Update 29Jun23 closes #336 closes #331 closes #329 closes #327 closes #325 closes #324 closes #323 [ci skip]
diff --git a/CHANGES.md b/CHANGES.md index 938f81f..50e1c14 100644 --- a/CHANGES.md +++ b/CHANGES.md
@@ -1,24 +1,50 @@ # **Linux Kernel CVE Changes** -## Last Update - 19Jul23 12:53 +## Last Update - 29Jul23 15:38 ### **New CVEs Added:** -[CVE-2023-21255](cves/CVE-2023-21255) -[CVE-2023-3106](cves/CVE-2023-3106) -[CVE-2023-3108](cves/CVE-2023-3108) +[CVE-2022-3533](cves/CVE-2022-3533) +[CVE-2022-3606](cves/CVE-2022-3606) +[CVE-2023-20593](cves/CVE-2023-20593) +[CVE-2023-3117](cves/CVE-2023-3117) +[CVE-2023-3609](cves/CVE-2023-3609) +[CVE-2023-3610](cves/CVE-2023-3610) +[CVE-2023-3611](cves/CVE-2023-3611) +[CVE-2023-3772](cves/CVE-2023-3772) +[CVE-2023-3773](cves/CVE-2023-3773) +[CVE-2023-3776](cves/CVE-2023-3776) +[CVE-2023-3812](cves/CVE-2023-3812) +[CVE-2023-3863](cves/CVE-2023-3863) + + +### **New Versions Checked:** + +[4.19.289](streams/4.19) +[5.10.188](streams/5.10) +[5.15.123](streams/5.15) +[5.4.251](streams/5.4) +[6.1.42](streams/6.1) +[6.4.7](streams/6.4) + + +### **Updated CVEs:** + +[CVE-2022-48502](cves/CVE-2022-48502) +[CVE-2023-2898](cves/CVE-2023-2898) +[CVE-2023-31248](cves/CVE-2023-31248) +[CVE-2023-3212](cves/CVE-2023-3212) [CVE-2023-32247](cves/CVE-2023-32247) [CVE-2023-32248](cves/CVE-2023-32248) +[CVE-2023-32250](cves/CVE-2023-32250) [CVE-2023-32252](cves/CVE-2023-32252) +[CVE-2023-32254](cves/CVE-2023-32254) [CVE-2023-32257](cves/CVE-2023-32257) [CVE-2023-32258](cves/CVE-2023-32258) -[CVE-2023-3567](cves/CVE-2023-3567) -[CVE-2023-35693](cves/CVE-2023-35693) -[CVE-2023-3640](cves/CVE-2023-3640) -[CVE-2023-37453](cves/CVE-2023-37453) -[CVE-2023-37454](cves/CVE-2023-37454) -[CVE-2023-38409](cves/CVE-2023-38409) +[CVE-2023-3269](cves/CVE-2023-3269) +[CVE-2023-3390](cves/CVE-2023-3390) +[CVE-2023-35001](cves/CVE-2023-35001) [CVE-2023-38426](cves/CVE-2023-38426) [CVE-2023-38427](cves/CVE-2023-38427) [CVE-2023-38428](cves/CVE-2023-38428) @@ -26,34 +52,16 @@ [CVE-2023-38430](cves/CVE-2023-38430) [CVE-2023-38431](cves/CVE-2023-38431) [CVE-2023-38432](cves/CVE-2023-38432) - - -### **New Versions Checked:** - -[6.3.13](streams/6.3) - - -### **Updated CVEs:** - -[CVE-2015-8966](cves/CVE-2015-8966) -[CVE-2022-3646](cves/CVE-2022-3646) -[CVE-2023-1192](cves/CVE-2023-1192) -[CVE-2023-2163](cves/CVE-2023-2163) -[CVE-2023-2898](cves/CVE-2023-2898) -[CVE-2023-31248](cves/CVE-2023-31248) -[CVE-2023-3269](cves/CVE-2023-3269) -[CVE-2023-3338](cves/CVE-2023-3338) -[CVE-2023-3355](cves/CVE-2023-3355) -[CVE-2023-35001](cves/CVE-2023-35001) [CVE-2023-0160](cves/CVE-2023-0160) -[CVE-2023-1206](cves/CVE-2023-1206) -[CVE-2023-1295](cves/CVE-2023-1295) -[CVE-2023-3090](cves/CVE-2023-3090) -[CVE-2023-32250](cves/CVE-2023-32250) -[CVE-2023-32254](cves/CVE-2023-32254) -[CVE-2023-3357](cves/CVE-2023-3357) -[CVE-2023-3358](cves/CVE-2023-3358) -[CVE-2023-3359](cves/CVE-2023-3359) -[CVE-2023-3389](cves/CVE-2023-3389) -[CVE-2023-3390](cves/CVE-2023-3390) -[CVE-2023-3439](cves/CVE-2023-3439) +[CVE-2023-21255](cves/CVE-2023-21255) +[CVE-2023-2430](cves/CVE-2023-2430) +[CVE-2023-2860](cves/CVE-2023-2860) +[CVE-2023-3106](cves/CVE-2023-3106) +[CVE-2023-3108](cves/CVE-2023-3108) +[CVE-2023-3338](cves/CVE-2023-3338) +[CVE-2023-33951](cves/CVE-2023-33951) +[CVE-2023-33952](cves/CVE-2023-33952) +[CVE-2023-3567](cves/CVE-2023-3567) +[CVE-2023-35693](cves/CVE-2023-35693) +[CVE-2023-3640](cves/CVE-2023-3640) +[CVE-2023-38409](cves/CVE-2023-38409)
diff --git a/data/3.12/3.12_CVEs.txt b/data/3.12/3.12_CVEs.txt index ca6a2f1..91d6ce0 100644 --- a/data/3.12/3.12_CVEs.txt +++ b/data/3.12/3.12_CVEs.txt
@@ -1178,6 +1178,7 @@ CVE-2022-3522: Fix not seen in stream CVE-2022-3523: Fix not seen in stream CVE-2022-3524: Fix not seen in stream +CVE-2022-3533: Fix unknown CVE-2022-3534: Fix not seen in stream CVE-2022-3545: Fix not seen in stream CVE-2022-3564: Fix not seen in stream @@ -1187,6 +1188,7 @@ CVE-2022-3586: Fix not seen in stream CVE-2022-3594: Fix not seen in stream CVE-2022-3595: Fix not seen in stream +CVE-2022-3606: Fix unknown CVE-2022-36123: Fix not seen in stream CVE-2022-3621: Fix not seen in stream CVE-2022-3624: Fix not seen in stream @@ -1228,7 +1230,6 @@ CVE-2022-45934: Fix not seen in stream CVE-2022-4662: Fix not seen in stream CVE-2022-4744: Fix not seen in stream -CVE-2022-48502: Fix not seen in stream CVE-2023-0030: Fix not seen in stream CVE-2023-0047: Fix not seen in stream CVE-2023-0160: Fix unknown @@ -1253,6 +1254,7 @@ CVE-2023-1838: Fix not seen in stream CVE-2023-1989: Fix not seen in stream CVE-2023-2007: Fix not seen in stream +CVE-2023-20593: Fix not seen in stream CVE-2023-20941: Fix unknown CVE-2023-2124: Fix not seen in stream CVE-2023-2162: Fix not seen in stream @@ -1286,13 +1288,6 @@ CVE-2023-3161: Fix not seen in stream CVE-2023-3212: Fix not seen in stream CVE-2023-32233: Fix not seen in stream -CVE-2023-32247: Fix not seen in stream -CVE-2023-32248: Fix not seen in stream -CVE-2023-32250: Fix not seen in stream -CVE-2023-32252: Fix not seen in stream -CVE-2023-32254: Fix not seen in stream -CVE-2023-32257: Fix not seen in stream -CVE-2023-32258: Fix not seen in stream CVE-2023-32269: Fix not seen in stream CVE-2023-3268: Fix not seen in stream CVE-2023-33288: Fix not seen in stream @@ -1301,16 +1296,14 @@ CVE-2023-34255: Fix not seen in stream CVE-2023-34256: Fix not seen in stream CVE-2023-3567: Fix not seen in stream -CVE-2023-35693: Fix unknown CVE-2023-35824: Fix not seen in stream CVE-2023-35827: Fix unknown +CVE-2023-3611: Fix not seen in stream CVE-2023-3640: Fix unknown CVE-2023-37453: Fix unknown CVE-2023-37454: Fix unknown -CVE-2023-38426: Fix not seen in stream -CVE-2023-38427: Fix not seen in stream -CVE-2023-38428: Fix not seen in stream -CVE-2023-38429: Fix not seen in stream -CVE-2023-38430: Fix not seen in stream -CVE-2023-38431: Fix not seen in stream -CVE-2023-38432: Fix not seen in stream +CVE-2023-3772: Fix unknown +CVE-2023-3773: Fix unknown +CVE-2023-3776: Fix not seen in stream +CVE-2023-3812: Fix not seen in stream +CVE-2023-3863: Fix not seen in stream
diff --git a/data/3.12/3.12_security.txt b/data/3.12/3.12_security.txt index fe6bcaa..50617ca 100644 --- a/data/3.12/3.12_security.txt +++ b/data/3.12/3.12_security.txt
@@ -1316,6 +1316,7 @@ CVE-2022-3522: (unk) mm/hugetlb: use hugetlb_pte_stable in migration race check CVE-2022-3523: (unk) mm/memory.c: fix race when faulting a device private page CVE-2022-3524: (unk) tcp/udp: Fix memory leak in ipv6_renew_options(). + CVE-2022-3533: (unk) CVE-2022-3534: (unk) libbpf: Fix use-after-free in btf_dump_name_dups CVE-2022-3545: (unk) nfp: fix use-after-free in area_cache_get() CVE-2022-3564: (unk) Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu @@ -1325,6 +1326,7 @@ CVE-2022-3586: (unk) sch_sfb: Don't assume the skb is still around after enqueueing to child CVE-2022-3594: (unk) r8152: Rate limit overflow messages CVE-2022-3595: (unk) cifs: fix double-fault crash during ntlmssp + CVE-2022-3606: (unk) CVE-2022-36123: (unk) x86: Clear .brk area at early boot CVE-2022-3621: (unk) nilfs2: fix NULL pointer dereference at nilfs_bmap_lookup_at_level() CVE-2022-3624: (unk) bonding: fix reference count leak in balance-alb mode @@ -1366,7 +1368,6 @@ CVE-2022-45934: (unk) Bluetooth: L2CAP: Fix u8 overflow CVE-2022-4662: (unk) USB: core: Prevent nested device-reset calls CVE-2022-4744: (unk) tun: avoid double free in tun_free_netdev - CVE-2022-48502: (unk) fs/ntfs3: Check fields while reading CVE-2023-0030: (unk) drm/nouveau/mmu: add more general vmm free/node handling functions CVE-2023-0047: (unk) mm, oom: do not trigger out_of_memory from the #PF CVE-2023-0160: (unk) @@ -1391,6 +1392,7 @@ CVE-2023-1838: (unk) Fix double fget() in vhost_net_set_backend() CVE-2023-1989: (unk) Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work CVE-2023-2007: (unk) scsi: dpt_i2o: Remove obsolete driver + CVE-2023-20593: (unk) x86/cpu/amd: Add a Zenbleed fix CVE-2023-20941: (unk) CVE-2023-2124: (unk) xfs: verify buffer contents when we skip log replay CVE-2023-2162: (unk) scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress @@ -1424,13 +1426,6 @@ CVE-2023-3161: (unk) fbcon: Check font dimension limits CVE-2023-3212: (unk) gfs2: Don't deref jdesc in evict CVE-2023-32233: (unk) netfilter: nf_tables: deactivate anonymous set from preparation phase - CVE-2023-32247: (unk) ksmbd: destroy expired sessions - CVE-2023-32248: (unk) ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem() - CVE-2023-32250: (unk) ksmbd: fix racy issue from session setup and logoff - CVE-2023-32252: (unk) ksmbd: fix racy issue from session setup and logoff - CVE-2023-32254: (unk) ksmbd: fix racy issue under cocurrent smb2 tree disconnect - CVE-2023-32257: (unk) ksmbd: fix racy issue from session setup and logoff - CVE-2023-32258: (unk) ksmbd: fix racy issue from smb2 close and logoff with multichannel CVE-2023-32269: (unk) netrom: Fix use-after-free caused by accept on already connected socket CVE-2023-3268: (unk) relayfs: fix out-of-bounds access in relay_file_read CVE-2023-33288: (unk) power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition @@ -1439,16 +1434,14 @@ CVE-2023-34255: (unk) xfs: verify buffer contents when we skip log replay CVE-2023-34256: (unk) ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum CVE-2023-3567: (unk) vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF - CVE-2023-35693: (unk) CVE-2023-35824: (unk) media: dm1105: Fix use after free bug in dm1105_remove due to race condition CVE-2023-35827: (unk) + CVE-2023-3611: (unk) net/sched: sch_qfq: account for stab overhead in qfq_enqueue CVE-2023-3640: (unk) CVE-2023-37453: (unk) CVE-2023-37454: (unk) - CVE-2023-38426: (unk) ksmbd: fix global-out-of-bounds in smb2_find_context_vals - CVE-2023-38427: (unk) ksmbd: fix out-of-bound read in deassemble_neg_contexts() - CVE-2023-38428: (unk) ksmbd: fix wrong UserName check in session_user - CVE-2023-38429: (unk) ksmbd: allocate one more byte for implied bcc[0] - CVE-2023-38430: (unk) ksmbd: validate smb request protocol id - CVE-2023-38431: (unk) ksmbd: check the validation of pdu_size in ksmbd_conn_handler_loop - CVE-2023-38432: (unk) ksmbd: validate command payload size + CVE-2023-3772: (unk) + CVE-2023-3773: (unk) + CVE-2023-3776: (unk) net/sched: cls_fw: Fix improper refcount update leads to use-after-free + CVE-2023-3812: (unk) net: tun: fix bugs for oversize packet when napi frags enabled + CVE-2023-3863: (unk) net: nfc: Fix use-after-free caused by nfc_llcp_find_local
diff --git a/data/3.14/3.14_CVEs.txt b/data/3.14/3.14_CVEs.txt index bbbd463..18add6f 100644 --- a/data/3.14/3.14_CVEs.txt +++ b/data/3.14/3.14_CVEs.txt
@@ -1147,6 +1147,7 @@ CVE-2022-3522: Fix not seen in stream CVE-2022-3523: Fix not seen in stream CVE-2022-3524: Fix not seen in stream +CVE-2022-3533: Fix unknown CVE-2022-3534: Fix not seen in stream CVE-2022-3545: Fix not seen in stream CVE-2022-3564: Fix not seen in stream @@ -1156,6 +1157,7 @@ CVE-2022-3586: Fix not seen in stream CVE-2022-3594: Fix not seen in stream CVE-2022-3595: Fix not seen in stream +CVE-2022-3606: Fix unknown CVE-2022-36123: Fix not seen in stream CVE-2022-3621: Fix not seen in stream CVE-2022-3624: Fix not seen in stream @@ -1197,7 +1199,6 @@ CVE-2022-45934: Fix not seen in stream CVE-2022-4662: Fix not seen in stream CVE-2022-4744: Fix not seen in stream -CVE-2022-48502: Fix not seen in stream CVE-2023-0030: Fix not seen in stream CVE-2023-0047: Fix not seen in stream CVE-2023-0160: Fix unknown @@ -1222,6 +1223,7 @@ CVE-2023-1838: Fix not seen in stream CVE-2023-1989: Fix not seen in stream CVE-2023-2007: Fix not seen in stream +CVE-2023-20593: Fix not seen in stream CVE-2023-20941: Fix unknown CVE-2023-2124: Fix not seen in stream CVE-2023-2162: Fix not seen in stream @@ -1255,13 +1257,6 @@ CVE-2023-3161: Fix not seen in stream CVE-2023-3212: Fix not seen in stream CVE-2023-32233: Fix not seen in stream -CVE-2023-32247: Fix not seen in stream -CVE-2023-32248: Fix not seen in stream -CVE-2023-32250: Fix not seen in stream -CVE-2023-32252: Fix not seen in stream -CVE-2023-32254: Fix not seen in stream -CVE-2023-32257: Fix not seen in stream -CVE-2023-32258: Fix not seen in stream CVE-2023-32269: Fix not seen in stream CVE-2023-3268: Fix not seen in stream CVE-2023-33288: Fix not seen in stream @@ -1271,16 +1266,14 @@ CVE-2023-34256: Fix not seen in stream CVE-2023-35001: Fix not seen in stream CVE-2023-3567: Fix not seen in stream -CVE-2023-35693: Fix unknown CVE-2023-35824: Fix not seen in stream CVE-2023-35827: Fix unknown +CVE-2023-3611: Fix not seen in stream CVE-2023-3640: Fix unknown CVE-2023-37453: Fix unknown CVE-2023-37454: Fix unknown -CVE-2023-38426: Fix not seen in stream -CVE-2023-38427: Fix not seen in stream -CVE-2023-38428: Fix not seen in stream -CVE-2023-38429: Fix not seen in stream -CVE-2023-38430: Fix not seen in stream -CVE-2023-38431: Fix not seen in stream -CVE-2023-38432: Fix not seen in stream +CVE-2023-3772: Fix unknown +CVE-2023-3773: Fix unknown +CVE-2023-3776: Fix not seen in stream +CVE-2023-3812: Fix not seen in stream +CVE-2023-3863: Fix not seen in stream
diff --git a/data/3.14/3.14_security.txt b/data/3.14/3.14_security.txt index b14f91f..c4b3aff 100644 --- a/data/3.14/3.14_security.txt +++ b/data/3.14/3.14_security.txt
@@ -1281,6 +1281,7 @@ CVE-2022-3522: (unk) mm/hugetlb: use hugetlb_pte_stable in migration race check CVE-2022-3523: (unk) mm/memory.c: fix race when faulting a device private page CVE-2022-3524: (unk) tcp/udp: Fix memory leak in ipv6_renew_options(). + CVE-2022-3533: (unk) CVE-2022-3534: (unk) libbpf: Fix use-after-free in btf_dump_name_dups CVE-2022-3545: (unk) nfp: fix use-after-free in area_cache_get() CVE-2022-3564: (unk) Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu @@ -1290,6 +1291,7 @@ CVE-2022-3586: (unk) sch_sfb: Don't assume the skb is still around after enqueueing to child CVE-2022-3594: (unk) r8152: Rate limit overflow messages CVE-2022-3595: (unk) cifs: fix double-fault crash during ntlmssp + CVE-2022-3606: (unk) CVE-2022-36123: (unk) x86: Clear .brk area at early boot CVE-2022-3621: (unk) nilfs2: fix NULL pointer dereference at nilfs_bmap_lookup_at_level() CVE-2022-3624: (unk) bonding: fix reference count leak in balance-alb mode @@ -1331,7 +1333,6 @@ CVE-2022-45934: (unk) Bluetooth: L2CAP: Fix u8 overflow CVE-2022-4662: (unk) USB: core: Prevent nested device-reset calls CVE-2022-4744: (unk) tun: avoid double free in tun_free_netdev - CVE-2022-48502: (unk) fs/ntfs3: Check fields while reading CVE-2023-0030: (unk) drm/nouveau/mmu: add more general vmm free/node handling functions CVE-2023-0047: (unk) mm, oom: do not trigger out_of_memory from the #PF CVE-2023-0160: (unk) @@ -1356,6 +1357,7 @@ CVE-2023-1838: (unk) Fix double fget() in vhost_net_set_backend() CVE-2023-1989: (unk) Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work CVE-2023-2007: (unk) scsi: dpt_i2o: Remove obsolete driver + CVE-2023-20593: (unk) x86/cpu/amd: Add a Zenbleed fix CVE-2023-20941: (unk) CVE-2023-2124: (unk) xfs: verify buffer contents when we skip log replay CVE-2023-2162: (unk) scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress @@ -1389,13 +1391,6 @@ CVE-2023-3161: (unk) fbcon: Check font dimension limits CVE-2023-3212: (unk) gfs2: Don't deref jdesc in evict CVE-2023-32233: (unk) netfilter: nf_tables: deactivate anonymous set from preparation phase - CVE-2023-32247: (unk) ksmbd: destroy expired sessions - CVE-2023-32248: (unk) ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem() - CVE-2023-32250: (unk) ksmbd: fix racy issue from session setup and logoff - CVE-2023-32252: (unk) ksmbd: fix racy issue from session setup and logoff - CVE-2023-32254: (unk) ksmbd: fix racy issue under cocurrent smb2 tree disconnect - CVE-2023-32257: (unk) ksmbd: fix racy issue from session setup and logoff - CVE-2023-32258: (unk) ksmbd: fix racy issue from smb2 close and logoff with multichannel CVE-2023-32269: (unk) netrom: Fix use-after-free caused by accept on already connected socket CVE-2023-3268: (unk) relayfs: fix out-of-bounds access in relay_file_read CVE-2023-33288: (unk) power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition @@ -1405,16 +1400,14 @@ CVE-2023-34256: (unk) ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum CVE-2023-35001: (unk) netfilter: nf_tables: prevent OOB access in nft_byteorder_eval CVE-2023-3567: (unk) vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF - CVE-2023-35693: (unk) CVE-2023-35824: (unk) media: dm1105: Fix use after free bug in dm1105_remove due to race condition CVE-2023-35827: (unk) + CVE-2023-3611: (unk) net/sched: sch_qfq: account for stab overhead in qfq_enqueue CVE-2023-3640: (unk) CVE-2023-37453: (unk) CVE-2023-37454: (unk) - CVE-2023-38426: (unk) ksmbd: fix global-out-of-bounds in smb2_find_context_vals - CVE-2023-38427: (unk) ksmbd: fix out-of-bound read in deassemble_neg_contexts() - CVE-2023-38428: (unk) ksmbd: fix wrong UserName check in session_user - CVE-2023-38429: (unk) ksmbd: allocate one more byte for implied bcc[0] - CVE-2023-38430: (unk) ksmbd: validate smb request protocol id - CVE-2023-38431: (unk) ksmbd: check the validation of pdu_size in ksmbd_conn_handler_loop - CVE-2023-38432: (unk) ksmbd: validate command payload size + CVE-2023-3772: (unk) + CVE-2023-3773: (unk) + CVE-2023-3776: (unk) net/sched: cls_fw: Fix improper refcount update leads to use-after-free + CVE-2023-3812: (unk) net: tun: fix bugs for oversize packet when napi frags enabled + CVE-2023-3863: (unk) net: nfc: Fix use-after-free caused by nfc_llcp_find_local
diff --git a/data/3.16/3.16_CVEs.txt b/data/3.16/3.16_CVEs.txt index 9e87460..66f2df5 100644 --- a/data/3.16/3.16_CVEs.txt +++ b/data/3.16/3.16_CVEs.txt
@@ -1132,6 +1132,7 @@ CVE-2022-3522: Fix not seen in stream CVE-2022-3523: Fix not seen in stream CVE-2022-3524: Fix not seen in stream +CVE-2022-3533: Fix unknown CVE-2022-3534: Fix not seen in stream CVE-2022-3542: Fix not seen in stream CVE-2022-3545: Fix not seen in stream @@ -1142,6 +1143,7 @@ CVE-2022-3586: Fix not seen in stream CVE-2022-3594: Fix not seen in stream CVE-2022-3595: Fix not seen in stream +CVE-2022-3606: Fix unknown CVE-2022-36123: Fix not seen in stream CVE-2022-3621: Fix not seen in stream CVE-2022-3624: Fix not seen in stream @@ -1183,7 +1185,6 @@ CVE-2022-45934: Fix not seen in stream CVE-2022-4662: Fix not seen in stream CVE-2022-4744: Fix not seen in stream -CVE-2022-48502: Fix not seen in stream CVE-2023-0030: Fix not seen in stream CVE-2023-0047: Fix not seen in stream CVE-2023-0160: Fix unknown @@ -1210,6 +1211,7 @@ CVE-2023-1838: Fix not seen in stream CVE-2023-1989: Fix not seen in stream CVE-2023-2007: Fix not seen in stream +CVE-2023-20593: Fix not seen in stream CVE-2023-20941: Fix unknown CVE-2023-2124: Fix not seen in stream CVE-2023-2162: Fix not seen in stream @@ -1238,19 +1240,13 @@ CVE-2023-31084: Fix not seen in stream CVE-2023-31085: Fix unknown CVE-2023-3111: Fix not seen in stream +CVE-2023-3117: Fix not seen in stream CVE-2023-3141: Fix not seen in stream CVE-2023-31436: Fix not seen in stream CVE-2023-3159: Fix not seen in stream CVE-2023-3161: Fix not seen in stream CVE-2023-3212: Fix not seen in stream CVE-2023-32233: Fix not seen in stream -CVE-2023-32247: Fix not seen in stream -CVE-2023-32248: Fix not seen in stream -CVE-2023-32250: Fix not seen in stream -CVE-2023-32252: Fix not seen in stream -CVE-2023-32254: Fix not seen in stream -CVE-2023-32257: Fix not seen in stream -CVE-2023-32258: Fix not seen in stream CVE-2023-32269: Fix not seen in stream CVE-2023-3268: Fix not seen in stream CVE-2023-33288: Fix not seen in stream @@ -1261,16 +1257,14 @@ CVE-2023-34256: Fix not seen in stream CVE-2023-35001: Fix not seen in stream CVE-2023-3567: Fix not seen in stream -CVE-2023-35693: Fix unknown CVE-2023-35824: Fix not seen in stream CVE-2023-35827: Fix unknown +CVE-2023-3611: Fix not seen in stream CVE-2023-3640: Fix unknown CVE-2023-37453: Fix unknown CVE-2023-37454: Fix unknown -CVE-2023-38426: Fix not seen in stream -CVE-2023-38427: Fix not seen in stream -CVE-2023-38428: Fix not seen in stream -CVE-2023-38429: Fix not seen in stream -CVE-2023-38430: Fix not seen in stream -CVE-2023-38431: Fix not seen in stream -CVE-2023-38432: Fix not seen in stream +CVE-2023-3772: Fix unknown +CVE-2023-3773: Fix unknown +CVE-2023-3776: Fix not seen in stream +CVE-2023-3812: Fix not seen in stream +CVE-2023-3863: Fix not seen in stream
diff --git a/data/3.16/3.16_security.txt b/data/3.16/3.16_security.txt index 297bce9..d58f8eb 100644 --- a/data/3.16/3.16_security.txt +++ b/data/3.16/3.16_security.txt
@@ -1239,6 +1239,7 @@ CVE-2022-3522: (unk) mm/hugetlb: use hugetlb_pte_stable in migration race check CVE-2022-3523: (unk) mm/memory.c: fix race when faulting a device private page CVE-2022-3524: (unk) tcp/udp: Fix memory leak in ipv6_renew_options(). + CVE-2022-3533: (unk) CVE-2022-3534: (unk) libbpf: Fix use-after-free in btf_dump_name_dups CVE-2022-3542: (unk) bnx2x: fix potential memory leak in bnx2x_tpa_stop() CVE-2022-3545: (unk) nfp: fix use-after-free in area_cache_get() @@ -1249,6 +1250,7 @@ CVE-2022-3586: (unk) sch_sfb: Don't assume the skb is still around after enqueueing to child CVE-2022-3594: (unk) r8152: Rate limit overflow messages CVE-2022-3595: (unk) cifs: fix double-fault crash during ntlmssp + CVE-2022-3606: (unk) CVE-2022-36123: (unk) x86: Clear .brk area at early boot CVE-2022-3621: (unk) nilfs2: fix NULL pointer dereference at nilfs_bmap_lookup_at_level() CVE-2022-3624: (unk) bonding: fix reference count leak in balance-alb mode @@ -1290,7 +1292,6 @@ CVE-2022-45934: (unk) Bluetooth: L2CAP: Fix u8 overflow CVE-2022-4662: (unk) USB: core: Prevent nested device-reset calls CVE-2022-4744: (unk) tun: avoid double free in tun_free_netdev - CVE-2022-48502: (unk) fs/ntfs3: Check fields while reading CVE-2023-0030: (unk) drm/nouveau/mmu: add more general vmm free/node handling functions CVE-2023-0047: (unk) mm, oom: do not trigger out_of_memory from the #PF CVE-2023-0160: (unk) @@ -1317,6 +1318,7 @@ CVE-2023-1838: (unk) Fix double fget() in vhost_net_set_backend() CVE-2023-1989: (unk) Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work CVE-2023-2007: (unk) scsi: dpt_i2o: Remove obsolete driver + CVE-2023-20593: (unk) x86/cpu/amd: Add a Zenbleed fix CVE-2023-20941: (unk) CVE-2023-2124: (unk) xfs: verify buffer contents when we skip log replay CVE-2023-2162: (unk) scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress @@ -1344,19 +1346,13 @@ CVE-2023-31084: (unk) media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() CVE-2023-31085: (unk) CVE-2023-3111: (unk) btrfs: unset reloc control if transaction commit fails in prepare_to_relocate() + CVE-2023-3117: (unk) netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE CVE-2023-3141: (unk) memstick: r592: Fix UAF bug in r592_remove due to race condition CVE-2023-31436: (unk) net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg CVE-2023-3159: (unk) firewire: fix potential uaf in outbound_phy_packet_callback() CVE-2023-3161: (unk) fbcon: Check font dimension limits CVE-2023-3212: (unk) gfs2: Don't deref jdesc in evict CVE-2023-32233: (unk) netfilter: nf_tables: deactivate anonymous set from preparation phase - CVE-2023-32247: (unk) ksmbd: destroy expired sessions - CVE-2023-32248: (unk) ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem() - CVE-2023-32250: (unk) ksmbd: fix racy issue from session setup and logoff - CVE-2023-32252: (unk) ksmbd: fix racy issue from session setup and logoff - CVE-2023-32254: (unk) ksmbd: fix racy issue under cocurrent smb2 tree disconnect - CVE-2023-32257: (unk) ksmbd: fix racy issue from session setup and logoff - CVE-2023-32258: (unk) ksmbd: fix racy issue from smb2 close and logoff with multichannel CVE-2023-32269: (unk) netrom: Fix use-after-free caused by accept on already connected socket CVE-2023-3268: (unk) relayfs: fix out-of-bounds access in relay_file_read CVE-2023-33288: (unk) power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition @@ -1367,16 +1363,14 @@ CVE-2023-34256: (unk) ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum CVE-2023-35001: (unk) netfilter: nf_tables: prevent OOB access in nft_byteorder_eval CVE-2023-3567: (unk) vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF - CVE-2023-35693: (unk) CVE-2023-35824: (unk) media: dm1105: Fix use after free bug in dm1105_remove due to race condition CVE-2023-35827: (unk) + CVE-2023-3611: (unk) net/sched: sch_qfq: account for stab overhead in qfq_enqueue CVE-2023-3640: (unk) CVE-2023-37453: (unk) CVE-2023-37454: (unk) - CVE-2023-38426: (unk) ksmbd: fix global-out-of-bounds in smb2_find_context_vals - CVE-2023-38427: (unk) ksmbd: fix out-of-bound read in deassemble_neg_contexts() - CVE-2023-38428: (unk) ksmbd: fix wrong UserName check in session_user - CVE-2023-38429: (unk) ksmbd: allocate one more byte for implied bcc[0] - CVE-2023-38430: (unk) ksmbd: validate smb request protocol id - CVE-2023-38431: (unk) ksmbd: check the validation of pdu_size in ksmbd_conn_handler_loop - CVE-2023-38432: (unk) ksmbd: validate command payload size + CVE-2023-3772: (unk) + CVE-2023-3773: (unk) + CVE-2023-3776: (unk) net/sched: cls_fw: Fix improper refcount update leads to use-after-free + CVE-2023-3812: (unk) net: tun: fix bugs for oversize packet when napi frags enabled + CVE-2023-3863: (unk) net: nfc: Fix use-after-free caused by nfc_llcp_find_local
diff --git a/data/3.18/3.18_CVEs.txt b/data/3.18/3.18_CVEs.txt index 27143ea..06e9633 100644 --- a/data/3.18/3.18_CVEs.txt +++ b/data/3.18/3.18_CVEs.txt
@@ -1117,6 +1117,7 @@ CVE-2022-3522: Fix not seen in stream CVE-2022-3523: Fix not seen in stream CVE-2022-3524: Fix not seen in stream +CVE-2022-3533: Fix unknown CVE-2022-3534: Fix not seen in stream CVE-2022-3542: Fix not seen in stream CVE-2022-3545: Fix not seen in stream @@ -1127,6 +1128,7 @@ CVE-2022-3586: Fix not seen in stream CVE-2022-3594: Fix not seen in stream CVE-2022-3595: Fix not seen in stream +CVE-2022-3606: Fix unknown CVE-2022-36123: Fix not seen in stream CVE-2022-3621: Fix not seen in stream CVE-2022-3624: Fix not seen in stream @@ -1168,7 +1170,6 @@ CVE-2022-45934: Fix not seen in stream CVE-2022-4662: Fix not seen in stream CVE-2022-4744: Fix not seen in stream -CVE-2022-48502: Fix not seen in stream CVE-2023-0030: Fix not seen in stream CVE-2023-0047: Fix not seen in stream CVE-2023-0160: Fix unknown @@ -1197,6 +1198,7 @@ CVE-2023-1989: Fix not seen in stream CVE-2023-1990: Fix not seen in stream CVE-2023-2007: Fix not seen in stream +CVE-2023-20593: Fix not seen in stream CVE-2023-20941: Fix unknown CVE-2023-2124: Fix not seen in stream CVE-2023-2162: Fix not seen in stream @@ -1225,19 +1227,13 @@ CVE-2023-31084: Fix not seen in stream CVE-2023-31085: Fix unknown CVE-2023-3111: Fix not seen in stream +CVE-2023-3117: Fix not seen in stream CVE-2023-3141: Fix not seen in stream CVE-2023-31436: Fix not seen in stream CVE-2023-3159: Fix not seen in stream CVE-2023-3161: Fix not seen in stream CVE-2023-3212: Fix not seen in stream CVE-2023-32233: Fix not seen in stream -CVE-2023-32247: Fix not seen in stream -CVE-2023-32248: Fix not seen in stream -CVE-2023-32250: Fix not seen in stream -CVE-2023-32252: Fix not seen in stream -CVE-2023-32254: Fix not seen in stream -CVE-2023-32257: Fix not seen in stream -CVE-2023-32258: Fix not seen in stream CVE-2023-32269: Fix not seen in stream CVE-2023-3268: Fix not seen in stream CVE-2023-33288: Fix not seen in stream @@ -1248,16 +1244,14 @@ CVE-2023-34256: Fix not seen in stream CVE-2023-35001: Fix not seen in stream CVE-2023-3567: Fix not seen in stream -CVE-2023-35693: Fix unknown CVE-2023-35824: Fix not seen in stream CVE-2023-35827: Fix unknown +CVE-2023-3611: Fix not seen in stream CVE-2023-3640: Fix unknown CVE-2023-37453: Fix unknown CVE-2023-37454: Fix unknown -CVE-2023-38426: Fix not seen in stream -CVE-2023-38427: Fix not seen in stream -CVE-2023-38428: Fix not seen in stream -CVE-2023-38429: Fix not seen in stream -CVE-2023-38430: Fix not seen in stream -CVE-2023-38431: Fix not seen in stream -CVE-2023-38432: Fix not seen in stream +CVE-2023-3772: Fix unknown +CVE-2023-3773: Fix unknown +CVE-2023-3776: Fix not seen in stream +CVE-2023-3812: Fix not seen in stream +CVE-2023-3863: Fix not seen in stream
diff --git a/data/3.18/3.18_security.txt b/data/3.18/3.18_security.txt index 47609d3..0f31519 100644 --- a/data/3.18/3.18_security.txt +++ b/data/3.18/3.18_security.txt
@@ -1353,6 +1353,7 @@ CVE-2022-3522: (unk) mm/hugetlb: use hugetlb_pte_stable in migration race check CVE-2022-3523: (unk) mm/memory.c: fix race when faulting a device private page CVE-2022-3524: (unk) tcp/udp: Fix memory leak in ipv6_renew_options(). + CVE-2022-3533: (unk) CVE-2022-3534: (unk) libbpf: Fix use-after-free in btf_dump_name_dups CVE-2022-3542: (unk) bnx2x: fix potential memory leak in bnx2x_tpa_stop() CVE-2022-3545: (unk) nfp: fix use-after-free in area_cache_get() @@ -1363,6 +1364,7 @@ CVE-2022-3586: (unk) sch_sfb: Don't assume the skb is still around after enqueueing to child CVE-2022-3594: (unk) r8152: Rate limit overflow messages CVE-2022-3595: (unk) cifs: fix double-fault crash during ntlmssp + CVE-2022-3606: (unk) CVE-2022-36123: (unk) x86: Clear .brk area at early boot CVE-2022-3621: (unk) nilfs2: fix NULL pointer dereference at nilfs_bmap_lookup_at_level() CVE-2022-3624: (unk) bonding: fix reference count leak in balance-alb mode @@ -1404,7 +1406,6 @@ CVE-2022-45934: (unk) Bluetooth: L2CAP: Fix u8 overflow CVE-2022-4662: (unk) USB: core: Prevent nested device-reset calls CVE-2022-4744: (unk) tun: avoid double free in tun_free_netdev - CVE-2022-48502: (unk) fs/ntfs3: Check fields while reading CVE-2023-0030: (unk) drm/nouveau/mmu: add more general vmm free/node handling functions CVE-2023-0047: (unk) mm, oom: do not trigger out_of_memory from the #PF CVE-2023-0160: (unk) @@ -1433,6 +1434,7 @@ CVE-2023-1989: (unk) Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work CVE-2023-1990: (unk) nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition CVE-2023-2007: (unk) scsi: dpt_i2o: Remove obsolete driver + CVE-2023-20593: (unk) x86/cpu/amd: Add a Zenbleed fix CVE-2023-20941: (unk) CVE-2023-2124: (unk) xfs: verify buffer contents when we skip log replay CVE-2023-2162: (unk) scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress @@ -1461,19 +1463,13 @@ CVE-2023-31084: (unk) media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() CVE-2023-31085: (unk) CVE-2023-3111: (unk) btrfs: unset reloc control if transaction commit fails in prepare_to_relocate() + CVE-2023-3117: (unk) netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE CVE-2023-3141: (unk) memstick: r592: Fix UAF bug in r592_remove due to race condition CVE-2023-31436: (unk) net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg CVE-2023-3159: (unk) firewire: fix potential uaf in outbound_phy_packet_callback() CVE-2023-3161: (unk) fbcon: Check font dimension limits CVE-2023-3212: (unk) gfs2: Don't deref jdesc in evict CVE-2023-32233: (unk) netfilter: nf_tables: deactivate anonymous set from preparation phase - CVE-2023-32247: (unk) ksmbd: destroy expired sessions - CVE-2023-32248: (unk) ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem() - CVE-2023-32250: (unk) ksmbd: fix racy issue from session setup and logoff - CVE-2023-32252: (unk) ksmbd: fix racy issue from session setup and logoff - CVE-2023-32254: (unk) ksmbd: fix racy issue under cocurrent smb2 tree disconnect - CVE-2023-32257: (unk) ksmbd: fix racy issue from session setup and logoff - CVE-2023-32258: (unk) ksmbd: fix racy issue from smb2 close and logoff with multichannel CVE-2023-32269: (unk) netrom: Fix use-after-free caused by accept on already connected socket CVE-2023-3268: (unk) relayfs: fix out-of-bounds access in relay_file_read CVE-2023-33288: (unk) power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition @@ -1484,16 +1480,14 @@ CVE-2023-34256: (unk) ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum CVE-2023-35001: (unk) netfilter: nf_tables: prevent OOB access in nft_byteorder_eval CVE-2023-3567: (unk) vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF - CVE-2023-35693: (unk) CVE-2023-35824: (unk) media: dm1105: Fix use after free bug in dm1105_remove due to race condition CVE-2023-35827: (unk) + CVE-2023-3611: (unk) net/sched: sch_qfq: account for stab overhead in qfq_enqueue CVE-2023-3640: (unk) CVE-2023-37453: (unk) CVE-2023-37454: (unk) - CVE-2023-38426: (unk) ksmbd: fix global-out-of-bounds in smb2_find_context_vals - CVE-2023-38427: (unk) ksmbd: fix out-of-bound read in deassemble_neg_contexts() - CVE-2023-38428: (unk) ksmbd: fix wrong UserName check in session_user - CVE-2023-38429: (unk) ksmbd: allocate one more byte for implied bcc[0] - CVE-2023-38430: (unk) ksmbd: validate smb request protocol id - CVE-2023-38431: (unk) ksmbd: check the validation of pdu_size in ksmbd_conn_handler_loop - CVE-2023-38432: (unk) ksmbd: validate command payload size + CVE-2023-3772: (unk) + CVE-2023-3773: (unk) + CVE-2023-3776: (unk) net/sched: cls_fw: Fix improper refcount update leads to use-after-free + CVE-2023-3812: (unk) net: tun: fix bugs for oversize packet when napi frags enabled + CVE-2023-3863: (unk) net: nfc: Fix use-after-free caused by nfc_llcp_find_local
diff --git a/data/3.2/3.2_CVEs.txt b/data/3.2/3.2_CVEs.txt index f32d021..1bc6fa2 100644 --- a/data/3.2/3.2_CVEs.txt +++ b/data/3.2/3.2_CVEs.txt
@@ -1154,6 +1154,7 @@ CVE-2022-3522: Fix not seen in stream CVE-2022-3523: Fix not seen in stream CVE-2022-3524: Fix not seen in stream +CVE-2022-3533: Fix unknown CVE-2022-3534: Fix not seen in stream CVE-2022-3545: Fix not seen in stream CVE-2022-3565: Fix not seen in stream @@ -1161,6 +1162,7 @@ CVE-2022-3567: Fix not seen in stream CVE-2022-3586: Fix not seen in stream CVE-2022-3595: Fix not seen in stream +CVE-2022-3606: Fix unknown CVE-2022-36123: Fix not seen in stream CVE-2022-3621: Fix not seen in stream CVE-2022-3624: Fix not seen in stream @@ -1200,7 +1202,6 @@ CVE-2022-45934: Fix not seen in stream CVE-2022-4662: Fix not seen in stream CVE-2022-4744: Fix not seen in stream -CVE-2022-48502: Fix not seen in stream CVE-2023-0030: Fix not seen in stream CVE-2023-0047: Fix not seen in stream CVE-2023-0160: Fix unknown @@ -1223,6 +1224,7 @@ CVE-2023-1838: Fix not seen in stream CVE-2023-1989: Fix not seen in stream CVE-2023-2007: Fix not seen in stream +CVE-2023-20593: Fix not seen in stream CVE-2023-20941: Fix unknown CVE-2023-2162: Fix not seen in stream CVE-2023-2176: Fix not seen in stream @@ -1253,13 +1255,6 @@ CVE-2023-3161: Fix not seen in stream CVE-2023-3212: Fix not seen in stream CVE-2023-32233: Fix not seen in stream -CVE-2023-32247: Fix not seen in stream -CVE-2023-32248: Fix not seen in stream -CVE-2023-32250: Fix not seen in stream -CVE-2023-32252: Fix not seen in stream -CVE-2023-32254: Fix not seen in stream -CVE-2023-32257: Fix not seen in stream -CVE-2023-32258: Fix not seen in stream CVE-2023-32269: Fix not seen in stream CVE-2023-3268: Fix not seen in stream CVE-2023-33288: Fix not seen in stream @@ -1268,16 +1263,13 @@ CVE-2023-34255: Fix not seen in stream CVE-2023-34256: Fix not seen in stream CVE-2023-3567: Fix not seen in stream -CVE-2023-35693: Fix unknown CVE-2023-35824: Fix not seen in stream CVE-2023-35827: Fix unknown CVE-2023-3640: Fix unknown CVE-2023-37453: Fix unknown CVE-2023-37454: Fix unknown -CVE-2023-38426: Fix not seen in stream -CVE-2023-38427: Fix not seen in stream -CVE-2023-38428: Fix not seen in stream -CVE-2023-38429: Fix not seen in stream -CVE-2023-38430: Fix not seen in stream -CVE-2023-38431: Fix not seen in stream -CVE-2023-38432: Fix not seen in stream +CVE-2023-3772: Fix unknown +CVE-2023-3773: Fix unknown +CVE-2023-3776: Fix not seen in stream +CVE-2023-3812: Fix not seen in stream +CVE-2023-3863: Fix not seen in stream
diff --git a/data/3.2/3.2_security.txt b/data/3.2/3.2_security.txt index de8d5f8..5542122 100644 --- a/data/3.2/3.2_security.txt +++ b/data/3.2/3.2_security.txt
@@ -1312,6 +1312,7 @@ CVE-2022-3522: (unk) mm/hugetlb: use hugetlb_pte_stable in migration race check CVE-2022-3523: (unk) mm/memory.c: fix race when faulting a device private page CVE-2022-3524: (unk) tcp/udp: Fix memory leak in ipv6_renew_options(). + CVE-2022-3533: (unk) CVE-2022-3534: (unk) libbpf: Fix use-after-free in btf_dump_name_dups CVE-2022-3545: (unk) nfp: fix use-after-free in area_cache_get() CVE-2022-3565: (unk) mISDN: fix use-after-free bugs in l1oip timer handlers @@ -1319,6 +1320,7 @@ CVE-2022-3567: (unk) ipv6: Fix data races around sk->sk_prot. CVE-2022-3586: (unk) sch_sfb: Don't assume the skb is still around after enqueueing to child CVE-2022-3595: (unk) cifs: fix double-fault crash during ntlmssp + CVE-2022-3606: (unk) CVE-2022-36123: (unk) x86: Clear .brk area at early boot CVE-2022-3621: (unk) nilfs2: fix NULL pointer dereference at nilfs_bmap_lookup_at_level() CVE-2022-3624: (unk) bonding: fix reference count leak in balance-alb mode @@ -1358,7 +1360,6 @@ CVE-2022-45934: (unk) Bluetooth: L2CAP: Fix u8 overflow CVE-2022-4662: (unk) USB: core: Prevent nested device-reset calls CVE-2022-4744: (unk) tun: avoid double free in tun_free_netdev - CVE-2022-48502: (unk) fs/ntfs3: Check fields while reading CVE-2023-0030: (unk) drm/nouveau/mmu: add more general vmm free/node handling functions CVE-2023-0047: (unk) mm, oom: do not trigger out_of_memory from the #PF CVE-2023-0160: (unk) @@ -1381,6 +1382,7 @@ CVE-2023-1838: (unk) Fix double fget() in vhost_net_set_backend() CVE-2023-1989: (unk) Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work CVE-2023-2007: (unk) scsi: dpt_i2o: Remove obsolete driver + CVE-2023-20593: (unk) x86/cpu/amd: Add a Zenbleed fix CVE-2023-20941: (unk) CVE-2023-2162: (unk) scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress CVE-2023-2176: (unk) RDMA/core: Refactor rdma_bind_addr @@ -1411,13 +1413,6 @@ CVE-2023-3161: (unk) fbcon: Check font dimension limits CVE-2023-3212: (unk) gfs2: Don't deref jdesc in evict CVE-2023-32233: (unk) netfilter: nf_tables: deactivate anonymous set from preparation phase - CVE-2023-32247: (unk) ksmbd: destroy expired sessions - CVE-2023-32248: (unk) ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem() - CVE-2023-32250: (unk) ksmbd: fix racy issue from session setup and logoff - CVE-2023-32252: (unk) ksmbd: fix racy issue from session setup and logoff - CVE-2023-32254: (unk) ksmbd: fix racy issue under cocurrent smb2 tree disconnect - CVE-2023-32257: (unk) ksmbd: fix racy issue from session setup and logoff - CVE-2023-32258: (unk) ksmbd: fix racy issue from smb2 close and logoff with multichannel CVE-2023-32269: (unk) netrom: Fix use-after-free caused by accept on already connected socket CVE-2023-3268: (unk) relayfs: fix out-of-bounds access in relay_file_read CVE-2023-33288: (unk) power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition @@ -1426,16 +1421,13 @@ CVE-2023-34255: (unk) xfs: verify buffer contents when we skip log replay CVE-2023-34256: (unk) ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum CVE-2023-3567: (unk) vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF - CVE-2023-35693: (unk) CVE-2023-35824: (unk) media: dm1105: Fix use after free bug in dm1105_remove due to race condition CVE-2023-35827: (unk) CVE-2023-3640: (unk) CVE-2023-37453: (unk) CVE-2023-37454: (unk) - CVE-2023-38426: (unk) ksmbd: fix global-out-of-bounds in smb2_find_context_vals - CVE-2023-38427: (unk) ksmbd: fix out-of-bound read in deassemble_neg_contexts() - CVE-2023-38428: (unk) ksmbd: fix wrong UserName check in session_user - CVE-2023-38429: (unk) ksmbd: allocate one more byte for implied bcc[0] - CVE-2023-38430: (unk) ksmbd: validate smb request protocol id - CVE-2023-38431: (unk) ksmbd: check the validation of pdu_size in ksmbd_conn_handler_loop - CVE-2023-38432: (unk) ksmbd: validate command payload size + CVE-2023-3772: (unk) + CVE-2023-3773: (unk) + CVE-2023-3776: (unk) net/sched: cls_fw: Fix improper refcount update leads to use-after-free + CVE-2023-3812: (unk) net: tun: fix bugs for oversize packet when napi frags enabled + CVE-2023-3863: (unk) net: nfc: Fix use-after-free caused by nfc_llcp_find_local
diff --git a/data/4.1/4.1_CVEs.txt b/data/4.1/4.1_CVEs.txt index c5fc24a..73b2452 100644 --- a/data/4.1/4.1_CVEs.txt +++ b/data/4.1/4.1_CVEs.txt
@@ -1080,6 +1080,7 @@ CVE-2022-3522: Fix not seen in stream CVE-2022-3523: Fix not seen in stream CVE-2022-3524: Fix not seen in stream +CVE-2022-3533: Fix unknown CVE-2022-3534: Fix not seen in stream CVE-2022-3542: Fix not seen in stream CVE-2022-3545: Fix not seen in stream @@ -1090,6 +1091,7 @@ CVE-2022-3586: Fix not seen in stream CVE-2022-3594: Fix not seen in stream CVE-2022-3595: Fix not seen in stream +CVE-2022-3606: Fix unknown CVE-2022-36123: Fix not seen in stream CVE-2022-3621: Fix not seen in stream CVE-2022-3624: Fix not seen in stream @@ -1133,7 +1135,6 @@ CVE-2022-45934: Fix not seen in stream CVE-2022-4662: Fix not seen in stream CVE-2022-4744: Fix not seen in stream -CVE-2022-48502: Fix not seen in stream CVE-2023-0030: Fix not seen in stream CVE-2023-0047: Fix not seen in stream CVE-2023-0160: Fix unknown @@ -1162,6 +1163,7 @@ CVE-2023-1989: Fix not seen in stream CVE-2023-1990: Fix not seen in stream CVE-2023-2007: Fix not seen in stream +CVE-2023-20593: Fix not seen in stream CVE-2023-20941: Fix unknown CVE-2023-2124: Fix not seen in stream CVE-2023-2162: Fix not seen in stream @@ -1192,19 +1194,13 @@ CVE-2023-31084: Fix not seen in stream CVE-2023-31085: Fix unknown CVE-2023-3111: Fix not seen in stream +CVE-2023-3117: Fix not seen in stream CVE-2023-3141: Fix not seen in stream CVE-2023-31436: Fix not seen in stream CVE-2023-3159: Fix not seen in stream CVE-2023-3161: Fix not seen in stream CVE-2023-3212: Fix not seen in stream CVE-2023-32233: Fix not seen in stream -CVE-2023-32247: Fix not seen in stream -CVE-2023-32248: Fix not seen in stream -CVE-2023-32250: Fix not seen in stream -CVE-2023-32252: Fix not seen in stream -CVE-2023-32254: Fix not seen in stream -CVE-2023-32257: Fix not seen in stream -CVE-2023-32258: Fix not seen in stream CVE-2023-32269: Fix not seen in stream CVE-2023-3268: Fix not seen in stream CVE-2023-33288: Fix not seen in stream @@ -1215,16 +1211,14 @@ CVE-2023-34256: Fix not seen in stream CVE-2023-35001: Fix not seen in stream CVE-2023-3567: Fix not seen in stream -CVE-2023-35693: Fix unknown CVE-2023-35824: Fix not seen in stream CVE-2023-35827: Fix unknown +CVE-2023-3611: Fix not seen in stream CVE-2023-3640: Fix unknown CVE-2023-37453: Fix unknown CVE-2023-37454: Fix unknown -CVE-2023-38426: Fix not seen in stream -CVE-2023-38427: Fix not seen in stream -CVE-2023-38428: Fix not seen in stream -CVE-2023-38429: Fix not seen in stream -CVE-2023-38430: Fix not seen in stream -CVE-2023-38431: Fix not seen in stream -CVE-2023-38432: Fix not seen in stream +CVE-2023-3772: Fix unknown +CVE-2023-3773: Fix unknown +CVE-2023-3776: Fix not seen in stream +CVE-2023-3812: Fix not seen in stream +CVE-2023-3863: Fix not seen in stream
diff --git a/data/4.1/4.1_security.txt b/data/4.1/4.1_security.txt index 3dc390e..5935ffe 100644 --- a/data/4.1/4.1_security.txt +++ b/data/4.1/4.1_security.txt
@@ -1178,6 +1178,7 @@ CVE-2022-3522: (unk) mm/hugetlb: use hugetlb_pte_stable in migration race check CVE-2022-3523: (unk) mm/memory.c: fix race when faulting a device private page CVE-2022-3524: (unk) tcp/udp: Fix memory leak in ipv6_renew_options(). + CVE-2022-3533: (unk) CVE-2022-3534: (unk) libbpf: Fix use-after-free in btf_dump_name_dups CVE-2022-3542: (unk) bnx2x: fix potential memory leak in bnx2x_tpa_stop() CVE-2022-3545: (unk) nfp: fix use-after-free in area_cache_get() @@ -1188,6 +1189,7 @@ CVE-2022-3586: (unk) sch_sfb: Don't assume the skb is still around after enqueueing to child CVE-2022-3594: (unk) r8152: Rate limit overflow messages CVE-2022-3595: (unk) cifs: fix double-fault crash during ntlmssp + CVE-2022-3606: (unk) CVE-2022-36123: (unk) x86: Clear .brk area at early boot CVE-2022-3621: (unk) nilfs2: fix NULL pointer dereference at nilfs_bmap_lookup_at_level() CVE-2022-3624: (unk) bonding: fix reference count leak in balance-alb mode @@ -1231,7 +1233,6 @@ CVE-2022-45934: (unk) Bluetooth: L2CAP: Fix u8 overflow CVE-2022-4662: (unk) USB: core: Prevent nested device-reset calls CVE-2022-4744: (unk) tun: avoid double free in tun_free_netdev - CVE-2022-48502: (unk) fs/ntfs3: Check fields while reading CVE-2023-0030: (unk) drm/nouveau/mmu: add more general vmm free/node handling functions CVE-2023-0047: (unk) mm, oom: do not trigger out_of_memory from the #PF CVE-2023-0160: (unk) @@ -1260,6 +1261,7 @@ CVE-2023-1989: (unk) Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work CVE-2023-1990: (unk) nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition CVE-2023-2007: (unk) scsi: dpt_i2o: Remove obsolete driver + CVE-2023-20593: (unk) x86/cpu/amd: Add a Zenbleed fix CVE-2023-20941: (unk) CVE-2023-2124: (unk) xfs: verify buffer contents when we skip log replay CVE-2023-2162: (unk) scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress @@ -1290,19 +1292,13 @@ CVE-2023-31084: (unk) media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() CVE-2023-31085: (unk) CVE-2023-3111: (unk) btrfs: unset reloc control if transaction commit fails in prepare_to_relocate() + CVE-2023-3117: (unk) netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE CVE-2023-3141: (unk) memstick: r592: Fix UAF bug in r592_remove due to race condition CVE-2023-31436: (unk) net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg CVE-2023-3159: (unk) firewire: fix potential uaf in outbound_phy_packet_callback() CVE-2023-3161: (unk) fbcon: Check font dimension limits CVE-2023-3212: (unk) gfs2: Don't deref jdesc in evict CVE-2023-32233: (unk) netfilter: nf_tables: deactivate anonymous set from preparation phase - CVE-2023-32247: (unk) ksmbd: destroy expired sessions - CVE-2023-32248: (unk) ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem() - CVE-2023-32250: (unk) ksmbd: fix racy issue from session setup and logoff - CVE-2023-32252: (unk) ksmbd: fix racy issue from session setup and logoff - CVE-2023-32254: (unk) ksmbd: fix racy issue under cocurrent smb2 tree disconnect - CVE-2023-32257: (unk) ksmbd: fix racy issue from session setup and logoff - CVE-2023-32258: (unk) ksmbd: fix racy issue from smb2 close and logoff with multichannel CVE-2023-32269: (unk) netrom: Fix use-after-free caused by accept on already connected socket CVE-2023-3268: (unk) relayfs: fix out-of-bounds access in relay_file_read CVE-2023-33288: (unk) power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition @@ -1313,16 +1309,14 @@ CVE-2023-34256: (unk) ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum CVE-2023-35001: (unk) netfilter: nf_tables: prevent OOB access in nft_byteorder_eval CVE-2023-3567: (unk) vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF - CVE-2023-35693: (unk) CVE-2023-35824: (unk) media: dm1105: Fix use after free bug in dm1105_remove due to race condition CVE-2023-35827: (unk) + CVE-2023-3611: (unk) net/sched: sch_qfq: account for stab overhead in qfq_enqueue CVE-2023-3640: (unk) CVE-2023-37453: (unk) CVE-2023-37454: (unk) - CVE-2023-38426: (unk) ksmbd: fix global-out-of-bounds in smb2_find_context_vals - CVE-2023-38427: (unk) ksmbd: fix out-of-bound read in deassemble_neg_contexts() - CVE-2023-38428: (unk) ksmbd: fix wrong UserName check in session_user - CVE-2023-38429: (unk) ksmbd: allocate one more byte for implied bcc[0] - CVE-2023-38430: (unk) ksmbd: validate smb request protocol id - CVE-2023-38431: (unk) ksmbd: check the validation of pdu_size in ksmbd_conn_handler_loop - CVE-2023-38432: (unk) ksmbd: validate command payload size + CVE-2023-3772: (unk) + CVE-2023-3773: (unk) + CVE-2023-3776: (unk) net/sched: cls_fw: Fix improper refcount update leads to use-after-free + CVE-2023-3812: (unk) net: tun: fix bugs for oversize packet when napi frags enabled + CVE-2023-3863: (unk) net: nfc: Fix use-after-free caused by nfc_llcp_find_local
diff --git a/data/4.10/4.10_CVEs.txt b/data/4.10/4.10_CVEs.txt index c25073b..f55f061 100644 --- a/data/4.10/4.10_CVEs.txt +++ b/data/4.10/4.10_CVEs.txt
@@ -979,6 +979,7 @@ CVE-2022-3522: Fix not seen in stream CVE-2022-3523: Fix not seen in stream CVE-2022-3524: Fix not seen in stream +CVE-2022-3533: Fix unknown CVE-2022-3534: Fix not seen in stream CVE-2022-3542: Fix not seen in stream CVE-2022-3545: Fix not seen in stream @@ -989,6 +990,7 @@ CVE-2022-3586: Fix not seen in stream CVE-2022-3594: Fix not seen in stream CVE-2022-3595: Fix not seen in stream +CVE-2022-3606: Fix unknown CVE-2022-36123: Fix not seen in stream CVE-2022-3621: Fix not seen in stream CVE-2022-3624: Fix not seen in stream @@ -1037,7 +1039,6 @@ CVE-2022-4744: Fix not seen in stream CVE-2022-47520: Fix not seen in stream CVE-2022-47929: Fix not seen in stream -CVE-2022-48502: Fix not seen in stream CVE-2023-0030: Fix not seen in stream CVE-2023-0047: Fix not seen in stream CVE-2023-0160: Fix unknown @@ -1071,6 +1072,7 @@ CVE-2023-1990: Fix not seen in stream CVE-2023-2002: Fix not seen in stream CVE-2023-2007: Fix not seen in stream +CVE-2023-20593: Fix not seen in stream CVE-2023-20941: Fix unknown CVE-2023-2124: Fix not seen in stream CVE-2023-2162: Fix not seen in stream @@ -1103,19 +1105,13 @@ CVE-2023-31084: Fix not seen in stream CVE-2023-31085: Fix unknown CVE-2023-3111: Fix not seen in stream +CVE-2023-3117: Fix not seen in stream CVE-2023-3141: Fix not seen in stream CVE-2023-31436: Fix not seen in stream CVE-2023-3159: Fix not seen in stream CVE-2023-3161: Fix not seen in stream CVE-2023-3212: Fix not seen in stream CVE-2023-32233: Fix not seen in stream -CVE-2023-32247: Fix not seen in stream -CVE-2023-32248: Fix not seen in stream -CVE-2023-32250: Fix not seen in stream -CVE-2023-32252: Fix not seen in stream -CVE-2023-32254: Fix not seen in stream -CVE-2023-32257: Fix not seen in stream -CVE-2023-32258: Fix not seen in stream CVE-2023-32269: Fix not seen in stream CVE-2023-3268: Fix not seen in stream CVE-2023-33203: Fix not seen in stream @@ -1128,16 +1124,14 @@ CVE-2023-34256: Fix not seen in stream CVE-2023-35001: Fix not seen in stream CVE-2023-3567: Fix not seen in stream -CVE-2023-35693: Fix unknown CVE-2023-35824: Fix not seen in stream CVE-2023-35827: Fix unknown +CVE-2023-3611: Fix not seen in stream CVE-2023-3640: Fix unknown CVE-2023-37453: Fix unknown CVE-2023-37454: Fix unknown -CVE-2023-38426: Fix not seen in stream -CVE-2023-38427: Fix not seen in stream -CVE-2023-38428: Fix not seen in stream -CVE-2023-38429: Fix not seen in stream -CVE-2023-38430: Fix not seen in stream -CVE-2023-38431: Fix not seen in stream -CVE-2023-38432: Fix not seen in stream +CVE-2023-3772: Fix unknown +CVE-2023-3773: Fix unknown +CVE-2023-3776: Fix not seen in stream +CVE-2023-3812: Fix not seen in stream +CVE-2023-3863: Fix not seen in stream
diff --git a/data/4.10/4.10_security.txt b/data/4.10/4.10_security.txt index a811be2..2140237 100644 --- a/data/4.10/4.10_security.txt +++ b/data/4.10/4.10_security.txt
@@ -1013,6 +1013,7 @@ CVE-2022-3522: (unk) mm/hugetlb: use hugetlb_pte_stable in migration race check CVE-2022-3523: (unk) mm/memory.c: fix race when faulting a device private page CVE-2022-3524: (unk) tcp/udp: Fix memory leak in ipv6_renew_options(). + CVE-2022-3533: (unk) CVE-2022-3534: (unk) libbpf: Fix use-after-free in btf_dump_name_dups CVE-2022-3542: (unk) bnx2x: fix potential memory leak in bnx2x_tpa_stop() CVE-2022-3545: (unk) nfp: fix use-after-free in area_cache_get() @@ -1023,6 +1024,7 @@ CVE-2022-3586: (unk) sch_sfb: Don't assume the skb is still around after enqueueing to child CVE-2022-3594: (unk) r8152: Rate limit overflow messages CVE-2022-3595: (unk) cifs: fix double-fault crash during ntlmssp + CVE-2022-3606: (unk) CVE-2022-36123: (unk) x86: Clear .brk area at early boot CVE-2022-3621: (unk) nilfs2: fix NULL pointer dereference at nilfs_bmap_lookup_at_level() CVE-2022-3624: (unk) bonding: fix reference count leak in balance-alb mode @@ -1071,7 +1073,6 @@ CVE-2022-4744: (unk) tun: avoid double free in tun_free_netdev CVE-2022-47520: (unk) wifi: wilc1000: validate pairwise and authentication suite offsets CVE-2022-47929: (unk) net: sched: disallow noqueue for qdisc classes - CVE-2022-48502: (unk) fs/ntfs3: Check fields while reading CVE-2023-0030: (unk) drm/nouveau/mmu: add more general vmm free/node handling functions CVE-2023-0047: (unk) mm, oom: do not trigger out_of_memory from the #PF CVE-2023-0160: (unk) @@ -1105,6 +1106,7 @@ CVE-2023-1990: (unk) nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition CVE-2023-2002: (unk) bluetooth: Perform careful capability checks in hci_sock_ioctl() CVE-2023-2007: (unk) scsi: dpt_i2o: Remove obsolete driver + CVE-2023-20593: (unk) x86/cpu/amd: Add a Zenbleed fix CVE-2023-20941: (unk) CVE-2023-2124: (unk) xfs: verify buffer contents when we skip log replay CVE-2023-2162: (unk) scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress @@ -1137,19 +1139,13 @@ CVE-2023-31084: (unk) media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() CVE-2023-31085: (unk) CVE-2023-3111: (unk) btrfs: unset reloc control if transaction commit fails in prepare_to_relocate() + CVE-2023-3117: (unk) netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE CVE-2023-3141: (unk) memstick: r592: Fix UAF bug in r592_remove due to race condition CVE-2023-31436: (unk) net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg CVE-2023-3159: (unk) firewire: fix potential uaf in outbound_phy_packet_callback() CVE-2023-3161: (unk) fbcon: Check font dimension limits CVE-2023-3212: (unk) gfs2: Don't deref jdesc in evict CVE-2023-32233: (unk) netfilter: nf_tables: deactivate anonymous set from preparation phase - CVE-2023-32247: (unk) ksmbd: destroy expired sessions - CVE-2023-32248: (unk) ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem() - CVE-2023-32250: (unk) ksmbd: fix racy issue from session setup and logoff - CVE-2023-32252: (unk) ksmbd: fix racy issue from session setup and logoff - CVE-2023-32254: (unk) ksmbd: fix racy issue under cocurrent smb2 tree disconnect - CVE-2023-32257: (unk) ksmbd: fix racy issue from session setup and logoff - CVE-2023-32258: (unk) ksmbd: fix racy issue from smb2 close and logoff with multichannel CVE-2023-32269: (unk) netrom: Fix use-after-free caused by accept on already connected socket CVE-2023-3268: (unk) relayfs: fix out-of-bounds access in relay_file_read CVE-2023-33203: (unk) net: qcom/emac: Fix use after free bug in emac_remove due to race condition @@ -1162,16 +1158,14 @@ CVE-2023-34256: (unk) ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum CVE-2023-35001: (unk) netfilter: nf_tables: prevent OOB access in nft_byteorder_eval CVE-2023-3567: (unk) vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF - CVE-2023-35693: (unk) CVE-2023-35824: (unk) media: dm1105: Fix use after free bug in dm1105_remove due to race condition CVE-2023-35827: (unk) + CVE-2023-3611: (unk) net/sched: sch_qfq: account for stab overhead in qfq_enqueue CVE-2023-3640: (unk) CVE-2023-37453: (unk) CVE-2023-37454: (unk) - CVE-2023-38426: (unk) ksmbd: fix global-out-of-bounds in smb2_find_context_vals - CVE-2023-38427: (unk) ksmbd: fix out-of-bound read in deassemble_neg_contexts() - CVE-2023-38428: (unk) ksmbd: fix wrong UserName check in session_user - CVE-2023-38429: (unk) ksmbd: allocate one more byte for implied bcc[0] - CVE-2023-38430: (unk) ksmbd: validate smb request protocol id - CVE-2023-38431: (unk) ksmbd: check the validation of pdu_size in ksmbd_conn_handler_loop - CVE-2023-38432: (unk) ksmbd: validate command payload size + CVE-2023-3772: (unk) + CVE-2023-3773: (unk) + CVE-2023-3776: (unk) net/sched: cls_fw: Fix improper refcount update leads to use-after-free + CVE-2023-3812: (unk) net: tun: fix bugs for oversize packet when napi frags enabled + CVE-2023-3863: (unk) net: nfc: Fix use-after-free caused by nfc_llcp_find_local
diff --git a/data/4.11/4.11_CVEs.txt b/data/4.11/4.11_CVEs.txt index cd609fd..d510906 100644 --- a/data/4.11/4.11_CVEs.txt +++ b/data/4.11/4.11_CVEs.txt
@@ -951,6 +951,7 @@ CVE-2022-3522: Fix not seen in stream CVE-2022-3523: Fix not seen in stream CVE-2022-3524: Fix not seen in stream +CVE-2022-3533: Fix unknown CVE-2022-3534: Fix not seen in stream CVE-2022-3542: Fix not seen in stream CVE-2022-3545: Fix not seen in stream @@ -961,6 +962,7 @@ CVE-2022-3586: Fix not seen in stream CVE-2022-3594: Fix not seen in stream CVE-2022-3595: Fix not seen in stream +CVE-2022-3606: Fix unknown CVE-2022-36123: Fix not seen in stream CVE-2022-3621: Fix not seen in stream CVE-2022-3624: Fix not seen in stream @@ -1009,7 +1011,6 @@ CVE-2022-4744: Fix not seen in stream CVE-2022-47520: Fix not seen in stream CVE-2022-47929: Fix not seen in stream -CVE-2022-48502: Fix not seen in stream CVE-2023-0030: Fix not seen in stream CVE-2023-0047: Fix not seen in stream CVE-2023-0160: Fix unknown @@ -1043,6 +1044,7 @@ CVE-2023-1990: Fix not seen in stream CVE-2023-2002: Fix not seen in stream CVE-2023-2007: Fix not seen in stream +CVE-2023-20593: Fix not seen in stream CVE-2023-20941: Fix unknown CVE-2023-2124: Fix not seen in stream CVE-2023-2162: Fix not seen in stream @@ -1075,19 +1077,13 @@ CVE-2023-31084: Fix not seen in stream CVE-2023-31085: Fix unknown CVE-2023-3111: Fix not seen in stream +CVE-2023-3117: Fix not seen in stream CVE-2023-3141: Fix not seen in stream CVE-2023-31436: Fix not seen in stream CVE-2023-3159: Fix not seen in stream CVE-2023-3161: Fix not seen in stream CVE-2023-3212: Fix not seen in stream CVE-2023-32233: Fix not seen in stream -CVE-2023-32247: Fix not seen in stream -CVE-2023-32248: Fix not seen in stream -CVE-2023-32250: Fix not seen in stream -CVE-2023-32252: Fix not seen in stream -CVE-2023-32254: Fix not seen in stream -CVE-2023-32257: Fix not seen in stream -CVE-2023-32258: Fix not seen in stream CVE-2023-32269: Fix not seen in stream CVE-2023-3268: Fix not seen in stream CVE-2023-33203: Fix not seen in stream @@ -1100,16 +1096,14 @@ CVE-2023-34256: Fix not seen in stream CVE-2023-35001: Fix not seen in stream CVE-2023-3567: Fix not seen in stream -CVE-2023-35693: Fix unknown CVE-2023-35824: Fix not seen in stream CVE-2023-35827: Fix unknown +CVE-2023-3611: Fix not seen in stream CVE-2023-3640: Fix unknown CVE-2023-37453: Fix unknown CVE-2023-37454: Fix unknown -CVE-2023-38426: Fix not seen in stream -CVE-2023-38427: Fix not seen in stream -CVE-2023-38428: Fix not seen in stream -CVE-2023-38429: Fix not seen in stream -CVE-2023-38430: Fix not seen in stream -CVE-2023-38431: Fix not seen in stream -CVE-2023-38432: Fix not seen in stream +CVE-2023-3772: Fix unknown +CVE-2023-3773: Fix unknown +CVE-2023-3776: Fix not seen in stream +CVE-2023-3812: Fix not seen in stream +CVE-2023-3863: Fix not seen in stream
diff --git a/data/4.11/4.11_security.txt b/data/4.11/4.11_security.txt index 8245422..68fc266 100644 --- a/data/4.11/4.11_security.txt +++ b/data/4.11/4.11_security.txt
@@ -973,6 +973,7 @@ CVE-2022-3522: (unk) mm/hugetlb: use hugetlb_pte_stable in migration race check CVE-2022-3523: (unk) mm/memory.c: fix race when faulting a device private page CVE-2022-3524: (unk) tcp/udp: Fix memory leak in ipv6_renew_options(). + CVE-2022-3533: (unk) CVE-2022-3534: (unk) libbpf: Fix use-after-free in btf_dump_name_dups CVE-2022-3542: (unk) bnx2x: fix potential memory leak in bnx2x_tpa_stop() CVE-2022-3545: (unk) nfp: fix use-after-free in area_cache_get() @@ -983,6 +984,7 @@ CVE-2022-3586: (unk) sch_sfb: Don't assume the skb is still around after enqueueing to child CVE-2022-3594: (unk) r8152: Rate limit overflow messages CVE-2022-3595: (unk) cifs: fix double-fault crash during ntlmssp + CVE-2022-3606: (unk) CVE-2022-36123: (unk) x86: Clear .brk area at early boot CVE-2022-3621: (unk) nilfs2: fix NULL pointer dereference at nilfs_bmap_lookup_at_level() CVE-2022-3624: (unk) bonding: fix reference count leak in balance-alb mode @@ -1031,7 +1033,6 @@ CVE-2022-4744: (unk) tun: avoid double free in tun_free_netdev CVE-2022-47520: (unk) wifi: wilc1000: validate pairwise and authentication suite offsets CVE-2022-47929: (unk) net: sched: disallow noqueue for qdisc classes - CVE-2022-48502: (unk) fs/ntfs3: Check fields while reading CVE-2023-0030: (unk) drm/nouveau/mmu: add more general vmm free/node handling functions CVE-2023-0047: (unk) mm, oom: do not trigger out_of_memory from the #PF CVE-2023-0160: (unk) @@ -1065,6 +1066,7 @@ CVE-2023-1990: (unk) nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition CVE-2023-2002: (unk) bluetooth: Perform careful capability checks in hci_sock_ioctl() CVE-2023-2007: (unk) scsi: dpt_i2o: Remove obsolete driver + CVE-2023-20593: (unk) x86/cpu/amd: Add a Zenbleed fix CVE-2023-20941: (unk) CVE-2023-2124: (unk) xfs: verify buffer contents when we skip log replay CVE-2023-2162: (unk) scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress @@ -1097,19 +1099,13 @@ CVE-2023-31084: (unk) media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() CVE-2023-31085: (unk) CVE-2023-3111: (unk) btrfs: unset reloc control if transaction commit fails in prepare_to_relocate() + CVE-2023-3117: (unk) netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE CVE-2023-3141: (unk) memstick: r592: Fix UAF bug in r592_remove due to race condition CVE-2023-31436: (unk) net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg CVE-2023-3159: (unk) firewire: fix potential uaf in outbound_phy_packet_callback() CVE-2023-3161: (unk) fbcon: Check font dimension limits CVE-2023-3212: (unk) gfs2: Don't deref jdesc in evict CVE-2023-32233: (unk) netfilter: nf_tables: deactivate anonymous set from preparation phase - CVE-2023-32247: (unk) ksmbd: destroy expired sessions - CVE-2023-32248: (unk) ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem() - CVE-2023-32250: (unk) ksmbd: fix racy issue from session setup and logoff - CVE-2023-32252: (unk) ksmbd: fix racy issue from session setup and logoff - CVE-2023-32254: (unk) ksmbd: fix racy issue under cocurrent smb2 tree disconnect - CVE-2023-32257: (unk) ksmbd: fix racy issue from session setup and logoff - CVE-2023-32258: (unk) ksmbd: fix racy issue from smb2 close and logoff with multichannel CVE-2023-32269: (unk) netrom: Fix use-after-free caused by accept on already connected socket CVE-2023-3268: (unk) relayfs: fix out-of-bounds access in relay_file_read CVE-2023-33203: (unk) net: qcom/emac: Fix use after free bug in emac_remove due to race condition @@ -1122,16 +1118,14 @@ CVE-2023-34256: (unk) ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum CVE-2023-35001: (unk) netfilter: nf_tables: prevent OOB access in nft_byteorder_eval CVE-2023-3567: (unk) vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF - CVE-2023-35693: (unk) CVE-2023-35824: (unk) media: dm1105: Fix use after free bug in dm1105_remove due to race condition CVE-2023-35827: (unk) + CVE-2023-3611: (unk) net/sched: sch_qfq: account for stab overhead in qfq_enqueue CVE-2023-3640: (unk) CVE-2023-37453: (unk) CVE-2023-37454: (unk) - CVE-2023-38426: (unk) ksmbd: fix global-out-of-bounds in smb2_find_context_vals - CVE-2023-38427: (unk) ksmbd: fix out-of-bound read in deassemble_neg_contexts() - CVE-2023-38428: (unk) ksmbd: fix wrong UserName check in session_user - CVE-2023-38429: (unk) ksmbd: allocate one more byte for implied bcc[0] - CVE-2023-38430: (unk) ksmbd: validate smb request protocol id - CVE-2023-38431: (unk) ksmbd: check the validation of pdu_size in ksmbd_conn_handler_loop - CVE-2023-38432: (unk) ksmbd: validate command payload size + CVE-2023-3772: (unk) + CVE-2023-3773: (unk) + CVE-2023-3776: (unk) net/sched: cls_fw: Fix improper refcount update leads to use-after-free + CVE-2023-3812: (unk) net: tun: fix bugs for oversize packet when napi frags enabled + CVE-2023-3863: (unk) net: nfc: Fix use-after-free caused by nfc_llcp_find_local
diff --git a/data/4.12/4.12_CVEs.txt b/data/4.12/4.12_CVEs.txt index eebc022..a740575 100644 --- a/data/4.12/4.12_CVEs.txt +++ b/data/4.12/4.12_CVEs.txt
@@ -936,6 +936,7 @@ CVE-2022-3522: Fix not seen in stream CVE-2022-3523: Fix not seen in stream CVE-2022-3524: Fix not seen in stream +CVE-2022-3533: Fix unknown CVE-2022-3534: Fix not seen in stream CVE-2022-3542: Fix not seen in stream CVE-2022-3545: Fix not seen in stream @@ -946,6 +947,7 @@ CVE-2022-3586: Fix not seen in stream CVE-2022-3594: Fix not seen in stream CVE-2022-3595: Fix not seen in stream +CVE-2022-3606: Fix unknown CVE-2022-36123: Fix not seen in stream CVE-2022-3621: Fix not seen in stream CVE-2022-3624: Fix not seen in stream @@ -994,7 +996,6 @@ CVE-2022-4744: Fix not seen in stream CVE-2022-47520: Fix not seen in stream CVE-2022-47929: Fix not seen in stream -CVE-2022-48502: Fix not seen in stream CVE-2023-0030: Fix not seen in stream CVE-2023-0047: Fix not seen in stream CVE-2023-0160: Fix unknown @@ -1030,6 +1031,7 @@ CVE-2023-1990: Fix not seen in stream CVE-2023-2002: Fix not seen in stream CVE-2023-2007: Fix not seen in stream +CVE-2023-20593: Fix not seen in stream CVE-2023-20941: Fix unknown CVE-2023-2124: Fix not seen in stream CVE-2023-2162: Fix not seen in stream @@ -1062,19 +1064,13 @@ CVE-2023-31084: Fix not seen in stream CVE-2023-31085: Fix unknown CVE-2023-3111: Fix not seen in stream +CVE-2023-3117: Fix not seen in stream CVE-2023-3141: Fix not seen in stream CVE-2023-31436: Fix not seen in stream CVE-2023-3159: Fix not seen in stream CVE-2023-3161: Fix not seen in stream CVE-2023-3212: Fix not seen in stream CVE-2023-32233: Fix not seen in stream -CVE-2023-32247: Fix not seen in stream -CVE-2023-32248: Fix not seen in stream -CVE-2023-32250: Fix not seen in stream -CVE-2023-32252: Fix not seen in stream -CVE-2023-32254: Fix not seen in stream -CVE-2023-32257: Fix not seen in stream -CVE-2023-32258: Fix not seen in stream CVE-2023-32269: Fix not seen in stream CVE-2023-3268: Fix not seen in stream CVE-2023-33203: Fix not seen in stream @@ -1087,16 +1083,14 @@ CVE-2023-34256: Fix not seen in stream CVE-2023-35001: Fix not seen in stream CVE-2023-3567: Fix not seen in stream -CVE-2023-35693: Fix unknown CVE-2023-35824: Fix not seen in stream CVE-2023-35827: Fix unknown +CVE-2023-3611: Fix not seen in stream CVE-2023-3640: Fix unknown CVE-2023-37453: Fix unknown CVE-2023-37454: Fix unknown -CVE-2023-38426: Fix not seen in stream -CVE-2023-38427: Fix not seen in stream -CVE-2023-38428: Fix not seen in stream -CVE-2023-38429: Fix not seen in stream -CVE-2023-38430: Fix not seen in stream -CVE-2023-38431: Fix not seen in stream -CVE-2023-38432: Fix not seen in stream +CVE-2023-3772: Fix unknown +CVE-2023-3773: Fix unknown +CVE-2023-3776: Fix not seen in stream +CVE-2023-3812: Fix not seen in stream +CVE-2023-3863: Fix not seen in stream
diff --git a/data/4.12/4.12_security.txt b/data/4.12/4.12_security.txt index 42674df..ac195d6 100644 --- a/data/4.12/4.12_security.txt +++ b/data/4.12/4.12_security.txt
@@ -962,6 +962,7 @@ CVE-2022-3522: (unk) mm/hugetlb: use hugetlb_pte_stable in migration race check CVE-2022-3523: (unk) mm/memory.c: fix race when faulting a device private page CVE-2022-3524: (unk) tcp/udp: Fix memory leak in ipv6_renew_options(). + CVE-2022-3533: (unk) CVE-2022-3534: (unk) libbpf: Fix use-after-free in btf_dump_name_dups CVE-2022-3542: (unk) bnx2x: fix potential memory leak in bnx2x_tpa_stop() CVE-2022-3545: (unk) nfp: fix use-after-free in area_cache_get() @@ -972,6 +973,7 @@ CVE-2022-3586: (unk) sch_sfb: Don't assume the skb is still around after enqueueing to child CVE-2022-3594: (unk) r8152: Rate limit overflow messages CVE-2022-3595: (unk) cifs: fix double-fault crash during ntlmssp + CVE-2022-3606: (unk) CVE-2022-36123: (unk) x86: Clear .brk area at early boot CVE-2022-3621: (unk) nilfs2: fix NULL pointer dereference at nilfs_bmap_lookup_at_level() CVE-2022-3624: (unk) bonding: fix reference count leak in balance-alb mode @@ -1020,7 +1022,6 @@ CVE-2022-4744: (unk) tun: avoid double free in tun_free_netdev CVE-2022-47520: (unk) wifi: wilc1000: validate pairwise and authentication suite offsets CVE-2022-47929: (unk) net: sched: disallow noqueue for qdisc classes - CVE-2022-48502: (unk) fs/ntfs3: Check fields while reading CVE-2023-0030: (unk) drm/nouveau/mmu: add more general vmm free/node handling functions CVE-2023-0047: (unk) mm, oom: do not trigger out_of_memory from the #PF CVE-2023-0160: (unk) @@ -1056,6 +1057,7 @@ CVE-2023-1990: (unk) nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition CVE-2023-2002: (unk) bluetooth: Perform careful capability checks in hci_sock_ioctl() CVE-2023-2007: (unk) scsi: dpt_i2o: Remove obsolete driver + CVE-2023-20593: (unk) x86/cpu/amd: Add a Zenbleed fix CVE-2023-20941: (unk) CVE-2023-2124: (unk) xfs: verify buffer contents when we skip log replay CVE-2023-2162: (unk) scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress @@ -1088,19 +1090,13 @@ CVE-2023-31084: (unk) media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() CVE-2023-31085: (unk) CVE-2023-3111: (unk) btrfs: unset reloc control if transaction commit fails in prepare_to_relocate() + CVE-2023-3117: (unk) netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE CVE-2023-3141: (unk) memstick: r592: Fix UAF bug in r592_remove due to race condition CVE-2023-31436: (unk) net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg CVE-2023-3159: (unk) firewire: fix potential uaf in outbound_phy_packet_callback() CVE-2023-3161: (unk) fbcon: Check font dimension limits CVE-2023-3212: (unk) gfs2: Don't deref jdesc in evict CVE-2023-32233: (unk) netfilter: nf_tables: deactivate anonymous set from preparation phase - CVE-2023-32247: (unk) ksmbd: destroy expired sessions - CVE-2023-32248: (unk) ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem() - CVE-2023-32250: (unk) ksmbd: fix racy issue from session setup and logoff - CVE-2023-32252: (unk) ksmbd: fix racy issue from session setup and logoff - CVE-2023-32254: (unk) ksmbd: fix racy issue under cocurrent smb2 tree disconnect - CVE-2023-32257: (unk) ksmbd: fix racy issue from session setup and logoff - CVE-2023-32258: (unk) ksmbd: fix racy issue from smb2 close and logoff with multichannel CVE-2023-32269: (unk) netrom: Fix use-after-free caused by accept on already connected socket CVE-2023-3268: (unk) relayfs: fix out-of-bounds access in relay_file_read CVE-2023-33203: (unk) net: qcom/emac: Fix use after free bug in emac_remove due to race condition @@ -1113,16 +1109,14 @@ CVE-2023-34256: (unk) ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum CVE-2023-35001: (unk) netfilter: nf_tables: prevent OOB access in nft_byteorder_eval CVE-2023-3567: (unk) vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF - CVE-2023-35693: (unk) CVE-2023-35824: (unk) media: dm1105: Fix use after free bug in dm1105_remove due to race condition CVE-2023-35827: (unk) + CVE-2023-3611: (unk) net/sched: sch_qfq: account for stab overhead in qfq_enqueue CVE-2023-3640: (unk) CVE-2023-37453: (unk) CVE-2023-37454: (unk) - CVE-2023-38426: (unk) ksmbd: fix global-out-of-bounds in smb2_find_context_vals - CVE-2023-38427: (unk) ksmbd: fix out-of-bound read in deassemble_neg_contexts() - CVE-2023-38428: (unk) ksmbd: fix wrong UserName check in session_user - CVE-2023-38429: (unk) ksmbd: allocate one more byte for implied bcc[0] - CVE-2023-38430: (unk) ksmbd: validate smb request protocol id - CVE-2023-38431: (unk) ksmbd: check the validation of pdu_size in ksmbd_conn_handler_loop - CVE-2023-38432: (unk) ksmbd: validate command payload size + CVE-2023-3772: (unk) + CVE-2023-3773: (unk) + CVE-2023-3776: (unk) net/sched: cls_fw: Fix improper refcount update leads to use-after-free + CVE-2023-3812: (unk) net: tun: fix bugs for oversize packet when napi frags enabled + CVE-2023-3863: (unk) net: nfc: Fix use-after-free caused by nfc_llcp_find_local
diff --git a/data/4.13/4.13_CVEs.txt b/data/4.13/4.13_CVEs.txt index cbcc695..edf1886 100644 --- a/data/4.13/4.13_CVEs.txt +++ b/data/4.13/4.13_CVEs.txt
@@ -919,6 +919,7 @@ CVE-2022-3522: Fix not seen in stream CVE-2022-3523: Fix not seen in stream CVE-2022-3524: Fix not seen in stream +CVE-2022-3533: Fix unknown CVE-2022-3534: Fix not seen in stream CVE-2022-3542: Fix not seen in stream CVE-2022-3545: Fix not seen in stream @@ -929,6 +930,7 @@ CVE-2022-3586: Fix not seen in stream CVE-2022-3594: Fix not seen in stream CVE-2022-3595: Fix not seen in stream +CVE-2022-3606: Fix unknown CVE-2022-36123: Fix not seen in stream CVE-2022-3621: Fix not seen in stream CVE-2022-3624: Fix not seen in stream @@ -977,7 +979,6 @@ CVE-2022-4744: Fix not seen in stream CVE-2022-47520: Fix not seen in stream CVE-2022-47929: Fix not seen in stream -CVE-2022-48502: Fix not seen in stream CVE-2023-0030: Fix not seen in stream CVE-2023-0047: Fix not seen in stream CVE-2023-0160: Fix unknown @@ -1014,6 +1015,7 @@ CVE-2023-1990: Fix not seen in stream CVE-2023-2002: Fix not seen in stream CVE-2023-2007: Fix not seen in stream +CVE-2023-20593: Fix not seen in stream CVE-2023-20941: Fix unknown CVE-2023-2124: Fix not seen in stream CVE-2023-2162: Fix not seen in stream @@ -1047,19 +1049,13 @@ CVE-2023-31084: Fix not seen in stream CVE-2023-31085: Fix unknown CVE-2023-3111: Fix not seen in stream +CVE-2023-3117: Fix not seen in stream CVE-2023-3141: Fix not seen in stream CVE-2023-31436: Fix not seen in stream CVE-2023-3159: Fix not seen in stream CVE-2023-3161: Fix not seen in stream CVE-2023-3212: Fix not seen in stream CVE-2023-32233: Fix not seen in stream -CVE-2023-32247: Fix not seen in stream -CVE-2023-32248: Fix not seen in stream -CVE-2023-32250: Fix not seen in stream -CVE-2023-32252: Fix not seen in stream -CVE-2023-32254: Fix not seen in stream -CVE-2023-32257: Fix not seen in stream -CVE-2023-32258: Fix not seen in stream CVE-2023-32269: Fix not seen in stream CVE-2023-3268: Fix not seen in stream CVE-2023-33203: Fix not seen in stream @@ -1072,16 +1068,14 @@ CVE-2023-34256: Fix not seen in stream CVE-2023-35001: Fix not seen in stream CVE-2023-3567: Fix not seen in stream -CVE-2023-35693: Fix unknown CVE-2023-35824: Fix not seen in stream CVE-2023-35827: Fix unknown +CVE-2023-3611: Fix not seen in stream CVE-2023-3640: Fix unknown CVE-2023-37453: Fix unknown CVE-2023-37454: Fix unknown -CVE-2023-38426: Fix not seen in stream -CVE-2023-38427: Fix not seen in stream -CVE-2023-38428: Fix not seen in stream -CVE-2023-38429: Fix not seen in stream -CVE-2023-38430: Fix not seen in stream -CVE-2023-38431: Fix not seen in stream -CVE-2023-38432: Fix not seen in stream +CVE-2023-3772: Fix unknown +CVE-2023-3773: Fix unknown +CVE-2023-3776: Fix not seen in stream +CVE-2023-3812: Fix not seen in stream +CVE-2023-3863: Fix not seen in stream
diff --git a/data/4.13/4.13_security.txt b/data/4.13/4.13_security.txt index 2934cd7..b8f36a1 100644 --- a/data/4.13/4.13_security.txt +++ b/data/4.13/4.13_security.txt
@@ -947,6 +947,7 @@ CVE-2022-3522: (unk) mm/hugetlb: use hugetlb_pte_stable in migration race check CVE-2022-3523: (unk) mm/memory.c: fix race when faulting a device private page CVE-2022-3524: (unk) tcp/udp: Fix memory leak in ipv6_renew_options(). + CVE-2022-3533: (unk) CVE-2022-3534: (unk) libbpf: Fix use-after-free in btf_dump_name_dups CVE-2022-3542: (unk) bnx2x: fix potential memory leak in bnx2x_tpa_stop() CVE-2022-3545: (unk) nfp: fix use-after-free in area_cache_get() @@ -957,6 +958,7 @@ CVE-2022-3586: (unk) sch_sfb: Don't assume the skb is still around after enqueueing to child CVE-2022-3594: (unk) r8152: Rate limit overflow messages CVE-2022-3595: (unk) cifs: fix double-fault crash during ntlmssp + CVE-2022-3606: (unk) CVE-2022-36123: (unk) x86: Clear .brk area at early boot CVE-2022-3621: (unk) nilfs2: fix NULL pointer dereference at nilfs_bmap_lookup_at_level() CVE-2022-3624: (unk) bonding: fix reference count leak in balance-alb mode @@ -1005,7 +1007,6 @@ CVE-2022-4744: (unk) tun: avoid double free in tun_free_netdev CVE-2022-47520: (unk) wifi: wilc1000: validate pairwise and authentication suite offsets CVE-2022-47929: (unk) net: sched: disallow noqueue for qdisc classes - CVE-2022-48502: (unk) fs/ntfs3: Check fields while reading CVE-2023-0030: (unk) drm/nouveau/mmu: add more general vmm free/node handling functions CVE-2023-0047: (unk) mm, oom: do not trigger out_of_memory from the #PF CVE-2023-0160: (unk) @@ -1042,6 +1043,7 @@ CVE-2023-1990: (unk) nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition CVE-2023-2002: (unk) bluetooth: Perform careful capability checks in hci_sock_ioctl() CVE-2023-2007: (unk) scsi: dpt_i2o: Remove obsolete driver + CVE-2023-20593: (unk) x86/cpu/amd: Add a Zenbleed fix CVE-2023-20941: (unk) CVE-2023-2124: (unk) xfs: verify buffer contents when we skip log replay CVE-2023-2162: (unk) scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress @@ -1075,19 +1077,13 @@ CVE-2023-31084: (unk) media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() CVE-2023-31085: (unk) CVE-2023-3111: (unk) btrfs: unset reloc control if transaction commit fails in prepare_to_relocate() + CVE-2023-3117: (unk) netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE CVE-2023-3141: (unk) memstick: r592: Fix UAF bug in r592_remove due to race condition CVE-2023-31436: (unk) net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg CVE-2023-3159: (unk) firewire: fix potential uaf in outbound_phy_packet_callback() CVE-2023-3161: (unk) fbcon: Check font dimension limits CVE-2023-3212: (unk) gfs2: Don't deref jdesc in evict CVE-2023-32233: (unk) netfilter: nf_tables: deactivate anonymous set from preparation phase - CVE-2023-32247: (unk) ksmbd: destroy expired sessions - CVE-2023-32248: (unk) ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem() - CVE-2023-32250: (unk) ksmbd: fix racy issue from session setup and logoff - CVE-2023-32252: (unk) ksmbd: fix racy issue from session setup and logoff - CVE-2023-32254: (unk) ksmbd: fix racy issue under cocurrent smb2 tree disconnect - CVE-2023-32257: (unk) ksmbd: fix racy issue from session setup and logoff - CVE-2023-32258: (unk) ksmbd: fix racy issue from smb2 close and logoff with multichannel CVE-2023-32269: (unk) netrom: Fix use-after-free caused by accept on already connected socket CVE-2023-3268: (unk) relayfs: fix out-of-bounds access in relay_file_read CVE-2023-33203: (unk) net: qcom/emac: Fix use after free bug in emac_remove due to race condition @@ -1100,16 +1096,14 @@ CVE-2023-34256: (unk) ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum CVE-2023-35001: (unk) netfilter: nf_tables: prevent OOB access in nft_byteorder_eval CVE-2023-3567: (unk) vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF - CVE-2023-35693: (unk) CVE-2023-35824: (unk) media: dm1105: Fix use after free bug in dm1105_remove due to race condition CVE-2023-35827: (unk) + CVE-2023-3611: (unk) net/sched: sch_qfq: account for stab overhead in qfq_enqueue CVE-2023-3640: (unk) CVE-2023-37453: (unk) CVE-2023-37454: (unk) - CVE-2023-38426: (unk) ksmbd: fix global-out-of-bounds in smb2_find_context_vals - CVE-2023-38427: (unk) ksmbd: fix out-of-bound read in deassemble_neg_contexts() - CVE-2023-38428: (unk) ksmbd: fix wrong UserName check in session_user - CVE-2023-38429: (unk) ksmbd: allocate one more byte for implied bcc[0] - CVE-2023-38430: (unk) ksmbd: validate smb request protocol id - CVE-2023-38431: (unk) ksmbd: check the validation of pdu_size in ksmbd_conn_handler_loop - CVE-2023-38432: (unk) ksmbd: validate command payload size + CVE-2023-3772: (unk) + CVE-2023-3773: (unk) + CVE-2023-3776: (unk) net/sched: cls_fw: Fix improper refcount update leads to use-after-free + CVE-2023-3812: (unk) net: tun: fix bugs for oversize packet when napi frags enabled + CVE-2023-3863: (unk) net: nfc: Fix use-after-free caused by nfc_llcp_find_local
diff --git a/data/4.14/4.14_CVEs.txt b/data/4.14/4.14_CVEs.txt index ed9a6a5..30ea167 100644 --- a/data/4.14/4.14_CVEs.txt +++ b/data/4.14/4.14_CVEs.txt
@@ -888,6 +888,7 @@ CVE-2022-3522: Fix not seen in stream CVE-2022-3523: Fix not seen in stream CVE-2022-3524: Fixed with 4.14.301 +CVE-2022-3533: Fix unknown CVE-2022-3534: Fix not seen in stream CVE-2022-3542: Fixed with 4.14.296 CVE-2022-3545: Fixed with 4.14.303 @@ -898,6 +899,7 @@ CVE-2022-3586: Fixed with 4.14.293 CVE-2022-3594: Fixed with 4.14.296 CVE-2022-3595: Fix not seen in stream +CVE-2022-3606: Fix unknown CVE-2022-36123: Fixed with 4.14.289 CVE-2022-3621: Fixed with 4.14.296 CVE-2022-3624: Fix not seen in stream @@ -946,7 +948,6 @@ CVE-2022-4744: Fix not seen in stream CVE-2022-47520: Fix not seen in stream CVE-2022-47929: Fixed with 4.14.303 -CVE-2022-48502: Fix not seen in stream CVE-2023-0030: Fix not seen in stream CVE-2023-0047: Fixed with 4.14.256 CVE-2023-0160: Fix unknown @@ -984,6 +985,7 @@ CVE-2023-1990: Fixed with 4.14.311 CVE-2023-2002: Fixed with 4.14.315 CVE-2023-2007: Fix not seen in stream +CVE-2023-20593: Fix not seen in stream CVE-2023-20941: Fix unknown CVE-2023-2124: Fix not seen in stream CVE-2023-2162: Fixed with 4.14.306 @@ -1018,19 +1020,13 @@ CVE-2023-31084: Fix not seen in stream CVE-2023-31085: Fix unknown CVE-2023-3111: Fixed with 4.14.318 +CVE-2023-3117: Fix not seen in stream CVE-2023-3141: Fixed with 4.14.316 CVE-2023-31436: Fixed with 4.14.314 CVE-2023-3159: Fixed with 4.14.278 CVE-2023-3161: Fixed with 4.14.306 CVE-2023-3212: Fix not seen in stream CVE-2023-32233: Fixed with 4.14.315 -CVE-2023-32247: Fix not seen in stream -CVE-2023-32248: Fix not seen in stream -CVE-2023-32250: Fix not seen in stream -CVE-2023-32252: Fix not seen in stream -CVE-2023-32254: Fix not seen in stream -CVE-2023-32257: Fix not seen in stream -CVE-2023-32258: Fix not seen in stream CVE-2023-32269: Fixed with 4.14.306 CVE-2023-3268: Fix not seen in stream CVE-2023-33203: Fixed with 4.14.312 @@ -1043,16 +1039,15 @@ CVE-2023-34256: Fixed with 4.14.315 CVE-2023-35001: Fix not seen in stream CVE-2023-3567: Fix not seen in stream -CVE-2023-35693: Fix unknown CVE-2023-35824: Fixed with 4.14.315 CVE-2023-35827: Fix unknown +CVE-2023-3609: Fix not seen in stream +CVE-2023-3611: Fix not seen in stream CVE-2023-3640: Fix unknown CVE-2023-37453: Fix unknown CVE-2023-37454: Fix unknown -CVE-2023-38426: Fix not seen in stream -CVE-2023-38427: Fix not seen in stream -CVE-2023-38428: Fix not seen in stream -CVE-2023-38429: Fix not seen in stream -CVE-2023-38430: Fix not seen in stream -CVE-2023-38431: Fix not seen in stream -CVE-2023-38432: Fix not seen in stream +CVE-2023-3772: Fix unknown +CVE-2023-3773: Fix unknown +CVE-2023-3776: Fix not seen in stream +CVE-2023-3812: Fix not seen in stream +CVE-2023-3863: Fix not seen in stream
diff --git a/data/4.14/4.14_security.txt b/data/4.14/4.14_security.txt index befab47..d4aa751 100644 --- a/data/4.14/4.14_security.txt +++ b/data/4.14/4.14_security.txt
@@ -1502,10 +1502,12 @@ CVE-2022-3344: (unk) KVM: x86: nSVM: harden svm_free_nested against freeing vmcb02 while still in use CVE-2022-3522: (unk) mm/hugetlb: use hugetlb_pte_stable in migration race check CVE-2022-3523: (unk) mm/memory.c: fix race when faulting a device private page + CVE-2022-3533: (unk) CVE-2022-3534: (unk) libbpf: Fix use-after-free in btf_dump_name_dups CVE-2022-3566: (unk) tcp: Fix data races around icsk->icsk_af_ops. CVE-2022-3567: (unk) ipv6: Fix data races around sk->sk_prot. CVE-2022-3595: (unk) cifs: fix double-fault crash during ntlmssp + CVE-2022-3606: (unk) CVE-2022-3624: (unk) bonding: fix reference count leak in balance-alb mode CVE-2022-3636: (unk) net: ethernet: mtk_eth_soc: use after free in __mtk_ppe_check_skb() CVE-2022-36402: (unk) @@ -1528,7 +1530,6 @@ CVE-2022-45919: (unk) CVE-2022-4744: (unk) tun: avoid double free in tun_free_netdev CVE-2022-47520: (unk) wifi: wilc1000: validate pairwise and authentication suite offsets - CVE-2022-48502: (unk) fs/ntfs3: Check fields while reading CVE-2023-0030: (unk) drm/nouveau/mmu: add more general vmm free/node handling functions CVE-2023-0160: (unk) CVE-2023-0386: (unk) ovl: fail on invalid uid/gid mapping at copy up @@ -1543,6 +1544,7 @@ CVE-2023-1582: (unk) fs/proc: task_mmu.c: don't read mapcount for migration entry CVE-2023-1611: (unk) btrfs: fix race between quota disable and quota assign ioctls CVE-2023-2007: (unk) scsi: dpt_i2o: Remove obsolete driver + CVE-2023-20593: (unk) x86/cpu/amd: Add a Zenbleed fix CVE-2023-20941: (unk) CVE-2023-2124: (unk) xfs: verify buffer contents when we skip log replay CVE-2023-2176: (unk) RDMA/core: Refactor rdma_bind_addr @@ -1559,14 +1561,8 @@ CVE-2023-31083: (unk) CVE-2023-31084: (unk) media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() CVE-2023-31085: (unk) + CVE-2023-3117: (unk) netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE CVE-2023-3212: (unk) gfs2: Don't deref jdesc in evict - CVE-2023-32247: (unk) ksmbd: destroy expired sessions - CVE-2023-32248: (unk) ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem() - CVE-2023-32250: (unk) ksmbd: fix racy issue from session setup and logoff - CVE-2023-32252: (unk) ksmbd: fix racy issue from session setup and logoff - CVE-2023-32254: (unk) ksmbd: fix racy issue under cocurrent smb2 tree disconnect - CVE-2023-32257: (unk) ksmbd: fix racy issue from session setup and logoff - CVE-2023-32258: (unk) ksmbd: fix racy issue from smb2 close and logoff with multichannel CVE-2023-3268: (unk) relayfs: fix out-of-bounds access in relay_file_read CVE-2023-33288: (unk) power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition CVE-2023-3390: (unk) netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE @@ -1574,15 +1570,14 @@ CVE-2023-34255: (unk) xfs: verify buffer contents when we skip log replay CVE-2023-35001: (unk) netfilter: nf_tables: prevent OOB access in nft_byteorder_eval CVE-2023-3567: (unk) vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF - CVE-2023-35693: (unk) CVE-2023-35827: (unk) + CVE-2023-3609: (unk) net/sched: cls_u32: Fix reference counter leak leading to overflow + CVE-2023-3611: (unk) net/sched: sch_qfq: account for stab overhead in qfq_enqueue CVE-2023-3640: (unk) CVE-2023-37453: (unk) CVE-2023-37454: (unk) - CVE-2023-38426: (unk) ksmbd: fix global-out-of-bounds in smb2_find_context_vals - CVE-2023-38427: (unk) ksmbd: fix out-of-bound read in deassemble_neg_contexts() - CVE-2023-38428: (unk) ksmbd: fix wrong UserName check in session_user - CVE-2023-38429: (unk) ksmbd: allocate one more byte for implied bcc[0] - CVE-2023-38430: (unk) ksmbd: validate smb request protocol id - CVE-2023-38431: (unk) ksmbd: check the validation of pdu_size in ksmbd_conn_handler_loop - CVE-2023-38432: (unk) ksmbd: validate command payload size + CVE-2023-3772: (unk) + CVE-2023-3773: (unk) + CVE-2023-3776: (unk) net/sched: cls_fw: Fix improper refcount update leads to use-after-free + CVE-2023-3812: (unk) net: tun: fix bugs for oversize packet when napi frags enabled + CVE-2023-3863: (unk) net: nfc: Fix use-after-free caused by nfc_llcp_find_local
diff --git a/data/4.15/4.15_CVEs.txt b/data/4.15/4.15_CVEs.txt index 2fa6ff8..b9390bf 100644 --- a/data/4.15/4.15_CVEs.txt +++ b/data/4.15/4.15_CVEs.txt
@@ -840,6 +840,7 @@ CVE-2022-3522: Fix not seen in stream CVE-2022-3523: Fix not seen in stream CVE-2022-3524: Fix not seen in stream +CVE-2022-3533: Fix unknown CVE-2022-3534: Fix not seen in stream CVE-2022-3542: Fix not seen in stream CVE-2022-3545: Fix not seen in stream @@ -850,6 +851,7 @@ CVE-2022-3586: Fix not seen in stream CVE-2022-3594: Fix not seen in stream CVE-2022-3595: Fix not seen in stream +CVE-2022-3606: Fix unknown CVE-2022-36123: Fix not seen in stream CVE-2022-3621: Fix not seen in stream CVE-2022-3624: Fix not seen in stream @@ -898,7 +900,6 @@ CVE-2022-4744: Fix not seen in stream CVE-2022-47520: Fix not seen in stream CVE-2022-47929: Fix not seen in stream -CVE-2022-48502: Fix not seen in stream CVE-2023-0030: Fix not seen in stream CVE-2023-0047: Fix not seen in stream CVE-2023-0160: Fix unknown @@ -936,6 +937,7 @@ CVE-2023-1990: Fix not seen in stream CVE-2023-2002: Fix not seen in stream CVE-2023-2007: Fix not seen in stream +CVE-2023-20593: Fix not seen in stream CVE-2023-20941: Fix unknown CVE-2023-2124: Fix not seen in stream CVE-2023-2162: Fix not seen in stream @@ -971,19 +973,13 @@ CVE-2023-31084: Fix not seen in stream CVE-2023-31085: Fix unknown CVE-2023-3111: Fix not seen in stream +CVE-2023-3117: Fix not seen in stream CVE-2023-3141: Fix not seen in stream CVE-2023-31436: Fix not seen in stream CVE-2023-3159: Fix not seen in stream CVE-2023-3161: Fix not seen in stream CVE-2023-3212: Fix not seen in stream CVE-2023-32233: Fix not seen in stream -CVE-2023-32247: Fix not seen in stream -CVE-2023-32248: Fix not seen in stream -CVE-2023-32250: Fix not seen in stream -CVE-2023-32252: Fix not seen in stream -CVE-2023-32254: Fix not seen in stream -CVE-2023-32257: Fix not seen in stream -CVE-2023-32258: Fix not seen in stream CVE-2023-32269: Fix not seen in stream CVE-2023-3268: Fix not seen in stream CVE-2023-33203: Fix not seen in stream @@ -996,17 +992,16 @@ CVE-2023-34256: Fix not seen in stream CVE-2023-35001: Fix not seen in stream CVE-2023-3567: Fix not seen in stream -CVE-2023-35693: Fix unknown CVE-2023-35823: Fix not seen in stream CVE-2023-35824: Fix not seen in stream CVE-2023-35827: Fix unknown +CVE-2023-3609: Fix not seen in stream +CVE-2023-3611: Fix not seen in stream CVE-2023-3640: Fix unknown CVE-2023-37453: Fix unknown CVE-2023-37454: Fix unknown -CVE-2023-38426: Fix not seen in stream -CVE-2023-38427: Fix not seen in stream -CVE-2023-38428: Fix not seen in stream -CVE-2023-38429: Fix not seen in stream -CVE-2023-38430: Fix not seen in stream -CVE-2023-38431: Fix not seen in stream -CVE-2023-38432: Fix not seen in stream +CVE-2023-3772: Fix unknown +CVE-2023-3773: Fix unknown +CVE-2023-3776: Fix not seen in stream +CVE-2023-3812: Fix not seen in stream +CVE-2023-3863: Fix not seen in stream
diff --git a/data/4.15/4.15_security.txt b/data/4.15/4.15_security.txt index 94d7f33..5f6664d 100644 --- a/data/4.15/4.15_security.txt +++ b/data/4.15/4.15_security.txt
@@ -872,6 +872,7 @@ CVE-2022-3522: (unk) mm/hugetlb: use hugetlb_pte_stable in migration race check CVE-2022-3523: (unk) mm/memory.c: fix race when faulting a device private page CVE-2022-3524: (unk) tcp/udp: Fix memory leak in ipv6_renew_options(). + CVE-2022-3533: (unk) CVE-2022-3534: (unk) libbpf: Fix use-after-free in btf_dump_name_dups CVE-2022-3542: (unk) bnx2x: fix potential memory leak in bnx2x_tpa_stop() CVE-2022-3545: (unk) nfp: fix use-after-free in area_cache_get() @@ -882,6 +883,7 @@ CVE-2022-3586: (unk) sch_sfb: Don't assume the skb is still around after enqueueing to child CVE-2022-3594: (unk) r8152: Rate limit overflow messages CVE-2022-3595: (unk) cifs: fix double-fault crash during ntlmssp + CVE-2022-3606: (unk) CVE-2022-36123: (unk) x86: Clear .brk area at early boot CVE-2022-3621: (unk) nilfs2: fix NULL pointer dereference at nilfs_bmap_lookup_at_level() CVE-2022-3624: (unk) bonding: fix reference count leak in balance-alb mode @@ -930,7 +932,6 @@ CVE-2022-4744: (unk) tun: avoid double free in tun_free_netdev CVE-2022-47520: (unk) wifi: wilc1000: validate pairwise and authentication suite offsets CVE-2022-47929: (unk) net: sched: disallow noqueue for qdisc classes - CVE-2022-48502: (unk) fs/ntfs3: Check fields while reading CVE-2023-0030: (unk) drm/nouveau/mmu: add more general vmm free/node handling functions CVE-2023-0047: (unk) mm, oom: do not trigger out_of_memory from the #PF CVE-2023-0160: (unk) @@ -968,6 +969,7 @@ CVE-2023-1990: (unk) nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition CVE-2023-2002: (unk) bluetooth: Perform careful capability checks in hci_sock_ioctl() CVE-2023-2007: (unk) scsi: dpt_i2o: Remove obsolete driver + CVE-2023-20593: (unk) x86/cpu/amd: Add a Zenbleed fix CVE-2023-20941: (unk) CVE-2023-2124: (unk) xfs: verify buffer contents when we skip log replay CVE-2023-2162: (unk) scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress @@ -1003,19 +1005,13 @@ CVE-2023-31084: (unk) media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() CVE-2023-31085: (unk) CVE-2023-3111: (unk) btrfs: unset reloc control if transaction commit fails in prepare_to_relocate() + CVE-2023-3117: (unk) netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE CVE-2023-3141: (unk) memstick: r592: Fix UAF bug in r592_remove due to race condition CVE-2023-31436: (unk) net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg CVE-2023-3159: (unk) firewire: fix potential uaf in outbound_phy_packet_callback() CVE-2023-3161: (unk) fbcon: Check font dimension limits CVE-2023-3212: (unk) gfs2: Don't deref jdesc in evict CVE-2023-32233: (unk) netfilter: nf_tables: deactivate anonymous set from preparation phase - CVE-2023-32247: (unk) ksmbd: destroy expired sessions - CVE-2023-32248: (unk) ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem() - CVE-2023-32250: (unk) ksmbd: fix racy issue from session setup and logoff - CVE-2023-32252: (unk) ksmbd: fix racy issue from session setup and logoff - CVE-2023-32254: (unk) ksmbd: fix racy issue under cocurrent smb2 tree disconnect - CVE-2023-32257: (unk) ksmbd: fix racy issue from session setup and logoff - CVE-2023-32258: (unk) ksmbd: fix racy issue from smb2 close and logoff with multichannel CVE-2023-32269: (unk) netrom: Fix use-after-free caused by accept on already connected socket CVE-2023-3268: (unk) relayfs: fix out-of-bounds access in relay_file_read CVE-2023-33203: (unk) net: qcom/emac: Fix use after free bug in emac_remove due to race condition @@ -1028,17 +1024,16 @@ CVE-2023-34256: (unk) ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum CVE-2023-35001: (unk) netfilter: nf_tables: prevent OOB access in nft_byteorder_eval CVE-2023-3567: (unk) vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF - CVE-2023-35693: (unk) CVE-2023-35823: (unk) media: saa7134: fix use after free bug in saa7134_finidev due to race condition CVE-2023-35824: (unk) media: dm1105: Fix use after free bug in dm1105_remove due to race condition CVE-2023-35827: (unk) + CVE-2023-3609: (unk) net/sched: cls_u32: Fix reference counter leak leading to overflow + CVE-2023-3611: (unk) net/sched: sch_qfq: account for stab overhead in qfq_enqueue CVE-2023-3640: (unk) CVE-2023-37453: (unk) CVE-2023-37454: (unk) - CVE-2023-38426: (unk) ksmbd: fix global-out-of-bounds in smb2_find_context_vals - CVE-2023-38427: (unk) ksmbd: fix out-of-bound read in deassemble_neg_contexts() - CVE-2023-38428: (unk) ksmbd: fix wrong UserName check in session_user - CVE-2023-38429: (unk) ksmbd: allocate one more byte for implied bcc[0] - CVE-2023-38430: (unk) ksmbd: validate smb request protocol id - CVE-2023-38431: (unk) ksmbd: check the validation of pdu_size in ksmbd_conn_handler_loop - CVE-2023-38432: (unk) ksmbd: validate command payload size + CVE-2023-3772: (unk) + CVE-2023-3773: (unk) + CVE-2023-3776: (unk) net/sched: cls_fw: Fix improper refcount update leads to use-after-free + CVE-2023-3812: (unk) net: tun: fix bugs for oversize packet when napi frags enabled + CVE-2023-3863: (unk) net: nfc: Fix use-after-free caused by nfc_llcp_find_local
diff --git a/data/4.16/4.16_CVEs.txt b/data/4.16/4.16_CVEs.txt index ace315b..480b493 100644 --- a/data/4.16/4.16_CVEs.txt +++ b/data/4.16/4.16_CVEs.txt
@@ -819,6 +819,7 @@ CVE-2022-3522: Fix not seen in stream CVE-2022-3523: Fix not seen in stream CVE-2022-3524: Fix not seen in stream +CVE-2022-3533: Fix unknown CVE-2022-3534: Fix not seen in stream CVE-2022-3542: Fix not seen in stream CVE-2022-3545: Fix not seen in stream @@ -829,6 +830,7 @@ CVE-2022-3586: Fix not seen in stream CVE-2022-3594: Fix not seen in stream CVE-2022-3595: Fix not seen in stream +CVE-2022-3606: Fix unknown CVE-2022-36123: Fix not seen in stream CVE-2022-3621: Fix not seen in stream CVE-2022-3624: Fix not seen in stream @@ -878,7 +880,6 @@ CVE-2022-4744: Fix not seen in stream CVE-2022-47520: Fix not seen in stream CVE-2022-47929: Fix not seen in stream -CVE-2022-48502: Fix not seen in stream CVE-2023-0030: Fix not seen in stream CVE-2023-0047: Fix not seen in stream CVE-2023-0160: Fix unknown @@ -916,6 +917,7 @@ CVE-2023-1990: Fix not seen in stream CVE-2023-2002: Fix not seen in stream CVE-2023-2007: Fix not seen in stream +CVE-2023-20593: Fix not seen in stream CVE-2023-20941: Fix unknown CVE-2023-2124: Fix not seen in stream CVE-2023-2162: Fix not seen in stream @@ -951,19 +953,13 @@ CVE-2023-31084: Fix not seen in stream CVE-2023-31085: Fix unknown CVE-2023-3111: Fix not seen in stream +CVE-2023-3117: Fix not seen in stream CVE-2023-3141: Fix not seen in stream CVE-2023-31436: Fix not seen in stream CVE-2023-3159: Fix not seen in stream CVE-2023-3161: Fix not seen in stream CVE-2023-3212: Fix not seen in stream CVE-2023-32233: Fix not seen in stream -CVE-2023-32247: Fix not seen in stream -CVE-2023-32248: Fix not seen in stream -CVE-2023-32250: Fix not seen in stream -CVE-2023-32252: Fix not seen in stream -CVE-2023-32254: Fix not seen in stream -CVE-2023-32257: Fix not seen in stream -CVE-2023-32258: Fix not seen in stream CVE-2023-32269: Fix not seen in stream CVE-2023-3268: Fix not seen in stream CVE-2023-33203: Fix not seen in stream @@ -976,17 +972,16 @@ CVE-2023-34256: Fix not seen in stream CVE-2023-35001: Fix not seen in stream CVE-2023-3567: Fix not seen in stream -CVE-2023-35693: Fix unknown CVE-2023-35823: Fix not seen in stream CVE-2023-35824: Fix not seen in stream CVE-2023-35827: Fix unknown +CVE-2023-3609: Fix not seen in stream +CVE-2023-3611: Fix not seen in stream CVE-2023-3640: Fix unknown CVE-2023-37453: Fix unknown CVE-2023-37454: Fix unknown -CVE-2023-38426: Fix not seen in stream -CVE-2023-38427: Fix not seen in stream -CVE-2023-38428: Fix not seen in stream -CVE-2023-38429: Fix not seen in stream -CVE-2023-38430: Fix not seen in stream -CVE-2023-38431: Fix not seen in stream -CVE-2023-38432: Fix not seen in stream +CVE-2023-3772: Fix unknown +CVE-2023-3773: Fix unknown +CVE-2023-3776: Fix not seen in stream +CVE-2023-3812: Fix not seen in stream +CVE-2023-3863: Fix not seen in stream
diff --git a/data/4.16/4.16_security.txt b/data/4.16/4.16_security.txt index 8eafdcd..f5fb27f 100644 --- a/data/4.16/4.16_security.txt +++ b/data/4.16/4.16_security.txt
@@ -851,6 +851,7 @@ CVE-2022-3522: (unk) mm/hugetlb: use hugetlb_pte_stable in migration race check CVE-2022-3523: (unk) mm/memory.c: fix race when faulting a device private page CVE-2022-3524: (unk) tcp/udp: Fix memory leak in ipv6_renew_options(). + CVE-2022-3533: (unk) CVE-2022-3534: (unk) libbpf: Fix use-after-free in btf_dump_name_dups CVE-2022-3542: (unk) bnx2x: fix potential memory leak in bnx2x_tpa_stop() CVE-2022-3545: (unk) nfp: fix use-after-free in area_cache_get() @@ -861,6 +862,7 @@ CVE-2022-3586: (unk) sch_sfb: Don't assume the skb is still around after enqueueing to child CVE-2022-3594: (unk) r8152: Rate limit overflow messages CVE-2022-3595: (unk) cifs: fix double-fault crash during ntlmssp + CVE-2022-3606: (unk) CVE-2022-36123: (unk) x86: Clear .brk area at early boot CVE-2022-3621: (unk) nilfs2: fix NULL pointer dereference at nilfs_bmap_lookup_at_level() CVE-2022-3624: (unk) bonding: fix reference count leak in balance-alb mode @@ -910,7 +912,6 @@ CVE-2022-4744: (unk) tun: avoid double free in tun_free_netdev CVE-2022-47520: (unk) wifi: wilc1000: validate pairwise and authentication suite offsets CVE-2022-47929: (unk) net: sched: disallow noqueue for qdisc classes - CVE-2022-48502: (unk) fs/ntfs3: Check fields while reading CVE-2023-0030: (unk) drm/nouveau/mmu: add more general vmm free/node handling functions CVE-2023-0047: (unk) mm, oom: do not trigger out_of_memory from the #PF CVE-2023-0160: (unk) @@ -948,6 +949,7 @@ CVE-2023-1990: (unk) nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition CVE-2023-2002: (unk) bluetooth: Perform careful capability checks in hci_sock_ioctl() CVE-2023-2007: (unk) scsi: dpt_i2o: Remove obsolete driver + CVE-2023-20593: (unk) x86/cpu/amd: Add a Zenbleed fix CVE-2023-20941: (unk) CVE-2023-2124: (unk) xfs: verify buffer contents when we skip log replay CVE-2023-2162: (unk) scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress @@ -983,19 +985,13 @@ CVE-2023-31084: (unk) media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() CVE-2023-31085: (unk) CVE-2023-3111: (unk) btrfs: unset reloc control if transaction commit fails in prepare_to_relocate() + CVE-2023-3117: (unk) netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE CVE-2023-3141: (unk) memstick: r592: Fix UAF bug in r592_remove due to race condition CVE-2023-31436: (unk) net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg CVE-2023-3159: (unk) firewire: fix potential uaf in outbound_phy_packet_callback() CVE-2023-3161: (unk) fbcon: Check font dimension limits CVE-2023-3212: (unk) gfs2: Don't deref jdesc in evict CVE-2023-32233: (unk) netfilter: nf_tables: deactivate anonymous set from preparation phase - CVE-2023-32247: (unk) ksmbd: destroy expired sessions - CVE-2023-32248: (unk) ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem() - CVE-2023-32250: (unk) ksmbd: fix racy issue from session setup and logoff - CVE-2023-32252: (unk) ksmbd: fix racy issue from session setup and logoff - CVE-2023-32254: (unk) ksmbd: fix racy issue under cocurrent smb2 tree disconnect - CVE-2023-32257: (unk) ksmbd: fix racy issue from session setup and logoff - CVE-2023-32258: (unk) ksmbd: fix racy issue from smb2 close and logoff with multichannel CVE-2023-32269: (unk) netrom: Fix use-after-free caused by accept on already connected socket CVE-2023-3268: (unk) relayfs: fix out-of-bounds access in relay_file_read CVE-2023-33203: (unk) net: qcom/emac: Fix use after free bug in emac_remove due to race condition @@ -1008,17 +1004,16 @@ CVE-2023-34256: (unk) ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum CVE-2023-35001: (unk) netfilter: nf_tables: prevent OOB access in nft_byteorder_eval CVE-2023-3567: (unk) vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF - CVE-2023-35693: (unk) CVE-2023-35823: (unk) media: saa7134: fix use after free bug in saa7134_finidev due to race condition CVE-2023-35824: (unk) media: dm1105: Fix use after free bug in dm1105_remove due to race condition CVE-2023-35827: (unk) + CVE-2023-3609: (unk) net/sched: cls_u32: Fix reference counter leak leading to overflow + CVE-2023-3611: (unk) net/sched: sch_qfq: account for stab overhead in qfq_enqueue CVE-2023-3640: (unk) CVE-2023-37453: (unk) CVE-2023-37454: (unk) - CVE-2023-38426: (unk) ksmbd: fix global-out-of-bounds in smb2_find_context_vals - CVE-2023-38427: (unk) ksmbd: fix out-of-bound read in deassemble_neg_contexts() - CVE-2023-38428: (unk) ksmbd: fix wrong UserName check in session_user - CVE-2023-38429: (unk) ksmbd: allocate one more byte for implied bcc[0] - CVE-2023-38430: (unk) ksmbd: validate smb request protocol id - CVE-2023-38431: (unk) ksmbd: check the validation of pdu_size in ksmbd_conn_handler_loop - CVE-2023-38432: (unk) ksmbd: validate command payload size + CVE-2023-3772: (unk) + CVE-2023-3773: (unk) + CVE-2023-3776: (unk) net/sched: cls_fw: Fix improper refcount update leads to use-after-free + CVE-2023-3812: (unk) net: tun: fix bugs for oversize packet when napi frags enabled + CVE-2023-3863: (unk) net: nfc: Fix use-after-free caused by nfc_llcp_find_local
diff --git a/data/4.17/4.17_CVEs.txt b/data/4.17/4.17_CVEs.txt index a559ce1..0891605 100644 --- a/data/4.17/4.17_CVEs.txt +++ b/data/4.17/4.17_CVEs.txt
@@ -799,6 +799,7 @@ CVE-2022-3522: Fix not seen in stream CVE-2022-3523: Fix not seen in stream CVE-2022-3524: Fix not seen in stream +CVE-2022-3533: Fix unknown CVE-2022-3534: Fix not seen in stream CVE-2022-3542: Fix not seen in stream CVE-2022-3545: Fix not seen in stream @@ -809,6 +810,7 @@ CVE-2022-3586: Fix not seen in stream CVE-2022-3594: Fix not seen in stream CVE-2022-3595: Fix not seen in stream +CVE-2022-3606: Fix unknown CVE-2022-36123: Fix not seen in stream CVE-2022-3621: Fix not seen in stream CVE-2022-3624: Fix not seen in stream @@ -858,7 +860,6 @@ CVE-2022-4744: Fix not seen in stream CVE-2022-47520: Fix not seen in stream CVE-2022-47929: Fix not seen in stream -CVE-2022-48502: Fix not seen in stream CVE-2023-0030: Fix not seen in stream CVE-2023-0047: Fix not seen in stream CVE-2023-0160: Fix unknown @@ -898,6 +899,7 @@ CVE-2023-1990: Fix not seen in stream CVE-2023-2002: Fix not seen in stream CVE-2023-2007: Fix not seen in stream +CVE-2023-20593: Fix not seen in stream CVE-2023-20941: Fix unknown CVE-2023-2124: Fix not seen in stream CVE-2023-2162: Fix not seen in stream @@ -933,19 +935,13 @@ CVE-2023-31084: Fix not seen in stream CVE-2023-31085: Fix unknown CVE-2023-3111: Fix not seen in stream +CVE-2023-3117: Fix not seen in stream CVE-2023-3141: Fix not seen in stream CVE-2023-31436: Fix not seen in stream CVE-2023-3159: Fix not seen in stream CVE-2023-3161: Fix not seen in stream CVE-2023-3212: Fix not seen in stream CVE-2023-32233: Fix not seen in stream -CVE-2023-32247: Fix not seen in stream -CVE-2023-32248: Fix not seen in stream -CVE-2023-32250: Fix not seen in stream -CVE-2023-32252: Fix not seen in stream -CVE-2023-32254: Fix not seen in stream -CVE-2023-32257: Fix not seen in stream -CVE-2023-32258: Fix not seen in stream CVE-2023-32269: Fix not seen in stream CVE-2023-3268: Fix not seen in stream CVE-2023-33203: Fix not seen in stream @@ -958,17 +954,16 @@ CVE-2023-34256: Fix not seen in stream CVE-2023-35001: Fix not seen in stream CVE-2023-3567: Fix not seen in stream -CVE-2023-35693: Fix unknown CVE-2023-35823: Fix not seen in stream CVE-2023-35824: Fix not seen in stream CVE-2023-35827: Fix unknown +CVE-2023-3609: Fix not seen in stream +CVE-2023-3611: Fix not seen in stream CVE-2023-3640: Fix unknown CVE-2023-37453: Fix unknown CVE-2023-37454: Fix unknown -CVE-2023-38426: Fix not seen in stream -CVE-2023-38427: Fix not seen in stream -CVE-2023-38428: Fix not seen in stream -CVE-2023-38429: Fix not seen in stream -CVE-2023-38430: Fix not seen in stream -CVE-2023-38431: Fix not seen in stream -CVE-2023-38432: Fix not seen in stream +CVE-2023-3772: Fix unknown +CVE-2023-3773: Fix unknown +CVE-2023-3776: Fix not seen in stream +CVE-2023-3812: Fix not seen in stream +CVE-2023-3863: Fix not seen in stream
diff --git a/data/4.17/4.17_security.txt b/data/4.17/4.17_security.txt index 83a242b..a2cf37c 100644 --- a/data/4.17/4.17_security.txt +++ b/data/4.17/4.17_security.txt
@@ -831,6 +831,7 @@ CVE-2022-3522: (unk) mm/hugetlb: use hugetlb_pte_stable in migration race check CVE-2022-3523: (unk) mm/memory.c: fix race when faulting a device private page CVE-2022-3524: (unk) tcp/udp: Fix memory leak in ipv6_renew_options(). + CVE-2022-3533: (unk) CVE-2022-3534: (unk) libbpf: Fix use-after-free in btf_dump_name_dups CVE-2022-3542: (unk) bnx2x: fix potential memory leak in bnx2x_tpa_stop() CVE-2022-3545: (unk) nfp: fix use-after-free in area_cache_get() @@ -841,6 +842,7 @@ CVE-2022-3586: (unk) sch_sfb: Don't assume the skb is still around after enqueueing to child CVE-2022-3594: (unk) r8152: Rate limit overflow messages CVE-2022-3595: (unk) cifs: fix double-fault crash during ntlmssp + CVE-2022-3606: (unk) CVE-2022-36123: (unk) x86: Clear .brk area at early boot CVE-2022-3621: (unk) nilfs2: fix NULL pointer dereference at nilfs_bmap_lookup_at_level() CVE-2022-3624: (unk) bonding: fix reference count leak in balance-alb mode @@ -890,7 +892,6 @@ CVE-2022-4744: (unk) tun: avoid double free in tun_free_netdev CVE-2022-47520: (unk) wifi: wilc1000: validate pairwise and authentication suite offsets CVE-2022-47929: (unk) net: sched: disallow noqueue for qdisc classes - CVE-2022-48502: (unk) fs/ntfs3: Check fields while reading CVE-2023-0030: (unk) drm/nouveau/mmu: add more general vmm free/node handling functions CVE-2023-0047: (unk) mm, oom: do not trigger out_of_memory from the #PF CVE-2023-0160: (unk) @@ -930,6 +931,7 @@ CVE-2023-1990: (unk) nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition CVE-2023-2002: (unk) bluetooth: Perform careful capability checks in hci_sock_ioctl() CVE-2023-2007: (unk) scsi: dpt_i2o: Remove obsolete driver + CVE-2023-20593: (unk) x86/cpu/amd: Add a Zenbleed fix CVE-2023-20941: (unk) CVE-2023-2124: (unk) xfs: verify buffer contents when we skip log replay CVE-2023-2162: (unk) scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress @@ -965,19 +967,13 @@ CVE-2023-31084: (unk) media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() CVE-2023-31085: (unk) CVE-2023-3111: (unk) btrfs: unset reloc control if transaction commit fails in prepare_to_relocate() + CVE-2023-3117: (unk) netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE CVE-2023-3141: (unk) memstick: r592: Fix UAF bug in r592_remove due to race condition CVE-2023-31436: (unk) net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg CVE-2023-3159: (unk) firewire: fix potential uaf in outbound_phy_packet_callback() CVE-2023-3161: (unk) fbcon: Check font dimension limits CVE-2023-3212: (unk) gfs2: Don't deref jdesc in evict CVE-2023-32233: (unk) netfilter: nf_tables: deactivate anonymous set from preparation phase - CVE-2023-32247: (unk) ksmbd: destroy expired sessions - CVE-2023-32248: (unk) ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem() - CVE-2023-32250: (unk) ksmbd: fix racy issue from session setup and logoff - CVE-2023-32252: (unk) ksmbd: fix racy issue from session setup and logoff - CVE-2023-32254: (unk) ksmbd: fix racy issue under cocurrent smb2 tree disconnect - CVE-2023-32257: (unk) ksmbd: fix racy issue from session setup and logoff - CVE-2023-32258: (unk) ksmbd: fix racy issue from smb2 close and logoff with multichannel CVE-2023-32269: (unk) netrom: Fix use-after-free caused by accept on already connected socket CVE-2023-3268: (unk) relayfs: fix out-of-bounds access in relay_file_read CVE-2023-33203: (unk) net: qcom/emac: Fix use after free bug in emac_remove due to race condition @@ -990,17 +986,16 @@ CVE-2023-34256: (unk) ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum CVE-2023-35001: (unk) netfilter: nf_tables: prevent OOB access in nft_byteorder_eval CVE-2023-3567: (unk) vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF - CVE-2023-35693: (unk) CVE-2023-35823: (unk) media: saa7134: fix use after free bug in saa7134_finidev due to race condition CVE-2023-35824: (unk) media: dm1105: Fix use after free bug in dm1105_remove due to race condition CVE-2023-35827: (unk) + CVE-2023-3609: (unk) net/sched: cls_u32: Fix reference counter leak leading to overflow + CVE-2023-3611: (unk) net/sched: sch_qfq: account for stab overhead in qfq_enqueue CVE-2023-3640: (unk) CVE-2023-37453: (unk) CVE-2023-37454: (unk) - CVE-2023-38426: (unk) ksmbd: fix global-out-of-bounds in smb2_find_context_vals - CVE-2023-38427: (unk) ksmbd: fix out-of-bound read in deassemble_neg_contexts() - CVE-2023-38428: (unk) ksmbd: fix wrong UserName check in session_user - CVE-2023-38429: (unk) ksmbd: allocate one more byte for implied bcc[0] - CVE-2023-38430: (unk) ksmbd: validate smb request protocol id - CVE-2023-38431: (unk) ksmbd: check the validation of pdu_size in ksmbd_conn_handler_loop - CVE-2023-38432: (unk) ksmbd: validate command payload size + CVE-2023-3772: (unk) + CVE-2023-3773: (unk) + CVE-2023-3776: (unk) net/sched: cls_fw: Fix improper refcount update leads to use-after-free + CVE-2023-3812: (unk) net: tun: fix bugs for oversize packet when napi frags enabled + CVE-2023-3863: (unk) net: nfc: Fix use-after-free caused by nfc_llcp_find_local
diff --git a/data/4.18/4.18_CVEs.txt b/data/4.18/4.18_CVEs.txt index 28d26f8..da46b61 100644 --- a/data/4.18/4.18_CVEs.txt +++ b/data/4.18/4.18_CVEs.txt
@@ -777,6 +777,7 @@ CVE-2022-3522: Fix not seen in stream CVE-2022-3523: Fix not seen in stream CVE-2022-3524: Fix not seen in stream +CVE-2022-3533: Fix unknown CVE-2022-3534: Fix not seen in stream CVE-2022-3542: Fix not seen in stream CVE-2022-3545: Fix not seen in stream @@ -787,6 +788,7 @@ CVE-2022-3586: Fix not seen in stream CVE-2022-3594: Fix not seen in stream CVE-2022-3595: Fix not seen in stream +CVE-2022-3606: Fix unknown CVE-2022-36123: Fix not seen in stream CVE-2022-3621: Fix not seen in stream CVE-2022-3624: Fix not seen in stream @@ -836,7 +838,6 @@ CVE-2022-4744: Fix not seen in stream CVE-2022-47520: Fix not seen in stream CVE-2022-47929: Fix not seen in stream -CVE-2022-48502: Fix not seen in stream CVE-2023-0030: Fix not seen in stream CVE-2023-0047: Fix not seen in stream CVE-2023-0160: Fix unknown @@ -876,6 +877,7 @@ CVE-2023-1990: Fix not seen in stream CVE-2023-2002: Fix not seen in stream CVE-2023-2007: Fix not seen in stream +CVE-2023-20593: Fix not seen in stream CVE-2023-20941: Fix unknown CVE-2023-2124: Fix not seen in stream CVE-2023-2162: Fix not seen in stream @@ -911,19 +913,13 @@ CVE-2023-31084: Fix not seen in stream CVE-2023-31085: Fix unknown CVE-2023-3111: Fix not seen in stream +CVE-2023-3117: Fix not seen in stream CVE-2023-3141: Fix not seen in stream CVE-2023-31436: Fix not seen in stream CVE-2023-3159: Fix not seen in stream CVE-2023-3161: Fix not seen in stream CVE-2023-3212: Fix not seen in stream CVE-2023-32233: Fix not seen in stream -CVE-2023-32247: Fix not seen in stream -CVE-2023-32248: Fix not seen in stream -CVE-2023-32250: Fix not seen in stream -CVE-2023-32252: Fix not seen in stream -CVE-2023-32254: Fix not seen in stream -CVE-2023-32257: Fix not seen in stream -CVE-2023-32258: Fix not seen in stream CVE-2023-32269: Fix not seen in stream CVE-2023-3268: Fix not seen in stream CVE-2023-33203: Fix not seen in stream @@ -936,17 +932,16 @@ CVE-2023-34256: Fix not seen in stream CVE-2023-35001: Fix not seen in stream CVE-2023-3567: Fix not seen in stream -CVE-2023-35693: Fix unknown CVE-2023-35823: Fix not seen in stream CVE-2023-35824: Fix not seen in stream CVE-2023-35827: Fix unknown +CVE-2023-3609: Fix not seen in stream +CVE-2023-3611: Fix not seen in stream CVE-2023-3640: Fix unknown CVE-2023-37453: Fix unknown CVE-2023-37454: Fix unknown -CVE-2023-38426: Fix not seen in stream -CVE-2023-38427: Fix not seen in stream -CVE-2023-38428: Fix not seen in stream -CVE-2023-38429: Fix not seen in stream -CVE-2023-38430: Fix not seen in stream -CVE-2023-38431: Fix not seen in stream -CVE-2023-38432: Fix not seen in stream +CVE-2023-3772: Fix unknown +CVE-2023-3773: Fix unknown +CVE-2023-3776: Fix not seen in stream +CVE-2023-3812: Fix not seen in stream +CVE-2023-3863: Fix not seen in stream
diff --git a/data/4.18/4.18_security.txt b/data/4.18/4.18_security.txt index 5277382..53b0397 100644 --- a/data/4.18/4.18_security.txt +++ b/data/4.18/4.18_security.txt
@@ -809,6 +809,7 @@ CVE-2022-3522: (unk) mm/hugetlb: use hugetlb_pte_stable in migration race check CVE-2022-3523: (unk) mm/memory.c: fix race when faulting a device private page CVE-2022-3524: (unk) tcp/udp: Fix memory leak in ipv6_renew_options(). + CVE-2022-3533: (unk) CVE-2022-3534: (unk) libbpf: Fix use-after-free in btf_dump_name_dups CVE-2022-3542: (unk) bnx2x: fix potential memory leak in bnx2x_tpa_stop() CVE-2022-3545: (unk) nfp: fix use-after-free in area_cache_get() @@ -819,6 +820,7 @@ CVE-2022-3586: (unk) sch_sfb: Don't assume the skb is still around after enqueueing to child CVE-2022-3594: (unk) r8152: Rate limit overflow messages CVE-2022-3595: (unk) cifs: fix double-fault crash during ntlmssp + CVE-2022-3606: (unk) CVE-2022-36123: (unk) x86: Clear .brk area at early boot CVE-2022-3621: (unk) nilfs2: fix NULL pointer dereference at nilfs_bmap_lookup_at_level() CVE-2022-3624: (unk) bonding: fix reference count leak in balance-alb mode @@ -868,7 +870,6 @@ CVE-2022-4744: (unk) tun: avoid double free in tun_free_netdev CVE-2022-47520: (unk) wifi: wilc1000: validate pairwise and authentication suite offsets CVE-2022-47929: (unk) net: sched: disallow noqueue for qdisc classes - CVE-2022-48502: (unk) fs/ntfs3: Check fields while reading CVE-2023-0030: (unk) drm/nouveau/mmu: add more general vmm free/node handling functions CVE-2023-0047: (unk) mm, oom: do not trigger out_of_memory from the #PF CVE-2023-0160: (unk) @@ -908,6 +909,7 @@ CVE-2023-1990: (unk) nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition CVE-2023-2002: (unk) bluetooth: Perform careful capability checks in hci_sock_ioctl() CVE-2023-2007: (unk) scsi: dpt_i2o: Remove obsolete driver + CVE-2023-20593: (unk) x86/cpu/amd: Add a Zenbleed fix CVE-2023-20941: (unk) CVE-2023-2124: (unk) xfs: verify buffer contents when we skip log replay CVE-2023-2162: (unk) scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress @@ -943,19 +945,13 @@ CVE-2023-31084: (unk) media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() CVE-2023-31085: (unk) CVE-2023-3111: (unk) btrfs: unset reloc control if transaction commit fails in prepare_to_relocate() + CVE-2023-3117: (unk) netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE CVE-2023-3141: (unk) memstick: r592: Fix UAF bug in r592_remove due to race condition CVE-2023-31436: (unk) net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg CVE-2023-3159: (unk) firewire: fix potential uaf in outbound_phy_packet_callback() CVE-2023-3161: (unk) fbcon: Check font dimension limits CVE-2023-3212: (unk) gfs2: Don't deref jdesc in evict CVE-2023-32233: (unk) netfilter: nf_tables: deactivate anonymous set from preparation phase - CVE-2023-32247: (unk) ksmbd: destroy expired sessions - CVE-2023-32248: (unk) ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem() - CVE-2023-32250: (unk) ksmbd: fix racy issue from session setup and logoff - CVE-2023-32252: (unk) ksmbd: fix racy issue from session setup and logoff - CVE-2023-32254: (unk) ksmbd: fix racy issue under cocurrent smb2 tree disconnect - CVE-2023-32257: (unk) ksmbd: fix racy issue from session setup and logoff - CVE-2023-32258: (unk) ksmbd: fix racy issue from smb2 close and logoff with multichannel CVE-2023-32269: (unk) netrom: Fix use-after-free caused by accept on already connected socket CVE-2023-3268: (unk) relayfs: fix out-of-bounds access in relay_file_read CVE-2023-33203: (unk) net: qcom/emac: Fix use after free bug in emac_remove due to race condition @@ -968,17 +964,16 @@ CVE-2023-34256: (unk) ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum CVE-2023-35001: (unk) netfilter: nf_tables: prevent OOB access in nft_byteorder_eval CVE-2023-3567: (unk) vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF - CVE-2023-35693: (unk) CVE-2023-35823: (unk) media: saa7134: fix use after free bug in saa7134_finidev due to race condition CVE-2023-35824: (unk) media: dm1105: Fix use after free bug in dm1105_remove due to race condition CVE-2023-35827: (unk) + CVE-2023-3609: (unk) net/sched: cls_u32: Fix reference counter leak leading to overflow + CVE-2023-3611: (unk) net/sched: sch_qfq: account for stab overhead in qfq_enqueue CVE-2023-3640: (unk) CVE-2023-37453: (unk) CVE-2023-37454: (unk) - CVE-2023-38426: (unk) ksmbd: fix global-out-of-bounds in smb2_find_context_vals - CVE-2023-38427: (unk) ksmbd: fix out-of-bound read in deassemble_neg_contexts() - CVE-2023-38428: (unk) ksmbd: fix wrong UserName check in session_user - CVE-2023-38429: (unk) ksmbd: allocate one more byte for implied bcc[0] - CVE-2023-38430: (unk) ksmbd: validate smb request protocol id - CVE-2023-38431: (unk) ksmbd: check the validation of pdu_size in ksmbd_conn_handler_loop - CVE-2023-38432: (unk) ksmbd: validate command payload size + CVE-2023-3772: (unk) + CVE-2023-3773: (unk) + CVE-2023-3776: (unk) net/sched: cls_fw: Fix improper refcount update leads to use-after-free + CVE-2023-3812: (unk) net: tun: fix bugs for oversize packet when napi frags enabled + CVE-2023-3863: (unk) net: nfc: Fix use-after-free caused by nfc_llcp_find_local
diff --git a/data/4.19/4.19_CVEs.txt b/data/4.19/4.19_CVEs.txt index 9e5ce47..14af146 100644 --- a/data/4.19/4.19_CVEs.txt +++ b/data/4.19/4.19_CVEs.txt
@@ -753,6 +753,7 @@ CVE-2022-3522: Fix not seen in stream CVE-2022-3523: Fix not seen in stream CVE-2022-3524: Fixed with 4.19.268 +CVE-2022-3533: Fix unknown CVE-2022-3534: Fix not seen in stream CVE-2022-3535: Fixed with 4.19.262 CVE-2022-3542: Fixed with 4.19.262 @@ -764,6 +765,7 @@ CVE-2022-3586: Fixed with 4.19.258 CVE-2022-3594: Fixed with 4.19.262 CVE-2022-3595: Fix not seen in stream +CVE-2022-3606: Fix unknown CVE-2022-36123: Fixed with 4.19.253 CVE-2022-3621: Fixed with 4.19.262 CVE-2022-3624: Fix not seen in stream @@ -815,7 +817,6 @@ CVE-2022-4744: Fixed with 4.19.280 CVE-2022-47520: Fix not seen in stream CVE-2022-47929: Fixed with 4.19.270 -CVE-2022-48502: Fix not seen in stream CVE-2023-0030: Fix not seen in stream CVE-2023-0047: Fixed with 4.19.218 CVE-2023-0160: Fix unknown @@ -855,6 +856,7 @@ CVE-2023-1990: Fixed with 4.19.279 CVE-2023-2002: Fixed with 4.19.283 CVE-2023-2007: Fix not seen in stream +CVE-2023-20593: Fixed with 4.19.289 CVE-2023-20941: Fix unknown CVE-2023-2124: Fix not seen in stream CVE-2023-2162: Fixed with 4.19.273 @@ -891,6 +893,7 @@ CVE-2023-31084: Fix not seen in stream CVE-2023-31085: Fix unknown CVE-2023-3111: Fixed with 4.19.286 +CVE-2023-3117: Fix not seen in stream CVE-2023-3141: Fixed with 4.19.284 CVE-2023-31436: Fixed with 4.19.282 CVE-2023-3159: Fixed with 4.19.242 @@ -898,13 +901,6 @@ CVE-2023-3212: Fix not seen in stream CVE-2023-3220: Fixed with 4.19.276 CVE-2023-32233: Fixed with 4.19.283 -CVE-2023-32247: Fix not seen in stream -CVE-2023-32248: Fix not seen in stream -CVE-2023-32250: Fix not seen in stream -CVE-2023-32252: Fix not seen in stream -CVE-2023-32254: Fix not seen in stream -CVE-2023-32257: Fix not seen in stream -CVE-2023-32258: Fix not seen in stream CVE-2023-32269: Fixed with 4.19.273 CVE-2023-3268: Fixed with 4.19.283 CVE-2023-33203: Fixed with 4.19.280 @@ -917,19 +913,18 @@ CVE-2023-34256: Fixed with 4.19.283 CVE-2023-35001: Fix not seen in stream CVE-2023-3567: Fixed with 4.19.273 -CVE-2023-35693: Fix unknown CVE-2023-35788: Fixed with 4.19.285 CVE-2023-35823: Fixed with 4.19.283 CVE-2023-35824: Fixed with 4.19.283 CVE-2023-35827: Fix unknown CVE-2023-35828: Fixed with 4.19.283 +CVE-2023-3609: Fix not seen in stream +CVE-2023-3611: Fix not seen in stream CVE-2023-3640: Fix unknown CVE-2023-37453: Fix unknown CVE-2023-37454: Fix unknown -CVE-2023-38426: Fix not seen in stream -CVE-2023-38427: Fix not seen in stream -CVE-2023-38428: Fix not seen in stream -CVE-2023-38429: Fix not seen in stream -CVE-2023-38430: Fix not seen in stream -CVE-2023-38431: Fix not seen in stream -CVE-2023-38432: Fix not seen in stream +CVE-2023-3772: Fix unknown +CVE-2023-3773: Fix unknown +CVE-2023-3776: Fix not seen in stream +CVE-2023-3812: Fixed with 4.19.265 +CVE-2023-3863: Fix not seen in stream
diff --git a/data/4.19/4.19_security.txt b/data/4.19/4.19_security.txt index 550ed93..9b66bdd 100644 --- a/data/4.19/4.19_security.txt +++ b/data/4.19/4.19_security.txt
@@ -1071,6 +1071,7 @@ CVE-2022-3564: 6c7407bfbeafc80a04e6eaedcf34d378532a04f2 Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu CVE-2022-3628: 5e7d546917431400b7d6e5e38f588e0bd13083c9 wifi: brcmfmac: Fix potential buffer overflow in brcmf_fweh_event_worker() CVE-2022-42895: 36919a82f335784d86b4def308739559bb47943d Bluetooth: L2CAP: Fix attempting to access uninitialized memory + CVE-2023-3812: aa815bf32acf560dad63c3dc46bc7b98ca9a9672 net: tun: fix bugs for oversize packet when napi frags enabled CVEs fixed in 4.19.267: CVE-2022-3521: 23a0a5869749c7833772330313ae7aec6581ec60 kcm: avoid potential race in kcm_tx_work @@ -1174,6 +1175,9 @@ CVEs fixed in 4.19.287: CVE-2023-3338: 3e77bbc87342841db66c18a3afca0441c8c555e4 Remove DECnet support from kernel +CVEs fixed in 4.19.289: + CVE-2023-20593: cfef7bbf0dca27209ea5d82d7060d4fc2c0d72ea x86/cpu/amd: Add a Zenbleed fix + Outstanding CVEs: CVE-2005-3660: (unk) CVE-2007-3719: (unk) @@ -1308,10 +1312,12 @@ CVE-2022-3344: (unk) KVM: x86: nSVM: harden svm_free_nested against freeing vmcb02 while still in use CVE-2022-3522: (unk) mm/hugetlb: use hugetlb_pte_stable in migration race check CVE-2022-3523: (unk) mm/memory.c: fix race when faulting a device private page + CVE-2022-3533: (unk) CVE-2022-3534: (unk) libbpf: Fix use-after-free in btf_dump_name_dups CVE-2022-3566: (unk) tcp: Fix data races around icsk->icsk_af_ops. CVE-2022-3567: (unk) ipv6: Fix data races around sk->sk_prot. CVE-2022-3595: (unk) cifs: fix double-fault crash during ntlmssp + CVE-2022-3606: (unk) CVE-2022-3624: (unk) bonding: fix reference count leak in balance-alb mode CVE-2022-3625: (unk) devlink: Fix use-after-free after a failed reload CVE-2022-3636: (unk) net: ethernet: mtk_eth_soc: use after free in __mtk_ppe_check_skb() @@ -1335,7 +1341,6 @@ CVE-2022-45887: (unk) CVE-2022-45919: (unk) CVE-2022-47520: (unk) wifi: wilc1000: validate pairwise and authentication suite offsets - CVE-2022-48502: (unk) fs/ntfs3: Check fields while reading CVE-2023-0030: (unk) drm/nouveau/mmu: add more general vmm free/node handling functions CVE-2023-0160: (unk) CVE-2023-0386: (unk) ovl: fail on invalid uid/gid mapping at copy up @@ -1366,28 +1371,20 @@ CVE-2023-31083: (unk) CVE-2023-31084: (unk) media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() CVE-2023-31085: (unk) + CVE-2023-3117: (unk) netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE CVE-2023-3212: (unk) gfs2: Don't deref jdesc in evict - CVE-2023-32247: (unk) ksmbd: destroy expired sessions - CVE-2023-32248: (unk) ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem() - CVE-2023-32250: (unk) ksmbd: fix racy issue from session setup and logoff - CVE-2023-32252: (unk) ksmbd: fix racy issue from session setup and logoff - CVE-2023-32254: (unk) ksmbd: fix racy issue under cocurrent smb2 tree disconnect - CVE-2023-32257: (unk) ksmbd: fix racy issue from session setup and logoff - CVE-2023-32258: (unk) ksmbd: fix racy issue from smb2 close and logoff with multichannel CVE-2023-33288: (unk) power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition CVE-2023-3390: (unk) netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE CVE-2023-3397: (unk) CVE-2023-34255: (unk) xfs: verify buffer contents when we skip log replay CVE-2023-35001: (unk) netfilter: nf_tables: prevent OOB access in nft_byteorder_eval - CVE-2023-35693: (unk) CVE-2023-35827: (unk) + CVE-2023-3609: (unk) net/sched: cls_u32: Fix reference counter leak leading to overflow + CVE-2023-3611: (unk) net/sched: sch_qfq: account for stab overhead in qfq_enqueue CVE-2023-3640: (unk) CVE-2023-37453: (unk) CVE-2023-37454: (unk) - CVE-2023-38426: (unk) ksmbd: fix global-out-of-bounds in smb2_find_context_vals - CVE-2023-38427: (unk) ksmbd: fix out-of-bound read in deassemble_neg_contexts() - CVE-2023-38428: (unk) ksmbd: fix wrong UserName check in session_user - CVE-2023-38429: (unk) ksmbd: allocate one more byte for implied bcc[0] - CVE-2023-38430: (unk) ksmbd: validate smb request protocol id - CVE-2023-38431: (unk) ksmbd: check the validation of pdu_size in ksmbd_conn_handler_loop - CVE-2023-38432: (unk) ksmbd: validate command payload size + CVE-2023-3772: (unk) + CVE-2023-3773: (unk) + CVE-2023-3776: (unk) net/sched: cls_fw: Fix improper refcount update leads to use-after-free + CVE-2023-3863: (unk) net: nfc: Fix use-after-free caused by nfc_llcp_find_local
diff --git a/data/4.20/4.20_CVEs.txt b/data/4.20/4.20_CVEs.txt index 292ca29..16d3236 100644 --- a/data/4.20/4.20_CVEs.txt +++ b/data/4.20/4.20_CVEs.txt
@@ -741,6 +741,7 @@ CVE-2022-3522: Fix not seen in stream CVE-2022-3523: Fix not seen in stream CVE-2022-3524: Fix not seen in stream +CVE-2022-3533: Fix unknown CVE-2022-3534: Fix not seen in stream CVE-2022-3535: Fix not seen in stream CVE-2022-3542: Fix not seen in stream @@ -753,6 +754,7 @@ CVE-2022-3586: Fix not seen in stream CVE-2022-3594: Fix not seen in stream CVE-2022-3595: Fix not seen in stream +CVE-2022-3606: Fix unknown CVE-2022-36123: Fix not seen in stream CVE-2022-3621: Fix not seen in stream CVE-2022-3624: Fix not seen in stream @@ -806,7 +808,6 @@ CVE-2022-4744: Fix not seen in stream CVE-2022-47520: Fix not seen in stream CVE-2022-47929: Fix not seen in stream -CVE-2022-48502: Fix not seen in stream CVE-2023-0030: Fix not seen in stream CVE-2023-0045: Fix not seen in stream CVE-2023-0047: Fix not seen in stream @@ -849,6 +850,7 @@ CVE-2023-2002: Fix not seen in stream CVE-2023-2007: Fix not seen in stream CVE-2023-2008: Fix not seen in stream +CVE-2023-20593: Fix not seen in stream CVE-2023-20928: Fix not seen in stream CVE-2023-20941: Fix unknown CVE-2023-2124: Fix not seen in stream @@ -887,6 +889,7 @@ CVE-2023-31084: Fix not seen in stream CVE-2023-31085: Fix unknown CVE-2023-3111: Fix not seen in stream +CVE-2023-3117: Fix not seen in stream CVE-2023-3141: Fix not seen in stream CVE-2023-31436: Fix not seen in stream CVE-2023-3159: Fix not seen in stream @@ -894,13 +897,6 @@ CVE-2023-3212: Fix not seen in stream CVE-2023-3220: Fix not seen in stream CVE-2023-32233: Fix not seen in stream -CVE-2023-32247: Fix not seen in stream -CVE-2023-32248: Fix not seen in stream -CVE-2023-32250: Fix not seen in stream -CVE-2023-32252: Fix not seen in stream -CVE-2023-32254: Fix not seen in stream -CVE-2023-32257: Fix not seen in stream -CVE-2023-32258: Fix not seen in stream CVE-2023-32269: Fix not seen in stream CVE-2023-3268: Fix not seen in stream CVE-2023-33203: Fix not seen in stream @@ -913,19 +909,18 @@ CVE-2023-34256: Fix not seen in stream CVE-2023-35001: Fix not seen in stream CVE-2023-3567: Fix not seen in stream -CVE-2023-35693: Fix unknown CVE-2023-35788: Fix not seen in stream CVE-2023-35823: Fix not seen in stream CVE-2023-35824: Fix not seen in stream CVE-2023-35827: Fix unknown CVE-2023-35828: Fix not seen in stream +CVE-2023-3609: Fix not seen in stream +CVE-2023-3611: Fix not seen in stream CVE-2023-3640: Fix unknown CVE-2023-37453: Fix unknown CVE-2023-37454: Fix unknown -CVE-2023-38426: Fix not seen in stream -CVE-2023-38427: Fix not seen in stream -CVE-2023-38428: Fix not seen in stream -CVE-2023-38429: Fix not seen in stream -CVE-2023-38430: Fix not seen in stream -CVE-2023-38431: Fix not seen in stream -CVE-2023-38432: Fix not seen in stream +CVE-2023-3772: Fix unknown +CVE-2023-3773: Fix unknown +CVE-2023-3776: Fix not seen in stream +CVE-2023-3812: Fix not seen in stream +CVE-2023-3863: Fix not seen in stream
diff --git a/data/4.20/4.20_security.txt b/data/4.20/4.20_security.txt index 2e03c24..760465e 100644 --- a/data/4.20/4.20_security.txt +++ b/data/4.20/4.20_security.txt
@@ -773,6 +773,7 @@ CVE-2022-3522: (unk) mm/hugetlb: use hugetlb_pte_stable in migration race check CVE-2022-3523: (unk) mm/memory.c: fix race when faulting a device private page CVE-2022-3524: (unk) tcp/udp: Fix memory leak in ipv6_renew_options(). + CVE-2022-3533: (unk) CVE-2022-3534: (unk) libbpf: Fix use-after-free in btf_dump_name_dups CVE-2022-3535: (unk) net: mvpp2: fix mvpp2 debugfs leak CVE-2022-3542: (unk) bnx2x: fix potential memory leak in bnx2x_tpa_stop() @@ -785,6 +786,7 @@ CVE-2022-3586: (unk) sch_sfb: Don't assume the skb is still around after enqueueing to child CVE-2022-3594: (unk) r8152: Rate limit overflow messages CVE-2022-3595: (unk) cifs: fix double-fault crash during ntlmssp + CVE-2022-3606: (unk) CVE-2022-36123: (unk) x86: Clear .brk area at early boot CVE-2022-3621: (unk) nilfs2: fix NULL pointer dereference at nilfs_bmap_lookup_at_level() CVE-2022-3624: (unk) bonding: fix reference count leak in balance-alb mode @@ -838,7 +840,6 @@ CVE-2022-4744: (unk) tun: avoid double free in tun_free_netdev CVE-2022-47520: (unk) wifi: wilc1000: validate pairwise and authentication suite offsets CVE-2022-47929: (unk) net: sched: disallow noqueue for qdisc classes - CVE-2022-48502: (unk) fs/ntfs3: Check fields while reading CVE-2023-0030: (unk) drm/nouveau/mmu: add more general vmm free/node handling functions CVE-2023-0045: (unk) x86/bugs: Flush IBP in ib_prctl_set() CVE-2023-0047: (unk) mm, oom: do not trigger out_of_memory from the #PF @@ -881,6 +882,7 @@ CVE-2023-2002: (unk) bluetooth: Perform careful capability checks in hci_sock_ioctl() CVE-2023-2007: (unk) scsi: dpt_i2o: Remove obsolete driver CVE-2023-2008: (unk) udmabuf: add back sanity check + CVE-2023-20593: (unk) x86/cpu/amd: Add a Zenbleed fix CVE-2023-20928: (unk) android: binder: stop saving a pointer to the VMA CVE-2023-20941: (unk) CVE-2023-2124: (unk) xfs: verify buffer contents when we skip log replay @@ -919,6 +921,7 @@ CVE-2023-31084: (unk) media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() CVE-2023-31085: (unk) CVE-2023-3111: (unk) btrfs: unset reloc control if transaction commit fails in prepare_to_relocate() + CVE-2023-3117: (unk) netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE CVE-2023-3141: (unk) memstick: r592: Fix UAF bug in r592_remove due to race condition CVE-2023-31436: (unk) net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg CVE-2023-3159: (unk) firewire: fix potential uaf in outbound_phy_packet_callback() @@ -926,13 +929,6 @@ CVE-2023-3212: (unk) gfs2: Don't deref jdesc in evict CVE-2023-3220: (unk) drm/msm/dpu: Add check for pstates CVE-2023-32233: (unk) netfilter: nf_tables: deactivate anonymous set from preparation phase - CVE-2023-32247: (unk) ksmbd: destroy expired sessions - CVE-2023-32248: (unk) ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem() - CVE-2023-32250: (unk) ksmbd: fix racy issue from session setup and logoff - CVE-2023-32252: (unk) ksmbd: fix racy issue from session setup and logoff - CVE-2023-32254: (unk) ksmbd: fix racy issue under cocurrent smb2 tree disconnect - CVE-2023-32257: (unk) ksmbd: fix racy issue from session setup and logoff - CVE-2023-32258: (unk) ksmbd: fix racy issue from smb2 close and logoff with multichannel CVE-2023-32269: (unk) netrom: Fix use-after-free caused by accept on already connected socket CVE-2023-3268: (unk) relayfs: fix out-of-bounds access in relay_file_read CVE-2023-33203: (unk) net: qcom/emac: Fix use after free bug in emac_remove due to race condition @@ -945,19 +941,18 @@ CVE-2023-34256: (unk) ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum CVE-2023-35001: (unk) netfilter: nf_tables: prevent OOB access in nft_byteorder_eval CVE-2023-3567: (unk) vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF - CVE-2023-35693: (unk) CVE-2023-35788: (unk) net/sched: flower: fix possible OOB write in fl_set_geneve_opt() CVE-2023-35823: (unk) media: saa7134: fix use after free bug in saa7134_finidev due to race condition CVE-2023-35824: (unk) media: dm1105: Fix use after free bug in dm1105_remove due to race condition CVE-2023-35827: (unk) CVE-2023-35828: (unk) usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition + CVE-2023-3609: (unk) net/sched: cls_u32: Fix reference counter leak leading to overflow + CVE-2023-3611: (unk) net/sched: sch_qfq: account for stab overhead in qfq_enqueue CVE-2023-3640: (unk) CVE-2023-37453: (unk) CVE-2023-37454: (unk) - CVE-2023-38426: (unk) ksmbd: fix global-out-of-bounds in smb2_find_context_vals - CVE-2023-38427: (unk) ksmbd: fix out-of-bound read in deassemble_neg_contexts() - CVE-2023-38428: (unk) ksmbd: fix wrong UserName check in session_user - CVE-2023-38429: (unk) ksmbd: allocate one more byte for implied bcc[0] - CVE-2023-38430: (unk) ksmbd: validate smb request protocol id - CVE-2023-38431: (unk) ksmbd: check the validation of pdu_size in ksmbd_conn_handler_loop - CVE-2023-38432: (unk) ksmbd: validate command payload size + CVE-2023-3772: (unk) + CVE-2023-3773: (unk) + CVE-2023-3776: (unk) net/sched: cls_fw: Fix improper refcount update leads to use-after-free + CVE-2023-3812: (unk) net: tun: fix bugs for oversize packet when napi frags enabled + CVE-2023-3863: (unk) net: nfc: Fix use-after-free caused by nfc_llcp_find_local
diff --git a/data/4.3/4.3_CVEs.txt b/data/4.3/4.3_CVEs.txt index 465f71c..c9d2f60 100644 --- a/data/4.3/4.3_CVEs.txt +++ b/data/4.3/4.3_CVEs.txt
@@ -1077,6 +1077,7 @@ CVE-2022-3522: Fix not seen in stream CVE-2022-3523: Fix not seen in stream CVE-2022-3524: Fix not seen in stream +CVE-2022-3533: Fix unknown CVE-2022-3534: Fix not seen in stream CVE-2022-3542: Fix not seen in stream CVE-2022-3545: Fix not seen in stream @@ -1087,6 +1088,7 @@ CVE-2022-3586: Fix not seen in stream CVE-2022-3594: Fix not seen in stream CVE-2022-3595: Fix not seen in stream +CVE-2022-3606: Fix unknown CVE-2022-36123: Fix not seen in stream CVE-2022-3621: Fix not seen in stream CVE-2022-3624: Fix not seen in stream @@ -1132,7 +1134,6 @@ CVE-2022-4744: Fix not seen in stream CVE-2022-47520: Fix not seen in stream CVE-2022-47929: Fix not seen in stream -CVE-2022-48502: Fix not seen in stream CVE-2023-0030: Fix not seen in stream CVE-2023-0047: Fix not seen in stream CVE-2023-0160: Fix unknown @@ -1162,6 +1163,7 @@ CVE-2023-1989: Fix not seen in stream CVE-2023-1990: Fix not seen in stream CVE-2023-2007: Fix not seen in stream +CVE-2023-20593: Fix not seen in stream CVE-2023-20941: Fix unknown CVE-2023-2124: Fix not seen in stream CVE-2023-2162: Fix not seen in stream @@ -1193,19 +1195,13 @@ CVE-2023-31084: Fix not seen in stream CVE-2023-31085: Fix unknown CVE-2023-3111: Fix not seen in stream +CVE-2023-3117: Fix not seen in stream CVE-2023-3141: Fix not seen in stream CVE-2023-31436: Fix not seen in stream CVE-2023-3159: Fix not seen in stream CVE-2023-3161: Fix not seen in stream CVE-2023-3212: Fix not seen in stream CVE-2023-32233: Fix not seen in stream -CVE-2023-32247: Fix not seen in stream -CVE-2023-32248: Fix not seen in stream -CVE-2023-32250: Fix not seen in stream -CVE-2023-32252: Fix not seen in stream -CVE-2023-32254: Fix not seen in stream -CVE-2023-32257: Fix not seen in stream -CVE-2023-32258: Fix not seen in stream CVE-2023-32269: Fix not seen in stream CVE-2023-3268: Fix not seen in stream CVE-2023-33288: Fix not seen in stream @@ -1216,16 +1212,14 @@ CVE-2023-34256: Fix not seen in stream CVE-2023-35001: Fix not seen in stream CVE-2023-3567: Fix not seen in stream -CVE-2023-35693: Fix unknown CVE-2023-35824: Fix not seen in stream CVE-2023-35827: Fix unknown +CVE-2023-3611: Fix not seen in stream CVE-2023-3640: Fix unknown CVE-2023-37453: Fix unknown CVE-2023-37454: Fix unknown -CVE-2023-38426: Fix not seen in stream -CVE-2023-38427: Fix not seen in stream -CVE-2023-38428: Fix not seen in stream -CVE-2023-38429: Fix not seen in stream -CVE-2023-38430: Fix not seen in stream -CVE-2023-38431: Fix not seen in stream -CVE-2023-38432: Fix not seen in stream +CVE-2023-3772: Fix unknown +CVE-2023-3773: Fix unknown +CVE-2023-3776: Fix not seen in stream +CVE-2023-3812: Fix not seen in stream +CVE-2023-3863: Fix not seen in stream
diff --git a/data/4.3/4.3_security.txt b/data/4.3/4.3_security.txt index 03559b1..e6953a3 100644 --- a/data/4.3/4.3_security.txt +++ b/data/4.3/4.3_security.txt
@@ -1093,6 +1093,7 @@ CVE-2022-3522: (unk) mm/hugetlb: use hugetlb_pte_stable in migration race check CVE-2022-3523: (unk) mm/memory.c: fix race when faulting a device private page CVE-2022-3524: (unk) tcp/udp: Fix memory leak in ipv6_renew_options(). + CVE-2022-3533: (unk) CVE-2022-3534: (unk) libbpf: Fix use-after-free in btf_dump_name_dups CVE-2022-3542: (unk) bnx2x: fix potential memory leak in bnx2x_tpa_stop() CVE-2022-3545: (unk) nfp: fix use-after-free in area_cache_get() @@ -1103,6 +1104,7 @@ CVE-2022-3586: (unk) sch_sfb: Don't assume the skb is still around after enqueueing to child CVE-2022-3594: (unk) r8152: Rate limit overflow messages CVE-2022-3595: (unk) cifs: fix double-fault crash during ntlmssp + CVE-2022-3606: (unk) CVE-2022-36123: (unk) x86: Clear .brk area at early boot CVE-2022-3621: (unk) nilfs2: fix NULL pointer dereference at nilfs_bmap_lookup_at_level() CVE-2022-3624: (unk) bonding: fix reference count leak in balance-alb mode @@ -1148,7 +1150,6 @@ CVE-2022-4744: (unk) tun: avoid double free in tun_free_netdev CVE-2022-47520: (unk) wifi: wilc1000: validate pairwise and authentication suite offsets CVE-2022-47929: (unk) net: sched: disallow noqueue for qdisc classes - CVE-2022-48502: (unk) fs/ntfs3: Check fields while reading CVE-2023-0030: (unk) drm/nouveau/mmu: add more general vmm free/node handling functions CVE-2023-0047: (unk) mm, oom: do not trigger out_of_memory from the #PF CVE-2023-0160: (unk) @@ -1178,6 +1179,7 @@ CVE-2023-1989: (unk) Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work CVE-2023-1990: (unk) nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition CVE-2023-2007: (unk) scsi: dpt_i2o: Remove obsolete driver + CVE-2023-20593: (unk) x86/cpu/amd: Add a Zenbleed fix CVE-2023-20941: (unk) CVE-2023-2124: (unk) xfs: verify buffer contents when we skip log replay CVE-2023-2162: (unk) scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress @@ -1209,19 +1211,13 @@ CVE-2023-31084: (unk) media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() CVE-2023-31085: (unk) CVE-2023-3111: (unk) btrfs: unset reloc control if transaction commit fails in prepare_to_relocate() + CVE-2023-3117: (unk) netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE CVE-2023-3141: (unk) memstick: r592: Fix UAF bug in r592_remove due to race condition CVE-2023-31436: (unk) net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg CVE-2023-3159: (unk) firewire: fix potential uaf in outbound_phy_packet_callback() CVE-2023-3161: (unk) fbcon: Check font dimension limits CVE-2023-3212: (unk) gfs2: Don't deref jdesc in evict CVE-2023-32233: (unk) netfilter: nf_tables: deactivate anonymous set from preparation phase - CVE-2023-32247: (unk) ksmbd: destroy expired sessions - CVE-2023-32248: (unk) ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem() - CVE-2023-32250: (unk) ksmbd: fix racy issue from session setup and logoff - CVE-2023-32252: (unk) ksmbd: fix racy issue from session setup and logoff - CVE-2023-32254: (unk) ksmbd: fix racy issue under cocurrent smb2 tree disconnect - CVE-2023-32257: (unk) ksmbd: fix racy issue from session setup and logoff - CVE-2023-32258: (unk) ksmbd: fix racy issue from smb2 close and logoff with multichannel CVE-2023-32269: (unk) netrom: Fix use-after-free caused by accept on already connected socket CVE-2023-3268: (unk) relayfs: fix out-of-bounds access in relay_file_read CVE-2023-33288: (unk) power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition @@ -1232,16 +1228,14 @@ CVE-2023-34256: (unk) ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum CVE-2023-35001: (unk) netfilter: nf_tables: prevent OOB access in nft_byteorder_eval CVE-2023-3567: (unk) vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF - CVE-2023-35693: (unk) CVE-2023-35824: (unk) media: dm1105: Fix use after free bug in dm1105_remove due to race condition CVE-2023-35827: (unk) + CVE-2023-3611: (unk) net/sched: sch_qfq: account for stab overhead in qfq_enqueue CVE-2023-3640: (unk) CVE-2023-37453: (unk) CVE-2023-37454: (unk) - CVE-2023-38426: (unk) ksmbd: fix global-out-of-bounds in smb2_find_context_vals - CVE-2023-38427: (unk) ksmbd: fix out-of-bound read in deassemble_neg_contexts() - CVE-2023-38428: (unk) ksmbd: fix wrong UserName check in session_user - CVE-2023-38429: (unk) ksmbd: allocate one more byte for implied bcc[0] - CVE-2023-38430: (unk) ksmbd: validate smb request protocol id - CVE-2023-38431: (unk) ksmbd: check the validation of pdu_size in ksmbd_conn_handler_loop - CVE-2023-38432: (unk) ksmbd: validate command payload size + CVE-2023-3772: (unk) + CVE-2023-3773: (unk) + CVE-2023-3776: (unk) net/sched: cls_fw: Fix improper refcount update leads to use-after-free + CVE-2023-3812: (unk) net: tun: fix bugs for oversize packet when napi frags enabled + CVE-2023-3863: (unk) net: nfc: Fix use-after-free caused by nfc_llcp_find_local
diff --git a/data/4.4/4.4_CVEs.txt b/data/4.4/4.4_CVEs.txt index 2bbb33e..d4d95d9 100644 --- a/data/4.4/4.4_CVEs.txt +++ b/data/4.4/4.4_CVEs.txt
@@ -1058,6 +1058,7 @@ CVE-2022-3522: Fix not seen in stream CVE-2022-3523: Fix not seen in stream CVE-2022-3524: Fix not seen in stream +CVE-2022-3533: Fix unknown CVE-2022-3534: Fix not seen in stream CVE-2022-3542: Fix not seen in stream CVE-2022-3545: Fix not seen in stream @@ -1068,6 +1069,7 @@ CVE-2022-3586: Fix not seen in stream CVE-2022-3594: Fix not seen in stream CVE-2022-3595: Fix not seen in stream +CVE-2022-3606: Fix unknown CVE-2022-36123: Fix not seen in stream CVE-2022-3621: Fix not seen in stream CVE-2022-3624: Fix not seen in stream @@ -1113,7 +1115,6 @@ CVE-2022-4744: Fix not seen in stream CVE-2022-47520: Fix not seen in stream CVE-2022-47929: Fix not seen in stream -CVE-2022-48502: Fix not seen in stream CVE-2023-0030: Fix not seen in stream CVE-2023-0047: Fix not seen in stream CVE-2023-0160: Fix unknown @@ -1143,6 +1144,7 @@ CVE-2023-1989: Fix not seen in stream CVE-2023-1990: Fix not seen in stream CVE-2023-2007: Fix not seen in stream +CVE-2023-20593: Fix not seen in stream CVE-2023-20941: Fix unknown CVE-2023-2124: Fix not seen in stream CVE-2023-2162: Fix not seen in stream @@ -1174,19 +1176,13 @@ CVE-2023-31084: Fix not seen in stream CVE-2023-31085: Fix unknown CVE-2023-3111: Fix not seen in stream +CVE-2023-3117: Fix not seen in stream CVE-2023-3141: Fix not seen in stream CVE-2023-31436: Fix not seen in stream CVE-2023-3159: Fix not seen in stream CVE-2023-3161: Fix not seen in stream CVE-2023-3212: Fix not seen in stream CVE-2023-32233: Fix not seen in stream -CVE-2023-32247: Fix not seen in stream -CVE-2023-32248: Fix not seen in stream -CVE-2023-32250: Fix not seen in stream -CVE-2023-32252: Fix not seen in stream -CVE-2023-32254: Fix not seen in stream -CVE-2023-32257: Fix not seen in stream -CVE-2023-32258: Fix not seen in stream CVE-2023-32269: Fix not seen in stream CVE-2023-3268: Fix not seen in stream CVE-2023-33288: Fix not seen in stream @@ -1197,16 +1193,14 @@ CVE-2023-34256: Fix not seen in stream CVE-2023-35001: Fix not seen in stream CVE-2023-3567: Fix not seen in stream -CVE-2023-35693: Fix unknown CVE-2023-35824: Fix not seen in stream CVE-2023-35827: Fix unknown +CVE-2023-3611: Fix not seen in stream CVE-2023-3640: Fix unknown CVE-2023-37453: Fix unknown CVE-2023-37454: Fix unknown -CVE-2023-38426: Fix not seen in stream -CVE-2023-38427: Fix not seen in stream -CVE-2023-38428: Fix not seen in stream -CVE-2023-38429: Fix not seen in stream -CVE-2023-38430: Fix not seen in stream -CVE-2023-38431: Fix not seen in stream -CVE-2023-38432: Fix not seen in stream +CVE-2023-3772: Fix unknown +CVE-2023-3773: Fix unknown +CVE-2023-3776: Fix not seen in stream +CVE-2023-3812: Fix not seen in stream +CVE-2023-3863: Fix not seen in stream
diff --git a/data/4.4/4.4_security.txt b/data/4.4/4.4_security.txt index b2f2b9b..2a05d63 100644 --- a/data/4.4/4.4_security.txt +++ b/data/4.4/4.4_security.txt
@@ -1546,6 +1546,7 @@ CVE-2022-3522: (unk) mm/hugetlb: use hugetlb_pte_stable in migration race check CVE-2022-3523: (unk) mm/memory.c: fix race when faulting a device private page CVE-2022-3524: (unk) tcp/udp: Fix memory leak in ipv6_renew_options(). + CVE-2022-3533: (unk) CVE-2022-3534: (unk) libbpf: Fix use-after-free in btf_dump_name_dups CVE-2022-3542: (unk) bnx2x: fix potential memory leak in bnx2x_tpa_stop() CVE-2022-3545: (unk) nfp: fix use-after-free in area_cache_get() @@ -1556,6 +1557,7 @@ CVE-2022-3586: (unk) sch_sfb: Don't assume the skb is still around after enqueueing to child CVE-2022-3594: (unk) r8152: Rate limit overflow messages CVE-2022-3595: (unk) cifs: fix double-fault crash during ntlmssp + CVE-2022-3606: (unk) CVE-2022-36123: (unk) x86: Clear .brk area at early boot CVE-2022-3621: (unk) nilfs2: fix NULL pointer dereference at nilfs_bmap_lookup_at_level() CVE-2022-3624: (unk) bonding: fix reference count leak in balance-alb mode @@ -1601,7 +1603,6 @@ CVE-2022-4744: (unk) tun: avoid double free in tun_free_netdev CVE-2022-47520: (unk) wifi: wilc1000: validate pairwise and authentication suite offsets CVE-2022-47929: (unk) net: sched: disallow noqueue for qdisc classes - CVE-2022-48502: (unk) fs/ntfs3: Check fields while reading CVE-2023-0030: (unk) drm/nouveau/mmu: add more general vmm free/node handling functions CVE-2023-0047: (unk) mm, oom: do not trigger out_of_memory from the #PF CVE-2023-0160: (unk) @@ -1631,6 +1632,7 @@ CVE-2023-1989: (unk) Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work CVE-2023-1990: (unk) nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition CVE-2023-2007: (unk) scsi: dpt_i2o: Remove obsolete driver + CVE-2023-20593: (unk) x86/cpu/amd: Add a Zenbleed fix CVE-2023-20941: (unk) CVE-2023-2124: (unk) xfs: verify buffer contents when we skip log replay CVE-2023-2162: (unk) scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress @@ -1660,19 +1662,13 @@ CVE-2023-31084: (unk) media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() CVE-2023-31085: (unk) CVE-2023-3111: (unk) btrfs: unset reloc control if transaction commit fails in prepare_to_relocate() + CVE-2023-3117: (unk) netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE CVE-2023-3141: (unk) memstick: r592: Fix UAF bug in r592_remove due to race condition CVE-2023-31436: (unk) net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg CVE-2023-3159: (unk) firewire: fix potential uaf in outbound_phy_packet_callback() CVE-2023-3161: (unk) fbcon: Check font dimension limits CVE-2023-3212: (unk) gfs2: Don't deref jdesc in evict CVE-2023-32233: (unk) netfilter: nf_tables: deactivate anonymous set from preparation phase - CVE-2023-32247: (unk) ksmbd: destroy expired sessions - CVE-2023-32248: (unk) ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem() - CVE-2023-32250: (unk) ksmbd: fix racy issue from session setup and logoff - CVE-2023-32252: (unk) ksmbd: fix racy issue from session setup and logoff - CVE-2023-32254: (unk) ksmbd: fix racy issue under cocurrent smb2 tree disconnect - CVE-2023-32257: (unk) ksmbd: fix racy issue from session setup and logoff - CVE-2023-32258: (unk) ksmbd: fix racy issue from smb2 close and logoff with multichannel CVE-2023-32269: (unk) netrom: Fix use-after-free caused by accept on already connected socket CVE-2023-3268: (unk) relayfs: fix out-of-bounds access in relay_file_read CVE-2023-33288: (unk) power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition @@ -1683,16 +1679,14 @@ CVE-2023-34256: (unk) ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum CVE-2023-35001: (unk) netfilter: nf_tables: prevent OOB access in nft_byteorder_eval CVE-2023-3567: (unk) vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF - CVE-2023-35693: (unk) CVE-2023-35824: (unk) media: dm1105: Fix use after free bug in dm1105_remove due to race condition CVE-2023-35827: (unk) + CVE-2023-3611: (unk) net/sched: sch_qfq: account for stab overhead in qfq_enqueue CVE-2023-3640: (unk) CVE-2023-37453: (unk) CVE-2023-37454: (unk) - CVE-2023-38426: (unk) ksmbd: fix global-out-of-bounds in smb2_find_context_vals - CVE-2023-38427: (unk) ksmbd: fix out-of-bound read in deassemble_neg_contexts() - CVE-2023-38428: (unk) ksmbd: fix wrong UserName check in session_user - CVE-2023-38429: (unk) ksmbd: allocate one more byte for implied bcc[0] - CVE-2023-38430: (unk) ksmbd: validate smb request protocol id - CVE-2023-38431: (unk) ksmbd: check the validation of pdu_size in ksmbd_conn_handler_loop - CVE-2023-38432: (unk) ksmbd: validate command payload size + CVE-2023-3772: (unk) + CVE-2023-3773: (unk) + CVE-2023-3776: (unk) net/sched: cls_fw: Fix improper refcount update leads to use-after-free + CVE-2023-3812: (unk) net: tun: fix bugs for oversize packet when napi frags enabled + CVE-2023-3863: (unk) net: nfc: Fix use-after-free caused by nfc_llcp_find_local
diff --git a/data/4.5/4.5_CVEs.txt b/data/4.5/4.5_CVEs.txt index 9904822..6dee101 100644 --- a/data/4.5/4.5_CVEs.txt +++ b/data/4.5/4.5_CVEs.txt
@@ -1040,6 +1040,7 @@ CVE-2022-3522: Fix not seen in stream CVE-2022-3523: Fix not seen in stream CVE-2022-3524: Fix not seen in stream +CVE-2022-3533: Fix unknown CVE-2022-3534: Fix not seen in stream CVE-2022-3542: Fix not seen in stream CVE-2022-3545: Fix not seen in stream @@ -1050,6 +1051,7 @@ CVE-2022-3586: Fix not seen in stream CVE-2022-3594: Fix not seen in stream CVE-2022-3595: Fix not seen in stream +CVE-2022-3606: Fix unknown CVE-2022-36123: Fix not seen in stream CVE-2022-3621: Fix not seen in stream CVE-2022-3624: Fix not seen in stream @@ -1095,7 +1097,6 @@ CVE-2022-4744: Fix not seen in stream CVE-2022-47520: Fix not seen in stream CVE-2022-47929: Fix not seen in stream -CVE-2022-48502: Fix not seen in stream CVE-2023-0030: Fix not seen in stream CVE-2023-0047: Fix not seen in stream CVE-2023-0160: Fix unknown @@ -1126,6 +1127,7 @@ CVE-2023-1989: Fix not seen in stream CVE-2023-1990: Fix not seen in stream CVE-2023-2007: Fix not seen in stream +CVE-2023-20593: Fix not seen in stream CVE-2023-20941: Fix unknown CVE-2023-2124: Fix not seen in stream CVE-2023-2162: Fix not seen in stream @@ -1157,19 +1159,13 @@ CVE-2023-31084: Fix not seen in stream CVE-2023-31085: Fix unknown CVE-2023-3111: Fix not seen in stream +CVE-2023-3117: Fix not seen in stream CVE-2023-3141: Fix not seen in stream CVE-2023-31436: Fix not seen in stream CVE-2023-3159: Fix not seen in stream CVE-2023-3161: Fix not seen in stream CVE-2023-3212: Fix not seen in stream CVE-2023-32233: Fix not seen in stream -CVE-2023-32247: Fix not seen in stream -CVE-2023-32248: Fix not seen in stream -CVE-2023-32250: Fix not seen in stream -CVE-2023-32252: Fix not seen in stream -CVE-2023-32254: Fix not seen in stream -CVE-2023-32257: Fix not seen in stream -CVE-2023-32258: Fix not seen in stream CVE-2023-32269: Fix not seen in stream CVE-2023-3268: Fix not seen in stream CVE-2023-33288: Fix not seen in stream @@ -1180,16 +1176,14 @@ CVE-2023-34256: Fix not seen in stream CVE-2023-35001: Fix not seen in stream CVE-2023-3567: Fix not seen in stream -CVE-2023-35693: Fix unknown CVE-2023-35824: Fix not seen in stream CVE-2023-35827: Fix unknown +CVE-2023-3611: Fix not seen in stream CVE-2023-3640: Fix unknown CVE-2023-37453: Fix unknown CVE-2023-37454: Fix unknown -CVE-2023-38426: Fix not seen in stream -CVE-2023-38427: Fix not seen in stream -CVE-2023-38428: Fix not seen in stream -CVE-2023-38429: Fix not seen in stream -CVE-2023-38430: Fix not seen in stream -CVE-2023-38431: Fix not seen in stream -CVE-2023-38432: Fix not seen in stream +CVE-2023-3772: Fix unknown +CVE-2023-3773: Fix unknown +CVE-2023-3776: Fix not seen in stream +CVE-2023-3812: Fix not seen in stream +CVE-2023-3863: Fix not seen in stream
diff --git a/data/4.5/4.5_security.txt b/data/4.5/4.5_security.txt index 4d927f4..39db548 100644 --- a/data/4.5/4.5_security.txt +++ b/data/4.5/4.5_security.txt
@@ -1056,6 +1056,7 @@ CVE-2022-3522: (unk) mm/hugetlb: use hugetlb_pte_stable in migration race check CVE-2022-3523: (unk) mm/memory.c: fix race when faulting a device private page CVE-2022-3524: (unk) tcp/udp: Fix memory leak in ipv6_renew_options(). + CVE-2022-3533: (unk) CVE-2022-3534: (unk) libbpf: Fix use-after-free in btf_dump_name_dups CVE-2022-3542: (unk) bnx2x: fix potential memory leak in bnx2x_tpa_stop() CVE-2022-3545: (unk) nfp: fix use-after-free in area_cache_get() @@ -1066,6 +1067,7 @@ CVE-2022-3586: (unk) sch_sfb: Don't assume the skb is still around after enqueueing to child CVE-2022-3594: (unk) r8152: Rate limit overflow messages CVE-2022-3595: (unk) cifs: fix double-fault crash during ntlmssp + CVE-2022-3606: (unk) CVE-2022-36123: (unk) x86: Clear .brk area at early boot CVE-2022-3621: (unk) nilfs2: fix NULL pointer dereference at nilfs_bmap_lookup_at_level() CVE-2022-3624: (unk) bonding: fix reference count leak in balance-alb mode @@ -1111,7 +1113,6 @@ CVE-2022-4744: (unk) tun: avoid double free in tun_free_netdev CVE-2022-47520: (unk) wifi: wilc1000: validate pairwise and authentication suite offsets CVE-2022-47929: (unk) net: sched: disallow noqueue for qdisc classes - CVE-2022-48502: (unk) fs/ntfs3: Check fields while reading CVE-2023-0030: (unk) drm/nouveau/mmu: add more general vmm free/node handling functions CVE-2023-0047: (unk) mm, oom: do not trigger out_of_memory from the #PF CVE-2023-0160: (unk) @@ -1142,6 +1143,7 @@ CVE-2023-1989: (unk) Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work CVE-2023-1990: (unk) nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition CVE-2023-2007: (unk) scsi: dpt_i2o: Remove obsolete driver + CVE-2023-20593: (unk) x86/cpu/amd: Add a Zenbleed fix CVE-2023-20941: (unk) CVE-2023-2124: (unk) xfs: verify buffer contents when we skip log replay CVE-2023-2162: (unk) scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress @@ -1173,19 +1175,13 @@ CVE-2023-31084: (unk) media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() CVE-2023-31085: (unk) CVE-2023-3111: (unk) btrfs: unset reloc control if transaction commit fails in prepare_to_relocate() + CVE-2023-3117: (unk) netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE CVE-2023-3141: (unk) memstick: r592: Fix UAF bug in r592_remove due to race condition CVE-2023-31436: (unk) net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg CVE-2023-3159: (unk) firewire: fix potential uaf in outbound_phy_packet_callback() CVE-2023-3161: (unk) fbcon: Check font dimension limits CVE-2023-3212: (unk) gfs2: Don't deref jdesc in evict CVE-2023-32233: (unk) netfilter: nf_tables: deactivate anonymous set from preparation phase - CVE-2023-32247: (unk) ksmbd: destroy expired sessions - CVE-2023-32248: (unk) ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem() - CVE-2023-32250: (unk) ksmbd: fix racy issue from session setup and logoff - CVE-2023-32252: (unk) ksmbd: fix racy issue from session setup and logoff - CVE-2023-32254: (unk) ksmbd: fix racy issue under cocurrent smb2 tree disconnect - CVE-2023-32257: (unk) ksmbd: fix racy issue from session setup and logoff - CVE-2023-32258: (unk) ksmbd: fix racy issue from smb2 close and logoff with multichannel CVE-2023-32269: (unk) netrom: Fix use-after-free caused by accept on already connected socket CVE-2023-3268: (unk) relayfs: fix out-of-bounds access in relay_file_read CVE-2023-33288: (unk) power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition @@ -1196,16 +1192,14 @@ CVE-2023-34256: (unk) ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum CVE-2023-35001: (unk) netfilter: nf_tables: prevent OOB access in nft_byteorder_eval CVE-2023-3567: (unk) vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF - CVE-2023-35693: (unk) CVE-2023-35824: (unk) media: dm1105: Fix use after free bug in dm1105_remove due to race condition CVE-2023-35827: (unk) + CVE-2023-3611: (unk) net/sched: sch_qfq: account for stab overhead in qfq_enqueue CVE-2023-3640: (unk) CVE-2023-37453: (unk) CVE-2023-37454: (unk) - CVE-2023-38426: (unk) ksmbd: fix global-out-of-bounds in smb2_find_context_vals - CVE-2023-38427: (unk) ksmbd: fix out-of-bound read in deassemble_neg_contexts() - CVE-2023-38428: (unk) ksmbd: fix wrong UserName check in session_user - CVE-2023-38429: (unk) ksmbd: allocate one more byte for implied bcc[0] - CVE-2023-38430: (unk) ksmbd: validate smb request protocol id - CVE-2023-38431: (unk) ksmbd: check the validation of pdu_size in ksmbd_conn_handler_loop - CVE-2023-38432: (unk) ksmbd: validate command payload size + CVE-2023-3772: (unk) + CVE-2023-3773: (unk) + CVE-2023-3776: (unk) net/sched: cls_fw: Fix improper refcount update leads to use-after-free + CVE-2023-3812: (unk) net: tun: fix bugs for oversize packet when napi frags enabled + CVE-2023-3863: (unk) net: nfc: Fix use-after-free caused by nfc_llcp_find_local
diff --git a/data/4.6/4.6_CVEs.txt b/data/4.6/4.6_CVEs.txt index b51a481..a012044 100644 --- a/data/4.6/4.6_CVEs.txt +++ b/data/4.6/4.6_CVEs.txt
@@ -1013,6 +1013,7 @@ CVE-2022-3522: Fix not seen in stream CVE-2022-3523: Fix not seen in stream CVE-2022-3524: Fix not seen in stream +CVE-2022-3533: Fix unknown CVE-2022-3534: Fix not seen in stream CVE-2022-3542: Fix not seen in stream CVE-2022-3545: Fix not seen in stream @@ -1023,6 +1024,7 @@ CVE-2022-3586: Fix not seen in stream CVE-2022-3594: Fix not seen in stream CVE-2022-3595: Fix not seen in stream +CVE-2022-3606: Fix unknown CVE-2022-36123: Fix not seen in stream CVE-2022-3621: Fix not seen in stream CVE-2022-3624: Fix not seen in stream @@ -1068,7 +1070,6 @@ CVE-2022-4744: Fix not seen in stream CVE-2022-47520: Fix not seen in stream CVE-2022-47929: Fix not seen in stream -CVE-2022-48502: Fix not seen in stream CVE-2023-0030: Fix not seen in stream CVE-2023-0047: Fix not seen in stream CVE-2023-0160: Fix unknown @@ -1099,6 +1100,7 @@ CVE-2023-1989: Fix not seen in stream CVE-2023-1990: Fix not seen in stream CVE-2023-2007: Fix not seen in stream +CVE-2023-20593: Fix not seen in stream CVE-2023-20941: Fix unknown CVE-2023-2124: Fix not seen in stream CVE-2023-2162: Fix not seen in stream @@ -1130,19 +1132,13 @@ CVE-2023-31084: Fix not seen in stream CVE-2023-31085: Fix unknown CVE-2023-3111: Fix not seen in stream +CVE-2023-3117: Fix not seen in stream CVE-2023-3141: Fix not seen in stream CVE-2023-31436: Fix not seen in stream CVE-2023-3159: Fix not seen in stream CVE-2023-3161: Fix not seen in stream CVE-2023-3212: Fix not seen in stream CVE-2023-32233: Fix not seen in stream -CVE-2023-32247: Fix not seen in stream -CVE-2023-32248: Fix not seen in stream -CVE-2023-32250: Fix not seen in stream -CVE-2023-32252: Fix not seen in stream -CVE-2023-32254: Fix not seen in stream -CVE-2023-32257: Fix not seen in stream -CVE-2023-32258: Fix not seen in stream CVE-2023-32269: Fix not seen in stream CVE-2023-3268: Fix not seen in stream CVE-2023-33288: Fix not seen in stream @@ -1153,16 +1149,14 @@ CVE-2023-34256: Fix not seen in stream CVE-2023-35001: Fix not seen in stream CVE-2023-3567: Fix not seen in stream -CVE-2023-35693: Fix unknown CVE-2023-35824: Fix not seen in stream CVE-2023-35827: Fix unknown +CVE-2023-3611: Fix not seen in stream CVE-2023-3640: Fix unknown CVE-2023-37453: Fix unknown CVE-2023-37454: Fix unknown -CVE-2023-38426: Fix not seen in stream -CVE-2023-38427: Fix not seen in stream -CVE-2023-38428: Fix not seen in stream -CVE-2023-38429: Fix not seen in stream -CVE-2023-38430: Fix not seen in stream -CVE-2023-38431: Fix not seen in stream -CVE-2023-38432: Fix not seen in stream +CVE-2023-3772: Fix unknown +CVE-2023-3773: Fix unknown +CVE-2023-3776: Fix not seen in stream +CVE-2023-3812: Fix not seen in stream +CVE-2023-3863: Fix not seen in stream
diff --git a/data/4.6/4.6_security.txt b/data/4.6/4.6_security.txt index c57c05b..83bdaa7 100644 --- a/data/4.6/4.6_security.txt +++ b/data/4.6/4.6_security.txt
@@ -1031,6 +1031,7 @@ CVE-2022-3522: (unk) mm/hugetlb: use hugetlb_pte_stable in migration race check CVE-2022-3523: (unk) mm/memory.c: fix race when faulting a device private page CVE-2022-3524: (unk) tcp/udp: Fix memory leak in ipv6_renew_options(). + CVE-2022-3533: (unk) CVE-2022-3534: (unk) libbpf: Fix use-after-free in btf_dump_name_dups CVE-2022-3542: (unk) bnx2x: fix potential memory leak in bnx2x_tpa_stop() CVE-2022-3545: (unk) nfp: fix use-after-free in area_cache_get() @@ -1041,6 +1042,7 @@ CVE-2022-3586: (unk) sch_sfb: Don't assume the skb is still around after enqueueing to child CVE-2022-3594: (unk) r8152: Rate limit overflow messages CVE-2022-3595: (unk) cifs: fix double-fault crash during ntlmssp + CVE-2022-3606: (unk) CVE-2022-36123: (unk) x86: Clear .brk area at early boot CVE-2022-3621: (unk) nilfs2: fix NULL pointer dereference at nilfs_bmap_lookup_at_level() CVE-2022-3624: (unk) bonding: fix reference count leak in balance-alb mode @@ -1086,7 +1088,6 @@ CVE-2022-4744: (unk) tun: avoid double free in tun_free_netdev CVE-2022-47520: (unk) wifi: wilc1000: validate pairwise and authentication suite offsets CVE-2022-47929: (unk) net: sched: disallow noqueue for qdisc classes - CVE-2022-48502: (unk) fs/ntfs3: Check fields while reading CVE-2023-0030: (unk) drm/nouveau/mmu: add more general vmm free/node handling functions CVE-2023-0047: (unk) mm, oom: do not trigger out_of_memory from the #PF CVE-2023-0160: (unk) @@ -1117,6 +1118,7 @@ CVE-2023-1989: (unk) Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work CVE-2023-1990: (unk) nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition CVE-2023-2007: (unk) scsi: dpt_i2o: Remove obsolete driver + CVE-2023-20593: (unk) x86/cpu/amd: Add a Zenbleed fix CVE-2023-20941: (unk) CVE-2023-2124: (unk) xfs: verify buffer contents when we skip log replay CVE-2023-2162: (unk) scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress @@ -1148,19 +1150,13 @@ CVE-2023-31084: (unk) media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() CVE-2023-31085: (unk) CVE-2023-3111: (unk) btrfs: unset reloc control if transaction commit fails in prepare_to_relocate() + CVE-2023-3117: (unk) netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE CVE-2023-3141: (unk) memstick: r592: Fix UAF bug in r592_remove due to race condition CVE-2023-31436: (unk) net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg CVE-2023-3159: (unk) firewire: fix potential uaf in outbound_phy_packet_callback() CVE-2023-3161: (unk) fbcon: Check font dimension limits CVE-2023-3212: (unk) gfs2: Don't deref jdesc in evict CVE-2023-32233: (unk) netfilter: nf_tables: deactivate anonymous set from preparation phase - CVE-2023-32247: (unk) ksmbd: destroy expired sessions - CVE-2023-32248: (unk) ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem() - CVE-2023-32250: (unk) ksmbd: fix racy issue from session setup and logoff - CVE-2023-32252: (unk) ksmbd: fix racy issue from session setup and logoff - CVE-2023-32254: (unk) ksmbd: fix racy issue under cocurrent smb2 tree disconnect - CVE-2023-32257: (unk) ksmbd: fix racy issue from session setup and logoff - CVE-2023-32258: (unk) ksmbd: fix racy issue from smb2 close and logoff with multichannel CVE-2023-32269: (unk) netrom: Fix use-after-free caused by accept on already connected socket CVE-2023-3268: (unk) relayfs: fix out-of-bounds access in relay_file_read CVE-2023-33288: (unk) power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition @@ -1171,16 +1167,14 @@ CVE-2023-34256: (unk) ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum CVE-2023-35001: (unk) netfilter: nf_tables: prevent OOB access in nft_byteorder_eval CVE-2023-3567: (unk) vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF - CVE-2023-35693: (unk) CVE-2023-35824: (unk) media: dm1105: Fix use after free bug in dm1105_remove due to race condition CVE-2023-35827: (unk) + CVE-2023-3611: (unk) net/sched: sch_qfq: account for stab overhead in qfq_enqueue CVE-2023-3640: (unk) CVE-2023-37453: (unk) CVE-2023-37454: (unk) - CVE-2023-38426: (unk) ksmbd: fix global-out-of-bounds in smb2_find_context_vals - CVE-2023-38427: (unk) ksmbd: fix out-of-bound read in deassemble_neg_contexts() - CVE-2023-38428: (unk) ksmbd: fix wrong UserName check in session_user - CVE-2023-38429: (unk) ksmbd: allocate one more byte for implied bcc[0] - CVE-2023-38430: (unk) ksmbd: validate smb request protocol id - CVE-2023-38431: (unk) ksmbd: check the validation of pdu_size in ksmbd_conn_handler_loop - CVE-2023-38432: (unk) ksmbd: validate command payload size + CVE-2023-3772: (unk) + CVE-2023-3773: (unk) + CVE-2023-3776: (unk) net/sched: cls_fw: Fix improper refcount update leads to use-after-free + CVE-2023-3812: (unk) net: tun: fix bugs for oversize packet when napi frags enabled + CVE-2023-3863: (unk) net: nfc: Fix use-after-free caused by nfc_llcp_find_local
diff --git a/data/4.7/4.7_CVEs.txt b/data/4.7/4.7_CVEs.txt index 438e6af..884b1e5 100644 --- a/data/4.7/4.7_CVEs.txt +++ b/data/4.7/4.7_CVEs.txt
@@ -995,6 +995,7 @@ CVE-2022-3522: Fix not seen in stream CVE-2022-3523: Fix not seen in stream CVE-2022-3524: Fix not seen in stream +CVE-2022-3533: Fix unknown CVE-2022-3534: Fix not seen in stream CVE-2022-3542: Fix not seen in stream CVE-2022-3545: Fix not seen in stream @@ -1005,6 +1006,7 @@ CVE-2022-3586: Fix not seen in stream CVE-2022-3594: Fix not seen in stream CVE-2022-3595: Fix not seen in stream +CVE-2022-3606: Fix unknown CVE-2022-36123: Fix not seen in stream CVE-2022-3621: Fix not seen in stream CVE-2022-3624: Fix not seen in stream @@ -1051,7 +1053,6 @@ CVE-2022-4744: Fix not seen in stream CVE-2022-47520: Fix not seen in stream CVE-2022-47929: Fix not seen in stream -CVE-2022-48502: Fix not seen in stream CVE-2023-0030: Fix not seen in stream CVE-2023-0047: Fix not seen in stream CVE-2023-0160: Fix unknown @@ -1082,6 +1083,7 @@ CVE-2023-1989: Fix not seen in stream CVE-2023-1990: Fix not seen in stream CVE-2023-2007: Fix not seen in stream +CVE-2023-20593: Fix not seen in stream CVE-2023-20941: Fix unknown CVE-2023-2124: Fix not seen in stream CVE-2023-2162: Fix not seen in stream @@ -1113,19 +1115,13 @@ CVE-2023-31084: Fix not seen in stream CVE-2023-31085: Fix unknown CVE-2023-3111: Fix not seen in stream +CVE-2023-3117: Fix not seen in stream CVE-2023-3141: Fix not seen in stream CVE-2023-31436: Fix not seen in stream CVE-2023-3159: Fix not seen in stream CVE-2023-3161: Fix not seen in stream CVE-2023-3212: Fix not seen in stream CVE-2023-32233: Fix not seen in stream -CVE-2023-32247: Fix not seen in stream -CVE-2023-32248: Fix not seen in stream -CVE-2023-32250: Fix not seen in stream -CVE-2023-32252: Fix not seen in stream -CVE-2023-32254: Fix not seen in stream -CVE-2023-32257: Fix not seen in stream -CVE-2023-32258: Fix not seen in stream CVE-2023-32269: Fix not seen in stream CVE-2023-3268: Fix not seen in stream CVE-2023-33288: Fix not seen in stream @@ -1136,16 +1132,14 @@ CVE-2023-34256: Fix not seen in stream CVE-2023-35001: Fix not seen in stream CVE-2023-3567: Fix not seen in stream -CVE-2023-35693: Fix unknown CVE-2023-35824: Fix not seen in stream CVE-2023-35827: Fix unknown +CVE-2023-3611: Fix not seen in stream CVE-2023-3640: Fix unknown CVE-2023-37453: Fix unknown CVE-2023-37454: Fix unknown -CVE-2023-38426: Fix not seen in stream -CVE-2023-38427: Fix not seen in stream -CVE-2023-38428: Fix not seen in stream -CVE-2023-38429: Fix not seen in stream -CVE-2023-38430: Fix not seen in stream -CVE-2023-38431: Fix not seen in stream -CVE-2023-38432: Fix not seen in stream +CVE-2023-3772: Fix unknown +CVE-2023-3773: Fix unknown +CVE-2023-3776: Fix not seen in stream +CVE-2023-3812: Fix not seen in stream +CVE-2023-3863: Fix not seen in stream
diff --git a/data/4.7/4.7_security.txt b/data/4.7/4.7_security.txt index 0b3d023..4438d39 100644 --- a/data/4.7/4.7_security.txt +++ b/data/4.7/4.7_security.txt
@@ -1015,6 +1015,7 @@ CVE-2022-3522: (unk) mm/hugetlb: use hugetlb_pte_stable in migration race check CVE-2022-3523: (unk) mm/memory.c: fix race when faulting a device private page CVE-2022-3524: (unk) tcp/udp: Fix memory leak in ipv6_renew_options(). + CVE-2022-3533: (unk) CVE-2022-3534: (unk) libbpf: Fix use-after-free in btf_dump_name_dups CVE-2022-3542: (unk) bnx2x: fix potential memory leak in bnx2x_tpa_stop() CVE-2022-3545: (unk) nfp: fix use-after-free in area_cache_get() @@ -1025,6 +1026,7 @@ CVE-2022-3586: (unk) sch_sfb: Don't assume the skb is still around after enqueueing to child CVE-2022-3594: (unk) r8152: Rate limit overflow messages CVE-2022-3595: (unk) cifs: fix double-fault crash during ntlmssp + CVE-2022-3606: (unk) CVE-2022-36123: (unk) x86: Clear .brk area at early boot CVE-2022-3621: (unk) nilfs2: fix NULL pointer dereference at nilfs_bmap_lookup_at_level() CVE-2022-3624: (unk) bonding: fix reference count leak in balance-alb mode @@ -1071,7 +1073,6 @@ CVE-2022-4744: (unk) tun: avoid double free in tun_free_netdev CVE-2022-47520: (unk) wifi: wilc1000: validate pairwise and authentication suite offsets CVE-2022-47929: (unk) net: sched: disallow noqueue for qdisc classes - CVE-2022-48502: (unk) fs/ntfs3: Check fields while reading CVE-2023-0030: (unk) drm/nouveau/mmu: add more general vmm free/node handling functions CVE-2023-0047: (unk) mm, oom: do not trigger out_of_memory from the #PF CVE-2023-0160: (unk) @@ -1102,6 +1103,7 @@ CVE-2023-1989: (unk) Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work CVE-2023-1990: (unk) nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition CVE-2023-2007: (unk) scsi: dpt_i2o: Remove obsolete driver + CVE-2023-20593: (unk) x86/cpu/amd: Add a Zenbleed fix CVE-2023-20941: (unk) CVE-2023-2124: (unk) xfs: verify buffer contents when we skip log replay CVE-2023-2162: (unk) scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress @@ -1133,19 +1135,13 @@ CVE-2023-31084: (unk) media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() CVE-2023-31085: (unk) CVE-2023-3111: (unk) btrfs: unset reloc control if transaction commit fails in prepare_to_relocate() + CVE-2023-3117: (unk) netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE CVE-2023-3141: (unk) memstick: r592: Fix UAF bug in r592_remove due to race condition CVE-2023-31436: (unk) net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg CVE-2023-3159: (unk) firewire: fix potential uaf in outbound_phy_packet_callback() CVE-2023-3161: (unk) fbcon: Check font dimension limits CVE-2023-3212: (unk) gfs2: Don't deref jdesc in evict CVE-2023-32233: (unk) netfilter: nf_tables: deactivate anonymous set from preparation phase - CVE-2023-32247: (unk) ksmbd: destroy expired sessions - CVE-2023-32248: (unk) ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem() - CVE-2023-32250: (unk) ksmbd: fix racy issue from session setup and logoff - CVE-2023-32252: (unk) ksmbd: fix racy issue from session setup and logoff - CVE-2023-32254: (unk) ksmbd: fix racy issue under cocurrent smb2 tree disconnect - CVE-2023-32257: (unk) ksmbd: fix racy issue from session setup and logoff - CVE-2023-32258: (unk) ksmbd: fix racy issue from smb2 close and logoff with multichannel CVE-2023-32269: (unk) netrom: Fix use-after-free caused by accept on already connected socket CVE-2023-3268: (unk) relayfs: fix out-of-bounds access in relay_file_read CVE-2023-33288: (unk) power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition @@ -1156,16 +1152,14 @@ CVE-2023-34256: (unk) ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum CVE-2023-35001: (unk) netfilter: nf_tables: prevent OOB access in nft_byteorder_eval CVE-2023-3567: (unk) vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF - CVE-2023-35693: (unk) CVE-2023-35824: (unk) media: dm1105: Fix use after free bug in dm1105_remove due to race condition CVE-2023-35827: (unk) + CVE-2023-3611: (unk) net/sched: sch_qfq: account for stab overhead in qfq_enqueue CVE-2023-3640: (unk) CVE-2023-37453: (unk) CVE-2023-37454: (unk) - CVE-2023-38426: (unk) ksmbd: fix global-out-of-bounds in smb2_find_context_vals - CVE-2023-38427: (unk) ksmbd: fix out-of-bound read in deassemble_neg_contexts() - CVE-2023-38428: (unk) ksmbd: fix wrong UserName check in session_user - CVE-2023-38429: (unk) ksmbd: allocate one more byte for implied bcc[0] - CVE-2023-38430: (unk) ksmbd: validate smb request protocol id - CVE-2023-38431: (unk) ksmbd: check the validation of pdu_size in ksmbd_conn_handler_loop - CVE-2023-38432: (unk) ksmbd: validate command payload size + CVE-2023-3772: (unk) + CVE-2023-3773: (unk) + CVE-2023-3776: (unk) net/sched: cls_fw: Fix improper refcount update leads to use-after-free + CVE-2023-3812: (unk) net: tun: fix bugs for oversize packet when napi frags enabled + CVE-2023-3863: (unk) net: nfc: Fix use-after-free caused by nfc_llcp_find_local
diff --git a/data/4.8/4.8_CVEs.txt b/data/4.8/4.8_CVEs.txt index e3e20ac..1c60013 100644 --- a/data/4.8/4.8_CVEs.txt +++ b/data/4.8/4.8_CVEs.txt
@@ -999,6 +999,7 @@ CVE-2022-3522: Fix not seen in stream CVE-2022-3523: Fix not seen in stream CVE-2022-3524: Fix not seen in stream +CVE-2022-3533: Fix unknown CVE-2022-3534: Fix not seen in stream CVE-2022-3542: Fix not seen in stream CVE-2022-3545: Fix not seen in stream @@ -1009,6 +1010,7 @@ CVE-2022-3586: Fix not seen in stream CVE-2022-3594: Fix not seen in stream CVE-2022-3595: Fix not seen in stream +CVE-2022-3606: Fix unknown CVE-2022-36123: Fix not seen in stream CVE-2022-3621: Fix not seen in stream CVE-2022-3624: Fix not seen in stream @@ -1055,7 +1057,6 @@ CVE-2022-4744: Fix not seen in stream CVE-2022-47520: Fix not seen in stream CVE-2022-47929: Fix not seen in stream -CVE-2022-48502: Fix not seen in stream CVE-2023-0030: Fix not seen in stream CVE-2023-0047: Fix not seen in stream CVE-2023-0160: Fix unknown @@ -1086,6 +1087,7 @@ CVE-2023-1989: Fix not seen in stream CVE-2023-1990: Fix not seen in stream CVE-2023-2007: Fix not seen in stream +CVE-2023-20593: Fix not seen in stream CVE-2023-20941: Fix unknown CVE-2023-2124: Fix not seen in stream CVE-2023-2162: Fix not seen in stream @@ -1116,19 +1118,13 @@ CVE-2023-31084: Fix not seen in stream CVE-2023-31085: Fix unknown CVE-2023-3111: Fix not seen in stream +CVE-2023-3117: Fix not seen in stream CVE-2023-3141: Fix not seen in stream CVE-2023-31436: Fix not seen in stream CVE-2023-3159: Fix not seen in stream CVE-2023-3161: Fix not seen in stream CVE-2023-3212: Fix not seen in stream CVE-2023-32233: Fix not seen in stream -CVE-2023-32247: Fix not seen in stream -CVE-2023-32248: Fix not seen in stream -CVE-2023-32250: Fix not seen in stream -CVE-2023-32252: Fix not seen in stream -CVE-2023-32254: Fix not seen in stream -CVE-2023-32257: Fix not seen in stream -CVE-2023-32258: Fix not seen in stream CVE-2023-32269: Fix not seen in stream CVE-2023-3268: Fix not seen in stream CVE-2023-33288: Fix not seen in stream @@ -1139,16 +1135,14 @@ CVE-2023-34256: Fix not seen in stream CVE-2023-35001: Fix not seen in stream CVE-2023-3567: Fix not seen in stream -CVE-2023-35693: Fix unknown CVE-2023-35824: Fix not seen in stream CVE-2023-35827: Fix unknown +CVE-2023-3611: Fix not seen in stream CVE-2023-3640: Fix unknown CVE-2023-37453: Fix unknown CVE-2023-37454: Fix unknown -CVE-2023-38426: Fix not seen in stream -CVE-2023-38427: Fix not seen in stream -CVE-2023-38428: Fix not seen in stream -CVE-2023-38429: Fix not seen in stream -CVE-2023-38430: Fix not seen in stream -CVE-2023-38431: Fix not seen in stream -CVE-2023-38432: Fix not seen in stream +CVE-2023-3772: Fix unknown +CVE-2023-3773: Fix unknown +CVE-2023-3776: Fix not seen in stream +CVE-2023-3812: Fix not seen in stream +CVE-2023-3863: Fix not seen in stream
diff --git a/data/4.8/4.8_security.txt b/data/4.8/4.8_security.txt index 9ceb466..53e6802 100644 --- a/data/4.8/4.8_security.txt +++ b/data/4.8/4.8_security.txt
@@ -1029,6 +1029,7 @@ CVE-2022-3522: (unk) mm/hugetlb: use hugetlb_pte_stable in migration race check CVE-2022-3523: (unk) mm/memory.c: fix race when faulting a device private page CVE-2022-3524: (unk) tcp/udp: Fix memory leak in ipv6_renew_options(). + CVE-2022-3533: (unk) CVE-2022-3534: (unk) libbpf: Fix use-after-free in btf_dump_name_dups CVE-2022-3542: (unk) bnx2x: fix potential memory leak in bnx2x_tpa_stop() CVE-2022-3545: (unk) nfp: fix use-after-free in area_cache_get() @@ -1039,6 +1040,7 @@ CVE-2022-3586: (unk) sch_sfb: Don't assume the skb is still around after enqueueing to child CVE-2022-3594: (unk) r8152: Rate limit overflow messages CVE-2022-3595: (unk) cifs: fix double-fault crash during ntlmssp + CVE-2022-3606: (unk) CVE-2022-36123: (unk) x86: Clear .brk area at early boot CVE-2022-3621: (unk) nilfs2: fix NULL pointer dereference at nilfs_bmap_lookup_at_level() CVE-2022-3624: (unk) bonding: fix reference count leak in balance-alb mode @@ -1085,7 +1087,6 @@ CVE-2022-4744: (unk) tun: avoid double free in tun_free_netdev CVE-2022-47520: (unk) wifi: wilc1000: validate pairwise and authentication suite offsets CVE-2022-47929: (unk) net: sched: disallow noqueue for qdisc classes - CVE-2022-48502: (unk) fs/ntfs3: Check fields while reading CVE-2023-0030: (unk) drm/nouveau/mmu: add more general vmm free/node handling functions CVE-2023-0047: (unk) mm, oom: do not trigger out_of_memory from the #PF CVE-2023-0160: (unk) @@ -1116,6 +1117,7 @@ CVE-2023-1989: (unk) Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work CVE-2023-1990: (unk) nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition CVE-2023-2007: (unk) scsi: dpt_i2o: Remove obsolete driver + CVE-2023-20593: (unk) x86/cpu/amd: Add a Zenbleed fix CVE-2023-20941: (unk) CVE-2023-2124: (unk) xfs: verify buffer contents when we skip log replay CVE-2023-2162: (unk) scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress @@ -1146,19 +1148,13 @@ CVE-2023-31084: (unk) media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() CVE-2023-31085: (unk) CVE-2023-3111: (unk) btrfs: unset reloc control if transaction commit fails in prepare_to_relocate() + CVE-2023-3117: (unk) netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE CVE-2023-3141: (unk) memstick: r592: Fix UAF bug in r592_remove due to race condition CVE-2023-31436: (unk) net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg CVE-2023-3159: (unk) firewire: fix potential uaf in outbound_phy_packet_callback() CVE-2023-3161: (unk) fbcon: Check font dimension limits CVE-2023-3212: (unk) gfs2: Don't deref jdesc in evict CVE-2023-32233: (unk) netfilter: nf_tables: deactivate anonymous set from preparation phase - CVE-2023-32247: (unk) ksmbd: destroy expired sessions - CVE-2023-32248: (unk) ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem() - CVE-2023-32250: (unk) ksmbd: fix racy issue from session setup and logoff - CVE-2023-32252: (unk) ksmbd: fix racy issue from session setup and logoff - CVE-2023-32254: (unk) ksmbd: fix racy issue under cocurrent smb2 tree disconnect - CVE-2023-32257: (unk) ksmbd: fix racy issue from session setup and logoff - CVE-2023-32258: (unk) ksmbd: fix racy issue from smb2 close and logoff with multichannel CVE-2023-32269: (unk) netrom: Fix use-after-free caused by accept on already connected socket CVE-2023-3268: (unk) relayfs: fix out-of-bounds access in relay_file_read CVE-2023-33288: (unk) power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition @@ -1169,16 +1165,14 @@ CVE-2023-34256: (unk) ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum CVE-2023-35001: (unk) netfilter: nf_tables: prevent OOB access in nft_byteorder_eval CVE-2023-3567: (unk) vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF - CVE-2023-35693: (unk) CVE-2023-35824: (unk) media: dm1105: Fix use after free bug in dm1105_remove due to race condition CVE-2023-35827: (unk) + CVE-2023-3611: (unk) net/sched: sch_qfq: account for stab overhead in qfq_enqueue CVE-2023-3640: (unk) CVE-2023-37453: (unk) CVE-2023-37454: (unk) - CVE-2023-38426: (unk) ksmbd: fix global-out-of-bounds in smb2_find_context_vals - CVE-2023-38427: (unk) ksmbd: fix out-of-bound read in deassemble_neg_contexts() - CVE-2023-38428: (unk) ksmbd: fix wrong UserName check in session_user - CVE-2023-38429: (unk) ksmbd: allocate one more byte for implied bcc[0] - CVE-2023-38430: (unk) ksmbd: validate smb request protocol id - CVE-2023-38431: (unk) ksmbd: check the validation of pdu_size in ksmbd_conn_handler_loop - CVE-2023-38432: (unk) ksmbd: validate command payload size + CVE-2023-3772: (unk) + CVE-2023-3773: (unk) + CVE-2023-3776: (unk) net/sched: cls_fw: Fix improper refcount update leads to use-after-free + CVE-2023-3812: (unk) net: tun: fix bugs for oversize packet when napi frags enabled + CVE-2023-3863: (unk) net: nfc: Fix use-after-free caused by nfc_llcp_find_local
diff --git a/data/4.9/4.9_CVEs.txt b/data/4.9/4.9_CVEs.txt index a2594d1..f64d082 100644 --- a/data/4.9/4.9_CVEs.txt +++ b/data/4.9/4.9_CVEs.txt
@@ -998,6 +998,7 @@ CVE-2022-3522: Fix not seen in stream CVE-2022-3523: Fix not seen in stream CVE-2022-3524: Fixed with 4.9.335 +CVE-2022-3533: Fix unknown CVE-2022-3534: Fix not seen in stream CVE-2022-3542: Fixed with 4.9.331 CVE-2022-3545: Fix not seen in stream @@ -1008,6 +1009,7 @@ CVE-2022-3586: Fixed with 4.9.328 CVE-2022-3594: Fixed with 4.9.331 CVE-2022-3595: Fix not seen in stream +CVE-2022-3606: Fix unknown CVE-2022-36123: Fixed with 4.9.324 CVE-2022-3621: Fixed with 4.9.331 CVE-2022-3624: Fix not seen in stream @@ -1054,7 +1056,6 @@ CVE-2022-4744: Fix not seen in stream CVE-2022-47520: Fix not seen in stream CVE-2022-47929: Fix not seen in stream -CVE-2022-48502: Fix not seen in stream CVE-2023-0030: Fix not seen in stream CVE-2023-0047: Fixed with 4.9.291 CVE-2023-0160: Fix unknown @@ -1087,6 +1088,7 @@ CVE-2023-1990: Fix not seen in stream CVE-2023-2002: Fix not seen in stream CVE-2023-2007: Fix not seen in stream +CVE-2023-20593: Fix not seen in stream CVE-2023-20941: Fix unknown CVE-2023-2124: Fix not seen in stream CVE-2023-2162: Fix not seen in stream @@ -1118,19 +1120,13 @@ CVE-2023-31084: Fix not seen in stream CVE-2023-31085: Fix unknown CVE-2023-3111: Fix not seen in stream +CVE-2023-3117: Fix not seen in stream CVE-2023-3141: Fix not seen in stream CVE-2023-31436: Fix not seen in stream CVE-2023-3159: Fixed with 4.9.313 CVE-2023-3161: Fix not seen in stream CVE-2023-3212: Fix not seen in stream CVE-2023-32233: Fix not seen in stream -CVE-2023-32247: Fix not seen in stream -CVE-2023-32248: Fix not seen in stream -CVE-2023-32250: Fix not seen in stream -CVE-2023-32252: Fix not seen in stream -CVE-2023-32254: Fix not seen in stream -CVE-2023-32257: Fix not seen in stream -CVE-2023-32258: Fix not seen in stream CVE-2023-32269: Fix not seen in stream CVE-2023-3268: Fix not seen in stream CVE-2023-33203: Fix not seen in stream @@ -1143,16 +1139,14 @@ CVE-2023-34256: Fix not seen in stream CVE-2023-35001: Fix not seen in stream CVE-2023-3567: Fix not seen in stream -CVE-2023-35693: Fix unknown CVE-2023-35824: Fix not seen in stream CVE-2023-35827: Fix unknown +CVE-2023-3611: Fix not seen in stream CVE-2023-3640: Fix unknown CVE-2023-37453: Fix unknown CVE-2023-37454: Fix unknown -CVE-2023-38426: Fix not seen in stream -CVE-2023-38427: Fix not seen in stream -CVE-2023-38428: Fix not seen in stream -CVE-2023-38429: Fix not seen in stream -CVE-2023-38430: Fix not seen in stream -CVE-2023-38431: Fix not seen in stream -CVE-2023-38432: Fix not seen in stream +CVE-2023-3772: Fix unknown +CVE-2023-3773: Fix unknown +CVE-2023-3776: Fix not seen in stream +CVE-2023-3812: Fix not seen in stream +CVE-2023-3863: Fix not seen in stream
diff --git a/data/4.9/4.9_security.txt b/data/4.9/4.9_security.txt index 88beea7..a8a7e91 100644 --- a/data/4.9/4.9_security.txt +++ b/data/4.9/4.9_security.txt
@@ -1581,11 +1581,13 @@ CVE-2022-34918: (unk) netfilter: nf_tables: stricter validation of element data CVE-2022-3522: (unk) mm/hugetlb: use hugetlb_pte_stable in migration race check CVE-2022-3523: (unk) mm/memory.c: fix race when faulting a device private page + CVE-2022-3533: (unk) CVE-2022-3534: (unk) libbpf: Fix use-after-free in btf_dump_name_dups CVE-2022-3545: (unk) nfp: fix use-after-free in area_cache_get() CVE-2022-3566: (unk) tcp: Fix data races around icsk->icsk_af_ops. CVE-2022-3567: (unk) ipv6: Fix data races around sk->sk_prot. CVE-2022-3595: (unk) cifs: fix double-fault crash during ntlmssp + CVE-2022-3606: (unk) CVE-2022-3624: (unk) bonding: fix reference count leak in balance-alb mode CVE-2022-3636: (unk) net: ethernet: mtk_eth_soc: use after free in __mtk_ppe_check_skb() CVE-2022-36402: (unk) @@ -1609,7 +1611,6 @@ CVE-2022-4744: (unk) tun: avoid double free in tun_free_netdev CVE-2022-47520: (unk) wifi: wilc1000: validate pairwise and authentication suite offsets CVE-2022-47929: (unk) net: sched: disallow noqueue for qdisc classes - CVE-2022-48502: (unk) fs/ntfs3: Check fields while reading CVE-2023-0030: (unk) drm/nouveau/mmu: add more general vmm free/node handling functions CVE-2023-0160: (unk) CVE-2023-0266: (unk) ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF @@ -1638,6 +1639,7 @@ CVE-2023-1990: (unk) nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition CVE-2023-2002: (unk) bluetooth: Perform careful capability checks in hci_sock_ioctl() CVE-2023-2007: (unk) scsi: dpt_i2o: Remove obsolete driver + CVE-2023-20593: (unk) x86/cpu/amd: Add a Zenbleed fix CVE-2023-20941: (unk) CVE-2023-2124: (unk) xfs: verify buffer contents when we skip log replay CVE-2023-2162: (unk) scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress @@ -1665,18 +1667,12 @@ CVE-2023-31084: (unk) media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() CVE-2023-31085: (unk) CVE-2023-3111: (unk) btrfs: unset reloc control if transaction commit fails in prepare_to_relocate() + CVE-2023-3117: (unk) netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE CVE-2023-3141: (unk) memstick: r592: Fix UAF bug in r592_remove due to race condition CVE-2023-31436: (unk) net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg CVE-2023-3161: (unk) fbcon: Check font dimension limits CVE-2023-3212: (unk) gfs2: Don't deref jdesc in evict CVE-2023-32233: (unk) netfilter: nf_tables: deactivate anonymous set from preparation phase - CVE-2023-32247: (unk) ksmbd: destroy expired sessions - CVE-2023-32248: (unk) ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem() - CVE-2023-32250: (unk) ksmbd: fix racy issue from session setup and logoff - CVE-2023-32252: (unk) ksmbd: fix racy issue from session setup and logoff - CVE-2023-32254: (unk) ksmbd: fix racy issue under cocurrent smb2 tree disconnect - CVE-2023-32257: (unk) ksmbd: fix racy issue from session setup and logoff - CVE-2023-32258: (unk) ksmbd: fix racy issue from smb2 close and logoff with multichannel CVE-2023-32269: (unk) netrom: Fix use-after-free caused by accept on already connected socket CVE-2023-3268: (unk) relayfs: fix out-of-bounds access in relay_file_read CVE-2023-33203: (unk) net: qcom/emac: Fix use after free bug in emac_remove due to race condition @@ -1689,16 +1685,14 @@ CVE-2023-34256: (unk) ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum CVE-2023-35001: (unk) netfilter: nf_tables: prevent OOB access in nft_byteorder_eval CVE-2023-3567: (unk) vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF - CVE-2023-35693: (unk) CVE-2023-35824: (unk) media: dm1105: Fix use after free bug in dm1105_remove due to race condition CVE-2023-35827: (unk) + CVE-2023-3611: (unk) net/sched: sch_qfq: account for stab overhead in qfq_enqueue CVE-2023-3640: (unk) CVE-2023-37453: (unk) CVE-2023-37454: (unk) - CVE-2023-38426: (unk) ksmbd: fix global-out-of-bounds in smb2_find_context_vals - CVE-2023-38427: (unk) ksmbd: fix out-of-bound read in deassemble_neg_contexts() - CVE-2023-38428: (unk) ksmbd: fix wrong UserName check in session_user - CVE-2023-38429: (unk) ksmbd: allocate one more byte for implied bcc[0] - CVE-2023-38430: (unk) ksmbd: validate smb request protocol id - CVE-2023-38431: (unk) ksmbd: check the validation of pdu_size in ksmbd_conn_handler_loop - CVE-2023-38432: (unk) ksmbd: validate command payload size + CVE-2023-3772: (unk) + CVE-2023-3773: (unk) + CVE-2023-3776: (unk) net/sched: cls_fw: Fix improper refcount update leads to use-after-free + CVE-2023-3812: (unk) net: tun: fix bugs for oversize packet when napi frags enabled + CVE-2023-3863: (unk) net: nfc: Fix use-after-free caused by nfc_llcp_find_local
diff --git a/data/5.0/5.0_CVEs.txt b/data/5.0/5.0_CVEs.txt index 6d37d81..d6d6b29 100644 --- a/data/5.0/5.0_CVEs.txt +++ b/data/5.0/5.0_CVEs.txt
@@ -721,6 +721,7 @@ CVE-2022-3522: Fix not seen in stream CVE-2022-3523: Fix not seen in stream CVE-2022-3524: Fix not seen in stream +CVE-2022-3533: Fix unknown CVE-2022-3534: Fix not seen in stream CVE-2022-3535: Fix not seen in stream CVE-2022-3542: Fix not seen in stream @@ -733,6 +734,7 @@ CVE-2022-3586: Fix not seen in stream CVE-2022-3594: Fix not seen in stream CVE-2022-3595: Fix not seen in stream +CVE-2022-3606: Fix unknown CVE-2022-36123: Fix not seen in stream CVE-2022-3621: Fix not seen in stream CVE-2022-3624: Fix not seen in stream @@ -786,7 +788,6 @@ CVE-2022-4744: Fix not seen in stream CVE-2022-47520: Fix not seen in stream CVE-2022-47929: Fix not seen in stream -CVE-2022-48502: Fix not seen in stream CVE-2023-0045: Fix not seen in stream CVE-2023-0047: Fix not seen in stream CVE-2023-0160: Fix unknown @@ -828,6 +829,7 @@ CVE-2023-2002: Fix not seen in stream CVE-2023-2007: Fix not seen in stream CVE-2023-2008: Fix not seen in stream +CVE-2023-20593: Fix not seen in stream CVE-2023-20928: Fix not seen in stream CVE-2023-20941: Fix unknown CVE-2023-2124: Fix not seen in stream @@ -866,6 +868,7 @@ CVE-2023-31084: Fix not seen in stream CVE-2023-31085: Fix unknown CVE-2023-3111: Fix not seen in stream +CVE-2023-3117: Fix not seen in stream CVE-2023-3141: Fix not seen in stream CVE-2023-31436: Fix not seen in stream CVE-2023-3159: Fix not seen in stream @@ -873,13 +876,6 @@ CVE-2023-3212: Fix not seen in stream CVE-2023-3220: Fix not seen in stream CVE-2023-32233: Fix not seen in stream -CVE-2023-32247: Fix not seen in stream -CVE-2023-32248: Fix not seen in stream -CVE-2023-32250: Fix not seen in stream -CVE-2023-32252: Fix not seen in stream -CVE-2023-32254: Fix not seen in stream -CVE-2023-32257: Fix not seen in stream -CVE-2023-32258: Fix not seen in stream CVE-2023-32269: Fix not seen in stream CVE-2023-3268: Fix not seen in stream CVE-2023-33203: Fix not seen in stream @@ -892,19 +888,18 @@ CVE-2023-34256: Fix not seen in stream CVE-2023-35001: Fix not seen in stream CVE-2023-3567: Fix not seen in stream -CVE-2023-35693: Fix unknown CVE-2023-35788: Fix not seen in stream CVE-2023-35823: Fix not seen in stream CVE-2023-35824: Fix not seen in stream CVE-2023-35827: Fix unknown CVE-2023-35828: Fix not seen in stream +CVE-2023-3609: Fix not seen in stream +CVE-2023-3611: Fix not seen in stream CVE-2023-3640: Fix unknown CVE-2023-37453: Fix unknown CVE-2023-37454: Fix unknown -CVE-2023-38426: Fix not seen in stream -CVE-2023-38427: Fix not seen in stream -CVE-2023-38428: Fix not seen in stream -CVE-2023-38429: Fix not seen in stream -CVE-2023-38430: Fix not seen in stream -CVE-2023-38431: Fix not seen in stream -CVE-2023-38432: Fix not seen in stream +CVE-2023-3772: Fix unknown +CVE-2023-3773: Fix unknown +CVE-2023-3776: Fix not seen in stream +CVE-2023-3812: Fix not seen in stream +CVE-2023-3863: Fix not seen in stream
diff --git a/data/5.0/5.0_security.txt b/data/5.0/5.0_security.txt index c0d55b8..66a961d 100644 --- a/data/5.0/5.0_security.txt +++ b/data/5.0/5.0_security.txt
@@ -769,6 +769,7 @@ CVE-2022-3522: (unk) mm/hugetlb: use hugetlb_pte_stable in migration race check CVE-2022-3523: (unk) mm/memory.c: fix race when faulting a device private page CVE-2022-3524: (unk) tcp/udp: Fix memory leak in ipv6_renew_options(). + CVE-2022-3533: (unk) CVE-2022-3534: (unk) libbpf: Fix use-after-free in btf_dump_name_dups CVE-2022-3535: (unk) net: mvpp2: fix mvpp2 debugfs leak CVE-2022-3542: (unk) bnx2x: fix potential memory leak in bnx2x_tpa_stop() @@ -781,6 +782,7 @@ CVE-2022-3586: (unk) sch_sfb: Don't assume the skb is still around after enqueueing to child CVE-2022-3594: (unk) r8152: Rate limit overflow messages CVE-2022-3595: (unk) cifs: fix double-fault crash during ntlmssp + CVE-2022-3606: (unk) CVE-2022-36123: (unk) x86: Clear .brk area at early boot CVE-2022-3621: (unk) nilfs2: fix NULL pointer dereference at nilfs_bmap_lookup_at_level() CVE-2022-3624: (unk) bonding: fix reference count leak in balance-alb mode @@ -834,7 +836,6 @@ CVE-2022-4744: (unk) tun: avoid double free in tun_free_netdev CVE-2022-47520: (unk) wifi: wilc1000: validate pairwise and authentication suite offsets CVE-2022-47929: (unk) net: sched: disallow noqueue for qdisc classes - CVE-2022-48502: (unk) fs/ntfs3: Check fields while reading CVE-2023-0045: (unk) x86/bugs: Flush IBP in ib_prctl_set() CVE-2023-0047: (unk) mm, oom: do not trigger out_of_memory from the #PF CVE-2023-0160: (unk) @@ -876,6 +877,7 @@ CVE-2023-2002: (unk) bluetooth: Perform careful capability checks in hci_sock_ioctl() CVE-2023-2007: (unk) scsi: dpt_i2o: Remove obsolete driver CVE-2023-2008: (unk) udmabuf: add back sanity check + CVE-2023-20593: (unk) x86/cpu/amd: Add a Zenbleed fix CVE-2023-20928: (unk) android: binder: stop saving a pointer to the VMA CVE-2023-20941: (unk) CVE-2023-2124: (unk) xfs: verify buffer contents when we skip log replay @@ -914,6 +916,7 @@ CVE-2023-31084: (unk) media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() CVE-2023-31085: (unk) CVE-2023-3111: (unk) btrfs: unset reloc control if transaction commit fails in prepare_to_relocate() + CVE-2023-3117: (unk) netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE CVE-2023-3141: (unk) memstick: r592: Fix UAF bug in r592_remove due to race condition CVE-2023-31436: (unk) net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg CVE-2023-3159: (unk) firewire: fix potential uaf in outbound_phy_packet_callback() @@ -921,13 +924,6 @@ CVE-2023-3212: (unk) gfs2: Don't deref jdesc in evict CVE-2023-3220: (unk) drm/msm/dpu: Add check for pstates CVE-2023-32233: (unk) netfilter: nf_tables: deactivate anonymous set from preparation phase - CVE-2023-32247: (unk) ksmbd: destroy expired sessions - CVE-2023-32248: (unk) ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem() - CVE-2023-32250: (unk) ksmbd: fix racy issue from session setup and logoff - CVE-2023-32252: (unk) ksmbd: fix racy issue from session setup and logoff - CVE-2023-32254: (unk) ksmbd: fix racy issue under cocurrent smb2 tree disconnect - CVE-2023-32257: (unk) ksmbd: fix racy issue from session setup and logoff - CVE-2023-32258: (unk) ksmbd: fix racy issue from smb2 close and logoff with multichannel CVE-2023-32269: (unk) netrom: Fix use-after-free caused by accept on already connected socket CVE-2023-3268: (unk) relayfs: fix out-of-bounds access in relay_file_read CVE-2023-33203: (unk) net: qcom/emac: Fix use after free bug in emac_remove due to race condition @@ -940,19 +936,18 @@ CVE-2023-34256: (unk) ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum CVE-2023-35001: (unk) netfilter: nf_tables: prevent OOB access in nft_byteorder_eval CVE-2023-3567: (unk) vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF - CVE-2023-35693: (unk) CVE-2023-35788: (unk) net/sched: flower: fix possible OOB write in fl_set_geneve_opt() CVE-2023-35823: (unk) media: saa7134: fix use after free bug in saa7134_finidev due to race condition CVE-2023-35824: (unk) media: dm1105: Fix use after free bug in dm1105_remove due to race condition CVE-2023-35827: (unk) CVE-2023-35828: (unk) usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition + CVE-2023-3609: (unk) net/sched: cls_u32: Fix reference counter leak leading to overflow + CVE-2023-3611: (unk) net/sched: sch_qfq: account for stab overhead in qfq_enqueue CVE-2023-3640: (unk) CVE-2023-37453: (unk) CVE-2023-37454: (unk) - CVE-2023-38426: (unk) ksmbd: fix global-out-of-bounds in smb2_find_context_vals - CVE-2023-38427: (unk) ksmbd: fix out-of-bound read in deassemble_neg_contexts() - CVE-2023-38428: (unk) ksmbd: fix wrong UserName check in session_user - CVE-2023-38429: (unk) ksmbd: allocate one more byte for implied bcc[0] - CVE-2023-38430: (unk) ksmbd: validate smb request protocol id - CVE-2023-38431: (unk) ksmbd: check the validation of pdu_size in ksmbd_conn_handler_loop - CVE-2023-38432: (unk) ksmbd: validate command payload size + CVE-2023-3772: (unk) + CVE-2023-3773: (unk) + CVE-2023-3776: (unk) net/sched: cls_fw: Fix improper refcount update leads to use-after-free + CVE-2023-3812: (unk) net: tun: fix bugs for oversize packet when napi frags enabled + CVE-2023-3863: (unk) net: nfc: Fix use-after-free caused by nfc_llcp_find_local
diff --git a/data/5.1/5.1_CVEs.txt b/data/5.1/5.1_CVEs.txt index aebcc8f..5da92bb 100644 --- a/data/5.1/5.1_CVEs.txt +++ b/data/5.1/5.1_CVEs.txt
@@ -693,6 +693,7 @@ CVE-2022-3522: Fix not seen in stream CVE-2022-3523: Fix not seen in stream CVE-2022-3524: Fix not seen in stream +CVE-2022-3533: Fix unknown CVE-2022-3534: Fix not seen in stream CVE-2022-3535: Fix not seen in stream CVE-2022-3542: Fix not seen in stream @@ -705,6 +706,7 @@ CVE-2022-3586: Fix not seen in stream CVE-2022-3594: Fix not seen in stream CVE-2022-3595: Fix not seen in stream +CVE-2022-3606: Fix unknown CVE-2022-36123: Fix not seen in stream CVE-2022-3621: Fix not seen in stream CVE-2022-3623: Fix not seen in stream @@ -763,7 +765,6 @@ CVE-2022-47520: Fix not seen in stream CVE-2022-47929: Fix not seen in stream CVE-2022-47946: Fix not seen in stream -CVE-2022-48502: Fix not seen in stream CVE-2023-0045: Fix not seen in stream CVE-2023-0047: Fix not seen in stream CVE-2023-0160: Fix unknown @@ -806,6 +807,7 @@ CVE-2023-2002: Fix not seen in stream CVE-2023-2007: Fix not seen in stream CVE-2023-2008: Fix not seen in stream +CVE-2023-20593: Fix not seen in stream CVE-2023-20928: Fix not seen in stream CVE-2023-20941: Fix unknown CVE-2023-2124: Fix not seen in stream @@ -844,6 +846,7 @@ CVE-2023-31084: Fix not seen in stream CVE-2023-31085: Fix unknown CVE-2023-3111: Fix not seen in stream +CVE-2023-3117: Fix not seen in stream CVE-2023-3141: Fix not seen in stream CVE-2023-31436: Fix not seen in stream CVE-2023-3159: Fix not seen in stream @@ -851,13 +854,6 @@ CVE-2023-3212: Fix not seen in stream CVE-2023-3220: Fix not seen in stream CVE-2023-32233: Fix not seen in stream -CVE-2023-32247: Fix not seen in stream -CVE-2023-32248: Fix not seen in stream -CVE-2023-32250: Fix not seen in stream -CVE-2023-32252: Fix not seen in stream -CVE-2023-32254: Fix not seen in stream -CVE-2023-32257: Fix not seen in stream -CVE-2023-32258: Fix not seen in stream CVE-2023-32269: Fix not seen in stream CVE-2023-3268: Fix not seen in stream CVE-2023-33203: Fix not seen in stream @@ -871,19 +867,18 @@ CVE-2023-34256: Fix not seen in stream CVE-2023-35001: Fix not seen in stream CVE-2023-3567: Fix not seen in stream -CVE-2023-35693: Fix unknown CVE-2023-35788: Fix not seen in stream CVE-2023-35823: Fix not seen in stream CVE-2023-35824: Fix not seen in stream CVE-2023-35827: Fix unknown CVE-2023-35828: Fix not seen in stream +CVE-2023-3609: Fix not seen in stream +CVE-2023-3611: Fix not seen in stream CVE-2023-3640: Fix unknown CVE-2023-37453: Fix unknown CVE-2023-37454: Fix unknown -CVE-2023-38426: Fix not seen in stream -CVE-2023-38427: Fix not seen in stream -CVE-2023-38428: Fix not seen in stream -CVE-2023-38429: Fix not seen in stream -CVE-2023-38430: Fix not seen in stream -CVE-2023-38431: Fix not seen in stream -CVE-2023-38432: Fix not seen in stream +CVE-2023-3772: Fix unknown +CVE-2023-3773: Fix unknown +CVE-2023-3776: Fix not seen in stream +CVE-2023-3812: Fix not seen in stream +CVE-2023-3863: Fix not seen in stream
diff --git a/data/5.1/5.1_security.txt b/data/5.1/5.1_security.txt index 0b8ccb8..e8ed847 100644 --- a/data/5.1/5.1_security.txt +++ b/data/5.1/5.1_security.txt
@@ -729,6 +729,7 @@ CVE-2022-3522: (unk) mm/hugetlb: use hugetlb_pte_stable in migration race check CVE-2022-3523: (unk) mm/memory.c: fix race when faulting a device private page CVE-2022-3524: (unk) tcp/udp: Fix memory leak in ipv6_renew_options(). + CVE-2022-3533: (unk) CVE-2022-3534: (unk) libbpf: Fix use-after-free in btf_dump_name_dups CVE-2022-3535: (unk) net: mvpp2: fix mvpp2 debugfs leak CVE-2022-3542: (unk) bnx2x: fix potential memory leak in bnx2x_tpa_stop() @@ -741,6 +742,7 @@ CVE-2022-3586: (unk) sch_sfb: Don't assume the skb is still around after enqueueing to child CVE-2022-3594: (unk) r8152: Rate limit overflow messages CVE-2022-3595: (unk) cifs: fix double-fault crash during ntlmssp + CVE-2022-3606: (unk) CVE-2022-36123: (unk) x86: Clear .brk area at early boot CVE-2022-3621: (unk) nilfs2: fix NULL pointer dereference at nilfs_bmap_lookup_at_level() CVE-2022-3623: (unk) mm/hugetlb: fix races when looking up a CONT-PTE/PMD size hugetlb page @@ -799,7 +801,6 @@ CVE-2022-47520: (unk) wifi: wilc1000: validate pairwise and authentication suite offsets CVE-2022-47929: (unk) net: sched: disallow noqueue for qdisc classes CVE-2022-47946: (unk) io_uring: kill sqo_dead and sqo submission halting - CVE-2022-48502: (unk) fs/ntfs3: Check fields while reading CVE-2023-0045: (unk) x86/bugs: Flush IBP in ib_prctl_set() CVE-2023-0047: (unk) mm, oom: do not trigger out_of_memory from the #PF CVE-2023-0160: (unk) @@ -842,6 +843,7 @@ CVE-2023-2002: (unk) bluetooth: Perform careful capability checks in hci_sock_ioctl() CVE-2023-2007: (unk) scsi: dpt_i2o: Remove obsolete driver CVE-2023-2008: (unk) udmabuf: add back sanity check + CVE-2023-20593: (unk) x86/cpu/amd: Add a Zenbleed fix CVE-2023-20928: (unk) android: binder: stop saving a pointer to the VMA CVE-2023-20941: (unk) CVE-2023-2124: (unk) xfs: verify buffer contents when we skip log replay @@ -880,6 +882,7 @@ CVE-2023-31084: (unk) media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() CVE-2023-31085: (unk) CVE-2023-3111: (unk) btrfs: unset reloc control if transaction commit fails in prepare_to_relocate() + CVE-2023-3117: (unk) netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE CVE-2023-3141: (unk) memstick: r592: Fix UAF bug in r592_remove due to race condition CVE-2023-31436: (unk) net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg CVE-2023-3159: (unk) firewire: fix potential uaf in outbound_phy_packet_callback() @@ -887,13 +890,6 @@ CVE-2023-3212: (unk) gfs2: Don't deref jdesc in evict CVE-2023-3220: (unk) drm/msm/dpu: Add check for pstates CVE-2023-32233: (unk) netfilter: nf_tables: deactivate anonymous set from preparation phase - CVE-2023-32247: (unk) ksmbd: destroy expired sessions - CVE-2023-32248: (unk) ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem() - CVE-2023-32250: (unk) ksmbd: fix racy issue from session setup and logoff - CVE-2023-32252: (unk) ksmbd: fix racy issue from session setup and logoff - CVE-2023-32254: (unk) ksmbd: fix racy issue under cocurrent smb2 tree disconnect - CVE-2023-32257: (unk) ksmbd: fix racy issue from session setup and logoff - CVE-2023-32258: (unk) ksmbd: fix racy issue from smb2 close and logoff with multichannel CVE-2023-32269: (unk) netrom: Fix use-after-free caused by accept on already connected socket CVE-2023-3268: (unk) relayfs: fix out-of-bounds access in relay_file_read CVE-2023-33203: (unk) net: qcom/emac: Fix use after free bug in emac_remove due to race condition @@ -907,19 +903,18 @@ CVE-2023-34256: (unk) ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum CVE-2023-35001: (unk) netfilter: nf_tables: prevent OOB access in nft_byteorder_eval CVE-2023-3567: (unk) vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF - CVE-2023-35693: (unk) CVE-2023-35788: (unk) net/sched: flower: fix possible OOB write in fl_set_geneve_opt() CVE-2023-35823: (unk) media: saa7134: fix use after free bug in saa7134_finidev due to race condition CVE-2023-35824: (unk) media: dm1105: Fix use after free bug in dm1105_remove due to race condition CVE-2023-35827: (unk) CVE-2023-35828: (unk) usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition + CVE-2023-3609: (unk) net/sched: cls_u32: Fix reference counter leak leading to overflow + CVE-2023-3611: (unk) net/sched: sch_qfq: account for stab overhead in qfq_enqueue CVE-2023-3640: (unk) CVE-2023-37453: (unk) CVE-2023-37454: (unk) - CVE-2023-38426: (unk) ksmbd: fix global-out-of-bounds in smb2_find_context_vals - CVE-2023-38427: (unk) ksmbd: fix out-of-bound read in deassemble_neg_contexts() - CVE-2023-38428: (unk) ksmbd: fix wrong UserName check in session_user - CVE-2023-38429: (unk) ksmbd: allocate one more byte for implied bcc[0] - CVE-2023-38430: (unk) ksmbd: validate smb request protocol id - CVE-2023-38431: (unk) ksmbd: check the validation of pdu_size in ksmbd_conn_handler_loop - CVE-2023-38432: (unk) ksmbd: validate command payload size + CVE-2023-3772: (unk) + CVE-2023-3773: (unk) + CVE-2023-3776: (unk) net/sched: cls_fw: Fix improper refcount update leads to use-after-free + CVE-2023-3812: (unk) net: tun: fix bugs for oversize packet when napi frags enabled + CVE-2023-3863: (unk) net: nfc: Fix use-after-free caused by nfc_llcp_find_local
diff --git a/data/5.10/5.10_CVEs.txt b/data/5.10/5.10_CVEs.txt index 9965965..ec268a3 100644 --- a/data/5.10/5.10_CVEs.txt +++ b/data/5.10/5.10_CVEs.txt
@@ -414,6 +414,7 @@ CVE-2022-3522: Fix not seen in stream CVE-2022-3523: Fix not seen in stream CVE-2022-3524: Fixed with 5.10.154 +CVE-2022-3533: Fix unknown CVE-2022-3534: Fixed with 5.10.163 CVE-2022-3535: Fixed with 5.10.150 CVE-2022-3542: Fixed with 5.10.150 @@ -426,6 +427,7 @@ CVE-2022-3586: Fixed with 5.10.143 CVE-2022-3594: Fixed with 5.10.150 CVE-2022-3595: Fix not seen in stream +CVE-2022-3606: Fix unknown CVE-2022-36123: Fixed with 5.10.132 CVE-2022-3621: Fixed with 5.10.148 CVE-2022-3623: Fixed with 5.10.159 @@ -496,7 +498,6 @@ CVE-2022-47521: Fixed with 5.10.157 CVE-2022-47929: Fixed with 5.10.163 CVE-2022-47946: Fix not seen in stream -CVE-2022-48502: Fix not seen in stream CVE-2023-0045: Fixed with 5.10.163 CVE-2023-0047: Fixed with 5.10.80 CVE-2023-0160: Fix unknown @@ -543,6 +544,7 @@ CVE-2023-2006: Fixed with 5.10.157 CVE-2023-2007: Fix not seen in stream CVE-2023-2008: Fixed with 5.10.127 +CVE-2023-20593: Fixed with 5.10.187 CVE-2023-20928: Fix not seen in stream CVE-2023-20941: Fix unknown CVE-2023-2124: Fixed with 5.10.184 @@ -578,7 +580,7 @@ CVE-2023-28466: Fixed with 5.10.177 CVE-2023-2860: Fixed with 5.10.143 CVE-2023-28772: Fixed with 5.10.51 -CVE-2023-2898: Fix not seen in stream +CVE-2023-2898: Fixed with 5.10.188 CVE-2023-2985: Fixed with 5.10.173 CVE-2023-3006: Fixed with 5.10.153 CVE-2023-30456: Fixed with 5.10.176 @@ -590,7 +592,8 @@ CVE-2023-31084: Fix not seen in stream CVE-2023-31085: Fix unknown CVE-2023-3111: Fixed with 5.10.184 -CVE-2023-31248: Fix not seen in stream +CVE-2023-3117: Fixed with 5.10.188 +CVE-2023-31248: Fixed with 5.10.188 CVE-2023-3141: Fixed with 5.10.181 CVE-2023-31436: Fixed with 5.10.179 CVE-2023-3159: Fixed with 5.10.115 @@ -598,13 +601,6 @@ CVE-2023-3212: Fixed with 5.10.183 CVE-2023-3220: Fixed with 5.10.173 CVE-2023-32233: Fixed with 5.10.180 -CVE-2023-32247: Fix not seen in stream -CVE-2023-32248: Fix not seen in stream -CVE-2023-32250: Fix not seen in stream -CVE-2023-32252: Fix not seen in stream -CVE-2023-32254: Fix not seen in stream -CVE-2023-32257: Fix not seen in stream -CVE-2023-32258: Fix not seen in stream CVE-2023-32269: Fixed with 5.10.168 CVE-2023-3268: Fixed with 5.10.180 CVE-2023-33203: Fixed with 5.10.177 @@ -612,26 +608,26 @@ CVE-2023-3338: Fixed with 5.10.185 CVE-2023-3358: Fixed with 5.10.166 CVE-2023-3389: Fix not seen in stream -CVE-2023-3390: Fix not seen in stream +CVE-2023-3390: Fixed with 5.10.188 CVE-2023-3397: Fix unknown CVE-2023-34255: Fixed with 5.10.184 CVE-2023-34256: Fixed with 5.10.180 -CVE-2023-35001: Fix not seen in stream +CVE-2023-35001: Fixed with 5.10.188 CVE-2023-3567: Fixed with 5.10.168 -CVE-2023-35693: Fix unknown CVE-2023-35788: Fixed with 5.10.183 CVE-2023-35823: Fixed with 5.10.180 CVE-2023-35824: Fixed with 5.10.180 CVE-2023-35827: Fix unknown CVE-2023-35828: Fixed with 5.10.180 CVE-2023-35829: Fixed with 5.10.180 +CVE-2023-3609: Fixed with 5.10.185 +CVE-2023-3610: Fixed with 5.10.188 +CVE-2023-3611: Fixed with 5.10.188 CVE-2023-3640: Fix unknown CVE-2023-37453: Fix unknown CVE-2023-37454: Fix unknown -CVE-2023-38426: Fix not seen in stream -CVE-2023-38427: Fix not seen in stream -CVE-2023-38428: Fix not seen in stream -CVE-2023-38429: Fix not seen in stream -CVE-2023-38430: Fix not seen in stream -CVE-2023-38431: Fix not seen in stream -CVE-2023-38432: Fix not seen in stream +CVE-2023-3772: Fix unknown +CVE-2023-3773: Fix unknown +CVE-2023-3776: Fixed with 5.10.188 +CVE-2023-3812: Fixed with 5.10.154 +CVE-2023-3863: Fixed with 5.10.188
diff --git a/data/5.10/5.10_security.txt b/data/5.10/5.10_security.txt index aefdcb7..1d348be 100644 --- a/data/5.10/5.10_security.txt +++ b/data/5.10/5.10_security.txt
@@ -602,6 +602,7 @@ CVE-2022-3628: c6678c8f4f3f8383fe2dff3455de3d504382638f wifi: brcmfmac: Fix potential buffer overflow in brcmf_fweh_event_worker() CVE-2022-42895: 26ca2ac091b49281d73df86111d16e5a76e43bd7 Bluetooth: L2CAP: Fix attempting to access uninitialized memory CVE-2022-42896: 6b6f94fb9a74dd2891f11de4e638c6202bc89476 Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM + CVE-2023-3812: 3583826b443a63681deaa855048d3f2b742af47e net: tun: fix bugs for oversize packet when napi frags enabled CVEs fixed in 5.10.156: CVE-2022-3169: 023435a095d22bcbbaeea7e3a8c534b5c57d0d82 nvme: ensure subsystem reset is single threaded @@ -745,6 +746,21 @@ CVEs fixed in 5.10.185: CVE-2023-3338: 1c004b379b0327992c1713334198cf5eba29a4ba Remove DECnet support from kernel + CVE-2023-3609: af6eaa57986e82d7efd81984ee607927c6de61e4 net/sched: cls_u32: Fix reference counter leak leading to overflow + +CVEs fixed in 5.10.187: + CVE-2023-20593: 93df00f9d48d48466ddbe01a06eaaf3311ecfb53 x86/cpu/amd: Add a Zenbleed fix + +CVEs fixed in 5.10.188: + CVE-2023-2898: b39ef5b52f10b819bd0ceeb22e8f7df7800880ca f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io() + CVE-2023-3117: 8180fc2fadd48dde4966f2db2c716c2ce7510d0b netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE + CVE-2023-31248: 4ae2e501331aaa506eaf760339bb2f43e5769395 netfilter: nf_tables: do not ignore genmask when looking up chain by id + CVE-2023-3390: 8180fc2fadd48dde4966f2db2c716c2ce7510d0b netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE + CVE-2023-35001: ea213922249c7e448d217a0a0441c6f86a8155fd netfilter: nf_tables: prevent OOB access in nft_byteorder_eval + CVE-2023-3610: d53c295c1f43b7460d28ba0f0f98a602084fdcb6 netfilter: nf_tables: fix chain binding transaction logic + CVE-2023-3611: 8359ee85fd6dabc5c134ed69fb22faadd8a44071 net/sched: sch_qfq: account for stab overhead in qfq_enqueue + CVE-2023-3776: 80e0e8d5f54397c5048fa2274144134dd9dc91b5 net/sched: cls_fw: Fix improper refcount update leads to use-after-free + CVE-2023-3863: 96f2c6f272ec04083d828de46285a7d7b17d1aad net: nfc: Fix use-after-free caused by nfc_llcp_find_local Outstanding CVEs: CVE-2005-3660: (unk) @@ -839,9 +855,11 @@ CVE-2022-3344: (unk) KVM: x86: nSVM: harden svm_free_nested against freeing vmcb02 while still in use CVE-2022-3522: (unk) mm/hugetlb: use hugetlb_pte_stable in migration race check CVE-2022-3523: (unk) mm/memory.c: fix race when faulting a device private page + CVE-2022-3533: (unk) CVE-2022-3566: (unk) tcp: Fix data races around icsk->icsk_af_ops. CVE-2022-3567: (unk) ipv6: Fix data races around sk->sk_prot. CVE-2022-3595: (unk) cifs: fix double-fault crash during ntlmssp + CVE-2022-3606: (unk) CVE-2022-3624: (unk) bonding: fix reference count leak in balance-alb mode CVE-2022-3636: (unk) net: ethernet: mtk_eth_soc: use after free in __mtk_ppe_check_skb() CVE-2022-36402: (unk) @@ -863,7 +881,6 @@ CVE-2022-45919: (unk) CVE-2022-4696: (unk) io_uring: remove any grabbing of context CVE-2022-47946: (unk) io_uring: kill sqo_dead and sqo submission halting - CVE-2022-48502: (unk) fs/ntfs3: Check fields while reading CVE-2023-0160: (unk) CVE-2023-0386: (unk) ovl: fail on invalid uid/gid mapping at copy up CVE-2023-0597: (unk) x86/mm: Randomize per-cpu entry area @@ -881,33 +898,16 @@ CVE-2023-23586: (unk) io_uring: remove io_identity CVE-2023-2430: (unk) io_uring/msg_ring: fix missing lock on overflow for IOPOLL CVE-2023-26242: (unk) - CVE-2023-2898: (unk) f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io() CVE-2023-31081: (unk) CVE-2023-31082: (unk) CVE-2023-31083: (unk) CVE-2023-31084: (unk) media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() CVE-2023-31085: (unk) - CVE-2023-31248: (unk) netfilter: nf_tables: do not ignore genmask when looking up chain by id - CVE-2023-32247: (unk) ksmbd: destroy expired sessions - CVE-2023-32248: (unk) ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem() - CVE-2023-32250: (unk) ksmbd: fix racy issue from session setup and logoff - CVE-2023-32252: (unk) ksmbd: fix racy issue from session setup and logoff - CVE-2023-32254: (unk) ksmbd: fix racy issue under cocurrent smb2 tree disconnect - CVE-2023-32257: (unk) ksmbd: fix racy issue from session setup and logoff - CVE-2023-32258: (unk) ksmbd: fix racy issue from smb2 close and logoff with multichannel CVE-2023-3389: (unk) io_uring: mutex locked poll hashing - CVE-2023-3390: (unk) netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE CVE-2023-3397: (unk) - CVE-2023-35001: (unk) netfilter: nf_tables: prevent OOB access in nft_byteorder_eval - CVE-2023-35693: (unk) CVE-2023-35827: (unk) CVE-2023-3640: (unk) CVE-2023-37453: (unk) CVE-2023-37454: (unk) - CVE-2023-38426: (unk) ksmbd: fix global-out-of-bounds in smb2_find_context_vals - CVE-2023-38427: (unk) ksmbd: fix out-of-bound read in deassemble_neg_contexts() - CVE-2023-38428: (unk) ksmbd: fix wrong UserName check in session_user - CVE-2023-38429: (unk) ksmbd: allocate one more byte for implied bcc[0] - CVE-2023-38430: (unk) ksmbd: validate smb request protocol id - CVE-2023-38431: (unk) ksmbd: check the validation of pdu_size in ksmbd_conn_handler_loop - CVE-2023-38432: (unk) ksmbd: validate command payload size + CVE-2023-3772: (unk) + CVE-2023-3773: (unk)
diff --git a/data/5.11/5.11_CVEs.txt b/data/5.11/5.11_CVEs.txt index 0c4d1d5..cc8528f 100644 --- a/data/5.11/5.11_CVEs.txt +++ b/data/5.11/5.11_CVEs.txt
@@ -404,6 +404,7 @@ CVE-2022-3522: Fix not seen in stream CVE-2022-3523: Fix not seen in stream CVE-2022-3524: Fix not seen in stream +CVE-2022-3533: Fix unknown CVE-2022-3534: Fix not seen in stream CVE-2022-3535: Fix not seen in stream CVE-2022-3542: Fix not seen in stream @@ -416,6 +417,7 @@ CVE-2022-3586: Fix not seen in stream CVE-2022-3594: Fix not seen in stream CVE-2022-3595: Fix not seen in stream +CVE-2022-3606: Fix unknown CVE-2022-36123: Fix not seen in stream CVE-2022-3621: Fix not seen in stream CVE-2022-3623: Fix not seen in stream @@ -487,7 +489,6 @@ CVE-2022-47521: Fix not seen in stream CVE-2022-47929: Fix not seen in stream CVE-2022-47946: Fix not seen in stream -CVE-2022-48502: Fix not seen in stream CVE-2023-0045: Fix not seen in stream CVE-2023-0047: Fix not seen in stream CVE-2023-0160: Fix unknown @@ -533,6 +534,7 @@ CVE-2023-2006: Fix not seen in stream CVE-2023-2007: Fix not seen in stream CVE-2023-2008: Fix not seen in stream +CVE-2023-20593: Fix not seen in stream CVE-2023-20928: Fix not seen in stream CVE-2023-20941: Fix unknown CVE-2023-2124: Fix not seen in stream @@ -581,6 +583,7 @@ CVE-2023-31084: Fix not seen in stream CVE-2023-31085: Fix unknown CVE-2023-3111: Fix not seen in stream +CVE-2023-3117: Fix not seen in stream CVE-2023-31248: Fix not seen in stream CVE-2023-3141: Fix not seen in stream CVE-2023-31436: Fix not seen in stream @@ -589,13 +592,6 @@ CVE-2023-3212: Fix not seen in stream CVE-2023-3220: Fix not seen in stream CVE-2023-32233: Fix not seen in stream -CVE-2023-32247: Fix not seen in stream -CVE-2023-32248: Fix not seen in stream -CVE-2023-32250: Fix not seen in stream -CVE-2023-32252: Fix not seen in stream -CVE-2023-32254: Fix not seen in stream -CVE-2023-32257: Fix not seen in stream -CVE-2023-32258: Fix not seen in stream CVE-2023-32269: Fix not seen in stream CVE-2023-3268: Fix not seen in stream CVE-2023-33203: Fix not seen in stream @@ -611,20 +607,20 @@ CVE-2023-34256: Fix not seen in stream CVE-2023-35001: Fix not seen in stream CVE-2023-3567: Fix not seen in stream -CVE-2023-35693: Fix unknown CVE-2023-35788: Fix not seen in stream CVE-2023-35823: Fix not seen in stream CVE-2023-35824: Fix not seen in stream CVE-2023-35827: Fix unknown CVE-2023-35828: Fix not seen in stream CVE-2023-35829: Fix not seen in stream +CVE-2023-3609: Fix not seen in stream +CVE-2023-3610: Fix not seen in stream +CVE-2023-3611: Fix not seen in stream CVE-2023-3640: Fix unknown CVE-2023-37453: Fix unknown CVE-2023-37454: Fix unknown -CVE-2023-38426: Fix not seen in stream -CVE-2023-38427: Fix not seen in stream -CVE-2023-38428: Fix not seen in stream -CVE-2023-38429: Fix not seen in stream -CVE-2023-38430: Fix not seen in stream -CVE-2023-38431: Fix not seen in stream -CVE-2023-38432: Fix not seen in stream +CVE-2023-3772: Fix unknown +CVE-2023-3773: Fix unknown +CVE-2023-3776: Fix not seen in stream +CVE-2023-3812: Fix not seen in stream +CVE-2023-3863: Fix not seen in stream
diff --git a/data/5.11/5.11_security.txt b/data/5.11/5.11_security.txt index 4e96e7a..b11214b 100644 --- a/data/5.11/5.11_security.txt +++ b/data/5.11/5.11_security.txt
@@ -447,6 +447,7 @@ CVE-2022-3522: (unk) mm/hugetlb: use hugetlb_pte_stable in migration race check CVE-2022-3523: (unk) mm/memory.c: fix race when faulting a device private page CVE-2022-3524: (unk) tcp/udp: Fix memory leak in ipv6_renew_options(). + CVE-2022-3533: (unk) CVE-2022-3534: (unk) libbpf: Fix use-after-free in btf_dump_name_dups CVE-2022-3535: (unk) net: mvpp2: fix mvpp2 debugfs leak CVE-2022-3542: (unk) bnx2x: fix potential memory leak in bnx2x_tpa_stop() @@ -459,6 +460,7 @@ CVE-2022-3586: (unk) sch_sfb: Don't assume the skb is still around after enqueueing to child CVE-2022-3594: (unk) r8152: Rate limit overflow messages CVE-2022-3595: (unk) cifs: fix double-fault crash during ntlmssp + CVE-2022-3606: (unk) CVE-2022-36123: (unk) x86: Clear .brk area at early boot CVE-2022-3621: (unk) nilfs2: fix NULL pointer dereference at nilfs_bmap_lookup_at_level() CVE-2022-3623: (unk) mm/hugetlb: fix races when looking up a CONT-PTE/PMD size hugetlb page @@ -530,7 +532,6 @@ CVE-2022-47521: (unk) wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute CVE-2022-47929: (unk) net: sched: disallow noqueue for qdisc classes CVE-2022-47946: (unk) io_uring: kill sqo_dead and sqo submission halting - CVE-2022-48502: (unk) fs/ntfs3: Check fields while reading CVE-2023-0045: (unk) x86/bugs: Flush IBP in ib_prctl_set() CVE-2023-0047: (unk) mm, oom: do not trigger out_of_memory from the #PF CVE-2023-0160: (unk) @@ -575,6 +576,7 @@ CVE-2023-2006: (unk) rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975] CVE-2023-2007: (unk) scsi: dpt_i2o: Remove obsolete driver CVE-2023-2008: (unk) udmabuf: add back sanity check + CVE-2023-20593: (unk) x86/cpu/amd: Add a Zenbleed fix CVE-2023-20928: (unk) android: binder: stop saving a pointer to the VMA CVE-2023-20941: (unk) CVE-2023-2124: (unk) xfs: verify buffer contents when we skip log replay @@ -623,6 +625,7 @@ CVE-2023-31084: (unk) media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() CVE-2023-31085: (unk) CVE-2023-3111: (unk) btrfs: unset reloc control if transaction commit fails in prepare_to_relocate() + CVE-2023-3117: (unk) netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE CVE-2023-31248: (unk) netfilter: nf_tables: do not ignore genmask when looking up chain by id CVE-2023-3141: (unk) memstick: r592: Fix UAF bug in r592_remove due to race condition CVE-2023-31436: (unk) net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg @@ -631,13 +634,6 @@ CVE-2023-3212: (unk) gfs2: Don't deref jdesc in evict CVE-2023-3220: (unk) drm/msm/dpu: Add check for pstates CVE-2023-32233: (unk) netfilter: nf_tables: deactivate anonymous set from preparation phase - CVE-2023-32247: (unk) ksmbd: destroy expired sessions - CVE-2023-32248: (unk) ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem() - CVE-2023-32250: (unk) ksmbd: fix racy issue from session setup and logoff - CVE-2023-32252: (unk) ksmbd: fix racy issue from session setup and logoff - CVE-2023-32254: (unk) ksmbd: fix racy issue under cocurrent smb2 tree disconnect - CVE-2023-32257: (unk) ksmbd: fix racy issue from session setup and logoff - CVE-2023-32258: (unk) ksmbd: fix racy issue from smb2 close and logoff with multichannel CVE-2023-32269: (unk) netrom: Fix use-after-free caused by accept on already connected socket CVE-2023-3268: (unk) relayfs: fix out-of-bounds access in relay_file_read CVE-2023-33203: (unk) net: qcom/emac: Fix use after free bug in emac_remove due to race condition @@ -653,20 +649,20 @@ CVE-2023-34256: (unk) ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum CVE-2023-35001: (unk) netfilter: nf_tables: prevent OOB access in nft_byteorder_eval CVE-2023-3567: (unk) vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF - CVE-2023-35693: (unk) CVE-2023-35788: (unk) net/sched: flower: fix possible OOB write in fl_set_geneve_opt() CVE-2023-35823: (unk) media: saa7134: fix use after free bug in saa7134_finidev due to race condition CVE-2023-35824: (unk) media: dm1105: Fix use after free bug in dm1105_remove due to race condition CVE-2023-35827: (unk) CVE-2023-35828: (unk) usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition CVE-2023-35829: (unk) media: rkvdec: fix use after free bug in rkvdec_remove + CVE-2023-3609: (unk) net/sched: cls_u32: Fix reference counter leak leading to overflow + CVE-2023-3610: (unk) netfilter: nf_tables: fix chain binding transaction logic + CVE-2023-3611: (unk) net/sched: sch_qfq: account for stab overhead in qfq_enqueue CVE-2023-3640: (unk) CVE-2023-37453: (unk) CVE-2023-37454: (unk) - CVE-2023-38426: (unk) ksmbd: fix global-out-of-bounds in smb2_find_context_vals - CVE-2023-38427: (unk) ksmbd: fix out-of-bound read in deassemble_neg_contexts() - CVE-2023-38428: (unk) ksmbd: fix wrong UserName check in session_user - CVE-2023-38429: (unk) ksmbd: allocate one more byte for implied bcc[0] - CVE-2023-38430: (unk) ksmbd: validate smb request protocol id - CVE-2023-38431: (unk) ksmbd: check the validation of pdu_size in ksmbd_conn_handler_loop - CVE-2023-38432: (unk) ksmbd: validate command payload size + CVE-2023-3772: (unk) + CVE-2023-3773: (unk) + CVE-2023-3776: (unk) net/sched: cls_fw: Fix improper refcount update leads to use-after-free + CVE-2023-3812: (unk) net: tun: fix bugs for oversize packet when napi frags enabled + CVE-2023-3863: (unk) net: nfc: Fix use-after-free caused by nfc_llcp_find_local
diff --git a/data/5.12/5.12_CVEs.txt b/data/5.12/5.12_CVEs.txt index 83ea004..827235b 100644 --- a/data/5.12/5.12_CVEs.txt +++ b/data/5.12/5.12_CVEs.txt
@@ -355,6 +355,7 @@ CVE-2022-3522: Fix not seen in stream CVE-2022-3523: Fix not seen in stream CVE-2022-3524: Fix not seen in stream +CVE-2022-3533: Fix unknown CVE-2022-3534: Fix not seen in stream CVE-2022-3535: Fix not seen in stream CVE-2022-3542: Fix not seen in stream @@ -367,6 +368,7 @@ CVE-2022-3586: Fix not seen in stream CVE-2022-3594: Fix not seen in stream CVE-2022-3595: Fix not seen in stream +CVE-2022-3606: Fix unknown CVE-2022-36123: Fix not seen in stream CVE-2022-3619: Fix not seen in stream CVE-2022-3621: Fix not seen in stream @@ -438,7 +440,6 @@ CVE-2022-47520: Fix not seen in stream CVE-2022-47521: Fix not seen in stream CVE-2022-47929: Fix not seen in stream -CVE-2022-48502: Fix not seen in stream CVE-2023-0045: Fix not seen in stream CVE-2023-0047: Fix not seen in stream CVE-2023-0160: Fix unknown @@ -484,6 +485,7 @@ CVE-2023-2007: Fix not seen in stream CVE-2023-2008: Fix not seen in stream CVE-2023-2019: Fix not seen in stream +CVE-2023-20593: Fix not seen in stream CVE-2023-20928: Fix not seen in stream CVE-2023-20941: Fix unknown CVE-2023-2124: Fix not seen in stream @@ -533,6 +535,7 @@ CVE-2023-31084: Fix not seen in stream CVE-2023-31085: Fix unknown CVE-2023-3111: Fix not seen in stream +CVE-2023-3117: Fix not seen in stream CVE-2023-31248: Fix not seen in stream CVE-2023-3141: Fix not seen in stream CVE-2023-31436: Fix not seen in stream @@ -541,13 +544,6 @@ CVE-2023-3212: Fix not seen in stream CVE-2023-3220: Fix not seen in stream CVE-2023-32233: Fix not seen in stream -CVE-2023-32247: Fix not seen in stream -CVE-2023-32248: Fix not seen in stream -CVE-2023-32250: Fix not seen in stream -CVE-2023-32252: Fix not seen in stream -CVE-2023-32254: Fix not seen in stream -CVE-2023-32257: Fix not seen in stream -CVE-2023-32258: Fix not seen in stream CVE-2023-32269: Fix not seen in stream CVE-2023-3268: Fix not seen in stream CVE-2023-33203: Fix not seen in stream @@ -563,20 +559,20 @@ CVE-2023-34256: Fix not seen in stream CVE-2023-35001: Fix not seen in stream CVE-2023-3567: Fix not seen in stream -CVE-2023-35693: Fix unknown CVE-2023-35788: Fix not seen in stream CVE-2023-35823: Fix not seen in stream CVE-2023-35824: Fix not seen in stream CVE-2023-35827: Fix unknown CVE-2023-35828: Fix not seen in stream CVE-2023-35829: Fix not seen in stream +CVE-2023-3609: Fix not seen in stream +CVE-2023-3610: Fix not seen in stream +CVE-2023-3611: Fix not seen in stream CVE-2023-3640: Fix unknown CVE-2023-37453: Fix unknown CVE-2023-37454: Fix unknown -CVE-2023-38426: Fix not seen in stream -CVE-2023-38427: Fix not seen in stream -CVE-2023-38428: Fix not seen in stream -CVE-2023-38429: Fix not seen in stream -CVE-2023-38430: Fix not seen in stream -CVE-2023-38431: Fix not seen in stream -CVE-2023-38432: Fix not seen in stream +CVE-2023-3772: Fix unknown +CVE-2023-3773: Fix unknown +CVE-2023-3776: Fix not seen in stream +CVE-2023-3812: Fix not seen in stream +CVE-2023-3863: Fix not seen in stream
diff --git a/data/5.12/5.12_security.txt b/data/5.12/5.12_security.txt index 5264a16..408efde 100644 --- a/data/5.12/5.12_security.txt +++ b/data/5.12/5.12_security.txt
@@ -389,6 +389,7 @@ CVE-2022-3522: (unk) mm/hugetlb: use hugetlb_pte_stable in migration race check CVE-2022-3523: (unk) mm/memory.c: fix race when faulting a device private page CVE-2022-3524: (unk) tcp/udp: Fix memory leak in ipv6_renew_options(). + CVE-2022-3533: (unk) CVE-2022-3534: (unk) libbpf: Fix use-after-free in btf_dump_name_dups CVE-2022-3535: (unk) net: mvpp2: fix mvpp2 debugfs leak CVE-2022-3542: (unk) bnx2x: fix potential memory leak in bnx2x_tpa_stop() @@ -401,6 +402,7 @@ CVE-2022-3586: (unk) sch_sfb: Don't assume the skb is still around after enqueueing to child CVE-2022-3594: (unk) r8152: Rate limit overflow messages CVE-2022-3595: (unk) cifs: fix double-fault crash during ntlmssp + CVE-2022-3606: (unk) CVE-2022-36123: (unk) x86: Clear .brk area at early boot CVE-2022-3619: (unk) Bluetooth: L2CAP: Fix memory leak in vhci_write CVE-2022-3621: (unk) nilfs2: fix NULL pointer dereference at nilfs_bmap_lookup_at_level() @@ -471,7 +473,6 @@ CVE-2022-47520: (unk) wifi: wilc1000: validate pairwise and authentication suite offsets CVE-2022-47521: (unk) wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute CVE-2022-47929: (unk) net: sched: disallow noqueue for qdisc classes - CVE-2022-48502: (unk) fs/ntfs3: Check fields while reading CVE-2023-0045: (unk) x86/bugs: Flush IBP in ib_prctl_set() CVE-2023-0047: (unk) mm, oom: do not trigger out_of_memory from the #PF CVE-2023-0160: (unk) @@ -517,6 +518,7 @@ CVE-2023-2007: (unk) scsi: dpt_i2o: Remove obsolete driver CVE-2023-2008: (unk) udmabuf: add back sanity check CVE-2023-2019: (unk) netdevsim: fib: Fix reference count leak on route deletion failure + CVE-2023-20593: (unk) x86/cpu/amd: Add a Zenbleed fix CVE-2023-20928: (unk) android: binder: stop saving a pointer to the VMA CVE-2023-20941: (unk) CVE-2023-2124: (unk) xfs: verify buffer contents when we skip log replay @@ -565,6 +567,7 @@ CVE-2023-31084: (unk) media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() CVE-2023-31085: (unk) CVE-2023-3111: (unk) btrfs: unset reloc control if transaction commit fails in prepare_to_relocate() + CVE-2023-3117: (unk) netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE CVE-2023-31248: (unk) netfilter: nf_tables: do not ignore genmask when looking up chain by id CVE-2023-3141: (unk) memstick: r592: Fix UAF bug in r592_remove due to race condition CVE-2023-31436: (unk) net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg @@ -573,13 +576,6 @@ CVE-2023-3212: (unk) gfs2: Don't deref jdesc in evict CVE-2023-3220: (unk) drm/msm/dpu: Add check for pstates CVE-2023-32233: (unk) netfilter: nf_tables: deactivate anonymous set from preparation phase - CVE-2023-32247: (unk) ksmbd: destroy expired sessions - CVE-2023-32248: (unk) ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem() - CVE-2023-32250: (unk) ksmbd: fix racy issue from session setup and logoff - CVE-2023-32252: (unk) ksmbd: fix racy issue from session setup and logoff - CVE-2023-32254: (unk) ksmbd: fix racy issue under cocurrent smb2 tree disconnect - CVE-2023-32257: (unk) ksmbd: fix racy issue from session setup and logoff - CVE-2023-32258: (unk) ksmbd: fix racy issue from smb2 close and logoff with multichannel CVE-2023-32269: (unk) netrom: Fix use-after-free caused by accept on already connected socket CVE-2023-3268: (unk) relayfs: fix out-of-bounds access in relay_file_read CVE-2023-33203: (unk) net: qcom/emac: Fix use after free bug in emac_remove due to race condition @@ -595,20 +591,20 @@ CVE-2023-34256: (unk) ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum CVE-2023-35001: (unk) netfilter: nf_tables: prevent OOB access in nft_byteorder_eval CVE-2023-3567: (unk) vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF - CVE-2023-35693: (unk) CVE-2023-35788: (unk) net/sched: flower: fix possible OOB write in fl_set_geneve_opt() CVE-2023-35823: (unk) media: saa7134: fix use after free bug in saa7134_finidev due to race condition CVE-2023-35824: (unk) media: dm1105: Fix use after free bug in dm1105_remove due to race condition CVE-2023-35827: (unk) CVE-2023-35828: (unk) usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition CVE-2023-35829: (unk) media: rkvdec: fix use after free bug in rkvdec_remove + CVE-2023-3609: (unk) net/sched: cls_u32: Fix reference counter leak leading to overflow + CVE-2023-3610: (unk) netfilter: nf_tables: fix chain binding transaction logic + CVE-2023-3611: (unk) net/sched: sch_qfq: account for stab overhead in qfq_enqueue CVE-2023-3640: (unk) CVE-2023-37453: (unk) CVE-2023-37454: (unk) - CVE-2023-38426: (unk) ksmbd: fix global-out-of-bounds in smb2_find_context_vals - CVE-2023-38427: (unk) ksmbd: fix out-of-bound read in deassemble_neg_contexts() - CVE-2023-38428: (unk) ksmbd: fix wrong UserName check in session_user - CVE-2023-38429: (unk) ksmbd: allocate one more byte for implied bcc[0] - CVE-2023-38430: (unk) ksmbd: validate smb request protocol id - CVE-2023-38431: (unk) ksmbd: check the validation of pdu_size in ksmbd_conn_handler_loop - CVE-2023-38432: (unk) ksmbd: validate command payload size + CVE-2023-3772: (unk) + CVE-2023-3773: (unk) + CVE-2023-3776: (unk) net/sched: cls_fw: Fix improper refcount update leads to use-after-free + CVE-2023-3812: (unk) net: tun: fix bugs for oversize packet when napi frags enabled + CVE-2023-3863: (unk) net: nfc: Fix use-after-free caused by nfc_llcp_find_local
diff --git a/data/5.13/5.13_CVEs.txt b/data/5.13/5.13_CVEs.txt index cdf895a..fd99d67 100644 --- a/data/5.13/5.13_CVEs.txt +++ b/data/5.13/5.13_CVEs.txt
@@ -323,6 +323,7 @@ CVE-2022-3523: Fix not seen in stream CVE-2022-3524: Fix not seen in stream CVE-2022-3526: Fix not seen in stream +CVE-2022-3533: Fix unknown CVE-2022-3534: Fix not seen in stream CVE-2022-3535: Fix not seen in stream CVE-2022-3542: Fix not seen in stream @@ -335,6 +336,7 @@ CVE-2022-3586: Fix not seen in stream CVE-2022-3594: Fix not seen in stream CVE-2022-3595: Fix not seen in stream +CVE-2022-3606: Fix unknown CVE-2022-36123: Fix not seen in stream CVE-2022-3619: Fix not seen in stream CVE-2022-3621: Fix not seen in stream @@ -406,7 +408,6 @@ CVE-2022-47520: Fix not seen in stream CVE-2022-47521: Fix not seen in stream CVE-2022-47929: Fix not seen in stream -CVE-2022-48502: Fix not seen in stream CVE-2023-0045: Fix not seen in stream CVE-2023-0047: Fix not seen in stream CVE-2023-0160: Fix unknown @@ -452,6 +453,7 @@ CVE-2023-2007: Fix not seen in stream CVE-2023-2008: Fix not seen in stream CVE-2023-2019: Fix not seen in stream +CVE-2023-20593: Fix not seen in stream CVE-2023-20928: Fix not seen in stream CVE-2023-20941: Fix unknown CVE-2023-2124: Fix not seen in stream @@ -502,6 +504,7 @@ CVE-2023-31084: Fix not seen in stream CVE-2023-31085: Fix unknown CVE-2023-3111: Fix not seen in stream +CVE-2023-3117: Fix not seen in stream CVE-2023-31248: Fix not seen in stream CVE-2023-3141: Fix not seen in stream CVE-2023-31436: Fix not seen in stream @@ -510,13 +513,6 @@ CVE-2023-3212: Fix not seen in stream CVE-2023-3220: Fix not seen in stream CVE-2023-32233: Fix not seen in stream -CVE-2023-32247: Fix not seen in stream -CVE-2023-32248: Fix not seen in stream -CVE-2023-32250: Fix not seen in stream -CVE-2023-32252: Fix not seen in stream -CVE-2023-32254: Fix not seen in stream -CVE-2023-32257: Fix not seen in stream -CVE-2023-32258: Fix not seen in stream CVE-2023-32269: Fix not seen in stream CVE-2023-3268: Fix not seen in stream CVE-2023-33203: Fix not seen in stream @@ -532,20 +528,20 @@ CVE-2023-34256: Fix not seen in stream CVE-2023-35001: Fix not seen in stream CVE-2023-3567: Fix not seen in stream -CVE-2023-35693: Fix unknown CVE-2023-35788: Fix not seen in stream CVE-2023-35823: Fix not seen in stream CVE-2023-35824: Fix not seen in stream CVE-2023-35827: Fix unknown CVE-2023-35828: Fix not seen in stream CVE-2023-35829: Fix not seen in stream +CVE-2023-3609: Fix not seen in stream +CVE-2023-3610: Fix not seen in stream +CVE-2023-3611: Fix not seen in stream CVE-2023-3640: Fix unknown CVE-2023-37453: Fix unknown CVE-2023-37454: Fix unknown -CVE-2023-38426: Fix not seen in stream -CVE-2023-38427: Fix not seen in stream -CVE-2023-38428: Fix not seen in stream -CVE-2023-38429: Fix not seen in stream -CVE-2023-38430: Fix not seen in stream -CVE-2023-38431: Fix not seen in stream -CVE-2023-38432: Fix not seen in stream +CVE-2023-3772: Fix unknown +CVE-2023-3773: Fix unknown +CVE-2023-3776: Fix not seen in stream +CVE-2023-3812: Fix not seen in stream +CVE-2023-3863: Fix not seen in stream
diff --git a/data/5.13/5.13_security.txt b/data/5.13/5.13_security.txt index a7026e7..c711126 100644 --- a/data/5.13/5.13_security.txt +++ b/data/5.13/5.13_security.txt
@@ -357,6 +357,7 @@ CVE-2022-3523: (unk) mm/memory.c: fix race when faulting a device private page CVE-2022-3524: (unk) tcp/udp: Fix memory leak in ipv6_renew_options(). CVE-2022-3526: (unk) macvlan: Fix leaking skb in source mode with nodst option + CVE-2022-3533: (unk) CVE-2022-3534: (unk) libbpf: Fix use-after-free in btf_dump_name_dups CVE-2022-3535: (unk) net: mvpp2: fix mvpp2 debugfs leak CVE-2022-3542: (unk) bnx2x: fix potential memory leak in bnx2x_tpa_stop() @@ -369,6 +370,7 @@ CVE-2022-3586: (unk) sch_sfb: Don't assume the skb is still around after enqueueing to child CVE-2022-3594: (unk) r8152: Rate limit overflow messages CVE-2022-3595: (unk) cifs: fix double-fault crash during ntlmssp + CVE-2022-3606: (unk) CVE-2022-36123: (unk) x86: Clear .brk area at early boot CVE-2022-3619: (unk) Bluetooth: L2CAP: Fix memory leak in vhci_write CVE-2022-3621: (unk) nilfs2: fix NULL pointer dereference at nilfs_bmap_lookup_at_level() @@ -439,7 +441,6 @@ CVE-2022-47520: (unk) wifi: wilc1000: validate pairwise and authentication suite offsets CVE-2022-47521: (unk) wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute CVE-2022-47929: (unk) net: sched: disallow noqueue for qdisc classes - CVE-2022-48502: (unk) fs/ntfs3: Check fields while reading CVE-2023-0045: (unk) x86/bugs: Flush IBP in ib_prctl_set() CVE-2023-0047: (unk) mm, oom: do not trigger out_of_memory from the #PF CVE-2023-0160: (unk) @@ -485,6 +486,7 @@ CVE-2023-2007: (unk) scsi: dpt_i2o: Remove obsolete driver CVE-2023-2008: (unk) udmabuf: add back sanity check CVE-2023-2019: (unk) netdevsim: fib: Fix reference count leak on route deletion failure + CVE-2023-20593: (unk) x86/cpu/amd: Add a Zenbleed fix CVE-2023-20928: (unk) android: binder: stop saving a pointer to the VMA CVE-2023-20941: (unk) CVE-2023-2124: (unk) xfs: verify buffer contents when we skip log replay @@ -534,6 +536,7 @@ CVE-2023-31084: (unk) media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() CVE-2023-31085: (unk) CVE-2023-3111: (unk) btrfs: unset reloc control if transaction commit fails in prepare_to_relocate() + CVE-2023-3117: (unk) netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE CVE-2023-31248: (unk) netfilter: nf_tables: do not ignore genmask when looking up chain by id CVE-2023-3141: (unk) memstick: r592: Fix UAF bug in r592_remove due to race condition CVE-2023-31436: (unk) net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg @@ -542,13 +545,6 @@ CVE-2023-3212: (unk) gfs2: Don't deref jdesc in evict CVE-2023-3220: (unk) drm/msm/dpu: Add check for pstates CVE-2023-32233: (unk) netfilter: nf_tables: deactivate anonymous set from preparation phase - CVE-2023-32247: (unk) ksmbd: destroy expired sessions - CVE-2023-32248: (unk) ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem() - CVE-2023-32250: (unk) ksmbd: fix racy issue from session setup and logoff - CVE-2023-32252: (unk) ksmbd: fix racy issue from session setup and logoff - CVE-2023-32254: (unk) ksmbd: fix racy issue under cocurrent smb2 tree disconnect - CVE-2023-32257: (unk) ksmbd: fix racy issue from session setup and logoff - CVE-2023-32258: (unk) ksmbd: fix racy issue from smb2 close and logoff with multichannel CVE-2023-32269: (unk) netrom: Fix use-after-free caused by accept on already connected socket CVE-2023-3268: (unk) relayfs: fix out-of-bounds access in relay_file_read CVE-2023-33203: (unk) net: qcom/emac: Fix use after free bug in emac_remove due to race condition @@ -564,20 +560,20 @@ CVE-2023-34256: (unk) ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum CVE-2023-35001: (unk) netfilter: nf_tables: prevent OOB access in nft_byteorder_eval CVE-2023-3567: (unk) vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF - CVE-2023-35693: (unk) CVE-2023-35788: (unk) net/sched: flower: fix possible OOB write in fl_set_geneve_opt() CVE-2023-35823: (unk) media: saa7134: fix use after free bug in saa7134_finidev due to race condition CVE-2023-35824: (unk) media: dm1105: Fix use after free bug in dm1105_remove due to race condition CVE-2023-35827: (unk) CVE-2023-35828: (unk) usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition CVE-2023-35829: (unk) media: rkvdec: fix use after free bug in rkvdec_remove + CVE-2023-3609: (unk) net/sched: cls_u32: Fix reference counter leak leading to overflow + CVE-2023-3610: (unk) netfilter: nf_tables: fix chain binding transaction logic + CVE-2023-3611: (unk) net/sched: sch_qfq: account for stab overhead in qfq_enqueue CVE-2023-3640: (unk) CVE-2023-37453: (unk) CVE-2023-37454: (unk) - CVE-2023-38426: (unk) ksmbd: fix global-out-of-bounds in smb2_find_context_vals - CVE-2023-38427: (unk) ksmbd: fix out-of-bound read in deassemble_neg_contexts() - CVE-2023-38428: (unk) ksmbd: fix wrong UserName check in session_user - CVE-2023-38429: (unk) ksmbd: allocate one more byte for implied bcc[0] - CVE-2023-38430: (unk) ksmbd: validate smb request protocol id - CVE-2023-38431: (unk) ksmbd: check the validation of pdu_size in ksmbd_conn_handler_loop - CVE-2023-38432: (unk) ksmbd: validate command payload size + CVE-2023-3772: (unk) + CVE-2023-3773: (unk) + CVE-2023-3776: (unk) net/sched: cls_fw: Fix improper refcount update leads to use-after-free + CVE-2023-3812: (unk) net: tun: fix bugs for oversize packet when napi frags enabled + CVE-2023-3863: (unk) net: nfc: Fix use-after-free caused by nfc_llcp_find_local
diff --git a/data/5.14/5.14_CVEs.txt b/data/5.14/5.14_CVEs.txt index 11ddf0e..304dee7 100644 --- a/data/5.14/5.14_CVEs.txt +++ b/data/5.14/5.14_CVEs.txt
@@ -296,6 +296,7 @@ CVE-2022-3523: Fix not seen in stream CVE-2022-3524: Fix not seen in stream CVE-2022-3526: Fix not seen in stream +CVE-2022-3533: Fix unknown CVE-2022-3534: Fix not seen in stream CVE-2022-3535: Fix not seen in stream CVE-2022-3542: Fix not seen in stream @@ -308,6 +309,7 @@ CVE-2022-3586: Fix not seen in stream CVE-2022-3594: Fix not seen in stream CVE-2022-3595: Fix not seen in stream +CVE-2022-3606: Fix unknown CVE-2022-36123: Fix not seen in stream CVE-2022-3619: Fix not seen in stream CVE-2022-3621: Fix not seen in stream @@ -379,7 +381,6 @@ CVE-2022-47520: Fix not seen in stream CVE-2022-47521: Fix not seen in stream CVE-2022-47929: Fix not seen in stream -CVE-2022-48502: Fix not seen in stream CVE-2023-0045: Fix not seen in stream CVE-2023-0047: Fixed with 5.14.19 CVE-2023-0160: Fix unknown @@ -426,6 +427,7 @@ CVE-2023-2007: Fix not seen in stream CVE-2023-2008: Fix not seen in stream CVE-2023-2019: Fix not seen in stream +CVE-2023-20593: Fix not seen in stream CVE-2023-20928: Fix not seen in stream CVE-2023-20941: Fix unknown CVE-2023-21102: Fix not seen in stream @@ -476,6 +478,7 @@ CVE-2023-31084: Fix not seen in stream CVE-2023-31085: Fix unknown CVE-2023-3111: Fix not seen in stream +CVE-2023-3117: Fix not seen in stream CVE-2023-31248: Fix not seen in stream CVE-2023-3141: Fix not seen in stream CVE-2023-31436: Fix not seen in stream @@ -484,13 +487,6 @@ CVE-2023-3212: Fix not seen in stream CVE-2023-3220: Fix not seen in stream CVE-2023-32233: Fix not seen in stream -CVE-2023-32247: Fix not seen in stream -CVE-2023-32248: Fix not seen in stream -CVE-2023-32250: Fix not seen in stream -CVE-2023-32252: Fix not seen in stream -CVE-2023-32254: Fix not seen in stream -CVE-2023-32257: Fix not seen in stream -CVE-2023-32258: Fix not seen in stream CVE-2023-32269: Fix not seen in stream CVE-2023-3268: Fix not seen in stream CVE-2023-33203: Fix not seen in stream @@ -506,20 +502,20 @@ CVE-2023-34256: Fix not seen in stream CVE-2023-35001: Fix not seen in stream CVE-2023-3567: Fix not seen in stream -CVE-2023-35693: Fix unknown CVE-2023-35788: Fix not seen in stream CVE-2023-35823: Fix not seen in stream CVE-2023-35824: Fix not seen in stream CVE-2023-35827: Fix unknown CVE-2023-35828: Fix not seen in stream CVE-2023-35829: Fix not seen in stream +CVE-2023-3609: Fix not seen in stream +CVE-2023-3610: Fix not seen in stream +CVE-2023-3611: Fix not seen in stream CVE-2023-3640: Fix unknown CVE-2023-37453: Fix unknown CVE-2023-37454: Fix unknown -CVE-2023-38426: Fix not seen in stream -CVE-2023-38427: Fix not seen in stream -CVE-2023-38428: Fix not seen in stream -CVE-2023-38429: Fix not seen in stream -CVE-2023-38430: Fix not seen in stream -CVE-2023-38431: Fix not seen in stream -CVE-2023-38432: Fix not seen in stream +CVE-2023-3772: Fix unknown +CVE-2023-3773: Fix unknown +CVE-2023-3776: Fix not seen in stream +CVE-2023-3812: Fix not seen in stream +CVE-2023-3863: Fix not seen in stream
diff --git a/data/5.14/5.14_security.txt b/data/5.14/5.14_security.txt index 5facf6e..6f38ebe 100644 --- a/data/5.14/5.14_security.txt +++ b/data/5.14/5.14_security.txt
@@ -332,6 +332,7 @@ CVE-2022-3523: (unk) mm/memory.c: fix race when faulting a device private page CVE-2022-3524: (unk) tcp/udp: Fix memory leak in ipv6_renew_options(). CVE-2022-3526: (unk) macvlan: Fix leaking skb in source mode with nodst option + CVE-2022-3533: (unk) CVE-2022-3534: (unk) libbpf: Fix use-after-free in btf_dump_name_dups CVE-2022-3535: (unk) net: mvpp2: fix mvpp2 debugfs leak CVE-2022-3542: (unk) bnx2x: fix potential memory leak in bnx2x_tpa_stop() @@ -344,6 +345,7 @@ CVE-2022-3586: (unk) sch_sfb: Don't assume the skb is still around after enqueueing to child CVE-2022-3594: (unk) r8152: Rate limit overflow messages CVE-2022-3595: (unk) cifs: fix double-fault crash during ntlmssp + CVE-2022-3606: (unk) CVE-2022-36123: (unk) x86: Clear .brk area at early boot CVE-2022-3619: (unk) Bluetooth: L2CAP: Fix memory leak in vhci_write CVE-2022-3621: (unk) nilfs2: fix NULL pointer dereference at nilfs_bmap_lookup_at_level() @@ -415,7 +417,6 @@ CVE-2022-47520: (unk) wifi: wilc1000: validate pairwise and authentication suite offsets CVE-2022-47521: (unk) wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute CVE-2022-47929: (unk) net: sched: disallow noqueue for qdisc classes - CVE-2022-48502: (unk) fs/ntfs3: Check fields while reading CVE-2023-0045: (unk) x86/bugs: Flush IBP in ib_prctl_set() CVE-2023-0160: (unk) CVE-2023-0179: (unk) netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits @@ -460,6 +461,7 @@ CVE-2023-2007: (unk) scsi: dpt_i2o: Remove obsolete driver CVE-2023-2008: (unk) udmabuf: add back sanity check CVE-2023-2019: (unk) netdevsim: fib: Fix reference count leak on route deletion failure + CVE-2023-20593: (unk) x86/cpu/amd: Add a Zenbleed fix CVE-2023-20928: (unk) android: binder: stop saving a pointer to the VMA CVE-2023-20941: (unk) CVE-2023-21102: (unk) efi: rt-wrapper: Add missing include @@ -510,6 +512,7 @@ CVE-2023-31084: (unk) media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() CVE-2023-31085: (unk) CVE-2023-3111: (unk) btrfs: unset reloc control if transaction commit fails in prepare_to_relocate() + CVE-2023-3117: (unk) netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE CVE-2023-31248: (unk) netfilter: nf_tables: do not ignore genmask when looking up chain by id CVE-2023-3141: (unk) memstick: r592: Fix UAF bug in r592_remove due to race condition CVE-2023-31436: (unk) net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg @@ -518,13 +521,6 @@ CVE-2023-3212: (unk) gfs2: Don't deref jdesc in evict CVE-2023-3220: (unk) drm/msm/dpu: Add check for pstates CVE-2023-32233: (unk) netfilter: nf_tables: deactivate anonymous set from preparation phase - CVE-2023-32247: (unk) ksmbd: destroy expired sessions - CVE-2023-32248: (unk) ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem() - CVE-2023-32250: (unk) ksmbd: fix racy issue from session setup and logoff - CVE-2023-32252: (unk) ksmbd: fix racy issue from session setup and logoff - CVE-2023-32254: (unk) ksmbd: fix racy issue under cocurrent smb2 tree disconnect - CVE-2023-32257: (unk) ksmbd: fix racy issue from session setup and logoff - CVE-2023-32258: (unk) ksmbd: fix racy issue from smb2 close and logoff with multichannel CVE-2023-32269: (unk) netrom: Fix use-after-free caused by accept on already connected socket CVE-2023-3268: (unk) relayfs: fix out-of-bounds access in relay_file_read CVE-2023-33203: (unk) net: qcom/emac: Fix use after free bug in emac_remove due to race condition @@ -540,20 +536,20 @@ CVE-2023-34256: (unk) ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum CVE-2023-35001: (unk) netfilter: nf_tables: prevent OOB access in nft_byteorder_eval CVE-2023-3567: (unk) vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF - CVE-2023-35693: (unk) CVE-2023-35788: (unk) net/sched: flower: fix possible OOB write in fl_set_geneve_opt() CVE-2023-35823: (unk) media: saa7134: fix use after free bug in saa7134_finidev due to race condition CVE-2023-35824: (unk) media: dm1105: Fix use after free bug in dm1105_remove due to race condition CVE-2023-35827: (unk) CVE-2023-35828: (unk) usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition CVE-2023-35829: (unk) media: rkvdec: fix use after free bug in rkvdec_remove + CVE-2023-3609: (unk) net/sched: cls_u32: Fix reference counter leak leading to overflow + CVE-2023-3610: (unk) netfilter: nf_tables: fix chain binding transaction logic + CVE-2023-3611: (unk) net/sched: sch_qfq: account for stab overhead in qfq_enqueue CVE-2023-3640: (unk) CVE-2023-37453: (unk) CVE-2023-37454: (unk) - CVE-2023-38426: (unk) ksmbd: fix global-out-of-bounds in smb2_find_context_vals - CVE-2023-38427: (unk) ksmbd: fix out-of-bound read in deassemble_neg_contexts() - CVE-2023-38428: (unk) ksmbd: fix wrong UserName check in session_user - CVE-2023-38429: (unk) ksmbd: allocate one more byte for implied bcc[0] - CVE-2023-38430: (unk) ksmbd: validate smb request protocol id - CVE-2023-38431: (unk) ksmbd: check the validation of pdu_size in ksmbd_conn_handler_loop - CVE-2023-38432: (unk) ksmbd: validate command payload size + CVE-2023-3772: (unk) + CVE-2023-3773: (unk) + CVE-2023-3776: (unk) net/sched: cls_fw: Fix improper refcount update leads to use-after-free + CVE-2023-3812: (unk) net: tun: fix bugs for oversize packet when napi frags enabled + CVE-2023-3863: (unk) net: nfc: Fix use-after-free caused by nfc_llcp_find_local
diff --git a/data/5.15/5.15_CVEs.txt b/data/5.15/5.15_CVEs.txt index 1f3ee92..84b5f99 100644 --- a/data/5.15/5.15_CVEs.txt +++ b/data/5.15/5.15_CVEs.txt
@@ -266,6 +266,7 @@ CVE-2022-3523: Fix not seen in stream CVE-2022-3524: Fixed with 5.15.77 CVE-2022-3526: Fixed with 5.15.35 +CVE-2022-3533: Fix unknown CVE-2022-3534: Fixed with 5.15.86 CVE-2022-3535: Fixed with 5.15.75 CVE-2022-3542: Fixed with 5.15.75 @@ -279,6 +280,7 @@ CVE-2022-3586: Fixed with 5.15.68 CVE-2022-3594: Fixed with 5.15.75 CVE-2022-3595: Fix not seen in stream +CVE-2022-3606: Fix unknown CVE-2022-36123: Fixed with 5.15.56 CVE-2022-3619: Fixed with 5.15.78 CVE-2022-3621: Fixed with 5.15.74 @@ -360,7 +362,7 @@ CVE-2022-48423: Fixed with 5.15.87 CVE-2022-48424: Fixed with 5.15.87 CVE-2022-48425: Fixed with 5.15.113 -CVE-2022-48502: Fix not seen in stream +CVE-2022-48502: Fixed with 5.15.121 CVE-2023-0045: Fixed with 5.15.87 CVE-2023-0047: Fixed with 5.15.3 CVE-2023-0160: Fix unknown @@ -411,6 +413,7 @@ CVE-2023-2007: Fix not seen in stream CVE-2023-2008: Fixed with 5.15.51 CVE-2023-2019: Fixed with 5.15.61 +CVE-2023-20593: Fixed with 5.15.122 CVE-2023-20928: Fixed with 5.15.61 CVE-2023-20941: Fix unknown CVE-2023-21102: Fixed with 5.15.90 @@ -451,7 +454,7 @@ CVE-2023-28410: Fixed with 5.15.33 CVE-2023-28466: Fixed with 5.15.105 CVE-2023-2860: Fixed with 5.15.68 -CVE-2023-2898: Fix not seen in stream +CVE-2023-2898: Fixed with 5.15.121 CVE-2023-2985: Fixed with 5.15.99 CVE-2023-3006: Fixed with 5.15.77 CVE-2023-30456: Fixed with 5.15.104 @@ -463,7 +466,8 @@ CVE-2023-31084: Fix not seen in stream CVE-2023-31085: Fix unknown CVE-2023-3111: Fixed with 5.15.63 -CVE-2023-31248: Fix not seen in stream +CVE-2023-3117: Fixed with 5.15.118 +CVE-2023-31248: Fixed with 5.15.121 CVE-2023-3141: Fixed with 5.15.113 CVE-2023-31436: Fixed with 5.15.109 CVE-2023-3159: Fixed with 5.15.39 @@ -492,22 +496,29 @@ CVE-2023-34255: Fixed with 5.15.117 CVE-2023-34256: Fixed with 5.15.112 CVE-2023-3439: Fix not seen in stream -CVE-2023-35001: Fix not seen in stream +CVE-2023-35001: Fixed with 5.15.121 CVE-2023-3567: Fixed with 5.15.93 -CVE-2023-35693: Fix unknown CVE-2023-35788: Fixed with 5.15.116 CVE-2023-35823: Fixed with 5.15.111 CVE-2023-35824: Fixed with 5.15.111 CVE-2023-35827: Fix unknown CVE-2023-35828: Fixed with 5.15.111 CVE-2023-35829: Fixed with 5.15.111 +CVE-2023-3609: Fixed with 5.15.118 +CVE-2023-3610: Fixed with 5.15.119 +CVE-2023-3611: Fixed with 5.15.121 CVE-2023-3640: Fix unknown CVE-2023-37453: Fix unknown CVE-2023-37454: Fix unknown +CVE-2023-3772: Fix unknown +CVE-2023-3773: Fix unknown +CVE-2023-3776: Fixed with 5.15.121 +CVE-2023-3812: Fixed with 5.15.78 CVE-2023-38426: Fixed with 5.15.113 CVE-2023-38427: Fix not seen in stream CVE-2023-38428: Fixed with 5.15.113 CVE-2023-38429: Fixed with 5.15.113 CVE-2023-38430: Fix not seen in stream CVE-2023-38431: Fix not seen in stream -CVE-2023-38432: Fix not seen in stream +CVE-2023-38432: Fixed with 5.15.121 +CVE-2023-3863: Fixed with 5.15.121
diff --git a/data/5.15/5.15_security.txt b/data/5.15/5.15_security.txt index 7df2ea0..c1658a8 100644 --- a/data/5.15/5.15_security.txt +++ b/data/5.15/5.15_security.txt
@@ -389,6 +389,7 @@ CVE-2022-3628: 7038af4ce95105146d22e461eaa450829f28eeaf wifi: brcmfmac: Fix potential buffer overflow in brcmf_fweh_event_worker() CVE-2022-42895: 3e4697ffdfbb38a2755012c4e571546c89ab6422 Bluetooth: L2CAP: Fix attempting to access uninitialized memory CVE-2022-42896: 81035e1201e26d57d9733ac59140a3e29befbc5a Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM + CVE-2023-3812: dcc79cf735b8ec4bedaa82c53bed8c62721c042b net: tun: fix bugs for oversize packet when napi frags enabled CVEs fixed in 5.15.80: CVE-2022-3169: b1a27b2aad936746e6ef64c8a24bcb6dce6f926a nvme: ensure subsystem reset is single threaded @@ -560,8 +561,26 @@ CVE-2023-34255: 6cfe9ddb6aa698464fa16fb77a0233f68c13360c xfs: verify buffer contents when we skip log replay CVEs fixed in 5.15.118: + CVE-2023-3117: 44ebe988cb38e720b91826f4d7c31692061ca04a netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE CVE-2023-3338: 2a974abc09761c05fef697fe229d1b85a7ce3918 Remove DECnet support from kernel CVE-2023-3390: 44ebe988cb38e720b91826f4d7c31692061ca04a netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE + CVE-2023-3609: 0e1098d72fa462944c68262e1b5cca045dcb555e net/sched: cls_u32: Fix reference counter leak leading to overflow + +CVEs fixed in 5.15.119: + CVE-2023-3610: 314a8697d08092df6d00521450d44c352c602943 netfilter: nf_tables: fix chain binding transaction logic + +CVEs fixed in 5.15.121: + CVE-2022-48502: 333feb7ba84f69f9b423422417aaac54fd9e7c84 fs/ntfs3: Check fields while reading + CVE-2023-2898: 982c29e0d27a48d65fd0fa0d1bcee501eeb06e76 f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io() + CVE-2023-31248: 041e2ac88caef286b39064e83e825e3f53113d36 netfilter: nf_tables: do not ignore genmask when looking up chain by id + CVE-2023-35001: 870dcc31c0cf47cb15a568ade4168dc644b3ccfb netfilter: nf_tables: prevent OOB access in nft_byteorder_eval + CVE-2023-3611: 91d3554ab1fc2804c36a815c0f79502d727a41e6 net/sched: sch_qfq: account for stab overhead in qfq_enqueue + CVE-2023-3776: 5b55f2d6ef403fcda93ae4eb4d8c1ba164c66e92 net/sched: cls_fw: Fix improper refcount update leads to use-after-free + CVE-2023-38432: 35f450f54dca1519bb24faacd0428db09f89a11f ksmbd: validate command payload size + CVE-2023-3863: fc8429f8d86801f092fbfbd257c3af821ac0dcd3 net: nfc: Fix use-after-free caused by nfc_llcp_find_local + +CVEs fixed in 5.15.122: + CVE-2023-20593: be824fdb827dc06f77a31122949fe1bc011e3e1e x86/cpu/amd: Add a Zenbleed fix Outstanding CVEs: CVE-2005-3660: (unk) @@ -633,9 +652,11 @@ CVE-2022-3238: (unk) CVE-2022-3522: (unk) mm/hugetlb: use hugetlb_pte_stable in migration race check CVE-2022-3523: (unk) mm/memory.c: fix race when faulting a device private page + CVE-2022-3533: (unk) CVE-2022-3566: (unk) tcp: Fix data races around icsk->icsk_af_ops. CVE-2022-3567: (unk) ipv6: Fix data races around sk->sk_prot. CVE-2022-3595: (unk) cifs: fix double-fault crash during ntlmssp + CVE-2022-3606: (unk) CVE-2022-3624: (unk) bonding: fix reference count leak in balance-alb mode CVE-2022-3636: (unk) net: ethernet: mtk_eth_soc: use after free in __mtk_ppe_check_skb() CVE-2022-36402: (unk) @@ -657,7 +678,6 @@ CVE-2022-45888: (unk) char: xillybus: Prevent use-after-free due to race condition CVE-2022-45919: (unk) CVE-2022-47940: (unk) ksmbd: validate length in smb2_write() - CVE-2022-48502: (unk) fs/ntfs3: Check fields while reading CVE-2023-0160: (unk) CVE-2023-0597: (unk) x86/mm: Randomize per-cpu entry area CVE-2023-1075: (unk) net/tls: tls_is_tx_ready() checked list_entry @@ -673,13 +693,11 @@ CVE-2023-23039: (unk) CVE-2023-2430: (unk) io_uring/msg_ring: fix missing lock on overflow for IOPOLL CVE-2023-26242: (unk) - CVE-2023-2898: (unk) f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io() CVE-2023-31081: (unk) CVE-2023-31082: (unk) CVE-2023-31083: (unk) CVE-2023-31084: (unk) media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() CVE-2023-31085: (unk) - CVE-2023-31248: (unk) netfilter: nf_tables: do not ignore genmask when looking up chain by id CVE-2023-32247: (unk) ksmbd: destroy expired sessions CVE-2023-32250: (unk) ksmbd: fix racy issue from session setup and logoff CVE-2023-32252: (unk) ksmbd: fix racy issue from session setup and logoff @@ -689,13 +707,12 @@ CVE-2023-3389: (unk) io_uring: mutex locked poll hashing CVE-2023-3397: (unk) CVE-2023-3439: (unk) mctp: defer the kfree of object mdev->addrs - CVE-2023-35001: (unk) netfilter: nf_tables: prevent OOB access in nft_byteorder_eval - CVE-2023-35693: (unk) CVE-2023-35827: (unk) CVE-2023-3640: (unk) CVE-2023-37453: (unk) CVE-2023-37454: (unk) + CVE-2023-3772: (unk) + CVE-2023-3773: (unk) CVE-2023-38427: (unk) ksmbd: fix out-of-bound read in deassemble_neg_contexts() CVE-2023-38430: (unk) ksmbd: validate smb request protocol id CVE-2023-38431: (unk) ksmbd: check the validation of pdu_size in ksmbd_conn_handler_loop - CVE-2023-38432: (unk) ksmbd: validate command payload size
diff --git a/data/5.16/5.16_CVEs.txt b/data/5.16/5.16_CVEs.txt index f1d1611..8ecde38 100644 --- a/data/5.16/5.16_CVEs.txt +++ b/data/5.16/5.16_CVEs.txt
@@ -233,6 +233,7 @@ CVE-2022-3523: Fix not seen in stream CVE-2022-3524: Fix not seen in stream CVE-2022-3526: Fix not seen in stream +CVE-2022-3533: Fix unknown CVE-2022-3534: Fix not seen in stream CVE-2022-3535: Fix not seen in stream CVE-2022-3542: Fix not seen in stream @@ -246,6 +247,7 @@ CVE-2022-3586: Fix not seen in stream CVE-2022-3594: Fix not seen in stream CVE-2022-3595: Fix not seen in stream +CVE-2022-3606: Fix unknown CVE-2022-36123: Fix not seen in stream CVE-2022-3619: Fix not seen in stream CVE-2022-3621: Fix not seen in stream @@ -378,6 +380,7 @@ CVE-2023-2007: Fix not seen in stream CVE-2023-2008: Fix not seen in stream CVE-2023-2019: Fix not seen in stream +CVE-2023-20593: Fix not seen in stream CVE-2023-20928: Fix not seen in stream CVE-2023-20941: Fix unknown CVE-2023-21102: Fix not seen in stream @@ -431,6 +434,7 @@ CVE-2023-31084: Fix not seen in stream CVE-2023-31085: Fix unknown CVE-2023-3111: Fix not seen in stream +CVE-2023-3117: Fix not seen in stream CVE-2023-31248: Fix not seen in stream CVE-2023-3141: Fix not seen in stream CVE-2023-31436: Fix not seen in stream @@ -462,16 +466,22 @@ CVE-2023-3439: Fix not seen in stream CVE-2023-35001: Fix not seen in stream CVE-2023-3567: Fix not seen in stream -CVE-2023-35693: Fix unknown CVE-2023-35788: Fix not seen in stream CVE-2023-35823: Fix not seen in stream CVE-2023-35824: Fix not seen in stream CVE-2023-35827: Fix unknown CVE-2023-35828: Fix not seen in stream CVE-2023-35829: Fix not seen in stream +CVE-2023-3609: Fix not seen in stream +CVE-2023-3610: Fix not seen in stream +CVE-2023-3611: Fix not seen in stream CVE-2023-3640: Fix unknown CVE-2023-37453: Fix unknown CVE-2023-37454: Fix unknown +CVE-2023-3772: Fix unknown +CVE-2023-3773: Fix unknown +CVE-2023-3776: Fix not seen in stream +CVE-2023-3812: Fix not seen in stream CVE-2023-38426: Fix not seen in stream CVE-2023-38427: Fix not seen in stream CVE-2023-38428: Fix not seen in stream @@ -479,3 +489,4 @@ CVE-2023-38430: Fix not seen in stream CVE-2023-38431: Fix not seen in stream CVE-2023-38432: Fix not seen in stream +CVE-2023-3863: Fix not seen in stream
diff --git a/data/5.16/5.16_security.txt b/data/5.16/5.16_security.txt index c919a67..7dc0fd2 100644 --- a/data/5.16/5.16_security.txt +++ b/data/5.16/5.16_security.txt
@@ -277,6 +277,7 @@ CVE-2022-3523: (unk) mm/memory.c: fix race when faulting a device private page CVE-2022-3524: (unk) tcp/udp: Fix memory leak in ipv6_renew_options(). CVE-2022-3526: (unk) macvlan: Fix leaking skb in source mode with nodst option + CVE-2022-3533: (unk) CVE-2022-3534: (unk) libbpf: Fix use-after-free in btf_dump_name_dups CVE-2022-3535: (unk) net: mvpp2: fix mvpp2 debugfs leak CVE-2022-3542: (unk) bnx2x: fix potential memory leak in bnx2x_tpa_stop() @@ -290,6 +291,7 @@ CVE-2022-3586: (unk) sch_sfb: Don't assume the skb is still around after enqueueing to child CVE-2022-3594: (unk) r8152: Rate limit overflow messages CVE-2022-3595: (unk) cifs: fix double-fault crash during ntlmssp + CVE-2022-3606: (unk) CVE-2022-36123: (unk) x86: Clear .brk area at early boot CVE-2022-3619: (unk) Bluetooth: L2CAP: Fix memory leak in vhci_write CVE-2022-3621: (unk) nilfs2: fix NULL pointer dereference at nilfs_bmap_lookup_at_level() @@ -419,6 +421,7 @@ CVE-2023-2007: (unk) scsi: dpt_i2o: Remove obsolete driver CVE-2023-2008: (unk) udmabuf: add back sanity check CVE-2023-2019: (unk) netdevsim: fib: Fix reference count leak on route deletion failure + CVE-2023-20593: (unk) x86/cpu/amd: Add a Zenbleed fix CVE-2023-20928: (unk) android: binder: stop saving a pointer to the VMA CVE-2023-20941: (unk) CVE-2023-21102: (unk) efi: rt-wrapper: Add missing include @@ -467,6 +470,7 @@ CVE-2023-31084: (unk) media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() CVE-2023-31085: (unk) CVE-2023-3111: (unk) btrfs: unset reloc control if transaction commit fails in prepare_to_relocate() + CVE-2023-3117: (unk) netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE CVE-2023-31248: (unk) netfilter: nf_tables: do not ignore genmask when looking up chain by id CVE-2023-3141: (unk) memstick: r592: Fix UAF bug in r592_remove due to race condition CVE-2023-31436: (unk) net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg @@ -498,16 +502,22 @@ CVE-2023-3439: (unk) mctp: defer the kfree of object mdev->addrs CVE-2023-35001: (unk) netfilter: nf_tables: prevent OOB access in nft_byteorder_eval CVE-2023-3567: (unk) vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF - CVE-2023-35693: (unk) CVE-2023-35788: (unk) net/sched: flower: fix possible OOB write in fl_set_geneve_opt() CVE-2023-35823: (unk) media: saa7134: fix use after free bug in saa7134_finidev due to race condition CVE-2023-35824: (unk) media: dm1105: Fix use after free bug in dm1105_remove due to race condition CVE-2023-35827: (unk) CVE-2023-35828: (unk) usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition CVE-2023-35829: (unk) media: rkvdec: fix use after free bug in rkvdec_remove + CVE-2023-3609: (unk) net/sched: cls_u32: Fix reference counter leak leading to overflow + CVE-2023-3610: (unk) netfilter: nf_tables: fix chain binding transaction logic + CVE-2023-3611: (unk) net/sched: sch_qfq: account for stab overhead in qfq_enqueue CVE-2023-3640: (unk) CVE-2023-37453: (unk) CVE-2023-37454: (unk) + CVE-2023-3772: (unk) + CVE-2023-3773: (unk) + CVE-2023-3776: (unk) net/sched: cls_fw: Fix improper refcount update leads to use-after-free + CVE-2023-3812: (unk) net: tun: fix bugs for oversize packet when napi frags enabled CVE-2023-38426: (unk) ksmbd: fix global-out-of-bounds in smb2_find_context_vals CVE-2023-38427: (unk) ksmbd: fix out-of-bound read in deassemble_neg_contexts() CVE-2023-38428: (unk) ksmbd: fix wrong UserName check in session_user @@ -515,3 +525,4 @@ CVE-2023-38430: (unk) ksmbd: validate smb request protocol id CVE-2023-38431: (unk) ksmbd: check the validation of pdu_size in ksmbd_conn_handler_loop CVE-2023-38432: (unk) ksmbd: validate command payload size + CVE-2023-3863: (unk) net: nfc: Fix use-after-free caused by nfc_llcp_find_local
diff --git a/data/5.17/5.17_CVEs.txt b/data/5.17/5.17_CVEs.txt index 237f10f..5acfe9a 100644 --- a/data/5.17/5.17_CVEs.txt +++ b/data/5.17/5.17_CVEs.txt
@@ -175,6 +175,7 @@ CVE-2022-3523: Fix not seen in stream CVE-2022-3524: Fix not seen in stream CVE-2022-3526: Fixed with 5.17.4 +CVE-2022-3533: Fix unknown CVE-2022-3534: Fix not seen in stream CVE-2022-3535: Fix not seen in stream CVE-2022-3542: Fix not seen in stream @@ -188,6 +189,7 @@ CVE-2022-3586: Fix not seen in stream CVE-2022-3594: Fix not seen in stream CVE-2022-3595: Fix not seen in stream +CVE-2022-3606: Fix unknown CVE-2022-36123: Fix not seen in stream CVE-2022-3619: Fix not seen in stream CVE-2022-3621: Fix not seen in stream @@ -322,6 +324,7 @@ CVE-2023-2007: Fix not seen in stream CVE-2023-2008: Fix not seen in stream CVE-2023-2019: Fix not seen in stream +CVE-2023-20593: Fix not seen in stream CVE-2023-20928: Fix not seen in stream CVE-2023-20938: Fixed with 5.17.6 CVE-2023-20941: Fix unknown @@ -373,6 +376,7 @@ CVE-2023-31084: Fix not seen in stream CVE-2023-31085: Fix unknown CVE-2023-3111: Fix not seen in stream +CVE-2023-3117: Fix not seen in stream CVE-2023-31248: Fix not seen in stream CVE-2023-3141: Fix not seen in stream CVE-2023-31436: Fix not seen in stream @@ -406,16 +410,22 @@ CVE-2023-3439: Fixed with 5.17.6 CVE-2023-35001: Fix not seen in stream CVE-2023-3567: Fix not seen in stream -CVE-2023-35693: Fix unknown CVE-2023-35788: Fix not seen in stream CVE-2023-35823: Fix not seen in stream CVE-2023-35824: Fix not seen in stream CVE-2023-35827: Fix unknown CVE-2023-35828: Fix not seen in stream CVE-2023-35829: Fix not seen in stream +CVE-2023-3609: Fix not seen in stream +CVE-2023-3610: Fix not seen in stream +CVE-2023-3611: Fix not seen in stream CVE-2023-3640: Fix unknown CVE-2023-37453: Fix unknown CVE-2023-37454: Fix unknown +CVE-2023-3772: Fix unknown +CVE-2023-3773: Fix unknown +CVE-2023-3776: Fix not seen in stream +CVE-2023-3812: Fix not seen in stream CVE-2023-38426: Fix not seen in stream CVE-2023-38427: Fix not seen in stream CVE-2023-38428: Fix not seen in stream @@ -423,3 +433,4 @@ CVE-2023-38430: Fix not seen in stream CVE-2023-38431: Fix not seen in stream CVE-2023-38432: Fix not seen in stream +CVE-2023-3863: Fix not seen in stream
diff --git a/data/5.17/5.17_security.txt b/data/5.17/5.17_security.txt index 79a753a..edc447c 100644 --- a/data/5.17/5.17_security.txt +++ b/data/5.17/5.17_security.txt
@@ -218,6 +218,7 @@ CVE-2022-3522: (unk) mm/hugetlb: use hugetlb_pte_stable in migration race check CVE-2022-3523: (unk) mm/memory.c: fix race when faulting a device private page CVE-2022-3524: (unk) tcp/udp: Fix memory leak in ipv6_renew_options(). + CVE-2022-3533: (unk) CVE-2022-3534: (unk) libbpf: Fix use-after-free in btf_dump_name_dups CVE-2022-3535: (unk) net: mvpp2: fix mvpp2 debugfs leak CVE-2022-3542: (unk) bnx2x: fix potential memory leak in bnx2x_tpa_stop() @@ -230,6 +231,7 @@ CVE-2022-3586: (unk) sch_sfb: Don't assume the skb is still around after enqueueing to child CVE-2022-3594: (unk) r8152: Rate limit overflow messages CVE-2022-3595: (unk) cifs: fix double-fault crash during ntlmssp + CVE-2022-3606: (unk) CVE-2022-36123: (unk) x86: Clear .brk area at early boot CVE-2022-3619: (unk) Bluetooth: L2CAP: Fix memory leak in vhci_write CVE-2022-3621: (unk) nilfs2: fix NULL pointer dereference at nilfs_bmap_lookup_at_level() @@ -359,6 +361,7 @@ CVE-2023-2007: (unk) scsi: dpt_i2o: Remove obsolete driver CVE-2023-2008: (unk) udmabuf: add back sanity check CVE-2023-2019: (unk) netdevsim: fib: Fix reference count leak on route deletion failure + CVE-2023-20593: (unk) x86/cpu/amd: Add a Zenbleed fix CVE-2023-20928: (unk) android: binder: stop saving a pointer to the VMA CVE-2023-20941: (unk) CVE-2023-21102: (unk) efi: rt-wrapper: Add missing include @@ -407,6 +410,7 @@ CVE-2023-31084: (unk) media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() CVE-2023-31085: (unk) CVE-2023-3111: (unk) btrfs: unset reloc control if transaction commit fails in prepare_to_relocate() + CVE-2023-3117: (unk) netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE CVE-2023-31248: (unk) netfilter: nf_tables: do not ignore genmask when looking up chain by id CVE-2023-3141: (unk) memstick: r592: Fix UAF bug in r592_remove due to race condition CVE-2023-31436: (unk) net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg @@ -438,16 +442,22 @@ CVE-2023-34256: (unk) ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum CVE-2023-35001: (unk) netfilter: nf_tables: prevent OOB access in nft_byteorder_eval CVE-2023-3567: (unk) vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF - CVE-2023-35693: (unk) CVE-2023-35788: (unk) net/sched: flower: fix possible OOB write in fl_set_geneve_opt() CVE-2023-35823: (unk) media: saa7134: fix use after free bug in saa7134_finidev due to race condition CVE-2023-35824: (unk) media: dm1105: Fix use after free bug in dm1105_remove due to race condition CVE-2023-35827: (unk) CVE-2023-35828: (unk) usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition CVE-2023-35829: (unk) media: rkvdec: fix use after free bug in rkvdec_remove + CVE-2023-3609: (unk) net/sched: cls_u32: Fix reference counter leak leading to overflow + CVE-2023-3610: (unk) netfilter: nf_tables: fix chain binding transaction logic + CVE-2023-3611: (unk) net/sched: sch_qfq: account for stab overhead in qfq_enqueue CVE-2023-3640: (unk) CVE-2023-37453: (unk) CVE-2023-37454: (unk) + CVE-2023-3772: (unk) + CVE-2023-3773: (unk) + CVE-2023-3776: (unk) net/sched: cls_fw: Fix improper refcount update leads to use-after-free + CVE-2023-3812: (unk) net: tun: fix bugs for oversize packet when napi frags enabled CVE-2023-38426: (unk) ksmbd: fix global-out-of-bounds in smb2_find_context_vals CVE-2023-38427: (unk) ksmbd: fix out-of-bound read in deassemble_neg_contexts() CVE-2023-38428: (unk) ksmbd: fix wrong UserName check in session_user @@ -455,3 +465,4 @@ CVE-2023-38430: (unk) ksmbd: validate smb request protocol id CVE-2023-38431: (unk) ksmbd: check the validation of pdu_size in ksmbd_conn_handler_loop CVE-2023-38432: (unk) ksmbd: validate command payload size + CVE-2023-3863: (unk) net: nfc: Fix use-after-free caused by nfc_llcp_find_local
diff --git a/data/5.18/5.18_CVEs.txt b/data/5.18/5.18_CVEs.txt index d1efb84..328aba9 100644 --- a/data/5.18/5.18_CVEs.txt +++ b/data/5.18/5.18_CVEs.txt
@@ -128,6 +128,7 @@ CVE-2022-3522: Fix not seen in stream CVE-2022-3523: Fix not seen in stream CVE-2022-3524: Fix not seen in stream +CVE-2022-3533: Fix unknown CVE-2022-3534: Fix not seen in stream CVE-2022-3535: Fix not seen in stream CVE-2022-3542: Fix not seen in stream @@ -142,6 +143,7 @@ CVE-2022-3586: Fix not seen in stream CVE-2022-3594: Fix not seen in stream CVE-2022-3595: Fix not seen in stream +CVE-2022-3606: Fix unknown CVE-2022-36123: Fixed with 5.18.13 CVE-2022-3619: Fix not seen in stream CVE-2022-3621: Fix not seen in stream @@ -274,6 +276,7 @@ CVE-2023-2007: Fix not seen in stream CVE-2023-2008: Fixed with 5.18.8 CVE-2023-2019: Fixed with 5.18.18 +CVE-2023-20593: Fix not seen in stream CVE-2023-20928: Fixed with 5.18.18 CVE-2023-20941: Fix unknown CVE-2023-21102: Fix not seen in stream @@ -323,6 +326,7 @@ CVE-2023-31084: Fix not seen in stream CVE-2023-31085: Fix unknown CVE-2023-3111: Fix not seen in stream +CVE-2023-3117: Fix not seen in stream CVE-2023-31248: Fix not seen in stream CVE-2023-3141: Fix not seen in stream CVE-2023-31436: Fix not seen in stream @@ -355,7 +359,6 @@ CVE-2023-34256: Fix not seen in stream CVE-2023-35001: Fix not seen in stream CVE-2023-3567: Fix not seen in stream -CVE-2023-35693: Fix unknown CVE-2023-35788: Fix not seen in stream CVE-2023-35823: Fix not seen in stream CVE-2023-35824: Fix not seen in stream @@ -363,9 +366,16 @@ CVE-2023-35827: Fix unknown CVE-2023-35828: Fix not seen in stream CVE-2023-35829: Fix not seen in stream +CVE-2023-3609: Fix not seen in stream +CVE-2023-3610: Fix not seen in stream +CVE-2023-3611: Fix not seen in stream CVE-2023-3640: Fix unknown CVE-2023-37453: Fix unknown CVE-2023-37454: Fix unknown +CVE-2023-3772: Fix unknown +CVE-2023-3773: Fix unknown +CVE-2023-3776: Fix not seen in stream +CVE-2023-3812: Fix not seen in stream CVE-2023-38426: Fix not seen in stream CVE-2023-38427: Fix not seen in stream CVE-2023-38428: Fix not seen in stream @@ -373,3 +383,4 @@ CVE-2023-38430: Fix not seen in stream CVE-2023-38431: Fix not seen in stream CVE-2023-38432: Fix not seen in stream +CVE-2023-3863: Fix not seen in stream
diff --git a/data/5.18/5.18_security.txt b/data/5.18/5.18_security.txt index 51a0d2f..6135943 100644 --- a/data/5.18/5.18_security.txt +++ b/data/5.18/5.18_security.txt
@@ -185,6 +185,7 @@ CVE-2022-3522: (unk) mm/hugetlb: use hugetlb_pte_stable in migration race check CVE-2022-3523: (unk) mm/memory.c: fix race when faulting a device private page CVE-2022-3524: (unk) tcp/udp: Fix memory leak in ipv6_renew_options(). + CVE-2022-3533: (unk) CVE-2022-3534: (unk) libbpf: Fix use-after-free in btf_dump_name_dups CVE-2022-3535: (unk) net: mvpp2: fix mvpp2 debugfs leak CVE-2022-3542: (unk) bnx2x: fix potential memory leak in bnx2x_tpa_stop() @@ -198,6 +199,7 @@ CVE-2022-3586: (unk) sch_sfb: Don't assume the skb is still around after enqueueing to child CVE-2022-3594: (unk) r8152: Rate limit overflow messages CVE-2022-3595: (unk) cifs: fix double-fault crash during ntlmssp + CVE-2022-3606: (unk) CVE-2022-3619: (unk) Bluetooth: L2CAP: Fix memory leak in vhci_write CVE-2022-3621: (unk) nilfs2: fix NULL pointer dereference at nilfs_bmap_lookup_at_level() CVE-2022-3623: (unk) mm/hugetlb: fix races when looking up a CONT-PTE/PMD size hugetlb page @@ -315,6 +317,7 @@ CVE-2023-2002: (unk) bluetooth: Perform careful capability checks in hci_sock_ioctl() CVE-2023-2006: (unk) rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975] CVE-2023-2007: (unk) scsi: dpt_i2o: Remove obsolete driver + CVE-2023-20593: (unk) x86/cpu/amd: Add a Zenbleed fix CVE-2023-20941: (unk) CVE-2023-21102: (unk) efi: rt-wrapper: Add missing include CVE-2023-2124: (unk) xfs: verify buffer contents when we skip log replay @@ -359,6 +362,7 @@ CVE-2023-31084: (unk) media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() CVE-2023-31085: (unk) CVE-2023-3111: (unk) btrfs: unset reloc control if transaction commit fails in prepare_to_relocate() + CVE-2023-3117: (unk) netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE CVE-2023-31248: (unk) netfilter: nf_tables: do not ignore genmask when looking up chain by id CVE-2023-3141: (unk) memstick: r592: Fix UAF bug in r592_remove due to race condition CVE-2023-31436: (unk) net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg @@ -391,7 +395,6 @@ CVE-2023-34256: (unk) ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum CVE-2023-35001: (unk) netfilter: nf_tables: prevent OOB access in nft_byteorder_eval CVE-2023-3567: (unk) vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF - CVE-2023-35693: (unk) CVE-2023-35788: (unk) net/sched: flower: fix possible OOB write in fl_set_geneve_opt() CVE-2023-35823: (unk) media: saa7134: fix use after free bug in saa7134_finidev due to race condition CVE-2023-35824: (unk) media: dm1105: Fix use after free bug in dm1105_remove due to race condition @@ -399,9 +402,16 @@ CVE-2023-35827: (unk) CVE-2023-35828: (unk) usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition CVE-2023-35829: (unk) media: rkvdec: fix use after free bug in rkvdec_remove + CVE-2023-3609: (unk) net/sched: cls_u32: Fix reference counter leak leading to overflow + CVE-2023-3610: (unk) netfilter: nf_tables: fix chain binding transaction logic + CVE-2023-3611: (unk) net/sched: sch_qfq: account for stab overhead in qfq_enqueue CVE-2023-3640: (unk) CVE-2023-37453: (unk) CVE-2023-37454: (unk) + CVE-2023-3772: (unk) + CVE-2023-3773: (unk) + CVE-2023-3776: (unk) net/sched: cls_fw: Fix improper refcount update leads to use-after-free + CVE-2023-3812: (unk) net: tun: fix bugs for oversize packet when napi frags enabled CVE-2023-38426: (unk) ksmbd: fix global-out-of-bounds in smb2_find_context_vals CVE-2023-38427: (unk) ksmbd: fix out-of-bound read in deassemble_neg_contexts() CVE-2023-38428: (unk) ksmbd: fix wrong UserName check in session_user @@ -409,3 +419,4 @@ CVE-2023-38430: (unk) ksmbd: validate smb request protocol id CVE-2023-38431: (unk) ksmbd: check the validation of pdu_size in ksmbd_conn_handler_loop CVE-2023-38432: (unk) ksmbd: validate command payload size + CVE-2023-3863: (unk) net: nfc: Fix use-after-free caused by nfc_llcp_find_local
diff --git a/data/5.19/5.19_CVEs.txt b/data/5.19/5.19_CVEs.txt index d13c2d8..4b4f78f 100644 --- a/data/5.19/5.19_CVEs.txt +++ b/data/5.19/5.19_CVEs.txt
@@ -88,6 +88,7 @@ CVE-2022-3523: Fix not seen in stream CVE-2022-3524: Fix not seen in stream CVE-2022-3531: Fix not seen in stream +CVE-2022-3533: Fix unknown CVE-2022-3534: Fix not seen in stream CVE-2022-3535: Fixed with 5.19.17 CVE-2022-3541: Fix not seen in stream @@ -102,6 +103,7 @@ CVE-2022-3586: Fixed with 5.19.9 CVE-2022-3594: Fixed with 5.19.17 CVE-2022-3595: Fix not seen in stream +CVE-2022-3606: Fix unknown CVE-2022-3619: Fix not seen in stream CVE-2022-3621: Fixed with 5.19.16 CVE-2022-3623: Fixed with 5.19.17 @@ -230,6 +232,7 @@ CVE-2023-2006: Fix not seen in stream CVE-2023-2007: Fix not seen in stream CVE-2023-2019: Fixed with 5.19.2 +CVE-2023-20593: Fix not seen in stream CVE-2023-20928: Fix not seen in stream CVE-2023-20941: Fix unknown CVE-2023-21102: Fix not seen in stream @@ -279,6 +282,7 @@ CVE-2023-31084: Fix not seen in stream CVE-2023-31085: Fix unknown CVE-2023-3111: Fix not seen in stream +CVE-2023-3117: Fix not seen in stream CVE-2023-31248: Fix not seen in stream CVE-2023-3141: Fix not seen in stream CVE-2023-31436: Fix not seen in stream @@ -311,7 +315,6 @@ CVE-2023-34256: Fix not seen in stream CVE-2023-35001: Fix not seen in stream CVE-2023-3567: Fix not seen in stream -CVE-2023-35693: Fix unknown CVE-2023-35788: Fix not seen in stream CVE-2023-35823: Fix not seen in stream CVE-2023-35824: Fix not seen in stream @@ -319,9 +322,16 @@ CVE-2023-35827: Fix unknown CVE-2023-35828: Fix not seen in stream CVE-2023-35829: Fix not seen in stream +CVE-2023-3609: Fix not seen in stream +CVE-2023-3610: Fix not seen in stream +CVE-2023-3611: Fix not seen in stream CVE-2023-3640: Fix unknown CVE-2023-37453: Fix unknown CVE-2023-37454: Fix unknown +CVE-2023-3772: Fix unknown +CVE-2023-3773: Fix unknown +CVE-2023-3776: Fix not seen in stream +CVE-2023-3812: Fix not seen in stream CVE-2023-38409: Fix not seen in stream CVE-2023-38426: Fix not seen in stream CVE-2023-38427: Fix not seen in stream @@ -330,3 +340,4 @@ CVE-2023-38430: Fix not seen in stream CVE-2023-38431: Fix not seen in stream CVE-2023-38432: Fix not seen in stream +CVE-2023-3863: Fix not seen in stream
diff --git a/data/5.19/5.19_security.txt b/data/5.19/5.19_security.txt index 97192e8..4b0fdd7 100644 --- a/data/5.19/5.19_security.txt +++ b/data/5.19/5.19_security.txt
@@ -149,6 +149,7 @@ CVE-2022-3523: (unk) mm/memory.c: fix race when faulting a device private page CVE-2022-3524: (unk) tcp/udp: Fix memory leak in ipv6_renew_options(). CVE-2022-3531: (unk) selftest/bpf: Fix memory leak in kprobe_multi_test + CVE-2022-3533: (unk) CVE-2022-3534: (unk) libbpf: Fix use-after-free in btf_dump_name_dups CVE-2022-3541: (unk) eth: sp7021: fix use after free bug in spl2sw_nvmem_get_mac_address CVE-2022-3543: (unk) af_unix: Fix memory leaks of the whole sk due to OOB skb. @@ -158,6 +159,7 @@ CVE-2022-3566: (unk) tcp: Fix data races around icsk->icsk_af_ops. CVE-2022-3567: (unk) ipv6: Fix data races around sk->sk_prot. CVE-2022-3595: (unk) cifs: fix double-fault crash during ntlmssp + CVE-2022-3606: (unk) CVE-2022-3619: (unk) Bluetooth: L2CAP: Fix memory leak in vhci_write CVE-2022-3624: (unk) bonding: fix reference count leak in balance-alb mode CVE-2022-3628: (unk) wifi: brcmfmac: Fix potential buffer overflow in brcmf_fweh_event_worker() @@ -262,6 +264,7 @@ CVE-2023-2002: (unk) bluetooth: Perform careful capability checks in hci_sock_ioctl() CVE-2023-2006: (unk) rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975] CVE-2023-2007: (unk) scsi: dpt_i2o: Remove obsolete driver + CVE-2023-20593: (unk) x86/cpu/amd: Add a Zenbleed fix CVE-2023-20928: (unk) android: binder: stop saving a pointer to the VMA CVE-2023-20941: (unk) CVE-2023-21102: (unk) efi: rt-wrapper: Add missing include @@ -309,6 +312,7 @@ CVE-2023-31084: (unk) media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() CVE-2023-31085: (unk) CVE-2023-3111: (unk) btrfs: unset reloc control if transaction commit fails in prepare_to_relocate() + CVE-2023-3117: (unk) netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE CVE-2023-31248: (unk) netfilter: nf_tables: do not ignore genmask when looking up chain by id CVE-2023-3141: (unk) memstick: r592: Fix UAF bug in r592_remove due to race condition CVE-2023-31436: (unk) net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg @@ -341,7 +345,6 @@ CVE-2023-34256: (unk) ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum CVE-2023-35001: (unk) netfilter: nf_tables: prevent OOB access in nft_byteorder_eval CVE-2023-3567: (unk) vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF - CVE-2023-35693: (unk) CVE-2023-35788: (unk) net/sched: flower: fix possible OOB write in fl_set_geneve_opt() CVE-2023-35823: (unk) media: saa7134: fix use after free bug in saa7134_finidev due to race condition CVE-2023-35824: (unk) media: dm1105: Fix use after free bug in dm1105_remove due to race condition @@ -349,9 +352,16 @@ CVE-2023-35827: (unk) CVE-2023-35828: (unk) usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition CVE-2023-35829: (unk) media: rkvdec: fix use after free bug in rkvdec_remove + CVE-2023-3609: (unk) net/sched: cls_u32: Fix reference counter leak leading to overflow + CVE-2023-3610: (unk) netfilter: nf_tables: fix chain binding transaction logic + CVE-2023-3611: (unk) net/sched: sch_qfq: account for stab overhead in qfq_enqueue CVE-2023-3640: (unk) CVE-2023-37453: (unk) CVE-2023-37454: (unk) + CVE-2023-3772: (unk) + CVE-2023-3773: (unk) + CVE-2023-3776: (unk) net/sched: cls_fw: Fix improper refcount update leads to use-after-free + CVE-2023-3812: (unk) net: tun: fix bugs for oversize packet when napi frags enabled CVE-2023-38409: (unk) fbcon: set_con2fb_map needs to set con2fb_map! CVE-2023-38426: (unk) ksmbd: fix global-out-of-bounds in smb2_find_context_vals CVE-2023-38427: (unk) ksmbd: fix out-of-bound read in deassemble_neg_contexts() @@ -360,3 +370,4 @@ CVE-2023-38430: (unk) ksmbd: validate smb request protocol id CVE-2023-38431: (unk) ksmbd: check the validation of pdu_size in ksmbd_conn_handler_loop CVE-2023-38432: (unk) ksmbd: validate command payload size + CVE-2023-3863: (unk) net: nfc: Fix use-after-free caused by nfc_llcp_find_local
diff --git a/data/5.2/5.2_CVEs.txt b/data/5.2/5.2_CVEs.txt index 41946db..3ca568e 100644 --- a/data/5.2/5.2_CVEs.txt +++ b/data/5.2/5.2_CVEs.txt
@@ -654,6 +654,7 @@ CVE-2022-3522: Fix not seen in stream CVE-2022-3523: Fix not seen in stream CVE-2022-3524: Fix not seen in stream +CVE-2022-3533: Fix unknown CVE-2022-3534: Fix not seen in stream CVE-2022-3535: Fix not seen in stream CVE-2022-3542: Fix not seen in stream @@ -666,6 +667,7 @@ CVE-2022-3586: Fix not seen in stream CVE-2022-3594: Fix not seen in stream CVE-2022-3595: Fix not seen in stream +CVE-2022-3606: Fix unknown CVE-2022-36123: Fix not seen in stream CVE-2022-3621: Fix not seen in stream CVE-2022-3623: Fix not seen in stream @@ -726,7 +728,6 @@ CVE-2022-47520: Fix not seen in stream CVE-2022-47929: Fix not seen in stream CVE-2022-47946: Fix not seen in stream -CVE-2022-48502: Fix not seen in stream CVE-2023-0045: Fix not seen in stream CVE-2023-0047: Fix not seen in stream CVE-2023-0160: Fix unknown @@ -769,6 +770,7 @@ CVE-2023-2002: Fix not seen in stream CVE-2023-2007: Fix not seen in stream CVE-2023-2008: Fix not seen in stream +CVE-2023-20593: Fix not seen in stream CVE-2023-20928: Fix not seen in stream CVE-2023-20941: Fix unknown CVE-2023-2124: Fix not seen in stream @@ -806,6 +808,7 @@ CVE-2023-31084: Fix not seen in stream CVE-2023-31085: Fix unknown CVE-2023-3111: Fix not seen in stream +CVE-2023-3117: Fix not seen in stream CVE-2023-3141: Fix not seen in stream CVE-2023-31436: Fix not seen in stream CVE-2023-3159: Fix not seen in stream @@ -813,13 +816,6 @@ CVE-2023-3212: Fix not seen in stream CVE-2023-3220: Fix not seen in stream CVE-2023-32233: Fix not seen in stream -CVE-2023-32247: Fix not seen in stream -CVE-2023-32248: Fix not seen in stream -CVE-2023-32250: Fix not seen in stream -CVE-2023-32252: Fix not seen in stream -CVE-2023-32254: Fix not seen in stream -CVE-2023-32257: Fix not seen in stream -CVE-2023-32258: Fix not seen in stream CVE-2023-32269: Fix not seen in stream CVE-2023-3268: Fix not seen in stream CVE-2023-33203: Fix not seen in stream @@ -833,19 +829,18 @@ CVE-2023-34256: Fix not seen in stream CVE-2023-35001: Fix not seen in stream CVE-2023-3567: Fix not seen in stream -CVE-2023-35693: Fix unknown CVE-2023-35788: Fix not seen in stream CVE-2023-35823: Fix not seen in stream CVE-2023-35824: Fix not seen in stream CVE-2023-35827: Fix unknown CVE-2023-35828: Fix not seen in stream +CVE-2023-3609: Fix not seen in stream +CVE-2023-3611: Fix not seen in stream CVE-2023-3640: Fix unknown CVE-2023-37453: Fix unknown CVE-2023-37454: Fix unknown -CVE-2023-38426: Fix not seen in stream -CVE-2023-38427: Fix not seen in stream -CVE-2023-38428: Fix not seen in stream -CVE-2023-38429: Fix not seen in stream -CVE-2023-38430: Fix not seen in stream -CVE-2023-38431: Fix not seen in stream -CVE-2023-38432: Fix not seen in stream +CVE-2023-3772: Fix unknown +CVE-2023-3773: Fix unknown +CVE-2023-3776: Fix not seen in stream +CVE-2023-3812: Fix not seen in stream +CVE-2023-3863: Fix not seen in stream
diff --git a/data/5.2/5.2_security.txt b/data/5.2/5.2_security.txt index 3f13423..c70f1ee 100644 --- a/data/5.2/5.2_security.txt +++ b/data/5.2/5.2_security.txt
@@ -692,6 +692,7 @@ CVE-2022-3522: (unk) mm/hugetlb: use hugetlb_pte_stable in migration race check CVE-2022-3523: (unk) mm/memory.c: fix race when faulting a device private page CVE-2022-3524: (unk) tcp/udp: Fix memory leak in ipv6_renew_options(). + CVE-2022-3533: (unk) CVE-2022-3534: (unk) libbpf: Fix use-after-free in btf_dump_name_dups CVE-2022-3535: (unk) net: mvpp2: fix mvpp2 debugfs leak CVE-2022-3542: (unk) bnx2x: fix potential memory leak in bnx2x_tpa_stop() @@ -704,6 +705,7 @@ CVE-2022-3586: (unk) sch_sfb: Don't assume the skb is still around after enqueueing to child CVE-2022-3594: (unk) r8152: Rate limit overflow messages CVE-2022-3595: (unk) cifs: fix double-fault crash during ntlmssp + CVE-2022-3606: (unk) CVE-2022-36123: (unk) x86: Clear .brk area at early boot CVE-2022-3621: (unk) nilfs2: fix NULL pointer dereference at nilfs_bmap_lookup_at_level() CVE-2022-3623: (unk) mm/hugetlb: fix races when looking up a CONT-PTE/PMD size hugetlb page @@ -764,7 +766,6 @@ CVE-2022-47520: (unk) wifi: wilc1000: validate pairwise and authentication suite offsets CVE-2022-47929: (unk) net: sched: disallow noqueue for qdisc classes CVE-2022-47946: (unk) io_uring: kill sqo_dead and sqo submission halting - CVE-2022-48502: (unk) fs/ntfs3: Check fields while reading CVE-2023-0045: (unk) x86/bugs: Flush IBP in ib_prctl_set() CVE-2023-0047: (unk) mm, oom: do not trigger out_of_memory from the #PF CVE-2023-0160: (unk) @@ -807,6 +808,7 @@ CVE-2023-2002: (unk) bluetooth: Perform careful capability checks in hci_sock_ioctl() CVE-2023-2007: (unk) scsi: dpt_i2o: Remove obsolete driver CVE-2023-2008: (unk) udmabuf: add back sanity check + CVE-2023-20593: (unk) x86/cpu/amd: Add a Zenbleed fix CVE-2023-20928: (unk) android: binder: stop saving a pointer to the VMA CVE-2023-20941: (unk) CVE-2023-2124: (unk) xfs: verify buffer contents when we skip log replay @@ -844,6 +846,7 @@ CVE-2023-31084: (unk) media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() CVE-2023-31085: (unk) CVE-2023-3111: (unk) btrfs: unset reloc control if transaction commit fails in prepare_to_relocate() + CVE-2023-3117: (unk) netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE CVE-2023-3141: (unk) memstick: r592: Fix UAF bug in r592_remove due to race condition CVE-2023-31436: (unk) net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg CVE-2023-3159: (unk) firewire: fix potential uaf in outbound_phy_packet_callback() @@ -851,13 +854,6 @@ CVE-2023-3212: (unk) gfs2: Don't deref jdesc in evict CVE-2023-3220: (unk) drm/msm/dpu: Add check for pstates CVE-2023-32233: (unk) netfilter: nf_tables: deactivate anonymous set from preparation phase - CVE-2023-32247: (unk) ksmbd: destroy expired sessions - CVE-2023-32248: (unk) ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem() - CVE-2023-32250: (unk) ksmbd: fix racy issue from session setup and logoff - CVE-2023-32252: (unk) ksmbd: fix racy issue from session setup and logoff - CVE-2023-32254: (unk) ksmbd: fix racy issue under cocurrent smb2 tree disconnect - CVE-2023-32257: (unk) ksmbd: fix racy issue from session setup and logoff - CVE-2023-32258: (unk) ksmbd: fix racy issue from smb2 close and logoff with multichannel CVE-2023-32269: (unk) netrom: Fix use-after-free caused by accept on already connected socket CVE-2023-3268: (unk) relayfs: fix out-of-bounds access in relay_file_read CVE-2023-33203: (unk) net: qcom/emac: Fix use after free bug in emac_remove due to race condition @@ -871,19 +867,18 @@ CVE-2023-34256: (unk) ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum CVE-2023-35001: (unk) netfilter: nf_tables: prevent OOB access in nft_byteorder_eval CVE-2023-3567: (unk) vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF - CVE-2023-35693: (unk) CVE-2023-35788: (unk) net/sched: flower: fix possible OOB write in fl_set_geneve_opt() CVE-2023-35823: (unk) media: saa7134: fix use after free bug in saa7134_finidev due to race condition CVE-2023-35824: (unk) media: dm1105: Fix use after free bug in dm1105_remove due to race condition CVE-2023-35827: (unk) CVE-2023-35828: (unk) usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition + CVE-2023-3609: (unk) net/sched: cls_u32: Fix reference counter leak leading to overflow + CVE-2023-3611: (unk) net/sched: sch_qfq: account for stab overhead in qfq_enqueue CVE-2023-3640: (unk) CVE-2023-37453: (unk) CVE-2023-37454: (unk) - CVE-2023-38426: (unk) ksmbd: fix global-out-of-bounds in smb2_find_context_vals - CVE-2023-38427: (unk) ksmbd: fix out-of-bound read in deassemble_neg_contexts() - CVE-2023-38428: (unk) ksmbd: fix wrong UserName check in session_user - CVE-2023-38429: (unk) ksmbd: allocate one more byte for implied bcc[0] - CVE-2023-38430: (unk) ksmbd: validate smb request protocol id - CVE-2023-38431: (unk) ksmbd: check the validation of pdu_size in ksmbd_conn_handler_loop - CVE-2023-38432: (unk) ksmbd: validate command payload size + CVE-2023-3772: (unk) + CVE-2023-3773: (unk) + CVE-2023-3776: (unk) net/sched: cls_fw: Fix improper refcount update leads to use-after-free + CVE-2023-3812: (unk) net: tun: fix bugs for oversize packet when napi frags enabled + CVE-2023-3863: (unk) net: nfc: Fix use-after-free caused by nfc_llcp_find_local
diff --git a/data/5.3/5.3_CVEs.txt b/data/5.3/5.3_CVEs.txt index 6c79401..038809c 100644 --- a/data/5.3/5.3_CVEs.txt +++ b/data/5.3/5.3_CVEs.txt
@@ -626,6 +626,7 @@ CVE-2022-3522: Fix not seen in stream CVE-2022-3523: Fix not seen in stream CVE-2022-3524: Fix not seen in stream +CVE-2022-3533: Fix unknown CVE-2022-3534: Fix not seen in stream CVE-2022-3535: Fix not seen in stream CVE-2022-3542: Fix not seen in stream @@ -638,6 +639,7 @@ CVE-2022-3586: Fix not seen in stream CVE-2022-3594: Fix not seen in stream CVE-2022-3595: Fix not seen in stream +CVE-2022-3606: Fix unknown CVE-2022-36123: Fix not seen in stream CVE-2022-3621: Fix not seen in stream CVE-2022-3623: Fix not seen in stream @@ -699,7 +701,6 @@ CVE-2022-47520: Fix not seen in stream CVE-2022-47929: Fix not seen in stream CVE-2022-47946: Fix not seen in stream -CVE-2022-48502: Fix not seen in stream CVE-2023-0045: Fix not seen in stream CVE-2023-0047: Fix not seen in stream CVE-2023-0160: Fix unknown @@ -742,6 +743,7 @@ CVE-2023-2002: Fix not seen in stream CVE-2023-2007: Fix not seen in stream CVE-2023-2008: Fix not seen in stream +CVE-2023-20593: Fix not seen in stream CVE-2023-20928: Fix not seen in stream CVE-2023-20941: Fix unknown CVE-2023-2124: Fix not seen in stream @@ -781,6 +783,7 @@ CVE-2023-31084: Fix not seen in stream CVE-2023-31085: Fix unknown CVE-2023-3111: Fix not seen in stream +CVE-2023-3117: Fix not seen in stream CVE-2023-3141: Fix not seen in stream CVE-2023-31436: Fix not seen in stream CVE-2023-3159: Fix not seen in stream @@ -788,13 +791,6 @@ CVE-2023-3212: Fix not seen in stream CVE-2023-3220: Fix not seen in stream CVE-2023-32233: Fix not seen in stream -CVE-2023-32247: Fix not seen in stream -CVE-2023-32248: Fix not seen in stream -CVE-2023-32250: Fix not seen in stream -CVE-2023-32252: Fix not seen in stream -CVE-2023-32254: Fix not seen in stream -CVE-2023-32257: Fix not seen in stream -CVE-2023-32258: Fix not seen in stream CVE-2023-32269: Fix not seen in stream CVE-2023-3268: Fix not seen in stream CVE-2023-33203: Fix not seen in stream @@ -808,19 +804,18 @@ CVE-2023-34256: Fix not seen in stream CVE-2023-35001: Fix not seen in stream CVE-2023-3567: Fix not seen in stream -CVE-2023-35693: Fix unknown CVE-2023-35788: Fix not seen in stream CVE-2023-35823: Fix not seen in stream CVE-2023-35824: Fix not seen in stream CVE-2023-35827: Fix unknown CVE-2023-35828: Fix not seen in stream +CVE-2023-3609: Fix not seen in stream +CVE-2023-3611: Fix not seen in stream CVE-2023-3640: Fix unknown CVE-2023-37453: Fix unknown CVE-2023-37454: Fix unknown -CVE-2023-38426: Fix not seen in stream -CVE-2023-38427: Fix not seen in stream -CVE-2023-38428: Fix not seen in stream -CVE-2023-38429: Fix not seen in stream -CVE-2023-38430: Fix not seen in stream -CVE-2023-38431: Fix not seen in stream -CVE-2023-38432: Fix not seen in stream +CVE-2023-3772: Fix unknown +CVE-2023-3773: Fix unknown +CVE-2023-3776: Fix not seen in stream +CVE-2023-3812: Fix not seen in stream +CVE-2023-3863: Fix not seen in stream
diff --git a/data/5.3/5.3_security.txt b/data/5.3/5.3_security.txt index fdb245f..cf6a18a 100644 --- a/data/5.3/5.3_security.txt +++ b/data/5.3/5.3_security.txt
@@ -662,6 +662,7 @@ CVE-2022-3522: (unk) mm/hugetlb: use hugetlb_pte_stable in migration race check CVE-2022-3523: (unk) mm/memory.c: fix race when faulting a device private page CVE-2022-3524: (unk) tcp/udp: Fix memory leak in ipv6_renew_options(). + CVE-2022-3533: (unk) CVE-2022-3534: (unk) libbpf: Fix use-after-free in btf_dump_name_dups CVE-2022-3535: (unk) net: mvpp2: fix mvpp2 debugfs leak CVE-2022-3542: (unk) bnx2x: fix potential memory leak in bnx2x_tpa_stop() @@ -674,6 +675,7 @@ CVE-2022-3586: (unk) sch_sfb: Don't assume the skb is still around after enqueueing to child CVE-2022-3594: (unk) r8152: Rate limit overflow messages CVE-2022-3595: (unk) cifs: fix double-fault crash during ntlmssp + CVE-2022-3606: (unk) CVE-2022-36123: (unk) x86: Clear .brk area at early boot CVE-2022-3621: (unk) nilfs2: fix NULL pointer dereference at nilfs_bmap_lookup_at_level() CVE-2022-3623: (unk) mm/hugetlb: fix races when looking up a CONT-PTE/PMD size hugetlb page @@ -735,7 +737,6 @@ CVE-2022-47520: (unk) wifi: wilc1000: validate pairwise and authentication suite offsets CVE-2022-47929: (unk) net: sched: disallow noqueue for qdisc classes CVE-2022-47946: (unk) io_uring: kill sqo_dead and sqo submission halting - CVE-2022-48502: (unk) fs/ntfs3: Check fields while reading CVE-2023-0045: (unk) x86/bugs: Flush IBP in ib_prctl_set() CVE-2023-0047: (unk) mm, oom: do not trigger out_of_memory from the #PF CVE-2023-0160: (unk) @@ -778,6 +779,7 @@ CVE-2023-2002: (unk) bluetooth: Perform careful capability checks in hci_sock_ioctl() CVE-2023-2007: (unk) scsi: dpt_i2o: Remove obsolete driver CVE-2023-2008: (unk) udmabuf: add back sanity check + CVE-2023-20593: (unk) x86/cpu/amd: Add a Zenbleed fix CVE-2023-20928: (unk) android: binder: stop saving a pointer to the VMA CVE-2023-20941: (unk) CVE-2023-2124: (unk) xfs: verify buffer contents when we skip log replay @@ -817,6 +819,7 @@ CVE-2023-31084: (unk) media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() CVE-2023-31085: (unk) CVE-2023-3111: (unk) btrfs: unset reloc control if transaction commit fails in prepare_to_relocate() + CVE-2023-3117: (unk) netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE CVE-2023-3141: (unk) memstick: r592: Fix UAF bug in r592_remove due to race condition CVE-2023-31436: (unk) net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg CVE-2023-3159: (unk) firewire: fix potential uaf in outbound_phy_packet_callback() @@ -824,13 +827,6 @@ CVE-2023-3212: (unk) gfs2: Don't deref jdesc in evict CVE-2023-3220: (unk) drm/msm/dpu: Add check for pstates CVE-2023-32233: (unk) netfilter: nf_tables: deactivate anonymous set from preparation phase - CVE-2023-32247: (unk) ksmbd: destroy expired sessions - CVE-2023-32248: (unk) ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem() - CVE-2023-32250: (unk) ksmbd: fix racy issue from session setup and logoff - CVE-2023-32252: (unk) ksmbd: fix racy issue from session setup and logoff - CVE-2023-32254: (unk) ksmbd: fix racy issue under cocurrent smb2 tree disconnect - CVE-2023-32257: (unk) ksmbd: fix racy issue from session setup and logoff - CVE-2023-32258: (unk) ksmbd: fix racy issue from smb2 close and logoff with multichannel CVE-2023-32269: (unk) netrom: Fix use-after-free caused by accept on already connected socket CVE-2023-3268: (unk) relayfs: fix out-of-bounds access in relay_file_read CVE-2023-33203: (unk) net: qcom/emac: Fix use after free bug in emac_remove due to race condition @@ -844,19 +840,18 @@ CVE-2023-34256: (unk) ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum CVE-2023-35001: (unk) netfilter: nf_tables: prevent OOB access in nft_byteorder_eval CVE-2023-3567: (unk) vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF - CVE-2023-35693: (unk) CVE-2023-35788: (unk) net/sched: flower: fix possible OOB write in fl_set_geneve_opt() CVE-2023-35823: (unk) media: saa7134: fix use after free bug in saa7134_finidev due to race condition CVE-2023-35824: (unk) media: dm1105: Fix use after free bug in dm1105_remove due to race condition CVE-2023-35827: (unk) CVE-2023-35828: (unk) usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition + CVE-2023-3609: (unk) net/sched: cls_u32: Fix reference counter leak leading to overflow + CVE-2023-3611: (unk) net/sched: sch_qfq: account for stab overhead in qfq_enqueue CVE-2023-3640: (unk) CVE-2023-37453: (unk) CVE-2023-37454: (unk) - CVE-2023-38426: (unk) ksmbd: fix global-out-of-bounds in smb2_find_context_vals - CVE-2023-38427: (unk) ksmbd: fix out-of-bound read in deassemble_neg_contexts() - CVE-2023-38428: (unk) ksmbd: fix wrong UserName check in session_user - CVE-2023-38429: (unk) ksmbd: allocate one more byte for implied bcc[0] - CVE-2023-38430: (unk) ksmbd: validate smb request protocol id - CVE-2023-38431: (unk) ksmbd: check the validation of pdu_size in ksmbd_conn_handler_loop - CVE-2023-38432: (unk) ksmbd: validate command payload size + CVE-2023-3772: (unk) + CVE-2023-3773: (unk) + CVE-2023-3776: (unk) net/sched: cls_fw: Fix improper refcount update leads to use-after-free + CVE-2023-3812: (unk) net: tun: fix bugs for oversize packet when napi frags enabled + CVE-2023-3863: (unk) net: nfc: Fix use-after-free caused by nfc_llcp_find_local
diff --git a/data/5.4/5.4_CVEs.txt b/data/5.4/5.4_CVEs.txt index 623d96d..12a0347 100644 --- a/data/5.4/5.4_CVEs.txt +++ b/data/5.4/5.4_CVEs.txt
@@ -554,6 +554,7 @@ CVE-2022-3522: Fix not seen in stream CVE-2022-3523: Fix not seen in stream CVE-2022-3524: Fixed with 5.4.224 +CVE-2022-3533: Fix unknown CVE-2022-3534: Fix not seen in stream CVE-2022-3535: Fixed with 5.4.220 CVE-2022-3542: Fixed with 5.4.220 @@ -566,6 +567,7 @@ CVE-2022-3586: Fixed with 5.4.213 CVE-2022-3594: Fixed with 5.4.220 CVE-2022-3595: Fix not seen in stream +CVE-2022-3606: Fix unknown CVE-2022-36123: Fixed with 5.4.207 CVE-2022-3621: Fixed with 5.4.218 CVE-2022-3623: Fixed with 5.4.228 @@ -628,7 +630,6 @@ CVE-2022-47520: Fix not seen in stream CVE-2022-47929: Fixed with 5.4.229 CVE-2022-47946: Fix not seen in stream -CVE-2022-48502: Fix not seen in stream CVE-2023-0045: Fixed with 5.4.229 CVE-2023-0047: Fixed with 5.4.160 CVE-2023-0160: Fix unknown @@ -671,6 +672,7 @@ CVE-2023-2002: Fixed with 5.4.243 CVE-2023-2007: Fix not seen in stream CVE-2023-2008: Fixed with 5.4.202 +CVE-2023-20593: Fixed with 5.4.250 CVE-2023-20928: Fix not seen in stream CVE-2023-20941: Fix unknown CVE-2023-2124: Fixed with 5.4.249 @@ -711,20 +713,14 @@ CVE-2023-31084: Fix not seen in stream CVE-2023-31085: Fix unknown CVE-2023-3111: Fixed with 5.4.247 +CVE-2023-3117: Fixed with 5.4.251 CVE-2023-3141: Fixed with 5.4.244 CVE-2023-31436: Fixed with 5.4.242 CVE-2023-3159: Fixed with 5.4.193 CVE-2023-3161: Fixed with 5.4.232 -CVE-2023-3212: Fix not seen in stream +CVE-2023-3212: Fixed with 5.4.251 CVE-2023-3220: Fixed with 5.4.235 CVE-2023-32233: Fixed with 5.4.243 -CVE-2023-32247: Fix not seen in stream -CVE-2023-32248: Fix not seen in stream -CVE-2023-32250: Fix not seen in stream -CVE-2023-32252: Fix not seen in stream -CVE-2023-32254: Fix not seen in stream -CVE-2023-32257: Fix not seen in stream -CVE-2023-32258: Fix not seen in stream CVE-2023-32269: Fixed with 5.4.232 CVE-2023-3268: Fixed with 5.4.243 CVE-2023-33203: Fixed with 5.4.240 @@ -732,25 +728,24 @@ CVE-2023-3338: Fixed with 5.4.248 CVE-2023-3358: Fixed with 5.4.231 CVE-2023-3389: Fix not seen in stream -CVE-2023-3390: Fix not seen in stream +CVE-2023-3390: Fixed with 5.4.251 CVE-2023-3397: Fix unknown CVE-2023-34255: Fixed with 5.4.249 CVE-2023-34256: Fixed with 5.4.243 -CVE-2023-35001: Fix not seen in stream +CVE-2023-35001: Fixed with 5.4.251 CVE-2023-3567: Fixed with 5.4.232 -CVE-2023-35693: Fix unknown CVE-2023-35788: Fixed with 5.4.246 CVE-2023-35823: Fixed with 5.4.243 CVE-2023-35824: Fixed with 5.4.243 CVE-2023-35827: Fix unknown CVE-2023-35828: Fixed with 5.4.243 +CVE-2023-3609: Fixed with 5.4.248 +CVE-2023-3611: Fix not seen in stream CVE-2023-3640: Fix unknown CVE-2023-37453: Fix unknown CVE-2023-37454: Fix unknown -CVE-2023-38426: Fix not seen in stream -CVE-2023-38427: Fix not seen in stream -CVE-2023-38428: Fix not seen in stream -CVE-2023-38429: Fix not seen in stream -CVE-2023-38430: Fix not seen in stream -CVE-2023-38431: Fix not seen in stream -CVE-2023-38432: Fix not seen in stream +CVE-2023-3772: Fix unknown +CVE-2023-3773: Fix unknown +CVE-2023-3776: Fixed with 5.4.251 +CVE-2023-3812: Fixed with 5.4.224 +CVE-2023-3863: Fixed with 5.4.251
diff --git a/data/5.4/5.4_security.txt b/data/5.4/5.4_security.txt index 5d808bd..4d06c63 100644 --- a/data/5.4/5.4_security.txt +++ b/data/5.4/5.4_security.txt
@@ -826,6 +826,7 @@ CVE-2022-3564: 4cd094fd5d872862ca278e15b9b51b07e915ef3f Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu CVE-2022-3628: a16415c8f156bec5399ef0345715ee4b90e5bb83 wifi: brcmfmac: Fix potential buffer overflow in brcmf_fweh_event_worker() CVE-2022-42895: 6949400ec9feca7f88c0f6ca5cb5fdbcef419c89 Bluetooth: L2CAP: Fix attempting to access uninitialized memory + CVE-2023-3812: ca791952d42c5b40d548ff6c4a879216039b0ca1 net: tun: fix bugs for oversize packet when napi frags enabled CVEs fixed in 5.4.225: CVE-2022-3521: ad39d09190a545d0f05ae0a82900eee96c5facea kcm: avoid potential race in kcm_tx_work @@ -942,11 +943,23 @@ CVEs fixed in 5.4.248: CVE-2023-3338: 6b1203ae83c3d07bad90b6f38ebf2e4d5998dd28 Remove DECnet support from kernel + CVE-2023-3609: 46305daf8064598a4008af1728651296815a74ed net/sched: cls_u32: Fix reference counter leak leading to overflow CVEs fixed in 5.4.249: CVE-2023-2124: c87439055174b31c51a89f8d66af2600033c664d xfs: verify buffer contents when we skip log replay CVE-2023-34255: c87439055174b31c51a89f8d66af2600033c664d xfs: verify buffer contents when we skip log replay +CVEs fixed in 5.4.250: + CVE-2023-20593: 00363ef30797211c247605464dc3daaa988531a2 x86/cpu/amd: Add a Zenbleed fix + +CVEs fixed in 5.4.251: + CVE-2023-3117: 1adb5c272b200c24e9a7dd3bff891ce6eb75b019 netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE + CVE-2023-3212: 23f98fe887ce3e7c8bd111f37e62735c5018c534 gfs2: Don't deref jdesc in evict + CVE-2023-3390: 1adb5c272b200c24e9a7dd3bff891ce6eb75b019 netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE + CVE-2023-35001: b7d636c924eb275651bfb036eb8eca49c3f7bc24 netfilter: nf_tables: prevent OOB access in nft_byteorder_eval + CVE-2023-3776: 808211a8d427404331e39e3b8c94ab5242eef8f5 net/sched: cls_fw: Fix improper refcount update leads to use-after-free + CVE-2023-3863: dd6ff3f3862709ab1a12566e73b9d6a9b8f6e548 net: nfc: Fix use-after-free caused by nfc_llcp_find_local + Outstanding CVEs: CVE-2005-3660: (unk) CVE-2007-3719: (unk) @@ -1054,10 +1067,12 @@ CVE-2022-3344: (unk) KVM: x86: nSVM: harden svm_free_nested against freeing vmcb02 while still in use CVE-2022-3522: (unk) mm/hugetlb: use hugetlb_pte_stable in migration race check CVE-2022-3523: (unk) mm/memory.c: fix race when faulting a device private page + CVE-2022-3533: (unk) CVE-2022-3534: (unk) libbpf: Fix use-after-free in btf_dump_name_dups CVE-2022-3566: (unk) tcp: Fix data races around icsk->icsk_af_ops. CVE-2022-3567: (unk) ipv6: Fix data races around sk->sk_prot. CVE-2022-3595: (unk) cifs: fix double-fault crash during ntlmssp + CVE-2022-3606: (unk) CVE-2022-3624: (unk) bonding: fix reference count leak in balance-alb mode CVE-2022-3636: (unk) net: ethernet: mtk_eth_soc: use after free in __mtk_ppe_check_skb() CVE-2022-36402: (unk) @@ -1080,7 +1095,6 @@ CVE-2022-45919: (unk) CVE-2022-47520: (unk) wifi: wilc1000: validate pairwise and authentication suite offsets CVE-2022-47946: (unk) io_uring: kill sqo_dead and sqo submission halting - CVE-2022-48502: (unk) fs/ntfs3: Check fields while reading CVE-2023-0160: (unk) CVE-2023-0240: (unk) io_uring: COW io_identity on mismatch CVE-2023-0386: (unk) ovl: fail on invalid uid/gid mapping at copy up @@ -1107,28 +1121,13 @@ CVE-2023-31083: (unk) CVE-2023-31084: (unk) media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() CVE-2023-31085: (unk) - CVE-2023-3212: (unk) gfs2: Don't deref jdesc in evict - CVE-2023-32247: (unk) ksmbd: destroy expired sessions - CVE-2023-32248: (unk) ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem() - CVE-2023-32250: (unk) ksmbd: fix racy issue from session setup and logoff - CVE-2023-32252: (unk) ksmbd: fix racy issue from session setup and logoff - CVE-2023-32254: (unk) ksmbd: fix racy issue under cocurrent smb2 tree disconnect - CVE-2023-32257: (unk) ksmbd: fix racy issue from session setup and logoff - CVE-2023-32258: (unk) ksmbd: fix racy issue from smb2 close and logoff with multichannel CVE-2023-33288: (unk) power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition CVE-2023-3389: (unk) io_uring: mutex locked poll hashing - CVE-2023-3390: (unk) netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE CVE-2023-3397: (unk) - CVE-2023-35001: (unk) netfilter: nf_tables: prevent OOB access in nft_byteorder_eval - CVE-2023-35693: (unk) CVE-2023-35827: (unk) + CVE-2023-3611: (unk) net/sched: sch_qfq: account for stab overhead in qfq_enqueue CVE-2023-3640: (unk) CVE-2023-37453: (unk) CVE-2023-37454: (unk) - CVE-2023-38426: (unk) ksmbd: fix global-out-of-bounds in smb2_find_context_vals - CVE-2023-38427: (unk) ksmbd: fix out-of-bound read in deassemble_neg_contexts() - CVE-2023-38428: (unk) ksmbd: fix wrong UserName check in session_user - CVE-2023-38429: (unk) ksmbd: allocate one more byte for implied bcc[0] - CVE-2023-38430: (unk) ksmbd: validate smb request protocol id - CVE-2023-38431: (unk) ksmbd: check the validation of pdu_size in ksmbd_conn_handler_loop - CVE-2023-38432: (unk) ksmbd: validate command payload size + CVE-2023-3772: (unk) + CVE-2023-3773: (unk)
diff --git a/data/5.5/5.5_CVEs.txt b/data/5.5/5.5_CVEs.txt index 04bd1b1..68822b0 100644 --- a/data/5.5/5.5_CVEs.txt +++ b/data/5.5/5.5_CVEs.txt
@@ -514,6 +514,7 @@ CVE-2022-3522: Fix not seen in stream CVE-2022-3523: Fix not seen in stream CVE-2022-3524: Fix not seen in stream +CVE-2022-3533: Fix unknown CVE-2022-3534: Fix not seen in stream CVE-2022-3535: Fix not seen in stream CVE-2022-3542: Fix not seen in stream @@ -526,6 +527,7 @@ CVE-2022-3586: Fix not seen in stream CVE-2022-3594: Fix not seen in stream CVE-2022-3595: Fix not seen in stream +CVE-2022-3606: Fix unknown CVE-2022-36123: Fix not seen in stream CVE-2022-3621: Fix not seen in stream CVE-2022-3623: Fix not seen in stream @@ -588,7 +590,6 @@ CVE-2022-47520: Fix not seen in stream CVE-2022-47929: Fix not seen in stream CVE-2022-47946: Fix not seen in stream -CVE-2022-48502: Fix not seen in stream CVE-2023-0045: Fix not seen in stream CVE-2023-0047: Fix not seen in stream CVE-2023-0160: Fix unknown @@ -632,6 +633,7 @@ CVE-2023-2002: Fix not seen in stream CVE-2023-2007: Fix not seen in stream CVE-2023-2008: Fix not seen in stream +CVE-2023-20593: Fix not seen in stream CVE-2023-20928: Fix not seen in stream CVE-2023-20941: Fix unknown CVE-2023-2124: Fix not seen in stream @@ -672,6 +674,7 @@ CVE-2023-31084: Fix not seen in stream CVE-2023-31085: Fix unknown CVE-2023-3111: Fix not seen in stream +CVE-2023-3117: Fix not seen in stream CVE-2023-3141: Fix not seen in stream CVE-2023-31436: Fix not seen in stream CVE-2023-3159: Fix not seen in stream @@ -679,13 +682,6 @@ CVE-2023-3212: Fix not seen in stream CVE-2023-3220: Fix not seen in stream CVE-2023-32233: Fix not seen in stream -CVE-2023-32247: Fix not seen in stream -CVE-2023-32248: Fix not seen in stream -CVE-2023-32250: Fix not seen in stream -CVE-2023-32252: Fix not seen in stream -CVE-2023-32254: Fix not seen in stream -CVE-2023-32257: Fix not seen in stream -CVE-2023-32258: Fix not seen in stream CVE-2023-32269: Fix not seen in stream CVE-2023-3268: Fix not seen in stream CVE-2023-33203: Fix not seen in stream @@ -699,19 +695,18 @@ CVE-2023-34256: Fix not seen in stream CVE-2023-35001: Fix not seen in stream CVE-2023-3567: Fix not seen in stream -CVE-2023-35693: Fix unknown CVE-2023-35788: Fix not seen in stream CVE-2023-35823: Fix not seen in stream CVE-2023-35824: Fix not seen in stream CVE-2023-35827: Fix unknown CVE-2023-35828: Fix not seen in stream +CVE-2023-3609: Fix not seen in stream +CVE-2023-3611: Fix not seen in stream CVE-2023-3640: Fix unknown CVE-2023-37453: Fix unknown CVE-2023-37454: Fix unknown -CVE-2023-38426: Fix not seen in stream -CVE-2023-38427: Fix not seen in stream -CVE-2023-38428: Fix not seen in stream -CVE-2023-38429: Fix not seen in stream -CVE-2023-38430: Fix not seen in stream -CVE-2023-38431: Fix not seen in stream -CVE-2023-38432: Fix not seen in stream +CVE-2023-3772: Fix unknown +CVE-2023-3773: Fix unknown +CVE-2023-3776: Fix not seen in stream +CVE-2023-3812: Fix not seen in stream +CVE-2023-3863: Fix not seen in stream
diff --git a/data/5.5/5.5_security.txt b/data/5.5/5.5_security.txt index 5cbff39..d1440bd 100644 --- a/data/5.5/5.5_security.txt +++ b/data/5.5/5.5_security.txt
@@ -548,6 +548,7 @@ CVE-2022-3522: (unk) mm/hugetlb: use hugetlb_pte_stable in migration race check CVE-2022-3523: (unk) mm/memory.c: fix race when faulting a device private page CVE-2022-3524: (unk) tcp/udp: Fix memory leak in ipv6_renew_options(). + CVE-2022-3533: (unk) CVE-2022-3534: (unk) libbpf: Fix use-after-free in btf_dump_name_dups CVE-2022-3535: (unk) net: mvpp2: fix mvpp2 debugfs leak CVE-2022-3542: (unk) bnx2x: fix potential memory leak in bnx2x_tpa_stop() @@ -560,6 +561,7 @@ CVE-2022-3586: (unk) sch_sfb: Don't assume the skb is still around after enqueueing to child CVE-2022-3594: (unk) r8152: Rate limit overflow messages CVE-2022-3595: (unk) cifs: fix double-fault crash during ntlmssp + CVE-2022-3606: (unk) CVE-2022-36123: (unk) x86: Clear .brk area at early boot CVE-2022-3621: (unk) nilfs2: fix NULL pointer dereference at nilfs_bmap_lookup_at_level() CVE-2022-3623: (unk) mm/hugetlb: fix races when looking up a CONT-PTE/PMD size hugetlb page @@ -622,7 +624,6 @@ CVE-2022-47520: (unk) wifi: wilc1000: validate pairwise and authentication suite offsets CVE-2022-47929: (unk) net: sched: disallow noqueue for qdisc classes CVE-2022-47946: (unk) io_uring: kill sqo_dead and sqo submission halting - CVE-2022-48502: (unk) fs/ntfs3: Check fields while reading CVE-2023-0045: (unk) x86/bugs: Flush IBP in ib_prctl_set() CVE-2023-0047: (unk) mm, oom: do not trigger out_of_memory from the #PF CVE-2023-0160: (unk) @@ -666,6 +667,7 @@ CVE-2023-2002: (unk) bluetooth: Perform careful capability checks in hci_sock_ioctl() CVE-2023-2007: (unk) scsi: dpt_i2o: Remove obsolete driver CVE-2023-2008: (unk) udmabuf: add back sanity check + CVE-2023-20593: (unk) x86/cpu/amd: Add a Zenbleed fix CVE-2023-20928: (unk) android: binder: stop saving a pointer to the VMA CVE-2023-20941: (unk) CVE-2023-2124: (unk) xfs: verify buffer contents when we skip log replay @@ -706,6 +708,7 @@ CVE-2023-31084: (unk) media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() CVE-2023-31085: (unk) CVE-2023-3111: (unk) btrfs: unset reloc control if transaction commit fails in prepare_to_relocate() + CVE-2023-3117: (unk) netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE CVE-2023-3141: (unk) memstick: r592: Fix UAF bug in r592_remove due to race condition CVE-2023-31436: (unk) net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg CVE-2023-3159: (unk) firewire: fix potential uaf in outbound_phy_packet_callback() @@ -713,13 +716,6 @@ CVE-2023-3212: (unk) gfs2: Don't deref jdesc in evict CVE-2023-3220: (unk) drm/msm/dpu: Add check for pstates CVE-2023-32233: (unk) netfilter: nf_tables: deactivate anonymous set from preparation phase - CVE-2023-32247: (unk) ksmbd: destroy expired sessions - CVE-2023-32248: (unk) ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem() - CVE-2023-32250: (unk) ksmbd: fix racy issue from session setup and logoff - CVE-2023-32252: (unk) ksmbd: fix racy issue from session setup and logoff - CVE-2023-32254: (unk) ksmbd: fix racy issue under cocurrent smb2 tree disconnect - CVE-2023-32257: (unk) ksmbd: fix racy issue from session setup and logoff - CVE-2023-32258: (unk) ksmbd: fix racy issue from smb2 close and logoff with multichannel CVE-2023-32269: (unk) netrom: Fix use-after-free caused by accept on already connected socket CVE-2023-3268: (unk) relayfs: fix out-of-bounds access in relay_file_read CVE-2023-33203: (unk) net: qcom/emac: Fix use after free bug in emac_remove due to race condition @@ -733,19 +729,18 @@ CVE-2023-34256: (unk) ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum CVE-2023-35001: (unk) netfilter: nf_tables: prevent OOB access in nft_byteorder_eval CVE-2023-3567: (unk) vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF - CVE-2023-35693: (unk) CVE-2023-35788: (unk) net/sched: flower: fix possible OOB write in fl_set_geneve_opt() CVE-2023-35823: (unk) media: saa7134: fix use after free bug in saa7134_finidev due to race condition CVE-2023-35824: (unk) media: dm1105: Fix use after free bug in dm1105_remove due to race condition CVE-2023-35827: (unk) CVE-2023-35828: (unk) usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition + CVE-2023-3609: (unk) net/sched: cls_u32: Fix reference counter leak leading to overflow + CVE-2023-3611: (unk) net/sched: sch_qfq: account for stab overhead in qfq_enqueue CVE-2023-3640: (unk) CVE-2023-37453: (unk) CVE-2023-37454: (unk) - CVE-2023-38426: (unk) ksmbd: fix global-out-of-bounds in smb2_find_context_vals - CVE-2023-38427: (unk) ksmbd: fix out-of-bound read in deassemble_neg_contexts() - CVE-2023-38428: (unk) ksmbd: fix wrong UserName check in session_user - CVE-2023-38429: (unk) ksmbd: allocate one more byte for implied bcc[0] - CVE-2023-38430: (unk) ksmbd: validate smb request protocol id - CVE-2023-38431: (unk) ksmbd: check the validation of pdu_size in ksmbd_conn_handler_loop - CVE-2023-38432: (unk) ksmbd: validate command payload size + CVE-2023-3772: (unk) + CVE-2023-3773: (unk) + CVE-2023-3776: (unk) net/sched: cls_fw: Fix improper refcount update leads to use-after-free + CVE-2023-3812: (unk) net: tun: fix bugs for oversize packet when napi frags enabled + CVE-2023-3863: (unk) net: nfc: Fix use-after-free caused by nfc_llcp_find_local
diff --git a/data/5.6/5.6_CVEs.txt b/data/5.6/5.6_CVEs.txt index 453a1e8..8b2388f 100644 --- a/data/5.6/5.6_CVEs.txt +++ b/data/5.6/5.6_CVEs.txt
@@ -489,6 +489,7 @@ CVE-2022-3522: Fix not seen in stream CVE-2022-3523: Fix not seen in stream CVE-2022-3524: Fix not seen in stream +CVE-2022-3533: Fix unknown CVE-2022-3534: Fix not seen in stream CVE-2022-3535: Fix not seen in stream CVE-2022-3542: Fix not seen in stream @@ -501,6 +502,7 @@ CVE-2022-3586: Fix not seen in stream CVE-2022-3594: Fix not seen in stream CVE-2022-3595: Fix not seen in stream +CVE-2022-3606: Fix unknown CVE-2022-36123: Fix not seen in stream CVE-2022-3621: Fix not seen in stream CVE-2022-3623: Fix not seen in stream @@ -564,7 +566,6 @@ CVE-2022-47520: Fix not seen in stream CVE-2022-47929: Fix not seen in stream CVE-2022-47946: Fix not seen in stream -CVE-2022-48502: Fix not seen in stream CVE-2023-0045: Fix not seen in stream CVE-2023-0047: Fix not seen in stream CVE-2023-0160: Fix unknown @@ -610,6 +611,7 @@ CVE-2023-2002: Fix not seen in stream CVE-2023-2007: Fix not seen in stream CVE-2023-2008: Fix not seen in stream +CVE-2023-20593: Fix not seen in stream CVE-2023-20928: Fix not seen in stream CVE-2023-20941: Fix unknown CVE-2023-2124: Fix not seen in stream @@ -651,6 +653,7 @@ CVE-2023-31084: Fix not seen in stream CVE-2023-31085: Fix unknown CVE-2023-3111: Fix not seen in stream +CVE-2023-3117: Fix not seen in stream CVE-2023-3141: Fix not seen in stream CVE-2023-31436: Fix not seen in stream CVE-2023-3159: Fix not seen in stream @@ -658,13 +661,6 @@ CVE-2023-3212: Fix not seen in stream CVE-2023-3220: Fix not seen in stream CVE-2023-32233: Fix not seen in stream -CVE-2023-32247: Fix not seen in stream -CVE-2023-32248: Fix not seen in stream -CVE-2023-32250: Fix not seen in stream -CVE-2023-32252: Fix not seen in stream -CVE-2023-32254: Fix not seen in stream -CVE-2023-32257: Fix not seen in stream -CVE-2023-32258: Fix not seen in stream CVE-2023-32269: Fix not seen in stream CVE-2023-3268: Fix not seen in stream CVE-2023-33203: Fix not seen in stream @@ -678,19 +674,18 @@ CVE-2023-34256: Fix not seen in stream CVE-2023-35001: Fix not seen in stream CVE-2023-3567: Fix not seen in stream -CVE-2023-35693: Fix unknown CVE-2023-35788: Fix not seen in stream CVE-2023-35823: Fix not seen in stream CVE-2023-35824: Fix not seen in stream CVE-2023-35827: Fix unknown CVE-2023-35828: Fix not seen in stream +CVE-2023-3609: Fix not seen in stream +CVE-2023-3611: Fix not seen in stream CVE-2023-3640: Fix unknown CVE-2023-37453: Fix unknown CVE-2023-37454: Fix unknown -CVE-2023-38426: Fix not seen in stream -CVE-2023-38427: Fix not seen in stream -CVE-2023-38428: Fix not seen in stream -CVE-2023-38429: Fix not seen in stream -CVE-2023-38430: Fix not seen in stream -CVE-2023-38431: Fix not seen in stream -CVE-2023-38432: Fix not seen in stream +CVE-2023-3772: Fix unknown +CVE-2023-3773: Fix unknown +CVE-2023-3776: Fix not seen in stream +CVE-2023-3812: Fix not seen in stream +CVE-2023-3863: Fix not seen in stream
diff --git a/data/5.6/5.6_security.txt b/data/5.6/5.6_security.txt index 15dc186..5ae4437 100644 --- a/data/5.6/5.6_security.txt +++ b/data/5.6/5.6_security.txt
@@ -523,6 +523,7 @@ CVE-2022-3522: (unk) mm/hugetlb: use hugetlb_pte_stable in migration race check CVE-2022-3523: (unk) mm/memory.c: fix race when faulting a device private page CVE-2022-3524: (unk) tcp/udp: Fix memory leak in ipv6_renew_options(). + CVE-2022-3533: (unk) CVE-2022-3534: (unk) libbpf: Fix use-after-free in btf_dump_name_dups CVE-2022-3535: (unk) net: mvpp2: fix mvpp2 debugfs leak CVE-2022-3542: (unk) bnx2x: fix potential memory leak in bnx2x_tpa_stop() @@ -535,6 +536,7 @@ CVE-2022-3586: (unk) sch_sfb: Don't assume the skb is still around after enqueueing to child CVE-2022-3594: (unk) r8152: Rate limit overflow messages CVE-2022-3595: (unk) cifs: fix double-fault crash during ntlmssp + CVE-2022-3606: (unk) CVE-2022-36123: (unk) x86: Clear .brk area at early boot CVE-2022-3621: (unk) nilfs2: fix NULL pointer dereference at nilfs_bmap_lookup_at_level() CVE-2022-3623: (unk) mm/hugetlb: fix races when looking up a CONT-PTE/PMD size hugetlb page @@ -598,7 +600,6 @@ CVE-2022-47520: (unk) wifi: wilc1000: validate pairwise and authentication suite offsets CVE-2022-47929: (unk) net: sched: disallow noqueue for qdisc classes CVE-2022-47946: (unk) io_uring: kill sqo_dead and sqo submission halting - CVE-2022-48502: (unk) fs/ntfs3: Check fields while reading CVE-2023-0045: (unk) x86/bugs: Flush IBP in ib_prctl_set() CVE-2023-0047: (unk) mm, oom: do not trigger out_of_memory from the #PF CVE-2023-0160: (unk) @@ -644,6 +645,7 @@ CVE-2023-2002: (unk) bluetooth: Perform careful capability checks in hci_sock_ioctl() CVE-2023-2007: (unk) scsi: dpt_i2o: Remove obsolete driver CVE-2023-2008: (unk) udmabuf: add back sanity check + CVE-2023-20593: (unk) x86/cpu/amd: Add a Zenbleed fix CVE-2023-20928: (unk) android: binder: stop saving a pointer to the VMA CVE-2023-20941: (unk) CVE-2023-2124: (unk) xfs: verify buffer contents when we skip log replay @@ -685,6 +687,7 @@ CVE-2023-31084: (unk) media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() CVE-2023-31085: (unk) CVE-2023-3111: (unk) btrfs: unset reloc control if transaction commit fails in prepare_to_relocate() + CVE-2023-3117: (unk) netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE CVE-2023-3141: (unk) memstick: r592: Fix UAF bug in r592_remove due to race condition CVE-2023-31436: (unk) net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg CVE-2023-3159: (unk) firewire: fix potential uaf in outbound_phy_packet_callback() @@ -692,13 +695,6 @@ CVE-2023-3212: (unk) gfs2: Don't deref jdesc in evict CVE-2023-3220: (unk) drm/msm/dpu: Add check for pstates CVE-2023-32233: (unk) netfilter: nf_tables: deactivate anonymous set from preparation phase - CVE-2023-32247: (unk) ksmbd: destroy expired sessions - CVE-2023-32248: (unk) ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem() - CVE-2023-32250: (unk) ksmbd: fix racy issue from session setup and logoff - CVE-2023-32252: (unk) ksmbd: fix racy issue from session setup and logoff - CVE-2023-32254: (unk) ksmbd: fix racy issue under cocurrent smb2 tree disconnect - CVE-2023-32257: (unk) ksmbd: fix racy issue from session setup and logoff - CVE-2023-32258: (unk) ksmbd: fix racy issue from smb2 close and logoff with multichannel CVE-2023-32269: (unk) netrom: Fix use-after-free caused by accept on already connected socket CVE-2023-3268: (unk) relayfs: fix out-of-bounds access in relay_file_read CVE-2023-33203: (unk) net: qcom/emac: Fix use after free bug in emac_remove due to race condition @@ -712,19 +708,18 @@ CVE-2023-34256: (unk) ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum CVE-2023-35001: (unk) netfilter: nf_tables: prevent OOB access in nft_byteorder_eval CVE-2023-3567: (unk) vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF - CVE-2023-35693: (unk) CVE-2023-35788: (unk) net/sched: flower: fix possible OOB write in fl_set_geneve_opt() CVE-2023-35823: (unk) media: saa7134: fix use after free bug in saa7134_finidev due to race condition CVE-2023-35824: (unk) media: dm1105: Fix use after free bug in dm1105_remove due to race condition CVE-2023-35827: (unk) CVE-2023-35828: (unk) usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition + CVE-2023-3609: (unk) net/sched: cls_u32: Fix reference counter leak leading to overflow + CVE-2023-3611: (unk) net/sched: sch_qfq: account for stab overhead in qfq_enqueue CVE-2023-3640: (unk) CVE-2023-37453: (unk) CVE-2023-37454: (unk) - CVE-2023-38426: (unk) ksmbd: fix global-out-of-bounds in smb2_find_context_vals - CVE-2023-38427: (unk) ksmbd: fix out-of-bound read in deassemble_neg_contexts() - CVE-2023-38428: (unk) ksmbd: fix wrong UserName check in session_user - CVE-2023-38429: (unk) ksmbd: allocate one more byte for implied bcc[0] - CVE-2023-38430: (unk) ksmbd: validate smb request protocol id - CVE-2023-38431: (unk) ksmbd: check the validation of pdu_size in ksmbd_conn_handler_loop - CVE-2023-38432: (unk) ksmbd: validate command payload size + CVE-2023-3772: (unk) + CVE-2023-3773: (unk) + CVE-2023-3776: (unk) net/sched: cls_fw: Fix improper refcount update leads to use-after-free + CVE-2023-3812: (unk) net: tun: fix bugs for oversize packet when napi frags enabled + CVE-2023-3863: (unk) net: nfc: Fix use-after-free caused by nfc_llcp_find_local
diff --git a/data/5.7/5.7_CVEs.txt b/data/5.7/5.7_CVEs.txt index 28e594f..3a575c1 100644 --- a/data/5.7/5.7_CVEs.txt +++ b/data/5.7/5.7_CVEs.txt
@@ -480,6 +480,7 @@ CVE-2022-3522: Fix not seen in stream CVE-2022-3523: Fix not seen in stream CVE-2022-3524: Fix not seen in stream +CVE-2022-3533: Fix unknown CVE-2022-3534: Fix not seen in stream CVE-2022-3535: Fix not seen in stream CVE-2022-3542: Fix not seen in stream @@ -492,6 +493,7 @@ CVE-2022-3586: Fix not seen in stream CVE-2022-3594: Fix not seen in stream CVE-2022-3595: Fix not seen in stream +CVE-2022-3606: Fix unknown CVE-2022-36123: Fix not seen in stream CVE-2022-3621: Fix not seen in stream CVE-2022-3623: Fix not seen in stream @@ -558,7 +560,6 @@ CVE-2022-47521: Fix not seen in stream CVE-2022-47929: Fix not seen in stream CVE-2022-47946: Fix not seen in stream -CVE-2022-48502: Fix not seen in stream CVE-2023-0045: Fix not seen in stream CVE-2023-0047: Fix not seen in stream CVE-2023-0160: Fix unknown @@ -605,6 +606,7 @@ CVE-2023-2002: Fix not seen in stream CVE-2023-2007: Fix not seen in stream CVE-2023-2008: Fix not seen in stream +CVE-2023-20593: Fix not seen in stream CVE-2023-20928: Fix not seen in stream CVE-2023-20941: Fix unknown CVE-2023-2124: Fix not seen in stream @@ -649,6 +651,7 @@ CVE-2023-31084: Fix not seen in stream CVE-2023-31085: Fix unknown CVE-2023-3111: Fix not seen in stream +CVE-2023-3117: Fix not seen in stream CVE-2023-3141: Fix not seen in stream CVE-2023-31436: Fix not seen in stream CVE-2023-3159: Fix not seen in stream @@ -656,13 +659,6 @@ CVE-2023-3212: Fix not seen in stream CVE-2023-3220: Fix not seen in stream CVE-2023-32233: Fix not seen in stream -CVE-2023-32247: Fix not seen in stream -CVE-2023-32248: Fix not seen in stream -CVE-2023-32250: Fix not seen in stream -CVE-2023-32252: Fix not seen in stream -CVE-2023-32254: Fix not seen in stream -CVE-2023-32257: Fix not seen in stream -CVE-2023-32258: Fix not seen in stream CVE-2023-32269: Fix not seen in stream CVE-2023-3268: Fix not seen in stream CVE-2023-33203: Fix not seen in stream @@ -676,19 +672,18 @@ CVE-2023-34256: Fix not seen in stream CVE-2023-35001: Fix not seen in stream CVE-2023-3567: Fix not seen in stream -CVE-2023-35693: Fix unknown CVE-2023-35788: Fix not seen in stream CVE-2023-35823: Fix not seen in stream CVE-2023-35824: Fix not seen in stream CVE-2023-35827: Fix unknown CVE-2023-35828: Fix not seen in stream +CVE-2023-3609: Fix not seen in stream +CVE-2023-3611: Fix not seen in stream CVE-2023-3640: Fix unknown CVE-2023-37453: Fix unknown CVE-2023-37454: Fix unknown -CVE-2023-38426: Fix not seen in stream -CVE-2023-38427: Fix not seen in stream -CVE-2023-38428: Fix not seen in stream -CVE-2023-38429: Fix not seen in stream -CVE-2023-38430: Fix not seen in stream -CVE-2023-38431: Fix not seen in stream -CVE-2023-38432: Fix not seen in stream +CVE-2023-3772: Fix unknown +CVE-2023-3773: Fix unknown +CVE-2023-3776: Fix not seen in stream +CVE-2023-3812: Fix not seen in stream +CVE-2023-3863: Fix not seen in stream
diff --git a/data/5.7/5.7_security.txt b/data/5.7/5.7_security.txt index aec9118..175a6e2 100644 --- a/data/5.7/5.7_security.txt +++ b/data/5.7/5.7_security.txt
@@ -514,6 +514,7 @@ CVE-2022-3522: (unk) mm/hugetlb: use hugetlb_pte_stable in migration race check CVE-2022-3523: (unk) mm/memory.c: fix race when faulting a device private page CVE-2022-3524: (unk) tcp/udp: Fix memory leak in ipv6_renew_options(). + CVE-2022-3533: (unk) CVE-2022-3534: (unk) libbpf: Fix use-after-free in btf_dump_name_dups CVE-2022-3535: (unk) net: mvpp2: fix mvpp2 debugfs leak CVE-2022-3542: (unk) bnx2x: fix potential memory leak in bnx2x_tpa_stop() @@ -526,6 +527,7 @@ CVE-2022-3586: (unk) sch_sfb: Don't assume the skb is still around after enqueueing to child CVE-2022-3594: (unk) r8152: Rate limit overflow messages CVE-2022-3595: (unk) cifs: fix double-fault crash during ntlmssp + CVE-2022-3606: (unk) CVE-2022-36123: (unk) x86: Clear .brk area at early boot CVE-2022-3621: (unk) nilfs2: fix NULL pointer dereference at nilfs_bmap_lookup_at_level() CVE-2022-3623: (unk) mm/hugetlb: fix races when looking up a CONT-PTE/PMD size hugetlb page @@ -592,7 +594,6 @@ CVE-2022-47521: (unk) wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute CVE-2022-47929: (unk) net: sched: disallow noqueue for qdisc classes CVE-2022-47946: (unk) io_uring: kill sqo_dead and sqo submission halting - CVE-2022-48502: (unk) fs/ntfs3: Check fields while reading CVE-2023-0045: (unk) x86/bugs: Flush IBP in ib_prctl_set() CVE-2023-0047: (unk) mm, oom: do not trigger out_of_memory from the #PF CVE-2023-0160: (unk) @@ -639,6 +640,7 @@ CVE-2023-2002: (unk) bluetooth: Perform careful capability checks in hci_sock_ioctl() CVE-2023-2007: (unk) scsi: dpt_i2o: Remove obsolete driver CVE-2023-2008: (unk) udmabuf: add back sanity check + CVE-2023-20593: (unk) x86/cpu/amd: Add a Zenbleed fix CVE-2023-20928: (unk) android: binder: stop saving a pointer to the VMA CVE-2023-20941: (unk) CVE-2023-2124: (unk) xfs: verify buffer contents when we skip log replay @@ -683,6 +685,7 @@ CVE-2023-31084: (unk) media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() CVE-2023-31085: (unk) CVE-2023-3111: (unk) btrfs: unset reloc control if transaction commit fails in prepare_to_relocate() + CVE-2023-3117: (unk) netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE CVE-2023-3141: (unk) memstick: r592: Fix UAF bug in r592_remove due to race condition CVE-2023-31436: (unk) net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg CVE-2023-3159: (unk) firewire: fix potential uaf in outbound_phy_packet_callback() @@ -690,13 +693,6 @@ CVE-2023-3212: (unk) gfs2: Don't deref jdesc in evict CVE-2023-3220: (unk) drm/msm/dpu: Add check for pstates CVE-2023-32233: (unk) netfilter: nf_tables: deactivate anonymous set from preparation phase - CVE-2023-32247: (unk) ksmbd: destroy expired sessions - CVE-2023-32248: (unk) ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem() - CVE-2023-32250: (unk) ksmbd: fix racy issue from session setup and logoff - CVE-2023-32252: (unk) ksmbd: fix racy issue from session setup and logoff - CVE-2023-32254: (unk) ksmbd: fix racy issue under cocurrent smb2 tree disconnect - CVE-2023-32257: (unk) ksmbd: fix racy issue from session setup and logoff - CVE-2023-32258: (unk) ksmbd: fix racy issue from smb2 close and logoff with multichannel CVE-2023-32269: (unk) netrom: Fix use-after-free caused by accept on already connected socket CVE-2023-3268: (unk) relayfs: fix out-of-bounds access in relay_file_read CVE-2023-33203: (unk) net: qcom/emac: Fix use after free bug in emac_remove due to race condition @@ -710,19 +706,18 @@ CVE-2023-34256: (unk) ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum CVE-2023-35001: (unk) netfilter: nf_tables: prevent OOB access in nft_byteorder_eval CVE-2023-3567: (unk) vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF - CVE-2023-35693: (unk) CVE-2023-35788: (unk) net/sched: flower: fix possible OOB write in fl_set_geneve_opt() CVE-2023-35823: (unk) media: saa7134: fix use after free bug in saa7134_finidev due to race condition CVE-2023-35824: (unk) media: dm1105: Fix use after free bug in dm1105_remove due to race condition CVE-2023-35827: (unk) CVE-2023-35828: (unk) usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition + CVE-2023-3609: (unk) net/sched: cls_u32: Fix reference counter leak leading to overflow + CVE-2023-3611: (unk) net/sched: sch_qfq: account for stab overhead in qfq_enqueue CVE-2023-3640: (unk) CVE-2023-37453: (unk) CVE-2023-37454: (unk) - CVE-2023-38426: (unk) ksmbd: fix global-out-of-bounds in smb2_find_context_vals - CVE-2023-38427: (unk) ksmbd: fix out-of-bound read in deassemble_neg_contexts() - CVE-2023-38428: (unk) ksmbd: fix wrong UserName check in session_user - CVE-2023-38429: (unk) ksmbd: allocate one more byte for implied bcc[0] - CVE-2023-38430: (unk) ksmbd: validate smb request protocol id - CVE-2023-38431: (unk) ksmbd: check the validation of pdu_size in ksmbd_conn_handler_loop - CVE-2023-38432: (unk) ksmbd: validate command payload size + CVE-2023-3772: (unk) + CVE-2023-3773: (unk) + CVE-2023-3776: (unk) net/sched: cls_fw: Fix improper refcount update leads to use-after-free + CVE-2023-3812: (unk) net: tun: fix bugs for oversize packet when napi frags enabled + CVE-2023-3863: (unk) net: nfc: Fix use-after-free caused by nfc_llcp_find_local
diff --git a/data/5.8/5.8_CVEs.txt b/data/5.8/5.8_CVEs.txt index f65053f..d3c9708 100644 --- a/data/5.8/5.8_CVEs.txt +++ b/data/5.8/5.8_CVEs.txt
@@ -462,6 +462,7 @@ CVE-2022-3522: Fix not seen in stream CVE-2022-3523: Fix not seen in stream CVE-2022-3524: Fix not seen in stream +CVE-2022-3533: Fix unknown CVE-2022-3534: Fix not seen in stream CVE-2022-3535: Fix not seen in stream CVE-2022-3542: Fix not seen in stream @@ -474,6 +475,7 @@ CVE-2022-3586: Fix not seen in stream CVE-2022-3594: Fix not seen in stream CVE-2022-3595: Fix not seen in stream +CVE-2022-3606: Fix unknown CVE-2022-36123: Fix not seen in stream CVE-2022-3621: Fix not seen in stream CVE-2022-3623: Fix not seen in stream @@ -542,7 +544,6 @@ CVE-2022-47521: Fix not seen in stream CVE-2022-47929: Fix not seen in stream CVE-2022-47946: Fix not seen in stream -CVE-2022-48502: Fix not seen in stream CVE-2023-0045: Fix not seen in stream CVE-2023-0047: Fix not seen in stream CVE-2023-0160: Fix unknown @@ -589,6 +590,7 @@ CVE-2023-2002: Fix not seen in stream CVE-2023-2007: Fix not seen in stream CVE-2023-2008: Fix not seen in stream +CVE-2023-20593: Fix not seen in stream CVE-2023-20928: Fix not seen in stream CVE-2023-20941: Fix unknown CVE-2023-2124: Fix not seen in stream @@ -635,6 +637,7 @@ CVE-2023-31084: Fix not seen in stream CVE-2023-31085: Fix unknown CVE-2023-3111: Fix not seen in stream +CVE-2023-3117: Fix not seen in stream CVE-2023-3141: Fix not seen in stream CVE-2023-31436: Fix not seen in stream CVE-2023-3159: Fix not seen in stream @@ -642,13 +645,6 @@ CVE-2023-3212: Fix not seen in stream CVE-2023-3220: Fix not seen in stream CVE-2023-32233: Fix not seen in stream -CVE-2023-32247: Fix not seen in stream -CVE-2023-32248: Fix not seen in stream -CVE-2023-32250: Fix not seen in stream -CVE-2023-32252: Fix not seen in stream -CVE-2023-32254: Fix not seen in stream -CVE-2023-32257: Fix not seen in stream -CVE-2023-32258: Fix not seen in stream CVE-2023-32269: Fix not seen in stream CVE-2023-3268: Fix not seen in stream CVE-2023-33203: Fix not seen in stream @@ -662,20 +658,19 @@ CVE-2023-34256: Fix not seen in stream CVE-2023-35001: Fix not seen in stream CVE-2023-3567: Fix not seen in stream -CVE-2023-35693: Fix unknown CVE-2023-35788: Fix not seen in stream CVE-2023-35823: Fix not seen in stream CVE-2023-35824: Fix not seen in stream CVE-2023-35827: Fix unknown CVE-2023-35828: Fix not seen in stream CVE-2023-35829: Fix not seen in stream +CVE-2023-3609: Fix not seen in stream +CVE-2023-3611: Fix not seen in stream CVE-2023-3640: Fix unknown CVE-2023-37453: Fix unknown CVE-2023-37454: Fix unknown -CVE-2023-38426: Fix not seen in stream -CVE-2023-38427: Fix not seen in stream -CVE-2023-38428: Fix not seen in stream -CVE-2023-38429: Fix not seen in stream -CVE-2023-38430: Fix not seen in stream -CVE-2023-38431: Fix not seen in stream -CVE-2023-38432: Fix not seen in stream +CVE-2023-3772: Fix unknown +CVE-2023-3773: Fix unknown +CVE-2023-3776: Fix not seen in stream +CVE-2023-3812: Fix not seen in stream +CVE-2023-3863: Fix not seen in stream
diff --git a/data/5.8/5.8_security.txt b/data/5.8/5.8_security.txt index 2c057fc..66b9cb2 100644 --- a/data/5.8/5.8_security.txt +++ b/data/5.8/5.8_security.txt
@@ -496,6 +496,7 @@ CVE-2022-3522: (unk) mm/hugetlb: use hugetlb_pte_stable in migration race check CVE-2022-3523: (unk) mm/memory.c: fix race when faulting a device private page CVE-2022-3524: (unk) tcp/udp: Fix memory leak in ipv6_renew_options(). + CVE-2022-3533: (unk) CVE-2022-3534: (unk) libbpf: Fix use-after-free in btf_dump_name_dups CVE-2022-3535: (unk) net: mvpp2: fix mvpp2 debugfs leak CVE-2022-3542: (unk) bnx2x: fix potential memory leak in bnx2x_tpa_stop() @@ -508,6 +509,7 @@ CVE-2022-3586: (unk) sch_sfb: Don't assume the skb is still around after enqueueing to child CVE-2022-3594: (unk) r8152: Rate limit overflow messages CVE-2022-3595: (unk) cifs: fix double-fault crash during ntlmssp + CVE-2022-3606: (unk) CVE-2022-36123: (unk) x86: Clear .brk area at early boot CVE-2022-3621: (unk) nilfs2: fix NULL pointer dereference at nilfs_bmap_lookup_at_level() CVE-2022-3623: (unk) mm/hugetlb: fix races when looking up a CONT-PTE/PMD size hugetlb page @@ -576,7 +578,6 @@ CVE-2022-47521: (unk) wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute CVE-2022-47929: (unk) net: sched: disallow noqueue for qdisc classes CVE-2022-47946: (unk) io_uring: kill sqo_dead and sqo submission halting - CVE-2022-48502: (unk) fs/ntfs3: Check fields while reading CVE-2023-0045: (unk) x86/bugs: Flush IBP in ib_prctl_set() CVE-2023-0047: (unk) mm, oom: do not trigger out_of_memory from the #PF CVE-2023-0160: (unk) @@ -623,6 +624,7 @@ CVE-2023-2002: (unk) bluetooth: Perform careful capability checks in hci_sock_ioctl() CVE-2023-2007: (unk) scsi: dpt_i2o: Remove obsolete driver CVE-2023-2008: (unk) udmabuf: add back sanity check + CVE-2023-20593: (unk) x86/cpu/amd: Add a Zenbleed fix CVE-2023-20928: (unk) android: binder: stop saving a pointer to the VMA CVE-2023-20941: (unk) CVE-2023-2124: (unk) xfs: verify buffer contents when we skip log replay @@ -669,6 +671,7 @@ CVE-2023-31084: (unk) media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() CVE-2023-31085: (unk) CVE-2023-3111: (unk) btrfs: unset reloc control if transaction commit fails in prepare_to_relocate() + CVE-2023-3117: (unk) netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE CVE-2023-3141: (unk) memstick: r592: Fix UAF bug in r592_remove due to race condition CVE-2023-31436: (unk) net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg CVE-2023-3159: (unk) firewire: fix potential uaf in outbound_phy_packet_callback() @@ -676,13 +679,6 @@ CVE-2023-3212: (unk) gfs2: Don't deref jdesc in evict CVE-2023-3220: (unk) drm/msm/dpu: Add check for pstates CVE-2023-32233: (unk) netfilter: nf_tables: deactivate anonymous set from preparation phase - CVE-2023-32247: (unk) ksmbd: destroy expired sessions - CVE-2023-32248: (unk) ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem() - CVE-2023-32250: (unk) ksmbd: fix racy issue from session setup and logoff - CVE-2023-32252: (unk) ksmbd: fix racy issue from session setup and logoff - CVE-2023-32254: (unk) ksmbd: fix racy issue under cocurrent smb2 tree disconnect - CVE-2023-32257: (unk) ksmbd: fix racy issue from session setup and logoff - CVE-2023-32258: (unk) ksmbd: fix racy issue from smb2 close and logoff with multichannel CVE-2023-32269: (unk) netrom: Fix use-after-free caused by accept on already connected socket CVE-2023-3268: (unk) relayfs: fix out-of-bounds access in relay_file_read CVE-2023-33203: (unk) net: qcom/emac: Fix use after free bug in emac_remove due to race condition @@ -696,20 +692,19 @@ CVE-2023-34256: (unk) ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum CVE-2023-35001: (unk) netfilter: nf_tables: prevent OOB access in nft_byteorder_eval CVE-2023-3567: (unk) vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF - CVE-2023-35693: (unk) CVE-2023-35788: (unk) net/sched: flower: fix possible OOB write in fl_set_geneve_opt() CVE-2023-35823: (unk) media: saa7134: fix use after free bug in saa7134_finidev due to race condition CVE-2023-35824: (unk) media: dm1105: Fix use after free bug in dm1105_remove due to race condition CVE-2023-35827: (unk) CVE-2023-35828: (unk) usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition CVE-2023-35829: (unk) media: rkvdec: fix use after free bug in rkvdec_remove + CVE-2023-3609: (unk) net/sched: cls_u32: Fix reference counter leak leading to overflow + CVE-2023-3611: (unk) net/sched: sch_qfq: account for stab overhead in qfq_enqueue CVE-2023-3640: (unk) CVE-2023-37453: (unk) CVE-2023-37454: (unk) - CVE-2023-38426: (unk) ksmbd: fix global-out-of-bounds in smb2_find_context_vals - CVE-2023-38427: (unk) ksmbd: fix out-of-bound read in deassemble_neg_contexts() - CVE-2023-38428: (unk) ksmbd: fix wrong UserName check in session_user - CVE-2023-38429: (unk) ksmbd: allocate one more byte for implied bcc[0] - CVE-2023-38430: (unk) ksmbd: validate smb request protocol id - CVE-2023-38431: (unk) ksmbd: check the validation of pdu_size in ksmbd_conn_handler_loop - CVE-2023-38432: (unk) ksmbd: validate command payload size + CVE-2023-3772: (unk) + CVE-2023-3773: (unk) + CVE-2023-3776: (unk) net/sched: cls_fw: Fix improper refcount update leads to use-after-free + CVE-2023-3812: (unk) net: tun: fix bugs for oversize packet when napi frags enabled + CVE-2023-3863: (unk) net: nfc: Fix use-after-free caused by nfc_llcp_find_local
diff --git a/data/5.9/5.9_CVEs.txt b/data/5.9/5.9_CVEs.txt index 953e0b8..9c2031e 100644 --- a/data/5.9/5.9_CVEs.txt +++ b/data/5.9/5.9_CVEs.txt
@@ -434,6 +434,7 @@ CVE-2022-3522: Fix not seen in stream CVE-2022-3523: Fix not seen in stream CVE-2022-3524: Fix not seen in stream +CVE-2022-3533: Fix unknown CVE-2022-3534: Fix not seen in stream CVE-2022-3535: Fix not seen in stream CVE-2022-3542: Fix not seen in stream @@ -446,6 +447,7 @@ CVE-2022-3586: Fix not seen in stream CVE-2022-3594: Fix not seen in stream CVE-2022-3595: Fix not seen in stream +CVE-2022-3606: Fix unknown CVE-2022-36123: Fix not seen in stream CVE-2022-3621: Fix not seen in stream CVE-2022-3623: Fix not seen in stream @@ -515,7 +517,6 @@ CVE-2022-47521: Fix not seen in stream CVE-2022-47929: Fix not seen in stream CVE-2022-47946: Fix not seen in stream -CVE-2022-48502: Fix not seen in stream CVE-2023-0045: Fix not seen in stream CVE-2023-0047: Fix not seen in stream CVE-2023-0160: Fix unknown @@ -562,6 +563,7 @@ CVE-2023-2002: Fix not seen in stream CVE-2023-2007: Fix not seen in stream CVE-2023-2008: Fix not seen in stream +CVE-2023-20593: Fix not seen in stream CVE-2023-20928: Fix not seen in stream CVE-2023-20941: Fix unknown CVE-2023-2124: Fix not seen in stream @@ -608,6 +610,7 @@ CVE-2023-31084: Fix not seen in stream CVE-2023-31085: Fix unknown CVE-2023-3111: Fix not seen in stream +CVE-2023-3117: Fix not seen in stream CVE-2023-31248: Fix not seen in stream CVE-2023-3141: Fix not seen in stream CVE-2023-31436: Fix not seen in stream @@ -616,13 +619,6 @@ CVE-2023-3212: Fix not seen in stream CVE-2023-3220: Fix not seen in stream CVE-2023-32233: Fix not seen in stream -CVE-2023-32247: Fix not seen in stream -CVE-2023-32248: Fix not seen in stream -CVE-2023-32250: Fix not seen in stream -CVE-2023-32252: Fix not seen in stream -CVE-2023-32254: Fix not seen in stream -CVE-2023-32257: Fix not seen in stream -CVE-2023-32258: Fix not seen in stream CVE-2023-32269: Fix not seen in stream CVE-2023-3268: Fix not seen in stream CVE-2023-33203: Fix not seen in stream @@ -636,20 +632,20 @@ CVE-2023-34256: Fix not seen in stream CVE-2023-35001: Fix not seen in stream CVE-2023-3567: Fix not seen in stream -CVE-2023-35693: Fix unknown CVE-2023-35788: Fix not seen in stream CVE-2023-35823: Fix not seen in stream CVE-2023-35824: Fix not seen in stream CVE-2023-35827: Fix unknown CVE-2023-35828: Fix not seen in stream CVE-2023-35829: Fix not seen in stream +CVE-2023-3609: Fix not seen in stream +CVE-2023-3610: Fix not seen in stream +CVE-2023-3611: Fix not seen in stream CVE-2023-3640: Fix unknown CVE-2023-37453: Fix unknown CVE-2023-37454: Fix unknown -CVE-2023-38426: Fix not seen in stream -CVE-2023-38427: Fix not seen in stream -CVE-2023-38428: Fix not seen in stream -CVE-2023-38429: Fix not seen in stream -CVE-2023-38430: Fix not seen in stream -CVE-2023-38431: Fix not seen in stream -CVE-2023-38432: Fix not seen in stream +CVE-2023-3772: Fix unknown +CVE-2023-3773: Fix unknown +CVE-2023-3776: Fix not seen in stream +CVE-2023-3812: Fix not seen in stream +CVE-2023-3863: Fix not seen in stream
diff --git a/data/5.9/5.9_security.txt b/data/5.9/5.9_security.txt index f1ac6a2..fc00e08 100644 --- a/data/5.9/5.9_security.txt +++ b/data/5.9/5.9_security.txt
@@ -464,6 +464,7 @@ CVE-2022-3522: (unk) mm/hugetlb: use hugetlb_pte_stable in migration race check CVE-2022-3523: (unk) mm/memory.c: fix race when faulting a device private page CVE-2022-3524: (unk) tcp/udp: Fix memory leak in ipv6_renew_options(). + CVE-2022-3533: (unk) CVE-2022-3534: (unk) libbpf: Fix use-after-free in btf_dump_name_dups CVE-2022-3535: (unk) net: mvpp2: fix mvpp2 debugfs leak CVE-2022-3542: (unk) bnx2x: fix potential memory leak in bnx2x_tpa_stop() @@ -476,6 +477,7 @@ CVE-2022-3586: (unk) sch_sfb: Don't assume the skb is still around after enqueueing to child CVE-2022-3594: (unk) r8152: Rate limit overflow messages CVE-2022-3595: (unk) cifs: fix double-fault crash during ntlmssp + CVE-2022-3606: (unk) CVE-2022-36123: (unk) x86: Clear .brk area at early boot CVE-2022-3621: (unk) nilfs2: fix NULL pointer dereference at nilfs_bmap_lookup_at_level() CVE-2022-3623: (unk) mm/hugetlb: fix races when looking up a CONT-PTE/PMD size hugetlb page @@ -545,7 +547,6 @@ CVE-2022-47521: (unk) wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute CVE-2022-47929: (unk) net: sched: disallow noqueue for qdisc classes CVE-2022-47946: (unk) io_uring: kill sqo_dead and sqo submission halting - CVE-2022-48502: (unk) fs/ntfs3: Check fields while reading CVE-2023-0045: (unk) x86/bugs: Flush IBP in ib_prctl_set() CVE-2023-0047: (unk) mm, oom: do not trigger out_of_memory from the #PF CVE-2023-0160: (unk) @@ -592,6 +593,7 @@ CVE-2023-2002: (unk) bluetooth: Perform careful capability checks in hci_sock_ioctl() CVE-2023-2007: (unk) scsi: dpt_i2o: Remove obsolete driver CVE-2023-2008: (unk) udmabuf: add back sanity check + CVE-2023-20593: (unk) x86/cpu/amd: Add a Zenbleed fix CVE-2023-20928: (unk) android: binder: stop saving a pointer to the VMA CVE-2023-20941: (unk) CVE-2023-2124: (unk) xfs: verify buffer contents when we skip log replay @@ -638,6 +640,7 @@ CVE-2023-31084: (unk) media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() CVE-2023-31085: (unk) CVE-2023-3111: (unk) btrfs: unset reloc control if transaction commit fails in prepare_to_relocate() + CVE-2023-3117: (unk) netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE CVE-2023-31248: (unk) netfilter: nf_tables: do not ignore genmask when looking up chain by id CVE-2023-3141: (unk) memstick: r592: Fix UAF bug in r592_remove due to race condition CVE-2023-31436: (unk) net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg @@ -646,13 +649,6 @@ CVE-2023-3212: (unk) gfs2: Don't deref jdesc in evict CVE-2023-3220: (unk) drm/msm/dpu: Add check for pstates CVE-2023-32233: (unk) netfilter: nf_tables: deactivate anonymous set from preparation phase - CVE-2023-32247: (unk) ksmbd: destroy expired sessions - CVE-2023-32248: (unk) ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem() - CVE-2023-32250: (unk) ksmbd: fix racy issue from session setup and logoff - CVE-2023-32252: (unk) ksmbd: fix racy issue from session setup and logoff - CVE-2023-32254: (unk) ksmbd: fix racy issue under cocurrent smb2 tree disconnect - CVE-2023-32257: (unk) ksmbd: fix racy issue from session setup and logoff - CVE-2023-32258: (unk) ksmbd: fix racy issue from smb2 close and logoff with multichannel CVE-2023-32269: (unk) netrom: Fix use-after-free caused by accept on already connected socket CVE-2023-3268: (unk) relayfs: fix out-of-bounds access in relay_file_read CVE-2023-33203: (unk) net: qcom/emac: Fix use after free bug in emac_remove due to race condition @@ -666,20 +662,20 @@ CVE-2023-34256: (unk) ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum CVE-2023-35001: (unk) netfilter: nf_tables: prevent OOB access in nft_byteorder_eval CVE-2023-3567: (unk) vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF - CVE-2023-35693: (unk) CVE-2023-35788: (unk) net/sched: flower: fix possible OOB write in fl_set_geneve_opt() CVE-2023-35823: (unk) media: saa7134: fix use after free bug in saa7134_finidev due to race condition CVE-2023-35824: (unk) media: dm1105: Fix use after free bug in dm1105_remove due to race condition CVE-2023-35827: (unk) CVE-2023-35828: (unk) usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition CVE-2023-35829: (unk) media: rkvdec: fix use after free bug in rkvdec_remove + CVE-2023-3609: (unk) net/sched: cls_u32: Fix reference counter leak leading to overflow + CVE-2023-3610: (unk) netfilter: nf_tables: fix chain binding transaction logic + CVE-2023-3611: (unk) net/sched: sch_qfq: account for stab overhead in qfq_enqueue CVE-2023-3640: (unk) CVE-2023-37453: (unk) CVE-2023-37454: (unk) - CVE-2023-38426: (unk) ksmbd: fix global-out-of-bounds in smb2_find_context_vals - CVE-2023-38427: (unk) ksmbd: fix out-of-bound read in deassemble_neg_contexts() - CVE-2023-38428: (unk) ksmbd: fix wrong UserName check in session_user - CVE-2023-38429: (unk) ksmbd: allocate one more byte for implied bcc[0] - CVE-2023-38430: (unk) ksmbd: validate smb request protocol id - CVE-2023-38431: (unk) ksmbd: check the validation of pdu_size in ksmbd_conn_handler_loop - CVE-2023-38432: (unk) ksmbd: validate command payload size + CVE-2023-3772: (unk) + CVE-2023-3773: (unk) + CVE-2023-3776: (unk) net/sched: cls_fw: Fix improper refcount update leads to use-after-free + CVE-2023-3812: (unk) net: tun: fix bugs for oversize packet when napi frags enabled + CVE-2023-3863: (unk) net: nfc: Fix use-after-free caused by nfc_llcp_find_local
diff --git a/data/6.0/6.0_CVEs.txt b/data/6.0/6.0_CVEs.txt index b9e5d17..39dafd1 100644 --- a/data/6.0/6.0_CVEs.txt +++ b/data/6.0/6.0_CVEs.txt
@@ -74,6 +74,7 @@ CVE-2022-3523: Fix not seen in stream CVE-2022-3524: Fixed with 6.0.7 CVE-2022-3531: Fixed with 6.0.16 +CVE-2022-3533: Fix unknown CVE-2022-3534: Fixed with 6.0.16 CVE-2022-3535: Fixed with 6.0.3 CVE-2022-3541: Fixed with 6.0.3 @@ -86,6 +87,7 @@ CVE-2022-3567: Fix not seen in stream CVE-2022-3594: Fixed with 6.0.3 CVE-2022-3595: Fixed with 6.0.16 +CVE-2022-3606: Fix unknown CVE-2022-3619: Fixed with 6.0.8 CVE-2022-3621: Fixed with 6.0.2 CVE-2022-3623: Fixed with 6.0.3 @@ -192,6 +194,7 @@ CVE-2023-1998: Fix not seen in stream CVE-2023-2002: Fix not seen in stream CVE-2023-2006: Fixed with 6.0.11 +CVE-2023-20593: Fix not seen in stream CVE-2023-20941: Fix unknown CVE-2023-21102: Fix not seen in stream CVE-2023-21106: Fix not seen in stream @@ -235,6 +238,7 @@ CVE-2023-31083: Fix unknown CVE-2023-31084: Fix not seen in stream CVE-2023-31085: Fix unknown +CVE-2023-3117: Fix not seen in stream CVE-2023-31248: Fix not seen in stream CVE-2023-3141: Fix not seen in stream CVE-2023-31436: Fix not seen in stream @@ -266,7 +270,6 @@ CVE-2023-34256: Fix not seen in stream CVE-2023-35001: Fix not seen in stream CVE-2023-3567: Fix not seen in stream -CVE-2023-35693: Fix unknown CVE-2023-35788: Fix not seen in stream CVE-2023-35823: Fix not seen in stream CVE-2023-35824: Fix not seen in stream @@ -274,9 +277,16 @@ CVE-2023-35827: Fix unknown CVE-2023-35828: Fix not seen in stream CVE-2023-35829: Fix not seen in stream +CVE-2023-3609: Fix not seen in stream +CVE-2023-3610: Fix not seen in stream +CVE-2023-3611: Fix not seen in stream CVE-2023-3640: Fix unknown CVE-2023-37453: Fix unknown CVE-2023-37454: Fix unknown +CVE-2023-3772: Fix unknown +CVE-2023-3773: Fix unknown +CVE-2023-3776: Fix not seen in stream +CVE-2023-3812: Fixed with 6.0.8 CVE-2023-38409: Fix not seen in stream CVE-2023-38426: Fix not seen in stream CVE-2023-38427: Fix not seen in stream @@ -285,3 +295,4 @@ CVE-2023-38430: Fix not seen in stream CVE-2023-38431: Fix not seen in stream CVE-2023-38432: Fix not seen in stream +CVE-2023-3863: Fix not seen in stream
diff --git a/data/6.0/6.0_security.txt b/data/6.0/6.0_security.txt index bd97a09..5ded165 100644 --- a/data/6.0/6.0_security.txt +++ b/data/6.0/6.0_security.txt
@@ -46,6 +46,7 @@ CVE-2022-3640: 8f7e4cf0694149a5d999d676ebd9ecf1b4cb2cc9 Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del() CVE-2022-42895: e1aada9b71493b2e11c2a239ece99a97e3f13431 Bluetooth: L2CAP: Fix attempting to access uninitialized memory CVE-2022-42896: d7efeb93213becae13c6a12e4150ce1e07bd2c49 Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM + CVE-2023-3812: d24ba55946e6bdcfacae989638621d7728ee0ec8 net: tun: fix bugs for oversize packet when napi frags enabled CVEs fixed in 6.0.10: CVE-2022-3169: 0c2b1c56252bf19d3412137073c2c07e86f40ba1 nvme: ensure subsystem reset is single threaded @@ -174,9 +175,11 @@ CVE-2022-3238: (unk) CVE-2022-3522: (unk) mm/hugetlb: use hugetlb_pte_stable in migration race check CVE-2022-3523: (unk) mm/memory.c: fix race when faulting a device private page + CVE-2022-3533: (unk) CVE-2022-3544: (unk) CVE-2022-3566: (unk) tcp: Fix data races around icsk->icsk_af_ops. CVE-2022-3567: (unk) ipv6: Fix data races around sk->sk_prot. + CVE-2022-3606: (unk) CVE-2022-36402: (unk) CVE-2022-3642: (unk) CVE-2022-38096: (unk) @@ -238,6 +241,7 @@ CVE-2023-1990: (unk) nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition CVE-2023-1998: (unk) x86/speculation: Allow enabling STIBP with legacy IBRS CVE-2023-2002: (unk) bluetooth: Perform careful capability checks in hci_sock_ioctl() + CVE-2023-20593: (unk) x86/cpu/amd: Add a Zenbleed fix CVE-2023-20941: (unk) CVE-2023-21102: (unk) efi: rt-wrapper: Add missing include CVE-2023-21106: (unk) drm/msm/gpu: Fix potential double-free @@ -270,6 +274,7 @@ CVE-2023-31083: (unk) CVE-2023-31084: (unk) media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() CVE-2023-31085: (unk) + CVE-2023-3117: (unk) netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE CVE-2023-31248: (unk) netfilter: nf_tables: do not ignore genmask when looking up chain by id CVE-2023-3141: (unk) memstick: r592: Fix UAF bug in r592_remove due to race condition CVE-2023-31436: (unk) net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg @@ -300,7 +305,6 @@ CVE-2023-34256: (unk) ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum CVE-2023-35001: (unk) netfilter: nf_tables: prevent OOB access in nft_byteorder_eval CVE-2023-3567: (unk) vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF - CVE-2023-35693: (unk) CVE-2023-35788: (unk) net/sched: flower: fix possible OOB write in fl_set_geneve_opt() CVE-2023-35823: (unk) media: saa7134: fix use after free bug in saa7134_finidev due to race condition CVE-2023-35824: (unk) media: dm1105: Fix use after free bug in dm1105_remove due to race condition @@ -308,9 +312,15 @@ CVE-2023-35827: (unk) CVE-2023-35828: (unk) usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition CVE-2023-35829: (unk) media: rkvdec: fix use after free bug in rkvdec_remove + CVE-2023-3609: (unk) net/sched: cls_u32: Fix reference counter leak leading to overflow + CVE-2023-3610: (unk) netfilter: nf_tables: fix chain binding transaction logic + CVE-2023-3611: (unk) net/sched: sch_qfq: account for stab overhead in qfq_enqueue CVE-2023-3640: (unk) CVE-2023-37453: (unk) CVE-2023-37454: (unk) + CVE-2023-3772: (unk) + CVE-2023-3773: (unk) + CVE-2023-3776: (unk) net/sched: cls_fw: Fix improper refcount update leads to use-after-free CVE-2023-38409: (unk) fbcon: set_con2fb_map needs to set con2fb_map! CVE-2023-38426: (unk) ksmbd: fix global-out-of-bounds in smb2_find_context_vals CVE-2023-38427: (unk) ksmbd: fix out-of-bound read in deassemble_neg_contexts() @@ -319,3 +329,4 @@ CVE-2023-38430: (unk) ksmbd: validate smb request protocol id CVE-2023-38431: (unk) ksmbd: check the validation of pdu_size in ksmbd_conn_handler_loop CVE-2023-38432: (unk) ksmbd: validate command payload size + CVE-2023-3863: (unk) net: nfc: Fix use-after-free caused by nfc_llcp_find_local
diff --git a/data/6.1/6.1_CVEs.txt b/data/6.1/6.1_CVEs.txt index 279a7bc..87b4f7c 100644 --- a/data/6.1/6.1_CVEs.txt +++ b/data/6.1/6.1_CVEs.txt
@@ -65,8 +65,10 @@ CVE-2022-3424: Fixed with 6.1.2 CVE-2022-3531: Fixed with 6.1.2 CVE-2022-3532: Fixed with 6.1.2 +CVE-2022-3533: Fix unknown CVE-2022-3534: Fixed with 6.1.2 CVE-2022-3544: Fix unknown +CVE-2022-3606: Fix unknown CVE-2022-36280: Fixed with 6.1.4 CVE-2022-36402: Fix unknown CVE-2022-3642: Fix unknown @@ -99,7 +101,7 @@ CVE-2022-48423: Fixed with 6.1.3 CVE-2022-48424: Fixed with 6.1.3 CVE-2022-48425: Fixed with 6.1.33 -CVE-2022-48502: Fix not seen in stream +CVE-2022-48502: Fixed with 6.1.40 CVE-2023-0045: Fixed with 6.1.5 CVE-2023-0160: Fix unknown CVE-2023-0179: Fixed with 6.1.7 @@ -138,6 +140,7 @@ CVE-2023-1990: Fixed with 6.1.21 CVE-2023-1998: Fixed with 6.1.16 CVE-2023-2002: Fixed with 6.1.27 +CVE-2023-20593: Fixed with 6.1.41 CVE-2023-20941: Fix unknown CVE-2023-21102: Fixed with 6.1.8 CVE-2023-21106: Fixed with 6.1.9 @@ -169,7 +172,7 @@ CVE-2023-28328: Fixed with 6.1.2 CVE-2023-28466: Fixed with 6.1.20 CVE-2023-28866: Fixed with 6.1.22 -CVE-2023-2898: Fix not seen in stream +CVE-2023-2898: Fixed with 6.1.39 CVE-2023-2985: Fixed with 6.1.16 CVE-2023-30456: Fixed with 6.1.21 CVE-2023-30772: Fixed with 6.1.22 @@ -179,7 +182,8 @@ CVE-2023-31083: Fix unknown CVE-2023-31084: Fix not seen in stream CVE-2023-31085: Fix unknown -CVE-2023-31248: Fix not seen in stream +CVE-2023-3117: Fixed with 6.1.35 +CVE-2023-31248: Fixed with 6.1.39 CVE-2023-3141: Fixed with 6.1.30 CVE-2023-31436: Fixed with 6.1.26 CVE-2023-3161: Fixed with 6.1.11 @@ -208,9 +212,8 @@ CVE-2023-3397: Fix unknown CVE-2023-34255: Fixed with 6.1.33 CVE-2023-34256: Fixed with 6.1.29 -CVE-2023-35001: Fix not seen in stream +CVE-2023-35001: Fixed with 6.1.39 CVE-2023-3567: Fixed with 6.1.11 -CVE-2023-35693: Fix unknown CVE-2023-35788: Fixed with 6.1.33 CVE-2023-35823: Fixed with 6.1.28 CVE-2023-35824: Fixed with 6.1.28 @@ -218,9 +221,15 @@ CVE-2023-35827: Fix unknown CVE-2023-35828: Fixed with 6.1.28 CVE-2023-35829: Fixed with 6.1.28 +CVE-2023-3609: Fixed with 6.1.35 +CVE-2023-3610: Fixed with 6.1.36 +CVE-2023-3611: Fixed with 6.1.40 CVE-2023-3640: Fix unknown CVE-2023-37453: Fix unknown CVE-2023-37454: Fix unknown +CVE-2023-3772: Fix unknown +CVE-2023-3773: Fix unknown +CVE-2023-3776: Fixed with 6.1.40 CVE-2023-38409: Fixed with 6.1.25 CVE-2023-38426: Fixed with 6.1.30 CVE-2023-38427: Fixed with 6.1.34 @@ -229,3 +238,4 @@ CVE-2023-38430: Fixed with 6.1.35 CVE-2023-38431: Fixed with 6.1.34 CVE-2023-38432: Fixed with 6.1.36 +CVE-2023-3863: Fixed with 6.1.39
diff --git a/data/6.1/6.1_security.txt b/data/6.1/6.1_security.txt index f44b0f1..a6f088a 100644 --- a/data/6.1/6.1_security.txt +++ b/data/6.1/6.1_security.txt
@@ -180,15 +180,32 @@ CVE-2023-38431: 543c12c2644e772caa6880662c2a852cfdc5a10c ksmbd: check the validation of pdu_size in ksmbd_conn_handler_loop CVEs fixed in 6.1.35: + CVE-2023-3117: 4aaa3b730d16c13cc3feaa127bfca1af201d969d netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE CVE-2023-3390: 4aaa3b730d16c13cc3feaa127bfca1af201d969d netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE + CVE-2023-3609: 07f9cc229b44cbcee6385802d390091d915f38c3 net/sched: cls_u32: Fix reference counter leak leading to overflow CVE-2023-38430: e01fc7caac9ce9ad76df9f42f7f61ef4bf1d27c9 ksmbd: validate smb request protocol id CVEs fixed in 6.1.36: + CVE-2023-3610: 891cd2edddc76c58e842706ad27e2ff96000bd5d netfilter: nf_tables: fix chain binding transaction logic CVE-2023-38432: 9650cf70ec9d94ff34daa088b643229231723c26 ksmbd: validate command payload size CVEs fixed in 6.1.37: CVE-2023-3269: d6a5c7a1a6e52d4c46fe181237ca96cd46a42386 mm: introduce new 'lock_mm_and_find_vma()' page fault helper +CVEs fixed in 6.1.39: + CVE-2023-2898: ebe83e9bb8a6b3db28603fe938ee80ccaa01ed53 f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io() + CVE-2023-31248: fc95c8b02c6160936f1f3d8d9d7f4f66f3c84b49 netfilter: nf_tables: do not ignore genmask when looking up chain by id + CVE-2023-35001: 40f83dd66a823400d8592e3b71e190e3ad978eb5 netfilter: nf_tables: prevent OOB access in nft_byteorder_eval + CVE-2023-3863: 425d9d3a92df7d96b3cfb7ee5c240293a21cbde3 net: nfc: Fix use-after-free caused by nfc_llcp_find_local + +CVEs fixed in 6.1.40: + CVE-2022-48502: 000a9a72efa4a9df289bab9c9e8ba1639c72e0d6 fs/ntfs3: Check fields while reading + CVE-2023-3611: 70feebdbfad85772ab3ef152812729cab5c6c426 net/sched: sch_qfq: account for stab overhead in qfq_enqueue + CVE-2023-3776: c91fb29bb07ee4dd40aabd1e41f19c0f92ac3199 net/sched: cls_fw: Fix improper refcount update leads to use-after-free + +CVEs fixed in 6.1.41: + CVE-2023-20593: ed9b87010aa84c157096f98c322491e9af8e8f07 x86/cpu/amd: Add a Zenbleed fix + Outstanding CVEs: CVE-2005-3660: (unk) CVE-2007-3719: (unk) @@ -252,7 +269,9 @@ CVE-2022-26878: (unk) CVE-2022-2961: (unk) CVE-2022-3238: (unk) + CVE-2022-3533: (unk) CVE-2022-3544: (unk) + CVE-2022-3606: (unk) CVE-2022-36402: (unk) CVE-2022-3642: (unk) CVE-2022-38096: (unk) @@ -267,7 +286,6 @@ CVE-2022-45887: (unk) CVE-2022-45888: (unk) char: xillybus: Prevent use-after-free due to race condition CVE-2022-45919: (unk) - CVE-2022-48502: (unk) fs/ntfs3: Check fields while reading CVE-2023-0160: (unk) CVE-2023-0597: (unk) x86/mm: Randomize per-cpu entry area CVE-2023-1193: (unk) @@ -279,17 +297,15 @@ CVE-2023-23039: (unk) CVE-2023-2430: (unk) io_uring/msg_ring: fix missing lock on overflow for IOPOLL CVE-2023-26242: (unk) - CVE-2023-2898: (unk) f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io() CVE-2023-31081: (unk) CVE-2023-31082: (unk) CVE-2023-31083: (unk) CVE-2023-31084: (unk) media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() CVE-2023-31085: (unk) - CVE-2023-31248: (unk) netfilter: nf_tables: do not ignore genmask when looking up chain by id CVE-2023-3397: (unk) - CVE-2023-35001: (unk) netfilter: nf_tables: prevent OOB access in nft_byteorder_eval - CVE-2023-35693: (unk) CVE-2023-35827: (unk) CVE-2023-3640: (unk) CVE-2023-37453: (unk) CVE-2023-37454: (unk) + CVE-2023-3772: (unk) + CVE-2023-3773: (unk)
diff --git a/data/6.2/6.2_CVEs.txt b/data/6.2/6.2_CVEs.txt index 4922ecf..b328c22 100644 --- a/data/6.2/6.2_CVEs.txt +++ b/data/6.2/6.2_CVEs.txt
@@ -61,7 +61,9 @@ CVE-2022-27672: Fixed with 6.2 CVE-2022-2961: Fix unknown CVE-2022-3238: Fix unknown +CVE-2022-3533: Fix unknown CVE-2022-3544: Fix unknown +CVE-2022-3606: Fix unknown CVE-2022-36402: Fix unknown CVE-2022-3642: Fix unknown CVE-2022-38096: Fix unknown @@ -101,6 +103,7 @@ CVE-2023-1990: Fixed with 6.2.8 CVE-2023-1998: Fixed with 6.2.3 CVE-2023-2002: Fixed with 6.2.14 +CVE-2023-20593: Fix not seen in stream CVE-2023-20941: Fix unknown CVE-2023-2124: Fix not seen in stream CVE-2023-21255: Fix not seen in stream @@ -128,6 +131,7 @@ CVE-2023-31083: Fix unknown CVE-2023-31084: Fix not seen in stream CVE-2023-31085: Fix unknown +CVE-2023-3117: Fix not seen in stream CVE-2023-31248: Fix not seen in stream CVE-2023-3141: Fix not seen in stream CVE-2023-31436: Fixed with 6.2.13 @@ -156,7 +160,6 @@ CVE-2023-34255: Fix not seen in stream CVE-2023-34256: Fixed with 6.2.16 CVE-2023-35001: Fix not seen in stream -CVE-2023-35693: Fix unknown CVE-2023-35788: Fix not seen in stream CVE-2023-35823: Fixed with 6.2.15 CVE-2023-35824: Fixed with 6.2.15 @@ -164,9 +167,15 @@ CVE-2023-35827: Fix unknown CVE-2023-35828: Fixed with 6.2.15 CVE-2023-35829: Fixed with 6.2.15 +CVE-2023-3609: Fix not seen in stream +CVE-2023-3610: Fix not seen in stream +CVE-2023-3611: Fix not seen in stream CVE-2023-3640: Fix unknown CVE-2023-37453: Fix unknown CVE-2023-37454: Fix unknown +CVE-2023-3772: Fix unknown +CVE-2023-3773: Fix unknown +CVE-2023-3776: Fix not seen in stream CVE-2023-38409: Fixed with 6.2.12 CVE-2023-38426: Fix not seen in stream CVE-2023-38427: Fix not seen in stream @@ -175,3 +184,4 @@ CVE-2023-38430: Fix not seen in stream CVE-2023-38431: Fix not seen in stream CVE-2023-38432: Fix not seen in stream +CVE-2023-3863: Fix not seen in stream
diff --git a/data/6.2/6.2_security.txt b/data/6.2/6.2_security.txt index 6c78f2a..f63bdef 100644 --- a/data/6.2/6.2_security.txt +++ b/data/6.2/6.2_security.txt
@@ -148,7 +148,9 @@ CVE-2022-26878: (unk) CVE-2022-2961: (unk) CVE-2022-3238: (unk) + CVE-2022-3533: (unk) CVE-2022-3544: (unk) + CVE-2022-3606: (unk) CVE-2022-36402: (unk) CVE-2022-3642: (unk) CVE-2022-38096: (unk) @@ -168,6 +170,7 @@ CVE-2023-1193: (unk) CVE-2023-1194: (unk) CVE-2023-1206: (unk) + CVE-2023-20593: (unk) x86/cpu/amd: Add a Zenbleed fix CVE-2023-20941: (unk) CVE-2023-2124: (unk) xfs: verify buffer contents when we skip log replay CVE-2023-21255: (unk) binder: fix UAF caused by faulty buffer cleanup @@ -181,6 +184,7 @@ CVE-2023-31083: (unk) CVE-2023-31084: (unk) media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() CVE-2023-31085: (unk) + CVE-2023-3117: (unk) netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE CVE-2023-31248: (unk) netfilter: nf_tables: do not ignore genmask when looking up chain by id CVE-2023-3141: (unk) memstick: r592: Fix UAF bug in r592_remove due to race condition CVE-2023-3212: (unk) gfs2: Don't deref jdesc in evict @@ -190,12 +194,17 @@ CVE-2023-3397: (unk) CVE-2023-34255: (unk) xfs: verify buffer contents when we skip log replay CVE-2023-35001: (unk) netfilter: nf_tables: prevent OOB access in nft_byteorder_eval - CVE-2023-35693: (unk) CVE-2023-35788: (unk) net/sched: flower: fix possible OOB write in fl_set_geneve_opt() CVE-2023-35827: (unk) + CVE-2023-3609: (unk) net/sched: cls_u32: Fix reference counter leak leading to overflow + CVE-2023-3610: (unk) netfilter: nf_tables: fix chain binding transaction logic + CVE-2023-3611: (unk) net/sched: sch_qfq: account for stab overhead in qfq_enqueue CVE-2023-3640: (unk) CVE-2023-37453: (unk) CVE-2023-37454: (unk) + CVE-2023-3772: (unk) + CVE-2023-3773: (unk) + CVE-2023-3776: (unk) net/sched: cls_fw: Fix improper refcount update leads to use-after-free CVE-2023-38426: (unk) ksmbd: fix global-out-of-bounds in smb2_find_context_vals CVE-2023-38427: (unk) ksmbd: fix out-of-bound read in deassemble_neg_contexts() CVE-2023-38428: (unk) ksmbd: fix wrong UserName check in session_user @@ -203,3 +212,4 @@ CVE-2023-38430: (unk) ksmbd: validate smb request protocol id CVE-2023-38431: (unk) ksmbd: check the validation of pdu_size in ksmbd_conn_handler_loop CVE-2023-38432: (unk) ksmbd: validate command payload size + CVE-2023-3863: (unk) net: nfc: Fix use-after-free caused by nfc_llcp_find_local
diff --git a/data/6.3/6.3_CVEs.txt b/data/6.3/6.3_CVEs.txt index 5577f8f..aa1f903 100644 --- a/data/6.3/6.3_CVEs.txt +++ b/data/6.3/6.3_CVEs.txt
@@ -60,7 +60,9 @@ CVE-2022-26878: Fix unknown CVE-2022-2961: Fix unknown CVE-2022-3238: Fix unknown +CVE-2022-3533: Fix unknown CVE-2022-3544: Fix unknown +CVE-2022-3606: Fix unknown CVE-2022-36402: Fix unknown CVE-2022-3642: Fix unknown CVE-2022-38096: Fix unknown @@ -82,6 +84,7 @@ CVE-2023-1206: Fix unknown CVE-2023-1380: Fixed with 6.3.1 CVE-2023-2002: Fixed with 6.3.1 +CVE-2023-20593: Fix not seen in stream CVE-2023-20941: Fix unknown CVE-2023-2124: Fixed with 6.3.7 CVE-2023-21255: Fixed with 6.3.5 @@ -99,6 +102,7 @@ CVE-2023-31083: Fix unknown CVE-2023-31084: Fix not seen in stream CVE-2023-31085: Fix unknown +CVE-2023-3117: Fixed with 6.3.9 CVE-2023-31248: Fix not seen in stream CVE-2023-3141: Fixed with 6.3.4 CVE-2023-31436: Fixed with 6.3 @@ -122,7 +126,6 @@ CVE-2023-34255: Fixed with 6.3.7 CVE-2023-34256: Fixed with 6.3.3 CVE-2023-35001: Fix not seen in stream -CVE-2023-35693: Fix unknown CVE-2023-35788: Fixed with 6.3.7 CVE-2023-35823: Fixed with 6.3.2 CVE-2023-35824: Fixed with 6.3.2 @@ -130,9 +133,15 @@ CVE-2023-35827: Fix unknown CVE-2023-35828: Fixed with 6.3.2 CVE-2023-35829: Fixed with 6.3.2 +CVE-2023-3609: Fixed with 6.3.9 +CVE-2023-3610: Fixed with 6.3.10 +CVE-2023-3611: Fix not seen in stream CVE-2023-3640: Fix unknown CVE-2023-37453: Fix unknown CVE-2023-37454: Fix unknown +CVE-2023-3772: Fix unknown +CVE-2023-3773: Fix unknown +CVE-2023-3776: Fix not seen in stream CVE-2023-38426: Fixed with 6.3.4 CVE-2023-38427: Fixed with 6.3.8 CVE-2023-38428: Fixed with 6.3.4 @@ -140,3 +149,4 @@ CVE-2023-38430: Fixed with 6.3.9 CVE-2023-38431: Fixed with 6.3.8 CVE-2023-38432: Fixed with 6.3.10 +CVE-2023-3863: Fixed with 6.3.13
diff --git a/data/6.3/6.3_security.txt b/data/6.3/6.3_security.txt index 1980a0d..078c4cc 100644 --- a/data/6.3/6.3_security.txt +++ b/data/6.3/6.3_security.txt
@@ -58,15 +58,21 @@ CVE-2023-38431: e9cb7be2fcbaee9e808b729e92948d38d52e5add ksmbd: check the validation of pdu_size in ksmbd_conn_handler_loop CVEs fixed in 6.3.9: + CVE-2023-3117: bdace3b1a51887211d3e49417a18fdbd315a313b netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE CVE-2023-3390: bdace3b1a51887211d3e49417a18fdbd315a313b netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE + CVE-2023-3609: 4efd555a43dc24f3342bcc036522c430f5869e6f net/sched: cls_u32: Fix reference counter leak leading to overflow CVE-2023-38430: 75e7d81679ef7995422adc84ef597fded99c24a6 ksmbd: validate smb request protocol id CVEs fixed in 6.3.10: + CVE-2023-3610: a1547f81341f14b1b355df04218152e8b5d4b264 netfilter: nf_tables: fix chain binding transaction logic CVE-2023-38432: 768caf4019f0391c0b6452afe34cea1704133f7b ksmbd: validate command payload size CVEs fixed in 6.3.11: CVE-2023-3269: bce721f87edd54379120ffb85111357923f4f326 mm: introduce new 'lock_mm_and_find_vma()' page fault helper +CVEs fixed in 6.3.13: + CVE-2023-3863: b3ad46e155a6d91b36c6e892019a43e3ef3c696d net: nfc: Fix use-after-free caused by nfc_llcp_find_local + Outstanding CVEs: CVE-2005-3660: (unk) CVE-2007-3719: (unk) @@ -130,7 +136,9 @@ CVE-2022-26878: (unk) CVE-2022-2961: (unk) CVE-2022-3238: (unk) + CVE-2022-3533: (unk) CVE-2022-3544: (unk) + CVE-2022-3606: (unk) CVE-2022-36402: (unk) CVE-2022-3642: (unk) CVE-2022-38096: (unk) @@ -148,6 +156,7 @@ CVE-2023-1193: (unk) CVE-2023-1194: (unk) CVE-2023-1206: (unk) + CVE-2023-20593: (unk) x86/cpu/amd: Add a Zenbleed fix CVE-2023-20941: (unk) CVE-2023-23039: (unk) CVE-2023-26242: (unk) @@ -161,8 +170,11 @@ CVE-2023-33250: (unk) CVE-2023-3397: (unk) CVE-2023-35001: (unk) netfilter: nf_tables: prevent OOB access in nft_byteorder_eval - CVE-2023-35693: (unk) CVE-2023-35827: (unk) + CVE-2023-3611: (unk) net/sched: sch_qfq: account for stab overhead in qfq_enqueue CVE-2023-3640: (unk) CVE-2023-37453: (unk) CVE-2023-37454: (unk) + CVE-2023-3772: (unk) + CVE-2023-3773: (unk) + CVE-2023-3776: (unk) net/sched: cls_fw: Fix improper refcount update leads to use-after-free
diff --git a/data/6.4/6.4_CVEs.txt b/data/6.4/6.4_CVEs.txt new file mode 100644 index 0000000..afaa048 --- /dev/null +++ b/data/6.4/6.4_CVEs.txt
@@ -0,0 +1,107 @@ +CVE-2005-3660: Fix unknown +CVE-2007-3719: Fix unknown +CVE-2008-2544: Fix unknown +CVE-2008-4609: Fix unknown +CVE-2010-4563: Fix unknown +CVE-2010-5321: Fix unknown +CVE-2011-4916: Fix unknown +CVE-2011-4917: Fix unknown +CVE-2012-4542: Fix unknown +CVE-2013-7445: Fix unknown +CVE-2015-2877: Fix unknown +CVE-2016-8660: Fix unknown +CVE-2017-13693: Fix unknown +CVE-2017-13694: Fix unknown +CVE-2018-1121: Fix unknown +CVE-2018-12928: Fix unknown +CVE-2018-12929: Fix unknown +CVE-2018-12930: Fix unknown +CVE-2018-12931: Fix unknown +CVE-2018-17977: Fix unknown +CVE-2019-12456: Fix unknown +CVE-2019-15239: Fix not seen in stream +CVE-2019-15290: Fix unknown +CVE-2019-15902: Fix not seen in stream +CVE-2019-16089: Fix unknown +CVE-2019-19378: Fix unknown +CVE-2019-19814: Fix unknown +CVE-2019-20794: Fix unknown +CVE-2020-0347: Fix unknown +CVE-2020-10708: Fix unknown +CVE-2020-11725: Fix unknown +CVE-2020-14304: Fix unknown +CVE-2020-15802: Fix unknown +CVE-2020-24502: Fix unknown +CVE-2020-24503: Fix unknown +CVE-2020-25220: Fix not seen in stream +CVE-2020-26140: Fix unknown +CVE-2020-26142: Fix unknown +CVE-2020-26143: Fix unknown +CVE-2020-26556: Fix unknown +CVE-2020-26557: Fix unknown +CVE-2020-26559: Fix unknown +CVE-2020-26560: Fix unknown +CVE-2020-35501: Fix unknown +CVE-2021-0399: Fix unknown +CVE-2021-26934: Fix unknown +CVE-2021-3542: Fix unknown +CVE-2021-3714: Fix unknown +CVE-2021-3847: Fix unknown +CVE-2021-3864: Fix unknown +CVE-2021-3892: Fix unknown +CVE-2021-39800: Fix unknown +CVE-2021-39801: Fix unknown +CVE-2022-0400: Fix unknown +CVE-2022-1116: Fix unknown +CVE-2022-1247: Fix unknown +CVE-2022-2209: Fix unknown +CVE-2022-23825: Fix unknown +CVE-2022-25265: Fix unknown +CVE-2022-26878: Fix unknown +CVE-2022-2961: Fix unknown +CVE-2022-3238: Fix unknown +CVE-2022-3533: Fix unknown +CVE-2022-3544: Fix unknown +CVE-2022-3606: Fix unknown +CVE-2022-36402: Fix unknown +CVE-2022-3642: Fix unknown +CVE-2022-38096: Fix unknown +CVE-2022-41848: Fix unknown +CVE-2022-44032: Fix unknown +CVE-2022-44033: Fix unknown +CVE-2022-44034: Fix unknown +CVE-2022-4543: Fix unknown +CVE-2022-45884: Fix unknown +CVE-2022-45885: Fix unknown +CVE-2022-45886: Fix unknown +CVE-2022-45887: Fix unknown +CVE-2022-45919: Fix unknown +CVE-2023-0160: Fix unknown +CVE-2023-1193: Fix unknown +CVE-2023-1194: Fix unknown +CVE-2023-1206: Fix unknown +CVE-2023-20593: Fixed with 6.4.6 +CVE-2023-20941: Fix unknown +CVE-2023-23039: Fix unknown +CVE-2023-26242: Fix unknown +CVE-2023-2898: Fixed with 6.4.4 +CVE-2023-31081: Fix unknown +CVE-2023-31082: Fix unknown +CVE-2023-31083: Fix unknown +CVE-2023-31085: Fix unknown +CVE-2023-31248: Fixed with 6.4.4 +CVE-2023-3269: Fixed with 6.4.1 +CVE-2023-33250: Fix unknown +CVE-2023-3397: Fix unknown +CVE-2023-35001: Fixed with 6.4.4 +CVE-2023-35827: Fix unknown +CVE-2023-3610: Fixed with 6.4 +CVE-2023-3611: Fixed with 6.4.5 +CVE-2023-3640: Fix unknown +CVE-2023-37453: Fix unknown +CVE-2023-37454: Fix unknown +CVE-2023-3772: Fix unknown +CVE-2023-3773: Fix unknown +CVE-2023-3776: Fixed with 6.4.5 +CVE-2023-38432: Fixed with 6.4 +CVE-2023-3863: Fixed with 6.4.4
diff --git a/data/6.4/6.4_security.txt b/data/6.4/6.4_security.txt new file mode 100644 index 0000000..d8b7482 --- /dev/null +++ b/data/6.4/6.4_security.txt
@@ -0,0 +1,119 @@ + +CVEs fixed in 6.4: + CVE-2023-3610: 4bedf9eee016286c835e3d8fa981ddece5338795 netfilter: nf_tables: fix chain binding transaction logic + CVE-2023-38432: 2b9b8f3b68edb3d67d79962f02e26dbb5ae3808d ksmbd: validate command payload size + +CVEs fixed in 6.4.1: + CVE-2023-3269: b11fa3d22ac0fbc0bfaa740b3b3669d43ec48503 mm: introduce new 'lock_mm_and_find_vma()' page fault helper + +CVEs fixed in 6.4.4: + CVE-2023-2898: 5619e9aabbd2b369cde2114ad6f55f6eb3e0b5be f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io() + CVE-2023-31248: 5e5e967e8505fbdabfb6497367ec1b808cadc356 netfilter: nf_tables: do not ignore genmask when looking up chain by id + CVE-2023-35001: b79c09c2bf2d7643902a6ef26152de602c5c5e4b netfilter: nf_tables: prevent OOB access in nft_byteorder_eval + CVE-2023-3863: e5207c1d69b1a9707615ab6ff9376e59fc096815 net: nfc: Fix use-after-free caused by nfc_llcp_find_local + +CVEs fixed in 6.4.5: + CVE-2023-3611: bd2333fa86dc520823e8c317980b29ba91ee6b87 net/sched: sch_qfq: account for stab overhead in qfq_enqueue + CVE-2023-3776: 0a2e3f49febda459252f58cec2d659623d582800 net/sched: cls_fw: Fix improper refcount update leads to use-after-free + +CVEs fixed in 6.4.6: + CVE-2023-20593: 9b8bb5c4e25678af895dc9dd4a1e82b2f948cacc x86/cpu/amd: Add a Zenbleed fix + +Outstanding CVEs: + CVE-2005-3660: (unk) + CVE-2007-3719: (unk) + CVE-2008-2544: (unk) + CVE-2008-4609: (unk) + CVE-2010-4563: (unk) + CVE-2010-5321: (unk) + CVE-2011-4916: (unk) + CVE-2011-4917: (unk) + CVE-2012-4542: (unk) + CVE-2013-7445: (unk) + CVE-2015-2877: (unk) + CVE-2016-8660: (unk) + CVE-2017-13693: (unk) + CVE-2017-13694: (unk) + CVE-2018-1121: (unk) + CVE-2018-12928: (unk) + CVE-2018-12929: (unk) + CVE-2018-12930: (unk) + CVE-2018-12931: (unk) + CVE-2018-17977: (unk) + CVE-2019-12456: (unk) + CVE-2019-15239: (unk) unknown + CVE-2019-15290: (unk) + CVE-2019-15902: (unk) unknown + CVE-2019-16089: (unk) + CVE-2019-19378: (unk) + CVE-2019-19814: (unk) + CVE-2019-20794: (unk) + CVE-2020-0347: (unk) + CVE-2020-10708: (unk) + CVE-2020-11725: (unk) + CVE-2020-14304: (unk) + CVE-2020-15802: (unk) + CVE-2020-24502: (unk) + CVE-2020-24503: (unk) + CVE-2020-25220: (unk) + CVE-2020-26140: (unk) + CVE-2020-26142: (unk) + CVE-2020-26143: (unk) + CVE-2020-26556: (unk) + CVE-2020-26557: (unk) + CVE-2020-26559: (unk) + CVE-2020-26560: (unk) + CVE-2020-35501: (unk) + CVE-2021-0399: (unk) + CVE-2021-26934: (unk) + CVE-2021-3542: (unk) + CVE-2021-3714: (unk) + CVE-2021-3847: (unk) + CVE-2021-3864: (unk) + CVE-2021-3892: (unk) + CVE-2021-39800: (unk) + CVE-2021-39801: (unk) + CVE-2022-0400: (unk) + CVE-2022-1116: (unk) + CVE-2022-1247: (unk) + CVE-2022-2209: (unk) + CVE-2022-23825: (unk) + CVE-2022-25265: (unk) + CVE-2022-26878: (unk) + CVE-2022-2961: (unk) + CVE-2022-3238: (unk) + CVE-2022-3533: (unk) + CVE-2022-3544: (unk) + CVE-2022-3606: (unk) + CVE-2022-36402: (unk) + CVE-2022-3642: (unk) + CVE-2022-38096: (unk) + CVE-2022-41848: (unk) + CVE-2022-44032: (unk) + CVE-2022-44033: (unk) + CVE-2022-44034: (unk) + CVE-2022-4543: (unk) + CVE-2022-45884: (unk) + CVE-2022-45885: (unk) + CVE-2022-45886: (unk) + CVE-2022-45887: (unk) + CVE-2022-45919: (unk) + CVE-2023-0160: (unk) + CVE-2023-1193: (unk) + CVE-2023-1194: (unk) + CVE-2023-1206: (unk) + CVE-2023-20941: (unk) + CVE-2023-23039: (unk) + CVE-2023-26242: (unk) + CVE-2023-31081: (unk) + CVE-2023-31082: (unk) + CVE-2023-31083: (unk) + CVE-2023-31085: (unk) + CVE-2023-33250: (unk) + CVE-2023-3397: (unk) + CVE-2023-35827: (unk) + CVE-2023-3640: (unk) + CVE-2023-37453: (unk) + CVE-2023-37454: (unk) + CVE-2023-3772: (unk) + CVE-2023-3773: (unk)
diff --git a/data/CVEs.txt b/data/CVEs.txt index 156ece3..ae2498e 100644 --- a/data/CVEs.txt +++ b/data/CVEs.txt
@@ -2172,6 +2172,7 @@ CVE-2022-3526: 427f0c8c194b22edcafef1b0a42995ddc5c2227d - e16b859872b87650bb55b12cca5a5fcdc49c1442 (v5.13-rc1 to v5.18-rc3) CVE-2022-3531: 5b6c7e5c44349b29c614e1b61f80c6849fc72ccf - 6d2e21dc4db3933db65293552ecc1ede26febeca (v5.19-rc1 to v6.2-rc1) CVE-2022-3532: 1642a3945e223a922312fab2401ecdf58b3825b9 - 6e8280b958c5d7edc514cf347a800b23b7732b2b (v6.1-rc1 to v6.2-rc1) +CVE-2022-3533: (n/a) - (n/a) (unk to unk) CVE-2022-3534: (n/a) - 93c660ca40b5d2f7c1b1626e955a8e9fa30e0749 (unk to v6.2-rc1) CVE-2022-3535: 21da57a23125a072e6ab2bb6c9bea5e02e01d1f5 - 0152dfee235e87660f52a117fc9f70dc55956bb4 (v4.19-rc1 to v6.1-rc1) CVE-2022-3541: fd3040b9394c58bcedb83554bcf1a073021d6b36 - 12aece8b01507a2d357a1861f470e83621fbb6f2 (v5.19-rc1 to v6.1-rc1) @@ -2187,6 +2188,7 @@ CVE-2022-3586: e13e02a3c68d899169c78d9a18689bd73491d59a - 9efd23297cca530bb35e1848665805d3fcdd7889 (v2.6.39-rc1 to v6.0-rc5) CVE-2022-3594: 40a82917b1d3a8aecedee6b64949795b75359731 - 93e2be344a7db169b7119de21ac1bf253b8c6907 (v3.12-rc1 to v6.1-rc1) CVE-2022-3595: a4e430c8c8ba96be8c6ec4f2eb108bb8bcbee069 - b854b4ee66437e6e1622fda90529c814978cb4ca (CVE Caused by Backporting) +CVE-2022-3606: (n/a) - (n/a) (unk to unk) CVE-2022-36123: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 - 38fa5479b41376dc9d7f57e71c83514285a25ca0 (v2.6.12-rc2 to v5.19-rc6) CVE-2022-3619: 4d7ea8ee90e42fc75995f6fb24032d3233314528 - 7c9524d929648935bac2bbb4c20437df8f9c3f42 (v5.12-rc1-dontuse to v6.1-rc4) CVE-2022-3621: 05fe58fdc10df9ebea04c0eaed57adc47af5c184 - 21a87d88c2253350e115029f14fe2a10a7e6c856 (v2.6.30-rc1 to v6.1-rc1) @@ -2281,7 +2283,7 @@ CVE-2022-48423: 12dad495eaab95e0bb784c43869073617c513ea4 - 54e45702b648b7c0000e90b3e9b890e367e16ea8 (v5.15-rc1 to v6.2-rc1) CVE-2022-48424: 12dad495eaab95e0bb784c43869073617c513ea4 - 4f1dc7d9756e66f3f876839ea174df2e656b7f79 (v5.15-rc1 to v6.2-rc1) CVE-2022-48425: 12dad495eaab95e0bb784c43869073617c513ea4 - 98bea253aa28ad8be2ce565a9ca21beb4a9419e5 (v5.15-rc1 to v6.4-rc1) -CVE-2022-48502: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 - 0e8235d28f3a0e9eda9f02ff67ee566d5f42b66b (v2.6.12-rc2 to v6.2-rc1) +CVE-2022-48502: f7464060f7ab9a2424428008f0ee9f1e267e410f - 0e8235d28f3a0e9eda9f02ff67ee566d5f42b66b (v5.15-rc1 to v6.2-rc1) CVE-2023-0030: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 - 729eba3355674f2d9524629b73683ba1d1cd3f10 (v2.6.12-rc2 to v5.0-rc1) CVE-2023-0045: 9137bb27e60e554dab694eafa4cca241fa3a694f - a664ec9158eeddd75121d39c9a0758016097fa96 (v4.20-rc5 to v6.2-rc3) CVE-2023-0047: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 - 60e2793d440a3ec95abb5d6d4fc034a4b480472d (v2.6.12-rc2 to v5.16-rc1) @@ -2343,6 +2345,7 @@ CVE-2023-2007: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 - b04e75a4a8a81887386a0d2dbf605a48e779d2a0 (v2.6.12-rc2 to v6.0-rc1) CVE-2023-2008: 7b26e4e2119d0c5ede1282b22ce2af22835ff4b5 - 05b252cccb2e5c3f56119d25de684b4f810ba40a (v4.20-rc1 to v5.19-rc4) CVE-2023-2019: 0ae3eb7b4611207e140e9772398b9f88b72d6839 - 180a6a3ee60a7cb69ed1232388460644f6a21f00 (v5.12-rc1-dontuse to v6.0-rc1) +CVE-2023-20593: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 - 522b1d69219d8f083173819fde04f994aa051a98 (v2.6.12-rc2 to unk) CVE-2023-20928: dd2283f2605e3b3e9c61bcae844b34f2afa4813f - a43cfc87caaf46710c8027a8c23b8a55f1078f19 (v4.20-rc1 to v6.0-rc1) CVE-2023-20937: Vendor Specific CVE-2023-20938: 09184ae9b5756cc469db6fd1d1cfdcffbf627c2d - ef38de9217a04c9077629a24652689d8fdb4c6c6 (v5.17-rc1 to v5.18-rc5) @@ -2413,6 +2416,7 @@ CVE-2023-31084: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 - b8c75e4a1b325ea0a9433fa8834be97b5836b946 (v2.6.12-rc2 to v6.4-rc3) CVE-2023-31085: (n/a) - (n/a) (unk to unk) CVE-2023-3111: 5d4f98a28c7d334091c1b7744f48a1acdd2a4ae0 - 85f02d6c856b9f3a0acf5219de6e32f58b9778eb (v2.6.31-rc1 to v6.0-rc2) +CVE-2023-3117: 958bee14d0718ca7a5002c0f48a099d1d345812a - 1240eb93f0616b21c675416516ff3d74798fdc97 (v3.16-rc1 to v6.4-rc7) CVE-2023-31248: 837830a4b439bfeb86c70b0115c280377c84714b - 515ad530795c118f012539ed76d02bacfd426d89 (v5.9-rc1 to v6.5-rc2) CVE-2023-3141: 9263412501022fecef844907129ee2513b5a89de - 63264422785021704c39b38f65a78ab9e4a186d7 (v2.6.39-rc1 to v6.4-rc1) CVE-2023-31436: 3015f3d2a3cd9614294025849d3ed89fd2f3a7f5 - 3037933448f60f9acb705997eae62013ecb81e0d (v3.7-rc5 to v6.3) @@ -2421,13 +2425,13 @@ CVE-2023-3212: 16615be18cadf53ee6f8a4f0bdd647f0753421b1 - 504a10d9e46bc37b23d0a1ae2f28973c8516e636 (v2.6.24-rc1 to v6.4-rc2) CVE-2023-3220: 25fdd5933e4c0f5fe2ea5cd59994f8ac5fbe90ef - 93340e10b9c5fc86730d149636e0aa8b47bb5a34 (v4.19-rc1 to v6.3-rc1) CVE-2023-32233: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 - c1592a89942e9678f7d9c8030efa777c0d57edab (v2.6.12-rc2 to v6.4-rc1) -CVE-2023-32247: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 - ea174a91893956450510945a0c5d1a10b5323656 (v2.6.12-rc2 to v6.4-rc1) -CVE-2023-32248: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 - 3ac00a2ab69b34189942afa9e862d5170cdcb018 (v2.6.12-rc2 to v6.4-rc1) -CVE-2023-32250: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 - f5c779b7ddbda30866cf2a27c63e34158f858c73 (v2.6.12-rc2 to v6.4-rc1) -CVE-2023-32252: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 - f5c779b7ddbda30866cf2a27c63e34158f858c73 (v2.6.12-rc2 to v6.4-rc1) -CVE-2023-32254: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 - 30210947a343b6b3ca13adc9bfc88e1543e16dd5 (v2.6.12-rc2 to v6.4-rc1) -CVE-2023-32257: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 - f5c779b7ddbda30866cf2a27c63e34158f858c73 (v2.6.12-rc2 to v6.4-rc1) -CVE-2023-32258: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 - abcc506a9a71976a8b4c9bf3ee6efd13229c1e19 (v2.6.12-rc2 to v6.4-rc1) +CVE-2023-32247: 0626e6641f6b467447c81dd7678a69c66f7746cf - ea174a91893956450510945a0c5d1a10b5323656 (v5.15-rc1 to v6.4-rc1) +CVE-2023-32248: 0626e6641f6b467447c81dd7678a69c66f7746cf - 3ac00a2ab69b34189942afa9e862d5170cdcb018 (v5.15-rc1 to v6.4-rc1) +CVE-2023-32250: 0626e6641f6b467447c81dd7678a69c66f7746cf - f5c779b7ddbda30866cf2a27c63e34158f858c73 (v5.15-rc1 to v6.4-rc1) +CVE-2023-32252: 0626e6641f6b467447c81dd7678a69c66f7746cf - f5c779b7ddbda30866cf2a27c63e34158f858c73 (v5.15-rc1 to v6.4-rc1) +CVE-2023-32254: 0626e6641f6b467447c81dd7678a69c66f7746cf - 30210947a343b6b3ca13adc9bfc88e1543e16dd5 (v5.15-rc1 to v6.4-rc1) +CVE-2023-32257: 0626e6641f6b467447c81dd7678a69c66f7746cf - f5c779b7ddbda30866cf2a27c63e34158f858c73 (v5.15-rc1 to v6.4-rc1) +CVE-2023-32258: 0626e6641f6b467447c81dd7678a69c66f7746cf - abcc506a9a71976a8b4c9bf3ee6efd13229c1e19 (v5.15-rc1 to v6.4-rc1) CVE-2023-32269: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 - 611792920925fb088ddccbe2783c7f92fdfb6b64 (v2.6.12-rc2 to v6.2-rc7) CVE-2023-3268: 8d62fdebdaf9b866c7e236a8f5cfe90e6dba5773 - 43ec16f1450f4936025a9bdf1a273affdb9732c1 (v2.6.22-rc7 to v6.4-rc1) CVE-2023-3269: 54a611b605901c7d5d05b6b8f5d04a6ceb0962aa - c2508ec5a58db67093f4fb8bf89a9a7c53a109e9 (v6.1-rc1 to v6.5-rc1) @@ -2451,7 +2455,7 @@ CVE-2023-3439: 583be982d93479ea3d85091b0fd0b01201ede87d - b561275d633bcd8e0e8055ab86f1a13df75a0269 (v5.15-rc1 to v5.18-rc5) CVE-2023-35001: 96518518cc417bb0a8c80b9fb736202e28acdf96 - caf3ef7468f7534771b5c44cd8dbd6f7f87c2cbd (v3.13-rc1 to v6.5-rc2) CVE-2023-3567: ac751efa6a0d70f2c9daef5c7e3a92270f5c2dff - 226fae124b2dac217ea5436060d623ff3385bc34 (v2.6.38-rc3 to v6.2-rc7) -CVE-2023-35693: (n/a) - (n/a) (unk to unk) +CVE-2023-35693: Vendor Specific CVE-2023-35788: 0a6e77784f490912d81b92cfd48424541c04691e - 4d56304e5827c8cc8cc18c75343d283af7c4825c (v4.19-rc1 to v6.4-rc5) CVE-2023-35823: 1e7126b4a86ad69e870099fb6b922a3b6e29598b - 30cf57da176cca80f11df0d9b7f71581fe601389 (v4.15-rc1 to v6.4-rc1) CVE-2023-35824: 34d2f9bf189c36ef8642cf6b64e80dfb756d888f - 5abda7a16698d4d1f47af1168d8fa2c640116b4a (v2.6.34-rc1 to v6.4-rc1) @@ -2459,14 +2463,22 @@ CVE-2023-35827: (n/a) - (n/a) (unk to unk) CVE-2023-35828: 39facfa01c9fc64f90233d1734882f0a0cafe36a - 2b947f8769be8b8181dc795fd292d3e7120f5204 (v4.19-rc1 to v6.4-rc1) CVE-2023-35829: cd33c830448baf7b1e94da72eca069e3e1d050c9 - 3228cec23b8b29215e18090c6ba635840190993d (v5.8-rc1 to v6.4-rc1) +CVE-2023-3609: 705c7091262d02b09eb686c24491de61bf42fdb2 - 04c55383fa5689357bcdd2c8036725a55ed632bc (v4.14-rc1 to v6.4-rc7) +CVE-2023-3610: d0e2c7de92c7f2b3d355ad76b0bb9fc43d1beb87 - 4bedf9eee016286c835e3d8fa981ddece5338795 (v5.9-rc1 to v6.4) +CVE-2023-3611: 462dbc9101acd38e92eda93c0726857517a24bbd - 3e337087c3b5805fe0b8a46ba622a962880b5d64 (v3.8-rc1 to v6.5-rc2) CVE-2023-3640: (n/a) - (n/a) (unk to unk) CVE-2023-37453: (n/a) - (n/a) (unk to unk) CVE-2023-37454: (n/a) - (n/a) (unk to unk) +CVE-2023-3772: (n/a) - (n/a) (unk to unk) +CVE-2023-3773: (n/a) - (n/a) (unk to unk) +CVE-2023-3776: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 - 0323bce598eea038714f941ce2b22541c46d488f (v2.6.12-rc2 to v6.5-rc2) +CVE-2023-3812: (n/a) - 363a5328f4b0517e59572118ccfb7c626d81dca9 (unk to v6.1-rc4) CVE-2023-38409: d443d93864726ad68c0a741d1e7b03934a9af143 - fffb0b52d5258554c645c966c6cbef7de50b851d (v5.19-rc1 to v6.3-rc7) -CVE-2023-38426: (n/a) - 02f76c401d17e409ed45bf7887148fcc22c93c85 (unk to v6.4-rc3) -CVE-2023-38427: (n/a) - f1a411873c85b642f13b01f21b534c2bab81fc1b (unk to v6.4-rc6) -CVE-2023-38428: (n/a) - f0a96d1aafd8964e1f9955c830a3e5cb3c60a90f (unk to v6.4-rc3) -CVE-2023-38429: (n/a) - 443d61d1fa9faa60ef925513d83742902390100f (unk to v6.4-rc3) -CVE-2023-38430: (n/a) - 1c1bcf2d3ea061613119b534f57507c377df20f9 (unk to v6.4-rc6) -CVE-2023-38431: (n/a) - 368ba06881c395f1c9a7ba22203cf8d78b4addc0 (unk to v6.4-rc6) -CVE-2023-38432: (n/a) - 2b9b8f3b68edb3d67d79962f02e26dbb5ae3808d (unk to v6.4) +CVE-2023-38426: 0626e6641f6b467447c81dd7678a69c66f7746cf - 02f76c401d17e409ed45bf7887148fcc22c93c85 (v5.15-rc1 to v6.4-rc3) +CVE-2023-38427: 0626e6641f6b467447c81dd7678a69c66f7746cf - f1a411873c85b642f13b01f21b534c2bab81fc1b (v5.15-rc1 to v6.4-rc6) +CVE-2023-38428: 0626e6641f6b467447c81dd7678a69c66f7746cf - f0a96d1aafd8964e1f9955c830a3e5cb3c60a90f (v5.15-rc1 to v6.4-rc3) +CVE-2023-38429: 0626e6641f6b467447c81dd7678a69c66f7746cf - 443d61d1fa9faa60ef925513d83742902390100f (v5.15-rc1 to v6.4-rc3) +CVE-2023-38430: 0626e6641f6b467447c81dd7678a69c66f7746cf - 1c1bcf2d3ea061613119b534f57507c377df20f9 (v5.15-rc1 to v6.4-rc6) +CVE-2023-38431: 0626e6641f6b467447c81dd7678a69c66f7746cf - 368ba06881c395f1c9a7ba22203cf8d78b4addc0 (v5.15-rc1 to v6.4-rc6) +CVE-2023-38432: 0626e6641f6b467447c81dd7678a69c66f7746cf - 2b9b8f3b68edb3d67d79962f02e26dbb5ae3808d (v5.15-rc1 to v6.4) +CVE-2023-3863: (n/a) - 6709d4b7bc2e079241fdef15d1160581c5261c10 (unk to v6.5-rc1)
diff --git a/data/cmts.json b/data/cmts.json index 2b35ea0..cfb27e8 100644 --- a/data/cmts.json +++ b/data/cmts.json
@@ -30,6 +30,7 @@ "030b533c4fd4d2ec3402363323de4bb2983c9cee": "v4.9-rc1", "030e2c78d3a91dd0d27fef37e91950dde333eba1": "v4.5-rc1", "032146cda85566abcd1c4884d9d23e4e30a07e9a": "v5.15-rc7", + "0323bce598eea038714f941ce2b22541c46d488f": "v6.5-rc2", "0336e04a6520bdaefdb0769d2a70084fa52e81ed": "v5.2-rc1", "034ae28b56f13dc1f2beb3fa294b455f57ede9cb": "v6.2-rc1", "034faeb9ef390d58239e1dce748143f6b35a0d9b": "v3.13-rc1", @@ -49,6 +50,7 @@ "04bf464a5dfd9ade0dda918e44366c2c61fce80b": "v4.1-rc7", "04c2a47ffb13c29778e2a14e414ad4cb5a5db4b5": "v5.17-rc3", "04c4f2ee3f68c9a4bf1653d15f1a9a435ae33f7a": "v5.12-rc8", + "04c55383fa5689357bcdd2c8036725a55ed632bc": "v6.4-rc7", "04c9b00ba83594a29813d6b1fb8fdc93a3915174": "v5.18-rc1", "04d4fbca1017c11381e7d82acea21dd741e748bc": "v3.6-rc3", "04d80663f67ccef893061b49ec8a42ff7045ae84": "v5.17-rc1", @@ -79,6 +81,7 @@ "060423bfdee3f8bc6e2c1bac97de24d5415e2bc4": "v5.3", "0614e2b73768b502fc32a75349823356d98aae2c": "v5.4-rc1", "0625b4ba1a5d4703c7fb01c497bd6c156908af00": "v4.19-rc1", + "0626e6641f6b467447c81dd7678a69c66f7746cf": "v5.15-rc1", "06615d11cc78162dfd5116efb71f29eb29502d37": "v6.3-rc4", "06b6a1cf6e776426766298d055bb3991957d90a7": "v3.6-rc1", "06bd3c36a733ac27962fea7d6f47168841376824": "v4.7-rc1", @@ -737,6 +740,7 @@ "36274ab8c596f1240c606bb514da329add2a1bcd": "v4.11-rc6", "362bca57f5d78220f8b5907b875961af9436e229": "v4.15-rc3", "362e4e49abe53e89d87455dfcd7c1bbaf08a839d": "v3.1-rc8", + "363a5328f4b0517e59572118ccfb7c626d81dca9": "v6.1-rc4", "363b02dab09b3226f3bd1420dad9c72b79a42a76": "v4.14-rc6", "364dbdf3b6c31a4a5fb7a6d479e7aafb4a7a10b6": "v2.6.38-rc1", "364f997b5cfe1db0d63a390fe7c801fa2b3115f6": "v6.1-rc1", @@ -852,6 +856,7 @@ "3e21f4af170bebf47c187c1ff8bf155583c9f3b1": "v4.12-rc2", "3e256b8f8dfa309a80b5dece388d85d9a9801a29": "v3.1-rc1", "3e30148c3d524a9c1c63ca28261bc24c457eb07a": "v2.6.13-rc1", + "3e337087c3b5805fe0b8a46ba622a962880b5d64": "v6.5-rc2", "3e493173b7841259a08c5c8e5cbe90adb349da7e": "v5.3", "3e4c56d41eef5595035872a2ec5a483f42e8917f": "v4.15-rc1", "3e4f574857eebce60bb56d7524f3f9eaa2a126d0": "v3.8-rc1", @@ -951,6 +956,7 @@ "45f6fad84cc305103b28d73482b344d7f5b76f39": "v4.4-rc4", "46233e91fa24a91bffca0680b1c55282ba601918": "v5.10-rc6", "462cdace790ac2ed6aad1b19c9c0af0143b6aab0": "v4.13-rc6", + "462dbc9101acd38e92eda93c0726857517a24bbd": "v3.8-rc1", "46612b751c4941c5c0472ddf04027e877ae5990f": "v5.1-rc1", "467fa15356acfb7b2efa38839c3e76caa4e6e0ea": "v4.3-rc1", "4683f42fde3977bdb4e8a09622788cc8b5313778": "v3.9-rc7", @@ -1023,6 +1029,7 @@ "4ba66093bdc6316cd2fe48e74a54bfc29599322f": "v4.12-rc1", "4bdab43323b459900578b200a4b8cf9713ac8fab": "v2.6.36-rc5", "4becb7ee5b3d2829ed7b9261a245a77d5b7de902": "v5.7-rc5", + "4bedf9eee016286c835e3d8fa981ddece5338795": "v6.4", "4c03b862b12f980456f9de92db6d508a4999b788": "v4.10", "4c185ce06dca14f5cea192f5a2c981ef50663f2b": "v4.1-rc1", "4c27fe4c4c84f3afd504ecff2420cc1ad420d38e": "v4.11-rc1", @@ -1379,6 +1386,7 @@ "667121ace9dbafb368618dbabcf07901c962ddac": "v4.9-rc4", "66d42ed8b25b64eb63111a2b8582c5afc8bf1105": "v5.9-rc7", "66e3531b33ee51dad17c463b4d9c9f52e341503d": "v5.17-rc8", + "6709d4b7bc2e079241fdef15d1160581c5261c10": "v6.5-rc1", "670ae9caaca467ea1bfd325cb2a5c98ba87f94ad": "v4.18-rc1", "670f928ba09b06712da34a3c44be6c8fa561fb19": "v4.15-rc1", "677e806da4d916052585301785d847c3b3e6186a": "v4.11-rc5", @@ -1515,6 +1523,7 @@ "70303420b5721c38998cf987e6b7d30cc62d4ff1": "v4.18-rc2", "704620afc70cf47abb9d6a1a57f3825d2bca49cf": "v4.20-rc6", "7053aee26a3548ebaba046ae2e52396ccf56ac6c": "v3.14-rc1", + "705c7091262d02b09eb686c24491de61bf42fdb2": "v4.14-rc1", "70789d7052239992824628db8133de08dc78e593": "v2.6.36-rc4", "70834d3070c3f3015ab5c05176d54bd4a0100546": "v3.4-rc1", "70aacfe66136809d7f080f89c492c278298719f4": "v5.12-rc2", @@ -3240,6 +3249,7 @@ "f70865db5ff35f5ed0c7e9ef63e7cca3d4947f04": "v5.13-rc1", "f70e2e06196ad4c1c762037da2f75354f6c16b81": "v2.6.35-rc1", "f71f01394f742fc4558b3f9f4c7ef4c4cf3b07c8": "v5.18-rc6", + "f7464060f7ab9a2424428008f0ee9f1e267e410f": "v5.15-rc1", "f753a68980cf4b59a80fe677619da2b1804f526d": "v6.2-rc8", "f78146b0f9230765c6315b2e14f56112513389ad": "v3.5-rc1", "f79643787e0a0762d2409b7b8334e83f22d85695": "v5.10-rc5",
diff --git a/data/kernel_cves.json b/data/kernel_cves.json index 729d319..ad2a80b 100644 --- a/data/kernel_cves.json +++ b/data/kernel_cves.json
@@ -24414,7 +24414,7 @@ "cwe": "Race Conditions", "fixes": "a8f97366452ed491d13cf1e44241bc0b5740b1f0", "last_affected_version": "4.14.3", - "last_modified": "2023-07-06", + "last_modified": "2023-07-29", "name": "Dirty COW (variant)", "nvd_text": "The Linux Kernel versions 2.6.38 through 4.14 have a problematic use of pmd_mkdirty() in the touch_pmd() function inside the THP implementation. touch_pmd() can be reached by get_user_pages(). In such case, the pmd will become dirty. This scenario breaks the new can_follow_write_pmd()'s logic - pmd can become dirty without going through a COW cycle. This bug is not as severe as the original \"Dirty cow\" because an ext4 file (or any other regular file) cannot be mapped using THP. Nevertheless, it does allow us to overwrite read-only huge pages. For example, the zero huge page and sealed shmem files can be overwritten (since their mapping can be populated using THP). Note that after the first write page-fault to the zero page, it will be replaced with a new fresh (and zeroed) thp.", "ref_urls": { @@ -76363,6 +76363,33 @@ }, "rejected": true }, + "CVE-2022-3533": { + "affected_versions": "unk to unk", + "breaks": "", + "cvss3": { + "Attack Complexity": "Low", + "Attack Vector": "Adjacent", + "Availability": "High", + "Confidentiality": "None", + "Integrity": "None", + "Privileges Required": "Low", + "Scope": "Unchanged", + "User Interaction": "None", + "raw": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "score": 5.7 + }, + "fixes": "", + "last_modified": "2023-07-29", + "nvd_text": "A vulnerability was found in Linux Kernel. It has been rated as problematic. This issue affects the function parse_usdt_arg of the file tools/lib/bpf/usdt.c of the component BPF. The manipulation of the argument reg_name leads to memory leak. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-211031.", + "ref_urls": { + "Debian": "https://security-tracker.debian.org/tracker/CVE-2022-3533", + "ExploitDB": "https://www.exploit-db.com/search?cve=2022-3533", + "NVD": "https://nvd.nist.gov/vuln/detail/CVE-2022-3533", + "Red Hat": "https://access.redhat.com/security/cve/CVE-2022-3533", + "SUSE": "https://www.suse.com/security/cve/CVE-2022-3533", + "Ubuntu": "https://ubuntu.com/security/CVE-2022-3533" + } + }, "CVE-2022-3534": { "affected_versions": "unk to v6.2-rc1", "breaks": "", @@ -76786,6 +76813,33 @@ "Ubuntu": "https://ubuntu.com/security/CVE-2022-3595" } }, + "CVE-2022-3606": { + "affected_versions": "unk to unk", + "breaks": "", + "cvss3": { + "Attack Complexity": "Low", + "Attack Vector": "Local", + "Availability": "High", + "Confidentiality": "None", + "Integrity": "None", + "Privileges Required": "Low", + "Scope": "Unchanged", + "User Interaction": "None", + "raw": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "score": 5.5 + }, + "fixes": "", + "last_modified": "2023-07-29", + "nvd_text": "A vulnerability was found in Linux Kernel. It has been classified as problematic. This affects the function find_prog_by_sec_insn of the file tools/lib/bpf/libbpf.c of the component BPF. The manipulation leads to null pointer dereference. It is recommended to apply a patch to fix this issue. The identifier VDB-211749 was assigned to this vulnerability.", + "ref_urls": { + "Debian": "https://security-tracker.debian.org/tracker/CVE-2022-3606", + "ExploitDB": "https://www.exploit-db.com/search?cve=2022-3606", + "NVD": "https://nvd.nist.gov/vuln/detail/CVE-2022-3606", + "Red Hat": "https://access.redhat.com/security/cve/CVE-2022-3606", + "SUSE": "https://www.suse.com/security/cve/CVE-2022-3606", + "Ubuntu": "https://ubuntu.com/security/CVE-2022-3606" + } + }, "CVE-2022-36123": { "affected_versions": "v2.6.12-rc2 to v5.19-rc6", "breaks": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2", @@ -79554,8 +79608,8 @@ } }, "CVE-2022-48502": { - "affected_versions": "v2.6.12-rc2 to v6.2-rc1", - "breaks": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2", + "affected_versions": "v5.15-rc1 to v6.2-rc1", + "breaks": "f7464060f7ab9a2424428008f0ee9f1e267e410f", "cmt_msg": "fs/ntfs3: Check fields while reading", "cvss3": { "Attack Complexity": "Low", @@ -79570,7 +79624,8 @@ "score": 7.1 }, "fixes": "0e8235d28f3a0e9eda9f02ff67ee566d5f42b66b", - "last_modified": "2023-06-24", + "last_affected_version": "6.1.39", + "last_modified": "2023-07-29", "nvd_text": "An issue was discovered in the Linux kernel before 6.2. The ntfs3 subsystem does not properly check for correctness during disk reads, leading to an out-of-bounds read in ntfs_set_ea in fs/ntfs3/xattr.c.", "ref_urls": { "Debian": "https://security-tracker.debian.org/tracker/CVE-2022-48502", @@ -79687,8 +79742,20 @@ "CVE-2023-0160": { "affected_versions": "unk to unk", "breaks": "", + "cvss3": { + "Attack Complexity": "Low", + "Attack Vector": "Local", + "Availability": "High", + "Confidentiality": "None", + "Integrity": "None", + "Privileges Required": "Low", + "Scope": "Unchanged", + "User Interaction": "None", + "raw": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "score": 5.5 + }, "fixes": "", - "last_modified": "2023-07-19", + "last_modified": "2023-07-29", "nvd_text": "A deadlock flaw was found in the Linux kernel\u2019s BPF subsystem. This flaw allows a local user to potentially crash the system.", "ref_urls": { "Debian": "https://security-tracker.debian.org/tracker/CVE-2023-0160", @@ -81266,6 +81333,23 @@ "Ubuntu": "https://ubuntu.com/security/CVE-2023-2019" } }, + "CVE-2023-20593": { + "affected_versions": "v2.6.12-rc2 to unk", + "breaks": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2", + "cmt_msg": "x86/cpu/amd: Add a Zenbleed fix", + "fixes": "522b1d69219d8f083173819fde04f994aa051a98", + "last_affected_version": "6.4.5", + "last_modified": "2023-07-29", + "nvd_text": "\nAn issue in \u201cZen 2\u201d CPUs, under specific microarchitectural circumstances, may allow an attacker to potentially access sensitive information.\n\n\n\n\n\n\n", + "ref_urls": { + "Debian": "https://security-tracker.debian.org/tracker/CVE-2023-20593", + "ExploitDB": "https://www.exploit-db.com/search?cve=2023-20593", + "NVD": "https://nvd.nist.gov/vuln/detail/CVE-2023-20593", + "Red Hat": "https://access.redhat.com/security/cve/CVE-2023-20593", + "SUSE": "https://www.suse.com/security/cve/CVE-2023-20593", + "Ubuntu": "https://ubuntu.com/security/CVE-2023-20593" + } + }, "CVE-2023-20928": { "affected_versions": "v4.20-rc1 to v6.0-rc1", "breaks": "dd2283f2605e3b3e9c61bcae844b34f2afa4813f", @@ -81471,9 +81555,21 @@ "affected_versions": "v5.16-rc1 to v6.4-rc4", "breaks": "32e9f56a96d8d0f23cb2aeb2a3cd18d40393e787", "cmt_msg": "binder: fix UAF caused by faulty buffer cleanup", + "cvss3": { + "Attack Complexity": "Low", + "Attack Vector": "Local", + "Availability": "High", + "Confidentiality": "High", + "Integrity": "High", + "Privileges Required": "Low", + "Scope": "Unchanged", + "User Interaction": "None", + "raw": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "score": 7.8 + }, "fixes": "bdc1c5fac982845a58d28690cdb56db8c88a530d", "last_affected_version": "6.3.4", - "last_modified": "2023-07-19", + "last_modified": "2023-07-29", "nvd_text": "In multiple functions of binder.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.\n\n", "ref_urls": { "Debian": "https://security-tracker.debian.org/tracker/CVE-2023-21255", @@ -82272,7 +82368,8 @@ "breaks": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2", "cmt_msg": "io_uring/msg_ring: fix missing lock on overflow for IOPOLL", "fixes": "e12d7a46f65ae4b7d58a5e0c1cbfa825cf8d830d", - "last_modified": "2023-05-12", + "last_modified": "2023-07-29", + "nvd_text": "A vulnerability was found due to missing lock for IOPOLL flaw in io_cqring_event_overflow() in io_uring.c in Linux Kernel. This flaw allows a local attacker with user privilege to trigger a Denial of Service threat.", "ref_urls": { "Debian": "https://security-tracker.debian.org/tracker/CVE-2023-2430", "ExploitDB": "https://www.exploit-db.com/search?cve=2023-2430", @@ -82706,7 +82803,8 @@ "cmt_msg": "ipv6: sr: fix out-of-bounds read when setting HMAC data.", "fixes": "84a53580c5d2138c7361c7c3eea5b31827e63b35", "last_affected_version": "5.15.67", - "last_modified": "2023-07-06", + "last_modified": "2023-07-29", + "nvd_text": "An out-of-bounds read vulnerability was found in the SR-IPv6 implementation in the Linux kernel. The flaw exists within the processing of seg6 attributes. The issue results from the improper validation of user-supplied data, which can result in a read past the end of an allocated buffer. This flaw allows a privileged local user to disclose sensitive information on affected installations of the Linux kernel.", "ref_urls": { "Debian": "https://security-tracker.debian.org/tracker/CVE-2023-2860", "ExploitDB": "https://www.exploit-db.com/search?cve=2023-2860", @@ -82791,7 +82889,8 @@ "score": 4.7 }, "fixes": "d8189834d4348ae608083e1f1f53792cfcc2a9bc", - "last_modified": "2023-07-19", + "last_affected_version": "6.4.3", + "last_modified": "2023-07-29", "nvd_text": "There is a null-pointer-dereference flaw found in f2fs_write_end_io in fs/f2fs/data.c in the Linux kernel. This flaw allows a local privileged user to cause a denial of service problem.", "ref_urls": { "Debian": "https://security-tracker.debian.org/tracker/CVE-2023-2898", @@ -82980,9 +83079,21 @@ "affected_versions": "v3.15-rc1 to v4.8-rc7", "breaks": "d3623099d3509fa68fa28235366049dd3156c63a", "cmt_msg": "xfrm: fix crash in XFRM_MSG_GETSA netlink handler", + "cvss3": { + "Attack Complexity": "Low", + "Attack Vector": "Local", + "Availability": "High", + "Confidentiality": "High", + "Integrity": "High", + "Privileges Required": "Low", + "Scope": "Unchanged", + "User Interaction": "None", + "raw": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "score": 7.8 + }, "fixes": "1ba5bf993c6a3142e18e68ea6452b347f9cb5635", "last_affected_version": "4.4.222", - "last_modified": "2023-07-19", + "last_modified": "2023-07-29", "nvd_text": "A NULL pointer dereference vulnerability was found in netlink_dump. This issue can occur when the Netlink socket receives the message(sendmsg) for the XFRM_MSG_GETSA, XFRM_MSG_GETPOLICY type message, and the DUMP flag is set and can cause a denial of service or possibly another unspecified impact. Due to the nature of the flaw, privilege escalation cannot be fully ruled out, although it is unlikely.", "ref_urls": { "Debian": "https://security-tracker.debian.org/tracker/CVE-2023-3106", @@ -82997,8 +83108,20 @@ "backport": true, "breaks": "1d10eb2f156f5fc83cf6c7ce60441592e66eadb3", "cmt_msg": "crypto: fix af_alg_make_sg() conversion to iov_iter", + "cvss3": { + "Attack Complexity": "High", + "Attack Vector": "Local", + "Availability": "High", + "Confidentiality": "None", + "Integrity": "None", + "Privileges Required": "Low", + "Scope": "Unchanged", + "User Interaction": "None", + "raw": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H", + "score": 4.7 + }, "fixes": "9399f0c51489ae8c16d6559b82a452fdc1895e91", - "last_modified": "2023-07-19", + "last_modified": "2023-07-29", "nvd_text": "A flaw was found in the subsequent get_user_pages_fast in the Linux kernel\u2019s interface for symmetric key cipher algorithms in the skcipher_recvmsg of crypto/algif_skcipher.c function. This flaw allows a local user to crash the system.", "ref_urls": { "Debian": "https://security-tracker.debian.org/tracker/CVE-2023-3108", @@ -83175,6 +83298,35 @@ "Ubuntu": "https://ubuntu.com/security/CVE-2023-3111" } }, + "CVE-2023-3117": { + "affected_versions": "v3.16-rc1 to v6.4-rc7", + "breaks": "958bee14d0718ca7a5002c0f48a099d1d345812a", + "cmt_msg": "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE", + "cvss3": { + "Attack Complexity": "Low", + "Attack Vector": "Local", + "Availability": "High", + "Confidentiality": "High", + "Integrity": "High", + "Privileges Required": "Low", + "Scope": "Unchanged", + "User Interaction": "None", + "raw": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "score": 7.8 + }, + "fixes": "1240eb93f0616b21c675416516ff3d74798fdc97", + "last_affected_version": "6.3.8", + "last_modified": "2023-07-29", + "nvd_text": "A use-after-free flaw was found in the Netfilter subsystem of the Linux kernel when processing named and anonymous sets in batch requests, which can lead to performing arbitrary reads and writes in kernel memory. This flaw allows a local user with CAP_NET_ADMIN capability to crash or potentially escalate their privileges on the system.", + "ref_urls": { + "Debian": "https://security-tracker.debian.org/tracker/CVE-2023-3117", + "ExploitDB": "https://www.exploit-db.com/search?cve=2023-3117", + "NVD": "https://nvd.nist.gov/vuln/detail/CVE-2023-3117", + "Red Hat": "https://access.redhat.com/security/cve/CVE-2023-3117", + "SUSE": "https://www.suse.com/security/cve/CVE-2023-3117", + "Ubuntu": "https://ubuntu.com/security/CVE-2023-3117" + } + }, "CVE-2023-31248": { "affected_versions": "v5.9-rc1 to v6.5-rc2", "breaks": "837830a4b439bfeb86c70b0115c280377c84714b", @@ -83192,7 +83344,8 @@ "score": 7.8 }, "fixes": "515ad530795c118f012539ed76d02bacfd426d89", - "last_modified": "2023-07-19", + "last_affected_version": "6.4.3", + "last_modified": "2023-07-29", "nvd_text": "Linux Kernel nftables Use-After-Free Local Privilege Escalation Vulnerability; `nft_chain_lookup_byid()` failed to check whether a chain was active and CAP_NET_ADMIN is in any user or network namespace", "ref_urls": { "Debian": "https://security-tracker.debian.org/tracker/CVE-2023-31248", @@ -83337,7 +83490,7 @@ }, "fixes": "504a10d9e46bc37b23d0a1ae2f28973c8516e636", "last_affected_version": "6.3.6", - "last_modified": "2023-07-06", + "last_modified": "2023-07-29", "nvd_text": "A NULL pointer dereference issue was found in the gfs2 file system in the Linux kernel. It occurs on corrupt gfs2 file systems when the evict code tries to reference the journal descriptor structure after it has been freed and set to NULL. A privileged local user could use this flaw to cause a kernel panic.", "ref_urls": { "Debian": "https://security-tracker.debian.org/tracker/CVE-2023-3212", @@ -83407,12 +83560,13 @@ } }, "CVE-2023-32247": { - "affected_versions": "v2.6.12-rc2 to v6.4-rc1", - "breaks": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2", + "affected_versions": "v5.15-rc1 to v6.4-rc1", + "breaks": "0626e6641f6b467447c81dd7678a69c66f7746cf", "cmt_msg": "ksmbd: destroy expired sessions", "fixes": "ea174a91893956450510945a0c5d1a10b5323656", "last_affected_version": "6.3.1", - "last_modified": "2023-07-19", + "last_modified": "2023-07-29", + "nvd_text": "A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the handling of SMB2_SESSION_SETUP commands. The issue results from the lack of control of resource consumption. An attacker can leverage this vulnerability to create a denial-of-service condition on the system.", "ref_urls": { "Debian": "https://security-tracker.debian.org/tracker/CVE-2023-32247", "ExploitDB": "https://www.exploit-db.com/search?cve=2023-32247", @@ -83423,12 +83577,13 @@ } }, "CVE-2023-32248": { - "affected_versions": "v2.6.12-rc2 to v6.4-rc1", - "breaks": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2", + "affected_versions": "v5.15-rc1 to v6.4-rc1", + "breaks": "0626e6641f6b467447c81dd7678a69c66f7746cf", "cmt_msg": "ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()", "fixes": "3ac00a2ab69b34189942afa9e862d5170cdcb018", "last_affected_version": "6.3.1", - "last_modified": "2023-07-19", + "last_modified": "2023-07-29", + "nvd_text": "A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the handling of SMB2_TREE_CONNECT and SMB2_QUERY_INFO commands. The issue results from the lack of proper validation of a pointer prior to accessing it. An attacker can leverage this vulnerability to create a denial-of-service condition on the system.", "ref_urls": { "Debian": "https://security-tracker.debian.org/tracker/CVE-2023-32248", "ExploitDB": "https://www.exploit-db.com/search?cve=2023-32248", @@ -83439,8 +83594,8 @@ } }, "CVE-2023-32250": { - "affected_versions": "v2.6.12-rc2 to v6.4-rc1", - "breaks": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2", + "affected_versions": "v5.15-rc1 to v6.4-rc1", + "breaks": "0626e6641f6b467447c81dd7678a69c66f7746cf", "cmt_msg": "ksmbd: fix racy issue from session setup and logoff", "cvss3": { "Attack Complexity": "High", @@ -83456,7 +83611,7 @@ }, "fixes": "f5c779b7ddbda30866cf2a27c63e34158f858c73", "last_affected_version": "6.3.1", - "last_modified": "2023-07-19", + "last_modified": "2023-07-29", "nvd_text": "A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the processing of SMB2_SESSION_SETUP commands. The issue results from the lack of proper locking when performing operations on an object. An attacker can leverage this vulnerability to execute code in the context of the kernel.", "ref_urls": { "Debian": "https://security-tracker.debian.org/tracker/CVE-2023-32250", @@ -83468,12 +83623,13 @@ } }, "CVE-2023-32252": { - "affected_versions": "v2.6.12-rc2 to v6.4-rc1", - "breaks": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2", + "affected_versions": "v5.15-rc1 to v6.4-rc1", + "breaks": "0626e6641f6b467447c81dd7678a69c66f7746cf", "cmt_msg": "ksmbd: fix racy issue from session setup and logoff", "fixes": "f5c779b7ddbda30866cf2a27c63e34158f858c73", "last_affected_version": "6.3.1", - "last_modified": "2023-07-19", + "last_modified": "2023-07-29", + "nvd_text": "A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the handling of SMB2_LOGOFF commands. The issue results from the lack of proper validation of a pointer prior to accessing it. An attacker can leverage this vulnerability to create a denial-of-service condition on the system.", "ref_urls": { "Debian": "https://security-tracker.debian.org/tracker/CVE-2023-32252", "ExploitDB": "https://www.exploit-db.com/search?cve=2023-32252", @@ -83484,8 +83640,8 @@ } }, "CVE-2023-32254": { - "affected_versions": "v2.6.12-rc2 to v6.4-rc1", - "breaks": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2", + "affected_versions": "v5.15-rc1 to v6.4-rc1", + "breaks": "0626e6641f6b467447c81dd7678a69c66f7746cf", "cmt_msg": "ksmbd: fix racy issue under cocurrent smb2 tree disconnect", "cvss3": { "Attack Complexity": "High", @@ -83501,7 +83657,7 @@ }, "fixes": "30210947a343b6b3ca13adc9bfc88e1543e16dd5", "last_affected_version": "6.3.1", - "last_modified": "2023-07-19", + "last_modified": "2023-07-29", "nvd_text": "A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the processing of SMB2_TREE_DISCONNECT commands. The issue results from the lack of proper locking when performing operations on an object. An attacker can leverage this vulnerability to execute code in the context of the kernel.", "ref_urls": { "Debian": "https://security-tracker.debian.org/tracker/CVE-2023-32254", @@ -83513,12 +83669,13 @@ } }, "CVE-2023-32257": { - "affected_versions": "v2.6.12-rc2 to v6.4-rc1", - "breaks": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2", + "affected_versions": "v5.15-rc1 to v6.4-rc1", + "breaks": "0626e6641f6b467447c81dd7678a69c66f7746cf", "cmt_msg": "ksmbd: fix racy issue from session setup and logoff", "fixes": "f5c779b7ddbda30866cf2a27c63e34158f858c73", "last_affected_version": "6.3.1", - "last_modified": "2023-07-19", + "last_modified": "2023-07-29", + "nvd_text": "A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the processing of SMB2_SESSION_SETUP and SMB2_LOGOFF commands. The issue results from the lack of proper locking when performing operations on an object. An attacker can leverage this vulnerability to execute code in the context of the kernel.", "ref_urls": { "Debian": "https://security-tracker.debian.org/tracker/CVE-2023-32257", "ExploitDB": "https://www.exploit-db.com/search?cve=2023-32257", @@ -83529,12 +83686,13 @@ } }, "CVE-2023-32258": { - "affected_versions": "v2.6.12-rc2 to v6.4-rc1", - "breaks": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2", + "affected_versions": "v5.15-rc1 to v6.4-rc1", + "breaks": "0626e6641f6b467447c81dd7678a69c66f7746cf", "cmt_msg": "ksmbd: fix racy issue from smb2 close and logoff with multichannel", "fixes": "abcc506a9a71976a8b4c9bf3ee6efd13229c1e19", "last_affected_version": "6.3.1", - "last_modified": "2023-07-19", + "last_modified": "2023-07-29", + "nvd_text": "A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the processing of SMB2_LOGOFF and SMB2_CLOSE commands. The issue results from the lack of proper locking when performing operations on an object. An attacker can leverage this vulnerability to execute code in the context of the kernel.", "ref_urls": { "Debian": "https://security-tracker.debian.org/tracker/CVE-2023-32258", "ExploitDB": "https://www.exploit-db.com/search?cve=2023-32258", @@ -83606,9 +83764,21 @@ "affected_versions": "v6.1-rc1 to v6.5-rc1", "breaks": "54a611b605901c7d5d05b6b8f5d04a6ceb0962aa", "cmt_msg": "mm: introduce new 'lock_mm_and_find_vma()' page fault helper", + "cvss3": { + "Attack Complexity": "Low", + "Attack Vector": "Local", + "Availability": "High", + "Confidentiality": "High", + "Integrity": "High", + "Privileges Required": "Low", + "Scope": "Unchanged", + "User Interaction": "None", + "raw": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "score": 7.8 + }, "fixes": "c2508ec5a58db67093f4fb8bf89a9a7c53a109e9", - "last_affected_version": "6.3.10", - "last_modified": "2023-07-19", + "last_affected_version": "6.4.0", + "last_modified": "2023-07-29", "name": "StackRot", "nvd_text": "A vulnerability exists in the memory management subsystem of the Linux kernel. The lock handling for accessing and updating virtual memory areas (VMAs) is incorrect, leading to use-after-free problems. This issue can be successfully exploited to execute arbitrary kernel code, escalate containers, and gain root privileges.", "ref_urls": { @@ -83781,8 +83951,8 @@ }, "fixes": "1202cdd665315c525b5237e96e0bedc76d7e754f", "last_affected_version": "5.15.117", - "last_modified": "2023-07-19", - "nvd_text": "A flaw null pointer dereference in the Linux kernel DECnet networking protocol was found. A remote user could use this flaw to crash the system.", + "last_modified": "2023-07-29", + "nvd_text": "A null pointer dereference flaw was found in the Linux kernel's DECnet networking protocol. This issue could allow a remote user to crash the system.", "ref_urls": { "Debian": "https://security-tracker.debian.org/tracker/CVE-2023-3338", "ExploitDB": "https://www.exploit-db.com/search?cve=2023-3338", @@ -83954,7 +84124,7 @@ }, "fixes": "1240eb93f0616b21c675416516ff3d74798fdc97", "last_affected_version": "6.3.8", - "last_modified": "2023-07-19", + "last_modified": "2023-07-29", "nvd_text": "A use-after-free vulnerability was found in the Linux kernel's netfilter subsystem in net/netfilter/nf_tables_api.c.\n\nMishandled error handling with NFT_MSG_NEWRULE makes it possible to use a dangling pointer in the same transaction causing a use-after-free vulnerability. This flaw allows a local attacker with user access to cause a privilege escalation issue.\n\nWe recommend upgrading past commit\u00a01240eb93f0616b21c675416516ff3d74798fdc97.", "ref_urls": { "Debian": "https://security-tracker.debian.org/tracker/CVE-2023-3390", @@ -83971,7 +84141,8 @@ "cmt_msg": "drm/vmwgfx: Do not drop the reference to the handle too soon", "fixes": "9ef8d83e8e25d5f1811b3a38eb1484f85f64296c", "last_affected_version": "None", - "last_modified": "2023-07-06", + "last_modified": "2023-07-29", + "nvd_text": "A race condition vulnerability was found in the vmwgfx driver in the Linux kernel. The flaw exists within the handling of GEM objects. The issue results from improper locking when performing operations on an object. This flaw allows a local privileged user to disclose information in the context of the kernel.", "ref_urls": { "Debian": "https://security-tracker.debian.org/tracker/CVE-2023-33951", "ExploitDB": "https://www.exploit-db.com/search?cve=2023-33951", @@ -83987,7 +84158,8 @@ "cmt_msg": "drm/vmwgfx: Do not drop the reference to the handle too soon", "fixes": "9ef8d83e8e25d5f1811b3a38eb1484f85f64296c", "last_affected_version": "None", - "last_modified": "2023-07-06", + "last_modified": "2023-07-29", + "nvd_text": "A double-free vulnerability was found in the vmwgfx driver in the Linux kernel. The flaw exists within the handling of vmw_buffer_object objects. The issue results from the lack of validating the existence of an object prior to performing further free operations on the object. This flaw allows a local privileged user to escalate privileges and execute code in the context of the kernel.", "ref_urls": { "Debian": "https://security-tracker.debian.org/tracker/CVE-2023-33952", "ExploitDB": "https://www.exploit-db.com/search?cve=2023-33952", @@ -84104,7 +84276,8 @@ "score": 7.8 }, "fixes": "caf3ef7468f7534771b5c44cd8dbd6f7f87c2cbd", - "last_modified": "2023-07-19", + "last_affected_version": "6.4.3", + "last_modified": "2023-07-29", "nvd_text": "Linux Kernel nftables Out-Of-Bounds Read/Write Vulnerability; nft_byteorder poorly handled vm register contents when CAP_NET_ADMIN is in any user or network namespace", "ref_urls": { "Debian": "https://security-tracker.debian.org/tracker/CVE-2023-35001", @@ -84121,7 +84294,8 @@ "cmt_msg": "vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF", "fixes": "226fae124b2dac217ea5436060d623ff3385bc34", "last_affected_version": "6.1.10", - "last_modified": "2023-07-19", + "last_modified": "2023-07-29", + "nvd_text": "A use-after-free flaw was found in vcs_read in drivers/tty/vt/vc_screen.c in vc_screen in the Linux Kernel. This flaw allows an attacker with local user access to cause a system crash or leak internal kernel information.", "ref_urls": { "Debian": "https://security-tracker.debian.org/tracker/CVE-2023-3567", "ExploitDB": "https://www.exploit-db.com/search?cve=2023-3567", @@ -84134,8 +84308,20 @@ "CVE-2023-35693": { "affected_versions": "unk to unk", "breaks": "", + "cvss3": { + "Attack Complexity": "Low", + "Attack Vector": "Local", + "Availability": "High", + "Confidentiality": "High", + "Integrity": "High", + "Privileges Required": "High", + "Scope": "Unchanged", + "User Interaction": "None", + "raw": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", + "score": 6.7 + }, "fixes": "", - "last_modified": "2023-07-19", + "last_modified": "2023-07-29", "nvd_text": "In incfs_kill_sb of fs/incfs/vfs.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.\n\n", "ref_urls": { "Debian": "https://security-tracker.debian.org/tracker/CVE-2023-35693", @@ -84144,7 +84330,8 @@ "Red Hat": "https://access.redhat.com/security/cve/CVE-2023-35693", "SUSE": "https://www.suse.com/security/cve/CVE-2023-35693", "Ubuntu": "https://ubuntu.com/security/CVE-2023-35693" - } + }, + "vendor_specific": true }, "CVE-2023-35788": { "affected_versions": "v4.19-rc1 to v6.4-rc5", @@ -84347,11 +84534,63 @@ "Ubuntu": "https://ubuntu.com/security/CVE-2023-35829" } }, + "CVE-2023-3609": { + "affected_versions": "v4.14-rc1 to v6.4-rc7", + "breaks": "705c7091262d02b09eb686c24491de61bf42fdb2", + "cmt_msg": "net/sched: cls_u32: Fix reference counter leak leading to overflow", + "fixes": "04c55383fa5689357bcdd2c8036725a55ed632bc", + "last_affected_version": "6.3.8", + "last_modified": "2023-07-29", + "nvd_text": "A use-after-free vulnerability in the Linux kernel's net/sched: cls_u32 component can be exploited to achieve local privilege escalation.\n\nIf tcf_change_indev() fails, u32_set_parms() will immediately return an error after incrementing or decrementing the reference counter in tcf_bind_filter(). If an attacker can control the reference counter and set it to zero, they can cause the reference to be freed, leading to a use-after-free vulnerability.\n\nWe recommend upgrading past commit 04c55383fa5689357bcdd2c8036725a55ed632bc.\n\n", + "ref_urls": { + "Debian": "https://security-tracker.debian.org/tracker/CVE-2023-3609", + "ExploitDB": "https://www.exploit-db.com/search?cve=2023-3609", + "NVD": "https://nvd.nist.gov/vuln/detail/CVE-2023-3609", + "Red Hat": "https://access.redhat.com/security/cve/CVE-2023-3609", + "SUSE": "https://www.suse.com/security/cve/CVE-2023-3609", + "Ubuntu": "https://ubuntu.com/security/CVE-2023-3609" + } + }, + "CVE-2023-3610": { + "affected_versions": "v5.9-rc1 to v6.4", + "breaks": "d0e2c7de92c7f2b3d355ad76b0bb9fc43d1beb87", + "cmt_msg": "netfilter: nf_tables: fix chain binding transaction logic", + "fixes": "4bedf9eee016286c835e3d8fa981ddece5338795", + "last_affected_version": "6.3", + "last_modified": "2023-07-29", + "nvd_text": "A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation.\n\nFlaw in the error handling of bound chains causes a use-after-free in the abort path of NFT_MSG_NEWRULE. The vulnerability requires CAP_NET_ADMIN to be triggered.\n\nWe recommend upgrading past commit 4bedf9eee016286c835e3d8fa981ddece5338795.\n\n", + "ref_urls": { + "Debian": "https://security-tracker.debian.org/tracker/CVE-2023-3610", + "ExploitDB": "https://www.exploit-db.com/search?cve=2023-3610", + "NVD": "https://nvd.nist.gov/vuln/detail/CVE-2023-3610", + "Red Hat": "https://access.redhat.com/security/cve/CVE-2023-3610", + "SUSE": "https://www.suse.com/security/cve/CVE-2023-3610", + "Ubuntu": "https://ubuntu.com/security/CVE-2023-3610" + } + }, + "CVE-2023-3611": { + "affected_versions": "v3.8-rc1 to v6.5-rc2", + "breaks": "462dbc9101acd38e92eda93c0726857517a24bbd", + "cmt_msg": "net/sched: sch_qfq: account for stab overhead in qfq_enqueue", + "fixes": "3e337087c3b5805fe0b8a46ba622a962880b5d64", + "last_affected_version": "6.4.4", + "last_modified": "2023-07-29", + "nvd_text": "An out-of-bounds write vulnerability in the Linux kernel's net/sched: sch_qfq component can be exploited to achieve local privilege escalation.\n\nThe qfq_change_agg() function in net/sched/sch_qfq.c allows an out-of-bounds write because lmax is updated according to packet sizes without bounds checks.\n\nWe recommend upgrading past commit 3e337087c3b5805fe0b8a46ba622a962880b5d64.\n\n", + "ref_urls": { + "Debian": "https://security-tracker.debian.org/tracker/CVE-2023-3611", + "ExploitDB": "https://www.exploit-db.com/search?cve=2023-3611", + "NVD": "https://nvd.nist.gov/vuln/detail/CVE-2023-3611", + "Red Hat": "https://access.redhat.com/security/cve/CVE-2023-3611", + "SUSE": "https://www.suse.com/security/cve/CVE-2023-3611", + "Ubuntu": "https://ubuntu.com/security/CVE-2023-3611" + } + }, "CVE-2023-3640": { "affected_versions": "unk to unk", "breaks": "", "fixes": "", - "last_modified": "2023-07-19", + "last_modified": "2023-07-29", + "nvd_text": "A possible unauthorized memory access flaw was found in the Linux kernel's cpu_entry_area mapping of X86 CPU data to memory, where a user may guess the location of exception stacks or other important data. Based on the previous CVE-2023-0597, the 'Randomize per-cpu entry area' feature was implemented in /arch/x86/mm/cpu_entry_area.c, which works through the init_cea_offsets() function when KASLR is enabled. However, despite this feature, there is still a risk of per-cpu entry area leaks. This issue could allow a local user to gain access to some important data with memory in an expected location and potentially escalate their privileges on the system.", "ref_urls": { "Debian": "https://security-tracker.debian.org/tracker/CVE-2023-3640", "ExploitDB": "https://www.exploit-db.com/search?cve=2023-3640", @@ -84415,13 +84654,90 @@ "Ubuntu": "https://ubuntu.com/security/CVE-2023-37454" } }, + "CVE-2023-3772": { + "affected_versions": "unk to unk", + "breaks": "", + "fixes": "", + "last_modified": "2023-07-29", + "nvd_text": "A flaw was found in the Linux kernel\u2019s IP framework for transforming packets (XFRM subsystem). This issue may allow a malicious user with CAP_NET_ADMIN privileges to directly dereference a NULL pointer in xfrm_update_ae_params(), leading to a possible kernel crash and denial of service.", + "ref_urls": { + "Debian": "https://security-tracker.debian.org/tracker/CVE-2023-3772", + "ExploitDB": "https://www.exploit-db.com/search?cve=2023-3772", + "NVD": "https://nvd.nist.gov/vuln/detail/CVE-2023-3772", + "Red Hat": "https://access.redhat.com/security/cve/CVE-2023-3772", + "SUSE": "https://www.suse.com/security/cve/CVE-2023-3772", + "Ubuntu": "https://ubuntu.com/security/CVE-2023-3772" + } + }, + "CVE-2023-3773": { + "affected_versions": "unk to unk", + "breaks": "", + "fixes": "", + "last_modified": "2023-07-29", + "nvd_text": "A flaw was found in the Linux kernel\u2019s IP framework for transforming packets (XFRM subsystem). This issue may allow a malicious user with CAP_NET_ADMIN privileges to cause a 4 byte out-of-bounds read of XFRMA_MTIMER_THRESH when parsing netlink attributes, leading to potential leakage of sensitive heap data to userspace.", + "ref_urls": { + "Debian": "https://security-tracker.debian.org/tracker/CVE-2023-3773", + "ExploitDB": "https://www.exploit-db.com/search?cve=2023-3773", + "NVD": "https://nvd.nist.gov/vuln/detail/CVE-2023-3773", + "Red Hat": "https://access.redhat.com/security/cve/CVE-2023-3773", + "SUSE": "https://www.suse.com/security/cve/CVE-2023-3773", + "Ubuntu": "https://ubuntu.com/security/CVE-2023-3773" + } + }, + "CVE-2023-3776": { + "affected_versions": "v2.6.12-rc2 to v6.5-rc2", + "breaks": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2", + "cmt_msg": "net/sched: cls_fw: Fix improper refcount update leads to use-after-free", + "fixes": "0323bce598eea038714f941ce2b22541c46d488f", + "last_affected_version": "6.4.4", + "last_modified": "2023-07-29", + "nvd_text": "A use-after-free vulnerability in the Linux kernel's net/sched: cls_fw component can be exploited to achieve local privilege escalation.\n\nIf tcf_change_indev() fails, fw_set_parms() will immediately return an error after incrementing or decrementing the reference counter in tcf_bind_filter(). If an attacker can control the reference counter and set it to zero, they can cause the reference to be freed, leading to a use-after-free vulnerability.\n\nWe recommend upgrading past commit 0323bce598eea038714f941ce2b22541c46d488f.\n\n", + "ref_urls": { + "Debian": "https://security-tracker.debian.org/tracker/CVE-2023-3776", + "ExploitDB": "https://www.exploit-db.com/search?cve=2023-3776", + "NVD": "https://nvd.nist.gov/vuln/detail/CVE-2023-3776", + "Red Hat": "https://access.redhat.com/security/cve/CVE-2023-3776", + "SUSE": "https://www.suse.com/security/cve/CVE-2023-3776", + "Ubuntu": "https://ubuntu.com/security/CVE-2023-3776" + } + }, + "CVE-2023-3812": { + "affected_versions": "unk to v6.1-rc4", + "breaks": "", + "cmt_msg": "net: tun: fix bugs for oversize packet when napi frags enabled", + "fixes": "363a5328f4b0517e59572118ccfb7c626d81dca9", + "last_affected_version": "6.0.7", + "last_modified": "2023-07-29", + "nvd_text": "An out-of-bounds memory access flaw was found in the Linux kernel\u2019s TUN/TAP device driver functionality in how a user generates a malicious (too big) networking packet when napi frags is enabled. This flaw allows a local user to crash or potentially escalate their privileges on the system.", + "ref_urls": { + "Debian": "https://security-tracker.debian.org/tracker/CVE-2023-3812", + "ExploitDB": "https://www.exploit-db.com/search?cve=2023-3812", + "NVD": "https://nvd.nist.gov/vuln/detail/CVE-2023-3812", + "Red Hat": "https://access.redhat.com/security/cve/CVE-2023-3812", + "SUSE": "https://www.suse.com/security/cve/CVE-2023-3812", + "Ubuntu": "https://ubuntu.com/security/CVE-2023-3812" + } + }, "CVE-2023-38409": { "affected_versions": "v5.19-rc1 to v6.3-rc7", "breaks": "d443d93864726ad68c0a741d1e7b03934a9af143", "cmt_msg": "fbcon: set_con2fb_map needs to set con2fb_map!", + "cvss3": { + "Attack Complexity": "Low", + "Attack Vector": "Local", + "Availability": "High", + "Confidentiality": "None", + "Integrity": "None", + "Privileges Required": "Low", + "Scope": "Unchanged", + "User Interaction": "None", + "raw": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "score": 5.5 + }, + "cwe": "Unspecified", "fixes": "fffb0b52d5258554c645c966c6cbef7de50b851d", "last_affected_version": "6.2.11", - "last_modified": "2023-07-19", + "last_modified": "2023-07-29", "nvd_text": "An issue was discovered in set_con2fb_map in drivers/video/fbdev/core/fbcon.c in the Linux kernel before 6.2.12. Because an assignment occurs only for the first vc, the fbcon_registered_fb and fbcon_display arrays can be desynchronized in fbcon_mode_deleted (the con2fb_map points at the old fb_info).", "ref_urls": { "Debian": "https://security-tracker.debian.org/tracker/CVE-2023-38409", @@ -84433,12 +84749,24 @@ } }, "CVE-2023-38426": { - "affected_versions": "unk to v6.4-rc3", - "breaks": "", + "affected_versions": "v5.15-rc1 to v6.4-rc3", + "breaks": "0626e6641f6b467447c81dd7678a69c66f7746cf", "cmt_msg": "ksmbd: fix global-out-of-bounds in smb2_find_context_vals", + "cvss3": { + "Attack Complexity": "Low", + "Attack Vector": "Network", + "Availability": "High", + "Confidentiality": "High", + "Integrity": "None", + "Privileges Required": "None", + "Scope": "Unchanged", + "User Interaction": "None", + "raw": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", + "score": 9.1 + }, "fixes": "02f76c401d17e409ed45bf7887148fcc22c93c85", "last_affected_version": "6.3.3", - "last_modified": "2023-07-19", + "last_modified": "2023-07-29", "nvd_text": "An issue was discovered in the Linux kernel before 6.3.4. ksmbd has an out-of-bounds read in smb2_find_context_vals when create_context's name_len is larger than the tag length.", "ref_urls": { "Debian": "https://security-tracker.debian.org/tracker/CVE-2023-38426", @@ -84450,12 +84778,24 @@ } }, "CVE-2023-38427": { - "affected_versions": "unk to v6.4-rc6", - "breaks": "", + "affected_versions": "v5.15-rc1 to v6.4-rc6", + "breaks": "0626e6641f6b467447c81dd7678a69c66f7746cf", "cmt_msg": "ksmbd: fix out-of-bound read in deassemble_neg_contexts()", + "cvss3": { + "Attack Complexity": "Low", + "Attack Vector": "Network", + "Availability": "High", + "Confidentiality": "High", + "Integrity": "High", + "Privileges Required": "None", + "Scope": "Unchanged", + "User Interaction": "None", + "raw": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "score": 9.8 + }, "fixes": "f1a411873c85b642f13b01f21b534c2bab81fc1b", "last_affected_version": "6.3.7", - "last_modified": "2023-07-19", + "last_modified": "2023-07-29", "nvd_text": "An issue was discovered in the Linux kernel before 6.3.8. fs/smb/server/smb2pdu.c in ksmbd has an integer underflow and out-of-bounds read in deassemble_neg_contexts.", "ref_urls": { "Debian": "https://security-tracker.debian.org/tracker/CVE-2023-38427", @@ -84467,12 +84807,24 @@ } }, "CVE-2023-38428": { - "affected_versions": "unk to v6.4-rc3", - "breaks": "", + "affected_versions": "v5.15-rc1 to v6.4-rc3", + "breaks": "0626e6641f6b467447c81dd7678a69c66f7746cf", "cmt_msg": "ksmbd: fix wrong UserName check in session_user", + "cvss3": { + "Attack Complexity": "Low", + "Attack Vector": "Network", + "Availability": "High", + "Confidentiality": "High", + "Integrity": "None", + "Privileges Required": "None", + "Scope": "Unchanged", + "User Interaction": "None", + "raw": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", + "score": 9.1 + }, "fixes": "f0a96d1aafd8964e1f9955c830a3e5cb3c60a90f", "last_affected_version": "6.3.3", - "last_modified": "2023-07-19", + "last_modified": "2023-07-29", "nvd_text": "An issue was discovered in the Linux kernel before 6.3.4. fs/ksmbd/smb2pdu.c in ksmbd does not properly check the UserName value because it does not consider the address of security buffer, leading to an out-of-bounds read.", "ref_urls": { "Debian": "https://security-tracker.debian.org/tracker/CVE-2023-38428", @@ -84484,12 +84836,24 @@ } }, "CVE-2023-38429": { - "affected_versions": "unk to v6.4-rc3", - "breaks": "", + "affected_versions": "v5.15-rc1 to v6.4-rc3", + "breaks": "0626e6641f6b467447c81dd7678a69c66f7746cf", "cmt_msg": "ksmbd: allocate one more byte for implied bcc[0]", + "cvss3": { + "Attack Complexity": "Low", + "Attack Vector": "Network", + "Availability": "High", + "Confidentiality": "High", + "Integrity": "High", + "Privileges Required": "None", + "Scope": "Unchanged", + "User Interaction": "None", + "raw": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "score": 9.8 + }, "fixes": "443d61d1fa9faa60ef925513d83742902390100f", "last_affected_version": "6.3.3", - "last_modified": "2023-07-19", + "last_modified": "2023-07-29", "nvd_text": "An issue was discovered in the Linux kernel before 6.3.4. fs/ksmbd/connection.c in ksmbd has an off-by-one error in memory allocation (because of ksmbd_smb2_check_message) that may lead to out-of-bounds access.", "ref_urls": { "Debian": "https://security-tracker.debian.org/tracker/CVE-2023-38429", @@ -84501,12 +84865,24 @@ } }, "CVE-2023-38430": { - "affected_versions": "unk to v6.4-rc6", - "breaks": "", + "affected_versions": "v5.15-rc1 to v6.4-rc6", + "breaks": "0626e6641f6b467447c81dd7678a69c66f7746cf", "cmt_msg": "ksmbd: validate smb request protocol id", + "cvss3": { + "Attack Complexity": "Low", + "Attack Vector": "Network", + "Availability": "High", + "Confidentiality": "High", + "Integrity": "None", + "Privileges Required": "None", + "Scope": "Unchanged", + "User Interaction": "None", + "raw": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", + "score": 9.1 + }, "fixes": "1c1bcf2d3ea061613119b534f57507c377df20f9", "last_affected_version": "6.3.8", - "last_modified": "2023-07-19", + "last_modified": "2023-07-29", "nvd_text": "An issue was discovered in the Linux kernel before 6.3.9. ksmbd does not validate the SMB request protocol ID, leading to an out-of-bounds read.", "ref_urls": { "Debian": "https://security-tracker.debian.org/tracker/CVE-2023-38430", @@ -84518,12 +84894,24 @@ } }, "CVE-2023-38431": { - "affected_versions": "unk to v6.4-rc6", - "breaks": "", + "affected_versions": "v5.15-rc1 to v6.4-rc6", + "breaks": "0626e6641f6b467447c81dd7678a69c66f7746cf", "cmt_msg": "ksmbd: check the validation of pdu_size in ksmbd_conn_handler_loop", + "cvss3": { + "Attack Complexity": "Low", + "Attack Vector": "Network", + "Availability": "High", + "Confidentiality": "High", + "Integrity": "None", + "Privileges Required": "None", + "Scope": "Unchanged", + "User Interaction": "None", + "raw": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", + "score": 9.1 + }, "fixes": "368ba06881c395f1c9a7ba22203cf8d78b4addc0", "last_affected_version": "6.3.7", - "last_modified": "2023-07-19", + "last_modified": "2023-07-29", "nvd_text": "An issue was discovered in the Linux kernel before 6.3.8. fs/smb/server/connection.c in ksmbd does not validate the relationship between the NetBIOS header's length field and the SMB header sizes, via pdu_size in ksmbd_conn_handler_loop, leading to an out-of-bounds read.", "ref_urls": { "Debian": "https://security-tracker.debian.org/tracker/CVE-2023-38431", @@ -84535,12 +84923,24 @@ } }, "CVE-2023-38432": { - "affected_versions": "unk to v6.4", - "breaks": "", + "affected_versions": "v5.15-rc1 to v6.4", + "breaks": "0626e6641f6b467447c81dd7678a69c66f7746cf", "cmt_msg": "ksmbd: validate command payload size", + "cvss3": { + "Attack Complexity": "Low", + "Attack Vector": "Network", + "Availability": "High", + "Confidentiality": "High", + "Integrity": "None", + "Privileges Required": "None", + "Scope": "Unchanged", + "User Interaction": "None", + "raw": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", + "score": 9.1 + }, "fixes": "2b9b8f3b68edb3d67d79962f02e26dbb5ae3808d", - "last_affected_version": "6.3.9", - "last_modified": "2023-07-19", + "last_affected_version": "6.3", + "last_modified": "2023-07-29", "nvd_text": "An issue was discovered in the Linux kernel before 6.3.10. fs/smb/server/smb2misc.c in ksmbd does not validate the relationship between the command payload size and the RFC1002 length specification, leading to an out-of-bounds read.", "ref_urls": { "Debian": "https://security-tracker.debian.org/tracker/CVE-2023-38432", @@ -84550,5 +84950,22 @@ "SUSE": "https://www.suse.com/security/cve/CVE-2023-38432", "Ubuntu": "https://ubuntu.com/security/CVE-2023-38432" } + }, + "CVE-2023-3863": { + "affected_versions": "unk to v6.5-rc1", + "breaks": "", + "cmt_msg": "net: nfc: Fix use-after-free caused by nfc_llcp_find_local", + "fixes": "6709d4b7bc2e079241fdef15d1160581c5261c10", + "last_affected_version": "6.4.3", + "last_modified": "2023-07-29", + "nvd_text": "A use-after-free flaw was found in nfc_llcp_find_local in net/nfc/llcp_core.c in NFC in the Linux kernel. This flaw allows a local user with special privileges to impact a kernel information leak issue.", + "ref_urls": { + "Debian": "https://security-tracker.debian.org/tracker/CVE-2023-3863", + "ExploitDB": "https://www.exploit-db.com/search?cve=2023-3863", + "NVD": "https://nvd.nist.gov/vuln/detail/CVE-2023-3863", + "Red Hat": "https://access.redhat.com/security/cve/CVE-2023-3863", + "SUSE": "https://www.suse.com/security/cve/CVE-2023-3863", + "Ubuntu": "https://ubuntu.com/security/CVE-2023-3863" + } } } \ No newline at end of file
diff --git a/data/stream_data.json b/data/stream_data.json index 70e04b5..6889eee 100644 --- a/data/stream_data.json +++ b/data/stream_data.json
@@ -1916,9 +1916,6 @@ "CVE-2020-35508": { "cmt_msg": "fork: fix copy_process(CLONE_PARENT) race with the exiting ->real_parent" }, - "CVE-2023-32258": { - "cmt_msg": "ksmbd: fix racy issue from smb2 close and logoff with multichannel" - }, "CVE-2022-3649": { "cmt_msg": "nilfs2: fix use-after-free bug of struct nilfs_root" }, @@ -2117,9 +2114,6 @@ "CVE-2017-7895": { "cmt_msg": "nfsd: stricter decoding of write-like NFSv2/v3 ops" }, - "CVE-2023-38431": { - "cmt_msg": "ksmbd: check the validation of pdu_size in ksmbd_conn_handler_loop" - }, "CVE-2018-14614": { "cmt_msg": "f2fs: fix to do sanity check with cp_pack_start_sum" }, @@ -2357,6 +2351,9 @@ "CVE-2021-3564": { "cmt_msg": "Bluetooth: fix the erroneous flush_work() order" }, + "CVE-2023-3611": { + "cmt_msg": "net/sched: sch_qfq: account for stab overhead in qfq_enqueue" + }, "CVE-2017-16995": { "cmt_msg": "bpf: fix incorrect sign extension in check_alu_op()" }, @@ -2477,9 +2474,6 @@ "CVE-2023-35827": { "cmt_msg": "" }, - "CVE-2023-38432": { - "cmt_msg": "ksmbd: validate command payload size" - }, "CVE-2017-6348": { "cmt_msg": "irda: Fix lockdep annotations in hashbin_delete()." }, @@ -2822,6 +2816,9 @@ "CVE-2007-3719": { "cmt_msg": "" }, + "CVE-2023-3863": { + "cmt_msg": "net: nfc: Fix use-after-free caused by nfc_llcp_find_local" + }, "CVE-2023-0590": { "cmt_msg": "net: sched: fix race condition in qdisc_graft()" }, @@ -2999,6 +2996,9 @@ "CVE-2022-4129": { "cmt_msg": "l2tp: Serialize access to sk_user_data with sk_callback_lock" }, + "CVE-2023-3117": { + "cmt_msg": "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE" + }, "CVE-2020-12364": { "cmt_msg": "drm/i915/guc: Update to use firmware v49.0.1" }, @@ -3077,15 +3077,9 @@ "CVE-2018-12931": { "cmt_msg": "" }, - "CVE-2023-38426": { - "cmt_msg": "ksmbd: fix global-out-of-bounds in smb2_find_context_vals" - }, "CVE-2020-12769": { "cmt_msg": "spi: spi-dw: Add lock protect dw_spi rx/tx to prevent concurrent calls" }, - "CVE-2023-32248": { - "cmt_msg": "ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()" - }, "CVE-2021-32399": { "cmt_msg": "bluetooth: eliminate the potential race condition when removing the HCI controller" }, @@ -3248,9 +3242,6 @@ "CVE-2023-0615": { "cmt_msg": "media: vivid: dev->bitmap_cap wasn't freed in all cases" }, - "CVE-2023-38427": { - "cmt_msg": "ksmbd: fix out-of-bound read in deassemble_neg_contexts()" - }, "CVE-2019-14896": { "cmt_msg": "libertas: Fix two buffer overflows at parsing bss descriptor" }, @@ -3284,12 +3275,6 @@ "CVE-2020-26541": { "cmt_msg": "certs: Add EFI_CERT_X509_GUID support for dbx entries" }, - "CVE-2023-38430": { - "cmt_msg": "ksmbd: validate smb request protocol id" - }, - "CVE-2023-38428": { - "cmt_msg": "ksmbd: fix wrong UserName check in session_user" - }, "CVE-2023-3390": { "cmt_msg": "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE" }, @@ -3386,6 +3371,9 @@ "CVE-2018-5391": { "cmt_msg": "ip: discard IPv4 datagrams with overlapping segments." }, + "CVE-2022-3533": { + "cmt_msg": "" + }, "CVE-2023-26607": { "cmt_msg": "ntfs: fix out-of-bounds read in ntfs_attr_find()" }, @@ -3434,6 +3422,9 @@ "CVE-2017-9986": { "cmt_msg": "sound: Retire OSS" }, + "CVE-2023-3773": { + "cmt_msg": "" + }, "CVE-2021-3587": { "cmt_msg": "nfc: fix NULL ptr dereference in llcp_sock_getname() after failed connect" }, @@ -3656,12 +3647,12 @@ "CVE-2022-42896": { "cmt_msg": "Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM" }, + "CVE-2023-3812": { + "cmt_msg": "net: tun: fix bugs for oversize packet when napi frags enabled" + }, "CVE-2017-5967": { "cmt_msg": "time: Remove CONFIG_TIMER_STATS" }, - "CVE-2023-32247": { - "cmt_msg": "ksmbd: destroy expired sessions" - }, "CVE-2022-3169": { "cmt_msg": "nvme: ensure subsystem reset is single threaded" }, @@ -3725,27 +3716,15 @@ "CVE-2020-35519": { "cmt_msg": "net/x25: prevent a couple of overflows" }, - "CVE-2023-32257": { - "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" - }, "CVE-2017-18241": { "cmt_msg": "f2fs: fix a panic caused by NULL flush_cmd_control" }, "CVE-2022-33740": { "cmt_msg": "xen/netfront: fix leaking data in shared pages" }, - "CVE-2023-32254": { - "cmt_msg": "ksmbd: fix racy issue under cocurrent smb2 tree disconnect" - }, - "CVE-2023-32252": { - "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" - }, "CVE-2020-10708": { "cmt_msg": "" }, - "CVE-2023-32250": { - "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" - }, "CVE-2022-0400": { "cmt_msg": "" }, @@ -3797,6 +3776,9 @@ "CVE-2015-3339": { "cmt_msg": "fs: take i_mutex during prepare_binprm for set[ug]id executables" }, + "CVE-2023-20593": { + "cmt_msg": "x86/cpu/amd: Add a Zenbleed fix" + }, "CVE-2023-0160": { "cmt_msg": "" }, @@ -3902,6 +3884,9 @@ "CVE-2019-16746": { "cmt_msg": "nl80211: validate beacon head" }, + "CVE-2022-3606": { + "cmt_msg": "" + }, "CVE-2023-31081": { "cmt_msg": "" }, @@ -3953,6 +3938,9 @@ "CVE-2019-20908": { "cmt_msg": "efi: Restrict efivar_ssdt_load when the kernel is locked down" }, + "CVE-2023-3776": { + "cmt_msg": "net/sched: cls_fw: Fix improper refcount update leads to use-after-free" + }, "CVE-2021-28038": { "cmt_msg": "Xen/gnttab: handle p2m update errors on a per-slot basis" }, @@ -4001,9 +3989,6 @@ "CVE-2010-4563": { "cmt_msg": "" }, - "CVE-2023-35693": { - "cmt_msg": "" - }, "CVE-2023-1249": { "cmt_msg": "coredump: Use the vma snapshot in fill_files_note" }, @@ -4103,6 +4088,9 @@ "CVE-2022-1280": { "cmt_msg": "drm: avoid circular locks in drm_mode_getconnector" }, + "CVE-2023-3772": { + "cmt_msg": "" + }, "CVE-2020-11668": { "cmt_msg": "media: xirlink_cit: add missing descriptor sanity checks" }, @@ -4301,9 +4289,6 @@ "CVE-2021-39800": { "cmt_msg": "" }, - "CVE-2023-38429": { - "cmt_msg": "ksmbd: allocate one more byte for implied bcc[0]" - }, "CVE-2022-1195": { "cmt_msg": "hamradio: improve the incomplete fix to avoid NPD" }, @@ -4337,9 +4322,6 @@ "CVE-2020-0429": { "cmt_msg": "l2tp: fix race between l2tp_session_delete() and l2tp_tunnel_closeall()" }, - "CVE-2022-48502": { - "cmt_msg": "fs/ntfs3: Check fields while reading" - }, "CVE-2020-27066": { "cmt_msg": "xfrm: policy: Fix doulbe free in xfrm_policy_timer" }, @@ -4643,9 +4625,6 @@ "CVE-2019-15090": { "cmt_msg": "scsi: qedi: remove memset/memcpy to nfunc and use func instead" }, - "CVE-2023-32258": { - "cmt_msg": "ksmbd: fix racy issue from smb2 close and logoff with multichannel" - }, "CVE-2022-3649": { "cmt_msg": "nilfs2: fix use-after-free bug of struct nilfs_root" }, @@ -4661,6 +4640,9 @@ "CVE-2017-17806": { "cmt_msg": "crypto: hmac - require that the underlying hash algorithm is unkeyed" }, + "CVE-2023-3611": { + "cmt_msg": "net/sched: sch_qfq: account for stab overhead in qfq_enqueue" + }, "CVE-2022-0001": { "cmt_msg": "x86/speculation: Rename RETPOLINE_AMD to RETPOLINE_LFENCE" }, @@ -4859,9 +4841,6 @@ "CVE-2022-3202": { "cmt_msg": "jfs: prevent NULL deref in diFree" }, - "CVE-2023-38428": { - "cmt_msg": "ksmbd: fix wrong UserName check in session_user" - }, "CVE-2018-3646": { "cmt_msg": "x86/microcode: Allow late microcode loading with SMT disabled" }, @@ -4880,9 +4859,6 @@ "CVE-2021-28711": { "cmt_msg": "xen/blkfront: harden blkfront against event channel storms" }, - "CVE-2023-38431": { - "cmt_msg": "ksmbd: check the validation of pdu_size in ksmbd_conn_handler_loop" - }, "CVE-2018-14614": { "cmt_msg": "f2fs: fix to do sanity check with cp_pack_start_sum" }, @@ -5306,9 +5282,6 @@ "CVE-2020-36386": { "cmt_msg": "Bluetooth: Fix slab-out-of-bounds read in hci_extended_inquiry_result_evt()" }, - "CVE-2023-38432": { - "cmt_msg": "ksmbd: validate command payload size" - }, "CVE-2022-3567": { "cmt_msg": "ipv6: Fix data races around sk->sk_prot." }, @@ -5744,6 +5717,9 @@ "CVE-2007-3719": { "cmt_msg": "" }, + "CVE-2023-3863": { + "cmt_msg": "net: nfc: Fix use-after-free caused by nfc_llcp_find_local" + }, "CVE-2023-0590": { "cmt_msg": "net: sched: fix race condition in qdisc_graft()" }, @@ -6005,6 +5981,9 @@ "CVE-2022-4129": { "cmt_msg": "l2tp: Serialize access to sk_user_data with sk_callback_lock" }, + "CVE-2023-3117": { + "cmt_msg": "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE" + }, "CVE-2018-1000004": { "cmt_msg": "ALSA: seq: Make ioctls race-free" }, @@ -6110,15 +6089,9 @@ "CVE-2018-12931": { "cmt_msg": "" }, - "CVE-2023-38426": { - "cmt_msg": "ksmbd: fix global-out-of-bounds in smb2_find_context_vals" - }, "CVE-2020-12769": { "cmt_msg": "spi: spi-dw: Add lock protect dw_spi rx/tx to prevent concurrent calls" }, - "CVE-2023-32248": { - "cmt_msg": "ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()" - }, "CVE-2017-8890": { "cmt_msg": "dccp/tcp: do not inherit mc_list from parent" }, @@ -6152,9 +6125,6 @@ "CVE-2017-12146": { "cmt_msg": "driver core: platform: fix race condition with driver_override" }, - "CVE-2023-38427": { - "cmt_msg": "ksmbd: fix out-of-bound read in deassemble_neg_contexts()" - }, "CVE-2021-3732": { "cmt_msg": "ovl: prevent private clone if bind mount is not allowed" }, @@ -6257,9 +6227,6 @@ "CVE-2017-13305": { "cmt_msg": "KEYS: encrypted: fix buffer overread in valid_master_desc()" }, - "CVE-2022-48502": { - "cmt_msg": "fs/ntfs3: Check fields while reading" - }, "CVE-2019-19536": { "cmt_msg": "can: peak_usb: pcan_usb_pro: Fix info-leaks to USB devices" }, @@ -6284,6 +6251,9 @@ "CVE-2019-10639": { "cmt_msg": "netns: provide pure entropy for net_hash_mix()" }, + "CVE-2022-3533": { + "cmt_msg": "" + }, "CVE-2021-0929": { "cmt_msg": "staging/android/ion: delete dma_buf->kmap/unmap implemenation" }, @@ -6383,12 +6353,6 @@ "CVE-2020-26541": { "cmt_msg": "certs: Add EFI_CERT_X509_GUID support for dbx entries" }, - "CVE-2023-38430": { - "cmt_msg": "ksmbd: validate smb request protocol id" - }, - "CVE-2023-32252": { - "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" - }, "CVE-2020-26559": { "cmt_msg": "" }, @@ -6860,9 +6824,6 @@ "CVE-2019-15902": { "cmt_msg": "" }, - "CVE-2023-32250": { - "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" - }, "CVE-2023-3358": { "cmt_msg": "HID: intel_ish-hid: Add check for ishtp_dma_tx_map" }, @@ -6923,15 +6884,15 @@ "CVE-2022-26490": { "cmt_msg": "nfc: st21nfca: Fix potential buffer overflows in EVT_TRANSACTION" }, + "CVE-2023-3812": { + "cmt_msg": "net: tun: fix bugs for oversize packet when napi frags enabled" + }, "CVE-2017-5967": { "cmt_msg": "time: Remove CONFIG_TIMER_STATS" }, "CVE-2021-0937": { "cmt_msg": "netfilter: x_tables: fix compat match/target pad out-of-bound write" }, - "CVE-2023-32247": { - "cmt_msg": "ksmbd: destroy expired sessions" - }, "CVE-2022-42895": { "cmt_msg": "Bluetooth: L2CAP: Fix attempting to access uninitialized memory" }, @@ -7001,18 +6962,12 @@ "CVE-2020-35519": { "cmt_msg": "net/x25: prevent a couple of overflows" }, - "CVE-2023-32257": { - "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" - }, "CVE-2023-31436": { "cmt_msg": "net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg" }, "CVE-2022-33740": { "cmt_msg": "xen/netfront: fix leaking data in shared pages" }, - "CVE-2023-32254": { - "cmt_msg": "ksmbd: fix racy issue under cocurrent smb2 tree disconnect" - }, "CVE-2020-35513": { "cmt_msg": "nfsd: fix incorrect umasks" }, @@ -7076,6 +7031,9 @@ "CVE-2017-1000379": { "cmt_msg": "mm: larger stack guard gap, between vmas" }, + "CVE-2022-3606": { + "cmt_msg": "" + }, "CVE-2023-3640": { "cmt_msg": "" }, @@ -7085,6 +7043,9 @@ "CVE-2018-18281": { "cmt_msg": "mremap: properly flush TLB before releasing the page" }, + "CVE-2023-20593": { + "cmt_msg": "x86/cpu/amd: Add a Zenbleed fix" + }, "CVE-2019-18675": { "cmt_msg": "mmap: introduce sane default mmap limits" }, @@ -7307,6 +7268,9 @@ "CVE-2019-20908": { "cmt_msg": "efi: Restrict efivar_ssdt_load when the kernel is locked down" }, + "CVE-2023-3776": { + "cmt_msg": "net/sched: cls_fw: Fix improper refcount update leads to use-after-free" + }, "CVE-2021-28038": { "cmt_msg": "Xen/gnttab: handle p2m update errors on a per-slot basis" }, @@ -7367,9 +7331,6 @@ "CVE-2010-4563": { "cmt_msg": "" }, - "CVE-2023-35693": { - "cmt_msg": "" - }, "CVE-2023-1249": { "cmt_msg": "coredump: Use the vma snapshot in fill_files_note" }, @@ -7469,6 +7430,9 @@ "CVE-2022-1729": { "cmt_msg": "perf: Fix sys_perf_event_open() race against self" }, + "CVE-2023-3773": { + "cmt_msg": "" + }, "CVE-2021-28712": { "cmt_msg": "xen/netfront: harden netfront against event channel storms" }, @@ -7529,6 +7493,9 @@ "CVE-2022-1280": { "cmt_msg": "drm: avoid circular locks in drm_mode_getconnector" }, + "CVE-2023-3772": { + "cmt_msg": "" + }, "CVE-2020-11668": { "cmt_msg": "media: xirlink_cit: add missing descriptor sanity checks" }, @@ -7769,9 +7736,6 @@ "CVE-2017-7558": { "cmt_msg": "sctp: Avoid out-of-bounds reads from address storage" }, - "CVE-2023-38429": { - "cmt_msg": "ksmbd: allocate one more byte for implied bcc[0]" - }, "CVE-2018-16884": { "cmt_msg": "sunrpc: use-after-free in svc_process_common()" }, @@ -8217,9 +8181,6 @@ "CVE-2019-15090": { "cmt_msg": "scsi: qedi: remove memset/memcpy to nfunc and use func instead" }, - "CVE-2023-32258": { - "cmt_msg": "ksmbd: fix racy issue from smb2 close and logoff with multichannel" - }, "CVE-2022-3649": { "cmt_msg": "nilfs2: fix use-after-free bug of struct nilfs_root" }, @@ -8454,9 +8415,6 @@ "CVE-2021-28711": { "cmt_msg": "xen/blkfront: harden blkfront against event channel storms" }, - "CVE-2023-38431": { - "cmt_msg": "ksmbd: check the validation of pdu_size in ksmbd_conn_handler_loop" - }, "CVE-2018-14614": { "cmt_msg": "f2fs: fix to do sanity check with cp_pack_start_sum" }, @@ -8733,6 +8691,9 @@ "CVE-2021-3564": { "cmt_msg": "Bluetooth: fix the erroneous flush_work() order" }, + "CVE-2023-3611": { + "cmt_msg": "net/sched: sch_qfq: account for stab overhead in qfq_enqueue" + }, "CVE-2017-16995": { "cmt_msg": "bpf: fix incorrect sign extension in check_alu_op()" }, @@ -8865,9 +8826,6 @@ "CVE-2020-36386": { "cmt_msg": "Bluetooth: Fix slab-out-of-bounds read in hci_extended_inquiry_result_evt()" }, - "CVE-2023-38432": { - "cmt_msg": "ksmbd: validate command payload size" - }, "CVE-2022-3567": { "cmt_msg": "ipv6: Fix data races around sk->sk_prot." }, @@ -9009,8 +8967,8 @@ "CVE-2019-2215": { "cmt_msg": "ANDROID: binder: remove waitqueue when thread exits." }, - "CVE-2023-32252": { - "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" + "CVE-2023-35001": { + "cmt_msg": "netfilter: nf_tables: prevent OOB access in nft_byteorder_eval" }, "CVE-2022-27666": { "cmt_msg": "esp: Fix possible buffer overflow in ESP transformation" @@ -9279,6 +9237,9 @@ "CVE-2007-3719": { "cmt_msg": "" }, + "CVE-2023-3863": { + "cmt_msg": "net: nfc: Fix use-after-free caused by nfc_llcp_find_local" + }, "CVE-2023-0590": { "cmt_msg": "net: sched: fix race condition in qdisc_graft()" }, @@ -9504,6 +9465,9 @@ "CVE-2022-4129": { "cmt_msg": "l2tp: Serialize access to sk_user_data with sk_callback_lock" }, + "CVE-2023-3117": { + "cmt_msg": "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE" + }, "CVE-2022-28389": { "cmt_msg": "can: mcba_usb: mcba_usb_start_xmit(): fix double dev_kfree_skb in error path" }, @@ -9585,9 +9549,6 @@ "CVE-2022-23036": { "cmt_msg": "xen/grant-table: add gnttab_try_end_foreign_access()" }, - "CVE-2023-38430": { - "cmt_msg": "ksmbd: validate smb request protocol id" - }, "CVE-2022-2153": { "cmt_msg": "KVM: x86: Avoid theoretical NULL pointer dereference in kvm_irq_delivery_to_apic_fast()" }, @@ -9603,15 +9564,9 @@ "CVE-2018-12931": { "cmt_msg": "" }, - "CVE-2023-38426": { - "cmt_msg": "ksmbd: fix global-out-of-bounds in smb2_find_context_vals" - }, "CVE-2020-12769": { "cmt_msg": "spi: spi-dw: Add lock protect dw_spi rx/tx to prevent concurrent calls" }, - "CVE-2023-32248": { - "cmt_msg": "ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()" - }, "CVE-2021-32399": { "cmt_msg": "bluetooth: eliminate the potential race condition when removing the HCI controller" }, @@ -9636,9 +9591,6 @@ "CVE-2019-19543": { "cmt_msg": "media: serial_ir: Fix use-after-free in serial_ir_init_module" }, - "CVE-2023-38427": { - "cmt_msg": "ksmbd: fix out-of-bound read in deassemble_neg_contexts()" - }, "CVE-2021-3732": { "cmt_msg": "ovl: prevent private clone if bind mount is not allowed" }, @@ -9702,9 +9654,6 @@ "CVE-2019-11191": { "cmt_msg": "x86: Deprecate a.out support" }, - "CVE-2023-35001": { - "cmt_msg": "netfilter: nf_tables: prevent OOB access in nft_byteorder_eval" - }, "CVE-2018-10323": { "cmt_msg": "xfs: set format back to extents if xfs_bmap_extents_to_btree" }, @@ -9732,9 +9681,6 @@ "CVE-2021-3609": { "cmt_msg": "can: bcm: delay release of struct bcm_op after synchronize_rcu()" }, - "CVE-2022-48502": { - "cmt_msg": "fs/ntfs3: Check fields while reading" - }, "CVE-2019-19536": { "cmt_msg": "can: peak_usb: pcan_usb_pro: Fix info-leaks to USB devices" }, @@ -9759,6 +9705,9 @@ "CVE-2019-10639": { "cmt_msg": "netns: provide pure entropy for net_hash_mix()" }, + "CVE-2022-3533": { + "cmt_msg": "" + }, "CVE-2021-0929": { "cmt_msg": "staging/android/ion: delete dma_buf->kmap/unmap implemenation" }, @@ -9846,9 +9795,6 @@ "CVE-2019-20811": { "cmt_msg": "net-sysfs: call dev_hold if kobject_init_and_add success" }, - "CVE-2023-38428": { - "cmt_msg": "ksmbd: fix wrong UserName check in session_user" - }, "CVE-2020-26559": { "cmt_msg": "" }, @@ -10053,6 +9999,9 @@ "CVE-2017-9986": { "cmt_msg": "sound: Retire OSS" }, + "CVE-2023-3773": { + "cmt_msg": "" + }, "CVE-2021-3587": { "cmt_msg": "nfc: fix NULL ptr dereference in llcp_sock_getname() after failed connect" }, @@ -10290,9 +10239,6 @@ "CVE-2019-15902": { "cmt_msg": "" }, - "CVE-2023-32250": { - "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" - }, "CVE-2023-3358": { "cmt_msg": "HID: intel_ish-hid: Add check for ishtp_dma_tx_map" }, @@ -10344,12 +10290,12 @@ "CVE-2022-26490": { "cmt_msg": "nfc: st21nfca: Fix potential buffer overflows in EVT_TRANSACTION" }, + "CVE-2023-3812": { + "cmt_msg": "net: tun: fix bugs for oversize packet when napi frags enabled" + }, "CVE-2021-0937": { "cmt_msg": "netfilter: x_tables: fix compat match/target pad out-of-bound write" }, - "CVE-2023-32247": { - "cmt_msg": "ksmbd: destroy expired sessions" - }, "CVE-2022-3169": { "cmt_msg": "nvme: ensure subsystem reset is single threaded" }, @@ -10416,15 +10362,9 @@ "CVE-2020-35519": { "cmt_msg": "net/x25: prevent a couple of overflows" }, - "CVE-2023-32257": { - "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" - }, "CVE-2020-29569": { "cmt_msg": "xen-blkback: set ring->xenblkd to NULL after kthread_stop()" }, - "CVE-2023-32254": { - "cmt_msg": "ksmbd: fix racy issue under cocurrent smb2 tree disconnect" - }, "CVE-2020-35513": { "cmt_msg": "nfsd: fix incorrect umasks" }, @@ -10482,12 +10422,18 @@ "CVE-2020-25284": { "cmt_msg": "rbd: require global CAP_SYS_ADMIN for mapping and unmapping" }, + "CVE-2022-3606": { + "cmt_msg": "" + }, "CVE-2023-3640": { "cmt_msg": "" }, "CVE-2018-18281": { "cmt_msg": "mremap: properly flush TLB before releasing the page" }, + "CVE-2023-20593": { + "cmt_msg": "x86/cpu/amd: Add a Zenbleed fix" + }, "CVE-2023-0160": { "cmt_msg": "" }, @@ -10704,6 +10650,9 @@ "CVE-2019-20908": { "cmt_msg": "efi: Restrict efivar_ssdt_load when the kernel is locked down" }, + "CVE-2023-3776": { + "cmt_msg": "net/sched: cls_fw: Fix improper refcount update leads to use-after-free" + }, "CVE-2021-28038": { "cmt_msg": "Xen/gnttab: handle p2m update errors on a per-slot basis" }, @@ -10767,9 +10716,6 @@ "CVE-2010-4563": { "cmt_msg": "" }, - "CVE-2023-35693": { - "cmt_msg": "" - }, "CVE-2023-1249": { "cmt_msg": "coredump: Use the vma snapshot in fill_files_note" }, @@ -10908,6 +10854,9 @@ "CVE-2022-1280": { "cmt_msg": "drm: avoid circular locks in drm_mode_getconnector" }, + "CVE-2023-3772": { + "cmt_msg": "" + }, "CVE-2020-11668": { "cmt_msg": "media: xirlink_cit: add missing descriptor sanity checks" }, @@ -11142,9 +11091,6 @@ "CVE-2021-39800": { "cmt_msg": "" }, - "CVE-2023-38429": { - "cmt_msg": "ksmbd: allocate one more byte for implied bcc[0]" - }, "CVE-2018-16884": { "cmt_msg": "sunrpc: use-after-free in svc_process_common()" }, @@ -11455,9 +11401,6 @@ "CVE-2019-14896": { "cmt_msg": "libertas: Fix two buffer overflows at parsing bss descriptor" }, - "CVE-2023-32258": { - "cmt_msg": "ksmbd: fix racy issue from smb2 close and logoff with multichannel" - }, "CVE-2022-3649": { "cmt_msg": "nilfs2: fix use-after-free bug of struct nilfs_root" }, @@ -11686,9 +11629,6 @@ "CVE-2021-28711": { "cmt_msg": "xen/blkfront: harden blkfront against event channel storms" }, - "CVE-2023-38431": { - "cmt_msg": "ksmbd: check the validation of pdu_size in ksmbd_conn_handler_loop" - }, "CVE-2018-14614": { "cmt_msg": "f2fs: fix to do sanity check with cp_pack_start_sum" }, @@ -12109,9 +12049,6 @@ "CVE-2020-36386": { "cmt_msg": "Bluetooth: Fix slab-out-of-bounds read in hci_extended_inquiry_result_evt()" }, - "CVE-2023-38432": { - "cmt_msg": "ksmbd: validate command payload size" - }, "CVE-2022-3567": { "cmt_msg": "ipv6: Fix data races around sk->sk_prot." }, @@ -12259,8 +12196,8 @@ "CVE-2019-2215": { "cmt_msg": "ANDROID: binder: remove waitqueue when thread exits." }, - "CVE-2023-32252": { - "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" + "CVE-2023-35001": { + "cmt_msg": "netfilter: nf_tables: prevent OOB access in nft_byteorder_eval" }, "CVE-2022-27666": { "cmt_msg": "esp: Fix possible buffer overflow in ESP transformation" @@ -12547,6 +12484,9 @@ "CVE-2007-3719": { "cmt_msg": "" }, + "CVE-2023-3863": { + "cmt_msg": "net: nfc: Fix use-after-free caused by nfc_llcp_find_local" + }, "CVE-2023-0459": { "cmt_msg": "uaccess: Add speculation barrier to copy_from_user()" }, @@ -12790,6 +12730,9 @@ "CVE-2022-4129": { "cmt_msg": "l2tp: Serialize access to sk_user_data with sk_callback_lock" }, + "CVE-2023-3117": { + "cmt_msg": "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE" + }, "CVE-2022-28389": { "cmt_msg": "can: mcba_usb: mcba_usb_start_xmit(): fix double dev_kfree_skb in error path" }, @@ -12889,15 +12832,9 @@ "CVE-2018-12931": { "cmt_msg": "" }, - "CVE-2023-38426": { - "cmt_msg": "ksmbd: fix global-out-of-bounds in smb2_find_context_vals" - }, "CVE-2020-12769": { "cmt_msg": "spi: spi-dw: Add lock protect dw_spi rx/tx to prevent concurrent calls" }, - "CVE-2023-32248": { - "cmt_msg": "ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()" - }, "CVE-2022-4662": { "cmt_msg": "USB: core: Prevent nested device-reset calls" }, @@ -12922,9 +12859,6 @@ "CVE-2019-19543": { "cmt_msg": "media: serial_ir: Fix use-after-free in serial_ir_init_module" }, - "CVE-2023-38427": { - "cmt_msg": "ksmbd: fix out-of-bound read in deassemble_neg_contexts()" - }, "CVE-2021-3732": { "cmt_msg": "ovl: prevent private clone if bind mount is not allowed" }, @@ -12994,9 +12928,6 @@ "CVE-2021-0605": { "cmt_msg": "af_key: pfkey_dump needs parameter validation" }, - "CVE-2023-35001": { - "cmt_msg": "netfilter: nf_tables: prevent OOB access in nft_byteorder_eval" - }, "CVE-2018-10323": { "cmt_msg": "xfs: set format back to extents if xfs_bmap_extents_to_btree" }, @@ -13021,9 +12952,6 @@ "CVE-2021-3609": { "cmt_msg": "can: bcm: delay release of struct bcm_op after synchronize_rcu()" }, - "CVE-2022-48502": { - "cmt_msg": "fs/ntfs3: Check fields while reading" - }, "CVE-2019-19536": { "cmt_msg": "can: peak_usb: pcan_usb_pro: Fix info-leaks to USB devices" }, @@ -13048,6 +12976,9 @@ "CVE-2019-10639": { "cmt_msg": "netns: provide pure entropy for net_hash_mix()" }, + "CVE-2022-3533": { + "cmt_msg": "" + }, "CVE-2021-0929": { "cmt_msg": "staging/android/ion: delete dma_buf->kmap/unmap implemenation" }, @@ -13147,12 +13078,6 @@ "CVE-2020-26541": { "cmt_msg": "certs: Add EFI_CERT_X509_GUID support for dbx entries" }, - "CVE-2023-38430": { - "cmt_msg": "ksmbd: validate smb request protocol id" - }, - "CVE-2023-38428": { - "cmt_msg": "ksmbd: fix wrong UserName check in session_user" - }, "CVE-2020-26559": { "cmt_msg": "" }, @@ -13366,9 +13291,15 @@ "CVE-2022-1966": { "cmt_msg": "netfilter: nf_tables: disallow non-stateful expression in sets earlier" }, + "CVE-2023-3611": { + "cmt_msg": "net/sched: sch_qfq: account for stab overhead in qfq_enqueue" + }, "CVE-2017-9986": { "cmt_msg": "sound: Retire OSS" }, + "CVE-2023-3773": { + "cmt_msg": "" + }, "CVE-2021-3587": { "cmt_msg": "nfc: fix NULL ptr dereference in llcp_sock_getname() after failed connect" }, @@ -13615,9 +13546,6 @@ "CVE-2019-15902": { "cmt_msg": "" }, - "CVE-2023-32250": { - "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" - }, "CVE-2023-3358": { "cmt_msg": "HID: intel_ish-hid: Add check for ishtp_dma_tx_map" }, @@ -13669,12 +13597,12 @@ "CVE-2022-26490": { "cmt_msg": "nfc: st21nfca: Fix potential buffer overflows in EVT_TRANSACTION" }, + "CVE-2023-3812": { + "cmt_msg": "net: tun: fix bugs for oversize packet when napi frags enabled" + }, "CVE-2021-0937": { "cmt_msg": "netfilter: x_tables: fix compat match/target pad out-of-bound write" }, - "CVE-2023-32247": { - "cmt_msg": "ksmbd: destroy expired sessions" - }, "CVE-2022-3169": { "cmt_msg": "nvme: ensure subsystem reset is single threaded" }, @@ -13741,18 +13669,12 @@ "CVE-2020-35519": { "cmt_msg": "net/x25: prevent a couple of overflows" }, - "CVE-2023-32257": { - "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" - }, "CVE-2023-31436": { "cmt_msg": "net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg" }, "CVE-2020-29569": { "cmt_msg": "xen-blkback: set ring->xenblkd to NULL after kthread_stop()" }, - "CVE-2023-32254": { - "cmt_msg": "ksmbd: fix racy issue under cocurrent smb2 tree disconnect" - }, "CVE-2020-35513": { "cmt_msg": "nfsd: fix incorrect umasks" }, @@ -13813,12 +13735,18 @@ "CVE-2020-25284": { "cmt_msg": "rbd: require global CAP_SYS_ADMIN for mapping and unmapping" }, + "CVE-2022-3606": { + "cmt_msg": "" + }, "CVE-2023-3640": { "cmt_msg": "" }, "CVE-2018-18281": { "cmt_msg": "mremap: properly flush TLB before releasing the page" }, + "CVE-2023-20593": { + "cmt_msg": "x86/cpu/amd: Add a Zenbleed fix" + }, "CVE-2019-18675": { "cmt_msg": "mmap: introduce sane default mmap limits" }, @@ -14041,6 +13969,9 @@ "CVE-2019-20908": { "cmt_msg": "efi: Restrict efivar_ssdt_load when the kernel is locked down" }, + "CVE-2023-3776": { + "cmt_msg": "net/sched: cls_fw: Fix improper refcount update leads to use-after-free" + }, "CVE-2021-28038": { "cmt_msg": "Xen/gnttab: handle p2m update errors on a per-slot basis" }, @@ -14101,9 +14032,6 @@ "CVE-2010-4563": { "cmt_msg": "" }, - "CVE-2023-35693": { - "cmt_msg": "" - }, "CVE-2023-1249": { "cmt_msg": "coredump: Use the vma snapshot in fill_files_note" }, @@ -14251,6 +14179,9 @@ "CVE-2022-1280": { "cmt_msg": "drm: avoid circular locks in drm_mode_getconnector" }, + "CVE-2023-3772": { + "cmt_msg": "" + }, "CVE-2020-11668": { "cmt_msg": "media: xirlink_cit: add missing descriptor sanity checks" }, @@ -14491,9 +14422,6 @@ "CVE-2021-39800": { "cmt_msg": "" }, - "CVE-2023-38429": { - "cmt_msg": "ksmbd: allocate one more byte for implied bcc[0]" - }, "CVE-2018-16884": { "cmt_msg": "sunrpc: use-after-free in svc_process_common()" }, @@ -14818,9 +14746,6 @@ "CVE-2019-15090": { "cmt_msg": "scsi: qedi: remove memset/memcpy to nfunc and use func instead" }, - "CVE-2023-32258": { - "cmt_msg": "ksmbd: fix racy issue from smb2 close and logoff with multichannel" - }, "CVE-2022-3649": { "cmt_msg": "nilfs2: fix use-after-free bug of struct nilfs_root" }, @@ -15313,6 +15238,9 @@ "CVE-2021-3564": { "cmt_msg": "Bluetooth: fix the erroneous flush_work() order" }, + "CVE-2023-3611": { + "cmt_msg": "net/sched: sch_qfq: account for stab overhead in qfq_enqueue" + }, "CVE-2019-18675": { "cmt_msg": "mmap: introduce sane default mmap limits" }, @@ -15397,9 +15325,6 @@ "CVE-2018-20511": { "cmt_msg": "net/appletalk: fix minor pointer leak to userspace in SIOCFINDIPDDPRT" }, - "CVE-2023-38431": { - "cmt_msg": "ksmbd: check the validation of pdu_size in ksmbd_conn_handler_loop" - }, "CVE-2022-20166": { "cmt_msg": "drivers core: Use sysfs_emit and sysfs_emit_at for show(device *...) functions" }, @@ -15436,9 +15361,6 @@ "CVE-2020-36386": { "cmt_msg": "Bluetooth: Fix slab-out-of-bounds read in hci_extended_inquiry_result_evt()" }, - "CVE-2023-38432": { - "cmt_msg": "ksmbd: validate command payload size" - }, "CVE-2022-3567": { "cmt_msg": "ipv6: Fix data races around sk->sk_prot." }, @@ -15580,8 +15502,8 @@ "CVE-2020-0255": { "cmt_msg": "selinux: properly handle multiple messages in selinux_netlink_send()" }, - "CVE-2023-32252": { - "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" + "CVE-2023-35001": { + "cmt_msg": "netfilter: nf_tables: prevent OOB access in nft_byteorder_eval" }, "CVE-2022-27666": { "cmt_msg": "esp: Fix possible buffer overflow in ESP transformation" @@ -15748,6 +15670,9 @@ "CVE-2019-5108": { "cmt_msg": "mac80211: Do not send Layer 2 Update frame before authorization" }, + "CVE-2023-0386": { + "cmt_msg": "ovl: fail on invalid uid/gid mapping at copy up" + }, "CVE-2022-1012": { "cmt_msg": "secure_seq: use the 64 bits of the siphash for port offset calculation" }, @@ -15835,6 +15760,9 @@ "CVE-2007-3719": { "cmt_msg": "" }, + "CVE-2023-3863": { + "cmt_msg": "net: nfc: Fix use-after-free caused by nfc_llcp_find_local" + }, "CVE-2023-0459": { "cmt_msg": "uaccess: Add speculation barrier to copy_from_user()" }, @@ -16048,6 +15976,9 @@ "CVE-2022-4129": { "cmt_msg": "l2tp: Serialize access to sk_user_data with sk_callback_lock" }, + "CVE-2023-3117": { + "cmt_msg": "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE" + }, "CVE-2022-28389": { "cmt_msg": "can: mcba_usb: mcba_usb_start_xmit(): fix double dev_kfree_skb in error path" }, @@ -16126,9 +16057,6 @@ "CVE-2022-23036": { "cmt_msg": "xen/grant-table: add gnttab_try_end_foreign_access()" }, - "CVE-2023-38430": { - "cmt_msg": "ksmbd: validate smb request protocol id" - }, "CVE-2022-2153": { "cmt_msg": "KVM: x86: Avoid theoretical NULL pointer dereference in kvm_irq_delivery_to_apic_fast()" }, @@ -16141,15 +16069,9 @@ "CVE-2018-12931": { "cmt_msg": "" }, - "CVE-2023-38426": { - "cmt_msg": "ksmbd: fix global-out-of-bounds in smb2_find_context_vals" - }, "CVE-2020-12769": { "cmt_msg": "spi: spi-dw: Add lock protect dw_spi rx/tx to prevent concurrent calls" }, - "CVE-2023-32248": { - "cmt_msg": "ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()" - }, "CVE-2021-32399": { "cmt_msg": "bluetooth: eliminate the potential race condition when removing the HCI controller" }, @@ -16174,9 +16096,6 @@ "CVE-2019-19543": { "cmt_msg": "media: serial_ir: Fix use-after-free in serial_ir_init_module" }, - "CVE-2023-38427": { - "cmt_msg": "ksmbd: fix out-of-bound read in deassemble_neg_contexts()" - }, "CVE-2021-3732": { "cmt_msg": "ovl: prevent private clone if bind mount is not allowed" }, @@ -16243,9 +16162,6 @@ "CVE-2019-11191": { "cmt_msg": "x86: Deprecate a.out support" }, - "CVE-2023-35001": { - "cmt_msg": "netfilter: nf_tables: prevent OOB access in nft_byteorder_eval" - }, "CVE-2018-10323": { "cmt_msg": "xfs: set format back to extents if xfs_bmap_extents_to_btree" }, @@ -16261,9 +16177,6 @@ "CVE-2021-3609": { "cmt_msg": "can: bcm: delay release of struct bcm_op after synchronize_rcu()" }, - "CVE-2022-48502": { - "cmt_msg": "fs/ntfs3: Check fields while reading" - }, "CVE-2019-19536": { "cmt_msg": "can: peak_usb: pcan_usb_pro: Fix info-leaks to USB devices" }, @@ -16375,9 +16288,6 @@ "CVE-2019-20811": { "cmt_msg": "net-sysfs: call dev_hold if kobject_init_and_add success" }, - "CVE-2023-38428": { - "cmt_msg": "ksmbd: fix wrong UserName check in session_user" - }, "CVE-2020-26559": { "cmt_msg": "" }, @@ -16570,6 +16480,9 @@ "CVE-2019-2025": { "cmt_msg": "binder: fix race that allows malicious free of live buffer" }, + "CVE-2023-3773": { + "cmt_msg": "" + }, "CVE-2021-3587": { "cmt_msg": "nfc: fix NULL ptr dereference in llcp_sock_getname() after failed connect" }, @@ -16597,8 +16510,8 @@ "CVE-2022-0322": { "cmt_msg": "sctp: account stream padding length for reconf chunk" }, - "CVE-2023-0386": { - "cmt_msg": "ovl: fail on invalid uid/gid mapping at copy up" + "CVE-2022-3533": { + "cmt_msg": "" }, "CVE-2017-13693": { "cmt_msg": "" @@ -16792,9 +16705,6 @@ "CVE-2019-15902": { "cmt_msg": "unknown" }, - "CVE-2023-32250": { - "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" - }, "CVE-2023-3358": { "cmt_msg": "HID: intel_ish-hid: Add check for ishtp_dma_tx_map" }, @@ -16843,12 +16753,12 @@ "CVE-2022-26490": { "cmt_msg": "nfc: st21nfca: Fix potential buffer overflows in EVT_TRANSACTION" }, + "CVE-2023-3812": { + "cmt_msg": "net: tun: fix bugs for oversize packet when napi frags enabled" + }, "CVE-2021-0937": { "cmt_msg": "netfilter: x_tables: fix compat match/target pad out-of-bound write" }, - "CVE-2023-32247": { - "cmt_msg": "ksmbd: destroy expired sessions" - }, "CVE-2022-3169": { "cmt_msg": "nvme: ensure subsystem reset is single threaded" }, @@ -16927,12 +16837,6 @@ "CVE-2020-35519": { "cmt_msg": "net/x25: prevent a couple of overflows" }, - "CVE-2023-32257": { - "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" - }, - "CVE-2023-32254": { - "cmt_msg": "ksmbd: fix racy issue under cocurrent smb2 tree disconnect" - }, "CVE-2021-28971": { "cmt_msg": "perf/x86/intel: Fix a crash caused by zero PEBS status" }, @@ -16990,12 +16894,18 @@ "CVE-2020-25284": { "cmt_msg": "rbd: require global CAP_SYS_ADMIN for mapping and unmapping" }, + "CVE-2022-3606": { + "cmt_msg": "" + }, "CVE-2023-3640": { "cmt_msg": "" }, "CVE-2018-18281": { "cmt_msg": "mremap: properly flush TLB before releasing the page" }, + "CVE-2023-20593": { + "cmt_msg": "x86/cpu/amd: Add a Zenbleed fix" + }, "CVE-2023-0160": { "cmt_msg": "" }, @@ -17203,6 +17113,9 @@ "CVE-2019-20908": { "cmt_msg": "efi: Restrict efivar_ssdt_load when the kernel is locked down" }, + "CVE-2023-3776": { + "cmt_msg": "net/sched: cls_fw: Fix improper refcount update leads to use-after-free" + }, "CVE-2021-28038": { "cmt_msg": "Xen/gnttab: handle p2m update errors on a per-slot basis" }, @@ -17266,9 +17179,6 @@ "CVE-2010-4563": { "cmt_msg": "" }, - "CVE-2023-35693": { - "cmt_msg": "" - }, "CVE-2023-1249": { "cmt_msg": "coredump: Use the vma snapshot in fill_files_note" }, @@ -17347,6 +17257,9 @@ "CVE-2021-3573": { "cmt_msg": "Bluetooth: use correct lock to prevent UAF of hdev object" }, + "CVE-2023-3609": { + "cmt_msg": "net/sched: cls_u32: Fix reference counter leak leading to overflow" + }, "CVE-2018-1000026": { "cmt_msg": "bnx2x: disable GSO where gso_size is too big for hardware" }, @@ -17389,6 +17302,9 @@ "CVE-2022-1280": { "cmt_msg": "drm: avoid circular locks in drm_mode_getconnector" }, + "CVE-2023-3772": { + "cmt_msg": "" + }, "CVE-2020-11668": { "cmt_msg": "media: xirlink_cit: add missing descriptor sanity checks" }, @@ -17605,9 +17521,6 @@ "CVE-2021-39800": { "cmt_msg": "" }, - "CVE-2023-38429": { - "cmt_msg": "ksmbd: allocate one more byte for implied bcc[0]" - }, "CVE-2018-16884": { "cmt_msg": "sunrpc: use-after-free in svc_process_common()" }, @@ -21586,6 +21499,9 @@ } }, "outstanding": { + "CVE-2023-20593": { + "cmt_msg": "x86/cpu/amd: Add a Zenbleed fix" + }, "CVE-2023-0160": { "cmt_msg": "" }, @@ -21625,9 +21541,6 @@ "CVE-2023-2007": { "cmt_msg": "scsi: dpt_i2o: Remove obsolete driver" }, - "CVE-2023-38427": { - "cmt_msg": "ksmbd: fix out-of-bound read in deassemble_neg_contexts()" - }, "CVE-2019-19378": { "cmt_msg": "" }, @@ -21661,18 +21574,9 @@ "CVE-2019-19449": { "cmt_msg": "f2fs: fix to do sanity check on segment/section count" }, - "CVE-2023-38428": { - "cmt_msg": "ksmbd: fix wrong UserName check in session_user" - }, - "CVE-2023-35693": { - "cmt_msg": "" - }, "CVE-2020-26541": { "cmt_msg": "certs: Add EFI_CERT_X509_GUID support for dbx entries" }, - "CVE-2023-38430": { - "cmt_msg": "ksmbd: validate smb request protocol id" - }, "CVE-2020-11725": { "cmt_msg": "" }, @@ -21694,6 +21598,9 @@ "CVE-2022-1263": { "cmt_msg": "KVM: avoid NULL pointer dereference in kvm_dirty_ring_push" }, + "CVE-2023-3812": { + "cmt_msg": "net: tun: fix bugs for oversize packet when napi frags enabled" + }, "CVE-2021-35477": { "cmt_msg": "bpf: Introduce BPF nospec instruction for mitigating Spectre v4" }, @@ -21724,6 +21631,9 @@ "CVE-2023-3390": { "cmt_msg": "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE" }, + "CVE-2023-3776": { + "cmt_msg": "net/sched: cls_fw: Fix improper refcount update leads to use-after-free" + }, "CVE-2022-3595": { "cmt_msg": "cifs: fix double-fault crash during ntlmssp" }, @@ -21823,9 +21733,6 @@ "CVE-2020-26145": { "cmt_msg": "ath10k: drop fragments with multicast DA for PCIe" }, - "CVE-2023-32257": { - "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" - }, "CVE-2022-29901": { "cmt_msg": "x86/kvm/vmx: Make noinstr clean" }, @@ -21850,12 +21757,18 @@ "CVE-2017-9986": { "cmt_msg": "sound: Retire OSS" }, - "CVE-2023-32258": { - "cmt_msg": "ksmbd: fix racy issue from smb2 close and logoff with multichannel" + "CVE-2023-3773": { + "cmt_msg": "" + }, + "CVE-2023-3772": { + "cmt_msg": "" }, "CVE-2021-34556": { "cmt_msg": "bpf: Introduce BPF nospec instruction for mitigating Spectre v4" }, + "CVE-2022-3533": { + "cmt_msg": "" + }, "CVE-2022-3534": { "cmt_msg": "libbpf: Fix use-after-free in btf_dump_name_dups" }, @@ -21865,12 +21778,12 @@ "CVE-2022-2991": { "cmt_msg": "remove the lightnvm subsystem" }, - "CVE-2023-38426": { - "cmt_msg": "ksmbd: fix global-out-of-bounds in smb2_find_context_vals" - }, "CVE-2022-3624": { "cmt_msg": "bonding: fix reference count leak in balance-alb mode" }, + "CVE-2022-3606": { + "cmt_msg": "" + }, "CVE-2021-3669": { "cmt_msg": "ipc: replace costly bailout check in sysvipc_find_ipc()" }, @@ -21910,6 +21823,9 @@ "CVE-2023-2176": { "cmt_msg": "RDMA/core: Refactor rdma_bind_addr" }, + "CVE-2023-3609": { + "cmt_msg": "net/sched: cls_u32: Fix reference counter leak leading to overflow" + }, "CVE-2013-7445": { "cmt_msg": "" }, @@ -22018,6 +21934,9 @@ "CVE-2022-4129": { "cmt_msg": "l2tp: Serialize access to sk_user_data with sk_callback_lock" }, + "CVE-2023-3611": { + "cmt_msg": "net/sched: sch_qfq: account for stab overhead in qfq_enqueue" + }, "CVE-2020-12364": { "cmt_msg": "drm/i915/guc: Update to use firmware v49.0.1" }, @@ -22039,6 +21958,9 @@ "CVE-2022-3642": { "cmt_msg": "" }, + "CVE-2023-3117": { + "cmt_msg": "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE" + }, "CVE-2020-26141": { "cmt_msg": "ath10k: Fix TKIP Michael MIC verification for PCIe" }, @@ -22075,9 +21997,6 @@ "CVE-2022-3566": { "cmt_msg": "tcp: Fix data races around icsk->icsk_af_ops." }, - "CVE-2023-38431": { - "cmt_msg": "ksmbd: check the validation of pdu_size in ksmbd_conn_handler_loop" - }, "CVE-2018-17977": { "cmt_msg": "" }, @@ -22105,12 +22024,6 @@ "CVE-2022-21385": { "cmt_msg": "net/rds: fix warn in rds_message_alloc_sgs" }, - "CVE-2023-32248": { - "cmt_msg": "ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()" - }, - "CVE-2023-38432": { - "cmt_msg": "ksmbd: validate command payload size" - }, "CVE-2021-39801": { "cmt_msg": "" }, @@ -22120,21 +22033,18 @@ "CVE-2022-3169": { "cmt_msg": "nvme: ensure subsystem reset is single threaded" }, - "CVE-2023-32247": { - "cmt_msg": "ksmbd: destroy expired sessions" - }, "CVE-2022-4269": { "cmt_msg": "act_mirred: use the backlog for nested calls to mirred ingress" }, - "CVE-2023-38429": { - "cmt_msg": "ksmbd: allocate one more byte for implied bcc[0]" - }, "CVE-2020-36385": { "cmt_msg": "RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy" }, "CVE-2022-20166": { "cmt_msg": "drivers core: Use sysfs_emit and sysfs_emit_at for show(device *...) functions" }, + "CVE-2023-3863": { + "cmt_msg": "net: nfc: Fix use-after-free caused by nfc_llcp_find_local" + }, "CVE-2019-12380": { "cmt_msg": "efi/x86/Add missing error handling to old_memmap 1:1 mapping code" }, @@ -22204,18 +22114,9 @@ "CVE-2023-1611": { "cmt_msg": "btrfs: fix race between quota disable and quota assign ioctls" }, - "CVE-2023-32254": { - "cmt_msg": "ksmbd: fix racy issue under cocurrent smb2 tree disconnect" - }, - "CVE-2023-32252": { - "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" - }, "CVE-2018-20449": { "cmt_msg": "printk: hash addresses printed with %p" }, - "CVE-2023-32250": { - "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" - }, "CVE-2016-10723": { "cmt_msg": "mm, oom: remove sleep from under oom_lock" }, @@ -22273,9 +22174,6 @@ "CVE-2022-4744": { "cmt_msg": "tun: avoid double free in tun_free_netdev" }, - "CVE-2022-48502": { - "cmt_msg": "fs/ntfs3: Check fields while reading" - }, "CVE-2019-5489": { "cmt_msg": "Change mincore() to count \"mapped\" pages rather than \"cached\" pages" }, @@ -22479,9 +22377,6 @@ "CVE-2019-15090": { "cmt_msg": "scsi: qedi: remove memset/memcpy to nfunc and use func instead" }, - "CVE-2023-32258": { - "cmt_msg": "ksmbd: fix racy issue from smb2 close and logoff with multichannel" - }, "CVE-2022-3649": { "cmt_msg": "nilfs2: fix use-after-free bug of struct nilfs_root" }, @@ -22752,9 +22647,6 @@ "CVE-2018-13097": { "cmt_msg": "f2fs: fix to do sanity check with user_block_count" }, - "CVE-2023-38430": { - "cmt_msg": "ksmbd: validate smb request protocol id" - }, "CVE-2018-13095": { "cmt_msg": "xfs: More robust inode extent count validation" }, @@ -22962,6 +22854,9 @@ "CVE-2021-3564": { "cmt_msg": "Bluetooth: fix the erroneous flush_work() order" }, + "CVE-2023-3611": { + "cmt_msg": "net/sched: sch_qfq: account for stab overhead in qfq_enqueue" + }, "CVE-2020-26560": { "cmt_msg": "" }, @@ -23037,9 +22932,6 @@ "CVE-2018-20511": { "cmt_msg": "net/appletalk: fix minor pointer leak to userspace in SIOCFINDIPDDPRT" }, - "CVE-2023-38431": { - "cmt_msg": "ksmbd: check the validation of pdu_size in ksmbd_conn_handler_loop" - }, "CVE-2022-20166": { "cmt_msg": "drivers core: Use sysfs_emit and sysfs_emit_at for show(device *...) functions" }, @@ -23073,9 +22965,6 @@ "CVE-2020-36386": { "cmt_msg": "Bluetooth: Fix slab-out-of-bounds read in hci_extended_inquiry_result_evt()" }, - "CVE-2023-38432": { - "cmt_msg": "ksmbd: validate command payload size" - }, "CVE-2022-3567": { "cmt_msg": "ipv6: Fix data races around sk->sk_prot." }, @@ -23199,8 +23088,8 @@ "CVE-2020-0255": { "cmt_msg": "selinux: properly handle multiple messages in selinux_netlink_send()" }, - "CVE-2023-32252": { - "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" + "CVE-2023-35001": { + "cmt_msg": "netfilter: nf_tables: prevent OOB access in nft_byteorder_eval" }, "CVE-2022-27666": { "cmt_msg": "esp: Fix possible buffer overflow in ESP transformation" @@ -23451,6 +23340,9 @@ "CVE-2007-3719": { "cmt_msg": "" }, + "CVE-2023-3863": { + "cmt_msg": "net: nfc: Fix use-after-free caused by nfc_llcp_find_local" + }, "CVE-2023-0590": { "cmt_msg": "net: sched: fix race condition in qdisc_graft()" }, @@ -23658,6 +23550,9 @@ "CVE-2022-4129": { "cmt_msg": "l2tp: Serialize access to sk_user_data with sk_callback_lock" }, + "CVE-2023-3117": { + "cmt_msg": "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE" + }, "CVE-2022-28389": { "cmt_msg": "can: mcba_usb: mcba_usb_start_xmit(): fix double dev_kfree_skb in error path" }, @@ -23748,18 +23643,12 @@ "CVE-2018-12931": { "cmt_msg": "" }, - "CVE-2023-38426": { - "cmt_msg": "ksmbd: fix global-out-of-bounds in smb2_find_context_vals" - }, "CVE-2020-12768": { "cmt_msg": "KVM: SVM: Fix potential memory leak in svm_cpu_init()" }, "CVE-2020-12769": { "cmt_msg": "spi: spi-dw: Add lock protect dw_spi rx/tx to prevent concurrent calls" }, - "CVE-2023-32248": { - "cmt_msg": "ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()" - }, "CVE-2021-32399": { "cmt_msg": "bluetooth: eliminate the potential race condition when removing the HCI controller" }, @@ -23847,9 +23736,6 @@ "CVE-2019-11191": { "cmt_msg": "x86: Deprecate a.out support" }, - "CVE-2023-35001": { - "cmt_msg": "netfilter: nf_tables: prevent OOB access in nft_byteorder_eval" - }, "CVE-2020-10781": { "cmt_msg": "Revert \"zram: convert remaining CLASS_ATTR() to CLASS_ATTR_RO()\"" }, @@ -23862,9 +23748,6 @@ "CVE-2021-3609": { "cmt_msg": "can: bcm: delay release of struct bcm_op after synchronize_rcu()" }, - "CVE-2022-48502": { - "cmt_msg": "fs/ntfs3: Check fields while reading" - }, "CVE-2019-19536": { "cmt_msg": "can: peak_usb: pcan_usb_pro: Fix info-leaks to USB devices" }, @@ -23922,9 +23805,6 @@ "CVE-2023-0615": { "cmt_msg": "media: vivid: dev->bitmap_cap wasn't freed in all cases" }, - "CVE-2023-38427": { - "cmt_msg": "ksmbd: fix out-of-bound read in deassemble_neg_contexts()" - }, "CVE-2019-14896": { "cmt_msg": "libertas: Fix two buffer overflows at parsing bss descriptor" }, @@ -23967,9 +23847,6 @@ "CVE-2019-20811": { "cmt_msg": "net-sysfs: call dev_hold if kobject_init_and_add success" }, - "CVE-2023-38428": { - "cmt_msg": "ksmbd: fix wrong UserName check in session_user" - }, "CVE-2023-3390": { "cmt_msg": "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE" }, @@ -24147,6 +24024,9 @@ "CVE-2019-2025": { "cmt_msg": "binder: fix race that allows malicious free of live buffer" }, + "CVE-2023-3773": { + "cmt_msg": "" + }, "CVE-2021-3587": { "cmt_msg": "nfc: fix NULL ptr dereference in llcp_sock_getname() after failed connect" }, @@ -24156,6 +24036,9 @@ "CVE-2019-16994": { "cmt_msg": "net: sit: fix memory leak in sit_init_net()" }, + "CVE-2022-3533": { + "cmt_msg": "" + }, "CVE-2022-3534": { "cmt_msg": "libbpf: Fix use-after-free in btf_dump_name_dups" }, @@ -24360,9 +24243,6 @@ "CVE-2020-0543": { "cmt_msg": "x86/cpu: Add 'table' argument to cpu_matches()" }, - "CVE-2023-32250": { - "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" - }, "CVE-2023-3358": { "cmt_msg": "HID: intel_ish-hid: Add check for ishtp_dma_tx_map" }, @@ -24411,8 +24291,8 @@ "CVE-2022-26490": { "cmt_msg": "nfc: st21nfca: Fix potential buffer overflows in EVT_TRANSACTION" }, - "CVE-2023-32247": { - "cmt_msg": "ksmbd: destroy expired sessions" + "CVE-2023-3812": { + "cmt_msg": "net: tun: fix bugs for oversize packet when napi frags enabled" }, "CVE-2022-3169": { "cmt_msg": "nvme: ensure subsystem reset is single threaded" @@ -24486,12 +24366,6 @@ "CVE-2020-35519": { "cmt_msg": "net/x25: prevent a couple of overflows" }, - "CVE-2023-32257": { - "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" - }, - "CVE-2023-32254": { - "cmt_msg": "ksmbd: fix racy issue under cocurrent smb2 tree disconnect" - }, "CVE-2021-28971": { "cmt_msg": "perf/x86/intel: Fix a crash caused by zero PEBS status" }, @@ -24543,12 +24417,18 @@ "CVE-2020-25284": { "cmt_msg": "rbd: require global CAP_SYS_ADMIN for mapping and unmapping" }, + "CVE-2022-3606": { + "cmt_msg": "" + }, "CVE-2023-3640": { "cmt_msg": "" }, "CVE-2018-18281": { "cmt_msg": "mremap: properly flush TLB before releasing the page" }, + "CVE-2023-20593": { + "cmt_msg": "x86/cpu/amd: Add a Zenbleed fix" + }, "CVE-2023-0160": { "cmt_msg": "" }, @@ -24753,6 +24633,9 @@ "CVE-2019-20908": { "cmt_msg": "efi: Restrict efivar_ssdt_load when the kernel is locked down" }, + "CVE-2023-3776": { + "cmt_msg": "net/sched: cls_fw: Fix improper refcount update leads to use-after-free" + }, "CVE-2021-28038": { "cmt_msg": "Xen/gnttab: handle p2m update errors on a per-slot basis" }, @@ -24804,9 +24687,6 @@ "CVE-2010-4563": { "cmt_msg": "" }, - "CVE-2023-35693": { - "cmt_msg": "" - }, "CVE-2023-1249": { "cmt_msg": "coredump: Use the vma snapshot in fill_files_note" }, @@ -24882,6 +24762,9 @@ "CVE-2021-3573": { "cmt_msg": "Bluetooth: use correct lock to prevent UAF of hdev object" }, + "CVE-2023-3609": { + "cmt_msg": "net/sched: cls_u32: Fix reference counter leak leading to overflow" + }, "CVE-2022-1974": { "cmt_msg": "nfc: replace improper check device_is_registered() in netlink related functions" }, @@ -24915,6 +24798,9 @@ "CVE-2022-1280": { "cmt_msg": "drm: avoid circular locks in drm_mode_getconnector" }, + "CVE-2023-3772": { + "cmt_msg": "" + }, "CVE-2020-11668": { "cmt_msg": "media: xirlink_cit: add missing descriptor sanity checks" }, @@ -25137,9 +25023,6 @@ "CVE-2021-39800": { "cmt_msg": "" }, - "CVE-2023-38429": { - "cmt_msg": "ksmbd: allocate one more byte for implied bcc[0]" - }, "CVE-2018-16884": { "cmt_msg": "sunrpc: use-after-free in svc_process_common()" }, @@ -25440,9 +25323,6 @@ "CVE-2019-15090": { "cmt_msg": "scsi: qedi: remove memset/memcpy to nfunc and use func instead" }, - "CVE-2023-32258": { - "cmt_msg": "ksmbd: fix racy issue from smb2 close and logoff with multichannel" - }, "CVE-2022-3649": { "cmt_msg": "nilfs2: fix use-after-free bug of struct nilfs_root" }, @@ -25932,6 +25812,9 @@ "CVE-2021-3564": { "cmt_msg": "Bluetooth: fix the erroneous flush_work() order" }, + "CVE-2023-3611": { + "cmt_msg": "net/sched: sch_qfq: account for stab overhead in qfq_enqueue" + }, "CVE-2020-26560": { "cmt_msg": "" }, @@ -26013,9 +25896,6 @@ "CVE-2018-20511": { "cmt_msg": "net/appletalk: fix minor pointer leak to userspace in SIOCFINDIPDDPRT" }, - "CVE-2023-38431": { - "cmt_msg": "ksmbd: check the validation of pdu_size in ksmbd_conn_handler_loop" - }, "CVE-2022-20166": { "cmt_msg": "drivers core: Use sysfs_emit and sysfs_emit_at for show(device *...) functions" }, @@ -26049,9 +25929,6 @@ "CVE-2020-36386": { "cmt_msg": "Bluetooth: Fix slab-out-of-bounds read in hci_extended_inquiry_result_evt()" }, - "CVE-2023-38432": { - "cmt_msg": "ksmbd: validate command payload size" - }, "CVE-2022-3567": { "cmt_msg": "ipv6: Fix data races around sk->sk_prot." }, @@ -26184,8 +26061,8 @@ "CVE-2020-0255": { "cmt_msg": "selinux: properly handle multiple messages in selinux_netlink_send()" }, - "CVE-2023-32252": { - "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" + "CVE-2023-35001": { + "cmt_msg": "netfilter: nf_tables: prevent OOB access in nft_byteorder_eval" }, "CVE-2022-27666": { "cmt_msg": "esp: Fix possible buffer overflow in ESP transformation" @@ -26433,6 +26310,9 @@ "CVE-2007-3719": { "cmt_msg": "" }, + "CVE-2023-3863": { + "cmt_msg": "net: nfc: Fix use-after-free caused by nfc_llcp_find_local" + }, "CVE-2023-0590": { "cmt_msg": "net: sched: fix race condition in qdisc_graft()" }, @@ -26649,6 +26529,9 @@ "CVE-2022-4129": { "cmt_msg": "l2tp: Serialize access to sk_user_data with sk_callback_lock" }, + "CVE-2023-3117": { + "cmt_msg": "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE" + }, "CVE-2022-28389": { "cmt_msg": "can: mcba_usb: mcba_usb_start_xmit(): fix double dev_kfree_skb in error path" }, @@ -26730,9 +26613,6 @@ "CVE-2022-23036": { "cmt_msg": "xen/grant-table: add gnttab_try_end_foreign_access()" }, - "CVE-2023-38430": { - "cmt_msg": "ksmbd: validate smb request protocol id" - }, "CVE-2022-2153": { "cmt_msg": "KVM: x86: Avoid theoretical NULL pointer dereference in kvm_irq_delivery_to_apic_fast()" }, @@ -26745,18 +26625,12 @@ "CVE-2018-12931": { "cmt_msg": "" }, - "CVE-2023-38426": { - "cmt_msg": "ksmbd: fix global-out-of-bounds in smb2_find_context_vals" - }, "CVE-2020-12768": { "cmt_msg": "KVM: SVM: Fix potential memory leak in svm_cpu_init()" }, "CVE-2020-12769": { "cmt_msg": "spi: spi-dw: Add lock protect dw_spi rx/tx to prevent concurrent calls" }, - "CVE-2023-32248": { - "cmt_msg": "ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()" - }, "CVE-2021-32399": { "cmt_msg": "bluetooth: eliminate the potential race condition when removing the HCI controller" }, @@ -26847,9 +26721,6 @@ "CVE-2019-11191": { "cmt_msg": "x86: Deprecate a.out support" }, - "CVE-2023-35001": { - "cmt_msg": "netfilter: nf_tables: prevent OOB access in nft_byteorder_eval" - }, "CVE-2018-10323": { "cmt_msg": "xfs: set format back to extents if xfs_bmap_extents_to_btree" }, @@ -26865,9 +26736,6 @@ "CVE-2021-3609": { "cmt_msg": "can: bcm: delay release of struct bcm_op after synchronize_rcu()" }, - "CVE-2022-48502": { - "cmt_msg": "fs/ntfs3: Check fields while reading" - }, "CVE-2019-19536": { "cmt_msg": "can: peak_usb: pcan_usb_pro: Fix info-leaks to USB devices" }, @@ -26934,9 +26802,6 @@ "CVE-2023-0615": { "cmt_msg": "media: vivid: dev->bitmap_cap wasn't freed in all cases" }, - "CVE-2023-38427": { - "cmt_msg": "ksmbd: fix out-of-bound read in deassemble_neg_contexts()" - }, "CVE-2019-14896": { "cmt_msg": "libertas: Fix two buffer overflows at parsing bss descriptor" }, @@ -26979,9 +26844,6 @@ "CVE-2019-20811": { "cmt_msg": "net-sysfs: call dev_hold if kobject_init_and_add success" }, - "CVE-2023-38428": { - "cmt_msg": "ksmbd: fix wrong UserName check in session_user" - }, "CVE-2020-26559": { "cmt_msg": "" }, @@ -27162,6 +27024,9 @@ "CVE-2019-2025": { "cmt_msg": "binder: fix race that allows malicious free of live buffer" }, + "CVE-2023-3773": { + "cmt_msg": "" + }, "CVE-2021-3587": { "cmt_msg": "nfc: fix NULL ptr dereference in llcp_sock_getname() after failed connect" }, @@ -27171,6 +27036,9 @@ "CVE-2019-16994": { "cmt_msg": "net: sit: fix memory leak in sit_init_net()" }, + "CVE-2022-3533": { + "cmt_msg": "" + }, "CVE-2022-3534": { "cmt_msg": "libbpf: Fix use-after-free in btf_dump_name_dups" }, @@ -27375,9 +27243,6 @@ "CVE-2019-15902": { "cmt_msg": "unknown" }, - "CVE-2023-32250": { - "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" - }, "CVE-2023-3358": { "cmt_msg": "HID: intel_ish-hid: Add check for ishtp_dma_tx_map" }, @@ -27426,8 +27291,8 @@ "CVE-2022-26490": { "cmt_msg": "nfc: st21nfca: Fix potential buffer overflows in EVT_TRANSACTION" }, - "CVE-2023-32247": { - "cmt_msg": "ksmbd: destroy expired sessions" + "CVE-2023-3812": { + "cmt_msg": "net: tun: fix bugs for oversize packet when napi frags enabled" }, "CVE-2022-3169": { "cmt_msg": "nvme: ensure subsystem reset is single threaded" @@ -27504,12 +27369,6 @@ "CVE-2020-35519": { "cmt_msg": "net/x25: prevent a couple of overflows" }, - "CVE-2023-32257": { - "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" - }, - "CVE-2023-32254": { - "cmt_msg": "ksmbd: fix racy issue under cocurrent smb2 tree disconnect" - }, "CVE-2021-28971": { "cmt_msg": "perf/x86/intel: Fix a crash caused by zero PEBS status" }, @@ -27564,12 +27423,18 @@ "CVE-2020-25284": { "cmt_msg": "rbd: require global CAP_SYS_ADMIN for mapping and unmapping" }, + "CVE-2022-3606": { + "cmt_msg": "" + }, "CVE-2023-3640": { "cmt_msg": "" }, "CVE-2018-18281": { "cmt_msg": "mremap: properly flush TLB before releasing the page" }, + "CVE-2023-20593": { + "cmt_msg": "x86/cpu/amd: Add a Zenbleed fix" + }, "CVE-2023-0160": { "cmt_msg": "" }, @@ -27777,6 +27642,9 @@ "CVE-2019-20908": { "cmt_msg": "efi: Restrict efivar_ssdt_load when the kernel is locked down" }, + "CVE-2023-3776": { + "cmt_msg": "net/sched: cls_fw: Fix improper refcount update leads to use-after-free" + }, "CVE-2021-28038": { "cmt_msg": "Xen/gnttab: handle p2m update errors on a per-slot basis" }, @@ -27837,9 +27705,6 @@ "CVE-2010-4563": { "cmt_msg": "" }, - "CVE-2023-35693": { - "cmt_msg": "" - }, "CVE-2023-1249": { "cmt_msg": "coredump: Use the vma snapshot in fill_files_note" }, @@ -27918,6 +27783,9 @@ "CVE-2021-3573": { "cmt_msg": "Bluetooth: use correct lock to prevent UAF of hdev object" }, + "CVE-2023-3609": { + "cmt_msg": "net/sched: cls_u32: Fix reference counter leak leading to overflow" + }, "CVE-2022-1974": { "cmt_msg": "nfc: replace improper check device_is_registered() in netlink related functions" }, @@ -27960,6 +27828,9 @@ "CVE-2022-1280": { "cmt_msg": "drm: avoid circular locks in drm_mode_getconnector" }, + "CVE-2023-3772": { + "cmt_msg": "" + }, "CVE-2020-11668": { "cmt_msg": "media: xirlink_cit: add missing descriptor sanity checks" }, @@ -28173,9 +28044,6 @@ "CVE-2021-39800": { "cmt_msg": "" }, - "CVE-2023-38429": { - "cmt_msg": "ksmbd: allocate one more byte for implied bcc[0]" - }, "CVE-2018-16884": { "cmt_msg": "sunrpc: use-after-free in svc_process_common()" }, @@ -31346,6 +31214,10 @@ "cmt_msg": "wifi: brcmfmac: Fix potential buffer overflow in brcmf_fweh_event_worker()", "cmt_id": "5e7d546917431400b7d6e5e38f588e0bd13083c9" }, + "CVE-2023-3812": { + "cmt_msg": "net: tun: fix bugs for oversize packet when napi frags enabled", + "cmt_id": "aa815bf32acf560dad63c3dc46bc7b98ca9a9672" + }, "CVE-2022-42895": { "cmt_msg": "Bluetooth: L2CAP: Fix attempting to access uninitialized memory", "cmt_id": "36919a82f335784d86b4def308739559bb47943d" @@ -31655,6 +31527,12 @@ "cmt_id": "3e77bbc87342841db66c18a3afca0441c8c555e4" } }, + "4.19.289": { + "CVE-2023-20593": { + "cmt_msg": "x86/cpu/amd: Add a Zenbleed fix", + "cmt_id": "cfef7bbf0dca27209ea5d82d7060d4fc2c0d72ea" + } + }, "outstanding": { "CVE-2023-0160": { "cmt_msg": "" @@ -31692,9 +31570,6 @@ "CVE-2018-1121": { "cmt_msg": "" }, - "CVE-2023-38427": { - "cmt_msg": "ksmbd: fix out-of-bound read in deassemble_neg_contexts()" - }, "CVE-2019-19378": { "cmt_msg": "" }, @@ -31728,9 +31603,6 @@ "CVE-2020-27820": { "cmt_msg": "drm/nouveau: use drm_dev_unplug() during device removal" }, - "CVE-2023-32250": { - "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" - }, "CVE-2020-24503": { "cmt_msg": "" }, @@ -31740,18 +31612,12 @@ "CVE-2019-19449": { "cmt_msg": "f2fs: fix to do sanity check on segment/section count" }, - "CVE-2023-38428": { - "cmt_msg": "ksmbd: fix wrong UserName check in session_user" - }, "CVE-2020-24504": { "cmt_msg": "ice: create scheduler aggregator node config and move VSIs" }, "CVE-2020-26541": { "cmt_msg": "certs: Add EFI_CERT_X509_GUID support for dbx entries" }, - "CVE-2023-38430": { - "cmt_msg": "ksmbd: validate smb request protocol id" - }, "CVE-2020-11725": { "cmt_msg": "" }, @@ -31794,6 +31660,9 @@ "CVE-2023-3390": { "cmt_msg": "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE" }, + "CVE-2023-3776": { + "cmt_msg": "net/sched: cls_fw: Fix improper refcount update leads to use-after-free" + }, "CVE-2022-3595": { "cmt_msg": "cifs: fix double-fault crash during ntlmssp" }, @@ -31869,9 +31738,6 @@ "CVE-2022-45919": { "cmt_msg": "" }, - "CVE-2023-32258": { - "cmt_msg": "ksmbd: fix racy issue from smb2 close and logoff with multichannel" - }, "CVE-2023-2007": { "cmt_msg": "scsi: dpt_i2o: Remove obsolete driver" }, @@ -31899,8 +31765,14 @@ "CVE-2023-1077": { "cmt_msg": "sched/rt: pick_next_rt_entity(): check list_entry" }, - "CVE-2023-32254": { - "cmt_msg": "ksmbd: fix racy issue under cocurrent smb2 tree disconnect" + "CVE-2023-3773": { + "cmt_msg": "" + }, + "CVE-2023-3772": { + "cmt_msg": "" + }, + "CVE-2022-3533": { + "cmt_msg": "" }, "CVE-2021-20177": { "cmt_msg": "netfilter: add and use nf_hook_slow_list()" @@ -31911,15 +31783,15 @@ "CVE-2022-2991": { "cmt_msg": "remove the lightnvm subsystem" }, - "CVE-2023-38426": { - "cmt_msg": "ksmbd: fix global-out-of-bounds in smb2_find_context_vals" - }, "CVE-2022-3624": { "cmt_msg": "bonding: fix reference count leak in balance-alb mode" }, "CVE-2022-3625": { "cmt_msg": "devlink: Fix use-after-free after a failed reload" }, + "CVE-2022-3606": { + "cmt_msg": "" + }, "CVE-2021-3669": { "cmt_msg": "ipc: replace costly bailout check in sysvipc_find_ipc()" }, @@ -31953,15 +31825,15 @@ "CVE-2012-4542": { "cmt_msg": "" }, - "CVE-2023-35693": { - "cmt_msg": "" - }, "CVE-2023-2176": { "cmt_msg": "RDMA/core: Refactor rdma_bind_addr" }, "CVE-2023-2177": { "cmt_msg": "sctp: leave the err path free in sctp_stream_init to sctp_stream_free" }, + "CVE-2023-3609": { + "cmt_msg": "net/sched: cls_u32: Fix reference counter leak leading to overflow" + }, "CVE-2013-7445": { "cmt_msg": "" }, @@ -32058,6 +31930,9 @@ "CVE-2022-4129": { "cmt_msg": "l2tp: Serialize access to sk_user_data with sk_callback_lock" }, + "CVE-2023-3611": { + "cmt_msg": "net/sched: sch_qfq: account for stab overhead in qfq_enqueue" + }, "CVE-2020-12364": { "cmt_msg": "drm/i915/guc: Update to use firmware v49.0.1" }, @@ -32079,6 +31954,9 @@ "CVE-2022-3642": { "cmt_msg": "" }, + "CVE-2023-3117": { + "cmt_msg": "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE" + }, "CVE-2020-26141": { "cmt_msg": "ath10k: Fix TKIP Michael MIC verification for PCIe" }, @@ -32115,9 +31993,6 @@ "CVE-2022-3566": { "cmt_msg": "tcp: Fix data races around icsk->icsk_af_ops." }, - "CVE-2023-38431": { - "cmt_msg": "ksmbd: check the validation of pdu_size in ksmbd_conn_handler_loop" - }, "CVE-2018-17977": { "cmt_msg": "" }, @@ -32145,12 +32020,6 @@ "CVE-2023-3397": { "cmt_msg": "" }, - "CVE-2023-32248": { - "cmt_msg": "ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()" - }, - "CVE-2023-38432": { - "cmt_msg": "ksmbd: validate command payload size" - }, "CVE-2021-39801": { "cmt_msg": "" }, @@ -32160,21 +32029,18 @@ "CVE-2022-3169": { "cmt_msg": "nvme: ensure subsystem reset is single threaded" }, - "CVE-2023-32247": { - "cmt_msg": "ksmbd: destroy expired sessions" - }, "CVE-2022-4269": { "cmt_msg": "act_mirred: use the backlog for nested calls to mirred ingress" }, - "CVE-2023-38429": { - "cmt_msg": "ksmbd: allocate one more byte for implied bcc[0]" - }, "CVE-2020-36385": { "cmt_msg": "RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy" }, "CVE-2022-20166": { "cmt_msg": "drivers core: Use sysfs_emit and sysfs_emit_at for show(device *...) functions" }, + "CVE-2023-3863": { + "cmt_msg": "net: nfc: Fix use-after-free caused by nfc_llcp_find_local" + }, "CVE-2019-12380": { "cmt_msg": "efi/x86/Add missing error handling to old_memmap 1:1 mapping code" }, @@ -32235,18 +32101,12 @@ "CVE-2015-2877": { "cmt_msg": "" }, - "CVE-2023-32257": { - "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" - }, "CVE-2023-1611": { "cmt_msg": "btrfs: fix race between quota disable and quota assign ioctls" }, "CVE-2023-26242": { "cmt_msg": "" }, - "CVE-2023-32252": { - "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" - }, "CVE-2019-16089": { "cmt_msg": "" }, @@ -32292,9 +32152,6 @@ "CVE-2020-27835": { "cmt_msg": "IB/hfi1: Ensure correct mm is used at all times" }, - "CVE-2022-48502": { - "cmt_msg": "fs/ntfs3: Check fields while reading" - }, "CVE-2019-5489": { "cmt_msg": "Change mincore() to count \"mapped\" pages rather than \"cached\" pages" }, @@ -32479,9 +32336,6 @@ "CVE-2019-15090": { "cmt_msg": "scsi: qedi: remove memset/memcpy to nfunc and use func instead" }, - "CVE-2023-32258": { - "cmt_msg": "ksmbd: fix racy issue from smb2 close and logoff with multichannel" - }, "CVE-2022-3649": { "cmt_msg": "nilfs2: fix use-after-free bug of struct nilfs_root" }, @@ -32749,9 +32603,6 @@ "CVE-2018-13097": { "cmt_msg": "f2fs: fix to do sanity check with user_block_count" }, - "CVE-2023-38430": { - "cmt_msg": "ksmbd: validate smb request protocol id" - }, "CVE-2023-3006": { "cmt_msg": "arm64: Add AMPERE1 to the Spectre-BHB affected list" }, @@ -33034,9 +32885,6 @@ "CVE-2019-16229": { "cmt_msg": "drm/amdkfd: fix a potential NULL pointer dereference (v2)" }, - "CVE-2023-38431": { - "cmt_msg": "ksmbd: check the validation of pdu_size in ksmbd_conn_handler_loop" - }, "CVE-2022-20166": { "cmt_msg": "drivers core: Use sysfs_emit and sysfs_emit_at for show(device *...) functions" }, @@ -33070,9 +32918,6 @@ "CVE-2020-36386": { "cmt_msg": "Bluetooth: Fix slab-out-of-bounds read in hci_extended_inquiry_result_evt()" }, - "CVE-2023-38432": { - "cmt_msg": "ksmbd: validate command payload size" - }, "CVE-2022-3567": { "cmt_msg": "ipv6: Fix data races around sk->sk_prot." }, @@ -33187,8 +33032,8 @@ "CVE-2020-0255": { "cmt_msg": "selinux: properly handle multiple messages in selinux_netlink_send()" }, - "CVE-2023-32252": { - "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" + "CVE-2023-35001": { + "cmt_msg": "netfilter: nf_tables: prevent OOB access in nft_byteorder_eval" }, "CVE-2022-27666": { "cmt_msg": "esp: Fix possible buffer overflow in ESP transformation" @@ -33433,6 +33278,9 @@ "CVE-2007-3719": { "cmt_msg": "" }, + "CVE-2023-3863": { + "cmt_msg": "net: nfc: Fix use-after-free caused by nfc_llcp_find_local" + }, "CVE-2023-0590": { "cmt_msg": "net: sched: fix race condition in qdisc_graft()" }, @@ -33646,6 +33494,9 @@ "CVE-2022-4129": { "cmt_msg": "l2tp: Serialize access to sk_user_data with sk_callback_lock" }, + "CVE-2023-3117": { + "cmt_msg": "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE" + }, "CVE-2022-28389": { "cmt_msg": "can: mcba_usb: mcba_usb_start_xmit(): fix double dev_kfree_skb in error path" }, @@ -33736,18 +33587,12 @@ "CVE-2018-12931": { "cmt_msg": "" }, - "CVE-2023-38426": { - "cmt_msg": "ksmbd: fix global-out-of-bounds in smb2_find_context_vals" - }, "CVE-2020-12768": { "cmt_msg": "KVM: SVM: Fix potential memory leak in svm_cpu_init()" }, "CVE-2020-12769": { "cmt_msg": "spi: spi-dw: Add lock protect dw_spi rx/tx to prevent concurrent calls" }, - "CVE-2023-32248": { - "cmt_msg": "ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()" - }, "CVE-2021-32399": { "cmt_msg": "bluetooth: eliminate the potential race condition when removing the HCI controller" }, @@ -33832,9 +33677,6 @@ "CVE-2019-11191": { "cmt_msg": "x86: Deprecate a.out support" }, - "CVE-2023-35001": { - "cmt_msg": "netfilter: nf_tables: prevent OOB access in nft_byteorder_eval" - }, "CVE-2020-10781": { "cmt_msg": "Revert \"zram: convert remaining CLASS_ATTR() to CLASS_ATTR_RO()\"" }, @@ -33847,9 +33689,6 @@ "CVE-2021-3609": { "cmt_msg": "can: bcm: delay release of struct bcm_op after synchronize_rcu()" }, - "CVE-2022-48502": { - "cmt_msg": "fs/ntfs3: Check fields while reading" - }, "CVE-2019-19536": { "cmt_msg": "can: peak_usb: pcan_usb_pro: Fix info-leaks to USB devices" }, @@ -33904,9 +33743,6 @@ "CVE-2023-0615": { "cmt_msg": "media: vivid: dev->bitmap_cap wasn't freed in all cases" }, - "CVE-2023-38427": { - "cmt_msg": "ksmbd: fix out-of-bound read in deassemble_neg_contexts()" - }, "CVE-2019-14896": { "cmt_msg": "libertas: Fix two buffer overflows at parsing bss descriptor" }, @@ -33949,9 +33785,6 @@ "CVE-2019-20811": { "cmt_msg": "net-sysfs: call dev_hold if kobject_init_and_add success" }, - "CVE-2023-38428": { - "cmt_msg": "ksmbd: fix wrong UserName check in session_user" - }, "CVE-2023-3390": { "cmt_msg": "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE" }, @@ -34114,6 +33947,9 @@ "CVE-2022-1966": { "cmt_msg": "netfilter: nf_tables: disallow non-stateful expression in sets earlier" }, + "CVE-2023-3773": { + "cmt_msg": "" + }, "CVE-2021-3587": { "cmt_msg": "nfc: fix NULL ptr dereference in llcp_sock_getname() after failed connect" }, @@ -34123,6 +33959,9 @@ "CVE-2019-16994": { "cmt_msg": "net: sit: fix memory leak in sit_init_net()" }, + "CVE-2022-3533": { + "cmt_msg": "" + }, "CVE-2022-3534": { "cmt_msg": "libbpf: Fix use-after-free in btf_dump_name_dups" }, @@ -34273,6 +34112,9 @@ "CVE-2021-33655": { "cmt_msg": "fbcon: Disallow setting font bigger than screen size" }, + "CVE-2023-3611": { + "cmt_msg": "net/sched: sch_qfq: account for stab overhead in qfq_enqueue" + }, "CVE-2022-41858": { "cmt_msg": "drivers: net: slip: fix NPD bug in sl_tx_timeout()" }, @@ -34327,9 +34169,6 @@ "CVE-2020-0543": { "cmt_msg": "x86/cpu: Add 'table' argument to cpu_matches()" }, - "CVE-2023-32250": { - "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" - }, "CVE-2023-3358": { "cmt_msg": "HID: intel_ish-hid: Add check for ishtp_dma_tx_map" }, @@ -34384,8 +34223,8 @@ "CVE-2022-26490": { "cmt_msg": "nfc: st21nfca: Fix potential buffer overflows in EVT_TRANSACTION" }, - "CVE-2023-32247": { - "cmt_msg": "ksmbd: destroy expired sessions" + "CVE-2023-3812": { + "cmt_msg": "net: tun: fix bugs for oversize packet when napi frags enabled" }, "CVE-2022-3169": { "cmt_msg": "nvme: ensure subsystem reset is single threaded" @@ -34456,12 +34295,6 @@ "CVE-2020-35519": { "cmt_msg": "net/x25: prevent a couple of overflows" }, - "CVE-2023-32257": { - "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" - }, - "CVE-2023-32254": { - "cmt_msg": "ksmbd: fix racy issue under cocurrent smb2 tree disconnect" - }, "CVE-2021-28971": { "cmt_msg": "perf/x86/intel: Fix a crash caused by zero PEBS status" }, @@ -34513,9 +34346,15 @@ "CVE-2020-25284": { "cmt_msg": "rbd: require global CAP_SYS_ADMIN for mapping and unmapping" }, + "CVE-2022-3606": { + "cmt_msg": "" + }, "CVE-2023-3640": { "cmt_msg": "" }, + "CVE-2023-20593": { + "cmt_msg": "x86/cpu/amd: Add a Zenbleed fix" + }, "CVE-2023-0160": { "cmt_msg": "" }, @@ -34708,6 +34547,9 @@ "CVE-2019-20908": { "cmt_msg": "efi: Restrict efivar_ssdt_load when the kernel is locked down" }, + "CVE-2023-3776": { + "cmt_msg": "net/sched: cls_fw: Fix improper refcount update leads to use-after-free" + }, "CVE-2021-28038": { "cmt_msg": "Xen/gnttab: handle p2m update errors on a per-slot basis" }, @@ -34759,9 +34601,6 @@ "CVE-2010-4563": { "cmt_msg": "" }, - "CVE-2023-35693": { - "cmt_msg": "" - }, "CVE-2023-1249": { "cmt_msg": "coredump: Use the vma snapshot in fill_files_note" }, @@ -34831,6 +34670,9 @@ "CVE-2021-3573": { "cmt_msg": "Bluetooth: use correct lock to prevent UAF of hdev object" }, + "CVE-2023-3609": { + "cmt_msg": "net/sched: cls_u32: Fix reference counter leak leading to overflow" + }, "CVE-2022-1974": { "cmt_msg": "nfc: replace improper check device_is_registered() in netlink related functions" }, @@ -34861,6 +34703,9 @@ "CVE-2022-1280": { "cmt_msg": "drm: avoid circular locks in drm_mode_getconnector" }, + "CVE-2023-3772": { + "cmt_msg": "" + }, "CVE-2020-11668": { "cmt_msg": "media: xirlink_cit: add missing descriptor sanity checks" }, @@ -35083,9 +34928,6 @@ "CVE-2021-39800": { "cmt_msg": "" }, - "CVE-2023-38429": { - "cmt_msg": "ksmbd: allocate one more byte for implied bcc[0]" - }, "CVE-2018-16884": { "cmt_msg": "sunrpc: use-after-free in svc_process_common()" }, @@ -36733,9 +36575,6 @@ "CVE-2020-35508": { "cmt_msg": "fork: fix copy_process(CLONE_PARENT) race with the exiting ->real_parent" }, - "CVE-2023-32258": { - "cmt_msg": "ksmbd: fix racy issue from smb2 close and logoff with multichannel" - }, "CVE-2022-3649": { "cmt_msg": "nilfs2: fix use-after-free bug of struct nilfs_root" }, @@ -36751,6 +36590,9 @@ "CVE-2017-10663": { "cmt_msg": "f2fs: sanity check checkpoint segno and blkoff" }, + "CVE-2023-3611": { + "cmt_msg": "net/sched: sch_qfq: account for stab overhead in qfq_enqueue" + }, "CVE-2022-0001": { "cmt_msg": "x86/speculation: Rename RETPOLINE_AMD to RETPOLINE_LFENCE" }, @@ -36940,9 +36782,6 @@ "CVE-2017-7895": { "cmt_msg": "nfsd: stricter decoding of write-like NFSv2/v3 ops" }, - "CVE-2023-38431": { - "cmt_msg": "ksmbd: check the validation of pdu_size in ksmbd_conn_handler_loop" - }, "CVE-2018-14614": { "cmt_msg": "f2fs: fix to do sanity check with cp_pack_start_sum" }, @@ -37333,9 +37172,6 @@ "CVE-2022-2961": { "cmt_msg": "" }, - "CVE-2023-38432": { - "cmt_msg": "ksmbd: validate command payload size" - }, "CVE-2022-3567": { "cmt_msg": "ipv6: Fix data races around sk->sk_prot." }, @@ -37708,6 +37544,9 @@ "CVE-2007-3719": { "cmt_msg": "" }, + "CVE-2023-3863": { + "cmt_msg": "net: nfc: Fix use-after-free caused by nfc_llcp_find_local" + }, "CVE-2023-0590": { "cmt_msg": "net: sched: fix race condition in qdisc_graft()" }, @@ -38023,15 +37862,9 @@ "CVE-2018-12931": { "cmt_msg": "" }, - "CVE-2023-38426": { - "cmt_msg": "ksmbd: fix global-out-of-bounds in smb2_find_context_vals" - }, "CVE-2020-12769": { "cmt_msg": "spi: spi-dw: Add lock protect dw_spi rx/tx to prevent concurrent calls" }, - "CVE-2023-32248": { - "cmt_msg": "ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()" - }, "CVE-2017-8890": { "cmt_msg": "dccp/tcp: do not inherit mc_list from parent" }, @@ -38062,9 +37895,6 @@ "CVE-2022-20166": { "cmt_msg": "drivers core: Use sysfs_emit and sysfs_emit_at for show(device *...) functions" }, - "CVE-2023-38427": { - "cmt_msg": "ksmbd: fix out-of-bound read in deassemble_neg_contexts()" - }, "CVE-2022-25375": { "cmt_msg": "usb: gadget: rndis: check size of RNDIS_MSG_SET command" }, @@ -38275,12 +38105,6 @@ "CVE-2020-26541": { "cmt_msg": "certs: Add EFI_CERT_X509_GUID support for dbx entries" }, - "CVE-2023-38430": { - "cmt_msg": "ksmbd: validate smb request protocol id" - }, - "CVE-2023-38428": { - "cmt_msg": "ksmbd: fix wrong UserName check in session_user" - }, "CVE-2020-26559": { "cmt_msg": "" }, @@ -38389,6 +38213,9 @@ "CVE-2018-5391": { "cmt_msg": "ip: discard IPv4 datagrams with overlapping segments." }, + "CVE-2022-3533": { + "cmt_msg": "" + }, "CVE-2023-26607": { "cmt_msg": "ntfs: fix out-of-bounds read in ntfs_attr_find()" }, @@ -38680,9 +38507,6 @@ "CVE-2019-15902": { "cmt_msg": "" }, - "CVE-2023-32250": { - "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" - }, "CVE-2019-20054": { "cmt_msg": "fs/proc/proc_sysctl.c: fix NULL pointer dereference in put_links" }, @@ -38728,15 +38552,15 @@ "CVE-2022-42896": { "cmt_msg": "Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM" }, + "CVE-2023-3812": { + "cmt_msg": "net: tun: fix bugs for oversize packet when napi frags enabled" + }, "CVE-2017-5967": { "cmt_msg": "time: Remove CONFIG_TIMER_STATS" }, "CVE-2021-0937": { "cmt_msg": "netfilter: x_tables: fix compat match/target pad out-of-bound write" }, - "CVE-2023-32247": { - "cmt_msg": "ksmbd: destroy expired sessions" - }, "CVE-2022-3169": { "cmt_msg": "nvme: ensure subsystem reset is single threaded" }, @@ -38806,21 +38630,12 @@ "CVE-2020-35519": { "cmt_msg": "net/x25: prevent a couple of overflows" }, - "CVE-2023-32257": { - "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" - }, "CVE-2017-18241": { "cmt_msg": "f2fs: fix a panic caused by NULL flush_cmd_control" }, "CVE-2022-33740": { "cmt_msg": "xen/netfront: fix leaking data in shared pages" }, - "CVE-2023-32254": { - "cmt_msg": "ksmbd: fix racy issue under cocurrent smb2 tree disconnect" - }, - "CVE-2023-32252": { - "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" - }, "CVE-2020-10708": { "cmt_msg": "" }, @@ -38887,6 +38702,9 @@ "CVE-2018-18281": { "cmt_msg": "mremap: properly flush TLB before releasing the page" }, + "CVE-2023-20593": { + "cmt_msg": "x86/cpu/amd: Add a Zenbleed fix" + }, "CVE-2023-0160": { "cmt_msg": "" }, @@ -38995,6 +38813,9 @@ "CVE-2019-16746": { "cmt_msg": "nl80211: validate beacon head" }, + "CVE-2022-3606": { + "cmt_msg": "" + }, "CVE-2019-15215": { "cmt_msg": "media: cpia2_usb: first wake up, then free in disconnect" }, @@ -39070,6 +38891,9 @@ "CVE-2019-20908": { "cmt_msg": "efi: Restrict efivar_ssdt_load when the kernel is locked down" }, + "CVE-2023-3776": { + "cmt_msg": "net/sched: cls_fw: Fix improper refcount update leads to use-after-free" + }, "CVE-2021-28038": { "cmt_msg": "Xen/gnttab: handle p2m update errors on a per-slot basis" }, @@ -39124,9 +38948,6 @@ "CVE-2010-4563": { "cmt_msg": "" }, - "CVE-2023-35693": { - "cmt_msg": "" - }, "CVE-2023-1249": { "cmt_msg": "coredump: Use the vma snapshot in fill_files_note" }, @@ -39208,6 +39029,9 @@ "CVE-2012-4542": { "cmt_msg": "" }, + "CVE-2023-3773": { + "cmt_msg": "" + }, "CVE-2018-1000028": { "cmt_msg": "nfsd: auth: Fix gid sorting when rootsquash enabled" }, @@ -39259,6 +39083,9 @@ "CVE-2018-13406": { "cmt_msg": "video: uvesafb: Fix integer overflow in allocation" }, + "CVE-2023-3772": { + "cmt_msg": "" + }, "CVE-2020-11668": { "cmt_msg": "media: xirlink_cit: add missing descriptor sanity checks" }, @@ -39487,9 +39314,6 @@ "CVE-2019-3837": { "cmt_msg": "net_dma: simple removal" }, - "CVE-2023-38429": { - "cmt_msg": "ksmbd: allocate one more byte for implied bcc[0]" - }, "CVE-2018-16884": { "cmt_msg": "sunrpc: use-after-free in svc_process_common()" }, @@ -39535,9 +39359,6 @@ "CVE-2020-0429": { "cmt_msg": "l2tp: fix race between l2tp_session_delete() and l2tp_tunnel_closeall()" }, - "CVE-2022-48502": { - "cmt_msg": "fs/ntfs3: Check fields while reading" - }, "CVE-2022-2964": { "cmt_msg": "net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup" }, @@ -40641,9 +40462,6 @@ "CVE-2020-35508": { "cmt_msg": "fork: fix copy_process(CLONE_PARENT) race with the exiting ->real_parent" }, - "CVE-2023-32258": { - "cmt_msg": "ksmbd: fix racy issue from smb2 close and logoff with multichannel" - }, "CVE-2022-3649": { "cmt_msg": "nilfs2: fix use-after-free bug of struct nilfs_root" }, @@ -40893,9 +40711,6 @@ "CVE-2017-7895": { "cmt_msg": "nfsd: stricter decoding of write-like NFSv2/v3 ops" }, - "CVE-2023-38431": { - "cmt_msg": "ksmbd: check the validation of pdu_size in ksmbd_conn_handler_loop" - }, "CVE-2018-14614": { "cmt_msg": "f2fs: fix to do sanity check with cp_pack_start_sum" }, @@ -41316,9 +41131,6 @@ "CVE-2022-2961": { "cmt_msg": "" }, - "CVE-2023-38432": { - "cmt_msg": "ksmbd: validate command payload size" - }, "CVE-2017-6348": { "cmt_msg": "irda: Fix lockdep annotations in hashbin_delete()." }, @@ -41727,6 +41539,9 @@ "CVE-2007-3719": { "cmt_msg": "" }, + "CVE-2023-3863": { + "cmt_msg": "net: nfc: Fix use-after-free caused by nfc_llcp_find_local" + }, "CVE-2023-0590": { "cmt_msg": "net: sched: fix race condition in qdisc_graft()" }, @@ -42069,9 +41884,6 @@ "CVE-2018-12931": { "cmt_msg": "" }, - "CVE-2023-38426": { - "cmt_msg": "ksmbd: fix global-out-of-bounds in smb2_find_context_vals" - }, "CVE-2017-7308": { "cmt_msg": "net/packet: fix overflow in check for priv area size" }, @@ -42081,9 +41893,6 @@ "CVE-2020-12769": { "cmt_msg": "spi: spi-dw: Add lock protect dw_spi rx/tx to prevent concurrent calls" }, - "CVE-2023-32248": { - "cmt_msg": "ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()" - }, "CVE-2021-39636": { "cmt_msg": "netfilter: x_tables: fix pointer leaks to userspace" }, @@ -42117,9 +41926,6 @@ "CVE-2022-20166": { "cmt_msg": "drivers core: Use sysfs_emit and sysfs_emit_at for show(device *...) functions" }, - "CVE-2023-38427": { - "cmt_msg": "ksmbd: fix out-of-bound read in deassemble_neg_contexts()" - }, "CVE-2016-9588": { "cmt_msg": "kvm: nVMX: Allow L1 to intercept software exceptions (#BP and #OF)" }, @@ -42342,12 +42148,6 @@ "CVE-2020-26541": { "cmt_msg": "certs: Add EFI_CERT_X509_GUID support for dbx entries" }, - "CVE-2023-38430": { - "cmt_msg": "ksmbd: validate smb request protocol id" - }, - "CVE-2023-38428": { - "cmt_msg": "ksmbd: fix wrong UserName check in session_user" - }, "CVE-2020-26559": { "cmt_msg": "" }, @@ -42471,6 +42271,9 @@ "CVE-2018-25020": { "cmt_msg": "bpf: fix truncated jump targets on heavy expansions" }, + "CVE-2022-3533": { + "cmt_msg": "" + }, "CVE-2023-26607": { "cmt_msg": "ntfs: fix out-of-bounds read in ntfs_attr_find()" }, @@ -42528,6 +42331,9 @@ "CVE-2022-1966": { "cmt_msg": "netfilter: nf_tables: disallow non-stateful expression in sets earlier" }, + "CVE-2023-3611": { + "cmt_msg": "net/sched: sch_qfq: account for stab overhead in qfq_enqueue" + }, "CVE-2017-9986": { "cmt_msg": "sound: Retire OSS" }, @@ -42792,9 +42598,6 @@ "CVE-2019-15902": { "cmt_msg": "" }, - "CVE-2023-32250": { - "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" - }, "CVE-2016-7425": { "cmt_msg": "scsi: arcmsr: Buffer overflow in arcmsr_iop_message_xfer()" }, @@ -42843,15 +42646,15 @@ "CVE-2022-42896": { "cmt_msg": "Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM" }, + "CVE-2023-3812": { + "cmt_msg": "net: tun: fix bugs for oversize packet when napi frags enabled" + }, "CVE-2017-2647": { "cmt_msg": "KEYS: Remove key_type::match in favour of overriding default by match_preparse" }, "CVE-2021-0937": { "cmt_msg": "netfilter: x_tables: fix compat match/target pad out-of-bound write" }, - "CVE-2023-32247": { - "cmt_msg": "ksmbd: destroy expired sessions" - }, "CVE-2022-3169": { "cmt_msg": "nvme: ensure subsystem reset is single threaded" }, @@ -42933,21 +42736,12 @@ "CVE-2020-35519": { "cmt_msg": "net/x25: prevent a couple of overflows" }, - "CVE-2023-32257": { - "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" - }, "CVE-2017-18241": { "cmt_msg": "f2fs: fix a panic caused by NULL flush_cmd_control" }, "CVE-2022-33740": { "cmt_msg": "xen/netfront: fix leaking data in shared pages" }, - "CVE-2023-32254": { - "cmt_msg": "ksmbd: fix racy issue under cocurrent smb2 tree disconnect" - }, - "CVE-2023-32252": { - "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" - }, "CVE-2020-10708": { "cmt_msg": "" }, @@ -43017,6 +42811,9 @@ "CVE-2018-18281": { "cmt_msg": "mremap: properly flush TLB before releasing the page" }, + "CVE-2023-20593": { + "cmt_msg": "x86/cpu/amd: Add a Zenbleed fix" + }, "CVE-2023-0160": { "cmt_msg": "" }, @@ -43134,6 +42931,9 @@ "CVE-2019-16746": { "cmt_msg": "nl80211: validate beacon head" }, + "CVE-2022-3606": { + "cmt_msg": "" + }, "CVE-2019-15215": { "cmt_msg": "media: cpia2_usb: first wake up, then free in disconnect" }, @@ -43215,6 +43015,9 @@ "CVE-2014-9729": { "cmt_msg": "udf: Verify i_size when loading inode" }, + "CVE-2023-3776": { + "cmt_msg": "net/sched: cls_fw: Fix improper refcount update leads to use-after-free" + }, "CVE-2021-28038": { "cmt_msg": "Xen/gnttab: handle p2m update errors on a per-slot basis" }, @@ -43275,9 +43078,6 @@ "CVE-2010-4563": { "cmt_msg": "" }, - "CVE-2023-35693": { - "cmt_msg": "" - }, "CVE-2016-8655": { "cmt_msg": "packet: fix race condition in packet_set_ring" }, @@ -43365,6 +43165,9 @@ "CVE-2012-4542": { "cmt_msg": "" }, + "CVE-2023-3773": { + "cmt_msg": "" + }, "CVE-2018-1000028": { "cmt_msg": "nfsd: auth: Fix gid sorting when rootsquash enabled" }, @@ -43422,6 +43225,9 @@ "CVE-2018-13406": { "cmt_msg": "video: uvesafb: Fix integer overflow in allocation" }, + "CVE-2023-3772": { + "cmt_msg": "" + }, "CVE-2020-11668": { "cmt_msg": "media: xirlink_cit: add missing descriptor sanity checks" }, @@ -43683,9 +43489,6 @@ "CVE-2019-3837": { "cmt_msg": "net_dma: simple removal" }, - "CVE-2023-38429": { - "cmt_msg": "ksmbd: allocate one more byte for implied bcc[0]" - }, "CVE-2018-16884": { "cmt_msg": "sunrpc: use-after-free in svc_process_common()" }, @@ -43737,9 +43540,6 @@ "CVE-2020-0429": { "cmt_msg": "l2tp: fix race between l2tp_session_delete() and l2tp_tunnel_closeall()" }, - "CVE-2022-48502": { - "cmt_msg": "fs/ntfs3: Check fields while reading" - }, "CVE-2022-2964": { "cmt_msg": "net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup" }, @@ -46874,6 +46674,9 @@ "CVE-2021-3564": { "cmt_msg": "Bluetooth: fix the erroneous flush_work() order" }, + "CVE-2023-3611": { + "cmt_msg": "net/sched: sch_qfq: account for stab overhead in qfq_enqueue" + }, "CVE-2017-16995": { "cmt_msg": "bpf: fix incorrect sign extension in check_alu_op()" }, @@ -46931,9 +46734,6 @@ "CVE-2018-9465": { "cmt_msg": "binder: fix proc->files use-after-free" }, - "CVE-2023-38431": { - "cmt_msg": "ksmbd: check the validation of pdu_size in ksmbd_conn_handler_loop" - }, "CVE-2020-15437": { "cmt_msg": "serial: 8250: fix null-ptr-deref in serial8250_start_tx()" }, @@ -46958,9 +46758,6 @@ "CVE-2023-35827": { "cmt_msg": "" }, - "CVE-2023-38432": { - "cmt_msg": "ksmbd: validate command payload size" - }, "CVE-2022-3567": { "cmt_msg": "ipv6: Fix data races around sk->sk_prot." }, @@ -47231,6 +47028,9 @@ "CVE-2007-3719": { "cmt_msg": "" }, + "CVE-2023-3863": { + "cmt_msg": "net: nfc: Fix use-after-free caused by nfc_llcp_find_local" + }, "CVE-2023-0590": { "cmt_msg": "net: sched: fix race condition in qdisc_graft()" }, @@ -47240,9 +47040,6 @@ "CVE-2022-45919": { "cmt_msg": "" }, - "CVE-2023-32258": { - "cmt_msg": "ksmbd: fix racy issue from smb2 close and logoff with multichannel" - }, "CVE-2023-2248": { "cmt_msg": "net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg" }, @@ -47384,6 +47181,9 @@ "CVE-2022-4129": { "cmt_msg": "l2tp: Serialize access to sk_user_data with sk_callback_lock" }, + "CVE-2023-3117": { + "cmt_msg": "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE" + }, "CVE-2020-12364": { "cmt_msg": "drm/i915/guc: Update to use firmware v49.0.1" }, @@ -47438,15 +47238,6 @@ "CVE-2018-12931": { "cmt_msg": "" }, - "CVE-2023-38426": { - "cmt_msg": "ksmbd: fix global-out-of-bounds in smb2_find_context_vals" - }, - "CVE-2023-32247": { - "cmt_msg": "ksmbd: destroy expired sessions" - }, - "CVE-2023-32248": { - "cmt_msg": "ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()" - }, "CVE-2021-32399": { "cmt_msg": "bluetooth: eliminate the potential race condition when removing the HCI controller" }, @@ -47519,9 +47310,6 @@ "CVE-2021-3609": { "cmt_msg": "can: bcm: delay release of struct bcm_op after synchronize_rcu()" }, - "CVE-2022-48502": { - "cmt_msg": "fs/ntfs3: Check fields while reading" - }, "CVE-2021-0929": { "cmt_msg": "staging/android/ion: delete dma_buf->kmap/unmap implemenation" }, @@ -47534,9 +47322,6 @@ "CVE-2020-28374": { "cmt_msg": "scsi: target: Fix XCOPY NAA identifier lookup" }, - "CVE-2023-38427": { - "cmt_msg": "ksmbd: fix out-of-bound read in deassemble_neg_contexts()" - }, "CVE-2023-3006": { "cmt_msg": "arm64: Add AMPERE1 to the Spectre-BHB affected list" }, @@ -47561,12 +47346,6 @@ "CVE-2020-26541": { "cmt_msg": "certs: Add EFI_CERT_X509_GUID support for dbx entries" }, - "CVE-2023-38430": { - "cmt_msg": "ksmbd: validate smb request protocol id" - }, - "CVE-2023-38428": { - "cmt_msg": "ksmbd: fix wrong UserName check in session_user" - }, "CVE-2023-3390": { "cmt_msg": "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE" }, @@ -47609,6 +47388,9 @@ "CVE-2020-0427": { "cmt_msg": "pinctrl: devicetree: Avoid taking direct reference to device name string" }, + "CVE-2023-3773": { + "cmt_msg": "" + }, "CVE-2017-9984": { "cmt_msg": "ALSA: msnd: Optimize / harden DSP and MIDI loops" }, @@ -47675,6 +47457,9 @@ "CVE-2021-3587": { "cmt_msg": "nfc: fix NULL ptr dereference in llcp_sock_getname() after failed connect" }, + "CVE-2022-3533": { + "cmt_msg": "" + }, "CVE-2022-3534": { "cmt_msg": "libbpf: Fix use-after-free in btf_dump_name_dups" }, @@ -47837,6 +47622,9 @@ "CVE-2022-42896": { "cmt_msg": "Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM" }, + "CVE-2023-3812": { + "cmt_msg": "net: tun: fix bugs for oversize packet when napi frags enabled" + }, "CVE-2017-5967": { "cmt_msg": "time: Remove CONFIG_TIMER_STATS" }, @@ -47888,21 +47676,9 @@ "CVE-2020-35519": { "cmt_msg": "net/x25: prevent a couple of overflows" }, - "CVE-2023-32257": { - "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" - }, - "CVE-2023-32254": { - "cmt_msg": "ksmbd: fix racy issue under cocurrent smb2 tree disconnect" - }, - "CVE-2023-32252": { - "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" - }, "CVE-2020-10708": { "cmt_msg": "" }, - "CVE-2023-32250": { - "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" - }, "CVE-2022-0400": { "cmt_msg": "" }, @@ -47939,6 +47715,9 @@ "CVE-2015-3339": { "cmt_msg": "fs: take i_mutex during prepare_binprm for set[ug]id executables" }, + "CVE-2023-20593": { + "cmt_msg": "x86/cpu/amd: Add a Zenbleed fix" + }, "CVE-2023-0160": { "cmt_msg": "" }, @@ -48020,6 +47799,9 @@ "CVE-2023-31436": { "cmt_msg": "net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg" }, + "CVE-2022-3606": { + "cmt_msg": "" + }, "CVE-2022-2209": { "cmt_msg": "" }, @@ -48059,6 +47841,9 @@ "CVE-2019-20908": { "cmt_msg": "efi: Restrict efivar_ssdt_load when the kernel is locked down" }, + "CVE-2023-3776": { + "cmt_msg": "net/sched: cls_fw: Fix improper refcount update leads to use-after-free" + }, "CVE-2021-28038": { "cmt_msg": "Xen/gnttab: handle p2m update errors on a per-slot basis" }, @@ -48095,9 +47880,6 @@ "CVE-2010-4563": { "cmt_msg": "" }, - "CVE-2023-35693": { - "cmt_msg": "" - }, "CVE-2023-1249": { "cmt_msg": "coredump: Use the vma snapshot in fill_files_note" }, @@ -48182,6 +47964,9 @@ "CVE-2022-32981": { "cmt_msg": "powerpc/32: Fix overread/overwrite of thread_struct via ptrace" }, + "CVE-2023-3772": { + "cmt_msg": "" + }, "CVE-2022-3424": { "cmt_msg": "misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os" }, @@ -48356,9 +48141,6 @@ "CVE-2019-3837": { "cmt_msg": "net_dma: simple removal" }, - "CVE-2023-38429": { - "cmt_msg": "ksmbd: allocate one more byte for implied bcc[0]" - }, "CVE-2022-1195": { "cmt_msg": "hamradio: improve the incomplete fix to avoid NPD" }, @@ -48448,6 +48230,351 @@ } } }, + "6.4": { + "6.4": { + "CVE-2023-3610": { + "cmt_msg": "netfilter: nf_tables: fix chain binding transaction logic", + "cmt_id": "4bedf9eee016286c835e3d8fa981ddece5338795" + }, + "CVE-2023-38432": { + "cmt_msg": "ksmbd: validate command payload size", + "cmt_id": "2b9b8f3b68edb3d67d79962f02e26dbb5ae3808d" + } + }, + "6.4.1": { + "CVE-2023-3269": { + "cmt_msg": "mm: introduce new 'lock_mm_and_find_vma()' page fault helper", + "cmt_id": "b11fa3d22ac0fbc0bfaa740b3b3669d43ec48503" + } + }, + "6.4.4": { + "CVE-2023-31248": { + "cmt_msg": "netfilter: nf_tables: do not ignore genmask when looking up chain by id", + "cmt_id": "5e5e967e8505fbdabfb6497367ec1b808cadc356" + }, + "CVE-2023-35001": { + "cmt_msg": "netfilter: nf_tables: prevent OOB access in nft_byteorder_eval", + "cmt_id": "b79c09c2bf2d7643902a6ef26152de602c5c5e4b" + }, + "CVE-2023-3863": { + "cmt_msg": "net: nfc: Fix use-after-free caused by nfc_llcp_find_local", + "cmt_id": "e5207c1d69b1a9707615ab6ff9376e59fc096815" + }, + "CVE-2023-2898": { + "cmt_msg": "f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()", + "cmt_id": "5619e9aabbd2b369cde2114ad6f55f6eb3e0b5be" + } + }, + "6.4.5": { + "CVE-2023-3611": { + "cmt_msg": "net/sched: sch_qfq: account for stab overhead in qfq_enqueue", + "cmt_id": "bd2333fa86dc520823e8c317980b29ba91ee6b87" + }, + "CVE-2023-3776": { + "cmt_msg": "net/sched: cls_fw: Fix improper refcount update leads to use-after-free", + "cmt_id": "0a2e3f49febda459252f58cec2d659623d582800" + } + }, + "6.4.6": { + "CVE-2023-20593": { + "cmt_msg": "x86/cpu/amd: Add a Zenbleed fix", + "cmt_id": "9b8bb5c4e25678af895dc9dd4a1e82b2f948cacc" + } + }, + "outstanding": { + "CVE-2023-0160": { + "cmt_msg": "" + }, + "CVE-2020-26556": { + "cmt_msg": "" + }, + "CVE-2020-26557": { + "cmt_msg": "" + }, + "CVE-2019-20794": { + "cmt_msg": "" + }, + "CVE-2020-26559": { + "cmt_msg": "" + }, + "CVE-2020-35501": { + "cmt_msg": "" + }, + "CVE-2018-1121": { + "cmt_msg": "" + }, + "CVE-2019-19378": { + "cmt_msg": "" + }, + "CVE-2020-24503": { + "cmt_msg": "" + }, + "CVE-2020-24502": { + "cmt_msg": "" + }, + "CVE-2020-11725": { + "cmt_msg": "" + }, + "CVE-2022-23825": { + "cmt_msg": "" + }, + "CVE-2023-3397": { + "cmt_msg": "" + }, + "CVE-2021-3864": { + "cmt_msg": "" + }, + "CVE-2022-3606": { + "cmt_msg": "" + }, + "CVE-2019-19814": { + "cmt_msg": "" + }, + "CVE-2022-2209": { + "cmt_msg": "" + }, + "CVE-2021-26934": { + "cmt_msg": "" + }, + "CVE-2023-37454": { + "cmt_msg": "" + }, + "CVE-2016-8660": { + "cmt_msg": "" + }, + "CVE-2020-15802": { + "cmt_msg": "" + }, + "CVE-2022-36402": { + "cmt_msg": "" + }, + "CVE-2008-2544": { + "cmt_msg": "" + }, + "CVE-2019-15239": { + "cmt_msg": "unknown" + }, + "CVE-2007-3719": { + "cmt_msg": "" + }, + "CVE-2023-20941": { + "cmt_msg": "" + }, + "CVE-2022-45919": { + "cmt_msg": "" + }, + "CVE-2010-4563": { + "cmt_msg": "" + }, + "CVE-2020-26140": { + "cmt_msg": "" + }, + "CVE-2020-26143": { + "cmt_msg": "" + }, + "CVE-2020-26142": { + "cmt_msg": "" + }, + "CVE-2023-3773": { + "cmt_msg": "" + }, + "CVE-2023-3772": { + "cmt_msg": "" + }, + "CVE-2022-3533": { + "cmt_msg": "" + }, + "CVE-2022-1247": { + "cmt_msg": "" + }, + "CVE-2020-10708": { + "cmt_msg": "" + }, + "CVE-2022-4543": { + "cmt_msg": "" + }, + "CVE-2017-13693": { + "cmt_msg": "" + }, + "CVE-2021-0399": { + "cmt_msg": "" + }, + "CVE-2017-13694": { + "cmt_msg": "" + }, + "CVE-2012-4542": { + "cmt_msg": "" + }, + "CVE-2013-7445": { + "cmt_msg": "" + }, + "CVE-2005-3660": { + "cmt_msg": "" + }, + "CVE-2023-31085": { + "cmt_msg": "" + }, + "CVE-2023-31083": { + "cmt_msg": "" + }, + "CVE-2023-31082": { + "cmt_msg": "" + }, + "CVE-2023-31081": { + "cmt_msg": "" + }, + "CVE-2022-38096": { + "cmt_msg": "" + }, + "CVE-2022-3544": { + "cmt_msg": "" + }, + "CVE-2022-3238": { + "cmt_msg": "" + }, + "CVE-2008-4609": { + "cmt_msg": "" + }, + "CVE-2020-14304": { + "cmt_msg": "" + }, + "CVE-2020-0347": { + "cmt_msg": "" + }, + "CVE-2021-3714": { + "cmt_msg": "" + }, + "CVE-2019-12456": { + "cmt_msg": "" + }, + "CVE-2020-26560": { + "cmt_msg": "" + }, + "CVE-2021-3892": { + "cmt_msg": "" + }, + "CVE-2023-37453": { + "cmt_msg": "" + }, + "CVE-2023-1206": { + "cmt_msg": "" + }, + "CVE-2023-26242": { + "cmt_msg": "" + }, + "CVE-2023-35827": { + "cmt_msg": "" + }, + "CVE-2022-3642": { + "cmt_msg": "" + }, + "CVE-2011-4917": { + "cmt_msg": "" + }, + "CVE-2019-15902": { + "cmt_msg": "unknown" + }, + "CVE-2019-15290": { + "cmt_msg": "" + }, + "CVE-2018-17977": { + "cmt_msg": "" + }, + "CVE-2022-26878": { + "cmt_msg": "" + }, + "CVE-2022-41848": { + "cmt_msg": "" + }, + "CVE-2022-1116": { + "cmt_msg": "" + }, + "CVE-2010-5321": { + "cmt_msg": "" + }, + "CVE-2018-12930": { + "cmt_msg": "" + }, + "CVE-2018-12931": { + "cmt_msg": "" + }, + "CVE-2023-33250": { + "cmt_msg": "" + }, + "CVE-2021-39801": { + "cmt_msg": "" + }, + "CVE-2021-39800": { + "cmt_msg": "" + }, + "CVE-2022-45885": { + "cmt_msg": "" + }, + "CVE-2022-45884": { + "cmt_msg": "" + }, + "CVE-2022-45887": { + "cmt_msg": "" + }, + "CVE-2022-45886": { + "cmt_msg": "" + }, + "CVE-2021-3542": { + "cmt_msg": "" + }, + "CVE-2018-12929": { + "cmt_msg": "" + }, + "CVE-2018-12928": { + "cmt_msg": "" + }, + "CVE-2020-25220": { + "cmt_msg": "" + }, + "CVE-2015-2877": { + "cmt_msg": "" + }, + "CVE-2023-1194": { + "cmt_msg": "" + }, + "CVE-2023-1193": { + "cmt_msg": "" + }, + "CVE-2019-16089": { + "cmt_msg": "" + }, + "CVE-2022-0400": { + "cmt_msg": "" + }, + "CVE-2022-44034": { + "cmt_msg": "" + }, + "CVE-2022-44033": { + "cmt_msg": "" + }, + "CVE-2022-44032": { + "cmt_msg": "" + }, + "CVE-2021-3847": { + "cmt_msg": "" + }, + "CVE-2022-2961": { + "cmt_msg": "" + }, + "CVE-2022-25265": { + "cmt_msg": "" + }, + "CVE-2011-4916": { + "cmt_msg": "" + }, + "CVE-2023-23039": { + "cmt_msg": "" + }, + "CVE-2023-3640": { + "cmt_msg": "" + } + } + }, "3.2": { "3.2.2": { "CVE-2011-4131": { @@ -50605,9 +50732,6 @@ "CVE-2020-36322": { "cmt_msg": "fuse: fix bad inode" }, - "CVE-2023-32258": { - "cmt_msg": "ksmbd: fix racy issue from smb2 close and logoff with multichannel" - }, "CVE-2022-3649": { "cmt_msg": "nilfs2: fix use-after-free bug of struct nilfs_root" }, @@ -50773,9 +50897,6 @@ "CVE-2019-11477": { "cmt_msg": "tcp: limit payload size of sacked skbs" }, - "CVE-2023-38431": { - "cmt_msg": "ksmbd: check the validation of pdu_size in ksmbd_conn_handler_loop" - }, "CVE-2018-14614": { "cmt_msg": "f2fs: fix to do sanity check with cp_pack_start_sum" }, @@ -51124,9 +51245,6 @@ "CVE-2023-35827": { "cmt_msg": "" }, - "CVE-2023-38432": { - "cmt_msg": "ksmbd: validate command payload size" - }, "CVE-2022-3567": { "cmt_msg": "ipv6: Fix data races around sk->sk_prot." }, @@ -51406,6 +51524,9 @@ "CVE-2007-3719": { "cmt_msg": "" }, + "CVE-2023-3863": { + "cmt_msg": "net: nfc: Fix use-after-free caused by nfc_llcp_find_local" + }, "CVE-2023-0590": { "cmt_msg": "net: sched: fix race condition in qdisc_graft()" }, @@ -51640,9 +51761,6 @@ "CVE-2020-12769": { "cmt_msg": "spi: spi-dw: Add lock protect dw_spi rx/tx to prevent concurrent calls" }, - "CVE-2023-32248": { - "cmt_msg": "ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()" - }, "CVE-2019-15292": { "cmt_msg": "appletalk: Fix use-after-free in atalk_proc_exit" }, @@ -51739,9 +51857,6 @@ "CVE-2017-13305": { "cmt_msg": "KEYS: encrypted: fix buffer overread in valid_master_desc()" }, - "CVE-2022-48502": { - "cmt_msg": "fs/ntfs3: Check fields while reading" - }, "CVE-2019-19537": { "cmt_msg": "USB: core: Fix races in character device registration and deregistraion" }, @@ -51781,18 +51896,12 @@ "CVE-2022-0168": { "cmt_msg": "cifs: fix NULL ptr dereference in smb2_ioctl_query_info()" }, - "CVE-2023-38426": { - "cmt_msg": "ksmbd: fix global-out-of-bounds in smb2_find_context_vals" - }, "CVE-2019-9213": { "cmt_msg": "mm: enforce min addr even if capable() in expand_downwards()" }, "CVE-2023-2007": { "cmt_msg": "scsi: dpt_i2o: Remove obsolete driver" }, - "CVE-2023-38427": { - "cmt_msg": "ksmbd: fix out-of-bound read in deassemble_neg_contexts()" - }, "CVE-2019-14896": { "cmt_msg": "libertas: Fix two buffer overflows at parsing bss descriptor" }, @@ -51826,12 +51935,6 @@ "CVE-2020-26541": { "cmt_msg": "certs: Add EFI_CERT_X509_GUID support for dbx entries" }, - "CVE-2023-38430": { - "cmt_msg": "ksmbd: validate smb request protocol id" - }, - "CVE-2023-38428": { - "cmt_msg": "ksmbd: fix wrong UserName check in session_user" - }, "CVE-2020-26559": { "cmt_msg": "" }, @@ -51883,9 +51986,15 @@ "CVE-2019-9458": { "cmt_msg": "media: v4l: event: Prevent freeing event subscriptions while accessed" }, + "CVE-2023-3773": { + "cmt_msg": "" + }, "CVE-2019-13272": { "cmt_msg": "ptrace: Fix ->ptracer_cred handling for PTRACE_TRACEME" }, + "CVE-2023-3772": { + "cmt_msg": "" + }, "CVE-2017-15537": { "cmt_msg": "x86/fpu: Don't let userspace set bogus xcomp_bv" }, @@ -51964,6 +52073,9 @@ "CVE-2017-9984": { "cmt_msg": "ALSA: msnd: Optimize / harden DSP and MIDI loops" }, + "CVE-2022-3533": { + "cmt_msg": "" + }, "CVE-2022-3534": { "cmt_msg": "libbpf: Fix use-after-free in btf_dump_name_dups" }, @@ -52189,15 +52301,15 @@ "CVE-2022-42896": { "cmt_msg": "Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM" }, + "CVE-2023-3812": { + "cmt_msg": "net: tun: fix bugs for oversize packet when napi frags enabled" + }, "CVE-2017-5967": { "cmt_msg": "time: Remove CONFIG_TIMER_STATS" }, "CVE-2021-0937": { "cmt_msg": "netfilter: x_tables: fix compat match/target pad out-of-bound write" }, - "CVE-2023-32247": { - "cmt_msg": "ksmbd: destroy expired sessions" - }, "CVE-2022-3169": { "cmt_msg": "nvme: ensure subsystem reset is single threaded" }, @@ -52267,24 +52379,12 @@ "CVE-2020-35519": { "cmt_msg": "net/x25: prevent a couple of overflows" }, - "CVE-2023-32257": { - "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" - }, "CVE-2022-33740": { "cmt_msg": "xen/netfront: fix leaking data in shared pages" }, - "CVE-2023-32254": { - "cmt_msg": "ksmbd: fix racy issue under cocurrent smb2 tree disconnect" - }, - "CVE-2023-32252": { - "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" - }, "CVE-2012-6712": { "cmt_msg": "iwlwifi: Sanity check for sta_id" }, - "CVE-2023-32250": { - "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" - }, "CVE-2022-0400": { "cmt_msg": "" }, @@ -52342,6 +52442,9 @@ "CVE-2018-18281": { "cmt_msg": "mremap: properly flush TLB before releasing the page" }, + "CVE-2023-20593": { + "cmt_msg": "x86/cpu/amd: Add a Zenbleed fix" + }, "CVE-2023-0160": { "cmt_msg": "" }, @@ -52432,6 +52535,9 @@ "CVE-2019-16746": { "cmt_msg": "nl80211: validate beacon head" }, + "CVE-2022-3606": { + "cmt_msg": "" + }, "CVE-2022-2209": { "cmt_msg": "" }, @@ -52489,6 +52595,9 @@ "CVE-2019-20908": { "cmt_msg": "efi: Restrict efivar_ssdt_load when the kernel is locked down" }, + "CVE-2023-3776": { + "cmt_msg": "net/sched: cls_fw: Fix improper refcount update leads to use-after-free" + }, "CVE-2021-28038": { "cmt_msg": "Xen/gnttab: handle p2m update errors on a per-slot basis" }, @@ -52525,9 +52634,6 @@ "CVE-2010-4563": { "cmt_msg": "" }, - "CVE-2023-35693": { - "cmt_msg": "" - }, "CVE-2023-2162": { "cmt_msg": "scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress" }, @@ -52816,9 +52922,6 @@ "CVE-2019-3837": { "cmt_msg": "net_dma: simple removal" }, - "CVE-2023-38429": { - "cmt_msg": "ksmbd: allocate one more byte for implied bcc[0]" - }, "CVE-2014-8171": { "cmt_msg": "mm: memcg: do not trap chargers with full callstack on OOM" }, @@ -53224,6 +53327,9 @@ } }, "outstanding": { + "CVE-2023-20593": { + "cmt_msg": "x86/cpu/amd: Add a Zenbleed fix" + }, "CVE-2023-0160": { "cmt_msg": "" }, @@ -53260,9 +53366,6 @@ "CVE-2023-38428": { "cmt_msg": "ksmbd: fix wrong UserName check in session_user" }, - "CVE-2023-35693": { - "cmt_msg": "" - }, "CVE-2023-38431": { "cmt_msg": "ksmbd: check the validation of pdu_size in ksmbd_conn_handler_loop" }, @@ -53284,6 +53387,9 @@ "CVE-2021-3864": { "cmt_msg": "" }, + "CVE-2022-3606": { + "cmt_msg": "" + }, "CVE-2019-19814": { "cmt_msg": "" }, @@ -53299,6 +53405,9 @@ "CVE-2023-3141": { "cmt_msg": "memstick: r592: Fix UAF bug in r592_remove due to race condition" }, + "CVE-2023-37454": { + "cmt_msg": "" + }, "CVE-2016-8660": { "cmt_msg": "" }, @@ -53326,6 +53435,9 @@ "CVE-2007-3719": { "cmt_msg": "" }, + "CVE-2023-3863": { + "cmt_msg": "net: nfc: Fix use-after-free caused by nfc_llcp_find_local" + }, "CVE-2023-20941": { "cmt_msg": "" }, @@ -53347,7 +53459,16 @@ "CVE-2020-26142": { "cmt_msg": "" }, - "CVE-2023-26242": { + "CVE-2023-3776": { + "cmt_msg": "net/sched: cls_fw: Fix improper refcount update leads to use-after-free" + }, + "CVE-2023-3773": { + "cmt_msg": "" + }, + "CVE-2023-3772": { + "cmt_msg": "" + }, + "CVE-2022-3533": { "cmt_msg": "" }, "CVE-2022-1247": { @@ -53374,6 +53495,9 @@ "CVE-2023-2176": { "cmt_msg": "RDMA/core: Refactor rdma_bind_addr" }, + "CVE-2023-3609": { + "cmt_msg": "net/sched: cls_u32: Fix reference counter leak leading to overflow" + }, "CVE-2022-48425": { "cmt_msg": "fs/ntfs3: Validate MFT flags before replaying logs" }, @@ -53416,6 +53540,12 @@ "CVE-2020-0347": { "cmt_msg": "" }, + "CVE-2023-3610": { + "cmt_msg": "netfilter: nf_tables: fix chain binding transaction logic" + }, + "CVE-2023-3611": { + "cmt_msg": "net/sched: sch_qfq: account for stab overhead in qfq_enqueue" + }, "CVE-2021-3714": { "cmt_msg": "" }, @@ -53437,7 +53567,7 @@ "CVE-2023-1206": { "cmt_msg": "" }, - "CVE-2023-37454": { + "CVE-2023-26242": { "cmt_msg": "" }, "CVE-2023-35827": { @@ -53446,6 +53576,9 @@ "CVE-2022-3642": { "cmt_msg": "" }, + "CVE-2023-3117": { + "cmt_msg": "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE" + }, "CVE-2011-4917": { "cmt_msg": "" }, @@ -54131,16 +54264,28 @@ } }, "6.1.35": { + "CVE-2023-3609": { + "cmt_msg": "net/sched: cls_u32: Fix reference counter leak leading to overflow", + "cmt_id": "07f9cc229b44cbcee6385802d390091d915f38c3" + }, "CVE-2023-38430": { "cmt_msg": "ksmbd: validate smb request protocol id", "cmt_id": "e01fc7caac9ce9ad76df9f42f7f61ef4bf1d27c9" }, + "CVE-2023-3117": { + "cmt_msg": "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE", + "cmt_id": "4aaa3b730d16c13cc3feaa127bfca1af201d969d" + }, "CVE-2023-3390": { "cmt_msg": "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE", "cmt_id": "4aaa3b730d16c13cc3feaa127bfca1af201d969d" } }, "6.1.36": { + "CVE-2023-3610": { + "cmt_msg": "netfilter: nf_tables: fix chain binding transaction logic", + "cmt_id": "891cd2edddc76c58e842706ad27e2ff96000bd5d" + }, "CVE-2023-38432": { "cmt_msg": "ksmbd: validate command payload size", "cmt_id": "9650cf70ec9d94ff34daa088b643229231723c26" @@ -54152,6 +54297,44 @@ "cmt_id": "d6a5c7a1a6e52d4c46fe181237ca96cd46a42386" } }, + "6.1.39": { + "CVE-2023-31248": { + "cmt_msg": "netfilter: nf_tables: do not ignore genmask when looking up chain by id", + "cmt_id": "fc95c8b02c6160936f1f3d8d9d7f4f66f3c84b49" + }, + "CVE-2023-35001": { + "cmt_msg": "netfilter: nf_tables: prevent OOB access in nft_byteorder_eval", + "cmt_id": "40f83dd66a823400d8592e3b71e190e3ad978eb5" + }, + "CVE-2023-3863": { + "cmt_msg": "net: nfc: Fix use-after-free caused by nfc_llcp_find_local", + "cmt_id": "425d9d3a92df7d96b3cfb7ee5c240293a21cbde3" + }, + "CVE-2023-2898": { + "cmt_msg": "f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()", + "cmt_id": "ebe83e9bb8a6b3db28603fe938ee80ccaa01ed53" + } + }, + "6.1.40": { + "CVE-2023-3611": { + "cmt_msg": "net/sched: sch_qfq: account for stab overhead in qfq_enqueue", + "cmt_id": "70feebdbfad85772ab3ef152812729cab5c6c426" + }, + "CVE-2022-48502": { + "cmt_msg": "fs/ntfs3: Check fields while reading", + "cmt_id": "000a9a72efa4a9df289bab9c9e8ba1639c72e0d6" + }, + "CVE-2023-3776": { + "cmt_msg": "net/sched: cls_fw: Fix improper refcount update leads to use-after-free", + "cmt_id": "c91fb29bb07ee4dd40aabd1e41f19c0f92ac3199" + } + }, + "6.1.41": { + "CVE-2023-20593": { + "cmt_msg": "x86/cpu/amd: Add a Zenbleed fix", + "cmt_id": "ed9b87010aa84c157096f98c322491e9af8e8f07" + } + }, "outstanding": { "CVE-2023-0160": { "cmt_msg": "" @@ -54189,9 +54372,6 @@ "CVE-2020-24502": { "cmt_msg": "" }, - "CVE-2023-35693": { - "cmt_msg": "" - }, "CVE-2020-11725": { "cmt_msg": "" }, @@ -54204,6 +54384,9 @@ "CVE-2021-3864": { "cmt_msg": "" }, + "CVE-2022-3606": { + "cmt_msg": "" + }, "CVE-2019-19814": { "cmt_msg": "" }, @@ -54213,6 +54396,9 @@ "CVE-2021-26934": { "cmt_msg": "" }, + "CVE-2023-37454": { + "cmt_msg": "" + }, "CVE-2016-8660": { "cmt_msg": "" }, @@ -54228,9 +54414,6 @@ "CVE-2008-2544": { "cmt_msg": "" }, - "CVE-2023-2898": { - "cmt_msg": "f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()" - }, "CVE-2019-15239": { "cmt_msg": "unknown" }, @@ -54255,7 +54438,13 @@ "CVE-2020-26142": { "cmt_msg": "" }, - "CVE-2023-26242": { + "CVE-2023-3773": { + "cmt_msg": "" + }, + "CVE-2023-3772": { + "cmt_msg": "" + }, + "CVE-2022-3533": { "cmt_msg": "" }, "CVE-2022-1247": { @@ -54285,9 +54474,6 @@ "CVE-2013-7445": { "cmt_msg": "" }, - "CVE-2023-31248": { - "cmt_msg": "netfilter: nf_tables: do not ignore genmask when looking up chain by id" - }, "CVE-2005-3660": { "cmt_msg": "" }, @@ -54342,7 +54528,7 @@ "CVE-2023-1206": { "cmt_msg": "" }, - "CVE-2023-37454": { + "CVE-2023-26242": { "cmt_msg": "" }, "CVE-2022-3642": { @@ -54453,12 +54639,6 @@ "CVE-2023-23039": { "cmt_msg": "" }, - "CVE-2022-48502": { - "cmt_msg": "fs/ntfs3: Check fields while reading" - }, - "CVE-2023-35001": { - "cmt_msg": "netfilter: nf_tables: prevent OOB access in nft_byteorder_eval" - }, "CVE-2023-3640": { "cmt_msg": "" } @@ -54594,6 +54774,10 @@ "cmt_msg": "wifi: brcmfmac: Fix potential buffer overflow in brcmf_fweh_event_worker()", "cmt_id": "631f73deedeb0fbc92ca5037d5a71c9fcae7974d" }, + "CVE-2023-3812": { + "cmt_msg": "net: tun: fix bugs for oversize packet when napi frags enabled", + "cmt_id": "d24ba55946e6bdcfacae989638621d7728ee0ec8" + }, "CVE-2022-42896": { "cmt_msg": "Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM", "cmt_id": "d7efeb93213becae13c6a12e4150ce1e07bd2c49" @@ -54802,6 +54986,9 @@ } }, "outstanding": { + "CVE-2023-20593": { + "cmt_msg": "x86/cpu/amd: Add a Zenbleed fix" + }, "CVE-2023-0160": { "cmt_msg": "" }, @@ -54889,6 +55076,9 @@ "CVE-2021-3864": { "cmt_msg": "" }, + "CVE-2022-3606": { + "cmt_msg": "" + }, "CVE-2019-19814": { "cmt_msg": "" }, @@ -54907,6 +55097,9 @@ "CVE-2023-38429": { "cmt_msg": "ksmbd: allocate one more byte for implied bcc[0]" }, + "CVE-2023-3776": { + "cmt_msg": "net/sched: cls_fw: Fix improper refcount update leads to use-after-free" + }, "CVE-2021-26934": { "cmt_msg": "" }, @@ -54931,6 +55124,9 @@ "CVE-2023-2156": { "cmt_msg": "net: rpl: fix rpl header size calculation" }, + "CVE-2023-3772": { + "cmt_msg": "" + }, "CVE-2023-3397": { "cmt_msg": "" }, @@ -54964,6 +55160,12 @@ "CVE-2007-3719": { "cmt_msg": "" }, + "CVE-2023-3863": { + "cmt_msg": "net: nfc: Fix use-after-free caused by nfc_llcp_find_local" + }, + "CVE-2023-37454": { + "cmt_msg": "" + }, "CVE-2022-2961": { "cmt_msg": "" }, @@ -55006,13 +55208,16 @@ "CVE-2023-1077": { "cmt_msg": "sched/rt: pick_next_rt_entity(): check list_entry" }, + "CVE-2023-3773": { + "cmt_msg": "" + }, "CVE-2023-1073": { "cmt_msg": "HID: check empty report_list in hid_validate_values()" }, "CVE-2023-0266": { "cmt_msg": "ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF" }, - "CVE-2023-26242": { + "CVE-2022-3533": { "cmt_msg": "" }, "CVE-2022-1247": { @@ -55060,9 +55265,6 @@ "CVE-2012-4542": { "cmt_msg": "" }, - "CVE-2023-35693": { - "cmt_msg": "" - }, "CVE-2023-2176": { "cmt_msg": "RDMA/core: Refactor rdma_bind_addr" }, @@ -55138,6 +55340,12 @@ "CVE-2023-28866": { "cmt_msg": "Bluetooth: HCI: Fix global-out-of-bounds" }, + "CVE-2023-3610": { + "cmt_msg": "netfilter: nf_tables: fix chain binding transaction logic" + }, + "CVE-2023-3611": { + "cmt_msg": "net/sched: sch_qfq: account for stab overhead in qfq_enqueue" + }, "CVE-2021-3714": { "cmt_msg": "" }, @@ -55174,7 +55382,7 @@ "CVE-2023-1206": { "cmt_msg": "" }, - "CVE-2023-37454": { + "CVE-2023-26242": { "cmt_msg": "" }, "CVE-2023-2235": { @@ -55192,6 +55400,9 @@ "CVE-2022-3642": { "cmt_msg": "" }, + "CVE-2023-3117": { + "cmt_msg": "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE" + }, "CVE-2023-2194": { "cmt_msg": "i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()" }, @@ -55434,6 +55645,9 @@ }, "CVE-2023-2002": { "cmt_msg": "bluetooth: Perform careful capability checks in hci_sock_ioctl()" + }, + "CVE-2023-3609": { + "cmt_msg": "net/sched: cls_u32: Fix reference counter leak leading to overflow" } } }, @@ -55617,9 +55831,6 @@ "CVE-2019-14896": { "cmt_msg": "libertas: Fix two buffer overflows at parsing bss descriptor" }, - "CVE-2023-32258": { - "cmt_msg": "ksmbd: fix racy issue from smb2 close and logoff with multichannel" - }, "CVE-2022-3649": { "cmt_msg": "nilfs2: fix use-after-free bug of struct nilfs_root" }, @@ -55635,6 +55846,9 @@ "CVE-2017-17806": { "cmt_msg": "crypto: hmac - require that the underlying hash algorithm is unkeyed" }, + "CVE-2023-3611": { + "cmt_msg": "net/sched: sch_qfq: account for stab overhead in qfq_enqueue" + }, "CVE-2022-0001": { "cmt_msg": "x86/speculation: Rename RETPOLINE_AMD to RETPOLINE_LFENCE" }, @@ -55773,9 +55987,6 @@ "CVE-2021-39685": { "cmt_msg": "USB: gadget: detect too-big endpoint 0 requests" }, - "CVE-2023-32247": { - "cmt_msg": "ksmbd: destroy expired sessions" - }, "CVE-2021-43975": { "cmt_msg": "atlantic: Fix OOB read and write in hw_atl_utils_fw_rpc_wait" }, @@ -55890,9 +56101,6 @@ "CVE-2016-4578": { "cmt_msg": "ALSA: timer: Fix leak in events via snd_timer_user_ccallback" }, - "CVE-2023-38431": { - "cmt_msg": "ksmbd: check the validation of pdu_size in ksmbd_conn_handler_loop" - }, "CVE-2018-14614": { "cmt_msg": "f2fs: fix to do sanity check with cp_pack_start_sum" }, @@ -56004,9 +56212,6 @@ "CVE-2021-40490": { "cmt_msg": "ext4: fix race writing to an inline_data file while its xattrs are changing" }, - "CVE-2023-38428": { - "cmt_msg": "ksmbd: fix wrong UserName check in session_user" - }, "CVE-2019-19074": { "cmt_msg": "ath9k: release allocated buffer if timed out" }, @@ -56331,9 +56536,6 @@ "CVE-2020-36386": { "cmt_msg": "Bluetooth: Fix slab-out-of-bounds read in hci_extended_inquiry_result_evt()" }, - "CVE-2023-38432": { - "cmt_msg": "ksmbd: validate command payload size" - }, "CVE-2017-6348": { "cmt_msg": "irda: Fix lockdep annotations in hashbin_delete()." }, @@ -56781,6 +56983,9 @@ "CVE-2007-3719": { "cmt_msg": "" }, + "CVE-2023-3863": { + "cmt_msg": "net: nfc: Fix use-after-free caused by nfc_llcp_find_local" + }, "CVE-2023-0590": { "cmt_msg": "net: sched: fix race condition in qdisc_graft()" }, @@ -57051,6 +57256,9 @@ "CVE-2022-4129": { "cmt_msg": "l2tp: Serialize access to sk_user_data with sk_callback_lock" }, + "CVE-2023-3117": { + "cmt_msg": "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE" + }, "CVE-2018-1000004": { "cmt_msg": "ALSA: seq: Make ioctls race-free" }, @@ -57162,9 +57370,6 @@ "CVE-2018-12931": { "cmt_msg": "" }, - "CVE-2023-38426": { - "cmt_msg": "ksmbd: fix global-out-of-bounds in smb2_find_context_vals" - }, "CVE-2017-7308": { "cmt_msg": "net/packet: fix overflow in check for priv area size" }, @@ -57174,9 +57379,6 @@ "CVE-2020-12769": { "cmt_msg": "spi: spi-dw: Add lock protect dw_spi rx/tx to prevent concurrent calls" }, - "CVE-2023-32248": { - "cmt_msg": "ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()" - }, "CVE-2021-39636": { "cmt_msg": "netfilter: x_tables: fix pointer leaks to userspace" }, @@ -57213,9 +57415,6 @@ "CVE-2017-12146": { "cmt_msg": "driver core: platform: fix race condition with driver_override" }, - "CVE-2023-38427": { - "cmt_msg": "ksmbd: fix out-of-bound read in deassemble_neg_contexts()" - }, "CVE-2021-3732": { "cmt_msg": "ovl: prevent private clone if bind mount is not allowed" }, @@ -57459,12 +57658,6 @@ "CVE-2020-26541": { "cmt_msg": "certs: Add EFI_CERT_X509_GUID support for dbx entries" }, - "CVE-2023-38430": { - "cmt_msg": "ksmbd: validate smb request protocol id" - }, - "CVE-2023-32252": { - "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" - }, "CVE-2020-26559": { "cmt_msg": "" }, @@ -57606,6 +57799,9 @@ "CVE-2018-25020": { "cmt_msg": "bpf: fix truncated jump targets on heavy expansions" }, + "CVE-2022-3533": { + "cmt_msg": "" + }, "CVE-2023-26607": { "cmt_msg": "ntfs: fix out-of-bounds read in ntfs_attr_find()" }, @@ -57960,9 +58156,6 @@ "CVE-2019-15902": { "cmt_msg": "unknown" }, - "CVE-2023-32250": { - "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" - }, "CVE-2016-7425": { "cmt_msg": "scsi: arcmsr: Buffer overflow in arcmsr_iop_message_xfer()" }, @@ -58026,6 +58219,9 @@ "CVE-2022-26490": { "cmt_msg": "nfc: st21nfca: Fix potential buffer overflows in EVT_TRANSACTION" }, + "CVE-2023-3812": { + "cmt_msg": "net: tun: fix bugs for oversize packet when napi frags enabled" + }, "CVE-2017-5967": { "cmt_msg": "time: Remove CONFIG_TIMER_STATS" }, @@ -58122,18 +58318,12 @@ "CVE-2020-35519": { "cmt_msg": "net/x25: prevent a couple of overflows" }, - "CVE-2023-32257": { - "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" - }, "CVE-2017-18241": { "cmt_msg": "f2fs: fix a panic caused by NULL flush_cmd_control" }, "CVE-2022-33740": { "cmt_msg": "xen/netfront: fix leaking data in shared pages" }, - "CVE-2023-32254": { - "cmt_msg": "ksmbd: fix racy issue under cocurrent smb2 tree disconnect" - }, "CVE-2021-28971": { "cmt_msg": "perf/x86/intel: Fix a crash caused by zero PEBS status" }, @@ -58212,6 +58402,9 @@ "CVE-2017-1000370": { "cmt_msg": "binfmt_elf: use ELF_ET_DYN_BASE only for PIE" }, + "CVE-2023-20593": { + "cmt_msg": "x86/cpu/amd: Add a Zenbleed fix" + }, "CVE-2019-18675": { "cmt_msg": "mmap: introduce sane default mmap limits" }, @@ -58344,6 +58537,9 @@ "CVE-2019-16746": { "cmt_msg": "nl80211: validate beacon head" }, + "CVE-2022-3606": { + "cmt_msg": "" + }, "CVE-2019-15215": { "cmt_msg": "media: cpia2_usb: first wake up, then free in disconnect" }, @@ -58419,6 +58615,9 @@ "CVE-2019-20908": { "cmt_msg": "efi: Restrict efivar_ssdt_load when the kernel is locked down" }, + "CVE-2023-3776": { + "cmt_msg": "net/sched: cls_fw: Fix improper refcount update leads to use-after-free" + }, "CVE-2021-28038": { "cmt_msg": "Xen/gnttab: handle p2m update errors on a per-slot basis" }, @@ -58485,9 +58684,6 @@ "CVE-2010-4563": { "cmt_msg": "" }, - "CVE-2023-35693": { - "cmt_msg": "" - }, "CVE-2016-8655": { "cmt_msg": "packet: fix race condition in packet_set_ring" }, @@ -58590,6 +58786,9 @@ "CVE-2022-1729": { "cmt_msg": "perf: Fix sys_perf_event_open() race against self" }, + "CVE-2023-3773": { + "cmt_msg": "" + }, "CVE-2018-1000028": { "cmt_msg": "nfsd: auth: Fix gid sorting when rootsquash enabled" }, @@ -58650,6 +58849,9 @@ "CVE-2022-1280": { "cmt_msg": "drm: avoid circular locks in drm_mode_getconnector" }, + "CVE-2023-3772": { + "cmt_msg": "" + }, "CVE-2020-11668": { "cmt_msg": "media: xirlink_cit: add missing descriptor sanity checks" }, @@ -58899,9 +59101,6 @@ "CVE-2021-39800": { "cmt_msg": "" }, - "CVE-2023-38429": { - "cmt_msg": "ksmbd: allocate one more byte for implied bcc[0]" - }, "CVE-2018-16884": { "cmt_msg": "sunrpc: use-after-free in svc_process_common()" }, @@ -58959,9 +59158,6 @@ "CVE-2020-0429": { "cmt_msg": "l2tp: fix race between l2tp_session_delete() and l2tp_tunnel_closeall()" }, - "CVE-2022-48502": { - "cmt_msg": "fs/ntfs3: Check fields while reading" - }, "CVE-2020-27066": { "cmt_msg": "xfrm: policy: Fix doulbe free in xfrm_policy_timer" }, @@ -62865,6 +63061,9 @@ "CVE-2022-33981": { "cmt_msg": "floppy: disable FDRAWCMD by default" }, + "CVE-2023-3611": { + "cmt_msg": "net/sched: sch_qfq: account for stab overhead in qfq_enqueue" + }, "CVE-2019-2025": { "cmt_msg": "binder: fix race that allows malicious free of live buffer" }, @@ -62904,9 +63103,6 @@ "CVE-2018-9465": { "cmt_msg": "binder: fix proc->files use-after-free" }, - "CVE-2023-38431": { - "cmt_msg": "ksmbd: check the validation of pdu_size in ksmbd_conn_handler_loop" - }, "CVE-2016-5728": { "cmt_msg": "misc: mic: Fix for double fetch security bug in VOP driver" }, @@ -62925,9 +63121,6 @@ "CVE-2023-35827": { "cmt_msg": "" }, - "CVE-2023-38432": { - "cmt_msg": "ksmbd: validate command payload size" - }, "CVE-2022-3567": { "cmt_msg": "ipv6: Fix data races around sk->sk_prot." }, @@ -63111,6 +63304,9 @@ "CVE-2007-3719": { "cmt_msg": "" }, + "CVE-2023-3863": { + "cmt_msg": "net: nfc: Fix use-after-free caused by nfc_llcp_find_local" + }, "CVE-2023-0590": { "cmt_msg": "net: sched: fix race condition in qdisc_graft()" }, @@ -63246,6 +63442,9 @@ "CVE-2011-4916": { "cmt_msg": "" }, + "CVE-2023-3117": { + "cmt_msg": "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE" + }, "CVE-2019-20811": { "cmt_msg": "net-sysfs: call dev_hold if kobject_init_and_add success" }, @@ -63282,9 +63481,6 @@ "CVE-2023-1990": { "cmt_msg": "nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition" }, - "CVE-2023-32248": { - "cmt_msg": "ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()" - }, "CVE-2021-33098": { "cmt_msg": "ixgbe: fix large MTU request from VF" }, @@ -63318,21 +63514,12 @@ "CVE-2019-10220": { "cmt_msg": "Convert filldir[64]() from __put_user() to unsafe_put_user()" }, - "CVE-2022-48502": { - "cmt_msg": "fs/ntfs3: Check fields while reading" - }, "CVE-2021-0929": { "cmt_msg": "staging/android/ion: delete dma_buf->kmap/unmap implemenation" }, - "CVE-2023-38426": { - "cmt_msg": "ksmbd: fix global-out-of-bounds in smb2_find_context_vals" - }, "CVE-2023-0615": { "cmt_msg": "media: vivid: dev->bitmap_cap wasn't freed in all cases" }, - "CVE-2023-38427": { - "cmt_msg": "ksmbd: fix out-of-bound read in deassemble_neg_contexts()" - }, "CVE-2020-26145": { "cmt_msg": "ath10k: drop fragments with multicast DA for PCIe" }, @@ -63348,15 +63535,9 @@ "CVE-2020-0067": { "cmt_msg": "f2fs: fix to avoid memory leakage in f2fs_listxattr" }, - "CVE-2023-38428": { - "cmt_msg": "ksmbd: fix wrong UserName check in session_user" - }, "CVE-2020-26541": { "cmt_msg": "certs: Add EFI_CERT_X509_GUID support for dbx entries" }, - "CVE-2023-38430": { - "cmt_msg": "ksmbd: validate smb request protocol id" - }, "CVE-2023-3390": { "cmt_msg": "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE" }, @@ -63375,9 +63556,6 @@ "CVE-2023-1670": { "cmt_msg": "xirc2ps_cs: Fix use after free bug in xirc2ps_detach" }, - "CVE-2023-38429": { - "cmt_msg": "ksmbd: allocate one more byte for implied bcc[0]" - }, "CVE-2022-2978": { "cmt_msg": "fs: fix UAF/GPF bug in nilfs_mdt_destroy" }, @@ -63426,6 +63604,15 @@ "CVE-2017-9986": { "cmt_msg": "sound: Retire OSS" }, + "CVE-2023-3773": { + "cmt_msg": "" + }, + "CVE-2023-3772": { + "cmt_msg": "" + }, + "CVE-2022-3533": { + "cmt_msg": "" + }, "CVE-2022-3534": { "cmt_msg": "libbpf: Fix use-after-free in btf_dump_name_dups" }, @@ -63537,12 +63724,12 @@ "CVE-2010-5321": { "cmt_msg": "" }, - "CVE-2023-32247": { - "cmt_msg": "ksmbd: destroy expired sessions" - }, "CVE-2022-21385": { "cmt_msg": "net/rds: fix warn in rds_message_alloc_sgs" }, + "CVE-2023-3812": { + "cmt_msg": "net: tun: fix bugs for oversize packet when napi frags enabled" + }, "CVE-2017-5967": { "cmt_msg": "time: Remove CONFIG_TIMER_STATS" }, @@ -63585,24 +63772,9 @@ "CVE-2020-36313": { "cmt_msg": "KVM: Fix out of range accesses to memslots" }, - "CVE-2023-32258": { - "cmt_msg": "ksmbd: fix racy issue from smb2 close and logoff with multichannel" - }, - "CVE-2023-32257": { - "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" - }, - "CVE-2023-32254": { - "cmt_msg": "ksmbd: fix racy issue under cocurrent smb2 tree disconnect" - }, - "CVE-2023-32252": { - "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" - }, "CVE-2022-4744": { "cmt_msg": "tun: avoid double free in tun_free_netdev" }, - "CVE-2023-32250": { - "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" - }, "CVE-2022-0400": { "cmt_msg": "" }, @@ -63630,6 +63802,9 @@ "CVE-2023-3640": { "cmt_msg": "" }, + "CVE-2023-20593": { + "cmt_msg": "x86/cpu/amd: Add a Zenbleed fix" + }, "CVE-2023-0160": { "cmt_msg": "" }, @@ -63696,6 +63871,9 @@ "CVE-2022-47929": { "cmt_msg": "net: sched: disallow noqueue for qdisc classes" }, + "CVE-2022-3606": { + "cmt_msg": "" + }, "CVE-2022-2209": { "cmt_msg": "" }, @@ -63717,6 +63895,9 @@ "CVE-2019-20908": { "cmt_msg": "efi: Restrict efivar_ssdt_load when the kernel is locked down" }, + "CVE-2023-3776": { + "cmt_msg": "net/sched: cls_fw: Fix improper refcount update leads to use-after-free" + }, "CVE-2022-2964": { "cmt_msg": "net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup" }, @@ -63735,9 +63916,6 @@ "CVE-2010-4563": { "cmt_msg": "" }, - "CVE-2023-35693": { - "cmt_msg": "" - }, "CVE-2023-1249": { "cmt_msg": "coredump: Use the vma snapshot in fill_files_note" }, @@ -64077,9 +64255,6 @@ "CVE-2020-35508": { "cmt_msg": "fork: fix copy_process(CLONE_PARENT) race with the exiting ->real_parent" }, - "CVE-2023-32258": { - "cmt_msg": "ksmbd: fix racy issue from smb2 close and logoff with multichannel" - }, "CVE-2022-3649": { "cmt_msg": "nilfs2: fix use-after-free bug of struct nilfs_root" }, @@ -64095,6 +64270,9 @@ "CVE-2017-17806": { "cmt_msg": "crypto: hmac - require that the underlying hash algorithm is unkeyed" }, + "CVE-2023-3611": { + "cmt_msg": "net/sched: sch_qfq: account for stab overhead in qfq_enqueue" + }, "CVE-2022-0001": { "cmt_msg": "x86/speculation: Rename RETPOLINE_AMD to RETPOLINE_LFENCE" }, @@ -64341,9 +64519,6 @@ "CVE-2017-7895": { "cmt_msg": "nfsd: stricter decoding of write-like NFSv2/v3 ops" }, - "CVE-2023-38431": { - "cmt_msg": "ksmbd: check the validation of pdu_size in ksmbd_conn_handler_loop" - }, "CVE-2018-14614": { "cmt_msg": "f2fs: fix to do sanity check with cp_pack_start_sum" }, @@ -64452,9 +64627,6 @@ "CVE-2019-11884": { "cmt_msg": "Bluetooth: hidp: fix buffer overflow" }, - "CVE-2023-38428": { - "cmt_msg": "ksmbd: fix wrong UserName check in session_user" - }, "CVE-2019-19074": { "cmt_msg": "ath9k: release allocated buffer if timed out" }, @@ -64764,9 +64936,6 @@ "CVE-2020-36386": { "cmt_msg": "Bluetooth: Fix slab-out-of-bounds read in hci_extended_inquiry_result_evt()" }, - "CVE-2023-38432": { - "cmt_msg": "ksmbd: validate command payload size" - }, "CVE-2017-6348": { "cmt_msg": "irda: Fix lockdep annotations in hashbin_delete()." }, @@ -65208,6 +65377,9 @@ "CVE-2007-3719": { "cmt_msg": "" }, + "CVE-2023-3863": { + "cmt_msg": "net: nfc: Fix use-after-free caused by nfc_llcp_find_local" + }, "CVE-2023-0590": { "cmt_msg": "net: sched: fix race condition in qdisc_graft()" }, @@ -65478,6 +65650,9 @@ "CVE-2022-4129": { "cmt_msg": "l2tp: Serialize access to sk_user_data with sk_callback_lock" }, + "CVE-2023-3117": { + "cmt_msg": "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE" + }, "CVE-2018-1000004": { "cmt_msg": "ALSA: seq: Make ioctls race-free" }, @@ -65574,18 +65749,12 @@ "CVE-2018-12931": { "cmt_msg": "" }, - "CVE-2023-38426": { - "cmt_msg": "ksmbd: fix global-out-of-bounds in smb2_find_context_vals" - }, "CVE-2017-7308": { "cmt_msg": "net/packet: fix overflow in check for priv area size" }, "CVE-2020-12769": { "cmt_msg": "spi: spi-dw: Add lock protect dw_spi rx/tx to prevent concurrent calls" }, - "CVE-2023-32248": { - "cmt_msg": "ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()" - }, "CVE-2017-8890": { "cmt_msg": "dccp/tcp: do not inherit mc_list from parent" }, @@ -65619,9 +65788,6 @@ "CVE-2017-12146": { "cmt_msg": "driver core: platform: fix race condition with driver_override" }, - "CVE-2023-38427": { - "cmt_msg": "ksmbd: fix out-of-bound read in deassemble_neg_contexts()" - }, "CVE-2021-3732": { "cmt_msg": "ovl: prevent private clone if bind mount is not allowed" }, @@ -65733,9 +65899,6 @@ "CVE-2017-13305": { "cmt_msg": "KEYS: encrypted: fix buffer overread in valid_master_desc()" }, - "CVE-2022-48502": { - "cmt_msg": "fs/ntfs3: Check fields while reading" - }, "CVE-2019-19536": { "cmt_msg": "can: peak_usb: pcan_usb_pro: Fix info-leaks to USB devices" }, @@ -65868,12 +66031,6 @@ "CVE-2020-26541": { "cmt_msg": "certs: Add EFI_CERT_X509_GUID support for dbx entries" }, - "CVE-2023-38430": { - "cmt_msg": "ksmbd: validate smb request protocol id" - }, - "CVE-2023-32252": { - "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" - }, "CVE-2020-26559": { "cmt_msg": "" }, @@ -66012,6 +66169,9 @@ "CVE-2018-25020": { "cmt_msg": "bpf: fix truncated jump targets on heavy expansions" }, + "CVE-2022-3533": { + "cmt_msg": "" + }, "CVE-2023-26607": { "cmt_msg": "ntfs: fix out-of-bounds read in ntfs_attr_find()" }, @@ -66357,9 +66517,6 @@ "CVE-2019-15902": { "cmt_msg": "unknown" }, - "CVE-2023-32250": { - "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" - }, "CVE-2019-20054": { "cmt_msg": "fs/proc/proc_sysctl.c: fix NULL pointer dereference in put_links" }, @@ -66417,15 +66574,15 @@ "CVE-2022-26490": { "cmt_msg": "nfc: st21nfca: Fix potential buffer overflows in EVT_TRANSACTION" }, + "CVE-2023-3812": { + "cmt_msg": "net: tun: fix bugs for oversize packet when napi frags enabled" + }, "CVE-2017-5967": { "cmt_msg": "time: Remove CONFIG_TIMER_STATS" }, "CVE-2021-0937": { "cmt_msg": "netfilter: x_tables: fix compat match/target pad out-of-bound write" }, - "CVE-2023-32247": { - "cmt_msg": "ksmbd: destroy expired sessions" - }, "CVE-2022-42895": { "cmt_msg": "Bluetooth: L2CAP: Fix attempting to access uninitialized memory" }, @@ -66510,18 +66667,12 @@ "CVE-2020-35519": { "cmt_msg": "net/x25: prevent a couple of overflows" }, - "CVE-2023-32257": { - "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" - }, "CVE-2023-31436": { "cmt_msg": "net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg" }, "CVE-2022-33740": { "cmt_msg": "xen/netfront: fix leaking data in shared pages" }, - "CVE-2023-32254": { - "cmt_msg": "ksmbd: fix racy issue under cocurrent smb2 tree disconnect" - }, "CVE-2021-28971": { "cmt_msg": "perf/x86/intel: Fix a crash caused by zero PEBS status" }, @@ -66588,6 +66739,9 @@ "CVE-2017-1000379": { "cmt_msg": "mm: larger stack guard gap, between vmas" }, + "CVE-2022-3606": { + "cmt_msg": "" + }, "CVE-2023-3640": { "cmt_msg": "" }, @@ -66597,6 +66751,9 @@ "CVE-2018-18281": { "cmt_msg": "mremap: properly flush TLB before releasing the page" }, + "CVE-2023-20593": { + "cmt_msg": "x86/cpu/amd: Add a Zenbleed fix" + }, "CVE-2019-18675": { "cmt_msg": "mmap: introduce sane default mmap limits" }, @@ -66816,6 +66973,9 @@ "CVE-2019-20908": { "cmt_msg": "efi: Restrict efivar_ssdt_load when the kernel is locked down" }, + "CVE-2023-3776": { + "cmt_msg": "net/sched: cls_fw: Fix improper refcount update leads to use-after-free" + }, "CVE-2021-28038": { "cmt_msg": "Xen/gnttab: handle p2m update errors on a per-slot basis" }, @@ -66885,9 +67045,6 @@ "CVE-2010-4563": { "cmt_msg": "" }, - "CVE-2023-35693": { - "cmt_msg": "" - }, "CVE-2016-8655": { "cmt_msg": "packet: fix race condition in packet_set_ring" }, @@ -66984,6 +67141,9 @@ "CVE-2022-1729": { "cmt_msg": "perf: Fix sys_perf_event_open() race against self" }, + "CVE-2023-3773": { + "cmt_msg": "" + }, "CVE-2021-28712": { "cmt_msg": "xen/netfront: harden netfront against event channel storms" }, @@ -67047,6 +67207,9 @@ "CVE-2022-1280": { "cmt_msg": "drm: avoid circular locks in drm_mode_getconnector" }, + "CVE-2023-3772": { + "cmt_msg": "" + }, "CVE-2020-11668": { "cmt_msg": "media: xirlink_cit: add missing descriptor sanity checks" }, @@ -67293,9 +67456,6 @@ "CVE-2017-7558": { "cmt_msg": "sctp: Avoid out-of-bounds reads from address storage" }, - "CVE-2023-38429": { - "cmt_msg": "ksmbd: allocate one more byte for implied bcc[0]" - }, "CVE-2018-16884": { "cmt_msg": "sunrpc: use-after-free in svc_process_common()" }, @@ -67619,9 +67779,6 @@ "CVE-2020-35508": { "cmt_msg": "fork: fix copy_process(CLONE_PARENT) race with the exiting ->real_parent" }, - "CVE-2023-32258": { - "cmt_msg": "ksmbd: fix racy issue from smb2 close and logoff with multichannel" - }, "CVE-2022-3649": { "cmt_msg": "nilfs2: fix use-after-free bug of struct nilfs_root" }, @@ -67637,6 +67794,9 @@ "CVE-2017-17806": { "cmt_msg": "crypto: hmac - require that the underlying hash algorithm is unkeyed" }, + "CVE-2023-3611": { + "cmt_msg": "net/sched: sch_qfq: account for stab overhead in qfq_enqueue" + }, "CVE-2022-0001": { "cmt_msg": "x86/speculation: Rename RETPOLINE_AMD to RETPOLINE_LFENCE" }, @@ -67886,9 +68046,6 @@ "CVE-2017-7895": { "cmt_msg": "nfsd: stricter decoding of write-like NFSv2/v3 ops" }, - "CVE-2023-38431": { - "cmt_msg": "ksmbd: check the validation of pdu_size in ksmbd_conn_handler_loop" - }, "CVE-2018-14614": { "cmt_msg": "f2fs: fix to do sanity check with cp_pack_start_sum" }, @@ -68000,9 +68157,6 @@ "CVE-2021-40490": { "cmt_msg": "ext4: fix race writing to an inline_data file while its xattrs are changing" }, - "CVE-2023-38428": { - "cmt_msg": "ksmbd: fix wrong UserName check in session_user" - }, "CVE-2019-19074": { "cmt_msg": "ath9k: release allocated buffer if timed out" }, @@ -68315,9 +68469,6 @@ "CVE-2020-36386": { "cmt_msg": "Bluetooth: Fix slab-out-of-bounds read in hci_extended_inquiry_result_evt()" }, - "CVE-2023-38432": { - "cmt_msg": "ksmbd: validate command payload size" - }, "CVE-2017-6348": { "cmt_msg": "irda: Fix lockdep annotations in hashbin_delete()." }, @@ -68756,6 +68907,9 @@ "CVE-2007-3719": { "cmt_msg": "" }, + "CVE-2023-3863": { + "cmt_msg": "net: nfc: Fix use-after-free caused by nfc_llcp_find_local" + }, "CVE-2023-0590": { "cmt_msg": "net: sched: fix race condition in qdisc_graft()" }, @@ -69023,6 +69177,9 @@ "CVE-2022-4129": { "cmt_msg": "l2tp: Serialize access to sk_user_data with sk_callback_lock" }, + "CVE-2023-3117": { + "cmt_msg": "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE" + }, "CVE-2018-1000004": { "cmt_msg": "ALSA: seq: Make ioctls race-free" }, @@ -69119,18 +69276,12 @@ "CVE-2018-12931": { "cmt_msg": "" }, - "CVE-2023-38426": { - "cmt_msg": "ksmbd: fix global-out-of-bounds in smb2_find_context_vals" - }, "CVE-2017-7308": { "cmt_msg": "net/packet: fix overflow in check for priv area size" }, "CVE-2020-12769": { "cmt_msg": "spi: spi-dw: Add lock protect dw_spi rx/tx to prevent concurrent calls" }, - "CVE-2023-32248": { - "cmt_msg": "ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()" - }, "CVE-2021-39636": { "cmt_msg": "netfilter: x_tables: fix pointer leaks to userspace" }, @@ -69167,9 +69318,6 @@ "CVE-2017-12146": { "cmt_msg": "driver core: platform: fix race condition with driver_override" }, - "CVE-2023-38427": { - "cmt_msg": "ksmbd: fix out-of-bound read in deassemble_neg_contexts()" - }, "CVE-2021-3732": { "cmt_msg": "ovl: prevent private clone if bind mount is not allowed" }, @@ -69422,12 +69570,6 @@ "CVE-2020-26541": { "cmt_msg": "certs: Add EFI_CERT_X509_GUID support for dbx entries" }, - "CVE-2023-38430": { - "cmt_msg": "ksmbd: validate smb request protocol id" - }, - "CVE-2023-32252": { - "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" - }, "CVE-2020-26559": { "cmt_msg": "" }, @@ -69566,6 +69708,9 @@ "CVE-2018-25020": { "cmt_msg": "bpf: fix truncated jump targets on heavy expansions" }, + "CVE-2022-3533": { + "cmt_msg": "" + }, "CVE-2023-26607": { "cmt_msg": "ntfs: fix out-of-bounds read in ntfs_attr_find()" }, @@ -69905,9 +70050,6 @@ "CVE-2019-15902": { "cmt_msg": "unknown" }, - "CVE-2023-32250": { - "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" - }, "CVE-2016-7425": { "cmt_msg": "scsi: arcmsr: Buffer overflow in arcmsr_iop_message_xfer()" }, @@ -69968,15 +70110,15 @@ "CVE-2022-26490": { "cmt_msg": "nfc: st21nfca: Fix potential buffer overflows in EVT_TRANSACTION" }, + "CVE-2023-3812": { + "cmt_msg": "net: tun: fix bugs for oversize packet when napi frags enabled" + }, "CVE-2017-5967": { "cmt_msg": "time: Remove CONFIG_TIMER_STATS" }, "CVE-2021-0937": { "cmt_msg": "netfilter: x_tables: fix compat match/target pad out-of-bound write" }, - "CVE-2023-32247": { - "cmt_msg": "ksmbd: destroy expired sessions" - }, "CVE-2022-42895": { "cmt_msg": "Bluetooth: L2CAP: Fix attempting to access uninitialized memory" }, @@ -70064,18 +70206,12 @@ "CVE-2020-35519": { "cmt_msg": "net/x25: prevent a couple of overflows" }, - "CVE-2023-32257": { - "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" - }, "CVE-2017-18241": { "cmt_msg": "f2fs: fix a panic caused by NULL flush_cmd_control" }, "CVE-2022-33740": { "cmt_msg": "xen/netfront: fix leaking data in shared pages" }, - "CVE-2023-32254": { - "cmt_msg": "ksmbd: fix racy issue under cocurrent smb2 tree disconnect" - }, "CVE-2021-28971": { "cmt_msg": "perf/x86/intel: Fix a crash caused by zero PEBS status" }, @@ -70142,6 +70278,9 @@ "CVE-2017-1000379": { "cmt_msg": "mm: larger stack guard gap, between vmas" }, + "CVE-2022-3606": { + "cmt_msg": "" + }, "CVE-2023-3640": { "cmt_msg": "" }, @@ -70151,6 +70290,9 @@ "CVE-2018-18281": { "cmt_msg": "mremap: properly flush TLB before releasing the page" }, + "CVE-2023-20593": { + "cmt_msg": "x86/cpu/amd: Add a Zenbleed fix" + }, "CVE-2019-18675": { "cmt_msg": "mmap: introduce sane default mmap limits" }, @@ -70367,6 +70509,9 @@ "CVE-2019-20908": { "cmt_msg": "efi: Restrict efivar_ssdt_load when the kernel is locked down" }, + "CVE-2023-3776": { + "cmt_msg": "net/sched: cls_fw: Fix improper refcount update leads to use-after-free" + }, "CVE-2021-28038": { "cmt_msg": "Xen/gnttab: handle p2m update errors on a per-slot basis" }, @@ -70436,9 +70581,6 @@ "CVE-2010-4563": { "cmt_msg": "" }, - "CVE-2023-35693": { - "cmt_msg": "" - }, "CVE-2016-8655": { "cmt_msg": "packet: fix race condition in packet_set_ring" }, @@ -70541,6 +70683,9 @@ "CVE-2022-1729": { "cmt_msg": "perf: Fix sys_perf_event_open() race against self" }, + "CVE-2023-3773": { + "cmt_msg": "" + }, "CVE-2018-1000028": { "cmt_msg": "nfsd: auth: Fix gid sorting when rootsquash enabled" }, @@ -70601,6 +70746,9 @@ "CVE-2022-1280": { "cmt_msg": "drm: avoid circular locks in drm_mode_getconnector" }, + "CVE-2023-3772": { + "cmt_msg": "" + }, "CVE-2020-11668": { "cmt_msg": "media: xirlink_cit: add missing descriptor sanity checks" }, @@ -70844,9 +70992,6 @@ "CVE-2021-39800": { "cmt_msg": "" }, - "CVE-2023-38429": { - "cmt_msg": "ksmbd: allocate one more byte for implied bcc[0]" - }, "CVE-2018-16884": { "cmt_msg": "sunrpc: use-after-free in svc_process_common()" }, @@ -70904,9 +71049,6 @@ "CVE-2020-0429": { "cmt_msg": "l2tp: fix race between l2tp_session_delete() and l2tp_tunnel_closeall()" }, - "CVE-2022-48502": { - "cmt_msg": "fs/ntfs3: Check fields while reading" - }, "CVE-2020-27066": { "cmt_msg": "xfrm: policy: Fix doulbe free in xfrm_policy_timer" }, @@ -72357,9 +72499,6 @@ "CVE-2020-35508": { "cmt_msg": "fork: fix copy_process(CLONE_PARENT) race with the exiting ->real_parent" }, - "CVE-2023-32258": { - "cmt_msg": "ksmbd: fix racy issue from smb2 close and logoff with multichannel" - }, "CVE-2022-3649": { "cmt_msg": "nilfs2: fix use-after-free bug of struct nilfs_root" }, @@ -72444,6 +72583,9 @@ "CVE-2022-23825": { "cmt_msg": "" }, + "CVE-2023-3611": { + "cmt_msg": "net/sched: sch_qfq: account for stab overhead in qfq_enqueue" + }, "CVE-2023-2162": { "cmt_msg": "scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress" }, @@ -72567,9 +72709,6 @@ "CVE-2021-28711": { "cmt_msg": "xen/blkfront: harden blkfront against event channel storms" }, - "CVE-2023-38431": { - "cmt_msg": "ksmbd: check the validation of pdu_size in ksmbd_conn_handler_loop" - }, "CVE-2018-14614": { "cmt_msg": "f2fs: fix to do sanity check with cp_pack_start_sum" }, @@ -72939,9 +73078,6 @@ "CVE-2023-35827": { "cmt_msg": "" }, - "CVE-2023-38432": { - "cmt_msg": "ksmbd: validate command payload size" - }, "CVE-2022-3567": { "cmt_msg": "ipv6: Fix data races around sk->sk_prot." }, @@ -73308,6 +73444,9 @@ "CVE-2007-3719": { "cmt_msg": "" }, + "CVE-2023-3863": { + "cmt_msg": "net: nfc: Fix use-after-free caused by nfc_llcp_find_local" + }, "CVE-2023-0590": { "cmt_msg": "net: sched: fix race condition in qdisc_graft()" }, @@ -73491,6 +73630,9 @@ "CVE-2022-4129": { "cmt_msg": "l2tp: Serialize access to sk_user_data with sk_callback_lock" }, + "CVE-2023-3117": { + "cmt_msg": "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE" + }, "CVE-2020-12364": { "cmt_msg": "drm/i915/guc: Update to use firmware v49.0.1" }, @@ -73575,18 +73717,12 @@ "CVE-2018-12931": { "cmt_msg": "" }, - "CVE-2023-38426": { - "cmt_msg": "ksmbd: fix global-out-of-bounds in smb2_find_context_vals" - }, "CVE-2016-0758": { "cmt_msg": "KEYS: Fix ASN.1 indefinite length object parsing" }, "CVE-2020-12769": { "cmt_msg": "spi: spi-dw: Add lock protect dw_spi rx/tx to prevent concurrent calls" }, - "CVE-2023-32248": { - "cmt_msg": "ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()" - }, "CVE-2016-9756": { "cmt_msg": "KVM: x86: drop error recovery in em_jmp_far and em_ret_far" }, @@ -73611,9 +73747,6 @@ "CVE-2020-8648": { "cmt_msg": "vt: selection, close sel_buffer race" }, - "CVE-2023-38427": { - "cmt_msg": "ksmbd: fix out-of-bound read in deassemble_neg_contexts()" - }, "CVE-2021-3732": { "cmt_msg": "ovl: prevent private clone if bind mount is not allowed" }, @@ -73692,9 +73825,6 @@ "CVE-2018-17182": { "cmt_msg": "mm: get rid of vmacache_flush_all() entirely" }, - "CVE-2022-48502": { - "cmt_msg": "fs/ntfs3: Check fields while reading" - }, "CVE-2019-19536": { "cmt_msg": "can: peak_usb: pcan_usb_pro: Fix info-leaks to USB devices" }, @@ -73794,12 +73924,6 @@ "CVE-2020-26541": { "cmt_msg": "certs: Add EFI_CERT_X509_GUID support for dbx entries" }, - "CVE-2023-38430": { - "cmt_msg": "ksmbd: validate smb request protocol id" - }, - "CVE-2023-38428": { - "cmt_msg": "ksmbd: fix wrong UserName check in session_user" - }, "CVE-2020-26559": { "cmt_msg": "" }, @@ -73914,6 +74038,9 @@ "CVE-2018-5391": { "cmt_msg": "ip: discard IPv4 datagrams with overlapping segments." }, + "CVE-2022-3533": { + "cmt_msg": "" + }, "CVE-2023-26607": { "cmt_msg": "ntfs: fix out-of-bounds read in ntfs_attr_find()" }, @@ -73968,6 +74095,9 @@ "CVE-2017-9986": { "cmt_msg": "sound: Retire OSS" }, + "CVE-2023-3773": { + "cmt_msg": "" + }, "CVE-2021-3587": { "cmt_msg": "nfc: fix NULL ptr dereference in llcp_sock_getname() after failed connect" }, @@ -74226,15 +74356,15 @@ "CVE-2022-26490": { "cmt_msg": "nfc: st21nfca: Fix potential buffer overflows in EVT_TRANSACTION" }, + "CVE-2023-3812": { + "cmt_msg": "net: tun: fix bugs for oversize packet when napi frags enabled" + }, "CVE-2017-5967": { "cmt_msg": "time: Remove CONFIG_TIMER_STATS" }, "CVE-2021-0937": { "cmt_msg": "netfilter: x_tables: fix compat match/target pad out-of-bound write" }, - "CVE-2023-32247": { - "cmt_msg": "ksmbd: destroy expired sessions" - }, "CVE-2022-3169": { "cmt_msg": "nvme: ensure subsystem reset is single threaded" }, @@ -74304,27 +74434,15 @@ "CVE-2020-35519": { "cmt_msg": "net/x25: prevent a couple of overflows" }, - "CVE-2023-32257": { - "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" - }, "CVE-2016-5243": { "cmt_msg": "tipc: fix an infoleak in tipc_nl_compat_link_dump" }, "CVE-2022-33740": { "cmt_msg": "xen/netfront: fix leaking data in shared pages" }, - "CVE-2023-32254": { - "cmt_msg": "ksmbd: fix racy issue under cocurrent smb2 tree disconnect" - }, - "CVE-2023-32252": { - "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" - }, "CVE-2020-10708": { "cmt_msg": "" }, - "CVE-2023-32250": { - "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" - }, "CVE-2022-0400": { "cmt_msg": "" }, @@ -74379,6 +74497,9 @@ "CVE-2018-18281": { "cmt_msg": "mremap: properly flush TLB before releasing the page" }, + "CVE-2023-20593": { + "cmt_msg": "x86/cpu/amd: Add a Zenbleed fix" + }, "CVE-2023-0160": { "cmt_msg": "" }, @@ -74490,6 +74611,9 @@ "CVE-2019-16746": { "cmt_msg": "nl80211: validate beacon head" }, + "CVE-2022-3606": { + "cmt_msg": "" + }, "CVE-2023-31081": { "cmt_msg": "" }, @@ -74559,6 +74683,9 @@ "CVE-2019-20908": { "cmt_msg": "efi: Restrict efivar_ssdt_load when the kernel is locked down" }, + "CVE-2023-3776": { + "cmt_msg": "net/sched: cls_fw: Fix improper refcount update leads to use-after-free" + }, "CVE-2021-28038": { "cmt_msg": "Xen/gnttab: handle p2m update errors on a per-slot basis" }, @@ -74610,9 +74737,6 @@ "CVE-2010-4563": { "cmt_msg": "" }, - "CVE-2023-35693": { - "cmt_msg": "" - }, "CVE-2023-1249": { "cmt_msg": "coredump: Use the vma snapshot in fill_files_note" }, @@ -74733,6 +74857,9 @@ "CVE-2022-1280": { "cmt_msg": "drm: avoid circular locks in drm_mode_getconnector" }, + "CVE-2023-3772": { + "cmt_msg": "" + }, "CVE-2020-11668": { "cmt_msg": "media: xirlink_cit: add missing descriptor sanity checks" }, @@ -74964,9 +75091,6 @@ "CVE-2015-8963": { "cmt_msg": "perf: Fix race in swevent hash" }, - "CVE-2023-38429": { - "cmt_msg": "ksmbd: allocate one more byte for implied bcc[0]" - }, "CVE-2018-16884": { "cmt_msg": "sunrpc: use-after-free in svc_process_common()" }, @@ -75491,9 +75615,6 @@ "CVE-2023-2008": { "cmt_msg": "udmabuf: add back sanity check" }, - "CVE-2023-38431": { - "cmt_msg": "ksmbd: check the validation of pdu_size in ksmbd_conn_handler_loop" - }, "CVE-2023-2002": { "cmt_msg": "bluetooth: Perform careful capability checks in hci_sock_ioctl()" }, @@ -75674,15 +75795,15 @@ "CVE-2021-3564": { "cmt_msg": "Bluetooth: fix the erroneous flush_work() order" }, + "CVE-2023-3611": { + "cmt_msg": "net/sched: sch_qfq: account for stab overhead in qfq_enqueue" + }, "CVE-2020-26560": { "cmt_msg": "" }, "CVE-2023-2430": { "cmt_msg": "io_uring/msg_ring: fix missing lock on overflow for IOPOLL" }, - "CVE-2023-32258": { - "cmt_msg": "ksmbd: fix racy issue from smb2 close and logoff with multichannel" - }, "CVE-2023-37453": { "cmt_msg": "" }, @@ -75749,9 +75870,6 @@ "CVE-2021-20239": { "cmt_msg": "net: pass a sockptr_t into ->setsockopt" }, - "CVE-2023-38432": { - "cmt_msg": "ksmbd: validate command payload size" - }, "CVE-2022-3567": { "cmt_msg": "ipv6: Fix data races around sk->sk_prot." }, @@ -75818,8 +75936,8 @@ "CVE-2020-0255": { "cmt_msg": "selinux: properly handle multiple messages in selinux_netlink_send()" }, - "CVE-2023-32252": { - "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" + "CVE-2023-35001": { + "cmt_msg": "netfilter: nf_tables: prevent OOB access in nft_byteorder_eval" }, "CVE-2022-27666": { "cmt_msg": "esp: Fix possible buffer overflow in ESP transformation" @@ -76007,6 +76125,9 @@ "CVE-2007-3719": { "cmt_msg": "" }, + "CVE-2023-3863": { + "cmt_msg": "net: nfc: Fix use-after-free caused by nfc_llcp_find_local" + }, "CVE-2023-0590": { "cmt_msg": "net: sched: fix race condition in qdisc_graft()" }, @@ -76211,6 +76332,9 @@ "CVE-2022-20008": { "cmt_msg": "mmc: block: fix read single on recovery logic" }, + "CVE-2023-3117": { + "cmt_msg": "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE" + }, "CVE-2023-32269": { "cmt_msg": "netrom: Fix use-after-free caused by accept on already connected socket" }, @@ -76247,18 +76371,12 @@ "CVE-2018-12931": { "cmt_msg": "" }, - "CVE-2023-38426": { - "cmt_msg": "ksmbd: fix global-out-of-bounds in smb2_find_context_vals" - }, "CVE-2020-12768": { "cmt_msg": "KVM: SVM: Fix potential memory leak in svm_cpu_init()" }, "CVE-2023-1990": { "cmt_msg": "nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition" }, - "CVE-2023-32248": { - "cmt_msg": "ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()" - }, "CVE-2021-33098": { "cmt_msg": "ixgbe: fix large MTU request from VF" }, @@ -76313,9 +76431,6 @@ "CVE-2022-44032": { "cmt_msg": "" }, - "CVE-2023-35001": { - "cmt_msg": "netfilter: nf_tables: prevent OOB access in nft_byteorder_eval" - }, "CVE-2020-10781": { "cmt_msg": "Revert \"zram: convert remaining CLASS_ATTR() to CLASS_ATTR_RO()\"" }, @@ -76325,9 +76440,6 @@ "CVE-2021-3609": { "cmt_msg": "can: bcm: delay release of struct bcm_op after synchronize_rcu()" }, - "CVE-2022-48502": { - "cmt_msg": "fs/ntfs3: Check fields while reading" - }, "CVE-2021-3600": { "cmt_msg": "bpf: Fix 32 bit src register truncation on div/mod" }, @@ -76349,9 +76461,6 @@ "CVE-2023-0615": { "cmt_msg": "media: vivid: dev->bitmap_cap wasn't freed in all cases" }, - "CVE-2023-38427": { - "cmt_msg": "ksmbd: fix out-of-bound read in deassemble_neg_contexts()" - }, "CVE-2023-3006": { "cmt_msg": "arm64: Add AMPERE1 to the Spectre-BHB affected list" }, @@ -76379,15 +76488,12 @@ "CVE-2020-26541": { "cmt_msg": "certs: Add EFI_CERT_X509_GUID support for dbx entries" }, - "CVE-2023-38430": { - "cmt_msg": "ksmbd: validate smb request protocol id" - }, - "CVE-2023-38428": { - "cmt_msg": "ksmbd: fix wrong UserName check in session_user" - }, "CVE-2023-3390": { "cmt_msg": "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE" }, + "CVE-2023-3812": { + "cmt_msg": "net: tun: fix bugs for oversize packet when napi frags enabled" + }, "CVE-2020-26143": { "cmt_msg": "" }, @@ -76439,6 +76545,9 @@ "CVE-2023-3090": { "cmt_msg": "ipvlan:Fix out-of-bounds caused by unclear skb->cb" }, + "CVE-2023-3772": { + "cmt_msg": "" + }, "CVE-2023-1582": { "cmt_msg": "fs/proc: task_mmu.c: don't read mapcount for migration entry" }, @@ -76502,12 +76611,18 @@ "CVE-2022-1966": { "cmt_msg": "netfilter: nf_tables: disallow non-stateful expression in sets earlier" }, + "CVE-2023-3773": { + "cmt_msg": "" + }, "CVE-2021-3587": { "cmt_msg": "nfc: fix NULL ptr dereference in llcp_sock_getname() after failed connect" }, "CVE-2021-44733": { "cmt_msg": "tee: handle lookup of shm with reference count 0" }, + "CVE-2022-3533": { + "cmt_msg": "" + }, "CVE-2022-3534": { "cmt_msg": "libbpf: Fix use-after-free in btf_dump_name_dups" }, @@ -76718,9 +76833,6 @@ "CVE-2022-42896": { "cmt_msg": "Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM" }, - "CVE-2023-32247": { - "cmt_msg": "ksmbd: destroy expired sessions" - }, "CVE-2022-3169": { "cmt_msg": "nvme: ensure subsystem reset is single threaded" }, @@ -76775,24 +76887,15 @@ "CVE-2020-35519": { "cmt_msg": "net/x25: prevent a couple of overflows" }, - "CVE-2023-32257": { - "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" - }, "CVE-2023-31436": { "cmt_msg": "net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg" }, - "CVE-2023-32254": { - "cmt_msg": "ksmbd: fix racy issue under cocurrent smb2 tree disconnect" - }, "CVE-2022-45887": { "cmt_msg": "" }, "CVE-2020-10708": { "cmt_msg": "" }, - "CVE-2023-32250": { - "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" - }, "CVE-2022-0400": { "cmt_msg": "" }, @@ -76820,9 +76923,15 @@ "CVE-2020-29374": { "cmt_msg": "gup: document and work around \"COW can break either way\" issue" }, + "CVE-2022-3606": { + "cmt_msg": "" + }, "CVE-2023-3640": { "cmt_msg": "" }, + "CVE-2023-20593": { + "cmt_msg": "x86/cpu/amd: Add a Zenbleed fix" + }, "CVE-2023-0160": { "cmt_msg": "" }, @@ -76967,6 +77076,9 @@ "CVE-2020-28915": { "cmt_msg": "fbcon: Fix global-out-of-bounds read in fbcon_get_font()" }, + "CVE-2023-3776": { + "cmt_msg": "net/sched: cls_fw: Fix improper refcount update leads to use-after-free" + }, "CVE-2021-28038": { "cmt_msg": "Xen/gnttab: handle p2m update errors on a per-slot basis" }, @@ -76994,9 +77106,6 @@ "CVE-2010-4563": { "cmt_msg": "" }, - "CVE-2023-35693": { - "cmt_msg": "" - }, "CVE-2023-1249": { "cmt_msg": "coredump: Use the vma snapshot in fill_files_note" }, @@ -77051,6 +77160,9 @@ "CVE-2021-3573": { "cmt_msg": "Bluetooth: use correct lock to prevent UAF of hdev object" }, + "CVE-2023-3609": { + "cmt_msg": "net/sched: cls_u32: Fix reference counter leak leading to overflow" + }, "CVE-2022-1974": { "cmt_msg": "nfc: replace improper check device_is_registered() in netlink related functions" }, @@ -77246,9 +77358,6 @@ "CVE-2021-28375": { "cmt_msg": "misc: fastrpc: restrict user apps from sending kernel RPC messages" }, - "CVE-2023-38429": { - "cmt_msg": "ksmbd: allocate one more byte for implied bcc[0]" - }, "CVE-2022-1195": { "cmt_msg": "hamradio: improve the incomplete fix to avoid NPD" }, @@ -77530,9 +77639,6 @@ "CVE-2019-14896": { "cmt_msg": "libertas: Fix two buffer overflows at parsing bss descriptor" }, - "CVE-2023-32258": { - "cmt_msg": "ksmbd: fix racy issue from smb2 close and logoff with multichannel" - }, "CVE-2022-3649": { "cmt_msg": "nilfs2: fix use-after-free bug of struct nilfs_root" }, @@ -77548,6 +77654,9 @@ "CVE-2017-17806": { "cmt_msg": "crypto: hmac - require that the underlying hash algorithm is unkeyed" }, + "CVE-2023-3611": { + "cmt_msg": "net/sched: sch_qfq: account for stab overhead in qfq_enqueue" + }, "CVE-2022-0001": { "cmt_msg": "x86/speculation: Rename RETPOLINE_AMD to RETPOLINE_LFENCE" }, @@ -77683,9 +77792,6 @@ "CVE-2021-39685": { "cmt_msg": "USB: gadget: detect too-big endpoint 0 requests" }, - "CVE-2023-32247": { - "cmt_msg": "ksmbd: destroy expired sessions" - }, "CVE-2021-43975": { "cmt_msg": "atlantic: Fix OOB read and write in hw_atl_utils_fw_rpc_wait" }, @@ -77815,9 +77921,6 @@ "CVE-2016-4578": { "cmt_msg": "ALSA: timer: Fix leak in events via snd_timer_user_ccallback" }, - "CVE-2023-38431": { - "cmt_msg": "ksmbd: check the validation of pdu_size in ksmbd_conn_handler_loop" - }, "CVE-2018-14614": { "cmt_msg": "f2fs: fix to do sanity check with cp_pack_start_sum" }, @@ -78259,9 +78362,6 @@ "CVE-2022-2961": { "cmt_msg": "" }, - "CVE-2023-38432": { - "cmt_msg": "ksmbd: validate command payload size" - }, "CVE-2017-6348": { "cmt_msg": "irda: Fix lockdep annotations in hashbin_delete()." }, @@ -78721,6 +78821,9 @@ "CVE-2023-34255": { "cmt_msg": "xfs: verify buffer contents when we skip log replay" }, + "CVE-2023-3863": { + "cmt_msg": "net: nfc: Fix use-after-free caused by nfc_llcp_find_local" + }, "CVE-2023-0590": { "cmt_msg": "net: sched: fix race condition in qdisc_graft()" }, @@ -79003,6 +79106,9 @@ "CVE-2022-4129": { "cmt_msg": "l2tp: Serialize access to sk_user_data with sk_callback_lock" }, + "CVE-2023-3117": { + "cmt_msg": "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE" + }, "CVE-2018-1000004": { "cmt_msg": "ALSA: seq: Make ioctls race-free" }, @@ -79120,9 +79226,6 @@ "CVE-2023-0030": { "cmt_msg": "drm/nouveau/mmu: add more general vmm free/node handling functions" }, - "CVE-2023-38426": { - "cmt_msg": "ksmbd: fix global-out-of-bounds in smb2_find_context_vals" - }, "CVE-2017-7308": { "cmt_msg": "net/packet: fix overflow in check for priv area size" }, @@ -79132,9 +79235,6 @@ "CVE-2020-12769": { "cmt_msg": "spi: spi-dw: Add lock protect dw_spi rx/tx to prevent concurrent calls" }, - "CVE-2023-32248": { - "cmt_msg": "ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()" - }, "CVE-2021-39636": { "cmt_msg": "netfilter: x_tables: fix pointer leaks to userspace" }, @@ -79171,9 +79271,6 @@ "CVE-2017-12146": { "cmt_msg": "driver core: platform: fix race condition with driver_override" }, - "CVE-2023-38427": { - "cmt_msg": "ksmbd: fix out-of-bound read in deassemble_neg_contexts()" - }, "CVE-2021-3732": { "cmt_msg": "ovl: prevent private clone if bind mount is not allowed" }, @@ -79426,12 +79523,6 @@ "CVE-2020-26541": { "cmt_msg": "certs: Add EFI_CERT_X509_GUID support for dbx entries" }, - "CVE-2023-38430": { - "cmt_msg": "ksmbd: validate smb request protocol id" - }, - "CVE-2023-38428": { - "cmt_msg": "ksmbd: fix wrong UserName check in session_user" - }, "CVE-2020-26559": { "cmt_msg": "" }, @@ -79573,6 +79664,9 @@ "CVE-2018-25020": { "cmt_msg": "bpf: fix truncated jump targets on heavy expansions" }, + "CVE-2022-3533": { + "cmt_msg": "" + }, "CVE-2023-26607": { "cmt_msg": "ntfs: fix out-of-bounds read in ntfs_attr_find()" }, @@ -79942,9 +80036,6 @@ "CVE-2019-15902": { "cmt_msg": "unknown" }, - "CVE-2023-32250": { - "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" - }, "CVE-2016-7425": { "cmt_msg": "scsi: arcmsr: Buffer overflow in arcmsr_iop_message_xfer()" }, @@ -80011,6 +80102,9 @@ "CVE-2022-26490": { "cmt_msg": "nfc: st21nfca: Fix potential buffer overflows in EVT_TRANSACTION" }, + "CVE-2023-3812": { + "cmt_msg": "net: tun: fix bugs for oversize packet when napi frags enabled" + }, "CVE-2017-5967": { "cmt_msg": "time: Remove CONFIG_TIMER_STATS" }, @@ -80107,21 +80201,12 @@ "CVE-2016-4580": { "cmt_msg": "net: fix a kernel infoleak in x25 module" }, - "CVE-2023-32257": { - "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" - }, "CVE-2016-5243": { "cmt_msg": "tipc: fix an infoleak in tipc_nl_compat_link_dump" }, "CVE-2022-33740": { "cmt_msg": "xen/netfront: fix leaking data in shared pages" }, - "CVE-2023-32254": { - "cmt_msg": "ksmbd: fix racy issue under cocurrent smb2 tree disconnect" - }, - "CVE-2023-32252": { - "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" - }, "CVE-2020-10708": { "cmt_msg": "" }, @@ -80197,6 +80282,9 @@ "CVE-2017-1000370": { "cmt_msg": "binfmt_elf: use ELF_ET_DYN_BASE only for PIE" }, + "CVE-2023-20593": { + "cmt_msg": "x86/cpu/amd: Add a Zenbleed fix" + }, "CVE-2019-18675": { "cmt_msg": "mmap: introduce sane default mmap limits" }, @@ -80332,6 +80420,9 @@ "CVE-2019-16746": { "cmt_msg": "nl80211: validate beacon head" }, + "CVE-2022-3606": { + "cmt_msg": "" + }, "CVE-2019-15215": { "cmt_msg": "media: cpia2_usb: first wake up, then free in disconnect" }, @@ -80419,6 +80510,9 @@ "CVE-2019-20908": { "cmt_msg": "efi: Restrict efivar_ssdt_load when the kernel is locked down" }, + "CVE-2023-3776": { + "cmt_msg": "net/sched: cls_fw: Fix improper refcount update leads to use-after-free" + }, "CVE-2021-28038": { "cmt_msg": "Xen/gnttab: handle p2m update errors on a per-slot basis" }, @@ -80482,9 +80576,6 @@ "CVE-2010-4563": { "cmt_msg": "" }, - "CVE-2023-35693": { - "cmt_msg": "" - }, "CVE-2016-8655": { "cmt_msg": "packet: fix race condition in packet_set_ring" }, @@ -80593,6 +80684,9 @@ "CVE-2022-1729": { "cmt_msg": "perf: Fix sys_perf_event_open() race against self" }, + "CVE-2023-3773": { + "cmt_msg": "" + }, "CVE-2018-1000028": { "cmt_msg": "nfsd: auth: Fix gid sorting when rootsquash enabled" }, @@ -80653,6 +80747,9 @@ "CVE-2022-1280": { "cmt_msg": "drm: avoid circular locks in drm_mode_getconnector" }, + "CVE-2023-3772": { + "cmt_msg": "" + }, "CVE-2020-11668": { "cmt_msg": "media: xirlink_cit: add missing descriptor sanity checks" }, @@ -80914,9 +81011,6 @@ "CVE-2015-8963": { "cmt_msg": "perf: Fix race in swevent hash" }, - "CVE-2023-38429": { - "cmt_msg": "ksmbd: allocate one more byte for implied bcc[0]" - }, "CVE-2018-16884": { "cmt_msg": "sunrpc: use-after-free in svc_process_common()" }, @@ -80974,9 +81068,6 @@ "CVE-2020-0429": { "cmt_msg": "l2tp: fix race between l2tp_session_delete() and l2tp_tunnel_closeall()" }, - "CVE-2022-48502": { - "cmt_msg": "fs/ntfs3: Check fields while reading" - }, "CVE-2020-27066": { "cmt_msg": "xfrm: policy: Fix doulbe free in xfrm_policy_timer" }, @@ -81448,9 +81539,6 @@ "CVE-2023-2008": { "cmt_msg": "udmabuf: add back sanity check" }, - "CVE-2023-38431": { - "cmt_msg": "ksmbd: check the validation of pdu_size in ksmbd_conn_handler_loop" - }, "CVE-2023-2002": { "cmt_msg": "bluetooth: Perform careful capability checks in hci_sock_ioctl()" }, @@ -81628,15 +81716,15 @@ "CVE-2021-3564": { "cmt_msg": "Bluetooth: fix the erroneous flush_work() order" }, + "CVE-2023-3611": { + "cmt_msg": "net/sched: sch_qfq: account for stab overhead in qfq_enqueue" + }, "CVE-2020-26560": { "cmt_msg": "" }, "CVE-2023-2430": { "cmt_msg": "io_uring/msg_ring: fix missing lock on overflow for IOPOLL" }, - "CVE-2023-32258": { - "cmt_msg": "ksmbd: fix racy issue from smb2 close and logoff with multichannel" - }, "CVE-2023-37453": { "cmt_msg": "" }, @@ -81694,9 +81782,6 @@ "CVE-2021-20239": { "cmt_msg": "net: pass a sockptr_t into ->setsockopt" }, - "CVE-2023-38432": { - "cmt_msg": "ksmbd: validate command payload size" - }, "CVE-2022-3567": { "cmt_msg": "ipv6: Fix data races around sk->sk_prot." }, @@ -81940,6 +82025,9 @@ "CVE-2007-3719": { "cmt_msg": "" }, + "CVE-2023-3863": { + "cmt_msg": "net: nfc: Fix use-after-free caused by nfc_llcp_find_local" + }, "CVE-2023-0590": { "cmt_msg": "net: sched: fix race condition in qdisc_graft()" }, @@ -82135,6 +82223,9 @@ "CVE-2022-20008": { "cmt_msg": "mmc: block: fix read single on recovery logic" }, + "CVE-2023-3117": { + "cmt_msg": "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE" + }, "CVE-2023-32269": { "cmt_msg": "netrom: Fix use-after-free caused by accept on already connected socket" }, @@ -82177,15 +82268,9 @@ "CVE-2018-12931": { "cmt_msg": "" }, - "CVE-2023-38426": { - "cmt_msg": "ksmbd: fix global-out-of-bounds in smb2_find_context_vals" - }, "CVE-2023-1990": { "cmt_msg": "nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition" }, - "CVE-2023-32248": { - "cmt_msg": "ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()" - }, "CVE-2021-33098": { "cmt_msg": "ixgbe: fix large MTU request from VF" }, @@ -82237,15 +82322,15 @@ "CVE-2022-44032": { "cmt_msg": "" }, + "CVE-2022-47518": { + "cmt_msg": "wifi: wilc1000: validate number of channels" + }, "CVE-2020-26139": { "cmt_msg": "mac80211: do not accept/forward invalid EAPOL frames" }, "CVE-2021-3609": { "cmt_msg": "can: bcm: delay release of struct bcm_op after synchronize_rcu()" }, - "CVE-2022-48502": { - "cmt_msg": "fs/ntfs3: Check fields while reading" - }, "CVE-2021-3600": { "cmt_msg": "bpf: Fix 32 bit src register truncation on div/mod" }, @@ -82261,9 +82346,6 @@ "CVE-2023-0615": { "cmt_msg": "media: vivid: dev->bitmap_cap wasn't freed in all cases" }, - "CVE-2023-38427": { - "cmt_msg": "ksmbd: fix out-of-bound read in deassemble_neg_contexts()" - }, "CVE-2023-3006": { "cmt_msg": "arm64: Add AMPERE1 to the Spectre-BHB affected list" }, @@ -82291,15 +82373,12 @@ "CVE-2020-26541": { "cmt_msg": "certs: Add EFI_CERT_X509_GUID support for dbx entries" }, - "CVE-2023-38430": { - "cmt_msg": "ksmbd: validate smb request protocol id" - }, - "CVE-2023-38428": { - "cmt_msg": "ksmbd: fix wrong UserName check in session_user" - }, "CVE-2023-3390": { "cmt_msg": "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE" }, + "CVE-2023-3812": { + "cmt_msg": "net: tun: fix bugs for oversize packet when napi frags enabled" + }, "CVE-2020-26143": { "cmt_msg": "" }, @@ -82345,6 +82424,9 @@ "CVE-2023-2156": { "cmt_msg": "net: rpl: fix rpl header size calculation" }, + "CVE-2023-3772": { + "cmt_msg": "" + }, "CVE-2023-1582": { "cmt_msg": "fs/proc: task_mmu.c: don't read mapcount for migration entry" }, @@ -82372,6 +82454,9 @@ "CVE-2022-20565": { "cmt_msg": "HID: core: Correctly handle ReportSize being zero" }, + "CVE-2022-3533": { + "cmt_msg": "" + }, "CVE-2021-4135": { "cmt_msg": "netdevsim: Zero-initialize memory for new map's value in function nsim_bpf_map_alloc" }, @@ -82408,6 +82493,9 @@ "CVE-2022-1966": { "cmt_msg": "netfilter: nf_tables: disallow non-stateful expression in sets earlier" }, + "CVE-2023-3773": { + "cmt_msg": "" + }, "CVE-2021-3587": { "cmt_msg": "nfc: fix NULL ptr dereference in llcp_sock_getname() after failed connect" }, @@ -82627,9 +82715,6 @@ "CVE-2022-42896": { "cmt_msg": "Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM" }, - "CVE-2023-32247": { - "cmt_msg": "ksmbd: destroy expired sessions" - }, "CVE-2022-3169": { "cmt_msg": "nvme: ensure subsystem reset is single threaded" }, @@ -82681,24 +82766,12 @@ "CVE-2020-35519": { "cmt_msg": "net/x25: prevent a couple of overflows" }, - "CVE-2023-32257": { - "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" - }, "CVE-2023-31436": { "cmt_msg": "net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg" }, - "CVE-2023-32254": { - "cmt_msg": "ksmbd: fix racy issue under cocurrent smb2 tree disconnect" - }, - "CVE-2023-32252": { - "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" - }, "CVE-2020-10708": { "cmt_msg": "" }, - "CVE-2023-32250": { - "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" - }, "CVE-2022-0400": { "cmt_msg": "" }, @@ -82729,8 +82802,8 @@ "CVE-2022-47519": { "cmt_msg": "wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute" }, - "CVE-2022-47518": { - "cmt_msg": "wifi: wilc1000: validate number of channels" + "CVE-2022-3606": { + "cmt_msg": "" }, "CVE-2022-39188": { "cmt_msg": "mmu_gather: Force tlb-flush VM_PFNMAP vmas" @@ -82738,6 +82811,9 @@ "CVE-2023-3640": { "cmt_msg": "" }, + "CVE-2023-20593": { + "cmt_msg": "x86/cpu/amd: Add a Zenbleed fix" + }, "CVE-2023-0160": { "cmt_msg": "" }, @@ -82879,6 +82955,9 @@ "CVE-2020-28915": { "cmt_msg": "fbcon: Fix global-out-of-bounds read in fbcon_get_font()" }, + "CVE-2023-3776": { + "cmt_msg": "net/sched: cls_fw: Fix improper refcount update leads to use-after-free" + }, "CVE-2021-28038": { "cmt_msg": "Xen/gnttab: handle p2m update errors on a per-slot basis" }, @@ -82906,9 +82985,6 @@ "CVE-2010-4563": { "cmt_msg": "" }, - "CVE-2023-35693": { - "cmt_msg": "" - }, "CVE-2023-1249": { "cmt_msg": "coredump: Use the vma snapshot in fill_files_note" }, @@ -82960,6 +83036,9 @@ "CVE-2021-3573": { "cmt_msg": "Bluetooth: use correct lock to prevent UAF of hdev object" }, + "CVE-2023-3609": { + "cmt_msg": "net/sched: cls_u32: Fix reference counter leak leading to overflow" + }, "CVE-2022-1974": { "cmt_msg": "nfc: replace improper check device_is_registered() in netlink related functions" }, @@ -83149,9 +83228,6 @@ "CVE-2021-28375": { "cmt_msg": "misc: fastrpc: restrict user apps from sending kernel RPC messages" }, - "CVE-2023-38429": { - "cmt_msg": "ksmbd: allocate one more byte for implied bcc[0]" - }, "CVE-2022-1195": { "cmt_msg": "hamradio: improve the incomplete fix to avoid NPD" }, @@ -83634,9 +83710,6 @@ "CVE-2023-2008": { "cmt_msg": "udmabuf: add back sanity check" }, - "CVE-2023-38431": { - "cmt_msg": "ksmbd: check the validation of pdu_size in ksmbd_conn_handler_loop" - }, "CVE-2023-2002": { "cmt_msg": "bluetooth: Perform careful capability checks in hci_sock_ioctl()" }, @@ -83814,6 +83887,9 @@ "CVE-2021-3564": { "cmt_msg": "Bluetooth: fix the erroneous flush_work() order" }, + "CVE-2023-3611": { + "cmt_msg": "net/sched: sch_qfq: account for stab overhead in qfq_enqueue" + }, "CVE-2020-26560": { "cmt_msg": "" }, @@ -83832,9 +83908,6 @@ "CVE-2021-28964": { "cmt_msg": "btrfs: fix race when cloning extent buffer during rewind of an old root" }, - "CVE-2023-32257": { - "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" - }, "CVE-2023-1829": { "cmt_msg": "net/sched: Retire tcindex classifier" }, @@ -83886,9 +83959,6 @@ "CVE-2021-20239": { "cmt_msg": "net: pass a sockptr_t into ->setsockopt" }, - "CVE-2023-38432": { - "cmt_msg": "ksmbd: validate command payload size" - }, "CVE-2022-3567": { "cmt_msg": "ipv6: Fix data races around sk->sk_prot." }, @@ -84114,6 +84184,9 @@ "CVE-2007-3719": { "cmt_msg": "" }, + "CVE-2023-3863": { + "cmt_msg": "net: nfc: Fix use-after-free caused by nfc_llcp_find_local" + }, "CVE-2023-0590": { "cmt_msg": "net: sched: fix race condition in qdisc_graft()" }, @@ -84123,9 +84196,6 @@ "CVE-2022-45919": { "cmt_msg": "" }, - "CVE-2023-32258": { - "cmt_msg": "ksmbd: fix racy issue from smb2 close and logoff with multichannel" - }, "CVE-2023-2248": { "cmt_msg": "net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg" }, @@ -84303,6 +84373,9 @@ "CVE-2022-20008": { "cmt_msg": "mmc: block: fix read single on recovery logic" }, + "CVE-2023-3117": { + "cmt_msg": "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE" + }, "CVE-2023-32269": { "cmt_msg": "netrom: Fix use-after-free caused by accept on already connected socket" }, @@ -84345,15 +84418,9 @@ "CVE-2018-12931": { "cmt_msg": "" }, - "CVE-2023-38426": { - "cmt_msg": "ksmbd: fix global-out-of-bounds in smb2_find_context_vals" - }, "CVE-2023-1990": { "cmt_msg": "nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition" }, - "CVE-2023-32248": { - "cmt_msg": "ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()" - }, "CVE-2021-33098": { "cmt_msg": "ixgbe: fix large MTU request from VF" }, @@ -84399,15 +84466,15 @@ "CVE-2022-44032": { "cmt_msg": "" }, + "CVE-2022-47518": { + "cmt_msg": "wifi: wilc1000: validate number of channels" + }, "CVE-2020-26139": { "cmt_msg": "mac80211: do not accept/forward invalid EAPOL frames" }, "CVE-2021-3609": { "cmt_msg": "can: bcm: delay release of struct bcm_op after synchronize_rcu()" }, - "CVE-2022-48502": { - "cmt_msg": "fs/ntfs3: Check fields while reading" - }, "CVE-2022-0847": { "cmt_msg": "lib/iov_iter: initialize \"flags\" in new pipe_buffer" }, @@ -84426,9 +84493,6 @@ "CVE-2023-0615": { "cmt_msg": "media: vivid: dev->bitmap_cap wasn't freed in all cases" }, - "CVE-2023-38427": { - "cmt_msg": "ksmbd: fix out-of-bound read in deassemble_neg_contexts()" - }, "CVE-2023-3006": { "cmt_msg": "arm64: Add AMPERE1 to the Spectre-BHB affected list" }, @@ -84456,15 +84520,12 @@ "CVE-2020-26541": { "cmt_msg": "certs: Add EFI_CERT_X509_GUID support for dbx entries" }, - "CVE-2023-38430": { - "cmt_msg": "ksmbd: validate smb request protocol id" - }, - "CVE-2023-38428": { - "cmt_msg": "ksmbd: fix wrong UserName check in session_user" - }, "CVE-2023-3390": { "cmt_msg": "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE" }, + "CVE-2023-3812": { + "cmt_msg": "net: tun: fix bugs for oversize packet when napi frags enabled" + }, "CVE-2020-26143": { "cmt_msg": "" }, @@ -84486,9 +84547,6 @@ "CVE-2020-29569": { "cmt_msg": "xen-blkback: set ring->xenblkd to NULL after kthread_stop()" }, - "CVE-2023-38429": { - "cmt_msg": "ksmbd: allocate one more byte for implied bcc[0]" - }, "CVE-2022-2978": { "cmt_msg": "fs: fix UAF/GPF bug in nilfs_mdt_destroy" }, @@ -84507,6 +84565,9 @@ "CVE-2023-2156": { "cmt_msg": "net: rpl: fix rpl header size calculation" }, + "CVE-2023-3772": { + "cmt_msg": "" + }, "CVE-2023-1582": { "cmt_msg": "fs/proc: task_mmu.c: don't read mapcount for migration entry" }, @@ -84528,6 +84589,9 @@ "CVE-2022-0435": { "cmt_msg": "tipc: improve size validations for received domain records" }, + "CVE-2022-3533": { + "cmt_msg": "" + }, "CVE-2021-4135": { "cmt_msg": "netdevsim: Zero-initialize memory for new map's value in function nsim_bpf_map_alloc" }, @@ -84561,6 +84625,9 @@ "CVE-2022-1966": { "cmt_msg": "netfilter: nf_tables: disallow non-stateful expression in sets earlier" }, + "CVE-2023-3773": { + "cmt_msg": "" + }, "CVE-2021-3587": { "cmt_msg": "nfc: fix NULL ptr dereference in llcp_sock_getname() after failed connect" }, @@ -84768,9 +84835,6 @@ "CVE-2022-42896": { "cmt_msg": "Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM" }, - "CVE-2023-32247": { - "cmt_msg": "ksmbd: destroy expired sessions" - }, "CVE-2022-3169": { "cmt_msg": "nvme: ensure subsystem reset is single threaded" }, @@ -84825,18 +84889,9 @@ "CVE-2023-31436": { "cmt_msg": "net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg" }, - "CVE-2023-32254": { - "cmt_msg": "ksmbd: fix racy issue under cocurrent smb2 tree disconnect" - }, - "CVE-2023-32252": { - "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" - }, "CVE-2020-10708": { "cmt_msg": "" }, - "CVE-2023-32250": { - "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" - }, "CVE-2022-0400": { "cmt_msg": "" }, @@ -84867,8 +84922,8 @@ "CVE-2022-47519": { "cmt_msg": "wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute" }, - "CVE-2022-47518": { - "cmt_msg": "wifi: wilc1000: validate number of channels" + "CVE-2022-3606": { + "cmt_msg": "" }, "CVE-2022-39188": { "cmt_msg": "mmu_gather: Force tlb-flush VM_PFNMAP vmas" @@ -84876,6 +84931,9 @@ "CVE-2023-3640": { "cmt_msg": "" }, + "CVE-2023-20593": { + "cmt_msg": "x86/cpu/amd: Add a Zenbleed fix" + }, "CVE-2023-0160": { "cmt_msg": "" }, @@ -85011,6 +85069,9 @@ "CVE-2020-27675": { "cmt_msg": "xen/events: avoid removing an event channel while handling it" }, + "CVE-2023-3776": { + "cmt_msg": "net/sched: cls_fw: Fix improper refcount update leads to use-after-free" + }, "CVE-2021-28038": { "cmt_msg": "Xen/gnttab: handle p2m update errors on a per-slot basis" }, @@ -85038,9 +85099,6 @@ "CVE-2010-4563": { "cmt_msg": "" }, - "CVE-2023-35693": { - "cmt_msg": "" - }, "CVE-2023-1249": { "cmt_msg": "coredump: Use the vma snapshot in fill_files_note" }, @@ -85095,6 +85153,9 @@ "CVE-2021-46283": { "cmt_msg": "netfilter: nf_tables: initialize set before expression setup" }, + "CVE-2023-3609": { + "cmt_msg": "net/sched: cls_u32: Fix reference counter leak leading to overflow" + }, "CVE-2022-1974": { "cmt_msg": "nfc: replace improper check device_is_registered() in netlink related functions" }, @@ -85716,9 +85777,6 @@ "CVE-2023-2008": { "cmt_msg": "udmabuf: add back sanity check" }, - "CVE-2023-38431": { - "cmt_msg": "ksmbd: check the validation of pdu_size in ksmbd_conn_handler_loop" - }, "CVE-2023-2002": { "cmt_msg": "bluetooth: Perform careful capability checks in hci_sock_ioctl()" }, @@ -85887,6 +85945,9 @@ "CVE-2021-3564": { "cmt_msg": "Bluetooth: fix the erroneous flush_work() order" }, + "CVE-2023-3611": { + "cmt_msg": "net/sched: sch_qfq: account for stab overhead in qfq_enqueue" + }, "CVE-2020-26560": { "cmt_msg": "" }, @@ -85953,9 +86014,6 @@ "CVE-2023-35827": { "cmt_msg": "" }, - "CVE-2023-38432": { - "cmt_msg": "ksmbd: validate command payload size" - }, "CVE-2022-3567": { "cmt_msg": "ipv6: Fix data races around sk->sk_prot." }, @@ -86184,6 +86242,9 @@ "CVE-2007-3719": { "cmt_msg": "" }, + "CVE-2023-3863": { + "cmt_msg": "net: nfc: Fix use-after-free caused by nfc_llcp_find_local" + }, "CVE-2023-0590": { "cmt_msg": "net: sched: fix race condition in qdisc_graft()" }, @@ -86193,9 +86254,6 @@ "CVE-2022-45919": { "cmt_msg": "" }, - "CVE-2023-32258": { - "cmt_msg": "ksmbd: fix racy issue from smb2 close and logoff with multichannel" - }, "CVE-2023-2248": { "cmt_msg": "net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg" }, @@ -86370,6 +86428,9 @@ "CVE-2022-20008": { "cmt_msg": "mmc: block: fix read single on recovery logic" }, + "CVE-2023-3117": { + "cmt_msg": "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE" + }, "CVE-2023-32269": { "cmt_msg": "netrom: Fix use-after-free caused by accept on already connected socket" }, @@ -86409,15 +86470,9 @@ "CVE-2018-12931": { "cmt_msg": "" }, - "CVE-2023-38426": { - "cmt_msg": "ksmbd: fix global-out-of-bounds in smb2_find_context_vals" - }, "CVE-2023-1990": { "cmt_msg": "nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition" }, - "CVE-2023-32248": { - "cmt_msg": "ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()" - }, "CVE-2021-33098": { "cmt_msg": "ixgbe: fix large MTU request from VF" }, @@ -86463,15 +86518,15 @@ "CVE-2022-44032": { "cmt_msg": "" }, + "CVE-2022-47518": { + "cmt_msg": "wifi: wilc1000: validate number of channels" + }, "CVE-2020-26139": { "cmt_msg": "mac80211: do not accept/forward invalid EAPOL frames" }, "CVE-2021-3609": { "cmt_msg": "can: bcm: delay release of struct bcm_op after synchronize_rcu()" }, - "CVE-2022-48502": { - "cmt_msg": "fs/ntfs3: Check fields while reading" - }, "CVE-2022-0847": { "cmt_msg": "lib/iov_iter: initialize \"flags\" in new pipe_buffer" }, @@ -86490,9 +86545,6 @@ "CVE-2023-0615": { "cmt_msg": "media: vivid: dev->bitmap_cap wasn't freed in all cases" }, - "CVE-2023-38427": { - "cmt_msg": "ksmbd: fix out-of-bound read in deassemble_neg_contexts()" - }, "CVE-2023-3006": { "cmt_msg": "arm64: Add AMPERE1 to the Spectre-BHB affected list" }, @@ -86520,15 +86572,12 @@ "CVE-2020-26541": { "cmt_msg": "certs: Add EFI_CERT_X509_GUID support for dbx entries" }, - "CVE-2023-38430": { - "cmt_msg": "ksmbd: validate smb request protocol id" - }, - "CVE-2023-38428": { - "cmt_msg": "ksmbd: fix wrong UserName check in session_user" - }, "CVE-2023-3390": { "cmt_msg": "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE" }, + "CVE-2023-3812": { + "cmt_msg": "net: tun: fix bugs for oversize packet when napi frags enabled" + }, "CVE-2020-26143": { "cmt_msg": "" }, @@ -86550,9 +86599,6 @@ "CVE-2020-29569": { "cmt_msg": "xen-blkback: set ring->xenblkd to NULL after kthread_stop()" }, - "CVE-2023-38429": { - "cmt_msg": "ksmbd: allocate one more byte for implied bcc[0]" - }, "CVE-2022-2978": { "cmt_msg": "fs: fix UAF/GPF bug in nilfs_mdt_destroy" }, @@ -86571,6 +86617,9 @@ "CVE-2023-2156": { "cmt_msg": "net: rpl: fix rpl header size calculation" }, + "CVE-2023-3772": { + "cmt_msg": "" + }, "CVE-2023-1582": { "cmt_msg": "fs/proc: task_mmu.c: don't read mapcount for migration entry" }, @@ -86586,6 +86635,9 @@ "CVE-2022-0435": { "cmt_msg": "tipc: improve size validations for received domain records" }, + "CVE-2022-3533": { + "cmt_msg": "" + }, "CVE-2021-4135": { "cmt_msg": "netdevsim: Zero-initialize memory for new map's value in function nsim_bpf_map_alloc" }, @@ -86619,6 +86671,9 @@ "CVE-2022-1966": { "cmt_msg": "netfilter: nf_tables: disallow non-stateful expression in sets earlier" }, + "CVE-2023-3773": { + "cmt_msg": "" + }, "CVE-2021-3587": { "cmt_msg": "nfc: fix NULL ptr dereference in llcp_sock_getname() after failed connect" }, @@ -86826,9 +86881,6 @@ "CVE-2022-42896": { "cmt_msg": "Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM" }, - "CVE-2023-32247": { - "cmt_msg": "ksmbd: destroy expired sessions" - }, "CVE-2022-3169": { "cmt_msg": "nvme: ensure subsystem reset is single threaded" }, @@ -86874,21 +86926,9 @@ "CVE-2021-28972": { "cmt_msg": "PCI: rpadlpar: Fix potential drc_name corruption in store functions" }, - "CVE-2023-32257": { - "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" - }, - "CVE-2023-32254": { - "cmt_msg": "ksmbd: fix racy issue under cocurrent smb2 tree disconnect" - }, - "CVE-2023-32252": { - "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" - }, "CVE-2020-10708": { "cmt_msg": "" }, - "CVE-2023-32250": { - "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" - }, "CVE-2022-0400": { "cmt_msg": "" }, @@ -86919,8 +86959,8 @@ "CVE-2022-47519": { "cmt_msg": "wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute" }, - "CVE-2022-47518": { - "cmt_msg": "wifi: wilc1000: validate number of channels" + "CVE-2022-3606": { + "cmt_msg": "" }, "CVE-2022-39188": { "cmt_msg": "mmu_gather: Force tlb-flush VM_PFNMAP vmas" @@ -86928,6 +86968,9 @@ "CVE-2023-3640": { "cmt_msg": "" }, + "CVE-2023-20593": { + "cmt_msg": "x86/cpu/amd: Add a Zenbleed fix" + }, "CVE-2023-0160": { "cmt_msg": "" }, @@ -87039,6 +87082,9 @@ "CVE-2020-27815": { "cmt_msg": "jfs: Fix array index bounds check in dbAdjTree" }, + "CVE-2023-3610": { + "cmt_msg": "netfilter: nf_tables: fix chain binding transaction logic" + }, "CVE-2022-1462": { "cmt_msg": "tty: use new tty_insert_flip_string_and_push_buffer() in pty_write()" }, @@ -87048,6 +87094,9 @@ "CVE-2022-3112": { "cmt_msg": "media: meson: vdec: potential dereference of null pointer" }, + "CVE-2023-3776": { + "cmt_msg": "net/sched: cls_fw: Fix improper refcount update leads to use-after-free" + }, "CVE-2021-28038": { "cmt_msg": "Xen/gnttab: handle p2m update errors on a per-slot basis" }, @@ -87081,9 +87130,6 @@ "CVE-2010-4563": { "cmt_msg": "" }, - "CVE-2023-35693": { - "cmt_msg": "" - }, "CVE-2023-1249": { "cmt_msg": "coredump: Use the vma snapshot in fill_files_note" }, @@ -87135,6 +87181,9 @@ "CVE-2021-46283": { "cmt_msg": "netfilter: nf_tables: initialize set before expression setup" }, + "CVE-2023-3609": { + "cmt_msg": "net/sched: cls_u32: Fix reference counter leak leading to overflow" + }, "CVE-2022-1974": { "cmt_msg": "nfc: replace improper check device_is_registered() in netlink related functions" }, @@ -91309,6 +91358,9 @@ } }, "outstanding": { + "CVE-2023-20593": { + "cmt_msg": "x86/cpu/amd: Add a Zenbleed fix" + }, "CVE-2023-0160": { "cmt_msg": "" }, @@ -91336,6 +91388,9 @@ "CVE-2022-0168": { "cmt_msg": "cifs: fix NULL ptr dereference in smb2_ioctl_query_info()" }, + "CVE-2023-3117": { + "cmt_msg": "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE" + }, "CVE-2022-20424": { "cmt_msg": "io_uring: remove io_identity" }, @@ -91354,9 +91409,6 @@ "CVE-2023-1670": { "cmt_msg": "xirc2ps_cs: Fix use after free bug in xirc2ps_detach" }, - "CVE-2023-38427": { - "cmt_msg": "ksmbd: fix out-of-bound read in deassemble_neg_contexts()" - }, "CVE-2019-19378": { "cmt_msg": "" }, @@ -91402,18 +91454,12 @@ "CVE-2019-19449": { "cmt_msg": "f2fs: fix to do sanity check on segment/section count" }, - "CVE-2023-38428": { - "cmt_msg": "ksmbd: fix wrong UserName check in session_user" - }, "CVE-2020-26140": { "cmt_msg": "" }, "CVE-2020-26541": { "cmt_msg": "certs: Add EFI_CERT_X509_GUID support for dbx entries" }, - "CVE-2023-38430": { - "cmt_msg": "ksmbd: validate smb request protocol id" - }, "CVE-2020-11725": { "cmt_msg": "" }, @@ -91483,6 +91529,9 @@ "CVE-2022-38096": { "cmt_msg": "" }, + "CVE-2023-3776": { + "cmt_msg": "net/sched: cls_fw: Fix improper refcount update leads to use-after-free" + }, "CVE-2019-9453": { "cmt_msg": "f2fs: fix to avoid accessing xattr across the boundary" }, @@ -91501,9 +91550,6 @@ "CVE-2023-3141": { "cmt_msg": "memstick: r592: Fix UAF bug in r592_remove due to race condition" }, - "CVE-2023-32247": { - "cmt_msg": "ksmbd: destroy expired sessions" - }, "CVE-2016-8660": { "cmt_msg": "" }, @@ -91558,9 +91604,6 @@ "CVE-2019-20908": { "cmt_msg": "efi: Restrict efivar_ssdt_load when the kernel is locked down" }, - "CVE-2023-38432": { - "cmt_msg": "ksmbd: validate command payload size" - }, "CVE-2018-7754": { "cmt_msg": "printk: hash addresses printed with %p" }, @@ -91645,8 +91688,8 @@ "CVE-2017-9986": { "cmt_msg": "sound: Retire OSS" }, - "CVE-2023-32258": { - "cmt_msg": "ksmbd: fix racy issue from smb2 close and logoff with multichannel" + "CVE-2023-3773": { + "cmt_msg": "" }, "CVE-2023-1073": { "cmt_msg": "HID: check empty report_list in hid_validate_values()" @@ -91660,8 +91703,8 @@ "CVE-2021-34556": { "cmt_msg": "bpf: Introduce BPF nospec instruction for mitigating Spectre v4" }, - "CVE-2023-32254": { - "cmt_msg": "ksmbd: fix racy issue under cocurrent smb2 tree disconnect" + "CVE-2022-3533": { + "cmt_msg": "" }, "CVE-2022-3534": { "cmt_msg": "libbpf: Fix use-after-free in btf_dump_name_dups" @@ -91690,8 +91733,8 @@ "CVE-2021-38300": { "cmt_msg": "bpf, mips: Validate conditional branch offsets" }, - "CVE-2023-32252": { - "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" + "CVE-2022-3606": { + "cmt_msg": "" }, "CVE-2021-3669": { "cmt_msg": "ipc: replace costly bailout check in sysvipc_find_ipc()" @@ -91723,6 +91766,9 @@ "CVE-2022-4543": { "cmt_msg": "" }, + "CVE-2023-3772": { + "cmt_msg": "" + }, "CVE-2019-18680": { "cmt_msg": "unknown" }, @@ -91750,18 +91796,12 @@ "CVE-2012-4542": { "cmt_msg": "" }, - "CVE-2023-35693": { - "cmt_msg": "" - }, "CVE-2023-2176": { "cmt_msg": "RDMA/core: Refactor rdma_bind_addr" }, "CVE-2023-3358": { "cmt_msg": "HID: intel_ish-hid: Add check for ishtp_dma_tx_map" }, - "CVE-2023-32257": { - "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" - }, "CVE-2022-44033": { "cmt_msg": "" }, @@ -91846,9 +91886,6 @@ "CVE-2023-0386": { "cmt_msg": "ovl: fail on invalid uid/gid mapping at copy up" }, - "CVE-2023-38426": { - "cmt_msg": "ksmbd: fix global-out-of-bounds in smb2_find_context_vals" - }, "CVE-2023-3567": { "cmt_msg": "vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF" }, @@ -91921,6 +91958,9 @@ "CVE-2021-39636": { "cmt_msg": "netfilter: x_tables: fix pointer leaks to userspace" }, + "CVE-2023-3611": { + "cmt_msg": "net/sched: sch_qfq: account for stab overhead in qfq_enqueue" + }, "CVE-2018-12127": { "cmt_msg": "s390/speculation: Support 'mitigations=' cmdline option" }, @@ -92014,9 +92054,6 @@ "CVE-2023-23455": { "cmt_msg": "net: sched: atm: dont intepret cls results when asked to drop" }, - "CVE-2023-38431": { - "cmt_msg": "ksmbd: check the validation of pdu_size in ksmbd_conn_handler_loop" - }, "CVE-2018-17977": { "cmt_msg": "" }, @@ -92050,8 +92087,8 @@ "CVE-2022-21385": { "cmt_msg": "net/rds: fix warn in rds_message_alloc_sgs" }, - "CVE-2023-32248": { - "cmt_msg": "ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()" + "CVE-2023-3812": { + "cmt_msg": "net: tun: fix bugs for oversize packet when napi frags enabled" }, "CVE-2017-5967": { "cmt_msg": "time: Remove CONFIG_TIMER_STATS" @@ -92074,9 +92111,6 @@ "CVE-2022-4744": { "cmt_msg": "tun: avoid double free in tun_free_netdev" }, - "CVE-2023-38429": { - "cmt_msg": "ksmbd: allocate one more byte for implied bcc[0]" - }, "CVE-2022-1048": { "cmt_msg": "ALSA: pcm: Fix races among concurrent hw_params and hw_free calls" }, @@ -92086,6 +92120,9 @@ "CVE-2022-20166": { "cmt_msg": "drivers core: Use sysfs_emit and sysfs_emit_at for show(device *...) functions" }, + "CVE-2023-3863": { + "cmt_msg": "net: nfc: Fix use-after-free caused by nfc_llcp_find_local" + }, "CVE-2019-12380": { "cmt_msg": "efi/x86/Add missing error handling to old_memmap 1:1 mapping code" }, @@ -92173,9 +92210,6 @@ "CVE-2018-20449": { "cmt_msg": "printk: hash addresses printed with %p" }, - "CVE-2023-32250": { - "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" - }, "CVE-2016-10723": { "cmt_msg": "mm, oom: remove sleep from under oom_lock" }, @@ -92242,9 +92276,6 @@ "CVE-2020-27835": { "cmt_msg": "IB/hfi1: Ensure correct mm is used at all times" }, - "CVE-2022-48502": { - "cmt_msg": "fs/ntfs3: Check fields while reading" - }, "CVE-2022-3903": { "cmt_msg": "media: mceusb: Use new usb_control_msg_*() routines" }, @@ -92411,9 +92442,6 @@ "CVE-2020-35508": { "cmt_msg": "fork: fix copy_process(CLONE_PARENT) race with the exiting ->real_parent" }, - "CVE-2023-32258": { - "cmt_msg": "ksmbd: fix racy issue from smb2 close and logoff with multichannel" - }, "CVE-2022-3649": { "cmt_msg": "nilfs2: fix use-after-free bug of struct nilfs_root" }, @@ -92429,6 +92457,9 @@ "CVE-2017-17806": { "cmt_msg": "crypto: hmac - require that the underlying hash algorithm is unkeyed" }, + "CVE-2023-3611": { + "cmt_msg": "net/sched: sch_qfq: account for stab overhead in qfq_enqueue" + }, "CVE-2022-0001": { "cmt_msg": "x86/speculation: Rename RETPOLINE_AMD to RETPOLINE_LFENCE" }, @@ -92639,9 +92670,6 @@ "CVE-2022-3202": { "cmt_msg": "jfs: prevent NULL deref in diFree" }, - "CVE-2023-38428": { - "cmt_msg": "ksmbd: fix wrong UserName check in session_user" - }, "CVE-2018-3646": { "cmt_msg": "x86/microcode: Allow late microcode loading with SMT disabled" }, @@ -92666,9 +92694,6 @@ "CVE-2017-7895": { "cmt_msg": "nfsd: stricter decoding of write-like NFSv2/v3 ops" }, - "CVE-2023-38431": { - "cmt_msg": "ksmbd: check the validation of pdu_size in ksmbd_conn_handler_loop" - }, "CVE-2018-14614": { "cmt_msg": "f2fs: fix to do sanity check with cp_pack_start_sum" }, @@ -93098,9 +93123,6 @@ "CVE-2020-36386": { "cmt_msg": "Bluetooth: Fix slab-out-of-bounds read in hci_extended_inquiry_result_evt()" }, - "CVE-2023-38432": { - "cmt_msg": "ksmbd: validate command payload size" - }, "CVE-2017-6348": { "cmt_msg": "irda: Fix lockdep annotations in hashbin_delete()." }, @@ -93539,6 +93561,9 @@ "CVE-2007-3719": { "cmt_msg": "" }, + "CVE-2023-3863": { + "cmt_msg": "net: nfc: Fix use-after-free caused by nfc_llcp_find_local" + }, "CVE-2023-0590": { "cmt_msg": "net: sched: fix race condition in qdisc_graft()" }, @@ -93803,6 +93828,9 @@ "CVE-2022-4129": { "cmt_msg": "l2tp: Serialize access to sk_user_data with sk_callback_lock" }, + "CVE-2023-3117": { + "cmt_msg": "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE" + }, "CVE-2018-1000004": { "cmt_msg": "ALSA: seq: Make ioctls race-free" }, @@ -93902,18 +93930,12 @@ "CVE-2018-12931": { "cmt_msg": "" }, - "CVE-2023-38426": { - "cmt_msg": "ksmbd: fix global-out-of-bounds in smb2_find_context_vals" - }, "CVE-2017-7308": { "cmt_msg": "net/packet: fix overflow in check for priv area size" }, "CVE-2020-12769": { "cmt_msg": "spi: spi-dw: Add lock protect dw_spi rx/tx to prevent concurrent calls" }, - "CVE-2023-32248": { - "cmt_msg": "ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()" - }, "CVE-2017-8890": { "cmt_msg": "dccp/tcp: do not inherit mc_list from parent" }, @@ -93947,9 +93969,6 @@ "CVE-2017-12146": { "cmt_msg": "driver core: platform: fix race condition with driver_override" }, - "CVE-2023-38427": { - "cmt_msg": "ksmbd: fix out-of-bound read in deassemble_neg_contexts()" - }, "CVE-2021-3732": { "cmt_msg": "ovl: prevent private clone if bind mount is not allowed" }, @@ -94058,9 +94077,6 @@ "CVE-2017-13305": { "cmt_msg": "KEYS: encrypted: fix buffer overread in valid_master_desc()" }, - "CVE-2022-48502": { - "cmt_msg": "fs/ntfs3: Check fields while reading" - }, "CVE-2019-19536": { "cmt_msg": "can: peak_usb: pcan_usb_pro: Fix info-leaks to USB devices" }, @@ -94190,12 +94206,6 @@ "CVE-2020-26541": { "cmt_msg": "certs: Add EFI_CERT_X509_GUID support for dbx entries" }, - "CVE-2023-38430": { - "cmt_msg": "ksmbd: validate smb request protocol id" - }, - "CVE-2023-32252": { - "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" - }, "CVE-2020-26559": { "cmt_msg": "" }, @@ -94337,6 +94347,9 @@ "CVE-2018-25020": { "cmt_msg": "bpf: fix truncated jump targets on heavy expansions" }, + "CVE-2022-3533": { + "cmt_msg": "" + }, "CVE-2023-26607": { "cmt_msg": "ntfs: fix out-of-bounds read in ntfs_attr_find()" }, @@ -94673,9 +94686,6 @@ "CVE-2019-15902": { "cmt_msg": "unknown" }, - "CVE-2023-32250": { - "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" - }, "CVE-2019-20054": { "cmt_msg": "fs/proc/proc_sysctl.c: fix NULL pointer dereference in put_links" }, @@ -94733,15 +94743,15 @@ "CVE-2022-26490": { "cmt_msg": "nfc: st21nfca: Fix potential buffer overflows in EVT_TRANSACTION" }, + "CVE-2023-3812": { + "cmt_msg": "net: tun: fix bugs for oversize packet when napi frags enabled" + }, "CVE-2017-5967": { "cmt_msg": "time: Remove CONFIG_TIMER_STATS" }, "CVE-2021-0937": { "cmt_msg": "netfilter: x_tables: fix compat match/target pad out-of-bound write" }, - "CVE-2023-32247": { - "cmt_msg": "ksmbd: destroy expired sessions" - }, "CVE-2022-42895": { "cmt_msg": "Bluetooth: L2CAP: Fix attempting to access uninitialized memory" }, @@ -94823,18 +94833,12 @@ "CVE-2020-35519": { "cmt_msg": "net/x25: prevent a couple of overflows" }, - "CVE-2023-32257": { - "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" - }, "CVE-2023-31436": { "cmt_msg": "net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg" }, "CVE-2022-33740": { "cmt_msg": "xen/netfront: fix leaking data in shared pages" }, - "CVE-2023-32254": { - "cmt_msg": "ksmbd: fix racy issue under cocurrent smb2 tree disconnect" - }, "CVE-2021-28971": { "cmt_msg": "perf/x86/intel: Fix a crash caused by zero PEBS status" }, @@ -94901,6 +94905,9 @@ "CVE-2017-1000379": { "cmt_msg": "mm: larger stack guard gap, between vmas" }, + "CVE-2022-3606": { + "cmt_msg": "" + }, "CVE-2023-3640": { "cmt_msg": "" }, @@ -94910,6 +94917,9 @@ "CVE-2018-18281": { "cmt_msg": "mremap: properly flush TLB before releasing the page" }, + "CVE-2023-20593": { + "cmt_msg": "x86/cpu/amd: Add a Zenbleed fix" + }, "CVE-2019-18675": { "cmt_msg": "mmap: introduce sane default mmap limits" }, @@ -95132,6 +95142,9 @@ "CVE-2019-20908": { "cmt_msg": "efi: Restrict efivar_ssdt_load when the kernel is locked down" }, + "CVE-2023-3776": { + "cmt_msg": "net/sched: cls_fw: Fix improper refcount update leads to use-after-free" + }, "CVE-2021-28038": { "cmt_msg": "Xen/gnttab: handle p2m update errors on a per-slot basis" }, @@ -95201,9 +95214,6 @@ "CVE-2010-4563": { "cmt_msg": "" }, - "CVE-2023-35693": { - "cmt_msg": "" - }, "CVE-2019-15217": { "cmt_msg": "media: usb:zr364xx:Fix KASAN:null-ptr-deref Read in zr364xx_vidioc_querycap" }, @@ -95303,6 +95313,9 @@ "CVE-2022-1729": { "cmt_msg": "perf: Fix sys_perf_event_open() race against self" }, + "CVE-2023-3773": { + "cmt_msg": "" + }, "CVE-2018-1000028": { "cmt_msg": "nfsd: auth: Fix gid sorting when rootsquash enabled" }, @@ -95360,6 +95373,9 @@ "CVE-2022-1280": { "cmt_msg": "drm: avoid circular locks in drm_mode_getconnector" }, + "CVE-2023-3772": { + "cmt_msg": "" + }, "CVE-2020-11668": { "cmt_msg": "media: xirlink_cit: add missing descriptor sanity checks" }, @@ -95603,9 +95619,6 @@ "CVE-2017-7558": { "cmt_msg": "sctp: Avoid out-of-bounds reads from address storage" }, - "CVE-2023-38429": { - "cmt_msg": "ksmbd: allocate one more byte for implied bcc[0]" - }, "CVE-2018-16884": { "cmt_msg": "sunrpc: use-after-free in svc_process_common()" }, @@ -95963,9 +95976,6 @@ "CVE-2019-15090": { "cmt_msg": "scsi: qedi: remove memset/memcpy to nfunc and use func instead" }, - "CVE-2023-32258": { - "cmt_msg": "ksmbd: fix racy issue from smb2 close and logoff with multichannel" - }, "CVE-2022-3649": { "cmt_msg": "nilfs2: fix use-after-free bug of struct nilfs_root" }, @@ -95981,6 +95991,9 @@ "CVE-2017-17806": { "cmt_msg": "crypto: hmac - require that the underlying hash algorithm is unkeyed" }, + "CVE-2023-3611": { + "cmt_msg": "net/sched: sch_qfq: account for stab overhead in qfq_enqueue" + }, "CVE-2022-0001": { "cmt_msg": "x86/speculation: Rename RETPOLINE_AMD to RETPOLINE_LFENCE" }, @@ -96194,9 +96207,6 @@ "CVE-2021-28711": { "cmt_msg": "xen/blkfront: harden blkfront against event channel storms" }, - "CVE-2023-38431": { - "cmt_msg": "ksmbd: check the validation of pdu_size in ksmbd_conn_handler_loop" - }, "CVE-2018-14614": { "cmt_msg": "f2fs: fix to do sanity check with cp_pack_start_sum" }, @@ -96614,9 +96624,6 @@ "CVE-2020-36386": { "cmt_msg": "Bluetooth: Fix slab-out-of-bounds read in hci_extended_inquiry_result_evt()" }, - "CVE-2023-38432": { - "cmt_msg": "ksmbd: validate command payload size" - }, "CVE-2022-3567": { "cmt_msg": "ipv6: Fix data races around sk->sk_prot." }, @@ -96767,8 +96774,8 @@ "CVE-2019-2215": { "cmt_msg": "ANDROID: binder: remove waitqueue when thread exits." }, - "CVE-2023-32252": { - "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" + "CVE-2023-35001": { + "cmt_msg": "netfilter: nf_tables: prevent OOB access in nft_byteorder_eval" }, "CVE-2022-27666": { "cmt_msg": "esp: Fix possible buffer overflow in ESP transformation" @@ -97049,6 +97056,9 @@ "CVE-2007-3719": { "cmt_msg": "" }, + "CVE-2023-3863": { + "cmt_msg": "net: nfc: Fix use-after-free caused by nfc_llcp_find_local" + }, "CVE-2023-0590": { "cmt_msg": "net: sched: fix race condition in qdisc_graft()" }, @@ -97292,6 +97302,9 @@ "CVE-2022-4129": { "cmt_msg": "l2tp: Serialize access to sk_user_data with sk_callback_lock" }, + "CVE-2023-3117": { + "cmt_msg": "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE" + }, "CVE-2018-1000004": { "cmt_msg": "ALSA: seq: Make ioctls race-free" }, @@ -97388,15 +97401,9 @@ "CVE-2018-12931": { "cmt_msg": "" }, - "CVE-2023-38426": { - "cmt_msg": "ksmbd: fix global-out-of-bounds in smb2_find_context_vals" - }, "CVE-2020-12769": { "cmt_msg": "spi: spi-dw: Add lock protect dw_spi rx/tx to prevent concurrent calls" }, - "CVE-2023-32248": { - "cmt_msg": "ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()" - }, "CVE-2022-4662": { "cmt_msg": "USB: core: Prevent nested device-reset calls" }, @@ -97421,9 +97428,6 @@ "CVE-2019-19543": { "cmt_msg": "media: serial_ir: Fix use-after-free in serial_ir_init_module" }, - "CVE-2023-38427": { - "cmt_msg": "ksmbd: fix out-of-bound read in deassemble_neg_contexts()" - }, "CVE-2021-3732": { "cmt_msg": "ovl: prevent private clone if bind mount is not allowed" }, @@ -97493,9 +97497,6 @@ "CVE-2019-11191": { "cmt_msg": "x86: Deprecate a.out support" }, - "CVE-2023-35001": { - "cmt_msg": "netfilter: nf_tables: prevent OOB access in nft_byteorder_eval" - }, "CVE-2018-10323": { "cmt_msg": "xfs: set format back to extents if xfs_bmap_extents_to_btree" }, @@ -97523,9 +97524,6 @@ "CVE-2017-13305": { "cmt_msg": "KEYS: encrypted: fix buffer overread in valid_master_desc()" }, - "CVE-2022-48502": { - "cmt_msg": "fs/ntfs3: Check fields while reading" - }, "CVE-2019-19536": { "cmt_msg": "can: peak_usb: pcan_usb_pro: Fix info-leaks to USB devices" }, @@ -97550,6 +97548,9 @@ "CVE-2019-10639": { "cmt_msg": "netns: provide pure entropy for net_hash_mix()" }, + "CVE-2022-3533": { + "cmt_msg": "" + }, "CVE-2021-0929": { "cmt_msg": "staging/android/ion: delete dma_buf->kmap/unmap implemenation" }, @@ -97649,12 +97650,6 @@ "CVE-2020-26541": { "cmt_msg": "certs: Add EFI_CERT_X509_GUID support for dbx entries" }, - "CVE-2023-38430": { - "cmt_msg": "ksmbd: validate smb request protocol id" - }, - "CVE-2023-38428": { - "cmt_msg": "ksmbd: fix wrong UserName check in session_user" - }, "CVE-2020-26559": { "cmt_msg": "" }, @@ -98138,9 +98133,6 @@ "CVE-2019-15902": { "cmt_msg": "" }, - "CVE-2023-32250": { - "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" - }, "CVE-2023-3358": { "cmt_msg": "HID: intel_ish-hid: Add check for ishtp_dma_tx_map" }, @@ -98192,12 +98184,12 @@ "CVE-2022-26490": { "cmt_msg": "nfc: st21nfca: Fix potential buffer overflows in EVT_TRANSACTION" }, + "CVE-2023-3812": { + "cmt_msg": "net: tun: fix bugs for oversize packet when napi frags enabled" + }, "CVE-2021-0937": { "cmt_msg": "netfilter: x_tables: fix compat match/target pad out-of-bound write" }, - "CVE-2023-32247": { - "cmt_msg": "ksmbd: destroy expired sessions" - }, "CVE-2022-3169": { "cmt_msg": "nvme: ensure subsystem reset is single threaded" }, @@ -98264,18 +98256,12 @@ "CVE-2020-35519": { "cmt_msg": "net/x25: prevent a couple of overflows" }, - "CVE-2023-32257": { - "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" - }, "CVE-2023-31436": { "cmt_msg": "net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg" }, "CVE-2022-33740": { "cmt_msg": "xen/netfront: fix leaking data in shared pages" }, - "CVE-2023-32254": { - "cmt_msg": "ksmbd: fix racy issue under cocurrent smb2 tree disconnect" - }, "CVE-2020-35513": { "cmt_msg": "nfsd: fix incorrect umasks" }, @@ -98336,12 +98322,18 @@ "CVE-2020-25284": { "cmt_msg": "rbd: require global CAP_SYS_ADMIN for mapping and unmapping" }, + "CVE-2022-3606": { + "cmt_msg": "" + }, "CVE-2023-3640": { "cmt_msg": "" }, "CVE-2018-18281": { "cmt_msg": "mremap: properly flush TLB before releasing the page" }, + "CVE-2023-20593": { + "cmt_msg": "x86/cpu/amd: Add a Zenbleed fix" + }, "CVE-2019-18675": { "cmt_msg": "mmap: introduce sane default mmap limits" }, @@ -98561,6 +98553,9 @@ "CVE-2019-20908": { "cmt_msg": "efi: Restrict efivar_ssdt_load when the kernel is locked down" }, + "CVE-2023-3776": { + "cmt_msg": "net/sched: cls_fw: Fix improper refcount update leads to use-after-free" + }, "CVE-2021-28038": { "cmt_msg": "Xen/gnttab: handle p2m update errors on a per-slot basis" }, @@ -98621,9 +98616,6 @@ "CVE-2010-4563": { "cmt_msg": "" }, - "CVE-2023-35693": { - "cmt_msg": "" - }, "CVE-2023-1249": { "cmt_msg": "coredump: Use the vma snapshot in fill_files_note" }, @@ -98720,6 +98712,9 @@ "CVE-2022-1729": { "cmt_msg": "perf: Fix sys_perf_event_open() race against self" }, + "CVE-2023-3773": { + "cmt_msg": "" + }, "CVE-2018-1000028": { "cmt_msg": "nfsd: auth: Fix gid sorting when rootsquash enabled" }, @@ -98777,6 +98772,9 @@ "CVE-2022-1280": { "cmt_msg": "drm: avoid circular locks in drm_mode_getconnector" }, + "CVE-2023-3772": { + "cmt_msg": "" + }, "CVE-2020-11668": { "cmt_msg": "media: xirlink_cit: add missing descriptor sanity checks" }, @@ -99017,9 +99015,6 @@ "CVE-2017-7558": { "cmt_msg": "sctp: Avoid out-of-bounds reads from address storage" }, - "CVE-2023-38429": { - "cmt_msg": "ksmbd: allocate one more byte for implied bcc[0]" - }, "CVE-2018-16884": { "cmt_msg": "sunrpc: use-after-free in svc_process_common()" }, @@ -99655,9 +99650,6 @@ "CVE-2019-11477": { "cmt_msg": "tcp: limit payload size of sacked skbs" }, - "CVE-2023-38431": { - "cmt_msg": "ksmbd: check the validation of pdu_size in ksmbd_conn_handler_loop" - }, "CVE-2019-11479": { "cmt_msg": "tcp: add tcp_min_snd_mss sysctl" }, @@ -99919,9 +99911,6 @@ "CVE-2023-2430": { "cmt_msg": "io_uring/msg_ring: fix missing lock on overflow for IOPOLL" }, - "CVE-2023-32258": { - "cmt_msg": "ksmbd: fix racy issue from smb2 close and logoff with multichannel" - }, "CVE-2022-23816": { "cmt_msg": "x86/kvm/vmx: Make noinstr clean" }, @@ -100006,9 +99995,6 @@ "CVE-2022-2961": { "cmt_msg": "" }, - "CVE-2023-38432": { - "cmt_msg": "ksmbd: validate command payload size" - }, "CVE-2022-3567": { "cmt_msg": "ipv6: Fix data races around sk->sk_prot." }, @@ -100114,8 +100100,8 @@ "CVE-2020-0255": { "cmt_msg": "selinux: properly handle multiple messages in selinux_netlink_send()" }, - "CVE-2023-32252": { - "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" + "CVE-2023-35001": { + "cmt_msg": "netfilter: nf_tables: prevent OOB access in nft_byteorder_eval" }, "CVE-2022-27666": { "cmt_msg": "esp: Fix possible buffer overflow in ESP transformation" @@ -100150,6 +100136,9 @@ "CVE-2023-3397": { "cmt_msg": "" }, + "CVE-2023-3117": { + "cmt_msg": "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE" + }, "CVE-2022-26365": { "cmt_msg": "xen/blkfront: fix leaking data in shared pages" }, @@ -100351,6 +100340,9 @@ "CVE-2007-3719": { "cmt_msg": "" }, + "CVE-2023-3863": { + "cmt_msg": "net: nfc: Fix use-after-free caused by nfc_llcp_find_local" + }, "CVE-2023-0590": { "cmt_msg": "net: sched: fix race condition in qdisc_graft()" }, @@ -100618,18 +100610,12 @@ "CVE-2018-12931": { "cmt_msg": "" }, - "CVE-2023-38426": { - "cmt_msg": "ksmbd: fix global-out-of-bounds in smb2_find_context_vals" - }, "CVE-2020-12768": { "cmt_msg": "KVM: SVM: Fix potential memory leak in svm_cpu_init()" }, "CVE-2020-12769": { "cmt_msg": "spi: spi-dw: Add lock protect dw_spi rx/tx to prevent concurrent calls" }, - "CVE-2023-32248": { - "cmt_msg": "ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()" - }, "CVE-2021-32399": { "cmt_msg": "bluetooth: eliminate the potential race condition when removing the HCI controller" }, @@ -100708,9 +100694,6 @@ "CVE-2019-11191": { "cmt_msg": "x86: Deprecate a.out support" }, - "CVE-2023-35001": { - "cmt_msg": "netfilter: nf_tables: prevent OOB access in nft_byteorder_eval" - }, "CVE-2020-10781": { "cmt_msg": "Revert \"zram: convert remaining CLASS_ATTR() to CLASS_ATTR_RO()\"" }, @@ -100723,9 +100706,6 @@ "CVE-2021-3609": { "cmt_msg": "can: bcm: delay release of struct bcm_op after synchronize_rcu()" }, - "CVE-2022-48502": { - "cmt_msg": "fs/ntfs3: Check fields while reading" - }, "CVE-2019-19536": { "cmt_msg": "can: peak_usb: pcan_usb_pro: Fix info-leaks to USB devices" }, @@ -100771,9 +100751,6 @@ "CVE-2023-0615": { "cmt_msg": "media: vivid: dev->bitmap_cap wasn't freed in all cases" }, - "CVE-2023-38427": { - "cmt_msg": "ksmbd: fix out-of-bound read in deassemble_neg_contexts()" - }, "CVE-2019-14896": { "cmt_msg": "libertas: Fix two buffer overflows at parsing bss descriptor" }, @@ -100813,12 +100790,6 @@ "CVE-2020-26541": { "cmt_msg": "certs: Add EFI_CERT_X509_GUID support for dbx entries" }, - "CVE-2023-38430": { - "cmt_msg": "ksmbd: validate smb request protocol id" - }, - "CVE-2023-38428": { - "cmt_msg": "ksmbd: fix wrong UserName check in session_user" - }, "CVE-2023-0045": { "cmt_msg": "x86/bugs: Flush IBP in ib_prctl_set()" }, @@ -100978,12 +100949,18 @@ "CVE-2022-1966": { "cmt_msg": "netfilter: nf_tables: disallow non-stateful expression in sets earlier" }, + "CVE-2023-3773": { + "cmt_msg": "" + }, "CVE-2021-3587": { "cmt_msg": "nfc: fix NULL ptr dereference in llcp_sock_getname() after failed connect" }, "CVE-2021-44733": { "cmt_msg": "tee: handle lookup of shm with reference count 0" }, + "CVE-2022-3533": { + "cmt_msg": "" + }, "CVE-2022-3534": { "cmt_msg": "libbpf: Fix use-after-free in btf_dump_name_dups" }, @@ -101134,6 +101111,9 @@ "CVE-2021-33655": { "cmt_msg": "fbcon: Disallow setting font bigger than screen size" }, + "CVE-2023-3611": { + "cmt_msg": "net/sched: sch_qfq: account for stab overhead in qfq_enqueue" + }, "CVE-2022-41858": { "cmt_msg": "drivers: net: slip: fix NPD bug in sl_tx_timeout()" }, @@ -101233,8 +101213,8 @@ "CVE-2022-26490": { "cmt_msg": "nfc: st21nfca: Fix potential buffer overflows in EVT_TRANSACTION" }, - "CVE-2023-32247": { - "cmt_msg": "ksmbd: destroy expired sessions" + "CVE-2023-3812": { + "cmt_msg": "net: tun: fix bugs for oversize packet when napi frags enabled" }, "CVE-2022-3169": { "cmt_msg": "nvme: ensure subsystem reset is single threaded" @@ -101305,24 +101285,15 @@ "CVE-2020-35519": { "cmt_msg": "net/x25: prevent a couple of overflows" }, - "CVE-2023-32257": { - "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" - }, "CVE-2023-31436": { "cmt_msg": "net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg" }, - "CVE-2023-32254": { - "cmt_msg": "ksmbd: fix racy issue under cocurrent smb2 tree disconnect" - }, "CVE-2021-28971": { "cmt_msg": "perf/x86/intel: Fix a crash caused by zero PEBS status" }, "CVE-2020-10708": { "cmt_msg": "" }, - "CVE-2023-32250": { - "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" - }, "CVE-2022-0400": { "cmt_msg": "" }, @@ -101365,9 +101336,15 @@ "CVE-2020-25284": { "cmt_msg": "rbd: require global CAP_SYS_ADMIN for mapping and unmapping" }, + "CVE-2022-3606": { + "cmt_msg": "" + }, "CVE-2023-3640": { "cmt_msg": "" }, + "CVE-2023-20593": { + "cmt_msg": "x86/cpu/amd: Add a Zenbleed fix" + }, "CVE-2023-0160": { "cmt_msg": "" }, @@ -101542,6 +101519,9 @@ "CVE-2019-20908": { "cmt_msg": "efi: Restrict efivar_ssdt_load when the kernel is locked down" }, + "CVE-2023-3776": { + "cmt_msg": "net/sched: cls_fw: Fix improper refcount update leads to use-after-free" + }, "CVE-2021-28038": { "cmt_msg": "Xen/gnttab: handle p2m update errors on a per-slot basis" }, @@ -101590,9 +101570,6 @@ "CVE-2010-4563": { "cmt_msg": "" }, - "CVE-2023-35693": { - "cmt_msg": "" - }, "CVE-2023-1249": { "cmt_msg": "coredump: Use the vma snapshot in fill_files_note" }, @@ -101659,6 +101636,9 @@ "CVE-2021-3573": { "cmt_msg": "Bluetooth: use correct lock to prevent UAF of hdev object" }, + "CVE-2023-3609": { + "cmt_msg": "net/sched: cls_u32: Fix reference counter leak leading to overflow" + }, "CVE-2022-1974": { "cmt_msg": "nfc: replace improper check device_is_registered() in netlink related functions" }, @@ -101686,6 +101666,9 @@ "CVE-2022-1280": { "cmt_msg": "drm: avoid circular locks in drm_mode_getconnector" }, + "CVE-2023-3772": { + "cmt_msg": "" + }, "CVE-2020-11668": { "cmt_msg": "media: xirlink_cit: add missing descriptor sanity checks" }, @@ -101893,9 +101876,6 @@ "CVE-2021-39800": { "cmt_msg": "" }, - "CVE-2023-38429": { - "cmt_msg": "ksmbd: allocate one more byte for implied bcc[0]" - }, "CVE-2022-1195": { "cmt_msg": "hamradio: improve the incomplete fix to avoid NPD" }, @@ -102446,9 +102426,6 @@ "CVE-2023-2008": { "cmt_msg": "udmabuf: add back sanity check" }, - "CVE-2023-38431": { - "cmt_msg": "ksmbd: check the validation of pdu_size in ksmbd_conn_handler_loop" - }, "CVE-2023-2002": { "cmt_msg": "bluetooth: Perform careful capability checks in hci_sock_ioctl()" }, @@ -102518,6 +102495,9 @@ "CVE-2022-3625": { "cmt_msg": "devlink: Fix use-after-free after a failed reload" }, + "CVE-2022-3606": { + "cmt_msg": "" + }, "CVE-2023-28772": { "cmt_msg": "seq_buf: Fix overflow in seq_buf_putmem_hex()" }, @@ -102701,9 +102681,6 @@ "CVE-2022-0185": { "cmt_msg": "vfs: fs_context: fix up param length parsing in legacy_parse_param" }, - "CVE-2023-32258": { - "cmt_msg": "ksmbd: fix racy issue from smb2 close and logoff with multichannel" - }, "CVE-2022-23816": { "cmt_msg": "x86/kvm/vmx: Make noinstr clean" }, @@ -102785,9 +102762,6 @@ "CVE-2022-4269": { "cmt_msg": "act_mirred: use the backlog for nested calls to mirred ingress" }, - "CVE-2023-38432": { - "cmt_msg": "ksmbd: validate command payload size" - }, "CVE-2022-3567": { "cmt_msg": "ipv6: Fix data races around sk->sk_prot." }, @@ -102896,8 +102870,8 @@ "CVE-2019-2214": { "cmt_msg": "binder: Set end of SG buffer area properly." }, - "CVE-2023-32252": { - "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" + "CVE-2023-35001": { + "cmt_msg": "netfilter: nf_tables: prevent OOB access in nft_byteorder_eval" }, "CVE-2022-27666": { "cmt_msg": "esp: Fix possible buffer overflow in ESP transformation" @@ -102929,6 +102903,9 @@ "CVE-2023-3397": { "cmt_msg": "" }, + "CVE-2023-3117": { + "cmt_msg": "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE" + }, "CVE-2022-26365": { "cmt_msg": "xen/blkfront: fix leaking data in shared pages" }, @@ -103121,6 +103098,9 @@ "CVE-2007-3719": { "cmt_msg": "" }, + "CVE-2023-3863": { + "cmt_msg": "net: nfc: Fix use-after-free caused by nfc_llcp_find_local" + }, "CVE-2023-0590": { "cmt_msg": "net: sched: fix race condition in qdisc_graft()" }, @@ -103394,18 +103374,12 @@ "CVE-2018-12931": { "cmt_msg": "" }, - "CVE-2023-38426": { - "cmt_msg": "ksmbd: fix global-out-of-bounds in smb2_find_context_vals" - }, "CVE-2020-12768": { "cmt_msg": "KVM: SVM: Fix potential memory leak in svm_cpu_init()" }, "CVE-2020-12769": { "cmt_msg": "spi: spi-dw: Add lock protect dw_spi rx/tx to prevent concurrent calls" }, - "CVE-2023-32248": { - "cmt_msg": "ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()" - }, "CVE-2021-32399": { "cmt_msg": "bluetooth: eliminate the potential race condition when removing the HCI controller" }, @@ -103484,9 +103458,6 @@ "CVE-2022-44032": { "cmt_msg": "" }, - "CVE-2023-35001": { - "cmt_msg": "netfilter: nf_tables: prevent OOB access in nft_byteorder_eval" - }, "CVE-2020-10781": { "cmt_msg": "Revert \"zram: convert remaining CLASS_ATTR() to CLASS_ATTR_RO()\"" }, @@ -103502,9 +103473,6 @@ "CVE-2021-3609": { "cmt_msg": "can: bcm: delay release of struct bcm_op after synchronize_rcu()" }, - "CVE-2022-48502": { - "cmt_msg": "fs/ntfs3: Check fields while reading" - }, "CVE-2019-19536": { "cmt_msg": "can: peak_usb: pcan_usb_pro: Fix info-leaks to USB devices" }, @@ -103547,9 +103515,6 @@ "CVE-2023-0615": { "cmt_msg": "media: vivid: dev->bitmap_cap wasn't freed in all cases" }, - "CVE-2023-38427": { - "cmt_msg": "ksmbd: fix out-of-bound read in deassemble_neg_contexts()" - }, "CVE-2019-14896": { "cmt_msg": "libertas: Fix two buffer overflows at parsing bss descriptor" }, @@ -103589,12 +103554,6 @@ "CVE-2020-26541": { "cmt_msg": "certs: Add EFI_CERT_X509_GUID support for dbx entries" }, - "CVE-2023-38430": { - "cmt_msg": "ksmbd: validate smb request protocol id" - }, - "CVE-2023-38428": { - "cmt_msg": "ksmbd: fix wrong UserName check in session_user" - }, "CVE-2023-0045": { "cmt_msg": "x86/bugs: Flush IBP in ib_prctl_set()" }, @@ -103742,12 +103701,18 @@ "CVE-2022-1966": { "cmt_msg": "netfilter: nf_tables: disallow non-stateful expression in sets earlier" }, + "CVE-2023-3773": { + "cmt_msg": "" + }, "CVE-2021-3587": { "cmt_msg": "nfc: fix NULL ptr dereference in llcp_sock_getname() after failed connect" }, "CVE-2021-44733": { "cmt_msg": "tee: handle lookup of shm with reference count 0" }, + "CVE-2022-3533": { + "cmt_msg": "" + }, "CVE-2022-3534": { "cmt_msg": "libbpf: Fix use-after-free in btf_dump_name_dups" }, @@ -103898,6 +103863,9 @@ "CVE-2021-33655": { "cmt_msg": "fbcon: Disallow setting font bigger than screen size" }, + "CVE-2023-3611": { + "cmt_msg": "net/sched: sch_qfq: account for stab overhead in qfq_enqueue" + }, "CVE-2022-41858": { "cmt_msg": "drivers: net: slip: fix NPD bug in sl_tx_timeout()" }, @@ -104003,8 +103971,8 @@ "CVE-2022-26490": { "cmt_msg": "nfc: st21nfca: Fix potential buffer overflows in EVT_TRANSACTION" }, - "CVE-2023-32247": { - "cmt_msg": "ksmbd: destroy expired sessions" + "CVE-2023-3812": { + "cmt_msg": "net: tun: fix bugs for oversize packet when napi frags enabled" }, "CVE-2022-3169": { "cmt_msg": "nvme: ensure subsystem reset is single threaded" @@ -104072,24 +104040,15 @@ "CVE-2020-36312": { "cmt_msg": "KVM: fix memory leak in kvm_io_bus_unregister_dev()" }, - "CVE-2023-32257": { - "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" - }, "CVE-2023-31436": { "cmt_msg": "net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg" }, - "CVE-2023-32254": { - "cmt_msg": "ksmbd: fix racy issue under cocurrent smb2 tree disconnect" - }, "CVE-2021-28971": { "cmt_msg": "perf/x86/intel: Fix a crash caused by zero PEBS status" }, "CVE-2020-10708": { "cmt_msg": "" }, - "CVE-2023-32250": { - "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" - }, "CVE-2022-0400": { "cmt_msg": "" }, @@ -104135,6 +104094,9 @@ "CVE-2023-3640": { "cmt_msg": "" }, + "CVE-2023-20593": { + "cmt_msg": "x86/cpu/amd: Add a Zenbleed fix" + }, "CVE-2023-0160": { "cmt_msg": "" }, @@ -104306,6 +104268,9 @@ "CVE-2019-20908": { "cmt_msg": "efi: Restrict efivar_ssdt_load when the kernel is locked down" }, + "CVE-2023-3776": { + "cmt_msg": "net/sched: cls_fw: Fix improper refcount update leads to use-after-free" + }, "CVE-2021-28038": { "cmt_msg": "Xen/gnttab: handle p2m update errors on a per-slot basis" }, @@ -104357,9 +104322,6 @@ "CVE-2010-4563": { "cmt_msg": "" }, - "CVE-2023-35693": { - "cmt_msg": "" - }, "CVE-2023-1249": { "cmt_msg": "coredump: Use the vma snapshot in fill_files_note" }, @@ -104426,6 +104388,9 @@ "CVE-2021-3573": { "cmt_msg": "Bluetooth: use correct lock to prevent UAF of hdev object" }, + "CVE-2023-3609": { + "cmt_msg": "net/sched: cls_u32: Fix reference counter leak leading to overflow" + }, "CVE-2022-1974": { "cmt_msg": "nfc: replace improper check device_is_registered() in netlink related functions" }, @@ -104447,6 +104412,9 @@ "CVE-2022-1280": { "cmt_msg": "drm: avoid circular locks in drm_mode_getconnector" }, + "CVE-2023-3772": { + "cmt_msg": "" + }, "CVE-2020-11668": { "cmt_msg": "media: xirlink_cit: add missing descriptor sanity checks" }, @@ -104654,9 +104622,6 @@ "CVE-2021-28375": { "cmt_msg": "misc: fastrpc: restrict user apps from sending kernel RPC messages" }, - "CVE-2023-38429": { - "cmt_msg": "ksmbd: allocate one more byte for implied bcc[0]" - }, "CVE-2019-16714": { "cmt_msg": "net/rds: Fix info leak in rds6_inc_info_copy()" }, @@ -105214,9 +105179,6 @@ "CVE-2023-2008": { "cmt_msg": "udmabuf: add back sanity check" }, - "CVE-2023-38431": { - "cmt_msg": "ksmbd: check the validation of pdu_size in ksmbd_conn_handler_loop" - }, "CVE-2023-2002": { "cmt_msg": "bluetooth: Perform careful capability checks in hci_sock_ioctl()" }, @@ -105280,6 +105242,9 @@ "CVE-2022-3625": { "cmt_msg": "devlink: Fix use-after-free after a failed reload" }, + "CVE-2022-3606": { + "cmt_msg": "" + }, "CVE-2023-28772": { "cmt_msg": "seq_buf: Fix overflow in seq_buf_putmem_hex()" }, @@ -105439,6 +105404,9 @@ "CVE-2021-3564": { "cmt_msg": "Bluetooth: fix the erroneous flush_work() order" }, + "CVE-2023-3611": { + "cmt_msg": "net/sched: sch_qfq: account for stab overhead in qfq_enqueue" + }, "CVE-2020-26560": { "cmt_msg": "" }, @@ -105451,9 +105419,6 @@ "CVE-2022-0185": { "cmt_msg": "vfs: fs_context: fix up param length parsing in legacy_parse_param" }, - "CVE-2023-32258": { - "cmt_msg": "ksmbd: fix racy issue from smb2 close and logoff with multichannel" - }, "CVE-2022-23816": { "cmt_msg": "x86/kvm/vmx: Make noinstr clean" }, @@ -105532,9 +105497,6 @@ "CVE-2022-4269": { "cmt_msg": "act_mirred: use the backlog for nested calls to mirred ingress" }, - "CVE-2023-38432": { - "cmt_msg": "ksmbd: validate command payload size" - }, "CVE-2022-3567": { "cmt_msg": "ipv6: Fix data races around sk->sk_prot." }, @@ -105664,6 +105626,9 @@ "CVE-2023-3397": { "cmt_msg": "" }, + "CVE-2023-3117": { + "cmt_msg": "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE" + }, "CVE-2022-26365": { "cmt_msg": "xen/blkfront: fix leaking data in shared pages" }, @@ -105835,6 +105800,9 @@ "CVE-2007-3719": { "cmt_msg": "" }, + "CVE-2023-3863": { + "cmt_msg": "net: nfc: Fix use-after-free caused by nfc_llcp_find_local" + }, "CVE-2023-0590": { "cmt_msg": "net: sched: fix race condition in qdisc_graft()" }, @@ -106105,18 +106073,12 @@ "CVE-2018-12931": { "cmt_msg": "" }, - "CVE-2023-38426": { - "cmt_msg": "ksmbd: fix global-out-of-bounds in smb2_find_context_vals" - }, "CVE-2020-12768": { "cmt_msg": "KVM: SVM: Fix potential memory leak in svm_cpu_init()" }, "CVE-2020-12769": { "cmt_msg": "spi: spi-dw: Add lock protect dw_spi rx/tx to prevent concurrent calls" }, - "CVE-2023-32248": { - "cmt_msg": "ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()" - }, "CVE-2021-32399": { "cmt_msg": "bluetooth: eliminate the potential race condition when removing the HCI controller" }, @@ -106201,9 +106163,6 @@ "CVE-2021-3609": { "cmt_msg": "can: bcm: delay release of struct bcm_op after synchronize_rcu()" }, - "CVE-2022-48502": { - "cmt_msg": "fs/ntfs3: Check fields while reading" - }, "CVE-2019-19534": { "cmt_msg": "can: peak_usb: fix slab info leak" }, @@ -106234,9 +106193,6 @@ "CVE-2023-0615": { "cmt_msg": "media: vivid: dev->bitmap_cap wasn't freed in all cases" }, - "CVE-2023-38427": { - "cmt_msg": "ksmbd: fix out-of-bound read in deassemble_neg_contexts()" - }, "CVE-2019-14896": { "cmt_msg": "libertas: Fix two buffer overflows at parsing bss descriptor" }, @@ -106276,12 +106232,6 @@ "CVE-2020-26541": { "cmt_msg": "certs: Add EFI_CERT_X509_GUID support for dbx entries" }, - "CVE-2023-38430": { - "cmt_msg": "ksmbd: validate smb request protocol id" - }, - "CVE-2023-38428": { - "cmt_msg": "ksmbd: fix wrong UserName check in session_user" - }, "CVE-2023-3390": { "cmt_msg": "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE" }, @@ -106357,6 +106307,9 @@ "CVE-2023-3090": { "cmt_msg": "ipvlan:Fix out-of-bounds caused by unclear skb->cb" }, + "CVE-2023-3772": { + "cmt_msg": "" + }, "CVE-2023-1582": { "cmt_msg": "fs/proc: task_mmu.c: don't read mapcount for migration entry" }, @@ -106420,12 +106373,18 @@ "CVE-2022-1966": { "cmt_msg": "netfilter: nf_tables: disallow non-stateful expression in sets earlier" }, + "CVE-2023-3773": { + "cmt_msg": "" + }, "CVE-2021-3587": { "cmt_msg": "nfc: fix NULL ptr dereference in llcp_sock_getname() after failed connect" }, "CVE-2021-44733": { "cmt_msg": "tee: handle lookup of shm with reference count 0" }, + "CVE-2022-3533": { + "cmt_msg": "" + }, "CVE-2022-3534": { "cmt_msg": "libbpf: Fix use-after-free in btf_dump_name_dups" }, @@ -106693,8 +106652,8 @@ "CVE-2022-26490": { "cmt_msg": "nfc: st21nfca: Fix potential buffer overflows in EVT_TRANSACTION" }, - "CVE-2023-32247": { - "cmt_msg": "ksmbd: destroy expired sessions" + "CVE-2023-3812": { + "cmt_msg": "net: tun: fix bugs for oversize packet when napi frags enabled" }, "CVE-2022-3169": { "cmt_msg": "nvme: ensure subsystem reset is single threaded" @@ -106759,24 +106718,12 @@ "CVE-2020-35519": { "cmt_msg": "net/x25: prevent a couple of overflows" }, - "CVE-2023-32257": { - "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" - }, "CVE-2023-31436": { "cmt_msg": "net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg" }, - "CVE-2023-32254": { - "cmt_msg": "ksmbd: fix racy issue under cocurrent smb2 tree disconnect" - }, - "CVE-2023-32252": { - "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" - }, "CVE-2020-10708": { "cmt_msg": "" }, - "CVE-2023-32250": { - "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" - }, "CVE-2022-0400": { "cmt_msg": "" }, @@ -106816,6 +106763,9 @@ "CVE-2023-3640": { "cmt_msg": "" }, + "CVE-2023-20593": { + "cmt_msg": "x86/cpu/amd: Add a Zenbleed fix" + }, "CVE-2023-0160": { "cmt_msg": "" }, @@ -106972,6 +106922,9 @@ "CVE-2019-20908": { "cmt_msg": "efi: Restrict efivar_ssdt_load when the kernel is locked down" }, + "CVE-2023-3776": { + "cmt_msg": "net/sched: cls_fw: Fix improper refcount update leads to use-after-free" + }, "CVE-2021-28038": { "cmt_msg": "Xen/gnttab: handle p2m update errors on a per-slot basis" }, @@ -107026,9 +106979,6 @@ "CVE-2010-4563": { "cmt_msg": "" }, - "CVE-2023-35693": { - "cmt_msg": "" - }, "CVE-2023-1249": { "cmt_msg": "coredump: Use the vma snapshot in fill_files_note" }, @@ -107092,6 +107042,9 @@ "CVE-2021-3573": { "cmt_msg": "Bluetooth: use correct lock to prevent UAF of hdev object" }, + "CVE-2023-3609": { + "cmt_msg": "net/sched: cls_u32: Fix reference counter leak leading to overflow" + }, "CVE-2022-1974": { "cmt_msg": "nfc: replace improper check device_is_registered() in netlink related functions" }, @@ -107308,9 +107261,6 @@ "CVE-2021-28375": { "cmt_msg": "misc: fastrpc: restrict user apps from sending kernel RPC messages" }, - "CVE-2023-38429": { - "cmt_msg": "ksmbd: allocate one more byte for implied bcc[0]" - }, "CVE-2022-1195": { "cmt_msg": "hamradio: improve the incomplete fix to avoid NPD" }, @@ -107956,6 +107906,12 @@ "CVE-2022-33981": { "cmt_msg": "floppy: disable FDRAWCMD by default" }, + "CVE-2023-3610": { + "cmt_msg": "netfilter: nf_tables: fix chain binding transaction logic" + }, + "CVE-2023-3611": { + "cmt_msg": "net/sched: sch_qfq: account for stab overhead in qfq_enqueue" + }, "CVE-2020-26560": { "cmt_msg": "" }, @@ -108025,9 +107981,6 @@ "CVE-2023-35827": { "cmt_msg": "" }, - "CVE-2023-38432": { - "cmt_msg": "ksmbd: validate command payload size" - }, "CVE-2022-3567": { "cmt_msg": "ipv6: Fix data races around sk->sk_prot." }, @@ -108208,6 +108161,9 @@ "CVE-2007-3719": { "cmt_msg": "" }, + "CVE-2023-3863": { + "cmt_msg": "net: nfc: Fix use-after-free caused by nfc_llcp_find_local" + }, "CVE-2023-0590": { "cmt_msg": "net: sched: fix race condition in qdisc_graft()" }, @@ -108217,9 +108173,6 @@ "CVE-2022-45919": { "cmt_msg": "" }, - "CVE-2023-32258": { - "cmt_msg": "ksmbd: fix racy issue from smb2 close and logoff with multichannel" - }, "CVE-2023-2248": { "cmt_msg": "net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg" }, @@ -108367,6 +108320,9 @@ "CVE-2022-20008": { "cmt_msg": "mmc: block: fix read single on recovery logic" }, + "CVE-2023-3117": { + "cmt_msg": "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE" + }, "CVE-2023-32269": { "cmt_msg": "netrom: Fix use-after-free caused by accept on already connected socket" }, @@ -108400,9 +108356,6 @@ "CVE-2023-1990": { "cmt_msg": "nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition" }, - "CVE-2023-32248": { - "cmt_msg": "ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()" - }, "CVE-2022-2639": { "cmt_msg": "openvswitch: fix OOB access in reserve_sfa_size()" }, @@ -108439,8 +108392,8 @@ "CVE-2022-44032": { "cmt_msg": "" }, - "CVE-2022-48502": { - "cmt_msg": "fs/ntfs3: Check fields while reading" + "CVE-2022-47518": { + "cmt_msg": "wifi: wilc1000: validate number of channels" }, "CVE-2022-0847": { "cmt_msg": "lib/iov_iter: initialize \"flags\" in new pipe_buffer" @@ -108457,15 +108410,9 @@ "CVE-2022-3619": { "cmt_msg": "Bluetooth: L2CAP: Fix memory leak in vhci_write" }, - "CVE-2023-38426": { - "cmt_msg": "ksmbd: fix global-out-of-bounds in smb2_find_context_vals" - }, "CVE-2023-0615": { "cmt_msg": "media: vivid: dev->bitmap_cap wasn't freed in all cases" }, - "CVE-2023-38427": { - "cmt_msg": "ksmbd: fix out-of-bound read in deassemble_neg_contexts()" - }, "CVE-2023-3006": { "cmt_msg": "arm64: Add AMPERE1 to the Spectre-BHB affected list" }, @@ -108481,21 +108428,15 @@ "CVE-2023-1872": { "cmt_msg": "io_uring: propagate issue_flags state down to file assignment" }, - "CVE-2023-38428": { - "cmt_msg": "ksmbd: fix wrong UserName check in session_user" - }, "CVE-2023-1079": { "cmt_msg": "HID: asus: use spinlock to safely schedule workers" }, - "CVE-2023-38431": { - "cmt_msg": "ksmbd: check the validation of pdu_size in ksmbd_conn_handler_loop" - }, - "CVE-2023-38430": { - "cmt_msg": "ksmbd: validate smb request protocol id" - }, "CVE-2023-3390": { "cmt_msg": "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE" }, + "CVE-2023-3812": { + "cmt_msg": "net: tun: fix bugs for oversize packet when napi frags enabled" + }, "CVE-2020-26143": { "cmt_msg": "" }, @@ -108517,9 +108458,6 @@ "CVE-2023-1670": { "cmt_msg": "xirc2ps_cs: Fix use after free bug in xirc2ps_detach" }, - "CVE-2023-38429": { - "cmt_msg": "ksmbd: allocate one more byte for implied bcc[0]" - }, "CVE-2022-2873": { "cmt_msg": "i2c: ismt: prevent memory corruption in ismt_access()" }, @@ -108574,9 +108512,18 @@ "CVE-2022-1966": { "cmt_msg": "netfilter: nf_tables: disallow non-stateful expression in sets earlier" }, + "CVE-2023-3773": { + "cmt_msg": "" + }, + "CVE-2023-3772": { + "cmt_msg": "" + }, "CVE-2021-44733": { "cmt_msg": "tee: handle lookup of shm with reference count 0" }, + "CVE-2022-3533": { + "cmt_msg": "" + }, "CVE-2022-3534": { "cmt_msg": "libbpf: Fix use-after-free in btf_dump_name_dups" }, @@ -108742,9 +108689,6 @@ "CVE-2022-1043": { "cmt_msg": "io_uring: fix xa_alloc_cycle() error return value check" }, - "CVE-2023-32247": { - "cmt_msg": "ksmbd: destroy expired sessions" - }, "CVE-2022-3169": { "cmt_msg": "nvme: ensure subsystem reset is single threaded" }, @@ -108793,21 +108737,9 @@ "CVE-2022-45884": { "cmt_msg": "" }, - "CVE-2023-32257": { - "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" - }, - "CVE-2023-32254": { - "cmt_msg": "ksmbd: fix racy issue under cocurrent smb2 tree disconnect" - }, - "CVE-2023-32252": { - "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" - }, "CVE-2020-10708": { "cmt_msg": "" }, - "CVE-2023-32250": { - "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" - }, "CVE-2022-0400": { "cmt_msg": "" }, @@ -108832,8 +108764,8 @@ "CVE-2022-47519": { "cmt_msg": "wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute" }, - "CVE-2022-47518": { - "cmt_msg": "wifi: wilc1000: validate number of channels" + "CVE-2022-3606": { + "cmt_msg": "" }, "CVE-2022-39188": { "cmt_msg": "mmu_gather: Force tlb-flush VM_PFNMAP vmas" @@ -108841,6 +108773,9 @@ "CVE-2023-3640": { "cmt_msg": "" }, + "CVE-2023-20593": { + "cmt_msg": "x86/cpu/amd: Add a Zenbleed fix" + }, "CVE-2023-0160": { "cmt_msg": "" }, @@ -108946,6 +108881,9 @@ "CVE-2022-1729": { "cmt_msg": "perf: Fix sys_perf_event_open() race against self" }, + "CVE-2023-3776": { + "cmt_msg": "net/sched: cls_fw: Fix improper refcount update leads to use-after-free" + }, "CVE-2022-2964": { "cmt_msg": "net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup" }, @@ -108961,9 +108899,6 @@ "CVE-2010-4563": { "cmt_msg": "" }, - "CVE-2023-35693": { - "cmt_msg": "" - }, "CVE-2023-1249": { "cmt_msg": "coredump: Use the vma snapshot in fill_files_note" }, @@ -109006,6 +108941,9 @@ "CVE-2022-44034": { "cmt_msg": "" }, + "CVE-2023-3609": { + "cmt_msg": "net/sched: cls_u32: Fix reference counter leak leading to overflow" + }, "CVE-2022-1974": { "cmt_msg": "nfc: replace improper check device_is_registered() in netlink related functions" }, @@ -109709,6 +109647,12 @@ "CVE-2022-33981": { "cmt_msg": "floppy: disable FDRAWCMD by default" }, + "CVE-2023-3610": { + "cmt_msg": "netfilter: nf_tables: fix chain binding transaction logic" + }, + "CVE-2023-3611": { + "cmt_msg": "net/sched: sch_qfq: account for stab overhead in qfq_enqueue" + }, "CVE-2020-26560": { "cmt_msg": "" }, @@ -109772,9 +109716,6 @@ "CVE-2023-35827": { "cmt_msg": "" }, - "CVE-2023-38432": { - "cmt_msg": "ksmbd: validate command payload size" - }, "CVE-2022-3567": { "cmt_msg": "ipv6: Fix data races around sk->sk_prot." }, @@ -109961,6 +109902,9 @@ "CVE-2007-3719": { "cmt_msg": "" }, + "CVE-2023-3863": { + "cmt_msg": "net: nfc: Fix use-after-free caused by nfc_llcp_find_local" + }, "CVE-2023-0590": { "cmt_msg": "net: sched: fix race condition in qdisc_graft()" }, @@ -109970,9 +109914,6 @@ "CVE-2022-45919": { "cmt_msg": "" }, - "CVE-2023-32258": { - "cmt_msg": "ksmbd: fix racy issue from smb2 close and logoff with multichannel" - }, "CVE-2023-2248": { "cmt_msg": "net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg" }, @@ -110117,6 +110058,9 @@ "CVE-2022-20008": { "cmt_msg": "mmc: block: fix read single on recovery logic" }, + "CVE-2023-3117": { + "cmt_msg": "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE" + }, "CVE-2023-3111": { "cmt_msg": "btrfs: unset reloc control if transaction commit fails in prepare_to_relocate()" }, @@ -110150,9 +110094,6 @@ "CVE-2023-1990": { "cmt_msg": "nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition" }, - "CVE-2023-32248": { - "cmt_msg": "ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()" - }, "CVE-2022-0185": { "cmt_msg": "vfs: fs_context: fix up param length parsing in legacy_parse_param" }, @@ -110180,8 +110121,8 @@ "CVE-2022-44032": { "cmt_msg": "" }, - "CVE-2022-48502": { - "cmt_msg": "fs/ntfs3: Check fields while reading" + "CVE-2022-47518": { + "cmt_msg": "wifi: wilc1000: validate number of channels" }, "CVE-2022-0847": { "cmt_msg": "lib/iov_iter: initialize \"flags\" in new pipe_buffer" @@ -110195,15 +110136,9 @@ "CVE-2022-3619": { "cmt_msg": "Bluetooth: L2CAP: Fix memory leak in vhci_write" }, - "CVE-2023-38426": { - "cmt_msg": "ksmbd: fix global-out-of-bounds in smb2_find_context_vals" - }, "CVE-2023-0615": { "cmt_msg": "media: vivid: dev->bitmap_cap wasn't freed in all cases" }, - "CVE-2023-38427": { - "cmt_msg": "ksmbd: fix out-of-bound read in deassemble_neg_contexts()" - }, "CVE-2023-3006": { "cmt_msg": "arm64: Add AMPERE1 to the Spectre-BHB affected list" }, @@ -110219,21 +110154,15 @@ "CVE-2023-1872": { "cmt_msg": "io_uring: propagate issue_flags state down to file assignment" }, - "CVE-2023-38428": { - "cmt_msg": "ksmbd: fix wrong UserName check in session_user" - }, "CVE-2023-1079": { "cmt_msg": "HID: asus: use spinlock to safely schedule workers" }, - "CVE-2023-38431": { - "cmt_msg": "ksmbd: check the validation of pdu_size in ksmbd_conn_handler_loop" - }, - "CVE-2023-38430": { - "cmt_msg": "ksmbd: validate smb request protocol id" - }, "CVE-2023-3390": { "cmt_msg": "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE" }, + "CVE-2023-3812": { + "cmt_msg": "net: tun: fix bugs for oversize packet when napi frags enabled" + }, "CVE-2020-26143": { "cmt_msg": "" }, @@ -110255,9 +110184,6 @@ "CVE-2023-1670": { "cmt_msg": "xirc2ps_cs: Fix use after free bug in xirc2ps_detach" }, - "CVE-2023-38429": { - "cmt_msg": "ksmbd: allocate one more byte for implied bcc[0]" - }, "CVE-2022-2873": { "cmt_msg": "i2c: ismt: prevent memory corruption in ismt_access()" }, @@ -110315,9 +110241,18 @@ "CVE-2022-1966": { "cmt_msg": "netfilter: nf_tables: disallow non-stateful expression in sets earlier" }, + "CVE-2023-3773": { + "cmt_msg": "" + }, + "CVE-2023-3772": { + "cmt_msg": "" + }, "CVE-2021-44733": { "cmt_msg": "tee: handle lookup of shm with reference count 0" }, + "CVE-2022-3533": { + "cmt_msg": "" + }, "CVE-2022-3534": { "cmt_msg": "libbpf: Fix use-after-free in btf_dump_name_dups" }, @@ -110483,9 +110418,6 @@ "CVE-2022-0264": { "cmt_msg": "bpf: Fix kernel address leakage in atomic fetch" }, - "CVE-2023-32247": { - "cmt_msg": "ksmbd: destroy expired sessions" - }, "CVE-2022-3169": { "cmt_msg": "nvme: ensure subsystem reset is single threaded" }, @@ -110531,21 +110463,9 @@ "CVE-2022-45884": { "cmt_msg": "" }, - "CVE-2023-32257": { - "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" - }, - "CVE-2023-32254": { - "cmt_msg": "ksmbd: fix racy issue under cocurrent smb2 tree disconnect" - }, - "CVE-2023-32252": { - "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" - }, "CVE-2020-10708": { "cmt_msg": "" }, - "CVE-2023-32250": { - "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" - }, "CVE-2022-0400": { "cmt_msg": "" }, @@ -110570,12 +110490,15 @@ "CVE-2022-47519": { "cmt_msg": "wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute" }, - "CVE-2022-47518": { - "cmt_msg": "wifi: wilc1000: validate number of channels" + "CVE-2022-3606": { + "cmt_msg": "" }, "CVE-2023-3640": { "cmt_msg": "" }, + "CVE-2023-20593": { + "cmt_msg": "x86/cpu/amd: Add a Zenbleed fix" + }, "CVE-2023-0160": { "cmt_msg": "" }, @@ -110678,6 +110601,9 @@ "CVE-2022-1729": { "cmt_msg": "perf: Fix sys_perf_event_open() race against self" }, + "CVE-2023-3776": { + "cmt_msg": "net/sched: cls_fw: Fix improper refcount update leads to use-after-free" + }, "CVE-2022-2964": { "cmt_msg": "net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup" }, @@ -110693,9 +110619,6 @@ "CVE-2010-4563": { "cmt_msg": "" }, - "CVE-2023-35693": { - "cmt_msg": "" - }, "CVE-2023-1249": { "cmt_msg": "coredump: Use the vma snapshot in fill_files_note" }, @@ -110738,6 +110661,9 @@ "CVE-2022-44034": { "cmt_msg": "" }, + "CVE-2023-3609": { + "cmt_msg": "net/sched: cls_u32: Fix reference counter leak leading to overflow" + }, "CVE-2022-1974": { "cmt_msg": "nfc: replace improper check device_is_registered() in netlink related functions" }, @@ -112708,6 +112634,10 @@ "cmt_msg": "tcp/udp: Fix memory leak in ipv6_renew_options().", "cmt_id": "818c36b988b82f31e4be8ad8415e1be902b8e5f8" }, + "CVE-2023-3812": { + "cmt_msg": "net: tun: fix bugs for oversize packet when napi frags enabled", + "cmt_id": "3583826b443a63681deaa855048d3f2b742af47e" + }, "CVE-2022-42896": { "cmt_msg": "Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM", "cmt_id": "6b6f94fb9a74dd2891f11de4e638c6202bc89476" @@ -113148,11 +113078,59 @@ } }, "5.10.185": { + "CVE-2023-3609": { + "cmt_msg": "net/sched: cls_u32: Fix reference counter leak leading to overflow", + "cmt_id": "af6eaa57986e82d7efd81984ee607927c6de61e4" + }, "CVE-2023-3338": { "cmt_msg": "Remove DECnet support from kernel", "cmt_id": "1c004b379b0327992c1713334198cf5eba29a4ba" } }, + "5.10.187": { + "CVE-2023-20593": { + "cmt_msg": "x86/cpu/amd: Add a Zenbleed fix", + "cmt_id": "93df00f9d48d48466ddbe01a06eaaf3311ecfb53" + } + }, + "5.10.188": { + "CVE-2023-31248": { + "cmt_msg": "netfilter: nf_tables: do not ignore genmask when looking up chain by id", + "cmt_id": "4ae2e501331aaa506eaf760339bb2f43e5769395" + }, + "CVE-2023-2898": { + "cmt_msg": "f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()", + "cmt_id": "b39ef5b52f10b819bd0ceeb22e8f7df7800880ca" + }, + "CVE-2023-3390": { + "cmt_msg": "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE", + "cmt_id": "8180fc2fadd48dde4966f2db2c716c2ce7510d0b" + }, + "CVE-2023-3610": { + "cmt_msg": "netfilter: nf_tables: fix chain binding transaction logic", + "cmt_id": "d53c295c1f43b7460d28ba0f0f98a602084fdcb6" + }, + "CVE-2023-3611": { + "cmt_msg": "net/sched: sch_qfq: account for stab overhead in qfq_enqueue", + "cmt_id": "8359ee85fd6dabc5c134ed69fb22faadd8a44071" + }, + "CVE-2023-3117": { + "cmt_msg": "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE", + "cmt_id": "8180fc2fadd48dde4966f2db2c716c2ce7510d0b" + }, + "CVE-2023-3776": { + "cmt_msg": "net/sched: cls_fw: Fix improper refcount update leads to use-after-free", + "cmt_id": "80e0e8d5f54397c5048fa2274144134dd9dc91b5" + }, + "CVE-2023-35001": { + "cmt_msg": "netfilter: nf_tables: prevent OOB access in nft_byteorder_eval", + "cmt_id": "ea213922249c7e448d217a0a0441c6f86a8155fd" + }, + "CVE-2023-3863": { + "cmt_msg": "net: nfc: Fix use-after-free caused by nfc_llcp_find_local", + "cmt_id": "96f2c6f272ec04083d828de46285a7d7b17d1aad" + } + }, "outstanding": { "CVE-2023-0160": { "cmt_msg": "" @@ -113181,9 +113159,6 @@ "CVE-2018-1121": { "cmt_msg": "" }, - "CVE-2023-38427": { - "cmt_msg": "ksmbd: fix out-of-bound read in deassemble_neg_contexts()" - }, "CVE-2019-19378": { "cmt_msg": "" }, @@ -113214,18 +113189,9 @@ "CVE-2020-24502": { "cmt_msg": "" }, - "CVE-2023-38428": { - "cmt_msg": "ksmbd: fix wrong UserName check in session_user" - }, "CVE-2020-24504": { "cmt_msg": "ice: create scheduler aggregator node config and move VSIs" }, - "CVE-2023-38431": { - "cmt_msg": "ksmbd: check the validation of pdu_size in ksmbd_conn_handler_loop" - }, - "CVE-2023-38430": { - "cmt_msg": "ksmbd: validate smb request protocol id" - }, "CVE-2020-11725": { "cmt_msg": "" }, @@ -113250,15 +113216,15 @@ "CVE-2021-3864": { "cmt_msg": "" }, + "CVE-2022-3606": { + "cmt_msg": "" + }, "CVE-2019-19814": { "cmt_msg": "" }, "CVE-2022-2209": { "cmt_msg": "" }, - "CVE-2023-3390": { - "cmt_msg": "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE" - }, "CVE-2022-3595": { "cmt_msg": "cifs: fix double-fault crash during ntlmssp" }, @@ -113289,9 +113255,6 @@ "CVE-2008-2544": { "cmt_msg": "" }, - "CVE-2023-2898": { - "cmt_msg": "f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()" - }, "CVE-2022-3636": { "cmt_msg": "net: ethernet: mtk_eth_soc: use after free in __mtk_ppe_check_skb()" }, @@ -113313,9 +113276,6 @@ "CVE-2022-45919": { "cmt_msg": "" }, - "CVE-2023-32258": { - "cmt_msg": "ksmbd: fix racy issue from smb2 close and logoff with multichannel" - }, "CVE-2023-2007": { "cmt_msg": "scsi: dpt_i2o: Remove obsolete driver" }, @@ -113337,8 +113297,14 @@ "CVE-2023-1075": { "cmt_msg": "net/tls: tls_is_tx_ready() checked list_entry" }, - "CVE-2023-32254": { - "cmt_msg": "ksmbd: fix racy issue under cocurrent smb2 tree disconnect" + "CVE-2023-3773": { + "cmt_msg": "" + }, + "CVE-2023-3772": { + "cmt_msg": "" + }, + "CVE-2022-3533": { + "cmt_msg": "" }, "CVE-2022-1247": { "cmt_msg": "" @@ -113346,9 +113312,6 @@ "CVE-2022-2991": { "cmt_msg": "remove the lightnvm subsystem" }, - "CVE-2023-38426": { - "cmt_msg": "ksmbd: fix global-out-of-bounds in smb2_find_context_vals" - }, "CVE-2022-3624": { "cmt_msg": "bonding: fix reference count leak in balance-alb mode" }, @@ -113382,9 +113345,6 @@ "CVE-2023-23586": { "cmt_msg": "io_uring: remove io_identity" }, - "CVE-2023-35693": { - "cmt_msg": "" - }, "CVE-2023-2176": { "cmt_msg": "RDMA/core: Refactor rdma_bind_addr" }, @@ -113394,9 +113354,6 @@ "CVE-2022-39188": { "cmt_msg": "mmu_gather: Force tlb-flush VM_PFNMAP vmas" }, - "CVE-2023-31248": { - "cmt_msg": "netfilter: nf_tables: do not ignore genmask when looking up chain by id" - }, "CVE-2005-3660": { "cmt_msg": "" }, @@ -113529,24 +113486,12 @@ "CVE-2023-35827": { "cmt_msg": "" }, - "CVE-2023-38432": { - "cmt_msg": "ksmbd: validate command payload size" - }, "CVE-2021-39801": { "cmt_msg": "" }, "CVE-2021-39800": { "cmt_msg": "" }, - "CVE-2023-32247": { - "cmt_msg": "ksmbd: destroy expired sessions" - }, - "CVE-2023-32248": { - "cmt_msg": "ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()" - }, - "CVE-2023-38429": { - "cmt_msg": "ksmbd: allocate one more byte for implied bcc[0]" - }, "CVE-2022-45885": { "cmt_msg": "" }, @@ -113589,21 +113534,12 @@ "CVE-2015-2877": { "cmt_msg": "" }, - "CVE-2023-32257": { - "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" - }, "CVE-2023-26242": { "cmt_msg": "" }, - "CVE-2023-32252": { - "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" - }, "CVE-2019-16089": { "cmt_msg": "" }, - "CVE-2023-32250": { - "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" - }, "CVE-2022-0400": { "cmt_msg": "" }, @@ -113637,12 +113573,6 @@ "CVE-2023-23039": { "cmt_msg": "" }, - "CVE-2022-48502": { - "cmt_msg": "fs/ntfs3: Check fields while reading" - }, - "CVE-2023-35001": { - "cmt_msg": "netfilter: nf_tables: prevent OOB access in nft_byteorder_eval" - }, "CVE-2023-3640": { "cmt_msg": "" } @@ -114102,9 +114032,6 @@ "CVE-2023-2008": { "cmt_msg": "udmabuf: add back sanity check" }, - "CVE-2023-38431": { - "cmt_msg": "ksmbd: check the validation of pdu_size in ksmbd_conn_handler_loop" - }, "CVE-2023-2002": { "cmt_msg": "bluetooth: Perform careful capability checks in hci_sock_ioctl()" }, @@ -114255,6 +114182,9 @@ "CVE-2021-3564": { "cmt_msg": "Bluetooth: fix the erroneous flush_work() order" }, + "CVE-2023-3611": { + "cmt_msg": "net/sched: sch_qfq: account for stab overhead in qfq_enqueue" + }, "CVE-2020-26560": { "cmt_msg": "" }, @@ -114321,9 +114251,6 @@ "CVE-2023-35827": { "cmt_msg": "" }, - "CVE-2023-38432": { - "cmt_msg": "ksmbd: validate command payload size" - }, "CVE-2022-3567": { "cmt_msg": "ipv6: Fix data races around sk->sk_prot." }, @@ -114534,6 +114461,9 @@ "CVE-2007-3719": { "cmt_msg": "" }, + "CVE-2023-3863": { + "cmt_msg": "net: nfc: Fix use-after-free caused by nfc_llcp_find_local" + }, "CVE-2023-0590": { "cmt_msg": "net: sched: fix race condition in qdisc_graft()" }, @@ -114543,9 +114473,6 @@ "CVE-2022-45919": { "cmt_msg": "" }, - "CVE-2023-32258": { - "cmt_msg": "ksmbd: fix racy issue from smb2 close and logoff with multichannel" - }, "CVE-2023-2248": { "cmt_msg": "net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg" }, @@ -114705,6 +114632,9 @@ "CVE-2022-20008": { "cmt_msg": "mmc: block: fix read single on recovery logic" }, + "CVE-2023-3117": { + "cmt_msg": "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE" + }, "CVE-2023-32269": { "cmt_msg": "netrom: Fix use-after-free caused by accept on already connected socket" }, @@ -114741,9 +114671,6 @@ "CVE-2023-1990": { "cmt_msg": "nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition" }, - "CVE-2023-32248": { - "cmt_msg": "ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()" - }, "CVE-2021-33098": { "cmt_msg": "ixgbe: fix large MTU request from VF" }, @@ -114783,15 +114710,15 @@ "CVE-2022-44032": { "cmt_msg": "" }, + "CVE-2022-47518": { + "cmt_msg": "wifi: wilc1000: validate number of channels" + }, "CVE-2020-26139": { "cmt_msg": "mac80211: do not accept/forward invalid EAPOL frames" }, "CVE-2021-3609": { "cmt_msg": "can: bcm: delay release of struct bcm_op after synchronize_rcu()" }, - "CVE-2022-48502": { - "cmt_msg": "fs/ntfs3: Check fields while reading" - }, "CVE-2022-0847": { "cmt_msg": "lib/iov_iter: initialize \"flags\" in new pipe_buffer" }, @@ -114804,15 +114731,9 @@ "CVE-2023-28410": { "cmt_msg": "drm/i915/gem: add missing boundary check in vm_access" }, - "CVE-2023-38426": { - "cmt_msg": "ksmbd: fix global-out-of-bounds in smb2_find_context_vals" - }, "CVE-2023-0615": { "cmt_msg": "media: vivid: dev->bitmap_cap wasn't freed in all cases" }, - "CVE-2023-38427": { - "cmt_msg": "ksmbd: fix out-of-bound read in deassemble_neg_contexts()" - }, "CVE-2023-3006": { "cmt_msg": "arm64: Add AMPERE1 to the Spectre-BHB affected list" }, @@ -114840,15 +114761,12 @@ "CVE-2020-26541": { "cmt_msg": "certs: Add EFI_CERT_X509_GUID support for dbx entries" }, - "CVE-2023-38430": { - "cmt_msg": "ksmbd: validate smb request protocol id" - }, - "CVE-2023-38428": { - "cmt_msg": "ksmbd: fix wrong UserName check in session_user" - }, "CVE-2023-3390": { "cmt_msg": "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE" }, + "CVE-2023-3812": { + "cmt_msg": "net: tun: fix bugs for oversize packet when napi frags enabled" + }, "CVE-2020-26143": { "cmt_msg": "" }, @@ -114867,9 +114785,6 @@ "CVE-2023-1670": { "cmt_msg": "xirc2ps_cs: Fix use after free bug in xirc2ps_detach" }, - "CVE-2023-38429": { - "cmt_msg": "ksmbd: allocate one more byte for implied bcc[0]" - }, "CVE-2022-2873": { "cmt_msg": "i2c: ismt: prevent memory corruption in ismt_access()" }, @@ -114891,6 +114806,9 @@ "CVE-2023-2156": { "cmt_msg": "net: rpl: fix rpl header size calculation" }, + "CVE-2023-3772": { + "cmt_msg": "" + }, "CVE-2023-1582": { "cmt_msg": "fs/proc: task_mmu.c: don't read mapcount for migration entry" }, @@ -114930,12 +114848,18 @@ "CVE-2022-1966": { "cmt_msg": "netfilter: nf_tables: disallow non-stateful expression in sets earlier" }, + "CVE-2023-3773": { + "cmt_msg": "" + }, "CVE-2021-3587": { "cmt_msg": "nfc: fix NULL ptr dereference in llcp_sock_getname() after failed connect" }, "CVE-2021-44733": { "cmt_msg": "tee: handle lookup of shm with reference count 0" }, + "CVE-2022-3533": { + "cmt_msg": "" + }, "CVE-2022-3534": { "cmt_msg": "libbpf: Fix use-after-free in btf_dump_name_dups" }, @@ -115116,9 +115040,6 @@ "CVE-2022-42896": { "cmt_msg": "Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM" }, - "CVE-2023-32247": { - "cmt_msg": "ksmbd: destroy expired sessions" - }, "CVE-2022-3169": { "cmt_msg": "nvme: ensure subsystem reset is single threaded" }, @@ -115164,21 +115085,9 @@ "CVE-2022-45884": { "cmt_msg": "" }, - "CVE-2023-32257": { - "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" - }, - "CVE-2023-32254": { - "cmt_msg": "ksmbd: fix racy issue under cocurrent smb2 tree disconnect" - }, - "CVE-2023-32252": { - "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" - }, "CVE-2020-10708": { "cmt_msg": "" }, - "CVE-2023-32250": { - "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" - }, "CVE-2022-0400": { "cmt_msg": "" }, @@ -115203,8 +115112,8 @@ "CVE-2022-47519": { "cmt_msg": "wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute" }, - "CVE-2022-47518": { - "cmt_msg": "wifi: wilc1000: validate number of channels" + "CVE-2022-3606": { + "cmt_msg": "" }, "CVE-2022-39188": { "cmt_msg": "mmu_gather: Force tlb-flush VM_PFNMAP vmas" @@ -115212,6 +115121,9 @@ "CVE-2023-3640": { "cmt_msg": "" }, + "CVE-2023-20593": { + "cmt_msg": "x86/cpu/amd: Add a Zenbleed fix" + }, "CVE-2023-0160": { "cmt_msg": "" }, @@ -115314,12 +115226,18 @@ "CVE-2022-3595": { "cmt_msg": "cifs: fix double-fault crash during ntlmssp" }, + "CVE-2023-3610": { + "cmt_msg": "netfilter: nf_tables: fix chain binding transaction logic" + }, "CVE-2022-1462": { "cmt_msg": "tty: use new tty_insert_flip_string_and_push_buffer() in pty_write()" }, "CVE-2022-1729": { "cmt_msg": "perf: Fix sys_perf_event_open() race against self" }, + "CVE-2023-3776": { + "cmt_msg": "net/sched: cls_fw: Fix improper refcount update leads to use-after-free" + }, "CVE-2022-2964": { "cmt_msg": "net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup" }, @@ -115335,9 +115253,6 @@ "CVE-2010-4563": { "cmt_msg": "" }, - "CVE-2023-35693": { - "cmt_msg": "" - }, "CVE-2023-1249": { "cmt_msg": "coredump: Use the vma snapshot in fill_files_note" }, @@ -115380,6 +115295,9 @@ "CVE-2021-46283": { "cmt_msg": "netfilter: nf_tables: initialize set before expression setup" }, + "CVE-2023-3609": { + "cmt_msg": "net/sched: cls_u32: Fix reference counter leak leading to overflow" + }, "CVE-2022-1974": { "cmt_msg": "nfc: replace improper check device_is_registered() in netlink related functions" }, @@ -116251,6 +116169,12 @@ "CVE-2022-33981": { "cmt_msg": "floppy: disable FDRAWCMD by default" }, + "CVE-2023-3610": { + "cmt_msg": "netfilter: nf_tables: fix chain binding transaction logic" + }, + "CVE-2023-3611": { + "cmt_msg": "net/sched: sch_qfq: account for stab overhead in qfq_enqueue" + }, "CVE-2022-1943": { "cmt_msg": "udf: Avoid using stale lengthOfImpUse" }, @@ -116434,6 +116358,9 @@ "CVE-2007-3719": { "cmt_msg": "" }, + "CVE-2023-3863": { + "cmt_msg": "net: nfc: Fix use-after-free caused by nfc_llcp_find_local" + }, "CVE-2023-0590": { "cmt_msg": "net: sched: fix race condition in qdisc_graft()" }, @@ -116719,6 +116646,15 @@ "CVE-2022-1966": { "cmt_msg": "netfilter: nf_tables: disallow non-stateful expression in sets earlier" }, + "CVE-2023-3773": { + "cmt_msg": "" + }, + "CVE-2023-3772": { + "cmt_msg": "" + }, + "CVE-2022-3533": { + "cmt_msg": "" + }, "CVE-2022-3534": { "cmt_msg": "libbpf: Fix use-after-free in btf_dump_name_dups" }, @@ -116860,6 +116796,9 @@ "CVE-2023-34255": { "cmt_msg": "xfs: verify buffer contents when we skip log replay" }, + "CVE-2023-3812": { + "cmt_msg": "net: tun: fix bugs for oversize packet when napi frags enabled" + }, "CVE-2023-34256": { "cmt_msg": "ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum" }, @@ -116911,6 +116850,9 @@ "CVE-2023-3640": { "cmt_msg": "" }, + "CVE-2023-20593": { + "cmt_msg": "x86/cpu/amd: Add a Zenbleed fix" + }, "CVE-2023-0160": { "cmt_msg": "" }, @@ -116965,6 +116907,9 @@ "CVE-2022-47929": { "cmt_msg": "net: sched: disallow noqueue for qdisc classes" }, + "CVE-2022-3606": { + "cmt_msg": "" + }, "CVE-2022-2209": { "cmt_msg": "" }, @@ -116995,6 +116940,9 @@ "CVE-2023-21255": { "cmt_msg": "binder: fix UAF caused by faulty buffer cleanup" }, + "CVE-2023-3776": { + "cmt_msg": "net/sched: cls_fw: Fix improper refcount update leads to use-after-free" + }, "CVE-2022-2961": { "cmt_msg": "" }, @@ -117007,9 +116955,6 @@ "CVE-2010-4563": { "cmt_msg": "" }, - "CVE-2023-35693": { - "cmt_msg": "" - }, "CVE-2023-2163": { "cmt_msg": "bpf: Fix incorrect verifier pruning due to missing register precision taints" }, @@ -117037,6 +116982,9 @@ "CVE-2022-4378": { "cmt_msg": "proc: proc_skip_spaces() shouldn't think it is working on C strings" }, + "CVE-2023-3609": { + "cmt_msg": "net/sched: cls_u32: Fix reference counter leak leading to overflow" + }, "CVE-2022-1974": { "cmt_msg": "nfc: replace improper check device_is_registered() in netlink related functions" }, @@ -117079,6 +117027,9 @@ "CVE-2021-3714": { "cmt_msg": "" }, + "CVE-2023-3117": { + "cmt_msg": "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE" + }, "CVE-2023-3111": { "cmt_msg": "btrfs: unset reloc control if transaction commit fails in prepare_to_relocate()" }, @@ -117729,6 +117680,12 @@ "CVE-2020-14304": { "cmt_msg": "" }, + "CVE-2023-3610": { + "cmt_msg": "netfilter: nf_tables: fix chain binding transaction logic" + }, + "CVE-2023-3611": { + "cmt_msg": "net/sched: sch_qfq: account for stab overhead in qfq_enqueue" + }, "CVE-2020-26560": { "cmt_msg": "" }, @@ -117885,6 +117842,9 @@ "CVE-2007-3719": { "cmt_msg": "" }, + "CVE-2023-3863": { + "cmt_msg": "net: nfc: Fix use-after-free caused by nfc_llcp_find_local" + }, "CVE-2023-0590": { "cmt_msg": "net: sched: fix race condition in qdisc_graft()" }, @@ -118152,6 +118112,18 @@ "CVE-2023-20941": { "cmt_msg": "" }, + "CVE-2023-3776": { + "cmt_msg": "net/sched: cls_fw: Fix improper refcount update leads to use-after-free" + }, + "CVE-2023-3773": { + "cmt_msg": "" + }, + "CVE-2023-3772": { + "cmt_msg": "" + }, + "CVE-2022-3533": { + "cmt_msg": "" + }, "CVE-2022-3534": { "cmt_msg": "libbpf: Fix use-after-free in btf_dump_name_dups" }, @@ -118287,6 +118259,9 @@ "CVE-2023-34255": { "cmt_msg": "xfs: verify buffer contents when we skip log replay" }, + "CVE-2023-3812": { + "cmt_msg": "net: tun: fix bugs for oversize packet when napi frags enabled" + }, "CVE-2023-34256": { "cmt_msg": "ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum" }, @@ -118335,6 +118310,9 @@ "CVE-2023-3640": { "cmt_msg": "" }, + "CVE-2023-20593": { + "cmt_msg": "x86/cpu/amd: Add a Zenbleed fix" + }, "CVE-2023-0160": { "cmt_msg": "" }, @@ -118389,6 +118367,9 @@ "CVE-2022-47929": { "cmt_msg": "net: sched: disallow noqueue for qdisc classes" }, + "CVE-2022-3606": { + "cmt_msg": "" + }, "CVE-2022-2209": { "cmt_msg": "" }, @@ -118425,9 +118406,6 @@ "CVE-2010-4563": { "cmt_msg": "" }, - "CVE-2023-35693": { - "cmt_msg": "" - }, "CVE-2023-2163": { "cmt_msg": "bpf: Fix incorrect verifier pruning due to missing register precision taints" }, @@ -118452,6 +118430,9 @@ "CVE-2022-4378": { "cmt_msg": "proc: proc_skip_spaces() shouldn't think it is working on C strings" }, + "CVE-2023-3609": { + "cmt_msg": "net/sched: cls_u32: Fix reference counter leak leading to overflow" + }, "CVE-2022-3424": { "cmt_msg": "misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os" }, @@ -118479,6 +118460,9 @@ "CVE-2023-0468": { "cmt_msg": "io_uring: make poll refs more robust" }, + "CVE-2023-3117": { + "cmt_msg": "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE" + }, "CVE-2023-3111": { "cmt_msg": "btrfs: unset reloc control if transaction commit fails in prepare_to_relocate()" }, @@ -119063,6 +119047,12 @@ "CVE-2022-33981": { "cmt_msg": "floppy: disable FDRAWCMD by default" }, + "CVE-2023-3610": { + "cmt_msg": "netfilter: nf_tables: fix chain binding transaction logic" + }, + "CVE-2023-3611": { + "cmt_msg": "net/sched: sch_qfq: account for stab overhead in qfq_enqueue" + }, "CVE-2020-26560": { "cmt_msg": "" }, @@ -119126,9 +119116,6 @@ "CVE-2023-35827": { "cmt_msg": "" }, - "CVE-2023-38432": { - "cmt_msg": "ksmbd: validate command payload size" - }, "CVE-2022-3567": { "cmt_msg": "ipv6: Fix data races around sk->sk_prot." }, @@ -119312,6 +119299,9 @@ "CVE-2007-3719": { "cmt_msg": "" }, + "CVE-2023-3863": { + "cmt_msg": "net: nfc: Fix use-after-free caused by nfc_llcp_find_local" + }, "CVE-2023-0590": { "cmt_msg": "net: sched: fix race condition in qdisc_graft()" }, @@ -119495,9 +119485,6 @@ "CVE-2023-1990": { "cmt_msg": "nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition" }, - "CVE-2023-32248": { - "cmt_msg": "ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()" - }, "CVE-2022-0185": { "cmt_msg": "vfs: fs_context: fix up param length parsing in legacy_parse_param" }, @@ -119525,9 +119512,6 @@ "CVE-2022-44032": { "cmt_msg": "" }, - "CVE-2022-48502": { - "cmt_msg": "fs/ntfs3: Check fields while reading" - }, "CVE-2022-0847": { "cmt_msg": "lib/iov_iter: initialize \"flags\" in new pipe_buffer" }, @@ -119540,15 +119524,9 @@ "CVE-2022-3619": { "cmt_msg": "Bluetooth: L2CAP: Fix memory leak in vhci_write" }, - "CVE-2023-38426": { - "cmt_msg": "ksmbd: fix global-out-of-bounds in smb2_find_context_vals" - }, "CVE-2023-0615": { "cmt_msg": "media: vivid: dev->bitmap_cap wasn't freed in all cases" }, - "CVE-2023-38427": { - "cmt_msg": "ksmbd: fix out-of-bound read in deassemble_neg_contexts()" - }, "CVE-2023-3006": { "cmt_msg": "arm64: Add AMPERE1 to the Spectre-BHB affected list" }, @@ -119564,21 +119542,15 @@ "CVE-2023-1872": { "cmt_msg": "io_uring: propagate issue_flags state down to file assignment" }, - "CVE-2023-38428": { - "cmt_msg": "ksmbd: fix wrong UserName check in session_user" - }, "CVE-2023-1079": { "cmt_msg": "HID: asus: use spinlock to safely schedule workers" }, - "CVE-2023-38431": { - "cmt_msg": "ksmbd: check the validation of pdu_size in ksmbd_conn_handler_loop" - }, - "CVE-2023-38430": { - "cmt_msg": "ksmbd: validate smb request protocol id" - }, "CVE-2023-3390": { "cmt_msg": "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE" }, + "CVE-2023-3812": { + "cmt_msg": "net: tun: fix bugs for oversize packet when napi frags enabled" + }, "CVE-2021-33061": { "cmt_msg": "ixgbe: add improvement for MDD response functionality" }, @@ -119597,9 +119569,6 @@ "CVE-2023-1670": { "cmt_msg": "xirc2ps_cs: Fix use after free bug in xirc2ps_detach" }, - "CVE-2023-38429": { - "cmt_msg": "ksmbd: allocate one more byte for implied bcc[0]" - }, "CVE-2022-2873": { "cmt_msg": "i2c: ismt: prevent memory corruption in ismt_access()" }, @@ -119654,9 +119623,18 @@ "CVE-2022-1966": { "cmt_msg": "netfilter: nf_tables: disallow non-stateful expression in sets earlier" }, + "CVE-2023-3773": { + "cmt_msg": "" + }, + "CVE-2023-3772": { + "cmt_msg": "" + }, "CVE-2021-44733": { "cmt_msg": "tee: handle lookup of shm with reference count 0" }, + "CVE-2022-3533": { + "cmt_msg": "" + }, "CVE-2022-3534": { "cmt_msg": "libbpf: Fix use-after-free in btf_dump_name_dups" }, @@ -119786,9 +119764,6 @@ "CVE-2010-5321": { "cmt_msg": "" }, - "CVE-2023-32247": { - "cmt_msg": "ksmbd: destroy expired sessions" - }, "CVE-2022-0264": { "cmt_msg": "bpf: Fix kernel address leakage in atomic fetch" }, @@ -119834,24 +119809,9 @@ "CVE-2021-4202": { "cmt_msg": "NFC: reorganize the functions in nci_request" }, - "CVE-2023-32258": { - "cmt_msg": "ksmbd: fix racy issue from smb2 close and logoff with multichannel" - }, - "CVE-2023-32257": { - "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" - }, - "CVE-2023-32254": { - "cmt_msg": "ksmbd: fix racy issue under cocurrent smb2 tree disconnect" - }, - "CVE-2023-32252": { - "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" - }, "CVE-2020-10708": { "cmt_msg": "" }, - "CVE-2023-32250": { - "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" - }, "CVE-2022-0400": { "cmt_msg": "" }, @@ -119879,6 +119839,9 @@ "CVE-2023-3640": { "cmt_msg": "" }, + "CVE-2023-20593": { + "cmt_msg": "x86/cpu/amd: Add a Zenbleed fix" + }, "CVE-2023-0160": { "cmt_msg": "" }, @@ -119948,6 +119911,9 @@ "CVE-2022-47929": { "cmt_msg": "net: sched: disallow noqueue for qdisc classes" }, + "CVE-2022-3606": { + "cmt_msg": "" + }, "CVE-2022-1998": { "cmt_msg": "fanotify: Fix stale file descriptor in copy_event_to_user()" }, @@ -119969,6 +119935,9 @@ "CVE-2022-1729": { "cmt_msg": "perf: Fix sys_perf_event_open() race against self" }, + "CVE-2023-3776": { + "cmt_msg": "net/sched: cls_fw: Fix improper refcount update leads to use-after-free" + }, "CVE-2022-2964": { "cmt_msg": "net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup" }, @@ -119984,9 +119953,6 @@ "CVE-2010-4563": { "cmt_msg": "" }, - "CVE-2023-35693": { - "cmt_msg": "" - }, "CVE-2023-1249": { "cmt_msg": "coredump: Use the vma snapshot in fill_files_note" }, @@ -120023,6 +119989,9 @@ "CVE-2022-4378": { "cmt_msg": "proc: proc_skip_spaces() shouldn't think it is working on C strings" }, + "CVE-2023-3609": { + "cmt_msg": "net/sched: cls_u32: Fix reference counter leak leading to overflow" + }, "CVE-2022-1974": { "cmt_msg": "nfc: replace improper check device_is_registered() in netlink related functions" }, @@ -120077,6 +120046,9 @@ "CVE-2021-3714": { "cmt_msg": "" }, + "CVE-2023-3117": { + "cmt_msg": "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE" + }, "CVE-2021-3892": { "cmt_msg": "" }, @@ -121424,6 +121396,10 @@ "cmt_msg": "wifi: brcmfmac: Fix potential buffer overflow in brcmf_fweh_event_worker()", "cmt_id": "7038af4ce95105146d22e461eaa450829f28eeaf" }, + "CVE-2023-3812": { + "cmt_msg": "net: tun: fix bugs for oversize packet when napi frags enabled", + "cmt_id": "dcc79cf735b8ec4bedaa82c53bed8c62721c042b" + }, "CVE-2022-3623": { "cmt_msg": "mm/hugetlb: fix races when looking up a CONT-PTE/PMD size hugetlb page", "cmt_id": "3a44ae4afaa5318baed3c6e2959f24454e0ae4ff" @@ -121952,6 +121928,14 @@ } }, "5.15.118": { + "CVE-2023-3609": { + "cmt_msg": "net/sched: cls_u32: Fix reference counter leak leading to overflow", + "cmt_id": "0e1098d72fa462944c68262e1b5cca045dcb555e" + }, + "CVE-2023-3117": { + "cmt_msg": "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE", + "cmt_id": "44ebe988cb38e720b91826f4d7c31692061ca04a" + }, "CVE-2023-3390": { "cmt_msg": "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE", "cmt_id": "44ebe988cb38e720b91826f4d7c31692061ca04a" @@ -121961,6 +121945,52 @@ "cmt_id": "2a974abc09761c05fef697fe229d1b85a7ce3918" } }, + "5.15.119": { + "CVE-2023-3610": { + "cmt_msg": "netfilter: nf_tables: fix chain binding transaction logic", + "cmt_id": "314a8697d08092df6d00521450d44c352c602943" + } + }, + "5.15.121": { + "CVE-2023-31248": { + "cmt_msg": "netfilter: nf_tables: do not ignore genmask when looking up chain by id", + "cmt_id": "041e2ac88caef286b39064e83e825e3f53113d36" + }, + "CVE-2023-38432": { + "cmt_msg": "ksmbd: validate command payload size", + "cmt_id": "35f450f54dca1519bb24faacd0428db09f89a11f" + }, + "CVE-2023-2898": { + "cmt_msg": "f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()", + "cmt_id": "982c29e0d27a48d65fd0fa0d1bcee501eeb06e76" + }, + "CVE-2023-3611": { + "cmt_msg": "net/sched: sch_qfq: account for stab overhead in qfq_enqueue", + "cmt_id": "91d3554ab1fc2804c36a815c0f79502d727a41e6" + }, + "CVE-2022-48502": { + "cmt_msg": "fs/ntfs3: Check fields while reading", + "cmt_id": "333feb7ba84f69f9b423422417aaac54fd9e7c84" + }, + "CVE-2023-35001": { + "cmt_msg": "netfilter: nf_tables: prevent OOB access in nft_byteorder_eval", + "cmt_id": "870dcc31c0cf47cb15a568ade4168dc644b3ccfb" + }, + "CVE-2023-3776": { + "cmt_msg": "net/sched: cls_fw: Fix improper refcount update leads to use-after-free", + "cmt_id": "5b55f2d6ef403fcda93ae4eb4d8c1ba164c66e92" + }, + "CVE-2023-3863": { + "cmt_msg": "net: nfc: Fix use-after-free caused by nfc_llcp_find_local", + "cmt_id": "fc8429f8d86801f092fbfbd257c3af821ac0dcd3" + } + }, + "5.15.122": { + "CVE-2023-20593": { + "cmt_msg": "x86/cpu/amd: Add a Zenbleed fix", + "cmt_id": "be824fdb827dc06f77a31122949fe1bc011e3e1e" + } + }, "outstanding": { "CVE-2023-0160": { "cmt_msg": "" @@ -122010,9 +122040,6 @@ "CVE-2020-24502": { "cmt_msg": "" }, - "CVE-2023-35693": { - "cmt_msg": "" - }, "CVE-2023-38431": { "cmt_msg": "ksmbd: check the validation of pdu_size in ksmbd_conn_handler_loop" }, @@ -122022,9 +122049,6 @@ "CVE-2020-11725": { "cmt_msg": "" }, - "CVE-2023-38432": { - "cmt_msg": "ksmbd: validate command payload size" - }, "CVE-2022-23825": { "cmt_msg": "" }, @@ -122040,6 +122064,9 @@ "CVE-2021-3864": { "cmt_msg": "" }, + "CVE-2022-3606": { + "cmt_msg": "" + }, "CVE-2019-19814": { "cmt_msg": "" }, @@ -122055,6 +122082,9 @@ "CVE-2022-3114": { "cmt_msg": "clk: imx: Add check for kcalloc" }, + "CVE-2023-37454": { + "cmt_msg": "" + }, "CVE-2016-8660": { "cmt_msg": "" }, @@ -122070,9 +122100,6 @@ "CVE-2008-2544": { "cmt_msg": "" }, - "CVE-2023-2898": { - "cmt_msg": "f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()" - }, "CVE-2022-3636": { "cmt_msg": "net: ethernet: mtk_eth_soc: use after free in __mtk_ppe_check_skb()" }, @@ -122112,7 +122139,13 @@ "CVE-2023-1075": { "cmt_msg": "net/tls: tls_is_tx_ready() checked list_entry" }, - "CVE-2023-26242": { + "CVE-2023-3773": { + "cmt_msg": "" + }, + "CVE-2023-3772": { + "cmt_msg": "" + }, + "CVE-2022-3533": { "cmt_msg": "" }, "CVE-2022-1247": { @@ -122127,7 +122160,7 @@ "CVE-2020-10708": { "cmt_msg": "" }, - "CVE-2022-4543": { + "CVE-2022-3238": { "cmt_msg": "" }, "CVE-2017-13693": { @@ -122151,9 +122184,6 @@ "CVE-2022-39188": { "cmt_msg": "mmu_gather: Force tlb-flush VM_PFNMAP vmas" }, - "CVE-2023-31248": { - "cmt_msg": "netfilter: nf_tables: do not ignore genmask when looking up chain by id" - }, "CVE-2005-3660": { "cmt_msg": "" }, @@ -122181,7 +122211,7 @@ "CVE-2022-36402": { "cmt_msg": "" }, - "CVE-2022-3238": { + "CVE-2022-4543": { "cmt_msg": "" }, "CVE-2008-4609": { @@ -122211,7 +122241,7 @@ "CVE-2023-1206": { "cmt_msg": "" }, - "CVE-2023-37454": { + "CVE-2023-26242": { "cmt_msg": "" }, "CVE-2022-3642": { @@ -122358,12 +122388,6 @@ "CVE-2023-23039": { "cmt_msg": "" }, - "CVE-2022-48502": { - "cmt_msg": "fs/ntfs3: Check fields while reading" - }, - "CVE-2023-35001": { - "cmt_msg": "netfilter: nf_tables: prevent OOB access in nft_byteorder_eval" - }, "CVE-2023-3640": { "cmt_msg": "" } @@ -122530,9 +122554,6 @@ "CVE-2019-15090": { "cmt_msg": "scsi: qedi: remove memset/memcpy to nfunc and use func instead" }, - "CVE-2023-32258": { - "cmt_msg": "ksmbd: fix racy issue from smb2 close and logoff with multichannel" - }, "CVE-2022-3649": { "cmt_msg": "nilfs2: fix use-after-free bug of struct nilfs_root" }, @@ -122731,9 +122752,6 @@ "CVE-2019-11477": { "cmt_msg": "tcp: limit payload size of sacked skbs" }, - "CVE-2023-38431": { - "cmt_msg": "ksmbd: check the validation of pdu_size in ksmbd_conn_handler_loop" - }, "CVE-2019-11479": { "cmt_msg": "tcp: add tcp_min_snd_mss sysctl" }, @@ -122782,9 +122800,6 @@ "CVE-2019-17054": { "cmt_msg": "appletalk: enforce CAP_NET_RAW for raw sockets" }, - "CVE-2023-38430": { - "cmt_msg": "ksmbd: validate smb request protocol id" - }, "CVE-2023-3006": { "cmt_msg": "arm64: Add AMPERE1 to the Spectre-BHB affected list" }, @@ -123112,9 +123127,6 @@ "CVE-2022-2961": { "cmt_msg": "" }, - "CVE-2023-38432": { - "cmt_msg": "ksmbd: validate command payload size" - }, "CVE-2022-3567": { "cmt_msg": "ipv6: Fix data races around sk->sk_prot." }, @@ -123229,8 +123241,8 @@ "CVE-2020-0255": { "cmt_msg": "selinux: properly handle multiple messages in selinux_netlink_send()" }, - "CVE-2023-32252": { - "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" + "CVE-2023-35001": { + "cmt_msg": "netfilter: nf_tables: prevent OOB access in nft_byteorder_eval" }, "CVE-2022-27666": { "cmt_msg": "esp: Fix possible buffer overflow in ESP transformation" @@ -123265,6 +123277,9 @@ "CVE-2023-3397": { "cmt_msg": "" }, + "CVE-2023-3117": { + "cmt_msg": "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE" + }, "CVE-2022-26365": { "cmt_msg": "xen/blkfront: fix leaking data in shared pages" }, @@ -123469,6 +123484,9 @@ "CVE-2007-3719": { "cmt_msg": "" }, + "CVE-2023-3863": { + "cmt_msg": "net: nfc: Fix use-after-free caused by nfc_llcp_find_local" + }, "CVE-2023-0590": { "cmt_msg": "net: sched: fix race condition in qdisc_graft()" }, @@ -123754,18 +123772,12 @@ "CVE-2018-12931": { "cmt_msg": "" }, - "CVE-2023-38426": { - "cmt_msg": "ksmbd: fix global-out-of-bounds in smb2_find_context_vals" - }, "CVE-2020-12768": { "cmt_msg": "KVM: SVM: Fix potential memory leak in svm_cpu_init()" }, "CVE-2020-12769": { "cmt_msg": "spi: spi-dw: Add lock protect dw_spi rx/tx to prevent concurrent calls" }, - "CVE-2023-32248": { - "cmt_msg": "ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()" - }, "CVE-2021-32399": { "cmt_msg": "bluetooth: eliminate the potential race condition when removing the HCI controller" }, @@ -123847,9 +123859,6 @@ "CVE-2019-11191": { "cmt_msg": "x86: Deprecate a.out support" }, - "CVE-2023-35001": { - "cmt_msg": "netfilter: nf_tables: prevent OOB access in nft_byteorder_eval" - }, "CVE-2020-10781": { "cmt_msg": "Revert \"zram: convert remaining CLASS_ATTR() to CLASS_ATTR_RO()\"" }, @@ -123862,9 +123871,6 @@ "CVE-2021-3609": { "cmt_msg": "can: bcm: delay release of struct bcm_op after synchronize_rcu()" }, - "CVE-2022-48502": { - "cmt_msg": "fs/ntfs3: Check fields while reading" - }, "CVE-2019-19536": { "cmt_msg": "can: peak_usb: pcan_usb_pro: Fix info-leaks to USB devices" }, @@ -123913,9 +123919,6 @@ "CVE-2023-0615": { "cmt_msg": "media: vivid: dev->bitmap_cap wasn't freed in all cases" }, - "CVE-2023-38427": { - "cmt_msg": "ksmbd: fix out-of-bound read in deassemble_neg_contexts()" - }, "CVE-2019-14896": { "cmt_msg": "libertas: Fix two buffer overflows at parsing bss descriptor" }, @@ -123955,9 +123958,6 @@ "CVE-2019-20811": { "cmt_msg": "net-sysfs: call dev_hold if kobject_init_and_add success" }, - "CVE-2023-38428": { - "cmt_msg": "ksmbd: fix wrong UserName check in session_user" - }, "CVE-2023-0045": { "cmt_msg": "x86/bugs: Flush IBP in ib_prctl_set()" }, @@ -124123,12 +124123,18 @@ "CVE-2022-1966": { "cmt_msg": "netfilter: nf_tables: disallow non-stateful expression in sets earlier" }, + "CVE-2023-3773": { + "cmt_msg": "" + }, "CVE-2021-3587": { "cmt_msg": "nfc: fix NULL ptr dereference in llcp_sock_getname() after failed connect" }, "CVE-2021-44733": { "cmt_msg": "tee: handle lookup of shm with reference count 0" }, + "CVE-2022-3533": { + "cmt_msg": "" + }, "CVE-2022-3534": { "cmt_msg": "libbpf: Fix use-after-free in btf_dump_name_dups" }, @@ -124282,6 +124288,9 @@ "CVE-2021-33655": { "cmt_msg": "fbcon: Disallow setting font bigger than screen size" }, + "CVE-2023-3611": { + "cmt_msg": "net/sched: sch_qfq: account for stab overhead in qfq_enqueue" + }, "CVE-2022-41858": { "cmt_msg": "drivers: net: slip: fix NPD bug in sl_tx_timeout()" }, @@ -124339,9 +124348,6 @@ "CVE-2020-0543": { "cmt_msg": "x86/cpu: Add 'table' argument to cpu_matches()" }, - "CVE-2023-32250": { - "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" - }, "CVE-2023-3358": { "cmt_msg": "HID: intel_ish-hid: Add check for ishtp_dma_tx_map" }, @@ -124393,8 +124399,8 @@ "CVE-2022-26490": { "cmt_msg": "nfc: st21nfca: Fix potential buffer overflows in EVT_TRANSACTION" }, - "CVE-2023-32247": { - "cmt_msg": "ksmbd: destroy expired sessions" + "CVE-2023-3812": { + "cmt_msg": "net: tun: fix bugs for oversize packet when napi frags enabled" }, "CVE-2022-3169": { "cmt_msg": "nvme: ensure subsystem reset is single threaded" @@ -124465,15 +124471,9 @@ "CVE-2020-35519": { "cmt_msg": "net/x25: prevent a couple of overflows" }, - "CVE-2023-32257": { - "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" - }, "CVE-2023-31436": { "cmt_msg": "net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg" }, - "CVE-2023-32254": { - "cmt_msg": "ksmbd: fix racy issue under cocurrent smb2 tree disconnect" - }, "CVE-2021-28971": { "cmt_msg": "perf/x86/intel: Fix a crash caused by zero PEBS status" }, @@ -124528,9 +124528,15 @@ "CVE-2020-25284": { "cmt_msg": "rbd: require global CAP_SYS_ADMIN for mapping and unmapping" }, + "CVE-2022-3606": { + "cmt_msg": "" + }, "CVE-2023-3640": { "cmt_msg": "" }, + "CVE-2023-20593": { + "cmt_msg": "x86/cpu/amd: Add a Zenbleed fix" + }, "CVE-2023-0160": { "cmt_msg": "" }, @@ -124717,6 +124723,9 @@ "CVE-2019-20908": { "cmt_msg": "efi: Restrict efivar_ssdt_load when the kernel is locked down" }, + "CVE-2023-3776": { + "cmt_msg": "net/sched: cls_fw: Fix improper refcount update leads to use-after-free" + }, "CVE-2021-28038": { "cmt_msg": "Xen/gnttab: handle p2m update errors on a per-slot basis" }, @@ -124765,9 +124774,6 @@ "CVE-2010-4563": { "cmt_msg": "" }, - "CVE-2023-35693": { - "cmt_msg": "" - }, "CVE-2023-1249": { "cmt_msg": "coredump: Use the vma snapshot in fill_files_note" }, @@ -124840,6 +124846,9 @@ "CVE-2021-3573": { "cmt_msg": "Bluetooth: use correct lock to prevent UAF of hdev object" }, + "CVE-2023-3609": { + "cmt_msg": "net/sched: cls_u32: Fix reference counter leak leading to overflow" + }, "CVE-2022-1974": { "cmt_msg": "nfc: replace improper check device_is_registered() in netlink related functions" }, @@ -124870,6 +124879,9 @@ "CVE-2022-1280": { "cmt_msg": "drm: avoid circular locks in drm_mode_getconnector" }, + "CVE-2023-3772": { + "cmt_msg": "" + }, "CVE-2020-11668": { "cmt_msg": "media: xirlink_cit: add missing descriptor sanity checks" }, @@ -125086,9 +125098,6 @@ "CVE-2021-39800": { "cmt_msg": "" }, - "CVE-2023-38429": { - "cmt_msg": "ksmbd: allocate one more byte for implied bcc[0]" - }, "CVE-2022-1195": { "cmt_msg": "hamradio: improve the incomplete fix to avoid NPD" }, @@ -127518,14 +127527,18 @@ "cmt_msg": "tcp/udp: Fix memory leak in ipv6_renew_options().", "cmt_id": "92aaa5e8fe90a008828a1207e66a30444bcb1cbd" }, - "CVE-2021-3759": { - "cmt_msg": "memcg: enable accounting of ipc resources", - "cmt_id": "bad83d55134e647a739ebef2082541963f2cbc92" + "CVE-2023-3812": { + "cmt_msg": "net: tun: fix bugs for oversize packet when napi frags enabled", + "cmt_id": "ca791952d42c5b40d548ff6c4a879216039b0ca1" }, "CVE-2022-42895": { "cmt_msg": "Bluetooth: L2CAP: Fix attempting to access uninitialized memory", "cmt_id": "6949400ec9feca7f88c0f6ca5cb5fdbcef419c89" }, + "CVE-2021-3759": { + "cmt_msg": "memcg: enable accounting of ipc resources", + "cmt_id": "bad83d55134e647a739ebef2082541963f2cbc92" + }, "CVE-2022-3564": { "cmt_msg": "Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu", "cmt_id": "4cd094fd5d872862ca278e15b9b51b07e915ef3f" @@ -127876,6 +127889,10 @@ } }, "5.4.248": { + "CVE-2023-3609": { + "cmt_msg": "net/sched: cls_u32: Fix reference counter leak leading to overflow", + "cmt_id": "46305daf8064598a4008af1728651296815a74ed" + }, "CVE-2023-3338": { "cmt_msg": "Remove DECnet support from kernel", "cmt_id": "6b1203ae83c3d07bad90b6f38ebf2e4d5998dd28" @@ -127891,6 +127908,38 @@ "cmt_id": "c87439055174b31c51a89f8d66af2600033c664d" } }, + "5.4.250": { + "CVE-2023-20593": { + "cmt_msg": "x86/cpu/amd: Add a Zenbleed fix", + "cmt_id": "00363ef30797211c247605464dc3daaa988531a2" + } + }, + "5.4.251": { + "CVE-2023-3390": { + "cmt_msg": "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE", + "cmt_id": "1adb5c272b200c24e9a7dd3bff891ce6eb75b019" + }, + "CVE-2023-3212": { + "cmt_msg": "gfs2: Don't deref jdesc in evict", + "cmt_id": "23f98fe887ce3e7c8bd111f37e62735c5018c534" + }, + "CVE-2023-3117": { + "cmt_msg": "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE", + "cmt_id": "1adb5c272b200c24e9a7dd3bff891ce6eb75b019" + }, + "CVE-2023-3776": { + "cmt_msg": "net/sched: cls_fw: Fix improper refcount update leads to use-after-free", + "cmt_id": "808211a8d427404331e39e3b8c94ab5242eef8f5" + }, + "CVE-2023-35001": { + "cmt_msg": "netfilter: nf_tables: prevent OOB access in nft_byteorder_eval", + "cmt_id": "b7d636c924eb275651bfb036eb8eca49c3f7bc24" + }, + "CVE-2023-3863": { + "cmt_msg": "net: nfc: Fix use-after-free caused by nfc_llcp_find_local", + "cmt_id": "dd6ff3f3862709ab1a12566e73b9d6a9b8f6e548" + } + }, "outstanding": { "CVE-2023-0160": { "cmt_msg": "" @@ -127925,9 +127974,6 @@ "CVE-2018-1121": { "cmt_msg": "" }, - "CVE-2023-38427": { - "cmt_msg": "ksmbd: fix out-of-bound read in deassemble_neg_contexts()" - }, "CVE-2019-19378": { "cmt_msg": "" }, @@ -127967,18 +128013,9 @@ "CVE-2019-19449": { "cmt_msg": "f2fs: fix to do sanity check on segment/section count" }, - "CVE-2023-38428": { - "cmt_msg": "ksmbd: fix wrong UserName check in session_user" - }, "CVE-2020-24504": { "cmt_msg": "ice: create scheduler aggregator node config and move VSIs" }, - "CVE-2023-38431": { - "cmt_msg": "ksmbd: check the validation of pdu_size in ksmbd_conn_handler_loop" - }, - "CVE-2023-38430": { - "cmt_msg": "ksmbd: validate smb request protocol id" - }, "CVE-2020-11725": { "cmt_msg": "" }, @@ -128015,9 +128052,6 @@ "CVE-2022-2209": { "cmt_msg": "" }, - "CVE-2023-3390": { - "cmt_msg": "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE" - }, "CVE-2022-3595": { "cmt_msg": "cifs: fix double-fault crash during ntlmssp" }, @@ -128078,9 +128112,6 @@ "CVE-2022-45919": { "cmt_msg": "" }, - "CVE-2023-32258": { - "cmt_msg": "ksmbd: fix racy issue from smb2 close and logoff with multichannel" - }, "CVE-2023-2007": { "cmt_msg": "scsi: dpt_i2o: Remove obsolete driver" }, @@ -128102,8 +128133,14 @@ "CVE-2023-1075": { "cmt_msg": "net/tls: tls_is_tx_ready() checked list_entry" }, - "CVE-2023-32254": { - "cmt_msg": "ksmbd: fix racy issue under cocurrent smb2 tree disconnect" + "CVE-2023-3773": { + "cmt_msg": "" + }, + "CVE-2023-3772": { + "cmt_msg": "" + }, + "CVE-2022-3533": { + "cmt_msg": "" }, "CVE-2021-20177": { "cmt_msg": "netfilter: add and use nf_hook_slow_list()" @@ -128114,9 +128151,6 @@ "CVE-2022-2991": { "cmt_msg": "remove the lightnvm subsystem" }, - "CVE-2023-38426": { - "cmt_msg": "ksmbd: fix global-out-of-bounds in smb2_find_context_vals" - }, "CVE-2022-3624": { "cmt_msg": "bonding: fix reference count leak in balance-alb mode" }, @@ -128150,9 +128184,6 @@ "CVE-2021-4148": { "cmt_msg": "mm: khugepaged: skip huge page collapse for special files" }, - "CVE-2023-35693": { - "cmt_msg": "" - }, "CVE-2023-2176": { "cmt_msg": "RDMA/core: Refactor rdma_bind_addr" }, @@ -128165,9 +128196,6 @@ "CVE-2005-3660": { "cmt_msg": "" }, - "CVE-2023-32248": { - "cmt_msg": "ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()" - }, "CVE-2023-31085": { "cmt_msg": "" }, @@ -128234,6 +128262,9 @@ "CVE-2020-12363": { "cmt_msg": "drm/i915/guc: Update to use firmware v49.0.1" }, + "CVE-2023-3611": { + "cmt_msg": "net/sched: sch_qfq: account for stab overhead in qfq_enqueue" + }, "CVE-2020-12364": { "cmt_msg": "drm/i915/guc: Update to use firmware v49.0.1" }, @@ -128276,9 +128307,6 @@ "CVE-2019-15290": { "cmt_msg": "" }, - "CVE-2023-3212": { - "cmt_msg": "gfs2: Don't deref jdesc in evict" - }, "CVE-2022-3567": { "cmt_msg": "ipv6: Fix data races around sk->sk_prot." }, @@ -128315,24 +128343,15 @@ "CVE-2021-20239": { "cmt_msg": "net: pass a sockptr_t into ->setsockopt" }, - "CVE-2023-38432": { - "cmt_msg": "ksmbd: validate command payload size" - }, "CVE-2021-39801": { "cmt_msg": "" }, "CVE-2021-39800": { "cmt_msg": "" }, - "CVE-2023-32247": { - "cmt_msg": "ksmbd: destroy expired sessions" - }, "CVE-2022-4269": { "cmt_msg": "act_mirred: use the backlog for nested calls to mirred ingress" }, - "CVE-2023-38429": { - "cmt_msg": "ksmbd: allocate one more byte for implied bcc[0]" - }, "CVE-2020-36385": { "cmt_msg": "RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy" }, @@ -128381,24 +128400,15 @@ "CVE-2015-2877": { "cmt_msg": "" }, - "CVE-2023-32257": { - "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" - }, "CVE-2023-1611": { "cmt_msg": "btrfs: fix race between quota disable and quota assign ioctls" }, "CVE-2023-26242": { "cmt_msg": "" }, - "CVE-2023-32252": { - "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" - }, "CVE-2019-16089": { "cmt_msg": "" }, - "CVE-2023-32250": { - "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" - }, "CVE-2022-0400": { "cmt_msg": "" }, @@ -128435,11 +128445,8 @@ "CVE-2020-27835": { "cmt_msg": "IB/hfi1: Ensure correct mm is used at all times" }, - "CVE-2022-48502": { - "cmt_msg": "fs/ntfs3: Check fields while reading" - }, - "CVE-2023-35001": { - "cmt_msg": "netfilter: nf_tables: prevent OOB access in nft_byteorder_eval" + "CVE-2022-3606": { + "cmt_msg": "" }, "CVE-2023-3640": { "cmt_msg": "" @@ -128754,6 +128761,9 @@ } }, "outstanding": { + "CVE-2023-20593": { + "cmt_msg": "x86/cpu/amd: Add a Zenbleed fix" + }, "CVE-2023-0160": { "cmt_msg": "" }, @@ -128784,6 +128794,9 @@ "CVE-2022-38457": { "cmt_msg": "drm/vmwgfx: Remove rcu locks from user resources" }, + "CVE-2023-1078": { + "cmt_msg": "rds: rds_rm_zerocopy_callback() use list_first_entry()" + }, "CVE-2023-1990": { "cmt_msg": "nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition" }, @@ -128874,6 +128887,9 @@ "CVE-2023-0045": { "cmt_msg": "x86/bugs: Flush IBP in ib_prctl_set()" }, + "CVE-2023-3812": { + "cmt_msg": "net: tun: fix bugs for oversize packet when napi frags enabled" + }, "CVE-2022-23825": { "cmt_msg": "" }, @@ -128904,6 +128920,9 @@ "CVE-2021-3864": { "cmt_msg": "" }, + "CVE-2022-3606": { + "cmt_msg": "" + }, "CVE-2019-19814": { "cmt_msg": "" }, @@ -129003,6 +129022,9 @@ "CVE-2023-21255": { "cmt_msg": "binder: fix UAF caused by faulty buffer cleanup" }, + "CVE-2023-3776": { + "cmt_msg": "net/sched: cls_fw: Fix improper refcount update leads to use-after-free" + }, "CVE-2023-26607": { "cmt_msg": "ntfs: fix out-of-bounds read in ntfs_attr_find()" }, @@ -129018,6 +129040,9 @@ "CVE-2007-3719": { "cmt_msg": "" }, + "CVE-2023-3863": { + "cmt_msg": "net: nfc: Fix use-after-free caused by nfc_llcp_find_local" + }, "CVE-2023-37454": { "cmt_msg": "" }, @@ -129078,6 +129103,9 @@ "CVE-2023-2166": { "cmt_msg": "can: af_can: fix NULL pointer dereference in can_rcv_filter" }, + "CVE-2023-3773": { + "cmt_msg": "" + }, "CVE-2023-1073": { "cmt_msg": "HID: check empty report_list in hid_validate_values()" }, @@ -129087,8 +129115,8 @@ "CVE-2022-3629": { "cmt_msg": "vsock: Fix memory leak in vsock_connect()" }, - "CVE-2023-1078": { - "cmt_msg": "rds: rds_rm_zerocopy_callback() use list_first_entry()" + "CVE-2022-3533": { + "cmt_msg": "" }, "CVE-2022-3534": { "cmt_msg": "libbpf: Fix use-after-free in btf_dump_name_dups" @@ -129108,6 +129136,9 @@ "CVE-2022-3621": { "cmt_msg": "nilfs2: fix NULL pointer dereference at nilfs_bmap_lookup_at_level()" }, + "CVE-2023-3611": { + "cmt_msg": "net/sched: sch_qfq: account for stab overhead in qfq_enqueue" + }, "CVE-2022-3623": { "cmt_msg": "mm/hugetlb: fix races when looking up a CONT-PTE/PMD size hugetlb page" }, @@ -129144,6 +129175,9 @@ "CVE-2022-3707": { "cmt_msg": "drm/i915/gvt: fix double free bug in split_2MB_gtt_entry" }, + "CVE-2023-3772": { + "cmt_msg": "" + }, "CVE-2017-13693": { "cmt_msg": "" }, @@ -129174,9 +129208,6 @@ "CVE-2022-42895": { "cmt_msg": "Bluetooth: L2CAP: Fix attempting to access uninitialized memory" }, - "CVE-2023-35693": { - "cmt_msg": "" - }, "CVE-2022-42329": { "cmt_msg": "xen/netback: don't call kfree_skb() with interrupts disabled" }, @@ -129270,6 +129301,9 @@ "CVE-2022-3542": { "cmt_msg": "bnx2x: fix potential memory leak in bnx2x_tpa_stop()" }, + "CVE-2023-35788": { + "cmt_msg": "net/sched: flower: fix possible OOB write in fl_set_geneve_opt()" + }, "CVE-2022-3523": { "cmt_msg": "mm/memory.c: fix race when faulting a device private page" }, @@ -129312,6 +129346,9 @@ "CVE-2023-0461": { "cmt_msg": "net/ulp: prevent ULP without clone op from entering the LISTEN status" }, + "CVE-2023-3610": { + "cmt_msg": "netfilter: nf_tables: fix chain binding transaction logic" + }, "CVE-2022-42328": { "cmt_msg": "xen/netback: don't call kfree_skb() with interrupts disabled" }, @@ -129339,8 +129376,8 @@ "CVE-2022-4129": { "cmt_msg": "l2tp: Serialize access to sk_user_data with sk_callback_lock" }, - "CVE-2023-35788": { - "cmt_msg": "net/sched: flower: fix possible OOB write in fl_set_geneve_opt()" + "CVE-2023-3117": { + "cmt_msg": "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE" }, "CVE-2023-3567": { "cmt_msg": "vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF" @@ -129674,6 +129711,9 @@ }, "CVE-2023-2002": { "cmt_msg": "bluetooth: Perform careful capability checks in hci_sock_ioctl()" + }, + "CVE-2023-3609": { + "cmt_msg": "net/sched: cls_u32: Fix reference counter leak leading to overflow" } } }, @@ -129895,6 +129935,9 @@ } }, "outstanding": { + "CVE-2023-20593": { + "cmt_msg": "x86/cpu/amd: Add a Zenbleed fix" + }, "CVE-2023-0160": { "cmt_msg": "" }, @@ -130000,6 +130043,9 @@ "CVE-2023-0045": { "cmt_msg": "x86/bugs: Flush IBP in ib_prctl_set()" }, + "CVE-2023-3812": { + "cmt_msg": "net: tun: fix bugs for oversize packet when napi frags enabled" + }, "CVE-2022-23825": { "cmt_msg": "" }, @@ -130027,6 +130073,9 @@ "CVE-2021-3864": { "cmt_msg": "" }, + "CVE-2022-3606": { + "cmt_msg": "" + }, "CVE-2019-19814": { "cmt_msg": "" }, @@ -130051,6 +130100,9 @@ "CVE-2022-38096": { "cmt_msg": "" }, + "CVE-2023-3776": { + "cmt_msg": "net/sched: cls_fw: Fix improper refcount update leads to use-after-free" + }, "CVE-2022-3595": { "cmt_msg": "cifs: fix double-fault crash during ntlmssp" }, @@ -130078,8 +130130,8 @@ "CVE-2023-2156": { "cmt_msg": "net: rpl: fix rpl header size calculation" }, - "CVE-2023-38429": { - "cmt_msg": "ksmbd: allocate one more byte for implied bcc[0]" + "CVE-2023-3772": { + "cmt_msg": "" }, "CVE-2023-31084": { "cmt_msg": "media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()" @@ -130132,6 +130184,9 @@ "CVE-2007-3719": { "cmt_msg": "" }, + "CVE-2023-3863": { + "cmt_msg": "net: nfc: Fix use-after-free caused by nfc_llcp_find_local" + }, "CVE-2023-37454": { "cmt_msg": "" }, @@ -130186,6 +130241,9 @@ "CVE-2023-2166": { "cmt_msg": "can: af_can: fix NULL pointer dereference in can_rcv_filter" }, + "CVE-2023-3773": { + "cmt_msg": "" + }, "CVE-2023-1073": { "cmt_msg": "HID: check empty report_list in hid_validate_values()" }, @@ -130195,7 +130253,7 @@ "CVE-2022-3531": { "cmt_msg": "selftest/bpf: Fix memory leak in kprobe_multi_test" }, - "CVE-2023-26242": { + "CVE-2022-3533": { "cmt_msg": "" }, "CVE-2022-3534": { @@ -130210,14 +130268,14 @@ "CVE-2022-48425": { "cmt_msg": "fs/ntfs3: Validate MFT flags before replaying logs" }, - "CVE-2022-3435": { - "cmt_msg": "ipv4: Handle attempt to delete multipath route when fib_info contains an nh reference" + "CVE-2022-3624": { + "cmt_msg": "bonding: fix reference count leak in balance-alb mode" }, "CVE-2023-0597": { "cmt_msg": "x86/mm: Randomize per-cpu entry area" }, - "CVE-2022-3624": { - "cmt_msg": "bonding: fix reference count leak in balance-alb mode" + "CVE-2022-3435": { + "cmt_msg": "ipv4: Handle attempt to delete multipath route when fib_info contains an nh reference" }, "CVE-2022-4842": { "cmt_msg": "fs/ntfs3: Fix attr_punch_hole() null pointer derenference" @@ -130270,9 +130328,6 @@ "CVE-2022-42895": { "cmt_msg": "Bluetooth: L2CAP: Fix attempting to access uninitialized memory" }, - "CVE-2023-35693": { - "cmt_msg": "" - }, "CVE-2022-42329": { "cmt_msg": "xen/netback: don't call kfree_skb() with interrupts disabled" }, @@ -130309,6 +130364,9 @@ "CVE-2023-31248": { "cmt_msg": "netfilter: nf_tables: do not ignore genmask when looking up chain by id" }, + "CVE-2023-26242": { + "cmt_msg": "" + }, "CVE-2023-34255": { "cmt_msg": "xfs: verify buffer contents when we skip log replay" }, @@ -130348,6 +130406,9 @@ "CVE-2022-3543": { "cmt_msg": "af_unix: Fix memory leaks of the whole sk due to OOB skb." }, + "CVE-2023-35788": { + "cmt_msg": "net/sched: flower: fix possible OOB write in fl_set_geneve_opt()" + }, "CVE-2022-3523": { "cmt_msg": "mm/memory.c: fix race when faulting a device private page" }, @@ -130381,6 +130442,9 @@ "CVE-2023-2483": { "cmt_msg": "net: qcom/emac: Fix use after free bug in emac_remove due to race condition" }, + "CVE-2023-3610": { + "cmt_msg": "netfilter: nf_tables: fix chain binding transaction logic" + }, "CVE-2020-0347": { "cmt_msg": "" }, @@ -130423,8 +130487,8 @@ "CVE-2022-4129": { "cmt_msg": "l2tp: Serialize access to sk_user_data with sk_callback_lock" }, - "CVE-2023-35788": { - "cmt_msg": "net/sched: flower: fix possible OOB write in fl_set_geneve_opt()" + "CVE-2023-3117": { + "cmt_msg": "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE" }, "CVE-2023-3567": { "cmt_msg": "vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF" @@ -130501,6 +130565,9 @@ "CVE-2023-33288": { "cmt_msg": "power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition" }, + "CVE-2023-38429": { + "cmt_msg": "ksmbd: allocate one more byte for implied bcc[0]" + }, "CVE-2019-15290": { "cmt_msg": "" }, @@ -130723,6 +130790,9 @@ "CVE-2011-4916": { "cmt_msg": "" }, + "CVE-2023-3611": { + "cmt_msg": "net/sched: sch_qfq: account for stab overhead in qfq_enqueue" + }, "CVE-2022-4662": { "cmt_msg": "USB: core: Prevent nested device-reset calls" }, @@ -130749,6 +130819,9 @@ }, "CVE-2023-2002": { "cmt_msg": "bluetooth: Perform careful capability checks in hci_sock_ioctl()" + }, + "CVE-2023-3609": { + "cmt_msg": "net/sched: cls_u32: Fix reference counter leak leading to overflow" } } }, @@ -131284,9 +131357,6 @@ "CVE-2023-2008": { "cmt_msg": "udmabuf: add back sanity check" }, - "CVE-2023-38431": { - "cmt_msg": "ksmbd: check the validation of pdu_size in ksmbd_conn_handler_loop" - }, "CVE-2023-2002": { "cmt_msg": "bluetooth: Perform careful capability checks in hci_sock_ioctl()" }, @@ -131491,6 +131561,9 @@ "CVE-2021-3564": { "cmt_msg": "Bluetooth: fix the erroneous flush_work() order" }, + "CVE-2023-3611": { + "cmt_msg": "net/sched: sch_qfq: account for stab overhead in qfq_enqueue" + }, "CVE-2020-26560": { "cmt_msg": "" }, @@ -131503,9 +131576,6 @@ "CVE-2022-0185": { "cmt_msg": "vfs: fs_context: fix up param length parsing in legacy_parse_param" }, - "CVE-2023-32258": { - "cmt_msg": "ksmbd: fix racy issue from smb2 close and logoff with multichannel" - }, "CVE-2023-37453": { "cmt_msg": "" }, @@ -131578,9 +131648,6 @@ "CVE-2021-20239": { "cmt_msg": "net: pass a sockptr_t into ->setsockopt" }, - "CVE-2023-38432": { - "cmt_msg": "ksmbd: validate command payload size" - }, "CVE-2022-3567": { "cmt_msg": "ipv6: Fix data races around sk->sk_prot." }, @@ -131671,8 +131738,8 @@ "CVE-2020-0255": { "cmt_msg": "selinux: properly handle multiple messages in selinux_netlink_send()" }, - "CVE-2023-32252": { - "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" + "CVE-2023-35001": { + "cmt_msg": "netfilter: nf_tables: prevent OOB access in nft_byteorder_eval" }, "CVE-2022-27666": { "cmt_msg": "esp: Fix possible buffer overflow in ESP transformation" @@ -131704,6 +131771,9 @@ "CVE-2023-3397": { "cmt_msg": "" }, + "CVE-2023-3117": { + "cmt_msg": "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE" + }, "CVE-2022-26365": { "cmt_msg": "xen/blkfront: fix leaking data in shared pages" }, @@ -131869,6 +131939,9 @@ "CVE-2007-3719": { "cmt_msg": "" }, + "CVE-2023-3863": { + "cmt_msg": "net: nfc: Fix use-after-free caused by nfc_llcp_find_local" + }, "CVE-2023-0590": { "cmt_msg": "net: sched: fix race condition in qdisc_graft()" }, @@ -132127,18 +132200,12 @@ "CVE-2018-12931": { "cmt_msg": "" }, - "CVE-2023-38426": { - "cmt_msg": "ksmbd: fix global-out-of-bounds in smb2_find_context_vals" - }, "CVE-2020-12768": { "cmt_msg": "KVM: SVM: Fix potential memory leak in svm_cpu_init()" }, "CVE-2020-12769": { "cmt_msg": "spi: spi-dw: Add lock protect dw_spi rx/tx to prevent concurrent calls" }, - "CVE-2023-32248": { - "cmt_msg": "ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()" - }, "CVE-2021-32399": { "cmt_msg": "bluetooth: eliminate the potential race condition when removing the HCI controller" }, @@ -132199,9 +132266,6 @@ "CVE-2022-44032": { "cmt_msg": "" }, - "CVE-2023-35001": { - "cmt_msg": "netfilter: nf_tables: prevent OOB access in nft_byteorder_eval" - }, "CVE-2020-10781": { "cmt_msg": "Revert \"zram: convert remaining CLASS_ATTR() to CLASS_ATTR_RO()\"" }, @@ -132214,9 +132278,6 @@ "CVE-2021-3609": { "cmt_msg": "can: bcm: delay release of struct bcm_op after synchronize_rcu()" }, - "CVE-2022-48502": { - "cmt_msg": "fs/ntfs3: Check fields while reading" - }, "CVE-2021-3600": { "cmt_msg": "bpf: Fix 32 bit src register truncation on div/mod" }, @@ -132244,9 +132305,6 @@ "CVE-2023-0615": { "cmt_msg": "media: vivid: dev->bitmap_cap wasn't freed in all cases" }, - "CVE-2023-38427": { - "cmt_msg": "ksmbd: fix out-of-bound read in deassemble_neg_contexts()" - }, "CVE-2019-14896": { "cmt_msg": "libertas: Fix two buffer overflows at parsing bss descriptor" }, @@ -132283,12 +132341,6 @@ "CVE-2020-26541": { "cmt_msg": "certs: Add EFI_CERT_X509_GUID support for dbx entries" }, - "CVE-2023-38430": { - "cmt_msg": "ksmbd: validate smb request protocol id" - }, - "CVE-2023-38428": { - "cmt_msg": "ksmbd: fix wrong UserName check in session_user" - }, "CVE-2023-3390": { "cmt_msg": "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE" }, @@ -132358,6 +132410,9 @@ "CVE-2023-3090": { "cmt_msg": "ipvlan:Fix out-of-bounds caused by unclear skb->cb" }, + "CVE-2023-3772": { + "cmt_msg": "" + }, "CVE-2023-1582": { "cmt_msg": "fs/proc: task_mmu.c: don't read mapcount for migration entry" }, @@ -132421,12 +132476,18 @@ "CVE-2022-1966": { "cmt_msg": "netfilter: nf_tables: disallow non-stateful expression in sets earlier" }, + "CVE-2023-3773": { + "cmt_msg": "" + }, "CVE-2021-3587": { "cmt_msg": "nfc: fix NULL ptr dereference in llcp_sock_getname() after failed connect" }, "CVE-2021-44733": { "cmt_msg": "tee: handle lookup of shm with reference count 0" }, + "CVE-2022-3533": { + "cmt_msg": "" + }, "CVE-2022-3534": { "cmt_msg": "libbpf: Fix use-after-free in btf_dump_name_dups" }, @@ -132667,8 +132728,8 @@ "CVE-2022-26490": { "cmt_msg": "nfc: st21nfca: Fix potential buffer overflows in EVT_TRANSACTION" }, - "CVE-2023-32247": { - "cmt_msg": "ksmbd: destroy expired sessions" + "CVE-2023-3812": { + "cmt_msg": "net: tun: fix bugs for oversize packet when napi frags enabled" }, "CVE-2022-3169": { "cmt_msg": "nvme: ensure subsystem reset is single threaded" @@ -132733,24 +132794,15 @@ "CVE-2020-35519": { "cmt_msg": "net/x25: prevent a couple of overflows" }, - "CVE-2023-32257": { - "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" - }, "CVE-2023-31436": { "cmt_msg": "net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg" }, - "CVE-2023-32254": { - "cmt_msg": "ksmbd: fix racy issue under cocurrent smb2 tree disconnect" - }, "CVE-2022-45887": { "cmt_msg": "" }, "CVE-2020-10708": { "cmt_msg": "" }, - "CVE-2023-32250": { - "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" - }, "CVE-2022-0400": { "cmt_msg": "" }, @@ -132781,9 +132833,15 @@ "CVE-2020-29374": { "cmt_msg": "gup: document and work around \"COW can break either way\" issue" }, + "CVE-2022-3606": { + "cmt_msg": "" + }, "CVE-2023-3640": { "cmt_msg": "" }, + "CVE-2023-20593": { + "cmt_msg": "x86/cpu/amd: Add a Zenbleed fix" + }, "CVE-2023-0160": { "cmt_msg": "" }, @@ -132931,6 +132989,9 @@ "CVE-2019-20908": { "cmt_msg": "efi: Restrict efivar_ssdt_load when the kernel is locked down" }, + "CVE-2023-3776": { + "cmt_msg": "net/sched: cls_fw: Fix improper refcount update leads to use-after-free" + }, "CVE-2021-28038": { "cmt_msg": "Xen/gnttab: handle p2m update errors on a per-slot basis" }, @@ -132973,9 +133034,6 @@ "CVE-2010-4563": { "cmt_msg": "" }, - "CVE-2023-35693": { - "cmt_msg": "" - }, "CVE-2023-1249": { "cmt_msg": "coredump: Use the vma snapshot in fill_files_note" }, @@ -133039,6 +133097,9 @@ "CVE-2021-3573": { "cmt_msg": "Bluetooth: use correct lock to prevent UAF of hdev object" }, + "CVE-2023-3609": { + "cmt_msg": "net/sched: cls_u32: Fix reference counter leak leading to overflow" + }, "CVE-2022-1974": { "cmt_msg": "nfc: replace improper check device_is_registered() in netlink related functions" }, @@ -133240,9 +133301,6 @@ "CVE-2021-28375": { "cmt_msg": "misc: fastrpc: restrict user apps from sending kernel RPC messages" }, - "CVE-2023-38429": { - "cmt_msg": "ksmbd: allocate one more byte for implied bcc[0]" - }, "CVE-2022-1195": { "cmt_msg": "hamradio: improve the incomplete fix to avoid NPD" }, @@ -133685,9 +133743,6 @@ "CVE-2023-2008": { "cmt_msg": "udmabuf: add back sanity check" }, - "CVE-2023-38431": { - "cmt_msg": "ksmbd: check the validation of pdu_size in ksmbd_conn_handler_loop" - }, "CVE-2023-2002": { "cmt_msg": "bluetooth: Perform careful capability checks in hci_sock_ioctl()" }, @@ -133868,15 +133923,15 @@ "CVE-2021-3564": { "cmt_msg": "Bluetooth: fix the erroneous flush_work() order" }, + "CVE-2023-3611": { + "cmt_msg": "net/sched: sch_qfq: account for stab overhead in qfq_enqueue" + }, "CVE-2020-26560": { "cmt_msg": "" }, "CVE-2023-2430": { "cmt_msg": "io_uring/msg_ring: fix missing lock on overflow for IOPOLL" }, - "CVE-2023-32258": { - "cmt_msg": "ksmbd: fix racy issue from smb2 close and logoff with multichannel" - }, "CVE-2023-37453": { "cmt_msg": "" }, @@ -133937,9 +133992,6 @@ "CVE-2021-20239": { "cmt_msg": "net: pass a sockptr_t into ->setsockopt" }, - "CVE-2023-38432": { - "cmt_msg": "ksmbd: validate command payload size" - }, "CVE-2022-3567": { "cmt_msg": "ipv6: Fix data races around sk->sk_prot." }, @@ -134000,8 +134052,8 @@ "CVE-2020-27830": { "cmt_msg": "speakup: Reject setting the speakup line discipline outside of speakup" }, - "CVE-2023-32252": { - "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" + "CVE-2023-35001": { + "cmt_msg": "netfilter: nf_tables: prevent OOB access in nft_byteorder_eval" }, "CVE-2022-27666": { "cmt_msg": "esp: Fix possible buffer overflow in ESP transformation" @@ -134183,6 +134235,9 @@ "CVE-2007-3719": { "cmt_msg": "" }, + "CVE-2023-3863": { + "cmt_msg": "net: nfc: Fix use-after-free caused by nfc_llcp_find_local" + }, "CVE-2023-0590": { "cmt_msg": "net: sched: fix race condition in qdisc_graft()" }, @@ -134381,6 +134436,9 @@ "CVE-2022-20008": { "cmt_msg": "mmc: block: fix read single on recovery logic" }, + "CVE-2023-3117": { + "cmt_msg": "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE" + }, "CVE-2023-32269": { "cmt_msg": "netrom: Fix use-after-free caused by accept on already connected socket" }, @@ -134417,15 +134475,9 @@ "CVE-2018-12931": { "cmt_msg": "" }, - "CVE-2023-38426": { - "cmt_msg": "ksmbd: fix global-out-of-bounds in smb2_find_context_vals" - }, "CVE-2023-1990": { "cmt_msg": "nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition" }, - "CVE-2023-32248": { - "cmt_msg": "ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()" - }, "CVE-2021-33098": { "cmt_msg": "ixgbe: fix large MTU request from VF" }, @@ -134477,9 +134529,6 @@ "CVE-2022-44032": { "cmt_msg": "" }, - "CVE-2023-35001": { - "cmt_msg": "netfilter: nf_tables: prevent OOB access in nft_byteorder_eval" - }, "CVE-2020-10781": { "cmt_msg": "Revert \"zram: convert remaining CLASS_ATTR() to CLASS_ATTR_RO()\"" }, @@ -134489,9 +134538,6 @@ "CVE-2021-3609": { "cmt_msg": "can: bcm: delay release of struct bcm_op after synchronize_rcu()" }, - "CVE-2022-48502": { - "cmt_msg": "fs/ntfs3: Check fields while reading" - }, "CVE-2021-3600": { "cmt_msg": "bpf: Fix 32 bit src register truncation on div/mod" }, @@ -134510,9 +134556,6 @@ "CVE-2023-0615": { "cmt_msg": "media: vivid: dev->bitmap_cap wasn't freed in all cases" }, - "CVE-2023-38427": { - "cmt_msg": "ksmbd: fix out-of-bound read in deassemble_neg_contexts()" - }, "CVE-2023-3006": { "cmt_msg": "arm64: Add AMPERE1 to the Spectre-BHB affected list" }, @@ -134540,15 +134583,12 @@ "CVE-2020-26541": { "cmt_msg": "certs: Add EFI_CERT_X509_GUID support for dbx entries" }, - "CVE-2023-38430": { - "cmt_msg": "ksmbd: validate smb request protocol id" - }, - "CVE-2023-38428": { - "cmt_msg": "ksmbd: fix wrong UserName check in session_user" - }, "CVE-2023-3390": { "cmt_msg": "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE" }, + "CVE-2023-3812": { + "cmt_msg": "net: tun: fix bugs for oversize packet when napi frags enabled" + }, "CVE-2020-26143": { "cmt_msg": "" }, @@ -134600,6 +134640,9 @@ "CVE-2023-3090": { "cmt_msg": "ipvlan:Fix out-of-bounds caused by unclear skb->cb" }, + "CVE-2023-3772": { + "cmt_msg": "" + }, "CVE-2023-1582": { "cmt_msg": "fs/proc: task_mmu.c: don't read mapcount for migration entry" }, @@ -134663,12 +134706,18 @@ "CVE-2022-1966": { "cmt_msg": "netfilter: nf_tables: disallow non-stateful expression in sets earlier" }, + "CVE-2023-3773": { + "cmt_msg": "" + }, "CVE-2021-3587": { "cmt_msg": "nfc: fix NULL ptr dereference in llcp_sock_getname() after failed connect" }, "CVE-2021-44733": { "cmt_msg": "tee: handle lookup of shm with reference count 0" }, + "CVE-2022-3533": { + "cmt_msg": "" + }, "CVE-2022-3534": { "cmt_msg": "libbpf: Fix use-after-free in btf_dump_name_dups" }, @@ -134879,9 +134928,6 @@ "CVE-2022-42896": { "cmt_msg": "Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM" }, - "CVE-2023-32247": { - "cmt_msg": "ksmbd: destroy expired sessions" - }, "CVE-2022-3169": { "cmt_msg": "nvme: ensure subsystem reset is single threaded" }, @@ -134933,24 +134979,15 @@ "CVE-2020-35519": { "cmt_msg": "net/x25: prevent a couple of overflows" }, - "CVE-2023-32257": { - "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" - }, "CVE-2023-31436": { "cmt_msg": "net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg" }, - "CVE-2023-32254": { - "cmt_msg": "ksmbd: fix racy issue under cocurrent smb2 tree disconnect" - }, "CVE-2022-45887": { "cmt_msg": "" }, "CVE-2020-10708": { "cmt_msg": "" }, - "CVE-2023-32250": { - "cmt_msg": "ksmbd: fix racy issue from session setup and logoff" - }, "CVE-2022-0400": { "cmt_msg": "" }, @@ -134975,12 +135012,18 @@ "CVE-2020-27152": { "cmt_msg": "KVM: ioapic: break infinite recursion on lazy EOI" }, + "CVE-2022-3606": { + "cmt_msg": "" + }, "CVE-2022-39188": { "cmt_msg": "mmu_gather: Force tlb-flush VM_PFNMAP vmas" }, "CVE-2023-3640": { "cmt_msg": "" }, + "CVE-2023-20593": { + "cmt_msg": "x86/cpu/amd: Add a Zenbleed fix" + }, "CVE-2023-0160": { "cmt_msg": "" }, @@ -135125,6 +135168,9 @@ "CVE-2020-28915": { "cmt_msg": "fbcon: Fix global-out-of-bounds read in fbcon_get_font()" }, + "CVE-2023-3776": { + "cmt_msg": "net/sched: cls_fw: Fix improper refcount update leads to use-after-free" + }, "CVE-2021-28038": { "cmt_msg": "Xen/gnttab: handle p2m update errors on a per-slot basis" }, @@ -135152,9 +135198,6 @@ "CVE-2010-4563": { "cmt_msg": "" }, - "CVE-2023-35693": { - "cmt_msg": "" - }, "CVE-2023-1249": { "cmt_msg": "coredump: Use the vma snapshot in fill_files_note" }, @@ -135206,6 +135249,9 @@ "CVE-2021-3573": { "cmt_msg": "Bluetooth: use correct lock to prevent UAF of hdev object" }, + "CVE-2023-3609": { + "cmt_msg": "net/sched: cls_u32: Fix reference counter leak leading to overflow" + }, "CVE-2022-1974": { "cmt_msg": "nfc: replace improper check device_is_registered() in netlink related functions" }, @@ -135404,9 +135450,6 @@ "CVE-2021-28375": { "cmt_msg": "misc: fastrpc: restrict user apps from sending kernel RPC messages" }, - "CVE-2023-38429": { - "cmt_msg": "ksmbd: allocate one more byte for implied bcc[0]" - }, "CVE-2022-1195": { "cmt_msg": "hamradio: improve the incomplete fix to avoid NPD" }, @@ -135685,16 +135728,28 @@ } }, "6.3.9": { + "CVE-2023-3609": { + "cmt_msg": "net/sched: cls_u32: Fix reference counter leak leading to overflow", + "cmt_id": "4efd555a43dc24f3342bcc036522c430f5869e6f" + }, "CVE-2023-38430": { "cmt_msg": "ksmbd: validate smb request protocol id", "cmt_id": "75e7d81679ef7995422adc84ef597fded99c24a6" }, + "CVE-2023-3117": { + "cmt_msg": "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE", + "cmt_id": "bdace3b1a51887211d3e49417a18fdbd315a313b" + }, "CVE-2023-3390": { "cmt_msg": "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE", "cmt_id": "bdace3b1a51887211d3e49417a18fdbd315a313b" } }, "6.3.10": { + "CVE-2023-3610": { + "cmt_msg": "netfilter: nf_tables: fix chain binding transaction logic", + "cmt_id": "a1547f81341f14b1b355df04218152e8b5d4b264" + }, "CVE-2023-38432": { "cmt_msg": "ksmbd: validate command payload size", "cmt_id": "768caf4019f0391c0b6452afe34cea1704133f7b" @@ -135706,7 +135761,16 @@ "cmt_id": "bce721f87edd54379120ffb85111357923f4f326" } }, + "6.3.13": { + "CVE-2023-3863": { + "cmt_msg": "net: nfc: Fix use-after-free caused by nfc_llcp_find_local", + "cmt_id": "b3ad46e155a6d91b36c6e892019a43e3ef3c696d" + } + }, "outstanding": { + "CVE-2023-20593": { + "cmt_msg": "x86/cpu/amd: Add a Zenbleed fix" + }, "CVE-2023-0160": { "cmt_msg": "" }, @@ -135737,9 +135801,6 @@ "CVE-2020-24502": { "cmt_msg": "" }, - "CVE-2023-35693": { - "cmt_msg": "" - }, "CVE-2020-11725": { "cmt_msg": "" }, @@ -135752,6 +135813,9 @@ "CVE-2021-3864": { "cmt_msg": "" }, + "CVE-2022-3606": { + "cmt_msg": "" + }, "CVE-2019-19814": { "cmt_msg": "" }, @@ -135761,6 +135825,9 @@ "CVE-2021-26934": { "cmt_msg": "" }, + "CVE-2023-37454": { + "cmt_msg": "" + }, "CVE-2016-8660": { "cmt_msg": "" }, @@ -135800,7 +135867,16 @@ "CVE-2020-26142": { "cmt_msg": "" }, - "CVE-2023-26242": { + "CVE-2023-3776": { + "cmt_msg": "net/sched: cls_fw: Fix improper refcount update leads to use-after-free" + }, + "CVE-2023-3773": { + "cmt_msg": "" + }, + "CVE-2023-3772": { + "cmt_msg": "" + }, + "CVE-2022-3533": { "cmt_msg": "" }, "CVE-2022-1247": { @@ -135866,6 +135942,9 @@ "CVE-2020-0347": { "cmt_msg": "" }, + "CVE-2023-3611": { + "cmt_msg": "net/sched: sch_qfq: account for stab overhead in qfq_enqueue" + }, "CVE-2021-3714": { "cmt_msg": "" }, @@ -135884,7 +135963,7 @@ "CVE-2023-1206": { "cmt_msg": "" }, - "CVE-2023-37454": { + "CVE-2023-26242": { "cmt_msg": "" }, "CVE-2023-35827": {
diff --git a/data/stream_fixes.json b/data/stream_fixes.json index c83f331..9d58037 100644 --- a/data/stream_fixes.json +++ b/data/stream_fixes.json
@@ -36223,6 +36223,16 @@ "fixed_version": "6.3.4" } }, + "CVE-2022-48502": { + "5.15": { + "cmt_id": "333feb7ba84f69f9b423422417aaac54fd9e7c84", + "fixed_version": "5.15.121" + }, + "6.1": { + "cmt_id": "000a9a72efa4a9df289bab9c9e8ba1639c72e0d6", + "fixed_version": "6.1.40" + } + }, "CVE-2023-0045": { "5.10": { "cmt_id": "67e39c4f4cb318cfbbf8982ab016c649ed97edaf", @@ -37305,6 +37315,32 @@ "fixed_version": "5.19.2" } }, + "CVE-2023-20593": { + "4.19": { + "cmt_id": "cfef7bbf0dca27209ea5d82d7060d4fc2c0d72ea", + "fixed_version": "4.19.289" + }, + "5.10": { + "cmt_id": "93df00f9d48d48466ddbe01a06eaaf3311ecfb53", + "fixed_version": "5.10.187" + }, + "5.15": { + "cmt_id": "be824fdb827dc06f77a31122949fe1bc011e3e1e", + "fixed_version": "5.15.122" + }, + "5.4": { + "cmt_id": "00363ef30797211c247605464dc3daaa988531a2", + "fixed_version": "5.4.250" + }, + "6.1": { + "cmt_id": "ed9b87010aa84c157096f98c322491e9af8e8f07", + "fixed_version": "6.1.41" + }, + "6.4": { + "cmt_id": "9b8bb5c4e25678af895dc9dd4a1e82b2f948cacc", + "fixed_version": "6.4.6" + } + }, "CVE-2023-20928": { "5.15": { "cmt_id": "622ef885a89ad04cfb76ee478fb44f051125d1f1", @@ -38129,6 +38165,24 @@ "fixed_version": "6.2.9" } }, + "CVE-2023-2898": { + "5.10": { + "cmt_id": "b39ef5b52f10b819bd0ceeb22e8f7df7800880ca", + "fixed_version": "5.10.188" + }, + "5.15": { + "cmt_id": "982c29e0d27a48d65fd0fa0d1bcee501eeb06e76", + "fixed_version": "5.15.121" + }, + "6.1": { + "cmt_id": "ebe83e9bb8a6b3db28603fe938ee80ccaa01ed53", + "fixed_version": "6.1.39" + }, + "6.4": { + "cmt_id": "5619e9aabbd2b369cde2114ad6f55f6eb3e0b5be", + "fixed_version": "6.4.4" + } + }, "CVE-2023-2985": { "4.14": { "cmt_id": "a9433406837c211af58a533d9e6f7a8f865b01f3", @@ -38291,6 +38345,46 @@ "fixed_version": "5.4.247" } }, + "CVE-2023-3117": { + "5.10": { + "cmt_id": "8180fc2fadd48dde4966f2db2c716c2ce7510d0b", + "fixed_version": "5.10.188" + }, + "5.15": { + "cmt_id": "44ebe988cb38e720b91826f4d7c31692061ca04a", + "fixed_version": "5.15.118" + }, + "5.4": { + "cmt_id": "1adb5c272b200c24e9a7dd3bff891ce6eb75b019", + "fixed_version": "5.4.251" + }, + "6.1": { + "cmt_id": "4aaa3b730d16c13cc3feaa127bfca1af201d969d", + "fixed_version": "6.1.35" + }, + "6.3": { + "cmt_id": "bdace3b1a51887211d3e49417a18fdbd315a313b", + "fixed_version": "6.3.9" + } + }, + "CVE-2023-31248": { + "5.10": { + "cmt_id": "4ae2e501331aaa506eaf760339bb2f43e5769395", + "fixed_version": "5.10.188" + }, + "5.15": { + "cmt_id": "041e2ac88caef286b39064e83e825e3f53113d36", + "fixed_version": "5.15.121" + }, + "6.1": { + "cmt_id": "fc95c8b02c6160936f1f3d8d9d7f4f66f3c84b49", + "fixed_version": "6.1.39" + }, + "6.4": { + "cmt_id": "5e5e967e8505fbdabfb6497367ec1b808cadc356", + "fixed_version": "6.4.4" + } + }, "CVE-2023-3141": { "4.14": { "cmt_id": "3faa6fe21c516dbcca469c297df77decbc2fed0f", @@ -38420,6 +38514,10 @@ "cmt_id": "fd8b4e28f400a067e6ef84569816967be1f0642b", "fixed_version": "5.15.116" }, + "5.4": { + "cmt_id": "23f98fe887ce3e7c8bd111f37e62735c5018c534", + "fixed_version": "5.4.251" + }, "6.1": { "cmt_id": "5ae4a618a1558d2b536fdd5d42e53d3e2d73870c", "fixed_version": "6.1.33" @@ -38655,6 +38753,10 @@ "6.3": { "cmt_id": "bce721f87edd54379120ffb85111357923f4f326", "fixed_version": "6.3.11" + }, + "6.4": { + "cmt_id": "b11fa3d22ac0fbc0bfaa740b3b3669d43ec48503", + "fixed_version": "6.4.1" } }, "CVE-2023-3312": { @@ -38804,10 +38906,18 @@ } }, "CVE-2023-3390": { + "5.10": { + "cmt_id": "8180fc2fadd48dde4966f2db2c716c2ce7510d0b", + "fixed_version": "5.10.188" + }, "5.15": { "cmt_id": "44ebe988cb38e720b91826f4d7c31692061ca04a", "fixed_version": "5.15.118" }, + "5.4": { + "cmt_id": "1adb5c272b200c24e9a7dd3bff891ce6eb75b019", + "fixed_version": "5.4.251" + }, "6.1": { "cmt_id": "4aaa3b730d16c13cc3feaa127bfca1af201d969d", "fixed_version": "6.1.35" @@ -38907,6 +39017,28 @@ "fixed_version": "5.17.6" } }, + "CVE-2023-35001": { + "5.10": { + "cmt_id": "ea213922249c7e448d217a0a0441c6f86a8155fd", + "fixed_version": "5.10.188" + }, + "5.15": { + "cmt_id": "870dcc31c0cf47cb15a568ade4168dc644b3ccfb", + "fixed_version": "5.15.121" + }, + "5.4": { + "cmt_id": "b7d636c924eb275651bfb036eb8eca49c3f7bc24", + "fixed_version": "5.4.251" + }, + "6.1": { + "cmt_id": "40f83dd66a823400d8592e3b71e190e3ad978eb5", + "fixed_version": "6.1.39" + }, + "6.4": { + "cmt_id": "b79c09c2bf2d7643902a6ef26152de602c5c5e4b", + "fixed_version": "6.4.4" + } + }, "CVE-2023-3567": { "4.19": { "cmt_id": "6332f52f44b9776568bf3c0b714ddfb0bb175e78", @@ -39085,6 +39217,112 @@ "fixed_version": "6.3.2" } }, + "CVE-2023-3609": { + "5.10": { + "cmt_id": "af6eaa57986e82d7efd81984ee607927c6de61e4", + "fixed_version": "5.10.185" + }, + "5.15": { + "cmt_id": "0e1098d72fa462944c68262e1b5cca045dcb555e", + "fixed_version": "5.15.118" + }, + "5.4": { + "cmt_id": "46305daf8064598a4008af1728651296815a74ed", + "fixed_version": "5.4.248" + }, + "6.1": { + "cmt_id": "07f9cc229b44cbcee6385802d390091d915f38c3", + "fixed_version": "6.1.35" + }, + "6.3": { + "cmt_id": "4efd555a43dc24f3342bcc036522c430f5869e6f", + "fixed_version": "6.3.9" + } + }, + "CVE-2023-3610": { + "5.10": { + "cmt_id": "d53c295c1f43b7460d28ba0f0f98a602084fdcb6", + "fixed_version": "5.10.188" + }, + "5.15": { + "cmt_id": "314a8697d08092df6d00521450d44c352c602943", + "fixed_version": "5.15.119" + }, + "6.1": { + "cmt_id": "891cd2edddc76c58e842706ad27e2ff96000bd5d", + "fixed_version": "6.1.36" + }, + "6.3": { + "cmt_id": "a1547f81341f14b1b355df04218152e8b5d4b264", + "fixed_version": "6.3.10" + }, + "6.4": { + "cmt_id": "4bedf9eee016286c835e3d8fa981ddece5338795", + "fixed_version": "6.4" + } + }, + "CVE-2023-3611": { + "5.10": { + "cmt_id": "8359ee85fd6dabc5c134ed69fb22faadd8a44071", + "fixed_version": "5.10.188" + }, + "5.15": { + "cmt_id": "91d3554ab1fc2804c36a815c0f79502d727a41e6", + "fixed_version": "5.15.121" + }, + "6.1": { + "cmt_id": "70feebdbfad85772ab3ef152812729cab5c6c426", + "fixed_version": "6.1.40" + }, + "6.4": { + "cmt_id": "bd2333fa86dc520823e8c317980b29ba91ee6b87", + "fixed_version": "6.4.5" + } + }, + "CVE-2023-3776": { + "5.10": { + "cmt_id": "80e0e8d5f54397c5048fa2274144134dd9dc91b5", + "fixed_version": "5.10.188" + }, + "5.15": { + "cmt_id": "5b55f2d6ef403fcda93ae4eb4d8c1ba164c66e92", + "fixed_version": "5.15.121" + }, + "5.4": { + "cmt_id": "808211a8d427404331e39e3b8c94ab5242eef8f5", + "fixed_version": "5.4.251" + }, + "6.1": { + "cmt_id": "c91fb29bb07ee4dd40aabd1e41f19c0f92ac3199", + "fixed_version": "6.1.40" + }, + "6.4": { + "cmt_id": "0a2e3f49febda459252f58cec2d659623d582800", + "fixed_version": "6.4.5" + } + }, + "CVE-2023-3812": { + "4.19": { + "cmt_id": "aa815bf32acf560dad63c3dc46bc7b98ca9a9672", + "fixed_version": "4.19.265" + }, + "5.10": { + "cmt_id": "3583826b443a63681deaa855048d3f2b742af47e", + "fixed_version": "5.10.154" + }, + "5.15": { + "cmt_id": "dcc79cf735b8ec4bedaa82c53bed8c62721c042b", + "fixed_version": "5.15.78" + }, + "5.4": { + "cmt_id": "ca791952d42c5b40d548ff6c4a879216039b0ca1", + "fixed_version": "5.4.224" + }, + "6.0": { + "cmt_id": "d24ba55946e6bdcfacae989638621d7728ee0ec8", + "fixed_version": "6.0.8" + } + }, "CVE-2023-38409": { "6.1": { "cmt_id": "b15df140fe092c3ac28dab32c6b3acdda1a93c63", @@ -39168,6 +39406,10 @@ } }, "CVE-2023-38432": { + "5.15": { + "cmt_id": "35f450f54dca1519bb24faacd0428db09f89a11f", + "fixed_version": "5.15.121" + }, "6.1": { "cmt_id": "9650cf70ec9d94ff34daa088b643229231723c26", "fixed_version": "6.1.36" @@ -39175,6 +39417,36 @@ "6.3": { "cmt_id": "768caf4019f0391c0b6452afe34cea1704133f7b", "fixed_version": "6.3.10" + }, + "6.4": { + "cmt_id": "2b9b8f3b68edb3d67d79962f02e26dbb5ae3808d", + "fixed_version": "6.4" + } + }, + "CVE-2023-3863": { + "5.10": { + "cmt_id": "96f2c6f272ec04083d828de46285a7d7b17d1aad", + "fixed_version": "5.10.188" + }, + "5.15": { + "cmt_id": "fc8429f8d86801f092fbfbd257c3af821ac0dcd3", + "fixed_version": "5.15.121" + }, + "5.4": { + "cmt_id": "dd6ff3f3862709ab1a12566e73b9d6a9b8f6e548", + "fixed_version": "5.4.251" + }, + "6.1": { + "cmt_id": "425d9d3a92df7d96b3cfb7ee5c240293a21cbde3", + "fixed_version": "6.1.39" + }, + "6.3": { + "cmt_id": "b3ad46e155a6d91b36c6e892019a43e3ef3c696d", + "fixed_version": "6.3.13" + }, + "6.4": { + "cmt_id": "e5207c1d69b1a9707615ab6ff9376e59fc096815", + "fixed_version": "6.4.4" } } } \ No newline at end of file
diff --git a/kern.json b/kern.json index 184800f..1155cb0 100644 --- a/kern.json +++ b/kern.json
@@ -4,5 +4,5 @@ "4.7", "4.3", "4.20", "5.0", "4.18", "5.1", "5.2", "5.3", "5.6", "5.5", "5.7", "5.9", "5.8", "5.9", "5.11", "5.12", "5.13", "5.14", "5.15", "5.16", "5.17", "5.18", "5.19", "4.4", "4.9", "6.0", "6.2"], - "supp_streams": ["4.14", "4.19", "5.4", "5.10", "5.15", "6.1", "6.3"] + "supp_streams": ["4.14", "4.19", "5.4", "5.10", "5.15", "6.1", "6.3", "6.4"] }