounds read in ntfs_attr_find() CVE-2023-28328: (unk) media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer() - CVE-2023-28410: (unk) + CVE-2023-28410: (unk) drm/i915/gem: add missing boundary check in vm_access CVE-2023-28466: (unk) net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf() CVE-2023-28772: (unk) seq_buf: Fix overflow in seq_buf_putmem_hex() CVE-2023-30456: (unk) KVM: nVMX: add missing consistency checks for CR0 and CR4 @@ -836,9 +837,13 @@ CVE-2023-31081: (unk) CVE-2023-31082: (unk) CVE-2023-31083: (unk) - CVE-2023-31084: (unk) + CVE-2023-31084: (unk) media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() CVE-2023-31085: (unk) CVE-2023-31436: (unk) net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg CVE-2023-32233: (unk) netfilter: nf_tables: deactivate anonymous set from preparation phase + CVE-2023-32250: (unk) ksmbd: fix racy issue from session setup and logoff + CVE-2023-32254: (unk) ksmbd: fix racy issue under cocurrent smb2 tree disconnect CVE-2023-32269: (unk) netrom: Fix use-after-free caused by accept on already connected socket CVE-2023-33203: (unk) net: qcom/emac: Fix use after free bug in emac_remove due to race condition + CVE-2023-33250: (unk) + CVE-2023-33288: (unk) power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
diff --git a/data/5.3/5.3_CVEs.txt b/data/5.3/5.3_CVEs.txt index 288807d..75e64d2 100644 --- a/data/5.3/5.3_CVEs.txt +++ b/data/5.3/5.3_CVEs.txt
@@ -316,6 +316,7 @@ CVE-2020-36557: Fix not seen in stream CVE-2020-36558: Fix not seen in stream CVE-2020-36691: Fix not seen in stream +CVE-2020-36694: Fix not seen in stream CVE-2020-3702: Fix not seen in stream CVE-2020-4788: Fix not seen in stream CVE-2020-8428: Fix not seen in stream @@ -764,7 +765,7 @@ CVE-2023-26607: Fix not seen in stream CVE-2023-28327: Fix not seen in stream CVE-2023-28328: Fix not seen in stream -CVE-2023-28410: Fix unknown +CVE-2023-28410: Fix not seen in stream CVE-2023-28466: Fix not seen in stream CVE-2023-28772: Fix not seen in stream CVE-2023-30456: Fix not seen in stream @@ -772,9 +773,13 @@ CVE-2023-31081: Fix unknown CVE-2023-31082: Fix unknown CVE-2023-31083: Fix unknown -CVE-2023-31084: Fix unknown +CVE-2023-31084: Fix not seen in stream CVE-2023-31085: Fix unknown CVE-2023-31436: Fix not seen in stream CVE-2023-32233: Fix not seen in stream +CVE-2023-32250: Fix not seen in stream +CVE-2023-32254: Fix not seen in stream CVE-2023-32269: Fix not seen in stream CVE-2023-33203: Fix not seen in stream +CVE-2023-33250: Fix unknown +CVE-2023-33288: Fix not seen in stream
diff --git a/data/5.3/5.3_security.txt b/data/5.3/5.3_security.txt index 69c5f00..acab6c2 100644 --- a/data/5.3/5.3_security.txt +++ b/data/5.3/5.3_security.txt
@@ -352,6 +352,7 @@ CVE-2020-36557: (unk) vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console CVE-2020-36558: (unk) vt: vt_ioctl: fix race in VT_RESIZEX CVE-2020-36691: (unk) netlink: limit recursion depth in policy validation + CVE-2020-36694: (unk) netfilter: x_tables: Switch synchronization to RCU CVE-2020-3702: (unk) ath: Use safer key clearing with key cache entries CVE-2020-4788: (unk) powerpc/64s: flush L1D on kernel entry CVE-2020-8428: (unk) do_last(): fetch directory ->i_mode and ->i_uid before it's too late @@ -800,7 +801,7 @@ CVE-2023-26607: (unk) ntfs: fix out-of-bounds read in ntfs_attr_find() CVE-2023-28327: (unk) af_unix: Get user_ns from in_skb in unix_diag_get_exact(). CVE-2023-28328: (unk) media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer() - CVE-2023-28410: (unk) + CVE-2023-28410: (unk) drm/i915/gem: add missing boundary check in vm_access CVE-2023-28466: (unk) net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf() CVE-2023-28772: (unk) seq_buf: Fix overflow in seq_buf_putmem_hex() CVE-2023-30456: (unk) KVM: nVMX: add missing consistency checks for CR0 and CR4 @@ -808,9 +809,13 @@ CVE-2023-31081: (unk) CVE-2023-31082: (unk) CVE-2023-31083: (unk) - CVE-2023-31084: (unk) + CVE-2023-31084: (unk) media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() CVE-2023-31085: (unk) CVE-2023-31436: (unk) net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg CVE-2023-32233: (unk) netfilter: nf_tables: deactivate anonymous set from preparation phase + CVE-2023-32250: (unk) ksmbd: fix racy issue from session setup and logoff + CVE-2023-32254: (unk) ksmbd: fix racy issue under cocurrent smb2 tree disconnect CVE-2023-32269: (unk) netrom: Fix use-after-free caused by accept on already connected socket CVE-2023-33203: (unk) net: qcom/emac: Fix use after free bug in emac_remove due to race condition + CVE-2023-33250: (unk) + CVE-2023-33288: (unk) power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
diff --git a/data/5.4/5.4_CVEs.txt b/data/5.4/5.4_CVEs.txt index a9c2235..add6837 100644 --- a/data/5.4/5.4_CVEs.txt +++ b/data/5.4/5.4_CVEs.txt
@@ -241,6 +241,7 @@ CVE-2020-36557: Fixed with 5.4.30 CVE-2020-36558: Fixed with 5.4.23 CVE-2020-36691: Fix not seen in stream +CVE-2020-36694: Fixed with 5.4.86 CVE-2020-3702: Fixed with 5.4.143 CVE-2020-4788: Fixed with 5.4.79 CVE-2020-8428: Fixed with 5.4.16 @@ -694,7 +695,7 @@ CVE-2023-26607: Fixed with 5.4.225 CVE-2023-28327: Fixed with 5.4.227 CVE-2023-28328: Fixed with 5.4.229 -CVE-2023-28410: Fix unknown +CVE-2023-28410: Fix not seen in stream CVE-2023-28466: Fixed with 5.4.240 CVE-2023-28772: Fixed with 5.4.133 CVE-2023-30456: Fixed with 5.4.238 @@ -702,9 +703,13 @@ CVE-2023-31081: Fix unknown CVE-2023-31082: Fix unknown CVE-2023-31083: Fix unknown -CVE-2023-31084: Fix unknown +CVE-2023-31084: Fix not seen in stream CVE-2023-31085: Fix unknown CVE-2023-31436: Fixed with 5.4.242 CVE-2023-32233: Fixed with 5.4.243 +CVE-2023-32250: Fix not seen in stream +CVE-2023-32254: Fix not seen in stream CVE-2023-32269: Fixed with 5.4.232 CVE-2023-33203: Fixed with 5.4.240 +CVE-2023-33250: Fix unknown +CVE-2023-33288: Fix not seen in stream
diff --git a/data/5.4/5.4_security.txt b/data/5.4/5.4_security.txt index d14cd6d..7bb32b0 100644 --- a/data/5.4/5.4_security.txt +++ b/data/5.4/5.4_security.txt
@@ -323,6 +323,7 @@ CVE-2020-27815: cbeb61258186978c26f9ee738c86fe4812cc27af jfs: Fix array index bounds check in dbAdjTree CVE-2020-29568: eac0c12e329d489ff36e85fed5ce2a8606e3124d xen/xenbus: Allow watches discard events before queueing CVE-2020-29569: 8f3f6de44f7cc93a4723e63ea4381332826a6790 xen-blkback: set ring->xenblkd to NULL after kthread_stop() + CVE-2020-36694: b17244cebb24b30b886d46938cc5f798f7337574 netfilter: x_tables: Switch synchronization to RCU CVEs fixed in 5.4.88: CVE-2020-36158: 0a49aaf4df2936bca119ee38fe5a570a7024efdc mwifiex: Fix possible buffer overflows in mwifiex_cmd_802_11_ad_hoc_start @@ -1068,9 +1069,13 @@ CVE-2023-23039: (unk) CVE-2023-2430: (unk) io_uring/msg_ring: fix missing lock on overflow for IOPOLL CVE-2023-26242: (unk) - CVE-2023-28410: (unk) + CVE-2023-28410: (unk) drm/i915/gem: add missing boundary check in vm_access CVE-2023-31081: (unk) CVE-2023-31082: (unk) CVE-2023-31083: (unk) - CVE-2023-31084: (unk) + CVE-2023-31084: (unk) media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() CVE-2023-31085: (unk) + CVE-2023-32250: (unk) ksmbd: fix racy issue from session setup and logoff + CVE-2023-32254: (unk) ksmbd: fix racy issue under cocurrent smb2 tree disconnect + CVE-2023-33250: (unk) + CVE-2023-33288: (unk) power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
diff --git a/data/5.5/5.5_CVEs.txt b/data/5.5/5.5_CVEs.txt index bdb627a..9c41ed1 100644 --- a/data/5.5/5.5_CVEs.txt +++ b/data/5.5/5.5_CVEs.txt
@@ -193,6 +193,7 @@ CVE-2020-36557: Fixed with 5.5.15 CVE-2020-36558: Fixed with 5.5.7 CVE-2020-36691: Fix not seen in stream +CVE-2020-36694: Fix not seen in stream CVE-2020-3702: Fix not seen in stream CVE-2020-4788: Fix not seen in stream CVE-2020-8428: Fixed with 5.5 @@ -655,7 +656,7 @@ CVE-2023-26607: Fix not seen in stream CVE-2023-28327: Fix not seen in stream CVE-2023-28328: Fix not seen in stream -CVE-2023-28410: Fix unknown +CVE-2023-28410: Fix not seen in stream CVE-2023-28466: Fix not seen in stream CVE-2023-28772: Fix not seen in stream CVE-2023-30456: Fix not seen in stream @@ -663,9 +664,13 @@ CVE-2023-31081: Fix unknown CVE-2023-31082: Fix unknown CVE-2023-31083: Fix unknown -CVE-2023-31084: Fix unknown +CVE-2023-31084: Fix not seen in stream CVE-2023-31085: Fix unknown CVE-2023-31436: Fix not seen in stream CVE-2023-32233: Fix not seen in stream +CVE-2023-32250: Fix not seen in stream +CVE-2023-32254: Fix not seen in stream CVE-2023-32269: Fix not seen in stream CVE-2023-33203: Fix not seen in stream +CVE-2023-33250: Fix unknown +CVE-2023-33288: Fix not seen in stream
diff --git a/data/5.5/5.5_security.txt b/data/5.5/5.5_security.txt index fe689a5..002ecc7 100644 --- a/data/5.5/5.5_security.txt +++ b/data/5.5/5.5_security.txt
@@ -237,6 +237,7 @@ CVE-2020-36386: (unk) Bluetooth: Fix slab-out-of-bounds read in hci_extended_inquiry_result_evt() CVE-2020-36516: (unk) ipv4: avoid using shared IP generator for connected sockets CVE-2020-36691: (unk) netlink: limit recursion depth in policy validation + CVE-2020-36694: (unk) netfilter: x_tables: Switch synchronization to RCU CVE-2020-3702: (unk) ath: Use safer key clearing with key cache entries CVE-2020-4788: (unk) powerpc/64s: flush L1D on kernel entry CVE-2020-8694: (unk) powercap: restrict energy meter to root access @@ -689,7 +690,7 @@ CVE-2023-26607: (unk) ntfs: fix out-of-bounds read in ntfs_attr_find() CVE-2023-28327: (unk) af_unix: Get user_ns from in_skb in unix_diag_get_exact(). CVE-2023-28328: (unk) media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer() - CVE-2023-28410: (unk) + CVE-2023-28410: (unk) drm/i915/gem: add missing boundary check in vm_access CVE-2023-28466: (unk) net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf() CVE-2023-28772: (unk) seq_buf: Fix overflow in seq_buf_putmem_hex() CVE-2023-30456: (unk) KVM: nVMX: add missing consistency checks for CR0 and CR4 @@ -697,9 +698,13 @@ CVE-2023-31081: (unk) CVE-2023-31082: (unk) CVE-2023-31083: (unk) - CVE-2023-31084: (unk) + CVE-2023-31084: (unk) media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() CVE-2023-31085: (unk) CVE-2023-31436: (unk) net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg CVE-2023-32233: (unk) netfilter: nf_tables: deactivate anonymous set from preparation phase + CVE-2023-32250: (unk) ksmbd: fix racy issue from session setup and logoff + CVE-2023-32254: (unk) ksmbd: fix racy issue under cocurrent smb2 tree disconnect CVE-2023-32269: (unk) netrom: Fix use-after-free caused by accept on already connected socket CVE-2023-33203: (unk) net: qcom/emac: Fix use after free bug in emac_remove due to race condition + CVE-2023-33250: (unk) + CVE-2023-33288: (unk) power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
diff --git a/data/5.6/5.6_CVEs.txt b/data/5.6/5.6_CVEs.txt index ae8ebcd..2da2689 100644 --- a/data/5.6/5.6_CVEs.txt +++ b/data/5.6/5.6_CVEs.txt
@@ -172,6 +172,7 @@ CVE-2020-36516: Fix not seen in stream CVE-2020-36557: Fixed with 5.6.2 CVE-2020-36691: Fix not seen in stream +CVE-2020-36694: Fix not seen in stream CVE-2020-3702: Fix not seen in stream CVE-2020-4788: Fix not seen in stream CVE-2020-8694: Fix not seen in stream @@ -633,7 +634,7 @@ CVE-2023-26607: Fix not seen in stream CVE-2023-28327: Fix not seen in stream CVE-2023-28328: Fix not seen in stream -CVE-2023-28410: Fix unknown +CVE-2023-28410: Fix not seen in stream CVE-2023-28466: Fix not seen in stream CVE-2023-28772: Fix not seen in stream CVE-2023-30456: Fix not seen in stream @@ -641,9 +642,13 @@ CVE-2023-31081: Fix unknown CVE-2023-31082: Fix unknown CVE-2023-31083: Fix unknown -CVE-2023-31084: Fix unknown +CVE-2023-31084: Fix not seen in stream CVE-2023-31085: Fix unknown CVE-2023-31436: Fix not seen in stream CVE-2023-32233: Fix not seen in stream +CVE-2023-32250: Fix not seen in stream +CVE-2023-32254: Fix not seen in stream CVE-2023-32269: Fix not seen in stream CVE-2023-33203: Fix not seen in stream +CVE-2023-33250: Fix unknown +CVE-2023-33288: Fix not seen in stream
diff --git a/data/5.6/5.6_security.txt b/data/5.6/5.6_security.txt index b00d80b..c8d3d46 100644 --- a/data/5.6/5.6_security.txt +++ b/data/5.6/5.6_security.txt
@@ -209,6 +209,7 @@ CVE-2020-36386: (unk) Bluetooth: Fix slab-out-of-bounds read in hci_extended_inquiry_result_evt() CVE-2020-36516: (unk) ipv4: avoid using shared IP generator for connected sockets CVE-2020-36691: (unk) netlink: limit recursion depth in policy validation + CVE-2020-36694: (unk) netfilter: x_tables: Switch synchronization to RCU CVE-2020-3702: (unk) ath: Use safer key clearing with key cache entries CVE-2020-4788: (unk) powerpc/64s: flush L1D on kernel entry CVE-2020-8694: (unk) powercap: restrict energy meter to root access @@ -667,7 +668,7 @@ CVE-2023-26607: (unk) ntfs: fix out-of-bounds read in ntfs_attr_find() CVE-2023-28327: (unk) af_unix: Get user_ns from in_skb in unix_diag_get_exact(). CVE-2023-28328: (unk) media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer() - CVE-2023-28410: (unk) + CVE-2023-28410: (unk) drm/i915/gem: add missing boundary check in vm_access CVE-2023-28466: (unk) net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf() CVE-2023-28772: (unk) seq_buf: Fix overflow in seq_buf_putmem_hex() CVE-2023-30456: (unk) KVM: nVMX: add missing consistency checks for CR0 and CR4 @@ -675,9 +676,13 @@ CVE-2023-31081: (unk) CVE-2023-31082: (unk) CVE-2023-31083: (unk) - CVE-2023-31084: (unk) + CVE-2023-31084: (unk) media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() CVE-2023-31085: (unk) CVE-2023-31436: (unk) net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg CVE-2023-32233: (unk) netfilter: nf_tables: deactivate anonymous set from preparation phase + CVE-2023-32250: (unk) ksmbd: fix racy issue from session setup and logoff + CVE-2023-32254: (unk) ksmbd: fix racy issue under cocurrent smb2 tree disconnect CVE-2023-32269: (unk) netrom: Fix use-after-free caused by accept on already connected socket CVE-2023-33203: (unk) net: qcom/emac: Fix use after free bug in emac_remove due to race condition + CVE-2023-33250: (unk) + CVE-2023-33288: (unk) power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
diff --git a/data/5.7/5.7_CVEs.txt b/data/5.7/5.7_CVEs.txt index e439199..186e38d 100644 --- a/data/5.7/5.7_CVEs.txt +++ b/data/5.7/5.7_CVEs.txt
@@ -151,6 +151,7 @@ CVE-2020-36387: Fixed with 5.7.16 CVE-2020-36516: Fix not seen in stream CVE-2020-36691: Fix not seen in stream +CVE-2020-36694: Fix not seen in stream CVE-2020-3702: Fix not seen in stream CVE-2020-4788: Fix not seen in stream CVE-2020-8694: Fix not seen in stream @@ -630,7 +631,7 @@ CVE-2023-26607: Fix not seen in stream CVE-2023-28327: Fix not seen in stream CVE-2023-28328: Fix not seen in stream -CVE-2023-28410: Fix unknown +CVE-2023-28410: Fix not seen in stream CVE-2023-28466: Fix not seen in stream CVE-2023-28772: Fix not seen in stream CVE-2023-30456: Fix not seen in stream @@ -638,9 +639,13 @@ CVE-2023-31081: Fix unknown CVE-2023-31082: Fix unknown CVE-2023-31083: Fix unknown -CVE-2023-31084: Fix unknown +CVE-2023-31084: Fix not seen in stream CVE-2023-31085: Fix unknown CVE-2023-31436: Fix not seen in stream CVE-2023-32233: Fix not seen in stream +CVE-2023-32250: Fix not seen in stream +CVE-2023-32254: Fix not seen in stream CVE-2023-32269: Fix not seen in stream CVE-2023-33203: Fix not seen in stream +CVE-2023-33250: Fix unknown +CVE-2023-33288: Fix not seen in stream
diff --git a/data/5.7/5.7_security.txt b/data/5.7/5.7_security.txt index c77b446..a72fe85 100644 --- a/data/5.7/5.7_security.txt +++ b/data/5.7/5.7_security.txt
@@ -188,6 +188,7 @@ CVE-2020-36385: (unk) RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy CVE-2020-36516: (unk) ipv4: avoid using shared IP generator for connected sockets CVE-2020-36691: (unk) netlink: limit recursion depth in policy validation + CVE-2020-36694: (unk) netfilter: x_tables: Switch synchronization to RCU CVE-2020-3702: (unk) ath: Use safer key clearing with key cache entries CVE-2020-4788: (unk) powerpc/64s: flush L1D on kernel entry CVE-2020-8694: (unk) powercap: restrict energy meter to root access @@ -664,7 +665,7 @@ CVE-2023-26607: (unk) ntfs: fix out-of-bounds read in ntfs_attr_find() CVE-2023-28327: (unk) af_unix: Get user_ns from in_skb in unix_diag_get_exact(). CVE-2023-28328: (unk) media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer() - CVE-2023-28410: (unk) + CVE-2023-28410: (unk) drm/i915/gem: add missing boundary check in vm_access CVE-2023-28466: (unk) net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf() CVE-2023-28772: (unk) seq_buf: Fix overflow in seq_buf_putmem_hex() CVE-2023-30456: (unk) KVM: nVMX: add missing consistency checks for CR0 and CR4 @@ -672,9 +673,13 @@ CVE-2023-31081: (unk) CVE-2023-31082: (unk) CVE-2023-31083: (unk) - CVE-2023-31084: (unk) + CVE-2023-31084: (unk) media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() CVE-2023-31085: (unk) CVE-2023-31436: (unk) net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg CVE-2023-32233: (unk) netfilter: nf_tables: deactivate anonymous set from preparation phase + CVE-2023-32250: (unk) ksmbd: fix racy issue from session setup and logoff + CVE-2023-32254: (unk) ksmbd: fix racy issue under cocurrent smb2 tree disconnect CVE-2023-32269: (unk) netrom: Fix use-after-free caused by accept on already connected socket CVE-2023-33203: (unk) net: qcom/emac: Fix use after free bug in emac_remove due to race condition + CVE-2023-33250: (unk) + CVE-2023-33288: (unk) power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
diff --git a/data/5.8/5.8_CVEs.txt b/data/5.8/5.8_CVEs.txt index d91e29a..92a7e40 100644 --- a/data/5.8/5.8_CVEs.txt +++ b/data/5.8/5.8_CVEs.txt
@@ -127,6 +127,7 @@ CVE-2020-36386: Fixed with 5.8.1 CVE-2020-36387: Fixed with 5.8.2 CVE-2020-36516: Fix not seen in stream +CVE-2020-36694: Fix not seen in stream CVE-2020-3702: Fix not seen in stream CVE-2020-4788: Fix not seen in stream CVE-2020-8694: Fix not seen in stream @@ -614,7 +615,7 @@ CVE-2023-26607: Fix not seen in stream CVE-2023-28327: Fix not seen in stream CVE-2023-28328: Fix not seen in stream -CVE-2023-28410: Fix unknown +CVE-2023-28410: Fix not seen in stream CVE-2023-28466: Fix not seen in stream CVE-2023-28772: Fix not seen in stream CVE-2023-30456: Fix not seen in stream @@ -622,9 +623,13 @@ CVE-2023-31081: Fix unknown CVE-2023-31082: Fix unknown CVE-2023-31083: Fix unknown -CVE-2023-31084: Fix unknown +CVE-2023-31084: Fix not seen in stream CVE-2023-31085: Fix unknown CVE-2023-31436: Fix not seen in stream CVE-2023-32233: Fix not seen in stream +CVE-2023-32250: Fix not seen in stream +CVE-2023-32254: Fix not seen in stream CVE-2023-32269: Fix not seen in stream CVE-2023-33203: Fix not seen in stream +CVE-2023-33250: Fix unknown +CVE-2023-33288: Fix not seen in stream
diff --git a/data/5.8/5.8_security.txt b/data/5.8/5.8_security.txt index 5ae366f..7bc67af 100644 --- a/data/5.8/5.8_security.txt +++ b/data/5.8/5.8_security.txt
@@ -170,6 +170,7 @@ CVE-2020-36322: (unk) fuse: fix bad inode CVE-2020-36385: (unk) RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy CVE-2020-36516: (unk) ipv4: avoid using shared IP generator for connected sockets + CVE-2020-36694: (unk) netfilter: x_tables: Switch synchronization to RCU CVE-2020-3702: (unk) ath: Use safer key clearing with key cache entries CVE-2020-4788: (unk) powerpc/64s: flush L1D on kernel entry CVE-2020-8694: (unk) powercap: restrict energy meter to root access @@ -648,7 +649,7 @@ CVE-2023-26607: (unk) ntfs: fix out-of-bounds read in ntfs_attr_find() CVE-2023-28327: (unk) af_unix: Get user_ns from in_skb in unix_diag_get_exact(). CVE-2023-28328: (unk) media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer() - CVE-2023-28410: (unk) + CVE-2023-28410: (unk) drm/i915/gem: add missing boundary check in vm_access CVE-2023-28466: (unk) net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf() CVE-2023-28772: (unk) seq_buf: Fix overflow in seq_buf_putmem_hex() CVE-2023-30456: (unk) KVM: nVMX: add missing consistency checks for CR0 and CR4 @@ -656,9 +657,13 @@ CVE-2023-31081: (unk) CVE-2023-31082: (unk) CVE-2023-31083: (unk) - CVE-2023-31084: (unk) + CVE-2023-31084: (unk) media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() CVE-2023-31085: (unk) CVE-2023-31436: (unk) net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg CVE-2023-32233: (unk) netfilter: nf_tables: deactivate anonymous set from preparation phase + CVE-2023-32250: (unk) ksmbd: fix racy issue from session setup and logoff + CVE-2023-32254: (unk) ksmbd: fix racy issue under cocurrent smb2 tree disconnect CVE-2023-32269: (unk) netrom: Fix use-after-free caused by accept on already connected socket CVE-2023-33203: (unk) net: qcom/emac: Fix use after free bug in emac_remove due to race condition + CVE-2023-33250: (unk) + CVE-2023-33288: (unk) power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
diff --git a/data/5.9/5.9_CVEs.txt b/data/5.9/5.9_CVEs.txt index 1dd6b94..99b4ad5 100644 --- a/data/5.9/5.9_CVEs.txt +++ b/data/5.9/5.9_CVEs.txt
@@ -101,6 +101,7 @@ CVE-2020-36322: Fix not seen in stream CVE-2020-36385: Fix not seen in stream CVE-2020-36516: Fix not seen in stream +CVE-2020-36694: Fix not seen in stream CVE-2020-3702: Fix not seen in stream CVE-2020-4788: Fixed with 5.9.10 CVE-2020-8694: Fixed with 5.9.8 @@ -587,7 +588,7 @@ CVE-2023-26607: Fix not seen in stream CVE-2023-28327: Fix not seen in stream CVE-2023-28328: Fix not seen in stream -CVE-2023-28410: Fix unknown +CVE-2023-28410: Fix not seen in stream CVE-2023-28466: Fix not seen in stream CVE-2023-28772: Fix not seen in stream CVE-2023-30456: Fix not seen in stream @@ -595,9 +596,13 @@ CVE-2023-31081: Fix unknown CVE-2023-31082: Fix unknown CVE-2023-31083: Fix unknown -CVE-2023-31084: Fix unknown +CVE-2023-31084: Fix not seen in stream CVE-2023-31085: Fix unknown CVE-2023-31436: Fix not seen in stream CVE-2023-32233: Fix not seen in stream +CVE-2023-32250: Fix not seen in stream +CVE-2023-32254: Fix not seen in stream CVE-2023-32269: Fix not seen in stream CVE-2023-33203: Fix not seen in stream +CVE-2023-33250: Fix unknown +CVE-2023-33288: Fix not seen in stream
diff --git a/data/5.9/5.9_security.txt b/data/5.9/5.9_security.txt index 7254981..962b876 100644 --- a/data/5.9/5.9_security.txt +++ b/data/5.9/5.9_security.txt
@@ -137,6 +137,7 @@ CVE-2020-36322: (unk) fuse: fix bad inode CVE-2020-36385: (unk) RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy CVE-2020-36516: (unk) ipv4: avoid using shared IP generator for connected sockets + CVE-2020-36694: (unk) netfilter: x_tables: Switch synchronization to RCU CVE-2020-3702: (unk) ath: Use safer key clearing with key cache entries CVE-2021-0129: (unk) Bluetooth: SMP: Fail if remote and local public keys are identical CVE-2021-0399: (unk) @@ -617,7 +618,7 @@ CVE-2023-26607: (unk) ntfs: fix out-of-bounds read in ntfs_attr_find() CVE-2023-28327: (unk) af_unix: Get user_ns from in_skb in unix_diag_get_exact(). CVE-2023-28328: (unk) media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer() - CVE-2023-28410: (unk) + CVE-2023-28410: (unk) drm/i915/gem: add missing boundary check in vm_access CVE-2023-28466: (unk) net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf() CVE-2023-28772: (unk) seq_buf: Fix overflow in seq_buf_putmem_hex() CVE-2023-30456: (unk) KVM: nVMX: add missing consistency checks for CR0 and CR4 @@ -625,9 +626,13 @@ CVE-2023-31081: (unk) CVE-2023-31082: (unk) CVE-2023-31083: (unk) - CVE-2023-31084: (unk) + CVE-2023-31084: (unk) media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() CVE-2023-31085: (unk) CVE-2023-31436: (unk) net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg CVE-2023-32233: (unk) netfilter: nf_tables: deactivate anonymous set from preparation phase + CVE-2023-32250: (unk) ksmbd: fix racy issue from session setup and logoff + CVE-2023-32254: (unk) ksmbd: fix racy issue under cocurrent smb2 tree disconnect CVE-2023-32269: (unk) netrom: Fix use-after-free caused by accept on already connected socket CVE-2023-33203: (unk) net: qcom/emac: Fix use after free bug in emac_remove due to race condition + CVE-2023-33250: (unk) + CVE-2023-33288: (unk) power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
diff --git a/data/6.0/6.0_CVEs.txt b/data/6.0/6.0_CVEs.txt index 6d03c77..6dfd2f2 100644 --- a/data/6.0/6.0_CVEs.txt +++ b/data/6.0/6.0_CVEs.txt
@@ -218,7 +218,6 @@ CVE-2023-26607: Fixed with 6.0.10 CVE-2023-28327: Fixed with 6.0.13 CVE-2023-28328: Fixed with 6.0.16 -CVE-2023-28410: Fix unknown CVE-2023-28466: Fix not seen in stream CVE-2023-28866: Fix not seen in stream CVE-2023-30456: Fix not seen in stream @@ -226,9 +225,13 @@ CVE-2023-31081: Fix unknown CVE-2023-31082: Fix unknown CVE-2023-31083: Fix unknown -CVE-2023-31084: Fix unknown +CVE-2023-31084: Fix not seen in stream CVE-2023-31085: Fix unknown CVE-2023-31436: Fix not seen in stream CVE-2023-32233: Fix not seen in stream +CVE-2023-32250: Fix not seen in stream +CVE-2023-32254: Fix not seen in stream CVE-2023-32269: Fix not seen in stream CVE-2023-33203: Fix not seen in stream +CVE-2023-33250: Fix unknown +CVE-2023-33288: Fix not seen in stream
diff --git a/data/6.0/6.0_security.txt b/data/6.0/6.0_security.txt index 06fa6dd..0d2253f 100644 --- a/data/6.0/6.0_security.txt +++ b/data/6.0/6.0_security.txt
@@ -252,7 +252,6 @@ CVE-2023-25012: (unk) HID: bigben: use spinlock to safely schedule workers CVE-2023-26242: (unk) CVE-2023-26545: (unk) net: mpls: fix stale pointer if allocation fails during device rename - CVE-2023-28410: (unk) CVE-2023-28466: (unk) net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf() CVE-2023-28866: (unk) Bluetooth: HCI: Fix global-out-of-bounds CVE-2023-30456: (unk) KVM: nVMX: add missing consistency checks for CR0 and CR4 @@ -260,9 +259,13 @@ CVE-2023-31081: (unk) CVE-2023-31082: (unk) CVE-2023-31083: (unk) - CVE-2023-31084: (unk) + CVE-2023-31084: (unk) media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() CVE-2023-31085: (unk) CVE-2023-31436: (unk) net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg CVE-2023-32233: (unk) netfilter: nf_tables: deactivate anonymous set from preparation phase + CVE-2023-32250: (unk) ksmbd: fix racy issue from session setup and logoff + CVE-2023-32254: (unk) ksmbd: fix racy issue under cocurrent smb2 tree disconnect CVE-2023-32269: (unk) netrom: Fix use-after-free caused by accept on already connected socket CVE-2023-33203: (unk) net: qcom/emac: Fix use after free bug in emac_remove due to race condition + CVE-2023-33250: (unk) + CVE-2023-33288: (unk) power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
diff --git a/data/6.1/6.1_CVEs.txt b/data/6.1/6.1_CVEs.txt index 9bbe812..a508d8b 100644 --- a/data/6.1/6.1_CVEs.txt +++ b/data/6.1/6.1_CVEs.txt
@@ -164,7 +164,6 @@ CVE-2023-26606: Fixed with 6.1.2 CVE-2023-28327: Fixed with 6.1 CVE-2023-28328: Fixed with 6.1.2 -CVE-2023-28410: Fix unknown CVE-2023-28466: Fixed with 6.1.20 CVE-2023-28866: Fixed with 6.1.22 CVE-2023-30456: Fixed with 6.1.21 @@ -172,9 +171,13 @@ CVE-2023-31081: Fix unknown CVE-2023-31082: Fix unknown CVE-2023-31083: Fix unknown -CVE-2023-31084: Fix unknown +CVE-2023-31084: Fix not seen in stream CVE-2023-31085: Fix unknown CVE-2023-31436: Fixed with 6.1.26 CVE-2023-32233: Fixed with 6.1.28 +CVE-2023-32250: Fixed with 6.1.29 +CVE-2023-32254: Fixed with 6.1.28 CVE-2023-32269: Fixed with 6.1.11 CVE-2023-33203: Fixed with 6.1.22 +CVE-2023-33250: Fix unknown +CVE-2023-33288: Fixed with 6.1.22
diff --git a/data/6.1/6.1_security.txt b/data/6.1/6.1_security.txt index e1ec218..9b72df2 100644 --- a/data/6.1/6.1_security.txt +++ b/data/6.1/6.1_security.txt
@@ -108,6 +108,7 @@ CVE-2023-28866: b3168abd24245aa0775c5a387dcf94d36ca7e738 Bluetooth: HCI: Fix global-out-of-bounds CVE-2023-30772: 47b2e1a67e6da172bb4cf69ef9dafde4458bde5f power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition CVE-2023-33203: 5fc2c4e311a9341a2b0e044ab5f33afa37b56226 net: qcom/emac: Fix use after free bug in emac_remove due to race condition + CVE-2023-33288: 84bdb3b76b07f2e62183913a1f5da2d4aa25580a power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition CVEs fixed in 6.1.23: CVE-2023-1611: a38ff2024805a30d9b96f52557c6ea0bbc31252a btrfs: fix race between quota disable and quota assign ioctls @@ -126,6 +127,10 @@ CVEs fixed in 6.1.28: CVE-2023-2269: 9a94ebc74c3540aba5aa2c7b05032da4610a08c9 dm ioctl: fix nested locking in table_clear() to remove deadlock concern CVE-2023-32233: 4507918cd1f8b80f21a396fa0531d53e372bed66 netfilter: nf_tables: deactivate anonymous set from preparation phase + CVE-2023-32254: bd80d35725a0cf4df9307bfe2f1a3b2cb983d8e6 ksmbd: fix racy issue under cocurrent smb2 tree disconnect + +CVEs fixed in 6.1.29: + CVE-2023-32250: f623f627ad2b1dc215ab3b0df53fb05cfd3a1c3b ksmbd: fix racy issue from session setup and logoff Outstanding CVEs: CVE-2005-3660: (unk) @@ -220,9 +225,9 @@ CVE-2023-23039: (unk) CVE-2023-2430: (unk) io_uring/msg_ring: fix missing lock on overflow for IOPOLL CVE-2023-26242: (unk) - CVE-2023-28410: (unk) CVE-2023-31081: (unk) CVE-2023-31082: (unk) CVE-2023-31083: (unk) - CVE-2023-31084: (unk) + CVE-2023-31084: (unk) media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() CVE-2023-31085: (unk) + CVE-2023-33250: (unk)
diff --git a/data/6.2/6.2_CVEs.txt b/data/6.2/6.2_CVEs.txt index d860356..a5de8b0 100644 --- a/data/6.2/6.2_CVEs.txt +++ b/data/6.2/6.2_CVEs.txt
@@ -114,7 +114,6 @@ CVE-2023-25012: Fixed with 6.2.3 CVE-2023-26242: Fix unknown CVE-2023-26545: Fixed with 6.2 -CVE-2023-28410: Fix unknown CVE-2023-28466: Fixed with 6.2.7 CVE-2023-28866: Fixed with 6.2.9 CVE-2023-30456: Fixed with 6.2.8 @@ -122,8 +121,12 @@ CVE-2023-31081: Fix unknown CVE-2023-31082: Fix unknown CVE-2023-31083: Fix unknown -CVE-2023-31084: Fix unknown +CVE-2023-31084: Fix not seen in stream CVE-2023-31085: Fix unknown CVE-2023-31436: Fixed with 6.2.13 CVE-2023-32233: Fixed with 6.2.15 +CVE-2023-32250: Fixed with 6.2.16 +CVE-2023-32254: Fixed with 6.2.15 CVE-2023-33203: Fixed with 6.2.9 +CVE-2023-33250: Fix unknown +CVE-2023-33288: Fixed with 6.2.9
diff --git a/data/6.2/6.2_security.txt b/data/6.2/6.2_security.txt index 6d19a2b..1455438 100644 --- a/data/6.2/6.2_security.txt +++ b/data/6.2/6.2_security.txt
@@ -39,6 +39,7 @@ CVE-2023-28866: 8497222b22b591c6b2d106e0e3c1672ffe4e10e0 Bluetooth: HCI: Fix global-out-of-bounds CVE-2023-30772: a7d686b36aa8021ee96128290ac3b58c4c1f6297 power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition CVE-2023-33203: 514dc3d0f176d280dc2d3cd25e898a7ec329e878 net: qcom/emac: Fix use after free bug in emac_remove due to race condition + CVE-2023-33288: 2da4b860f3055ae40a809c020398778e6c27b856 power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition CVEs fixed in 6.2.10: CVE-2023-1611: 4caab245b0469ce9258ba099a41e909f5d307b33 btrfs: fix race between quota disable and quota assign ioctls @@ -57,6 +58,10 @@ CVEs fixed in 6.2.15: CVE-2023-2269: 243093d536fe3cc78b450f1beb8d584505ea3193 dm ioctl: fix nested locking in table_clear() to remove deadlock concern CVE-2023-32233: 6b0801dcc1aa4373d28ac8ee396788d2e715c495 netfilter: nf_tables: deactivate anonymous set from preparation phase + CVE-2023-32254: dc1c17716c099c90948ebb83e2170dd75a3be6b6 ksmbd: fix racy issue under cocurrent smb2 tree disconnect + +CVEs fixed in 6.2.16: + CVE-2023-32250: d270631c21e68fb8016d6e231d022d7023a2df6f ksmbd: fix racy issue from session setup and logoff Outstanding CVEs: CVE-2005-3660: (unk) @@ -147,9 +152,9 @@ CVE-2023-2176: (unk) RDMA/core: Refactor rdma_bind_addr CVE-2023-23039: (unk) CVE-2023-26242: (unk) - CVE-2023-28410: (unk) CVE-2023-31081: (unk) CVE-2023-31082: (unk) CVE-2023-31083: (unk) - CVE-2023-31084: (unk) + CVE-2023-31084: (unk) media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() CVE-2023-31085: (unk) + CVE-2023-33250: (unk)
diff --git a/data/CVEs.txt b/data/CVEs.txt index faa38c5..4ed4f5a 100644 --- a/data/CVEs.txt +++ b/data/CVEs.txt
@@ -1718,6 +1718,7 @@ CVE-2020-36557: 4001d7b7fc271052ebff43f327c26dc64806bbdf - ca4463bf8438b403596edd0ec961ca0d4fbe0220 (v3.4-rc1 to v5.7-rc1) CVE-2020-36558: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 - 6cd1ed50efd88261298577cd92a14f2768eddeeb (v2.6.12-rc2 to v5.6-rc3) CVE-2020-36691: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 - 7690aa1cdf7c4565ad6b013b324c28b685505e24 (v2.6.12-rc2 to v5.8-rc1) +CVE-2020-36694: 80055dab5de0c8677bc148c4717ddfc753a9148e - cc00bcaa589914096edef7fb87ca5cee4a166b5c (v4.15-rc1 to v5.10) CVE-2020-3702: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 - 56c5485c9e444c2e85e11694b6c44f1338fc20fd (v2.6.12-rc2 to v5.12-rc1-dontuse) CVE-2020-4788: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 - f79643787e0a0762d2409b7b8334e83f22d85695 (v2.6.12-rc2 to v5.10-rc5) CVE-2020-7053: 1acfc104cdf8a3408f0e83b4115d4419c6315005 - 7dc40713618c884bf07c030d1ab1f47a9dc1f310 (v4.14-rc1 to v5.2-rc1) @@ -2386,7 +2387,7 @@ CVE-2023-26607: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 - 36a4d82dddbbd421d2b8e79e1cab68c8126d5075 (v2.6.12-rc2 to v6.1-rc1) CVE-2023-28327: cae9910e73446cac68a54e3a7b02aaa12b689026 - b3abe42e94900bdd045c472f9c9be620ba5ce553 (v5.3-rc1 to v6.1) CVE-2023-28328: 76f9a820c8672ada12ffa0903652c9e6f2429462 - 0ed554fd769a19ea8464bb83e9ac201002ef74ad (v2.6.34-rc1 to v6.2-rc1) -CVE-2023-28410: (n/a) - (n/a) (unk to unk) +CVE-2023-28410: (n/a) - 661412e301e2ca86799aa4f400d1cf0bd38c57c6 (unk to v5.19-rc1) CVE-2023-28464: 0f00cd322d22d4441de51aa80bcce5bb6a8cbb44 - 5dc7d23e167e2882ef118456ceccd57873e876d8 (v6.3-rc1 to v6.3-rc7) CVE-2023-28466: 3c4d7559159bfe1e3b94df3a657b2cda3a34e218 - 49c47cc21b5b7a3d8deb18fc57b0aa2ab1286962 (v4.13-rc1 to v6.3-rc2) CVE-2023-28772: 5e3ca0ec76fce92daa4eed0d02de9c79b1fe3920 - d3b16034a24a112bb83aeb669ac5b9b01f744bb7 (v2.6.27-rc1 to v5.14-rc1) @@ -2396,9 +2397,13 @@ CVE-2023-31081: (n/a) - (n/a) (unk to unk) CVE-2023-31082: (n/a) - (n/a) (unk to unk) CVE-2023-31083: (n/a) - (n/a) (unk to unk) -CVE-2023-31084: (n/a) - (n/a) (unk to unk) +CVE-2023-31084: (n/a) - b8c75e4a1b325ea0a9433fa8834be97b5836b946 (unk to v6.4-rc3) CVE-2023-31085: (n/a) - (n/a) (unk to unk) CVE-2023-31436: 3015f3d2a3cd9614294025849d3ed89fd2f3a7f5 - 3037933448f60f9acb705997eae62013ecb81e0d (v3.7-rc5 to v6.3) CVE-2023-32233: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 - c1592a89942e9678f7d9c8030efa777c0d57edab (v2.6.12-rc2 to v6.4-rc1) +CVE-2023-32250: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 - f5c779b7ddbda30866cf2a27c63e34158f858c73 (v2.6.12-rc2 to v6.4-rc1) +CVE-2023-32254: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 - 30210947a343b6b3ca13adc9bfc88e1543e16dd5 (v2.6.12-rc2 to v6.4-rc1) CVE-2023-32269: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 - 611792920925fb088ddccbe2783c7f92fdfb6b64 (v2.6.12-rc2 to v6.2-rc7) -CVE-2023-33203: (n/a) - 6b6bc5b8bd2d4ca9e1efa9ae0f98a0b0687ace75 (unk to v6.3-rc4) +CVE-2023-33203: b9b17debc69d27cd55e21ee51a5ba7fc50a426cf - 6b6bc5b8bd2d4ca9e1efa9ae0f98a0b0687ace75 (v4.9-rc1 to v6.3-rc4) +CVE-2023-33250: (n/a) - (n/a) (unk to unk) +CVE-2023-33288: 97774672573ac4355bd12cf84b202555c1131b69 - 47c29d69212911f50bdcdd0564b5999a559010d4 (v2.6.39-rc1 to v6.3-rc4)
diff --git a/data/cmts.json b/data/cmts.json index 6ef3014..0aa0d72 100644 --- a/data/cmts.json +++ b/data/cmts.json
@@ -625,6 +625,7 @@ "2febc839133280d5a5e8e1179c94ea674489dae2": "v3.18-rc2", "3010a0663fd949d122eca0561b06b0a9453f7866": "v4.16-rc4", "3015f3d2a3cd9614294025849d3ed89fd2f3a7f5": "v3.7-rc5", + "30210947a343b6b3ca13adc9bfc88e1543e16dd5": "v6.4-rc1", "3021ad9a4f009265e6063e617fb91306980af16c": "v4.5-rc1", "302d3deb20682a076e1ab551821cacfdc81c5e4f": "v4.7-rc1", "3037933448f60f9acb705997eae62013ecb81e0d": "v6.3", @@ -930,6 +931,7 @@ "47abea041f897d64dbd5777f0cf7745148f85d75": "v6.0-rc3", "47b0c2e4c220f2251fd8dcfbb44479819c715e15": "v6.1-rc7", "47bb117911b051bbc90764a8bff96543cbd2005f": "v5.1-rc1", + "47c29d69212911f50bdcdd0564b5999a559010d4": "v6.3-rc4", "47cdee29ef9d94e485eb08f962c74943023a5271": "v5.2-rc3", "47d902b90a32a42a3d33aef3a02170fc6f70aa23": "v4.12-rc1", "47f2d97d38816aaca94c9b6961c6eff1cfcd0bd6": "v3.6-rc1", @@ -1323,6 +1325,7 @@ "65d8fc777f6dcfee12785c057a6b57f679641c90": "v4.6-rc1", "65eea8edc315589d6c993cf12dbb5d0e9ef1fe4e": "v4.19-rc5", "65f3324f4b6fed78b8761c3b74615ecf0ffa81fa": "v5.17", + "661412e301e2ca86799aa4f400d1cf0bd38c57c6": "v5.19-rc1", "662ca437e714caaab855b12415d6ffd815985bc0": "v3.12-rc2", "66450a21f99636af4fafac2afd33f1a40631bc3a": "v3.10-rc1", "667121ace9dbafb368618dbabcf07901c962ddac": "v4.9-rc4", @@ -1665,6 +1668,7 @@ "7fd25e6fc035f4b04b75bca6d7e8daa069603a76": "v5.4-rc2", "7fedb63a8307dda0ec3b8969a3b233a1dd7ea8e0": "v5.12-rc8", "7ff9554bb578ba02166071d2d487b7fc7d860d62": "v3.5-rc1", + "80055dab5de0c8677bc148c4717ddfc753a9148e": "v4.15-rc1", "8019ad13ef7f64be44d4f892af9c840179009254": "v5.6-rc6", "801ebf1043ae7b182588554cc9b9ad3c14bc2ab5": "v5.3-rc1", "8033426e6bdb2690d302872ac1e1fadaec1a5581": "v3.12-rc1", @@ -1934,6 +1938,7 @@ "9720b4bc76a83807c68e00c62bfba575251bb73e": "v2.6.39-rc1", "973c096f6a85e5b5f2a295126ba6928d9a6afd45": "v5.9-rc6", "9764c02fcbad40001fd3f63558d918e4d519bb75": "v4.14-rc2", + "97774672573ac4355bd12cf84b202555c1131b69": "v2.6.39-rc1", "979a6e28dd969a2222545001f79566b4bfaf06c0": "v5.15-rc1", "979d63d50c0c0f7bc537bf821e056cc9fe5abd38": "v5.0-rc1", "979e0d74651ba5aa533277f2a6423d0f982fb6f6": "v3.14-rc6", @@ -2358,6 +2363,7 @@ "b870e73a56c4cccbec33224233eaf295839f228c": "v6.2-rc5", "b892bf75b2034e0e4af23da9a276160b8ad26c15": "v3.14-rc1", "b8a8684502a0fc852afa0056c6bb2a9273f6fcc0": "v3.15-rc1", + "b8c75e4a1b325ea0a9433fa8834be97b5836b946": "v6.4-rc3", "b8d17e7d93d2beb89e4f34c59996376b8b544792": "v5.5-rc1", "b8e51a6a9db94bc1fb18ae831b3dab106b5a4b5f": "v5.4-rc6", "b8f2c21db390273c3eaf0e5308faeaeb1e233840": "v3.8-rc6", @@ -2634,6 +2640,7 @@ "cbdb967af3d54993f5814f1cee0ed311a055377d": "v4.4-rc1", "cbf031f425fd0b30ff10ba83b612753189a6bbbf": "v3.12-rc1", "cbfecb927f429a6fa613d74b998496bd71e4438a": "v6.1-rc1", + "cc00bcaa589914096edef7fb87ca5cee4a166b5c": "v5.10", "cc04acf53fb1bba1e57b0d34a400ccaf498fc9be": "v2.6.39-rc1", "cc080e9e9be16ccf26135d366d7d2b65209f1d56": "v4.2-rc1", "cc16eecae687912238ee6efbff71ad31e2bc414e": "v5.18-rc1", @@ -3115,6 +3122,7 @@ "f56e65dff6ad52395ef45738799b4fb70ff43376": "v5.10-rc1", "f5a2b3ffb7af4b6ae5b905850a1a6bad82b268b9": "v5.3-rc1", "f5bbbbe4d63577026f908a809f22f5fd5a90ea1f": "v4.19-rc1", + "f5c779b7ddbda30866cf2a27c63e34158f858c73": "v6.4-rc1", "f5cb779ba16334b45ba8946d6bfa6d9834d1527f": "v4.16-rc1", "f5e81d1117501546b7be050c5fbafa6efd2c722c": "v5.14-rc4", "f5ea110044fa858925a880b4fa9f551bfa2dfc38": "v3.10-rc1",
diff --git a/data/kernel_cves.json b/data/kernel_cves.json index 65d9670..0ce5a53 100644 --- a/data/kernel_cves.json +++ b/data/kernel_cves.json
@@ -59915,6 +59915,23 @@ "Ubuntu": "https://ubuntu.com/security/CVE-2020-36691" } }, + "CVE-2020-36694": { + "affected_versions": "v4.15-rc1 to v5.10", + "breaks": "80055dab5de0c8677bc148c4717ddfc753a9148e", + "cmt_msg": "netfilter: x_tables: Switch synchronization to RCU", + "fixes": "cc00bcaa589914096edef7fb87ca5cee4a166b5c", + "last_affected_version": "5.9", + "last_modified": "2023-05-25", + "nvd_text": "An issue was discovered in netfilter in the Linux kernel before 5.10. There can be a use-after-free in the packet processing context, because the per-CPU sequence count is mishandled during concurrent iptables rules replacement. This could be exploited with the CAP_NET_ADMIN capability in an unprivileged namespace. NOTE: cc00bca was reverted in 5.12.", + "ref_urls": { + "Debian": "https://security-tracker.debian.org/tracker/CVE-2020-36694", + "ExploitDB": "https://www.exploit-db.com/search?cve=2020-36694", + "NVD": "https://nvd.nist.gov/vuln/detail/CVE-2020-36694", + "Red Hat": "https://access.redhat.com/security/cve/CVE-2020-36694", + "SUSE": "https://www.suse.com/security/cve/CVE-2020-36694", + "Ubuntu": "https://ubuntu.com/security/CVE-2020-36694" + } + }, "CVE-2020-3702": { "affected_versions": "v2.6.12-rc2 to v5.12-rc1-dontuse", "breaks": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2", @@ -79510,7 +79527,8 @@ "score": 7.8 }, "fixes": "98bea253aa28ad8be2ce565a9ca21beb4a9419e5", - "last_modified": "2023-05-12", + "last_affected_version": "5.15.112", + "last_modified": "2023-05-25", "nvd_text": "In the Linux kernel through 6.2.7, fs/ntfs3/inode.c has an invalid kfree because it does not validate MFT flags before replaying logs.", "ref_urls": { "Debian": "https://security-tracker.debian.org/tracker/CVE-2022-48425", @@ -81212,9 +81230,22 @@ "affected_versions": "v5.14-rc1 to v6.2-rc4", "breaks": "cefc7ca46235f01d5233e3abd4b79452af01d9e9", "cmt_msg": "efi: rt-wrapper: Add missing include", + "cvss3": { + "Attack Complexity": "Low", + "Attack Vector": "Local", + "Availability": "High", + "Confidentiality": "High", + "Integrity": "High", + "Privileges Required": "Low", + "Scope": "Unchanged", + "User Interaction": "None", + "raw": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "score": 7.8 + }, + "cwe": "Unspecified", "fixes": "18bba1843fc7f264f58c9345d00827d082f9c558", "last_affected_version": "6.1.7", - "last_modified": "2023-05-19", + "last_modified": "2023-05-25", "nvd_text": "In __efi_rt_asm_wrapper of efi-rt-wrapper.S, there is a possible bypass of shadow stack protection due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-260821414References: Upstream kernel", "ref_urls": { "Debian": "https://security-tracker.debian.org/tracker/CVE-2023-21102", @@ -81229,9 +81260,21 @@ "affected_versions": "v5.19-rc1 to v6.2-rc5", "breaks": "d4726d7700688835f4784d3b94de6fff2cbe16c2", "cmt_msg": "drm/msm/gpu: Fix potential double-free", + "cvss3": { + "Attack Complexity": "Low", + "Attack Vector": "Local", + "Availability": "High", + "Confidentiality": "High", + "Integrity": "High", + "Privileges Required": "Low", + "Scope": "Unchanged", + "User Interaction": "None", + "raw": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "score": 7.8 + }, "fixes": "a66f1efcf748febea7758c4c3c8b5bc5294949ef", "last_affected_version": "6.1.8", - "last_modified": "2023-05-19", + "last_modified": "2023-05-25", "nvd_text": "In adreno_set_param of adreno_gpu.c, there is a possible memory corruption due to a double free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-265016072References: Upstream kernel", "ref_urls": { "Debian": "https://security-tracker.debian.org/tracker/CVE-2023-21106", @@ -82044,7 +82087,8 @@ "cmt_msg": "net: qcom/emac: Fix use after free bug in emac_remove due to race condition", "fixes": "6b6bc5b8bd2d4ca9e1efa9ae0f98a0b0687ace75", "last_affected_version": "6.2.8", - "last_modified": "2023-05-12", + "last_modified": "2023-05-25", + "nvd_text": "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2023-33203. Reason: This candidate is a reservation duplicate of CVE-2023-33203. Notes: All CVE users should reference CVE-2023-33203 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.", "ref_urls": { "Debian": "https://security-tracker.debian.org/tracker/CVE-2023-2483", "ExploitDB": "https://www.exploit-db.com/search?cve=2023-2483", @@ -82052,7 +82096,8 @@ "Red Hat": "https://access.redhat.com/security/cve/CVE-2023-2483", "SUSE": "https://www.suse.com/security/cve/CVE-2023-2483", "Ubuntu": "https://ubuntu.com/security/CVE-2023-2483" - } + }, + "rejected": true }, "CVE-2023-25012": { "affected_versions": "v5.6-rc4 to v6.3-rc1", @@ -82355,10 +82400,24 @@ } }, "CVE-2023-28410": { - "affected_versions": "unk to unk", + "affected_versions": "unk to v5.19-rc1", "breaks": "", - "fixes": "", - "last_modified": "2023-05-12", + "cmt_msg": "drm/i915/gem: add missing boundary check in vm_access", + "cvss3": { + "Attack Complexity": "Low", + "Attack Vector": "Local", + "Availability": "High", + "Confidentiality": "High", + "Integrity": "High", + "Privileges Required": "Low", + "Scope": "Unchanged", + "User Interaction": "None", + "raw": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "score": 7.8 + }, + "fixes": "661412e301e2ca86799aa4f400d1cf0bd38c57c6", + "last_affected_version": "None", + "last_modified": "2023-05-25", "nvd_text": "Improper restriction of operations within the bounds of a memory buffer in some Intel(R) i915 Graphics drivers for linux before kernel version 6.2.10 may allow an authenticated user to potentially enable escalation of privilege via local access.", "ref_urls": { "Debian": "https://security-tracker.debian.org/tracker/CVE-2023-28410", @@ -82624,8 +82683,9 @@ } }, "CVE-2023-31084": { - "affected_versions": "unk to unk", + "affected_versions": "unk to v6.4-rc3", "breaks": "", + "cmt_msg": "media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()", "cvss3": { "Attack Complexity": "Low", "Attack Vector": "Local", @@ -82639,8 +82699,8 @@ "score": 5.5 }, "cwe": "Unspecified", - "fixes": "", - "last_modified": "2023-05-06", + "fixes": "b8c75e4a1b325ea0a9433fa8834be97b5836b946", + "last_modified": "2023-05-25", "nvd_text": "An issue was discovered in drivers/media/dvb-core/dvb_frontend.c in the Linux kernel 6.2. There is a blocking operation when a task is in !TASK_RUNNING. In dvb_frontend_get_event, wait_event_interruptible is called; the condition is dvb_frontend_test_event(fepriv,events). In dvb_frontend_test_event, down(&fepriv->sem) is called. However, wait_event_interruptible would put the process to sleep, and down(&fepriv->sem) may block the process.", "ref_urls": { "Debian": "https://security-tracker.debian.org/tracker/CVE-2023-31084", @@ -82736,6 +82796,38 @@ "Ubuntu": "https://ubuntu.com/security/CVE-2023-32233" } }, + "CVE-2023-32250": { + "affected_versions": "v2.6.12-rc2 to v6.4-rc1", + "breaks": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2", + "cmt_msg": "ksmbd: fix racy issue from session setup and logoff", + "fixes": "f5c779b7ddbda30866cf2a27c63e34158f858c73", + "last_affected_version": "6.2.15", + "last_modified": "2023-05-25", + "ref_urls": { + "Debian": "https://security-tracker.debian.org/tracker/CVE-2023-32250", + "ExploitDB": "https://www.exploit-db.com/search?cve=2023-32250", + "NVD": "https://nvd.nist.gov/vuln/detail/CVE-2023-32250", + "Red Hat": "https://access.redhat.com/security/cve/CVE-2023-32250", + "SUSE": "https://www.suse.com/security/cve/CVE-2023-32250", + "Ubuntu": "https://ubuntu.com/security/CVE-2023-32250" + } + }, + "CVE-2023-32254": { + "affected_versions": "v2.6.12-rc2 to v6.4-rc1", + "breaks": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2", + "cmt_msg": "ksmbd: fix racy issue under cocurrent smb2 tree disconnect", + "fixes": "30210947a343b6b3ca13adc9bfc88e1543e16dd5", + "last_affected_version": "6.2.14", + "last_modified": "2023-05-25", + "ref_urls": { + "Debian": "https://security-tracker.debian.org/tracker/CVE-2023-32254", + "ExploitDB": "https://www.exploit-db.com/search?cve=2023-32254", + "NVD": "https://nvd.nist.gov/vuln/detail/CVE-2023-32254", + "Red Hat": "https://access.redhat.com/security/cve/CVE-2023-32254", + "SUSE": "https://www.suse.com/security/cve/CVE-2023-32254", + "Ubuntu": "https://ubuntu.com/security/CVE-2023-32254" + } + }, "CVE-2023-32269": { "affected_versions": "v2.6.12-rc2 to v6.2-rc7", "breaks": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2", @@ -82766,12 +82858,12 @@ } }, "CVE-2023-33203": { - "affected_versions": "unk to v6.3-rc4", - "breaks": "", + "affected_versions": "v4.9-rc1 to v6.3-rc4", + "breaks": "b9b17debc69d27cd55e21ee51a5ba7fc50a426cf", "cmt_msg": "net: qcom/emac: Fix use after free bug in emac_remove due to race condition", "fixes": "6b6bc5b8bd2d4ca9e1efa9ae0f98a0b0687ace75", "last_affected_version": "6.2.8", - "last_modified": "2023-05-19", + "last_modified": "2023-05-25", "nvd_text": "The Linux kernel before 6.2.9 has a race condition and resultant use-after-free in drivers/net/ethernet/qualcomm/emac/emac.c if a physically proximate attacker unplugs an emac based device.", "ref_urls": { "Debian": "https://security-tracker.debian.org/tracker/CVE-2023-33203", @@ -82781,5 +82873,37 @@ "SUSE": "https://www.suse.com/security/cve/CVE-2023-33203", "Ubuntu": "https://ubuntu.com/security/CVE-2023-33203" } + }, + "CVE-2023-33250": { + "affected_versions": "unk to unk", + "breaks": "", + "fixes": "", + "last_modified": "2023-05-25", + "nvd_text": "The Linux kernel 6.3 has a use-after-free in iopt_unmap_iova_range in drivers/iommu/iommufd/io_pagetable.c.", + "ref_urls": { + "Debian": "https://security-tracker.debian.org/tracker/CVE-2023-33250", + "ExploitDB": "https://www.exploit-db.com/search?cve=2023-33250", + "NVD": "https://nvd.nist.gov/vuln/detail/CVE-2023-33250", + "Red Hat": "https://access.redhat.com/security/cve/CVE-2023-33250", + "SUSE": "https://www.suse.com/security/cve/CVE-2023-33250", + "Ubuntu": "https://ubuntu.com/security/CVE-2023-33250" + } + }, + "CVE-2023-33288": { + "affected_versions": "v2.6.39-rc1 to v6.3-rc4", + "breaks": "97774672573ac4355bd12cf84b202555c1131b69", + "cmt_msg": "power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition", + "fixes": "47c29d69212911f50bdcdd0564b5999a559010d4", + "last_affected_version": "6.2.8", + "last_modified": "2023-05-25", + "nvd_text": "An issue was discovered in the Linux kernel before 6.2.9. A use-after-free was found in bq24190_remove in drivers/power/supply/bq24190_charger.c. It could allow a local attacker to crash the system due to a race condition.", + "ref_urls": { + "Debian": "https://security-tracker.debian.org/tracker/CVE-2023-33288", + "ExploitDB": "https://www.exploit-db.com/search?cve=2023-33288", + "NVD": "https://nvd.nist.gov/vuln/detail/CVE-2023-33288", + "Red Hat": "https://access.redhat.com/security/cve/CVE-2023-33288", + "SUSE": "https://www.suse.com/security/cve/CVE-2023-33288", + "Ubuntu": "https://ubuntu.com/security/CVE-2023-33288" + } } } \ No newline at end of file
diff --git a/data/stream_data.json b/data/stream_data.json index d47141d..7825996 100644 --- a/data/stream_data.json +++ b/data/stream_data.json
@@ -2043,7 +2043,7 @@ "cmt_msg": "media: v4l: ioctl: Fix memory leak in video_usercopy" }, "CVE-2023-31084": { - "cmt_msg": "" + "cmt_msg": "media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()" }, "CVE-2015-8551": { "cmt_msg": "xen/pciback: Return error on XEN_PCI_OP_enable_msi when device has MSI or MSI-X enabled" @@ -2387,6 +2387,9 @@ "CVE-2022-28356": { "cmt_msg": "llc: fix netdevice reference leaks in llc_ui_bind()" }, + "CVE-2023-33288": { + "cmt_msg": "power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition" + }, "CVE-2022-36402": { "cmt_msg": "" }, @@ -2954,9 +2957,6 @@ "CVE-2015-8767": { "cmt_msg": "sctp: Prevent soft lockup when sctp_accept() is called during a timeout event" }, - "CVE-2023-33203": { - "cmt_msg": "net: qcom/emac: Fix use after free bug in emac_remove due to race condition" - }, "CVE-2021-0605": { "cmt_msg": "af_key: pfkey_dump needs parameter validation" }, @@ -3177,7 +3177,7 @@ "cmt_msg": "cifs: fix NULL ptr dereference in smb2_ioctl_query_info()" }, "CVE-2023-28410": { - "cmt_msg": "" + "cmt_msg": "drm/i915/gem: add missing boundary check in vm_access" }, "CVE-2020-28374": { "cmt_msg": "scsi: target: Fix XCOPY NAA identifier lookup" @@ -3572,6 +3572,9 @@ "CVE-2021-20321": { "cmt_msg": "ovl: fix missing negative dentry check in ovl_rename()" }, + "CVE-2023-33250": { + "cmt_msg": "" + }, "CVE-2022-42896": { "cmt_msg": "Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM" }, @@ -3647,9 +3650,15 @@ "CVE-2022-33740": { "cmt_msg": "xen/netfront: fix leaking data in shared pages" }, + "CVE-2023-32254": { + "cmt_msg": "ksmbd: fix racy issue under cocurrent smb2 tree disconnect" + }, "CVE-2020-10708": { "cmt_msg": "" }, + "CVE-2023-32250": { + "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" + }, "CVE-2022-0400": { "cmt_msg": "" }, @@ -5102,6 +5111,9 @@ "CVE-2021-4083": { "cmt_msg": "fget: check that the fd still exists after getting a ref to it" }, + "CVE-2023-33288": { + "cmt_msg": "power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition" + }, "CVE-2018-10938": { "cmt_msg": "Cipso: cipso_v4_optptr enter infinite loop" }, @@ -6129,7 +6141,7 @@ "cmt_msg": "printk: hash addresses printed with %p" }, "CVE-2023-28410": { - "cmt_msg": "" + "cmt_msg": "drm/i915/gem: add missing boundary check in vm_access" }, "CVE-2020-28374": { "cmt_msg": "scsi: target: Fix XCOPY NAA identifier lookup" @@ -6417,7 +6429,7 @@ "cmt_msg": "netfilter: nf_tables: disallow non-stateful expression in sets earlier" }, "CVE-2023-31084": { - "cmt_msg": "" + "cmt_msg": "media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()" }, "CVE-2017-9986": { "cmt_msg": "sound: Retire OSS" @@ -6668,6 +6680,9 @@ "CVE-2019-15902": { "cmt_msg": "" }, + "CVE-2023-32250": { + "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" + }, "CVE-2019-20054": { "cmt_msg": "fs/proc/proc_sysctl.c: fix NULL pointer dereference in put_links" }, @@ -6806,6 +6821,9 @@ "CVE-2022-33740": { "cmt_msg": "xen/netfront: fix leaking data in shared pages" }, + "CVE-2023-32254": { + "cmt_msg": "ksmbd: fix racy issue under cocurrent smb2 tree disconnect" + }, "CVE-2020-35513": { "cmt_msg": "nfsd: fix incorrect umasks" }, @@ -7613,6 +7631,9 @@ "CVE-2023-32269": { "cmt_msg": "netrom: Fix use-after-free caused by accept on already connected socket" }, + "CVE-2023-33250": { + "cmt_msg": "" + }, "CVE-2021-38198": { "cmt_msg": "KVM: X86: MMU: Use the correct inherited permissions to get shadow page" }, @@ -8413,7 +8434,7 @@ "cmt_msg": "media: radio-raremono: change devm_k*alloc to k*alloc" }, "CVE-2023-31084": { - "cmt_msg": "" + "cmt_msg": "media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()" }, "CVE-2019-15217": { "cmt_msg": "media: usb:zr364xx:Fix KASAN:null-ptr-deref Read in zr364xx_vidioc_querycap" @@ -8541,6 +8562,9 @@ "CVE-2021-4083": { "cmt_msg": "fget: check that the fd still exists after getting a ref to it" }, + "CVE-2023-33288": { + "cmt_msg": "power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition" + }, "CVE-2017-17558": { "cmt_msg": "USB: core: prevent malicious bNumInterfaces overflow" }, @@ -9478,7 +9502,7 @@ "cmt_msg": "nfs: Fix getxattr kernel panic and memory overflow" }, "CVE-2023-28410": { - "cmt_msg": "" + "cmt_msg": "drm/i915/gem: add missing boundary check in vm_access" }, "CVE-2020-28374": { "cmt_msg": "scsi: target: Fix XCOPY NAA identifier lookup" @@ -9978,6 +10002,9 @@ "CVE-2019-15902": { "cmt_msg": "" }, + "CVE-2023-32250": { + "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" + }, "CVE-2019-20054": { "cmt_msg": "fs/proc/proc_sysctl.c: fix NULL pointer dereference in put_links" }, @@ -10098,6 +10125,9 @@ "CVE-2020-29569": { "cmt_msg": "xen-blkback: set ring->xenblkd to NULL after kthread_stop()" }, + "CVE-2023-32254": { + "cmt_msg": "ksmbd: fix racy issue under cocurrent smb2 tree disconnect" + }, "CVE-2020-35513": { "cmt_msg": "nfsd: fix incorrect umasks" }, @@ -10851,6 +10881,9 @@ "CVE-2019-16089": { "cmt_msg": "" }, + "CVE-2023-33250": { + "cmt_msg": "" + }, "CVE-2021-38198": { "cmt_msg": "KVM: X86: MMU: Use the correct inherited permissions to get shadow page" }, @@ -11525,7 +11558,7 @@ "cmt_msg": "media: radio-raremono: change devm_k*alloc to k*alloc" }, "CVE-2023-31084": { - "cmt_msg": "" + "cmt_msg": "media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()" }, "CVE-2019-15217": { "cmt_msg": "media: usb:zr364xx:Fix KASAN:null-ptr-deref Read in zr364xx_vidioc_querycap" @@ -11665,6 +11698,9 @@ "CVE-2021-4083": { "cmt_msg": "fget: check that the fd still exists after getting a ref to it" }, + "CVE-2023-33288": { + "cmt_msg": "power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition" + }, "CVE-2018-10938": { "cmt_msg": "Cipso: cipso_v4_optptr enter infinite loop" }, @@ -12653,7 +12689,7 @@ "cmt_msg": "nfs: Fix getxattr kernel panic and memory overflow" }, "CVE-2023-28410": { - "cmt_msg": "" + "cmt_msg": "drm/i915/gem: add missing boundary check in vm_access" }, "CVE-2020-28374": { "cmt_msg": "scsi: target: Fix XCOPY NAA identifier lookup" @@ -13180,6 +13216,9 @@ "CVE-2019-15902": { "cmt_msg": "" }, + "CVE-2023-32250": { + "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" + }, "CVE-2019-20054": { "cmt_msg": "fs/proc/proc_sysctl.c: fix NULL pointer dereference in put_links" }, @@ -13303,6 +13342,9 @@ "CVE-2020-29569": { "cmt_msg": "xen-blkback: set ring->xenblkd to NULL after kthread_stop()" }, + "CVE-2023-32254": { + "cmt_msg": "ksmbd: fix racy issue under cocurrent smb2 tree disconnect" + }, "CVE-2020-35513": { "cmt_msg": "nfsd: fix incorrect umasks" }, @@ -14089,6 +14131,9 @@ "CVE-2019-16089": { "cmt_msg": "" }, + "CVE-2023-33250": { + "cmt_msg": "" + }, "CVE-2021-38198": { "cmt_msg": "KVM: X86: MMU: Use the correct inherited permissions to get shadow page" }, @@ -14756,7 +14801,7 @@ "cmt_msg": "media: radio-raremono: change devm_k*alloc to k*alloc" }, "CVE-2023-31084": { - "cmt_msg": "" + "cmt_msg": "media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()" }, "CVE-2019-15217": { "cmt_msg": "media: usb:zr364xx:Fix KASAN:null-ptr-deref Read in zr364xx_vidioc_querycap" @@ -14872,6 +14917,9 @@ "CVE-2021-4083": { "cmt_msg": "fget: check that the fd still exists after getting a ref to it" }, + "CVE-2023-33288": { + "cmt_msg": "power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition" + }, "CVE-2022-36402": { "cmt_msg": "" }, @@ -15767,7 +15815,7 @@ "cmt_msg": "cifs: fix NULL ptr dereference in smb2_ioctl_query_info()" }, "CVE-2023-28410": { - "cmt_msg": "" + "cmt_msg": "drm/i915/gem: add missing boundary check in vm_access" }, "CVE-2020-28374": { "cmt_msg": "scsi: target: Fix XCOPY NAA identifier lookup" @@ -16237,6 +16285,9 @@ "CVE-2019-15902": { "cmt_msg": "unknown" }, + "CVE-2023-32250": { + "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" + }, "CVE-2019-20054": { "cmt_msg": "fs/proc/proc_sysctl.c: fix NULL pointer dereference in put_links" }, @@ -16279,6 +16330,9 @@ "CVE-2021-20321": { "cmt_msg": "ovl: fix missing negative dentry check in ovl_rename()" }, + "CVE-2023-33250": { + "cmt_msg": "" + }, "CVE-2022-26490": { "cmt_msg": "nfc: st21nfca: Fix potential buffer overflows in EVT_TRANSACTION" }, @@ -16363,6 +16417,9 @@ "CVE-2020-35519": { "cmt_msg": "net/x25: prevent a couple of overflows" }, + "CVE-2023-32254": { + "cmt_msg": "ksmbd: fix racy issue under cocurrent smb2 tree disconnect" + }, "CVE-2021-28971": { "cmt_msg": "perf/x86/intel: Fix a crash caused by zero PEBS status" }, @@ -16738,6 +16795,9 @@ "CVE-2021-22555": { "cmt_msg": "netfilter: x_tables: fix compat match/target pad out-of-bound write" }, + "CVE-2020-36694": { + "cmt_msg": "netfilter: x_tables: Switch synchronization to RCU" + }, "CVE-2021-0399": { "cmt_msg": "" }, @@ -20994,7 +21054,7 @@ "cmt_msg": "" }, "CVE-2023-31084": { - "cmt_msg": "" + "cmt_msg": "media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()" }, "CVE-2022-0382": { "cmt_msg": "net ticp:fix a kernel-infoleak in __tipc_sendmsg()" @@ -21132,7 +21192,7 @@ "cmt_msg": "" }, "CVE-2023-28410": { - "cmt_msg": "" + "cmt_msg": "drm/i915/gem: add missing boundary check in vm_access" }, "CVE-2019-3874": { "cmt_msg": "sctp: implement memory accounting on tx path" @@ -21356,6 +21416,9 @@ "CVE-2022-23222": { "cmt_msg": "bpf: Replace PTR_TO_XXX_OR_NULL with PTR_TO_XXX | PTR_MAYBE_NULL" }, + "CVE-2023-33288": { + "cmt_msg": "power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition" + }, "CVE-2022-29900": { "cmt_msg": "x86/kvm/vmx: Make noinstr clean" }, @@ -21389,6 +21452,9 @@ "CVE-2022-23816": { "cmt_msg": "x86/kvm/vmx: Make noinstr clean" }, + "CVE-2023-33250": { + "cmt_msg": "" + }, "CVE-2022-21385": { "cmt_msg": "net/rds: fix warn in rds_message_alloc_sgs" }, @@ -21476,9 +21542,15 @@ "CVE-2023-1611": { "cmt_msg": "btrfs: fix race between quota disable and quota assign ioctls" }, + "CVE-2023-32254": { + "cmt_msg": "ksmbd: fix racy issue under cocurrent smb2 tree disconnect" + }, "CVE-2018-20449": { "cmt_msg": "printk: hash addresses printed with %p" }, + "CVE-2023-32250": { + "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" + }, "CVE-2016-10723": { "cmt_msg": "mm, oom: remove sleep from under oom_lock" }, @@ -22133,7 +22205,7 @@ "cmt_msg": "media: radio-raremono: change devm_k*alloc to k*alloc" }, "CVE-2023-31084": { - "cmt_msg": "" + "cmt_msg": "media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()" }, "CVE-2019-15217": { "cmt_msg": "media: usb:zr364xx:Fix KASAN:null-ptr-deref Read in zr364xx_vidioc_querycap" @@ -22246,6 +22318,9 @@ "CVE-2021-4083": { "cmt_msg": "fget: check that the fd still exists after getting a ref to it" }, + "CVE-2023-33288": { + "cmt_msg": "power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition" + }, "CVE-2022-36402": { "cmt_msg": "" }, @@ -23105,7 +23180,7 @@ "cmt_msg": "cifs: fix NULL ptr dereference in smb2_ioctl_query_info()" }, "CVE-2023-28410": { - "cmt_msg": "" + "cmt_msg": "drm/i915/gem: add missing boundary check in vm_access" }, "CVE-2020-28374": { "cmt_msg": "scsi: target: Fix XCOPY NAA identifier lookup" @@ -23542,6 +23617,9 @@ "CVE-2020-0543": { "cmt_msg": "x86/cpu: Add 'table' argument to cpu_matches()" }, + "CVE-2023-32250": { + "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" + }, "CVE-2019-20054": { "cmt_msg": "fs/proc/proc_sysctl.c: fix NULL pointer dereference in put_links" }, @@ -23584,6 +23662,9 @@ "CVE-2021-20321": { "cmt_msg": "ovl: fix missing negative dentry check in ovl_rename()" }, + "CVE-2023-33250": { + "cmt_msg": "" + }, "CVE-2022-26490": { "cmt_msg": "nfc: st21nfca: Fix potential buffer overflows in EVT_TRANSACTION" }, @@ -23659,6 +23740,9 @@ "CVE-2020-35519": { "cmt_msg": "net/x25: prevent a couple of overflows" }, + "CVE-2023-32254": { + "cmt_msg": "ksmbd: fix racy issue under cocurrent smb2 tree disconnect" + }, "CVE-2021-28971": { "cmt_msg": "perf/x86/intel: Fix a crash caused by zero PEBS status" }, @@ -24007,6 +24091,9 @@ "CVE-2021-22555": { "cmt_msg": "netfilter: x_tables: fix compat match/target pad out-of-bound write" }, + "CVE-2020-36694": { + "cmt_msg": "netfilter: x_tables: Switch synchronization to RCU" + }, "CVE-2021-0399": { "cmt_msg": "" }, @@ -24977,7 +25064,7 @@ "cmt_msg": "media: radio-raremono: change devm_k*alloc to k*alloc" }, "CVE-2023-31084": { - "cmt_msg": "" + "cmt_msg": "media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()" }, "CVE-2019-15217": { "cmt_msg": "media: usb:zr364xx:Fix KASAN:null-ptr-deref Read in zr364xx_vidioc_querycap" @@ -25090,6 +25177,9 @@ "CVE-2021-4083": { "cmt_msg": "fget: check that the fd still exists after getting a ref to it" }, + "CVE-2023-33288": { + "cmt_msg": "power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition" + }, "CVE-2022-36402": { "cmt_msg": "" }, @@ -25982,7 +26072,7 @@ "cmt_msg": "btrfs: Check that each block group has corresponding chunk at mount time" }, "CVE-2023-28410": { - "cmt_msg": "" + "cmt_msg": "drm/i915/gem: add missing boundary check in vm_access" }, "CVE-2020-28374": { "cmt_msg": "scsi: target: Fix XCOPY NAA identifier lookup" @@ -26425,6 +26515,9 @@ "CVE-2019-15902": { "cmt_msg": "unknown" }, + "CVE-2023-32250": { + "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" + }, "CVE-2019-20054": { "cmt_msg": "fs/proc/proc_sysctl.c: fix NULL pointer dereference in put_links" }, @@ -26467,6 +26560,9 @@ "CVE-2021-20321": { "cmt_msg": "ovl: fix missing negative dentry check in ovl_rename()" }, + "CVE-2023-33250": { + "cmt_msg": "" + }, "CVE-2022-26490": { "cmt_msg": "nfc: st21nfca: Fix potential buffer overflows in EVT_TRANSACTION" }, @@ -26545,6 +26641,9 @@ "CVE-2020-35519": { "cmt_msg": "net/x25: prevent a couple of overflows" }, + "CVE-2023-32254": { + "cmt_msg": "ksmbd: fix racy issue under cocurrent smb2 tree disconnect" + }, "CVE-2021-28971": { "cmt_msg": "perf/x86/intel: Fix a crash caused by zero PEBS status" }, @@ -26914,6 +27013,9 @@ "CVE-2021-22555": { "cmt_msg": "netfilter: x_tables: fix compat match/target pad out-of-bound write" }, + "CVE-2020-36694": { + "cmt_msg": "netfilter: x_tables: Switch synchronization to RCU" + }, "CVE-2021-0399": { "cmt_msg": "" }, @@ -29088,6 +29190,10 @@ } }, "4.19.164": { + "CVE-2020-36694": { + "cmt_msg": "netfilter: x_tables: Switch synchronization to RCU", + "cmt_id": "98ab3ff5e789985ec8c24f813c7a989b445da084" + }, "CVE-2021-0938": { "cmt_msg": "compiler.h: fix barrier_data() on clang", "cmt_id": "b207caff4176e3a6ba273243da2db2e595e4aad2" @@ -30655,7 +30761,7 @@ "cmt_msg": "" }, "CVE-2023-31084": { - "cmt_msg": "" + "cmt_msg": "media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()" }, "CVE-2022-0382": { "cmt_msg": "net ticp:fix a kernel-infoleak in __tipc_sendmsg()" @@ -30769,7 +30875,7 @@ "cmt_msg": "" }, "CVE-2023-28410": { - "cmt_msg": "" + "cmt_msg": "drm/i915/gem: add missing boundary check in vm_access" }, "CVE-2023-2007": { "cmt_msg": "scsi: dpt_i2o: Remove obsolete driver" @@ -30798,6 +30904,9 @@ "CVE-2023-1077": { "cmt_msg": "sched/rt: pick_next_rt_entity(): check list_entry" }, + "CVE-2023-32254": { + "cmt_msg": "ksmbd: fix racy issue under cocurrent smb2 tree disconnect" + }, "CVE-2021-20177": { "cmt_msg": "netfilter: add and use nf_hook_slow_list()" }, @@ -30978,6 +31087,9 @@ "CVE-2011-4916": { "cmt_msg": "" }, + "CVE-2023-33288": { + "cmt_msg": "power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition" + }, "CVE-2022-29900": { "cmt_msg": "x86/kvm/vmx: Make noinstr clean" }, @@ -31011,6 +31123,9 @@ "CVE-2022-23816": { "cmt_msg": "x86/kvm/vmx: Make noinstr clean" }, + "CVE-2023-33250": { + "cmt_msg": "" + }, "CVE-2021-39801": { "cmt_msg": "" }, @@ -31101,6 +31216,9 @@ "CVE-2019-16089": { "cmt_msg": "" }, + "CVE-2023-32250": { + "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" + }, "CVE-2022-0400": { "cmt_msg": "" }, @@ -31712,7 +31830,7 @@ "cmt_msg": "media: radio-raremono: change devm_k*alloc to k*alloc" }, "CVE-2023-31084": { - "cmt_msg": "" + "cmt_msg": "media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()" }, "CVE-2019-15217": { "cmt_msg": "media: usb:zr364xx:Fix KASAN:null-ptr-deref Read in zr364xx_vidioc_querycap" @@ -31828,6 +31946,9 @@ "CVE-2021-4083": { "cmt_msg": "fget: check that the fd still exists after getting a ref to it" }, + "CVE-2023-33288": { + "cmt_msg": "power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition" + }, "CVE-2022-36402": { "cmt_msg": "" }, @@ -32672,7 +32793,7 @@ "cmt_msg": "cifs: fix NULL ptr dereference in smb2_ioctl_query_info()" }, "CVE-2023-28410": { - "cmt_msg": "" + "cmt_msg": "drm/i915/gem: add missing boundary check in vm_access" }, "CVE-2020-28374": { "cmt_msg": "scsi: target: Fix XCOPY NAA identifier lookup" @@ -33088,6 +33209,9 @@ "CVE-2020-0543": { "cmt_msg": "x86/cpu: Add 'table' argument to cpu_matches()" }, + "CVE-2023-32250": { + "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" + }, "CVE-2019-20054": { "cmt_msg": "fs/proc/proc_sysctl.c: fix NULL pointer dereference in put_links" }, @@ -33136,6 +33260,9 @@ "CVE-2021-20321": { "cmt_msg": "ovl: fix missing negative dentry check in ovl_rename()" }, + "CVE-2023-33250": { + "cmt_msg": "" + }, "CVE-2022-26490": { "cmt_msg": "nfc: st21nfca: Fix potential buffer overflows in EVT_TRANSACTION" }, @@ -33208,6 +33335,9 @@ "CVE-2020-35519": { "cmt_msg": "net/x25: prevent a couple of overflows" }, + "CVE-2023-32254": { + "cmt_msg": "ksmbd: fix racy issue under cocurrent smb2 tree disconnect" + }, "CVE-2021-28971": { "cmt_msg": "perf/x86/intel: Fix a crash caused by zero PEBS status" }, @@ -33538,6 +33668,9 @@ "CVE-2021-22555": { "cmt_msg": "netfilter: x_tables: fix compat match/target pad out-of-bound write" }, + "CVE-2020-36694": { + "cmt_msg": "netfilter: x_tables: Switch synchronization to RCU" + }, "CVE-2021-0399": { "cmt_msg": "" }, @@ -35831,7 +35964,7 @@ "cmt_msg": "" }, "CVE-2023-31084": { - "cmt_msg": "" + "cmt_msg": "media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()" }, "CVE-2015-1350": { "cmt_msg": "fs: Avoid premature clearing of capabilities" @@ -35968,6 +36101,9 @@ "CVE-2022-28356": { "cmt_msg": "llc: fix netdevice reference leaks in llc_ui_bind()" }, + "CVE-2023-33288": { + "cmt_msg": "power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition" + }, "CVE-2017-17558": { "cmt_msg": "USB: core: prevent malicious bNumInterfaces overflow" }, @@ -36625,9 +36761,6 @@ "CVE-2022-28388": { "cmt_msg": "can: usb_8dev: usb_8dev_start_xmit(): fix double dev_kfree_skb() in error path" }, - "CVE-2023-33203": { - "cmt_msg": "net: qcom/emac: Fix use after free bug in emac_remove due to race condition" - }, "CVE-2017-0627": { "cmt_msg": "media: uvcvideo: Prevent heap overflow when accessing mapped controls" }, @@ -36863,7 +36996,7 @@ "cmt_msg": "printk: hash addresses printed with %p" }, "CVE-2023-28410": { - "cmt_msg": "" + "cmt_msg": "drm/i915/gem: add missing boundary check in vm_access" }, "CVE-2020-28374": { "cmt_msg": "scsi: target: Fix XCOPY NAA identifier lookup" @@ -37327,6 +37460,9 @@ "CVE-2019-15902": { "cmt_msg": "" }, + "CVE-2023-32250": { + "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" + }, "CVE-2019-20054": { "cmt_msg": "fs/proc/proc_sysctl.c: fix NULL pointer dereference in put_links" }, @@ -37453,6 +37589,9 @@ "CVE-2022-33740": { "cmt_msg": "xen/netfront: fix leaking data in shared pages" }, + "CVE-2023-32254": { + "cmt_msg": "ksmbd: fix racy issue under cocurrent smb2 tree disconnect" + }, "CVE-2020-10708": { "cmt_msg": "" }, @@ -38176,6 +38315,9 @@ "CVE-2023-32269": { "cmt_msg": "netrom: Fix use-after-free caused by accept on already connected socket" }, + "CVE-2023-33250": { + "cmt_msg": "" + }, "CVE-2021-38198": { "cmt_msg": "KVM: X86: MMU: Use the correct inherited permissions to get shadow page" }, @@ -39687,7 +39829,7 @@ "cmt_msg": "media: radio-raremono: change devm_k*alloc to k*alloc" }, "CVE-2023-31084": { - "cmt_msg": "" + "cmt_msg": "media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()" }, "CVE-2015-1350": { "cmt_msg": "fs: Avoid premature clearing of capabilities" @@ -39842,6 +39984,9 @@ "CVE-2017-5967": { "cmt_msg": "time: Remove CONFIG_TIMER_STATS" }, + "CVE-2023-33288": { + "cmt_msg": "power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition" + }, "CVE-2017-17558": { "cmt_msg": "USB: core: prevent malicious bNumInterfaces overflow" }, @@ -40556,9 +40701,6 @@ "CVE-2022-28388": { "cmt_msg": "can: usb_8dev: usb_8dev_start_xmit(): fix double dev_kfree_skb() in error path" }, - "CVE-2023-33203": { - "cmt_msg": "net: qcom/emac: Fix use after free bug in emac_remove due to race condition" - }, "CVE-2017-0627": { "cmt_msg": "media: uvcvideo: Prevent heap overflow when accessing mapped controls" }, @@ -40827,7 +40969,7 @@ "cmt_msg": "posix_acl: Clear SGID bit when setting file permissions" }, "CVE-2023-28410": { - "cmt_msg": "" + "cmt_msg": "drm/i915/gem: add missing boundary check in vm_access" }, "CVE-2020-28374": { "cmt_msg": "scsi: target: Fix XCOPY NAA identifier lookup" @@ -41339,6 +41481,9 @@ "CVE-2019-15902": { "cmt_msg": "" }, + "CVE-2023-32250": { + "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" + }, "CVE-2016-7425": { "cmt_msg": "scsi: arcmsr: Buffer overflow in arcmsr_iop_message_xfer()" }, @@ -41480,6 +41625,9 @@ "CVE-2022-33740": { "cmt_msg": "xen/netfront: fix leaking data in shared pages" }, + "CVE-2023-32254": { + "cmt_msg": "ksmbd: fix racy issue under cocurrent smb2 tree disconnect" + }, "CVE-2020-10708": { "cmt_msg": "" }, @@ -42272,6 +42420,9 @@ "CVE-2023-32269": { "cmt_msg": "netrom: Fix use-after-free caused by accept on already connected socket" }, + "CVE-2023-33250": { + "cmt_msg": "" + }, "CVE-2021-38198": { "cmt_msg": "KVM: X86: MMU: Use the correct inherited permissions to get shadow page" }, @@ -45208,7 +45359,7 @@ "cmt_msg": "f2fs: fix to do sanity check with block address in main area v2" }, "CVE-2023-28410": { - "cmt_msg": "" + "cmt_msg": "drm/i915/gem: add missing boundary check in vm_access" }, "CVE-2023-2007": { "cmt_msg": "scsi: dpt_i2o: Remove obsolete driver" @@ -45316,7 +45467,7 @@ "cmt_msg": "" }, "CVE-2023-31084": { - "cmt_msg": "" + "cmt_msg": "media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()" }, "CVE-2023-31083": { "cmt_msg": "" @@ -45399,6 +45550,9 @@ "CVE-2021-4083": { "cmt_msg": "fget: check that the fd still exists after getting a ref to it" }, + "CVE-2023-33288": { + "cmt_msg": "power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition" + }, "CVE-2022-29900": { "cmt_msg": "x86/kvm/vmx: Make noinstr clean" }, @@ -45840,9 +45994,6 @@ "CVE-2020-12364": { "cmt_msg": "drm/i915/guc: Update to use firmware v49.0.1" }, - "CVE-2023-33203": { - "cmt_msg": "net: qcom/emac: Fix use after free bug in emac_remove due to race condition" - }, "CVE-2021-0605": { "cmt_msg": "af_key: pfkey_dump needs parameter validation" }, @@ -46254,6 +46405,9 @@ "CVE-2021-20321": { "cmt_msg": "ovl: fix missing negative dentry check in ovl_rename()" }, + "CVE-2023-33250": { + "cmt_msg": "" + }, "CVE-2022-42896": { "cmt_msg": "Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM" }, @@ -46308,9 +46462,15 @@ "CVE-2020-35519": { "cmt_msg": "net/x25: prevent a couple of overflows" }, + "CVE-2023-32254": { + "cmt_msg": "ksmbd: fix racy issue under cocurrent smb2 tree disconnect" + }, "CVE-2020-10708": { "cmt_msg": "" }, + "CVE-2023-32250": { + "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" + }, "CVE-2022-0400": { "cmt_msg": "" }, @@ -49326,7 +49486,7 @@ "cmt_msg": "" }, "CVE-2023-31084": { - "cmt_msg": "" + "cmt_msg": "media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()" }, "CVE-2019-15217": { "cmt_msg": "media: usb:zr364xx:Fix KASAN:null-ptr-deref Read in zr364xx_vidioc_querycap" @@ -49427,6 +49587,9 @@ "CVE-2021-4083": { "cmt_msg": "fget: check that the fd still exists after getting a ref to it" }, + "CVE-2023-33288": { + "cmt_msg": "power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition" + }, "CVE-2022-36402": { "cmt_msg": "" }, @@ -49928,9 +50091,6 @@ "CVE-2018-18690": { "cmt_msg": "xfs: don't fail when converting shortform attr to long form during ATTR_REPLACE" }, - "CVE-2023-33203": { - "cmt_msg": "net: qcom/emac: Fix use after free bug in emac_remove due to race condition" - }, "CVE-2021-3896": { "cmt_msg": "isdn: cpai: check ctr->cnr to avoid array index out of bound" }, @@ -50118,6 +50278,9 @@ "cmt_msg": "cifs: fix NULL ptr dereference in smb2_ioctl_query_info()" }, "CVE-2023-28410": { + "cmt_msg": "drm/i915/gem: add missing boundary check in vm_access" + }, + "CVE-2023-33250": { "cmt_msg": "" }, "CVE-2019-9213": { @@ -50591,9 +50754,15 @@ "CVE-2022-33740": { "cmt_msg": "xen/netfront: fix leaking data in shared pages" }, + "CVE-2023-32254": { + "cmt_msg": "ksmbd: fix racy issue under cocurrent smb2 tree disconnect" + }, "CVE-2012-6712": { "cmt_msg": "iwlwifi: Sanity check for sta_id" }, + "CVE-2023-32250": { + "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" + }, "CVE-2022-0400": { "cmt_msg": "" }, @@ -51342,6 +51511,10 @@ "cmt_msg": "net: qcom/emac: Fix use after free bug in emac_remove due to race condition", "cmt_id": "514dc3d0f176d280dc2d3cd25e898a7ec329e878" }, + "CVE-2023-33288": { + "cmt_msg": "power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition", + "cmt_id": "2da4b860f3055ae40a809c020398778e6c27b856" + }, "CVE-2023-28866": { "cmt_msg": "Bluetooth: HCI: Fix global-out-of-bounds", "cmt_id": "8497222b22b591c6b2d106e0e3c1672ffe4e10e0" @@ -51404,11 +51577,21 @@ "cmt_msg": "netfilter: nf_tables: deactivate anonymous set from preparation phase", "cmt_id": "6b0801dcc1aa4373d28ac8ee396788d2e715c495" }, + "CVE-2023-32254": { + "cmt_msg": "ksmbd: fix racy issue under cocurrent smb2 tree disconnect", + "cmt_id": "dc1c17716c099c90948ebb83e2170dd75a3be6b6" + }, "CVE-2023-2269": { "cmt_msg": "dm ioctl: fix nested locking in table_clear() to remove deadlock concern", "cmt_id": "243093d536fe3cc78b450f1beb8d584505ea3193" } }, + "6.2.16": { + "CVE-2023-32250": { + "cmt_msg": "ksmbd: fix racy issue from session setup and logoff", + "cmt_id": "d270631c21e68fb8016d6e231d022d7023a2df6f" + } + }, "outstanding": { "CVE-2023-0160": { "cmt_msg": "" @@ -51488,9 +51671,6 @@ "CVE-2022-45919": { "cmt_msg": "" }, - "CVE-2023-28410": { - "cmt_msg": "" - }, "CVE-2010-4563": { "cmt_msg": "" }, @@ -51540,7 +51720,7 @@ "cmt_msg": "" }, "CVE-2023-31084": { - "cmt_msg": "" + "cmt_msg": "media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()" }, "CVE-2023-31083": { "cmt_msg": "" @@ -51614,6 +51794,9 @@ "CVE-2018-12931": { "cmt_msg": "" }, + "CVE-2023-33250": { + "cmt_msg": "" + }, "CVE-2021-39801": { "cmt_msg": "" }, @@ -52002,6 +52185,10 @@ "cmt_msg": "net: qcom/emac: Fix use after free bug in emac_remove due to race condition", "cmt_id": "5fc2c4e311a9341a2b0e044ab5f33afa37b56226" }, + "CVE-2023-33288": { + "cmt_msg": "power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition", + "cmt_id": "84bdb3b76b07f2e62183913a1f5da2d4aa25580a" + }, "CVE-2023-28866": { "cmt_msg": "Bluetooth: HCI: Fix global-out-of-bounds", "cmt_id": "b3168abd24245aa0775c5a387dcf94d36ca7e738" @@ -52064,11 +52251,21 @@ "cmt_msg": "netfilter: nf_tables: deactivate anonymous set from preparation phase", "cmt_id": "4507918cd1f8b80f21a396fa0531d53e372bed66" }, + "CVE-2023-32254": { + "cmt_msg": "ksmbd: fix racy issue under cocurrent smb2 tree disconnect", + "cmt_id": "bd80d35725a0cf4df9307bfe2f1a3b2cb983d8e6" + }, "CVE-2023-2269": { "cmt_msg": "dm ioctl: fix nested locking in table_clear() to remove deadlock concern", "cmt_id": "9a94ebc74c3540aba5aa2c7b05032da4610a08c9" } }, + "6.1.29": { + "CVE-2023-32250": { + "cmt_msg": "ksmbd: fix racy issue from session setup and logoff", + "cmt_id": "f623f627ad2b1dc215ab3b0df53fb05cfd3a1c3b" + } + }, "outstanding": { "CVE-2023-0160": { "cmt_msg": "" @@ -52157,9 +52354,6 @@ "CVE-2022-45919": { "cmt_msg": "" }, - "CVE-2023-28410": { - "cmt_msg": "" - }, "CVE-2010-4563": { "cmt_msg": "" }, @@ -52209,7 +52403,7 @@ "cmt_msg": "" }, "CVE-2023-31084": { - "cmt_msg": "" + "cmt_msg": "media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()" }, "CVE-2023-31083": { "cmt_msg": "" @@ -52283,6 +52477,9 @@ "CVE-2018-12931": { "cmt_msg": "" }, + "CVE-2023-33250": { + "cmt_msg": "" + }, "CVE-2021-39801": { "cmt_msg": "" }, @@ -52716,9 +52913,6 @@ "CVE-2022-38457": { "cmt_msg": "drm/vmwgfx: Remove rcu locks from user resources" }, - "CVE-2023-28410": { - "cmt_msg": "" - }, "CVE-2018-1121": { "cmt_msg": "" }, @@ -52924,7 +53118,7 @@ "cmt_msg": "" }, "CVE-2023-31084": { - "cmt_msg": "" + "cmt_msg": "media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()" }, "CVE-2023-31083": { "cmt_msg": "" @@ -53010,6 +53204,9 @@ "CVE-2019-15902": { "cmt_msg": "unknown" }, + "CVE-2023-33288": { + "cmt_msg": "power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition" + }, "CVE-2019-15290": { "cmt_msg": "" }, @@ -53046,6 +53243,9 @@ "CVE-2018-12931": { "cmt_msg": "" }, + "CVE-2023-33250": { + "cmt_msg": "" + }, "CVE-2021-39801": { "cmt_msg": "" }, @@ -53097,6 +53297,9 @@ "CVE-2022-27672": { "cmt_msg": "x86/speculation: Identify processors vulnerable to SMT RSB predictions" }, + "CVE-2023-32254": { + "cmt_msg": "ksmbd: fix racy issue under cocurrent smb2 tree disconnect" + }, "CVE-2018-12929": { "cmt_msg": "" }, @@ -53133,6 +53336,9 @@ "CVE-2019-16089": { "cmt_msg": "" }, + "CVE-2023-32250": { + "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" + }, "CVE-2022-0400": { "cmt_msg": "" }, @@ -53975,6 +54181,9 @@ "CVE-2021-4083": { "cmt_msg": "fget: check that the fd still exists after getting a ref to it" }, + "CVE-2023-33288": { + "cmt_msg": "power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition" + }, "CVE-2017-17558": { "cmt_msg": "USB: core: prevent malicious bNumInterfaces overflow" }, @@ -54749,9 +54958,6 @@ "CVE-2022-28388": { "cmt_msg": "can: usb_8dev: usb_8dev_start_xmit(): fix double dev_kfree_skb() in error path" }, - "CVE-2023-33203": { - "cmt_msg": "net: qcom/emac: Fix use after free bug in emac_remove due to race condition" - }, "CVE-2017-0627": { "cmt_msg": "media: uvcvideo: Prevent heap overflow when accessing mapped controls" }, @@ -55059,7 +55265,7 @@ "cmt_msg": "posix_acl: Clear SGID bit when setting file permissions" }, "CVE-2023-28410": { - "cmt_msg": "" + "cmt_msg": "drm/i915/gem: add missing boundary check in vm_access" }, "CVE-2020-28374": { "cmt_msg": "scsi: target: Fix XCOPY NAA identifier lookup" @@ -55335,7 +55541,7 @@ "cmt_msg": "netfilter: nf_tables: disallow non-stateful expression in sets earlier" }, "CVE-2023-31084": { - "cmt_msg": "" + "cmt_msg": "media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()" }, "CVE-2017-9986": { "cmt_msg": "sound: Retire OSS" @@ -55622,6 +55828,9 @@ "CVE-2019-15902": { "cmt_msg": "unknown" }, + "CVE-2023-32250": { + "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" + }, "CVE-2016-7425": { "cmt_msg": "scsi: arcmsr: Buffer overflow in arcmsr_iop_message_xfer()" }, @@ -55787,6 +55996,9 @@ "CVE-2022-33740": { "cmt_msg": "xen/netfront: fix leaking data in shared pages" }, + "CVE-2023-32254": { + "cmt_msg": "ksmbd: fix racy issue under cocurrent smb2 tree disconnect" + }, "CVE-2021-28971": { "cmt_msg": "perf/x86/intel: Fix a crash caused by zero PEBS status" }, @@ -56615,6 +56827,9 @@ "CVE-2023-32269": { "cmt_msg": "netrom: Fix use-after-free caused by accept on already connected socket" }, + "CVE-2023-33250": { + "cmt_msg": "" + }, "CVE-2021-38198": { "cmt_msg": "KVM: X86: MMU: Use the correct inherited permissions to get shadow page" }, @@ -60371,7 +60586,7 @@ "cmt_msg": "x86/microcode: Allow late microcode loading with SMT disabled" }, "CVE-2023-28410": { - "cmt_msg": "" + "cmt_msg": "drm/i915/gem: add missing boundary check in vm_access" }, "CVE-2023-2007": { "cmt_msg": "scsi: dpt_i2o: Remove obsolete driver" @@ -60440,7 +60655,7 @@ "cmt_msg": "" }, "CVE-2023-31084": { - "cmt_msg": "" + "cmt_msg": "media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()" }, "CVE-2015-1350": { "cmt_msg": "fs: Avoid premature clearing of capabilities" @@ -60496,6 +60711,9 @@ "CVE-2022-42703": { "cmt_msg": "mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse" }, + "CVE-2023-33288": { + "cmt_msg": "power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition" + }, "CVE-2022-29900": { "cmt_msg": "x86/kvm/vmx: Make noinstr clean" }, @@ -60820,9 +61038,6 @@ "CVE-2020-12364": { "cmt_msg": "drm/i915/guc: Update to use firmware v49.0.1" }, - "CVE-2023-33203": { - "cmt_msg": "net: qcom/emac: Fix use after free bug in emac_remove due to race condition" - }, "CVE-2023-26545": { "cmt_msg": "net: mpls: fix stale pointer if allocation fails during device rename" }, @@ -60895,6 +61110,9 @@ "CVE-2021-0929": { "cmt_msg": "staging/android/ion: delete dma_buf->kmap/unmap implemenation" }, + "CVE-2023-33250": { + "cmt_msg": "" + }, "CVE-2023-0615": { "cmt_msg": "" }, @@ -61129,9 +61347,15 @@ "CVE-2020-36313": { "cmt_msg": "KVM: Fix out of range accesses to memslots" }, + "CVE-2023-32254": { + "cmt_msg": "ksmbd: fix racy issue under cocurrent smb2 tree disconnect" + }, "CVE-2022-4744": { "cmt_msg": "tun: avoid double free in tun_free_netdev" }, + "CVE-2023-32250": { + "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" + }, "CVE-2022-0400": { "cmt_msg": "" }, @@ -62182,6 +62406,9 @@ "CVE-2021-4083": { "cmt_msg": "fget: check that the fd still exists after getting a ref to it" }, + "CVE-2023-33288": { + "cmt_msg": "power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition" + }, "CVE-2018-10938": { "cmt_msg": "Cipso: cipso_v4_optptr enter infinite loop" }, @@ -62947,9 +63174,6 @@ "CVE-2022-28388": { "cmt_msg": "can: usb_8dev: usb_8dev_start_xmit(): fix double dev_kfree_skb() in error path" }, - "CVE-2023-33203": { - "cmt_msg": "net: qcom/emac: Fix use after free bug in emac_remove due to race condition" - }, "CVE-2017-0627": { "cmt_msg": "media: uvcvideo: Prevent heap overflow when accessing mapped controls" }, @@ -63230,7 +63454,7 @@ "cmt_msg": "posix_acl: Clear SGID bit when setting file permissions" }, "CVE-2023-28410": { - "cmt_msg": "" + "cmt_msg": "drm/i915/gem: add missing boundary check in vm_access" }, "CVE-2020-28374": { "cmt_msg": "scsi: target: Fix XCOPY NAA identifier lookup" @@ -63512,7 +63736,7 @@ "cmt_msg": "netfilter: nf_tables: disallow non-stateful expression in sets earlier" }, "CVE-2023-31084": { - "cmt_msg": "" + "cmt_msg": "media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()" }, "CVE-2017-9986": { "cmt_msg": "sound: Retire OSS" @@ -63784,6 +64008,9 @@ "CVE-2019-15902": { "cmt_msg": "unknown" }, + "CVE-2023-32250": { + "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" + }, "CVE-2019-20054": { "cmt_msg": "fs/proc/proc_sysctl.c: fix NULL pointer dereference in put_links" }, @@ -63937,6 +64164,9 @@ "CVE-2022-33740": { "cmt_msg": "xen/netfront: fix leaking data in shared pages" }, + "CVE-2023-32254": { + "cmt_msg": "ksmbd: fix racy issue under cocurrent smb2 tree disconnect" + }, "CVE-2021-28971": { "cmt_msg": "perf/x86/intel: Fix a crash caused by zero PEBS status" }, @@ -64774,6 +65004,9 @@ "CVE-2023-32269": { "cmt_msg": "netrom: Fix use-after-free caused by accept on already connected socket" }, + "CVE-2023-33250": { + "cmt_msg": "" + }, "CVE-2021-38198": { "cmt_msg": "KVM: X86: MMU: Use the correct inherited permissions to get shadow page" }, @@ -65619,6 +65852,9 @@ "CVE-2021-4083": { "cmt_msg": "fget: check that the fd still exists after getting a ref to it" }, + "CVE-2023-33288": { + "cmt_msg": "power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition" + }, "CVE-2017-17558": { "cmt_msg": "USB: core: prevent malicious bNumInterfaces overflow" }, @@ -66378,9 +66614,6 @@ "CVE-2022-28388": { "cmt_msg": "can: usb_8dev: usb_8dev_start_xmit(): fix double dev_kfree_skb() in error path" }, - "CVE-2023-33203": { - "cmt_msg": "net: qcom/emac: Fix use after free bug in emac_remove due to race condition" - }, "CVE-2017-0627": { "cmt_msg": "media: uvcvideo: Prevent heap overflow when accessing mapped controls" }, @@ -66673,7 +66906,7 @@ "cmt_msg": "posix_acl: Clear SGID bit when setting file permissions" }, "CVE-2023-28410": { - "cmt_msg": "" + "cmt_msg": "drm/i915/gem: add missing boundary check in vm_access" }, "CVE-2020-28374": { "cmt_msg": "scsi: target: Fix XCOPY NAA identifier lookup" @@ -66952,7 +67185,7 @@ "cmt_msg": "netfilter: nf_tables: disallow non-stateful expression in sets earlier" }, "CVE-2023-31084": { - "cmt_msg": "" + "cmt_msg": "media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()" }, "CVE-2017-9986": { "cmt_msg": "sound: Retire OSS" @@ -67221,6 +67454,9 @@ "CVE-2019-15902": { "cmt_msg": "unknown" }, + "CVE-2023-32250": { + "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" + }, "CVE-2016-7425": { "cmt_msg": "scsi: arcmsr: Buffer overflow in arcmsr_iop_message_xfer()" }, @@ -67380,6 +67616,9 @@ "CVE-2022-33740": { "cmt_msg": "xen/netfront: fix leaking data in shared pages" }, + "CVE-2023-32254": { + "cmt_msg": "ksmbd: fix racy issue under cocurrent smb2 tree disconnect" + }, "CVE-2021-28971": { "cmt_msg": "perf/x86/intel: Fix a crash caused by zero PEBS status" }, @@ -68214,6 +68453,9 @@ "CVE-2023-32269": { "cmt_msg": "netrom: Fix use-after-free caused by accept on already connected socket" }, + "CVE-2023-33250": { + "cmt_msg": "" + }, "CVE-2021-38198": { "cmt_msg": "KVM: X86: MMU: Use the correct inherited permissions to get shadow page" }, @@ -69779,7 +70021,7 @@ "cmt_msg": "media: v4l: ioctl: Fix memory leak in video_usercopy" }, "CVE-2023-31084": { - "cmt_msg": "" + "cmt_msg": "media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()" }, "CVE-2015-8551": { "cmt_msg": "xen/pciback: Return error on XEN_PCI_OP_enable_msi when device has MSI or MSI-X enabled" @@ -70138,6 +70380,9 @@ "CVE-2021-4083": { "cmt_msg": "fget: check that the fd still exists after getting a ref to it" }, + "CVE-2023-33288": { + "cmt_msg": "power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition" + }, "CVE-2018-10938": { "cmt_msg": "Cipso: cipso_v4_optptr enter infinite loop" }, @@ -70735,9 +70980,6 @@ "CVE-2022-28388": { "cmt_msg": "can: usb_8dev: usb_8dev_start_xmit(): fix double dev_kfree_skb() in error path" }, - "CVE-2023-33203": { - "cmt_msg": "net: qcom/emac: Fix use after free bug in emac_remove due to race condition" - }, "CVE-2021-0605": { "cmt_msg": "af_key: pfkey_dump needs parameter validation" }, @@ -70961,7 +71203,7 @@ "cmt_msg": "printk: hash addresses printed with %p" }, "CVE-2023-28410": { - "cmt_msg": "" + "cmt_msg": "drm/i915/gem: add missing boundary check in vm_access" }, "CVE-2020-28374": { "cmt_msg": "scsi: target: Fix XCOPY NAA identifier lookup" @@ -71431,6 +71673,9 @@ "CVE-2021-20321": { "cmt_msg": "ovl: fix missing negative dentry check in ovl_rename()" }, + "CVE-2023-33250": { + "cmt_msg": "" + }, "CVE-2022-26490": { "cmt_msg": "nfc: st21nfca: Fix potential buffer overflows in EVT_TRANSACTION" }, @@ -71515,9 +71760,15 @@ "CVE-2022-33740": { "cmt_msg": "xen/netfront: fix leaking data in shared pages" }, + "CVE-2023-32254": { + "cmt_msg": "ksmbd: fix racy issue under cocurrent smb2 tree disconnect" + }, "CVE-2020-10708": { "cmt_msg": "" }, + "CVE-2023-32250": { + "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" + }, "CVE-2022-0400": { "cmt_msg": "" }, @@ -72661,7 +72912,7 @@ "cmt_msg": "" }, "CVE-2023-28410": { - "cmt_msg": "" + "cmt_msg": "drm/i915/gem: add missing boundary check in vm_access" }, "CVE-2023-2007": { "cmt_msg": "scsi: dpt_i2o: Remove obsolete driver" @@ -72790,7 +73041,7 @@ "cmt_msg": "" }, "CVE-2023-31084": { - "cmt_msg": "" + "cmt_msg": "media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()" }, "CVE-2023-31083": { "cmt_msg": "" @@ -72852,6 +73103,9 @@ "CVE-2021-4083": { "cmt_msg": "fget: check that the fd still exists after getting a ref to it" }, + "CVE-2023-33288": { + "cmt_msg": "power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition" + }, "CVE-2022-29900": { "cmt_msg": "x86/kvm/vmx: Make noinstr clean" }, @@ -73791,6 +74045,9 @@ "CVE-2021-20321": { "cmt_msg": "ovl: fix missing negative dentry check in ovl_rename()" }, + "CVE-2023-33250": { + "cmt_msg": "" + }, "CVE-2022-42896": { "cmt_msg": "Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM" }, @@ -73851,12 +74108,18 @@ "CVE-2023-31436": { "cmt_msg": "net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg" }, + "CVE-2023-32254": { + "cmt_msg": "ksmbd: fix racy issue under cocurrent smb2 tree disconnect" + }, "CVE-2022-45887": { "cmt_msg": "" }, "CVE-2020-10708": { "cmt_msg": "" }, + "CVE-2023-32250": { + "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" + }, "CVE-2022-0400": { "cmt_msg": "" }, @@ -74085,6 +74348,9 @@ "CVE-2021-22555": { "cmt_msg": "netfilter: x_tables: fix compat match/target pad out-of-bound write" }, + "CVE-2020-36694": { + "cmt_msg": "netfilter: x_tables: Switch synchronization to RCU" + }, "CVE-2021-0399": { "cmt_msg": "" }, @@ -75194,6 +75460,9 @@ "CVE-2021-4083": { "cmt_msg": "fget: check that the fd still exists after getting a ref to it" }, + "CVE-2023-33288": { + "cmt_msg": "power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition" + }, "CVE-2017-17558": { "cmt_msg": "USB: core: prevent malicious bNumInterfaces overflow" }, @@ -75995,9 +76264,6 @@ "CVE-2019-19533": { "cmt_msg": "media: ttusb-dec: Fix info-leak in ttusb_dec_send_command()" }, - "CVE-2023-33203": { - "cmt_msg": "net: qcom/emac: Fix use after free bug in emac_remove due to race condition" - }, "CVE-2017-0627": { "cmt_msg": "media: uvcvideo: Prevent heap overflow when accessing mapped controls" }, @@ -76320,7 +76586,7 @@ "cmt_msg": "KVM: MTRR: remove MSR 0x2f8" }, "CVE-2023-28410": { - "cmt_msg": "" + "cmt_msg": "drm/i915/gem: add missing boundary check in vm_access" }, "CVE-2020-28374": { "cmt_msg": "scsi: target: Fix XCOPY NAA identifier lookup" @@ -76596,7 +76862,7 @@ "cmt_msg": "netfilter: nf_tables: disallow non-stateful expression in sets earlier" }, "CVE-2023-31084": { - "cmt_msg": "" + "cmt_msg": "media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()" }, "CVE-2017-9986": { "cmt_msg": "sound: Retire OSS" @@ -76898,6 +77164,9 @@ "CVE-2019-15902": { "cmt_msg": "unknown" }, + "CVE-2023-32250": { + "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" + }, "CVE-2016-7425": { "cmt_msg": "scsi: arcmsr: Buffer overflow in arcmsr_iop_message_xfer()" }, @@ -77066,6 +77335,9 @@ "CVE-2022-33740": { "cmt_msg": "xen/netfront: fix leaking data in shared pages" }, + "CVE-2023-32254": { + "cmt_msg": "ksmbd: fix racy issue under cocurrent smb2 tree disconnect" + }, "CVE-2020-10708": { "cmt_msg": "" }, @@ -77918,6 +78190,9 @@ "CVE-2023-32269": { "cmt_msg": "netrom: Fix use-after-free caused by accept on already connected socket" }, + "CVE-2023-33250": { + "cmt_msg": "" + }, "CVE-2021-38198": { "cmt_msg": "KVM: X86: MMU: Use the correct inherited permissions to get shadow page" }, @@ -78366,7 +78641,7 @@ "cmt_msg": "" }, "CVE-2023-28410": { - "cmt_msg": "" + "cmt_msg": "drm/i915/gem: add missing boundary check in vm_access" }, "CVE-2023-2007": { "cmt_msg": "scsi: dpt_i2o: Remove obsolete driver" @@ -78498,7 +78773,7 @@ "cmt_msg": "" }, "CVE-2023-31084": { - "cmt_msg": "" + "cmt_msg": "media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()" }, "CVE-2023-31083": { "cmt_msg": "" @@ -78551,6 +78826,9 @@ "CVE-2021-4083": { "cmt_msg": "fget: check that the fd still exists after getting a ref to it" }, + "CVE-2023-33288": { + "cmt_msg": "power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition" + }, "CVE-2022-29900": { "cmt_msg": "x86/kvm/vmx: Make noinstr clean" }, @@ -79442,6 +79720,9 @@ "CVE-2021-20321": { "cmt_msg": "ovl: fix missing negative dentry check in ovl_rename()" }, + "CVE-2023-33250": { + "cmt_msg": "" + }, "CVE-2022-42896": { "cmt_msg": "Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM" }, @@ -79496,9 +79777,15 @@ "CVE-2023-31436": { "cmt_msg": "net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg" }, + "CVE-2023-32254": { + "cmt_msg": "ksmbd: fix racy issue under cocurrent smb2 tree disconnect" + }, "CVE-2020-10708": { "cmt_msg": "" }, + "CVE-2023-32250": { + "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" + }, "CVE-2022-0400": { "cmt_msg": "" }, @@ -79730,6 +80017,9 @@ "CVE-2021-22555": { "cmt_msg": "netfilter: x_tables: fix compat match/target pad out-of-bound write" }, + "CVE-2020-36694": { + "cmt_msg": "netfilter: x_tables: Switch synchronization to RCU" + }, "CVE-2021-0399": { "cmt_msg": "" }, @@ -80408,7 +80698,7 @@ "cmt_msg": "" }, "CVE-2023-28410": { - "cmt_msg": "" + "cmt_msg": "drm/i915/gem: add missing boundary check in vm_access" }, "CVE-2023-2007": { "cmt_msg": "scsi: dpt_i2o: Remove obsolete driver" @@ -80537,7 +80827,7 @@ "cmt_msg": "" }, "CVE-2023-31084": { - "cmt_msg": "" + "cmt_msg": "media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()" }, "CVE-2023-31083": { "cmt_msg": "" @@ -80593,6 +80883,9 @@ "CVE-2021-4083": { "cmt_msg": "fget: check that the fd still exists after getting a ref to it" }, + "CVE-2023-33288": { + "cmt_msg": "power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition" + }, "CVE-2022-29900": { "cmt_msg": "x86/kvm/vmx: Make noinstr clean" }, @@ -81424,6 +81717,9 @@ "CVE-2021-20321": { "cmt_msg": "ovl: fix missing negative dentry check in ovl_rename()" }, + "CVE-2023-33250": { + "cmt_msg": "" + }, "CVE-2022-42896": { "cmt_msg": "Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM" }, @@ -81478,9 +81774,15 @@ "CVE-2023-31436": { "cmt_msg": "net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg" }, + "CVE-2023-32254": { + "cmt_msg": "ksmbd: fix racy issue under cocurrent smb2 tree disconnect" + }, "CVE-2020-10708": { "cmt_msg": "" }, + "CVE-2023-32250": { + "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" + }, "CVE-2022-0400": { "cmt_msg": "" }, @@ -81709,6 +82011,9 @@ "CVE-2021-22555": { "cmt_msg": "netfilter: x_tables: fix compat match/target pad out-of-bound write" }, + "CVE-2020-36694": { + "cmt_msg": "netfilter: x_tables: Switch synchronization to RCU" + }, "CVE-2021-0399": { "cmt_msg": "" }, @@ -82331,7 +82636,7 @@ "cmt_msg": "bluetooth: Perform careful capability checks in hci_sock_ioctl()" }, "CVE-2023-28410": { - "cmt_msg": "" + "cmt_msg": "drm/i915/gem: add missing boundary check in vm_access" }, "CVE-2023-2007": { "cmt_msg": "scsi: dpt_i2o: Remove obsolete driver" @@ -82381,8 +82686,8 @@ "CVE-2023-28772": { "cmt_msg": "seq_buf: Fix overflow in seq_buf_putmem_hex()" }, - "CVE-2021-39656": { - "cmt_msg": "configfs: fix a use-after-free in __configfs_open_file" + "CVE-2022-2588": { + "cmt_msg": "net_sched: cls_route: remove from list when handle is 0" }, "CVE-2022-3707": { "cmt_msg": "drm/i915/gvt: fix double free bug in split_2MB_gtt_entry" @@ -82454,7 +82759,7 @@ "cmt_msg": "" }, "CVE-2023-31084": { - "cmt_msg": "" + "cmt_msg": "media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()" }, "CVE-2023-31083": { "cmt_msg": "" @@ -82510,6 +82815,9 @@ "CVE-2021-4083": { "cmt_msg": "fget: check that the fd still exists after getting a ref to it" }, + "CVE-2023-33288": { + "cmt_msg": "power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition" + }, "CVE-2022-29900": { "cmt_msg": "x86/kvm/vmx: Make noinstr clean" }, @@ -82813,8 +83121,8 @@ "CVE-2021-4154": { "cmt_msg": "cgroup: verify that source is a string" }, - "CVE-2022-2588": { - "cmt_msg": "net_sched: cls_route: remove from list when handle is 0" + "CVE-2021-39656": { + "cmt_msg": "configfs: fix a use-after-free in __configfs_open_file" }, "CVE-2021-39657": { "cmt_msg": "scsi: ufs: Correct the LUN used in eh_device_reset_handler() callback" @@ -83326,6 +83634,9 @@ "CVE-2021-20321": { "cmt_msg": "ovl: fix missing negative dentry check in ovl_rename()" }, + "CVE-2023-33250": { + "cmt_msg": "" + }, "CVE-2022-42896": { "cmt_msg": "Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM" }, @@ -83371,9 +83682,15 @@ "CVE-2021-28972": { "cmt_msg": "PCI: rpadlpar: Fix potential drc_name corruption in store functions" }, + "CVE-2023-32254": { + "cmt_msg": "ksmbd: fix racy issue under cocurrent smb2 tree disconnect" + }, "CVE-2020-10708": { "cmt_msg": "" }, + "CVE-2023-32250": { + "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" + }, "CVE-2022-0400": { "cmt_msg": "" }, @@ -83593,6 +83910,9 @@ "CVE-2021-22555": { "cmt_msg": "netfilter: x_tables: fix compat match/target pad out-of-bound write" }, + "CVE-2020-36694": { + "cmt_msg": "netfilter: x_tables: Switch synchronization to RCU" + }, "CVE-2021-0399": { "cmt_msg": "" }, @@ -87787,7 +88107,7 @@ "cmt_msg": "arm64: fix oops in concurrently setting insn_emulation sysctls" }, "CVE-2023-28410": { - "cmt_msg": "" + "cmt_msg": "drm/i915/gem: add missing boundary check in vm_access" }, "CVE-2018-20854": { "cmt_msg": "phy: ocelot-serdes: fix out-of-bounds read" @@ -87859,7 +88179,7 @@ "cmt_msg": "" }, "CVE-2023-31084": { - "cmt_msg": "" + "cmt_msg": "media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()" }, "CVE-2022-0382": { "cmt_msg": "net ticp:fix a kernel-infoleak in __tipc_sendmsg()" @@ -87990,6 +88310,9 @@ "CVE-2018-1121": { "cmt_msg": "" }, + "CVE-2023-33288": { + "cmt_msg": "power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition" + }, "CVE-2007-3719": { "cmt_msg": "" }, @@ -88077,6 +88400,9 @@ "CVE-2021-34556": { "cmt_msg": "bpf: Introduce BPF nospec instruction for mitigating Spectre v4" }, + "CVE-2023-32254": { + "cmt_msg": "ksmbd: fix racy issue under cocurrent smb2 tree disconnect" + }, "CVE-2022-3534": { "cmt_msg": "libbpf: Fix use-after-free in btf_dump_name_dups" }, @@ -88410,6 +88736,9 @@ "CVE-2022-23816": { "cmt_msg": "x86/kvm/vmx: Make noinstr clean" }, + "CVE-2023-33250": { + "cmt_msg": "" + }, "CVE-2022-21385": { "cmt_msg": "net/rds: fix warn in rds_message_alloc_sgs" }, @@ -88527,6 +88856,9 @@ "CVE-2018-20449": { "cmt_msg": "printk: hash addresses printed with %p" }, + "CVE-2023-32250": { + "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" + }, "CVE-2016-10723": { "cmt_msg": "mm, oom: remove sleep from under oom_lock" }, @@ -89350,6 +89682,9 @@ "CVE-2021-4083": { "cmt_msg": "fget: check that the fd still exists after getting a ref to it" }, + "CVE-2023-33288": { + "cmt_msg": "power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition" + }, "CVE-2018-10938": { "cmt_msg": "Cipso: cipso_v4_optptr enter infinite loop" }, @@ -90109,9 +90444,6 @@ "CVE-2022-28388": { "cmt_msg": "can: usb_8dev: usb_8dev_start_xmit(): fix double dev_kfree_skb() in error path" }, - "CVE-2023-33203": { - "cmt_msg": "net: qcom/emac: Fix use after free bug in emac_remove due to race condition" - }, "CVE-2017-0627": { "cmt_msg": "media: uvcvideo: Prevent heap overflow when accessing mapped controls" }, @@ -90386,7 +90718,7 @@ "cmt_msg": "printk: hash addresses printed with %p" }, "CVE-2023-28410": { - "cmt_msg": "" + "cmt_msg": "drm/i915/gem: add missing boundary check in vm_access" }, "CVE-2020-28374": { "cmt_msg": "scsi: target: Fix XCOPY NAA identifier lookup" @@ -90671,7 +91003,7 @@ "cmt_msg": "netfilter: nf_tables: disallow non-stateful expression in sets earlier" }, "CVE-2023-31084": { - "cmt_msg": "" + "cmt_msg": "media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()" }, "CVE-2017-9986": { "cmt_msg": "sound: Retire OSS" @@ -90934,6 +91266,9 @@ "CVE-2019-15902": { "cmt_msg": "unknown" }, + "CVE-2023-32250": { + "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" + }, "CVE-2019-20054": { "cmt_msg": "fs/proc/proc_sysctl.c: fix NULL pointer dereference in put_links" }, @@ -91084,6 +91419,9 @@ "CVE-2022-33740": { "cmt_msg": "xen/netfront: fix leaking data in shared pages" }, + "CVE-2023-32254": { + "cmt_msg": "ksmbd: fix racy issue under cocurrent smb2 tree disconnect" + }, "CVE-2021-28971": { "cmt_msg": "perf/x86/intel: Fix a crash caused by zero PEBS status" }, @@ -91918,6 +92256,9 @@ "CVE-2023-32269": { "cmt_msg": "netrom: Fix use-after-free caused by accept on already connected socket" }, + "CVE-2023-33250": { + "cmt_msg": "" + }, "CVE-2021-38198": { "cmt_msg": "KVM: X86: MMU: Use the correct inherited permissions to get shadow page" }, @@ -92755,6 +93096,9 @@ "CVE-2021-4083": { "cmt_msg": "fget: check that the fd still exists after getting a ref to it" }, + "CVE-2023-33288": { + "cmt_msg": "power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition" + }, "CVE-2018-10938": { "cmt_msg": "Cipso: cipso_v4_optptr enter infinite loop" }, @@ -93743,7 +94087,7 @@ "cmt_msg": "printk: hash addresses printed with %p" }, "CVE-2023-28410": { - "cmt_msg": "" + "cmt_msg": "drm/i915/gem: add missing boundary check in vm_access" }, "CVE-2020-28374": { "cmt_msg": "scsi: target: Fix XCOPY NAA identifier lookup" @@ -94037,7 +94381,7 @@ "cmt_msg": "netfilter: nf_tables: disallow non-stateful expression in sets earlier" }, "CVE-2023-31084": { - "cmt_msg": "" + "cmt_msg": "media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()" }, "CVE-2017-9986": { "cmt_msg": "sound: Retire OSS" @@ -94291,6 +94635,9 @@ "CVE-2019-15902": { "cmt_msg": "" }, + "CVE-2023-32250": { + "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" + }, "CVE-2019-20054": { "cmt_msg": "fs/proc/proc_sysctl.c: fix NULL pointer dereference in put_links" }, @@ -94414,6 +94761,9 @@ "CVE-2022-33740": { "cmt_msg": "xen/netfront: fix leaking data in shared pages" }, + "CVE-2023-32254": { + "cmt_msg": "ksmbd: fix racy issue under cocurrent smb2 tree disconnect" + }, "CVE-2020-35513": { "cmt_msg": "nfsd: fix incorrect umasks" }, @@ -95203,6 +95553,9 @@ "CVE-2023-32269": { "cmt_msg": "netrom: Fix use-after-free caused by accept on already connected socket" }, + "CVE-2023-33250": { + "cmt_msg": "" + }, "CVE-2021-38198": { "cmt_msg": "KVM: X86: MMU: Use the correct inherited permissions to get shadow page" }, @@ -95764,7 +96117,7 @@ "cmt_msg": "tcp: tcp_fragment() should apply sane memory limits" }, "CVE-2023-28410": { - "cmt_msg": "" + "cmt_msg": "drm/i915/gem: add missing boundary check in vm_access" }, "CVE-2023-2007": { "cmt_msg": "scsi: dpt_i2o: Remove obsolete driver" @@ -95938,7 +96291,7 @@ "cmt_msg": "media: radio-raremono: change devm_k*alloc to k*alloc" }, "CVE-2023-31084": { - "cmt_msg": "" + "cmt_msg": "media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()" }, "CVE-2019-15217": { "cmt_msg": "media: usb:zr364xx:Fix KASAN:null-ptr-deref Read in zr364xx_vidioc_querycap" @@ -96039,6 +96392,9 @@ "CVE-2021-4083": { "cmt_msg": "fget: check that the fd still exists after getting a ref to it" }, + "CVE-2023-33288": { + "cmt_msg": "power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition" + }, "CVE-2022-36402": { "cmt_msg": "" }, @@ -97248,6 +97604,9 @@ "CVE-2021-20321": { "cmt_msg": "ovl: fix missing negative dentry check in ovl_rename()" }, + "CVE-2023-33250": { + "cmt_msg": "" + }, "CVE-2022-26490": { "cmt_msg": "nfc: st21nfca: Fix potential buffer overflows in EVT_TRANSACTION" }, @@ -97323,12 +97682,18 @@ "CVE-2023-31436": { "cmt_msg": "net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg" }, + "CVE-2023-32254": { + "cmt_msg": "ksmbd: fix racy issue under cocurrent smb2 tree disconnect" + }, "CVE-2021-28971": { "cmt_msg": "perf/x86/intel: Fix a crash caused by zero PEBS status" }, "CVE-2020-10708": { "cmt_msg": "" }, + "CVE-2023-32250": { + "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" + }, "CVE-2022-0400": { "cmt_msg": "" }, @@ -97629,6 +97994,9 @@ "CVE-2021-22555": { "cmt_msg": "netfilter: x_tables: fix compat match/target pad out-of-bound write" }, + "CVE-2020-36694": { + "cmt_msg": "netfilter: x_tables: Switch synchronization to RCU" + }, "CVE-2021-0399": { "cmt_msg": "" }, @@ -98420,7 +98788,7 @@ "cmt_msg": "" }, "CVE-2023-28410": { - "cmt_msg": "" + "cmt_msg": "drm/i915/gem: add missing boundary check in vm_access" }, "CVE-2023-2007": { "cmt_msg": "scsi: dpt_i2o: Remove obsolete driver" @@ -98585,7 +98953,7 @@ "cmt_msg": "media: radio-raremono: change devm_k*alloc to k*alloc" }, "CVE-2023-31084": { - "cmt_msg": "" + "cmt_msg": "media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()" }, "CVE-2023-31083": { "cmt_msg": "" @@ -98680,6 +99048,9 @@ "CVE-2021-4083": { "cmt_msg": "fget: check that the fd still exists after getting a ref to it" }, + "CVE-2023-33288": { + "cmt_msg": "power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition" + }, "CVE-2022-36402": { "cmt_msg": "" }, @@ -99877,6 +100248,9 @@ "CVE-2021-20321": { "cmt_msg": "ovl: fix missing negative dentry check in ovl_rename()" }, + "CVE-2023-33250": { + "cmt_msg": "" + }, "CVE-2022-26490": { "cmt_msg": "nfc: st21nfca: Fix potential buffer overflows in EVT_TRANSACTION" }, @@ -99949,12 +100323,18 @@ "CVE-2023-31436": { "cmt_msg": "net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg" }, + "CVE-2023-32254": { + "cmt_msg": "ksmbd: fix racy issue under cocurrent smb2 tree disconnect" + }, "CVE-2021-28971": { "cmt_msg": "perf/x86/intel: Fix a crash caused by zero PEBS status" }, "CVE-2020-10708": { "cmt_msg": "" }, + "CVE-2023-32250": { + "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" + }, "CVE-2022-0400": { "cmt_msg": "" }, @@ -100258,6 +100638,9 @@ "CVE-2021-22555": { "cmt_msg": "netfilter: x_tables: fix compat match/target pad out-of-bound write" }, + "CVE-2020-36694": { + "cmt_msg": "netfilter: x_tables: Switch synchronization to RCU" + }, "CVE-2021-0399": { "cmt_msg": "" }, @@ -101047,7 +101430,7 @@ "cmt_msg": "" }, "CVE-2023-28410": { - "cmt_msg": "" + "cmt_msg": "drm/i915/gem: add missing boundary check in vm_access" }, "CVE-2023-2007": { "cmt_msg": "scsi: dpt_i2o: Remove obsolete driver" @@ -101203,7 +101586,7 @@ "cmt_msg": "" }, "CVE-2023-31084": { - "cmt_msg": "" + "cmt_msg": "media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()" }, "CVE-2023-31083": { "cmt_msg": "" @@ -101289,6 +101672,9 @@ "CVE-2021-4083": { "cmt_msg": "fget: check that the fd still exists after getting a ref to it" }, + "CVE-2023-33288": { + "cmt_msg": "power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition" + }, "CVE-2022-29900": { "cmt_msg": "x86/kvm/vmx: Make noinstr clean" }, @@ -102432,6 +102818,9 @@ "CVE-2021-20321": { "cmt_msg": "ovl: fix missing negative dentry check in ovl_rename()" }, + "CVE-2023-33250": { + "cmt_msg": "" + }, "CVE-2022-26490": { "cmt_msg": "nfc: st21nfca: Fix potential buffer overflows in EVT_TRANSACTION" }, @@ -102501,9 +102890,15 @@ "CVE-2023-31436": { "cmt_msg": "net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg" }, + "CVE-2023-32254": { + "cmt_msg": "ksmbd: fix racy issue under cocurrent smb2 tree disconnect" + }, "CVE-2020-10708": { "cmt_msg": "" }, + "CVE-2023-32250": { + "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" + }, "CVE-2022-0400": { "cmt_msg": "" }, @@ -102792,6 +103187,9 @@ "CVE-2021-22555": { "cmt_msg": "netfilter: x_tables: fix compat match/target pad out-of-bound write" }, + "CVE-2020-36694": { + "cmt_msg": "netfilter: x_tables: Switch synchronization to RCU" + }, "CVE-2021-0399": { "cmt_msg": "" }, @@ -103618,7 +104016,7 @@ "cmt_msg": "x86/sgx: Free backing memory after faulting the enclave page" }, "CVE-2023-31084": { - "cmt_msg": "" + "cmt_msg": "media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()" }, "CVE-2023-31083": { "cmt_msg": "" @@ -103671,6 +104069,9 @@ "CVE-2021-4083": { "cmt_msg": "fget: check that the fd still exists after getting a ref to it" }, + "CVE-2023-33288": { + "cmt_msg": "power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition" + }, "CVE-2022-29900": { "cmt_msg": "x86/kvm/vmx: Make noinstr clean" }, @@ -104077,11 +104478,14 @@ "cmt_msg": "af_unix: fix garbage collect vs MSG_PEEK" }, "CVE-2023-28410": { - "cmt_msg": "" + "cmt_msg": "drm/i915/gem: add missing boundary check in vm_access" }, "CVE-2022-3619": { "cmt_msg": "Bluetooth: L2CAP: Fix memory leak in vhci_write" }, + "CVE-2023-33250": { + "cmt_msg": "" + }, "CVE-2023-0615": { "cmt_msg": "" }, @@ -104370,9 +104774,15 @@ "CVE-2022-45884": { "cmt_msg": "" }, + "CVE-2023-32254": { + "cmt_msg": "ksmbd: fix racy issue under cocurrent smb2 tree disconnect" + }, "CVE-2020-10708": { "cmt_msg": "" }, + "CVE-2023-32250": { + "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" + }, "CVE-2022-0400": { "cmt_msg": "" }, @@ -105218,7 +105628,7 @@ "cmt_msg": "x86/sgx: Free backing memory after faulting the enclave page" }, "CVE-2023-31084": { - "cmt_msg": "" + "cmt_msg": "media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()" }, "CVE-2023-31083": { "cmt_msg": "" @@ -105262,6 +105672,9 @@ "CVE-2021-4083": { "cmt_msg": "fget: check that the fd still exists after getting a ref to it" }, + "CVE-2023-33288": { + "cmt_msg": "power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition" + }, "CVE-2022-29900": { "cmt_msg": "x86/kvm/vmx: Make noinstr clean" }, @@ -105659,11 +106072,14 @@ "cmt_msg": "io_uring: ensure symmetry in handling iter types in loop_rw_iter()" }, "CVE-2023-28410": { - "cmt_msg": "" + "cmt_msg": "drm/i915/gem: add missing boundary check in vm_access" }, "CVE-2022-3619": { "cmt_msg": "Bluetooth: L2CAP: Fix memory leak in vhci_write" }, + "CVE-2023-33250": { + "cmt_msg": "" + }, "CVE-2023-0615": { "cmt_msg": "" }, @@ -105952,9 +106368,15 @@ "CVE-2022-45884": { "cmt_msg": "" }, + "CVE-2023-32254": { + "cmt_msg": "ksmbd: fix racy issue under cocurrent smb2 tree disconnect" + }, "CVE-2020-10708": { "cmt_msg": "" }, + "CVE-2023-32250": { + "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" + }, "CVE-2022-0400": { "cmt_msg": "" }, @@ -106376,6 +106798,10 @@ }, "5.10": { "5.10": { + "CVE-2020-36694": { + "cmt_msg": "netfilter: x_tables: Switch synchronization to RCU", + "cmt_id": "cc00bcaa589914096edef7fb87ca5cee4a166b5c" + }, "CVE-2021-3411": { "cmt_msg": "x86/kprobes: Fix optprobe to detect INT3 padding correctly", "cmt_id": "0d07c0ec4381f630c801539c79ad8dcc627f6e4a" @@ -107534,6 +107960,10 @@ "cmt_msg": "media: mtk-vcodec: potential dereference of null pointer", "cmt_id": "bc2573abc691a269b54a6c14a2660f26d88876a5" }, + "CVE-2023-28410": { + "cmt_msg": "drm/i915/gem: add missing boundary check in vm_access", + "cmt_id": "89ddcc81914ab58cc203acc844f27d55ada8ec0e" + }, "CVE-2022-3111": { "cmt_msg": "power: supply: wm8350-power: Add missing free in free_charger_irq", "cmt_id": "48d23ef90116c8c702bfa4cad93744e4e5588d7d" @@ -108352,6 +108782,10 @@ "cmt_msg": "net: qcom/emac: Fix use after free bug in emac_remove due to race condition", "cmt_id": "cb5879efde4f9b4de4248b835890df7b6c49ffbc" }, + "CVE-2023-33288": { + "cmt_msg": "power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition", + "cmt_id": "2b346876b93168541a45551d5f9abd1d26102e89" + }, "CVE-2022-4379": { "cmt_msg": "NFSD: fix use-after-free in __nfs42_ssc_open()", "cmt_id": "01e4c9c03de8a9f8839cb7342bc4bccf9104efe5" @@ -108483,7 +108917,7 @@ "cmt_msg": "" }, "CVE-2023-31084": { - "cmt_msg": "" + "cmt_msg": "media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()" }, "CVE-2022-0382": { "cmt_msg": "net ticp:fix a kernel-infoleak in __tipc_sendmsg()" @@ -108554,9 +108988,6 @@ "CVE-2022-45919": { "cmt_msg": "" }, - "CVE-2023-28410": { - "cmt_msg": "" - }, "CVE-2023-2007": { "cmt_msg": "scsi: dpt_i2o: Remove obsolete driver" }, @@ -108578,6 +109009,9 @@ "CVE-2023-1075": { "cmt_msg": "net/tls: tls_is_tx_ready() checked list_entry" }, + "CVE-2023-32254": { + "cmt_msg": "ksmbd: fix racy issue under cocurrent smb2 tree disconnect" + }, "CVE-2022-1247": { "cmt_msg": "" }, @@ -108746,6 +109180,9 @@ "CVE-2018-12931": { "cmt_msg": "" }, + "CVE-2023-33250": { + "cmt_msg": "" + }, "CVE-2021-39801": { "cmt_msg": "" }, @@ -108806,6 +109243,9 @@ "CVE-2019-16089": { "cmt_msg": "" }, + "CVE-2023-32250": { + "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" + }, "CVE-2022-0400": { "cmt_msg": "" }, @@ -109398,7 +109838,7 @@ "cmt_msg": "x86/sgx: Free backing memory after faulting the enclave page" }, "CVE-2023-31084": { - "cmt_msg": "" + "cmt_msg": "media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()" }, "CVE-2023-31083": { "cmt_msg": "" @@ -109451,6 +109891,9 @@ "CVE-2021-4083": { "cmt_msg": "fget: check that the fd still exists after getting a ref to it" }, + "CVE-2023-33288": { + "cmt_msg": "power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition" + }, "CVE-2022-29900": { "cmt_msg": "x86/kvm/vmx: Make noinstr clean" }, @@ -109911,6 +110354,9 @@ "cmt_msg": "af_unix: fix garbage collect vs MSG_PEEK" }, "CVE-2023-28410": { + "cmt_msg": "drm/i915/gem: add missing boundary check in vm_access" + }, + "CVE-2023-33250": { "cmt_msg": "" }, "CVE-2023-0615": { @@ -110228,9 +110674,15 @@ "CVE-2022-45884": { "cmt_msg": "" }, + "CVE-2023-32254": { + "cmt_msg": "ksmbd: fix racy issue under cocurrent smb2 tree disconnect" + }, "CVE-2020-10708": { "cmt_msg": "" }, + "CVE-2023-32250": { + "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" + }, "CVE-2022-0400": { "cmt_msg": "" }, @@ -110985,9 +111437,9 @@ "cmt_msg": "can: ems_usb: ems_usb_start_xmit(): fix double dev_kfree_skb() in error path", "cmt_id": "41f6be840f138c7d42312d7619a6b44c001d6b6e" }, - "CVE-2022-2380": { - "cmt_msg": "video: fbdev: sm712fb: Fix crash in smtcfb_read()", - "cmt_id": "34d986f6ee5f5ac48cd2b9e2d061196fd3c29d39" + "CVE-2022-3112": { + "cmt_msg": "media: meson: vdec: potential dereference of null pointer", + "cmt_id": "c316e6a49745b09025eed102e30cc1e9ba2910b2" }, "CVE-2022-0168": { "cmt_msg": "cifs: fix NULL ptr dereference in smb2_ioctl_query_info()", @@ -110997,25 +111449,61 @@ "cmt_msg": "KVM: x86/mmu: do compare-and-exchange of gPTE via the user address", "cmt_id": "9a611c57530050dc359a83177c2f97678b1f961e" }, - "CVE-2023-1249": { - "cmt_msg": "coredump: Use the vma snapshot in fill_files_note", - "cmt_id": "c8015981eaa5bd8901a145c8d1253592a5619d2b" - }, "CVE-2022-2153": { "cmt_msg": "KVM: x86: Avoid theoretical NULL pointer dereference in kvm_irq_delivery_to_apic_fast()", "cmt_id": "9e38128f8bd1d4f2244d8a393bc5dc204a99a541" }, + "CVE-2022-1353": { + "cmt_msg": "af_key: add __GFP_ZERO flag for compose_sadb_supported in function pfkey_register", + "cmt_id": "16d974fa4ddda389bf58bb5e4fc8cad8910ba66d" + }, + "CVE-2022-1651": { + "cmt_msg": "virt: acrn: fix a memory leak in acrn_dev_ioctl()", + "cmt_id": "ee827d86ee73583c0f0b65db877467d9b5551aa4" + }, "CVE-2023-22996": { "cmt_msg": "soc: qcom: aoss: Fix missing put_device call in qmp_get", "cmt_id": "2ee39164a701782bb88cf4a564dc7d8cb43c9bff" }, + "CVE-2023-28410": { + "cmt_msg": "drm/i915/gem: add missing boundary check in vm_access", + "cmt_id": "5f6e560e3e86ac053447524224e411034f41f5c7" + }, + "CVE-2022-2380": { + "cmt_msg": "video: fbdev: sm712fb: Fix crash in smtcfb_read()", + "cmt_id": "34d986f6ee5f5ac48cd2b9e2d061196fd3c29d39" + }, + "CVE-2023-1249": { + "cmt_msg": "coredump: Use the vma snapshot in fill_files_note", + "cmt_id": "c8015981eaa5bd8901a145c8d1253592a5619d2b" + }, + "CVE-2022-28388": { + "cmt_msg": "can: usb_8dev: usb_8dev_start_xmit(): fix double dev_kfree_skb() in error path", + "cmt_id": "3e006cf0fb809815d56e59c9de4486fbe253ccdf" + }, + "CVE-2022-1516": { + "cmt_msg": "net/x25: Fix null-ptr-deref caused by x25_disconnect", + "cmt_id": "4a279d7ee1c65411b4055ecd428b8aa2b1711c1f" + }, + "CVE-2022-28389": { + "cmt_msg": "can: mcba_usb: mcba_usb_start_xmit(): fix double dev_kfree_skb in error path", + "cmt_id": "f913412848defa326a155c47d026267624472190" + }, + "CVE-2022-20369": { + "cmt_msg": "media: v4l2-mem2mem: Apply DST_QUEUE_OFF_BASE on MMAP buffers across ioctls", + "cmt_id": "2a5fd6b402049521f657966a42c4277f083a63c0" + }, "CVE-2022-3239": { "cmt_msg": "media: em28xx: initialize refcount before kref_get", "cmt_id": "37f808a9e734e9036f7aa42ba4864fc6e91d2572" }, - "CVE-2022-1353": { - "cmt_msg": "af_key: add __GFP_ZERO flag for compose_sadb_supported in function pfkey_register", - "cmt_id": "16d974fa4ddda389bf58bb5e4fc8cad8910ba66d" + "CVE-2022-1671": { + "cmt_msg": "rxrpc: fix some null-ptr-deref bugs in server_key.c", + "cmt_id": "c3c415ae0c82da1349d85b8c9b18e6480aa6a230" + }, + "CVE-2022-3078": { + "cmt_msg": "media: vidtv: Check for null return of vzalloc", + "cmt_id": "dd18f929458762f07b969d24d46e1d0a0d94c908" }, "CVE-2022-30594": { "cmt_msg": "ptrace: Check PTRACE_O_SUSPEND_SECCOMP permission on PTRACE_SEIZE", @@ -111032,38 +111520,6 @@ "CVE-2022-3111": { "cmt_msg": "power: supply: wm8350-power: Add missing free in free_charger_irq", "cmt_id": "ae07ec8110ba83295c88bff7e85835cc2f6cc4ea" - }, - "CVE-2022-20369": { - "cmt_msg": "media: v4l2-mem2mem: Apply DST_QUEUE_OFF_BASE on MMAP buffers across ioctls", - "cmt_id": "2a5fd6b402049521f657966a42c4277f083a63c0" - }, - "CVE-2022-3078": { - "cmt_msg": "media: vidtv: Check for null return of vzalloc", - "cmt_id": "dd18f929458762f07b969d24d46e1d0a0d94c908" - }, - "CVE-2022-28389": { - "cmt_msg": "can: mcba_usb: mcba_usb_start_xmit(): fix double dev_kfree_skb in error path", - "cmt_id": "f913412848defa326a155c47d026267624472190" - }, - "CVE-2022-28388": { - "cmt_msg": "can: usb_8dev: usb_8dev_start_xmit(): fix double dev_kfree_skb() in error path", - "cmt_id": "3e006cf0fb809815d56e59c9de4486fbe253ccdf" - }, - "CVE-2022-3112": { - "cmt_msg": "media: meson: vdec: potential dereference of null pointer", - "cmt_id": "c316e6a49745b09025eed102e30cc1e9ba2910b2" - }, - "CVE-2022-1516": { - "cmt_msg": "net/x25: Fix null-ptr-deref caused by x25_disconnect", - "cmt_id": "4a279d7ee1c65411b4055ecd428b8aa2b1711c1f" - }, - "CVE-2022-1671": { - "cmt_msg": "rxrpc: fix some null-ptr-deref bugs in server_key.c", - "cmt_id": "c3c415ae0c82da1349d85b8c9b18e6480aa6a230" - }, - "CVE-2022-1651": { - "cmt_msg": "virt: acrn: fix a memory leak in acrn_dev_ioctl()", - "cmt_id": "ee827d86ee73583c0f0b65db877467d9b5551aa4" } }, "5.16.20": { @@ -111327,7 +111783,7 @@ "cmt_msg": "x86/mm: Randomize per-cpu entry area" }, "CVE-2023-31084": { - "cmt_msg": "" + "cmt_msg": "media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()" }, "CVE-2022-1462": { "cmt_msg": "tty: use new tty_insert_flip_string_and_push_buffer() in pty_write()" @@ -111368,9 +111824,6 @@ "CVE-2022-48423": { "cmt_msg": "fs/ntfs3: Validate resident attribute name" }, - "CVE-2023-28410": { - "cmt_msg": "" - }, "CVE-2023-2248": { "cmt_msg": "net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg" }, @@ -111380,6 +111833,9 @@ "CVE-2019-15239": { "cmt_msg": "unknown" }, + "CVE-2023-33288": { + "cmt_msg": "power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition" + }, "CVE-2007-3719": { "cmt_msg": "" }, @@ -111890,6 +112346,9 @@ "CVE-2022-23816": { "cmt_msg": "x86/kvm/vmx: Make noinstr clean" }, + "CVE-2023-33250": { + "cmt_msg": "" + }, "CVE-2022-42896": { "cmt_msg": "Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM" }, @@ -111980,6 +112439,9 @@ "CVE-2022-27672": { "cmt_msg": "x86/speculation: Identify processors vulnerable to SMT RSB predictions" }, + "CVE-2023-32254": { + "cmt_msg": "ksmbd: fix racy issue under cocurrent smb2 tree disconnect" + }, "CVE-2018-12929": { "cmt_msg": "" }, @@ -112016,6 +112478,9 @@ "CVE-2019-16089": { "cmt_msg": "" }, + "CVE-2023-32250": { + "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" + }, "CVE-2022-0400": { "cmt_msg": "" }, @@ -112144,10 +112609,6 @@ "cmt_msg": "can: ems_usb: ems_usb_start_xmit(): fix double dev_kfree_skb() in error path", "cmt_id": "3f71f499395545119383f10760b8b19703d2a7dd" }, - "CVE-2022-2380": { - "cmt_msg": "video: fbdev: sm712fb: Fix crash in smtcfb_read()", - "cmt_id": "e46779a5706941fb9cd6e0264427953eb77d7888" - }, "CVE-2022-0168": { "cmt_msg": "cifs: fix NULL ptr dereference in smb2_ioctl_query_info()", "cmt_id": "49bef50e585d738e957060f669e872b4ad15eb87" @@ -112156,18 +112617,42 @@ "cmt_msg": "KVM: x86/mmu: do compare-and-exchange of gPTE via the user address", "cmt_id": "5051c04d70c6e035c2c923c04fbe015a4468b08d" }, - "CVE-2022-3239": { - "cmt_msg": "media: em28xx: initialize refcount before kref_get", - "cmt_id": "d96dd287ca21c5b494bdb55555b33a6afec807cb" - }, "CVE-2022-2153": { "cmt_msg": "KVM: x86: Avoid theoretical NULL pointer dereference in kvm_irq_delivery_to_apic_fast()", "cmt_id": "9fa2b94443ff41cdecdff6f4d4324d83af01089a" }, + "CVE-2022-1651": { + "cmt_msg": "virt: acrn: fix a memory leak in acrn_dev_ioctl()", + "cmt_id": "f8e6e18d117e461110c849a11c6a396dcccdbd4e" + }, "CVE-2023-22996": { "cmt_msg": "soc: qcom: aoss: Fix missing put_device call in qmp_get", "cmt_id": "863bf0d2d794de665f7d3dfa5241c55300fad591" }, + "CVE-2023-28410": { + "cmt_msg": "drm/i915/gem: add missing boundary check in vm_access", + "cmt_id": "8f0ebea8f6e8c474264ed97d7a64c9c09ed4f5aa" + }, + "CVE-2022-2380": { + "cmt_msg": "video: fbdev: sm712fb: Fix crash in smtcfb_read()", + "cmt_id": "e46779a5706941fb9cd6e0264427953eb77d7888" + }, + "CVE-2022-28389": { + "cmt_msg": "can: mcba_usb: mcba_usb_start_xmit(): fix double dev_kfree_skb in error path", + "cmt_id": "42a4b0dfd365c4f77f96fd1f73a64b47ae443a38" + }, + "CVE-2022-28388": { + "cmt_msg": "can: usb_8dev: usb_8dev_start_xmit(): fix double dev_kfree_skb() in error path", + "cmt_id": "29d6c06168faa23ce23db3321981c8fde576c95c" + }, + "CVE-2022-1516": { + "cmt_msg": "net/x25: Fix null-ptr-deref caused by x25_disconnect", + "cmt_id": "671529db75e6be777bb1c76aa07c2bdd2992be6d" + }, + "CVE-2023-1249": { + "cmt_msg": "coredump: Use the vma snapshot in fill_files_note", + "cmt_id": "5c6baf808f409b69ad0799a551a704177b5a7ec1" + }, "CVE-2022-1204": { "cmt_msg": "ax25: Fix refcount leaks caused by ax25_cb_del()", "cmt_id": "534156dd4ed768e30a43de0036f45dca7c54818f" @@ -112176,6 +112661,22 @@ "cmt_msg": "ax25: Fix NULL pointer dereferences in ax25 timers", "cmt_id": "a45dba71849a963c427637b3330e2ccf098f42d1" }, + "CVE-2022-20369": { + "cmt_msg": "media: v4l2-mem2mem: Apply DST_QUEUE_OFF_BASE on MMAP buffers across ioctls", + "cmt_id": "3c6ec01525254e4489c6e60df2a8c48ee81f6f78" + }, + "CVE-2022-3239": { + "cmt_msg": "media: em28xx: initialize refcount before kref_get", + "cmt_id": "d96dd287ca21c5b494bdb55555b33a6afec807cb" + }, + "CVE-2022-1671": { + "cmt_msg": "rxrpc: fix some null-ptr-deref bugs in server_key.c", + "cmt_id": "4e1f670e1b440dc783dbeb881d575bca31474f73" + }, + "CVE-2022-3078": { + "cmt_msg": "media: vidtv: Check for null return of vzalloc", + "cmt_id": "79d17521953d0a16f4df91be59a543a54d1d8c4a" + }, "CVE-2022-30594": { "cmt_msg": "ptrace: Check PTRACE_O_SUSPEND_SECCOMP permission on PTRACE_SEIZE", "cmt_id": "4d51bbc8a3799febf50471eb6888b1b58e87111e" @@ -112191,38 +112692,6 @@ "CVE-2022-3111": { "cmt_msg": "power: supply: wm8350-power: Add missing free in free_charger_irq", "cmt_id": "011ce263361608bb2a1a5cbcc0e3c53b1d7a41d7" - }, - "CVE-2022-20369": { - "cmt_msg": "media: v4l2-mem2mem: Apply DST_QUEUE_OFF_BASE on MMAP buffers across ioctls", - "cmt_id": "3c6ec01525254e4489c6e60df2a8c48ee81f6f78" - }, - "CVE-2022-3078": { - "cmt_msg": "media: vidtv: Check for null return of vzalloc", - "cmt_id": "79d17521953d0a16f4df91be59a543a54d1d8c4a" - }, - "CVE-2022-28389": { - "cmt_msg": "can: mcba_usb: mcba_usb_start_xmit(): fix double dev_kfree_skb in error path", - "cmt_id": "42a4b0dfd365c4f77f96fd1f73a64b47ae443a38" - }, - "CVE-2022-28388": { - "cmt_msg": "can: usb_8dev: usb_8dev_start_xmit(): fix double dev_kfree_skb() in error path", - "cmt_id": "29d6c06168faa23ce23db3321981c8fde576c95c" - }, - "CVE-2022-1516": { - "cmt_msg": "net/x25: Fix null-ptr-deref caused by x25_disconnect", - "cmt_id": "671529db75e6be777bb1c76aa07c2bdd2992be6d" - }, - "CVE-2022-1671": { - "cmt_msg": "rxrpc: fix some null-ptr-deref bugs in server_key.c", - "cmt_id": "4e1f670e1b440dc783dbeb881d575bca31474f73" - }, - "CVE-2022-1651": { - "cmt_msg": "virt: acrn: fix a memory leak in acrn_dev_ioctl()", - "cmt_id": "f8e6e18d117e461110c849a11c6a396dcccdbd4e" - }, - "CVE-2023-1249": { - "cmt_msg": "coredump: Use the vma snapshot in fill_files_note", - "cmt_id": "5c6baf808f409b69ad0799a551a704177b5a7ec1" } }, "5.17.3": { @@ -112634,7 +113103,7 @@ "cmt_msg": "x86/mm: Randomize per-cpu entry area" }, "CVE-2023-31084": { - "cmt_msg": "" + "cmt_msg": "media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()" }, "CVE-2022-1462": { "cmt_msg": "tty: use new tty_insert_flip_string_and_push_buffer() in pty_write()" @@ -112675,9 +113144,6 @@ "CVE-2022-34918": { "cmt_msg": "netfilter: nf_tables: stricter validation of element data" }, - "CVE-2023-28410": { - "cmt_msg": "" - }, "CVE-2023-2248": { "cmt_msg": "net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg" }, @@ -112687,6 +113153,9 @@ "CVE-2019-15239": { "cmt_msg": "unknown" }, + "CVE-2023-33288": { + "cmt_msg": "power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition" + }, "CVE-2007-3719": { "cmt_msg": "" }, @@ -113134,6 +113603,9 @@ "CVE-2022-23816": { "cmt_msg": "x86/kvm/vmx: Make noinstr clean" }, + "CVE-2023-33250": { + "cmt_msg": "" + }, "CVE-2022-42896": { "cmt_msg": "Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM" }, @@ -113215,6 +113687,9 @@ "CVE-2022-1882": { "cmt_msg": "watchqueue: make sure to serialize 'wqueue->defunct' properly" }, + "CVE-2023-32254": { + "cmt_msg": "ksmbd: fix racy issue under cocurrent smb2 tree disconnect" + }, "CVE-2022-2308": { "cmt_msg": "vduse: prevent uninitialized memory accesses" }, @@ -113251,6 +113726,9 @@ "CVE-2019-16089": { "cmt_msg": "" }, + "CVE-2023-32250": { + "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" + }, "CVE-2022-0400": { "cmt_msg": "" }, @@ -113725,7 +114203,7 @@ "cmt_msg": "x86/sgx: Free backing memory after faulting the enclave page" }, "CVE-2023-31084": { - "cmt_msg": "" + "cmt_msg": "media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()" }, "CVE-2023-31083": { "cmt_msg": "" @@ -113766,6 +114244,9 @@ "CVE-2021-4083": { "cmt_msg": "fget: check that the fd still exists after getting a ref to it" }, + "CVE-2023-33288": { + "cmt_msg": "power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition" + }, "CVE-2022-29900": { "cmt_msg": "x86/kvm/vmx: Make noinstr clean" }, @@ -114160,11 +114641,14 @@ "cmt_msg": "efi: rt-wrapper: Add missing include" }, "CVE-2023-28410": { - "cmt_msg": "" + "cmt_msg": "drm/i915/gem: add missing boundary check in vm_access" }, "CVE-2022-3619": { "cmt_msg": "Bluetooth: L2CAP: Fix memory leak in vhci_write" }, + "CVE-2023-33250": { + "cmt_msg": "" + }, "CVE-2023-0615": { "cmt_msg": "" }, @@ -114411,9 +114895,15 @@ "CVE-2021-4202": { "cmt_msg": "NFC: reorganize the functions in nci_request" }, + "CVE-2023-32254": { + "cmt_msg": "ksmbd: fix racy issue under cocurrent smb2 tree disconnect" + }, "CVE-2020-10708": { "cmt_msg": "" }, + "CVE-2023-32250": { + "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" + }, "CVE-2022-0400": { "cmt_msg": "" }, @@ -115279,42 +115769,78 @@ "cmt_msg": "can: ems_usb: ems_usb_start_xmit(): fix double dev_kfree_skb() in error path", "cmt_id": "459b19f42fd5e031e743dfa119f44aba0b62ff97" }, - "CVE-2022-20369": { - "cmt_msg": "media: v4l2-mem2mem: Apply DST_QUEUE_OFF_BASE on MMAP buffers across ioctls", - "cmt_id": "48d00e24822e4384edcee3aae03d54c1b7982eba" + "CVE-2022-3112": { + "cmt_msg": "media: meson: vdec: potential dereference of null pointer", + "cmt_id": "b0b890dd8df3b9a2fe726826980b1cffe17b9679" }, "CVE-2022-0168": { "cmt_msg": "cifs: fix NULL ptr dereference in smb2_ioctl_query_info()", "cmt_id": "39a4bf7d1a23dd172526c2fb0db480c5d5c63bd6" }, - "CVE-2022-30594": { - "cmt_msg": "ptrace: Check PTRACE_O_SUSPEND_SECCOMP permission on PTRACE_SEIZE", - "cmt_id": "b6d75218ff65f4d63c9cf4986f6c55666fb90a1a" - }, "CVE-2022-1158": { "cmt_msg": "KVM: x86/mmu: do compare-and-exchange of gPTE via the user address", "cmt_id": "8771d9673e0bdb7148299f3c074667124bde6dff" }, - "CVE-2023-1249": { - "cmt_msg": "coredump: Use the vma snapshot in fill_files_note", - "cmt_id": "39fd0cc079c98dafcf355997ada7b5e67f0bb10a" - }, "CVE-2022-2153": { "cmt_msg": "KVM: x86: Avoid theoretical NULL pointer dereference in kvm_irq_delivery_to_apic_fast()", "cmt_id": "0e5dbc0540baa89faf4c04ccc7e9c4fe6b1d7bf4" }, - "CVE-2022-3239": { - "cmt_msg": "media: em28xx: initialize refcount before kref_get", - "cmt_id": "332d45fe51d75a3a95c4a04e2cb7bffef284edd4" - }, "CVE-2022-1353": { "cmt_msg": "af_key: add __GFP_ZERO flag for compose_sadb_supported in function pfkey_register", "cmt_id": "d06ee4572fd916fbb34d16dc81eb37d1dff83446" }, + "CVE-2022-1198": { + "cmt_msg": "drivers: hamradio: 6pack: fix UAF bug caused by mod_timer()", + "cmt_id": "3eb18f8a1d02a9462a0e4903efc674ca3d0406d1" + }, + "CVE-2022-1651": { + "cmt_msg": "virt: acrn: fix a memory leak in acrn_dev_ioctl()", + "cmt_id": "1d5103d9bb7d42fc220afe9f01ec6b9fe0ea5773" + }, + "CVE-2023-28410": { + "cmt_msg": "drm/i915/gem: add missing boundary check in vm_access", + "cmt_id": "312d3d4f49e12f97260bcf972c848c3562126a18" + }, + "CVE-2022-2380": { + "cmt_msg": "video: fbdev: sm712fb: Fix crash in smtcfb_read()", + "cmt_id": "46cdbff26c88fd75dccbf28df1d07cbe18007eac" + }, + "CVE-2023-1249": { + "cmt_msg": "coredump: Use the vma snapshot in fill_files_note", + "cmt_id": "39fd0cc079c98dafcf355997ada7b5e67f0bb10a" + }, "CVE-2022-28388": { "cmt_msg": "can: usb_8dev: usb_8dev_start_xmit(): fix double dev_kfree_skb() in error path", "cmt_id": "f2ce5238904f539648aaf56c5ee49e5eaf44d8fc" }, + "CVE-2022-1516": { + "cmt_msg": "net/x25: Fix null-ptr-deref caused by x25_disconnect", + "cmt_id": "409570a619c1cda2e0fde6018a256b9e3d3ba0ee" + }, + "CVE-2022-28389": { + "cmt_msg": "can: mcba_usb: mcba_usb_start_xmit(): fix double dev_kfree_skb in error path", + "cmt_id": "37f07ad24866c6c1423b37b131c9a42414bcf8a1" + }, + "CVE-2022-20369": { + "cmt_msg": "media: v4l2-mem2mem: Apply DST_QUEUE_OFF_BASE on MMAP buffers across ioctls", + "cmt_id": "48d00e24822e4384edcee3aae03d54c1b7982eba" + }, + "CVE-2022-3239": { + "cmt_msg": "media: em28xx: initialize refcount before kref_get", + "cmt_id": "332d45fe51d75a3a95c4a04e2cb7bffef284edd4" + }, + "CVE-2022-1671": { + "cmt_msg": "rxrpc: fix some null-ptr-deref bugs in server_key.c", + "cmt_id": "432297011caf71dbc95c3365a65adf365e79aff3" + }, + "CVE-2022-3078": { + "cmt_msg": "media: vidtv: Check for null return of vzalloc", + "cmt_id": "9dd2fd7a1f84c947561af29424c5ddcecfcf2cbe" + }, + "CVE-2022-30594": { + "cmt_msg": "ptrace: Check PTRACE_O_SUSPEND_SECCOMP permission on PTRACE_SEIZE", + "cmt_id": "b6d75218ff65f4d63c9cf4986f6c55666fb90a1a" + }, "CVE-2022-2977": { "cmt_msg": "tpm: fix reference counting for struct tpm_chip", "cmt_id": "662893b4f6bd466ff9e1cd454c44c26d32d554fe" @@ -115326,38 +115852,6 @@ "CVE-2022-3111": { "cmt_msg": "power: supply: wm8350-power: Add missing free in free_charger_irq", "cmt_id": "4124966fbd95eeecca26d52433f393e2b9649a33" - }, - "CVE-2022-1198": { - "cmt_msg": "drivers: hamradio: 6pack: fix UAF bug caused by mod_timer()", - "cmt_id": "3eb18f8a1d02a9462a0e4903efc674ca3d0406d1" - }, - "CVE-2022-3078": { - "cmt_msg": "media: vidtv: Check for null return of vzalloc", - "cmt_id": "9dd2fd7a1f84c947561af29424c5ddcecfcf2cbe" - }, - "CVE-2022-28389": { - "cmt_msg": "can: mcba_usb: mcba_usb_start_xmit(): fix double dev_kfree_skb in error path", - "cmt_id": "37f07ad24866c6c1423b37b131c9a42414bcf8a1" - }, - "CVE-2022-2380": { - "cmt_msg": "video: fbdev: sm712fb: Fix crash in smtcfb_read()", - "cmt_id": "46cdbff26c88fd75dccbf28df1d07cbe18007eac" - }, - "CVE-2022-3112": { - "cmt_msg": "media: meson: vdec: potential dereference of null pointer", - "cmt_id": "b0b890dd8df3b9a2fe726826980b1cffe17b9679" - }, - "CVE-2022-1516": { - "cmt_msg": "net/x25: Fix null-ptr-deref caused by x25_disconnect", - "cmt_id": "409570a619c1cda2e0fde6018a256b9e3d3ba0ee" - }, - "CVE-2022-1671": { - "cmt_msg": "rxrpc: fix some null-ptr-deref bugs in server_key.c", - "cmt_id": "432297011caf71dbc95c3365a65adf365e79aff3" - }, - "CVE-2022-1651": { - "cmt_msg": "virt: acrn: fix a memory leak in acrn_dev_ioctl()", - "cmt_id": "1d5103d9bb7d42fc220afe9f01ec6b9fe0ea5773" } }, "5.15.34": { @@ -116281,6 +116775,10 @@ "cmt_msg": "net: qcom/emac: Fix use after free bug in emac_remove due to race condition", "cmt_id": "8c4a180dc12303159592d15e8f077c20deeb1e55" }, + "CVE-2023-33288": { + "cmt_msg": "power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition", + "cmt_id": "4ca3fd39c72efa250129d2af406c3bb56eec7dd9" + }, "CVE-2022-4379": { "cmt_msg": "NFSD: fix use-after-free in __nfs42_ssc_open()", "cmt_id": "ec5b7814353532243e8a9147d232a32549174909" @@ -116348,6 +116846,12 @@ "cmt_id": "e11765cea2050fa25fc3e03da858e83284c5ce79" } }, + "5.15.113": { + "CVE-2022-48425": { + "cmt_msg": "fs/ntfs3: Validate MFT flags before replaying logs", + "cmt_id": "2a67f26f70ab344ae6ea78638890eebc1191a501" + } + }, "outstanding": { "CVE-2023-0160": { "cmt_msg": "" @@ -116457,9 +116961,6 @@ "CVE-2022-45919": { "cmt_msg": "" }, - "CVE-2023-28410": { - "cmt_msg": "" - }, "CVE-2023-2007": { "cmt_msg": "scsi: dpt_i2o: Remove obsolete driver" }, @@ -116527,7 +117028,7 @@ "cmt_msg": "" }, "CVE-2023-31084": { - "cmt_msg": "" + "cmt_msg": "media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()" }, "CVE-2023-31083": { "cmt_msg": "" @@ -116571,9 +117072,6 @@ "CVE-2021-3892": { "cmt_msg": "" }, - "CVE-2022-48425": { - "cmt_msg": "fs/ntfs3: Validate MFT flags before replaying logs" - }, "CVE-2022-3642": { "cmt_msg": "" }, @@ -116613,6 +117111,9 @@ "CVE-2018-12931": { "cmt_msg": "" }, + "CVE-2023-33250": { + "cmt_msg": "" + }, "CVE-2021-39801": { "cmt_msg": "" }, @@ -116646,6 +117147,9 @@ "CVE-2021-3542": { "cmt_msg": "" }, + "CVE-2023-32254": { + "cmt_msg": "ksmbd: fix racy issue under cocurrent smb2 tree disconnect" + }, "CVE-2018-12929": { "cmt_msg": "" }, @@ -116673,6 +117177,9 @@ "CVE-2019-16089": { "cmt_msg": "" }, + "CVE-2023-32250": { + "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" + }, "CVE-2022-0400": { "cmt_msg": "" }, @@ -117068,7 +117575,7 @@ "cmt_msg": "tcp: tcp_fragment() should apply sane memory limits" }, "CVE-2023-28410": { - "cmt_msg": "" + "cmt_msg": "drm/i915/gem: add missing boundary check in vm_access" }, "CVE-2023-2007": { "cmt_msg": "scsi: dpt_i2o: Remove obsolete driver" @@ -117248,7 +117755,7 @@ "cmt_msg": "media: radio-raremono: change devm_k*alloc to k*alloc" }, "CVE-2023-31084": { - "cmt_msg": "" + "cmt_msg": "media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()" }, "CVE-2019-15217": { "cmt_msg": "media: usb:zr364xx:Fix KASAN:null-ptr-deref Read in zr364xx_vidioc_querycap" @@ -117364,6 +117871,9 @@ "CVE-2021-4083": { "cmt_msg": "fget: check that the fd still exists after getting a ref to it" }, + "CVE-2023-33288": { + "cmt_msg": "power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition" + }, "CVE-2022-36402": { "cmt_msg": "" }, @@ -118594,6 +119104,9 @@ "CVE-2020-0543": { "cmt_msg": "x86/cpu: Add 'table' argument to cpu_matches()" }, + "CVE-2023-32250": { + "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" + }, "CVE-2019-20054": { "cmt_msg": "fs/proc/proc_sysctl.c: fix NULL pointer dereference in put_links" }, @@ -118639,6 +119152,9 @@ "CVE-2021-20321": { "cmt_msg": "ovl: fix missing negative dentry check in ovl_rename()" }, + "CVE-2023-33250": { + "cmt_msg": "" + }, "CVE-2022-26490": { "cmt_msg": "nfc: st21nfca: Fix potential buffer overflows in EVT_TRANSACTION" }, @@ -118714,6 +119230,9 @@ "CVE-2023-31436": { "cmt_msg": "net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg" }, + "CVE-2023-32254": { + "cmt_msg": "ksmbd: fix racy issue under cocurrent smb2 tree disconnect" + }, "CVE-2021-28971": { "cmt_msg": "perf/x86/intel: Fix a crash caused by zero PEBS status" }, @@ -119041,6 +119560,9 @@ "CVE-2021-22555": { "cmt_msg": "netfilter: x_tables: fix compat match/target pad out-of-bound write" }, + "CVE-2020-36694": { + "cmt_msg": "netfilter: x_tables: Switch synchronization to RCU" + }, "CVE-2021-0399": { "cmt_msg": "" }, @@ -120295,6 +120817,10 @@ } }, "5.4.86": { + "CVE-2020-36694": { + "cmt_msg": "netfilter: x_tables: Switch synchronization to RCU", + "cmt_id": "b17244cebb24b30b886d46938cc5f798f7337574" + }, "CVE-2020-27815": { "cmt_msg": "jfs: Fix array index bounds check in dbAdjTree", "cmt_id": "cbeb61258186978c26f9ee738c86fe4812cc27af" @@ -122064,7 +122590,7 @@ "cmt_msg": "" }, "CVE-2023-31084": { - "cmt_msg": "" + "cmt_msg": "media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()" }, "CVE-2022-0382": { "cmt_msg": "net ticp:fix a kernel-infoleak in __tipc_sendmsg()" @@ -122154,7 +122680,7 @@ "cmt_msg": "" }, "CVE-2023-28410": { - "cmt_msg": "" + "cmt_msg": "drm/i915/gem: add missing boundary check in vm_access" }, "CVE-2023-2007": { "cmt_msg": "scsi: dpt_i2o: Remove obsolete driver" @@ -122177,6 +122703,9 @@ "CVE-2023-1075": { "cmt_msg": "net/tls: tls_is_tx_ready() checked list_entry" }, + "CVE-2023-32254": { + "cmt_msg": "ksmbd: fix racy issue under cocurrent smb2 tree disconnect" + }, "CVE-2021-20177": { "cmt_msg": "netfilter: add and use nf_hook_slow_list()" }, @@ -122330,6 +122859,9 @@ "CVE-2019-15902": { "cmt_msg": "unknown" }, + "CVE-2023-33288": { + "cmt_msg": "power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition" + }, "CVE-2019-15290": { "cmt_msg": "" }, @@ -122360,6 +122892,9 @@ "CVE-2020-29534": { "cmt_msg": "io_uring: don't rely on weak ->files references" }, + "CVE-2023-33250": { + "cmt_msg": "" + }, "CVE-2012-4542": { "cmt_msg": "" }, @@ -122435,6 +122970,9 @@ "CVE-2019-16089": { "cmt_msg": "" }, + "CVE-2023-32250": { + "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" + }, "CVE-2022-0400": { "cmt_msg": "" }, @@ -122488,6 +123026,12 @@ "cmt_id": "3ac6487e584a1eb54071dbe1212e05b884136704" } }, + "5.18-rc1": { + "CVE-2023-28410": { + "cmt_msg": "drm/i915/gem: add missing boundary check in vm_access", + "cmt_id": "3886a86e7e6cc6ce2ce93c440fecd8f42aed0ce7" + } + }, "5.18.1": { "CVE-2022-21499": { "cmt_msg": "lockdown: also lock down previous kgdb use", @@ -123190,7 +123734,7 @@ "cmt_msg": "af_unix: Get user_ns from in_skb in unix_diag_get_exact()." }, "CVE-2023-31084": { - "cmt_msg": "" + "cmt_msg": "media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()" }, "CVE-2023-31083": { "cmt_msg": "" @@ -123324,8 +123868,8 @@ "CVE-2019-15902": { "cmt_msg": "unknown" }, - "CVE-2023-28410": { - "cmt_msg": "" + "CVE-2023-33288": { + "cmt_msg": "power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition" }, "CVE-2022-36402": { "cmt_msg": "" @@ -123372,6 +123916,9 @@ "CVE-2018-12931": { "cmt_msg": "" }, + "CVE-2023-33250": { + "cmt_msg": "" + }, "CVE-2022-42896": { "cmt_msg": "Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM" }, @@ -123438,6 +123985,9 @@ "CVE-2022-27672": { "cmt_msg": "x86/speculation: Identify processors vulnerable to SMT RSB predictions" }, + "CVE-2023-32254": { + "cmt_msg": "ksmbd: fix racy issue under cocurrent smb2 tree disconnect" + }, "CVE-2022-2308": { "cmt_msg": "vduse: prevent uninitialized memory accesses" }, @@ -123474,6 +124024,9 @@ "CVE-2019-16089": { "cmt_msg": "" }, + "CVE-2023-32250": { + "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" + }, "CVE-2022-0400": { "cmt_msg": "" }, @@ -123889,7 +124442,7 @@ "cmt_msg": "" }, "CVE-2023-31084": { - "cmt_msg": "" + "cmt_msg": "media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()" }, "CVE-2023-1583": { "cmt_msg": "io_uring/rsrc: fix null-ptr-deref in io_file_bitmap_get()" @@ -124230,8 +124783,8 @@ "CVE-2019-15902": { "cmt_msg": "unknown" }, - "CVE-2023-28410": { - "cmt_msg": "" + "CVE-2023-33288": { + "cmt_msg": "power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition" }, "CVE-2019-15290": { "cmt_msg": "" @@ -124278,6 +124831,9 @@ "CVE-2018-12931": { "cmt_msg": "" }, + "CVE-2023-33250": { + "cmt_msg": "" + }, "CVE-2022-42896": { "cmt_msg": "Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM" }, @@ -124347,6 +124903,9 @@ "CVE-2022-27672": { "cmt_msg": "x86/speculation: Identify processors vulnerable to SMT RSB predictions" }, + "CVE-2023-32254": { + "cmt_msg": "ksmbd: fix racy issue under cocurrent smb2 tree disconnect" + }, "CVE-2018-12929": { "cmt_msg": "" }, @@ -124383,6 +124942,9 @@ "CVE-2019-16089": { "cmt_msg": "" }, + "CVE-2023-32250": { + "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" + }, "CVE-2022-0400": { "cmt_msg": "" }, @@ -124966,7 +125528,7 @@ "cmt_msg": "" }, "CVE-2023-28410": { - "cmt_msg": "" + "cmt_msg": "drm/i915/gem: add missing boundary check in vm_access" }, "CVE-2023-2007": { "cmt_msg": "scsi: dpt_i2o: Remove obsolete driver" @@ -125110,7 +125672,7 @@ "cmt_msg": "" }, "CVE-2023-31084": { - "cmt_msg": "" + "cmt_msg": "media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()" }, "CVE-2023-31083": { "cmt_msg": "" @@ -125184,6 +125746,9 @@ "CVE-2021-4083": { "cmt_msg": "fget: check that the fd still exists after getting a ref to it" }, + "CVE-2023-33288": { + "cmt_msg": "power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition" + }, "CVE-2022-29900": { "cmt_msg": "x86/kvm/vmx: Make noinstr clean" }, @@ -126255,6 +126820,9 @@ "CVE-2021-20321": { "cmt_msg": "ovl: fix missing negative dentry check in ovl_rename()" }, + "CVE-2023-33250": { + "cmt_msg": "" + }, "CVE-2022-26490": { "cmt_msg": "nfc: st21nfca: Fix potential buffer overflows in EVT_TRANSACTION" }, @@ -126324,12 +126892,18 @@ "CVE-2023-31436": { "cmt_msg": "net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg" }, + "CVE-2023-32254": { + "cmt_msg": "ksmbd: fix racy issue under cocurrent smb2 tree disconnect" + }, "CVE-2022-45887": { "cmt_msg": "" }, "CVE-2020-10708": { "cmt_msg": "" }, + "CVE-2023-32250": { + "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" + }, "CVE-2022-0400": { "cmt_msg": "" }, @@ -126588,6 +127162,9 @@ "CVE-2021-22555": { "cmt_msg": "netfilter: x_tables: fix compat match/target pad out-of-bound write" }, + "CVE-2020-36694": { + "cmt_msg": "netfilter: x_tables: Switch synchronization to RCU" + }, "CVE-2021-0399": { "cmt_msg": "" }, @@ -127235,7 +127812,7 @@ "cmt_msg": "" }, "CVE-2023-28410": { - "cmt_msg": "" + "cmt_msg": "drm/i915/gem: add missing boundary check in vm_access" }, "CVE-2023-2007": { "cmt_msg": "scsi: dpt_i2o: Remove obsolete driver" @@ -127364,7 +127941,7 @@ "cmt_msg": "" }, "CVE-2023-31084": { - "cmt_msg": "" + "cmt_msg": "media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()" }, "CVE-2023-31083": { "cmt_msg": "" @@ -127423,6 +128000,9 @@ "CVE-2021-4083": { "cmt_msg": "fget: check that the fd still exists after getting a ref to it" }, + "CVE-2023-33288": { + "cmt_msg": "power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition" + }, "CVE-2022-29900": { "cmt_msg": "x86/kvm/vmx: Make noinstr clean" }, @@ -128329,6 +128909,9 @@ "CVE-2021-20321": { "cmt_msg": "ovl: fix missing negative dentry check in ovl_rename()" }, + "CVE-2023-33250": { + "cmt_msg": "" + }, "CVE-2022-42896": { "cmt_msg": "Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM" }, @@ -128383,12 +128966,18 @@ "CVE-2023-31436": { "cmt_msg": "net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg" }, + "CVE-2023-32254": { + "cmt_msg": "ksmbd: fix racy issue under cocurrent smb2 tree disconnect" + }, "CVE-2022-45887": { "cmt_msg": "" }, "CVE-2020-10708": { "cmt_msg": "" }, + "CVE-2023-32250": { + "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" + }, "CVE-2022-0400": { "cmt_msg": "" }, @@ -128614,6 +129203,9 @@ "CVE-2021-22555": { "cmt_msg": "netfilter: x_tables: fix compat match/target pad out-of-bound write" }, + "CVE-2020-36694": { + "cmt_msg": "netfilter: x_tables: Switch synchronization to RCU" + }, "CVE-2021-0399": { "cmt_msg": "" },
diff --git a/data/stream_fixes.json b/data/stream_fixes.json index 63c3154..e8cc474 100644 --- a/data/stream_fixes.json +++ b/data/stream_fixes.json
@@ -25739,6 +25739,20 @@ "fixed_version": "5.5.7" } }, + "CVE-2020-36694": { + "4.19": { + "cmt_id": "98ab3ff5e789985ec8c24f813c7a989b445da084", + "fixed_version": "4.19.164" + }, + "5.10": { + "cmt_id": "cc00bcaa589914096edef7fb87ca5cee4a166b5c", + "fixed_version": "5.10" + }, + "5.4": { + "cmt_id": "b17244cebb24b30b886d46938cc5f798f7337574", + "fixed_version": "5.4.86" + } + }, "CVE-2020-3702": { "4.14": { "cmt_id": "2cbb22fd4b4fb4d0822d185bf5bd6d027107bfda", @@ -36137,6 +36151,12 @@ "fixed_version": "6.1.3" } }, + "CVE-2022-48425": { + "5.15": { + "cmt_id": "2a67f26f70ab344ae6ea78638890eebc1191a501", + "fixed_version": "5.15.113" + } + }, "CVE-2023-0045": { "5.10": { "cmt_id": "67e39c4f4cb318cfbbf8982ab016c649ed97edaf", @@ -37773,6 +37793,28 @@ "fixed_version": "6.1.2" } }, + "CVE-2023-28410": { + "5.10": { + "cmt_id": "89ddcc81914ab58cc203acc844f27d55ada8ec0e", + "fixed_version": "5.10.110" + }, + "5.15": { + "cmt_id": "312d3d4f49e12f97260bcf972c848c3562126a18", + "fixed_version": "5.15.33" + }, + "5.16": { + "cmt_id": "5f6e560e3e86ac053447524224e411034f41f5c7", + "fixed_version": "5.16.19" + }, + "5.17": { + "cmt_id": "8f0ebea8f6e8c474264ed97d7a64c9c09ed4f5aa", + "fixed_version": "5.17.2" + }, + "5.18": { + "cmt_id": "3886a86e7e6cc6ce2ce93c440fecd8f42aed0ce7", + "fixed_version": "5.18-rc1" + } + }, "CVE-2023-28466": { "5.10": { "cmt_id": "1fde5782f187daa05919d2bebd872df8ebcc00d1", @@ -37955,6 +37997,26 @@ "fixed_version": "6.2.15" } }, + "CVE-2023-32250": { + "6.1": { + "cmt_id": "f623f627ad2b1dc215ab3b0df53fb05cfd3a1c3b", + "fixed_version": "6.1.29" + }, + "6.2": { + "cmt_id": "d270631c21e68fb8016d6e231d022d7023a2df6f", + "fixed_version": "6.2.16" + } + }, + "CVE-2023-32254": { + "6.1": { + "cmt_id": "bd80d35725a0cf4df9307bfe2f1a3b2cb983d8e6", + "fixed_version": "6.1.28" + }, + "6.2": { + "cmt_id": "dc1c17716c099c90948ebb83e2170dd75a3be6b6", + "fixed_version": "6.2.15" + } + }, "CVE-2023-32269": { "4.14": { "cmt_id": "35d5bb094bc7529c15561289a1ea995f897bf2e6", @@ -38010,5 +38072,23 @@ "cmt_id": "514dc3d0f176d280dc2d3cd25e898a7ec329e878", "fixed_version": "6.2.9" } + }, + "CVE-2023-33288": { + "5.10": { + "cmt_id": "2b346876b93168541a45551d5f9abd1d26102e89", + "fixed_version": "5.10.177" + }, + "5.15": { + "cmt_id": "4ca3fd39c72efa250129d2af406c3bb56eec7dd9", + "fixed_version": "5.15.105" + }, + "6.1": { + "cmt_id": "84bdb3b76b07f2e62183913a1f5da2d4aa25580a", + "fixed_version": "6.1.22" + }, + "6.2": { + "cmt_id": "2da4b860f3055ae40a809c020398778e6c27b856", + "fixed_version": "6.2.9" + } } } \ No newline at end of file