Voozh

lists.openwall.net

lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

linux-cve-announce mailing list

	Jan	Feb	Mar	Apr	May	Jun	Jul	Aug	Sep	Oct	Nov	Dec
2026	263	225	182	393	1019	523
2025	258	944	232	295	607	415	406	193	764	673	109	1097
2024	292	270	387	1203	323	465	323	287	438	283	381

Recent messages:

2026/06/26 #48: CVE-2026-53316: drm/amd/ras: Fix NULL deref in ras_core_ras_interrupt_detected() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2026/06/26 #47: CVE-2026-53324: net: mana: Use pci_name() for debugfs directory naming (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2026/06/26 #46: CVE-2026-53323: net: dsa: remove redundant netdev_lock_ops() from conduit ethtool ops (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2026/06/26 #45: CVE-2026-53322: vfio/pci: Clean up DMABUFs before disabling function (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2026/06/26 #44: CVE-2026-53321: io_uring/napi: cap busy_poll_to 10 msec (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2026/06/26 #43: CVE-2026-53320: nilfs2: reject zero bd_oblocknr in nilfs_ioctl_mark_blocks_dirty() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2026/06/26 #42: CVE-2026-53319: blk-wbt: remove WARN_ON_ONCE from wbt_init_enable_default() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2026/06/26 #41: CVE-2026-53318: wifi: mt76: mt7925: prevent NULL pointer dereference in mt7925_tx_check_aggr() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2026/06/26 #40: CVE-2026-53317: wifi: mt76: mt7921: Place upper limit on station AID (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2026/06/26 #39: CVE-2026-53287: audit: fix incorrect inheritable capability in CAPSET records (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2026/06/26 #38: CVE-2026-53286: idpf: fix double free and use-after-free in aux device error paths (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2026/06/26 #37: CVE-2026-53285: drm/amd/display: Wrap DCN32 phantom-plane allocation in DC_RUN_WITH_PREEMPTION_ENABLED (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2026/06/26 #36: CVE-2026-53284: btrfs: only release the dirty pages io tree after successful writes (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2026/06/26 #35: CVE-2026-53283: iommu/amd: Bounds-check devid in __rlookup_amd_iommu() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2026/06/26 #34: CVE-2026-53282: x86/kexec: Push kjump return address even for non-kjump kexec (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2026/06/26 #33: CVE-2026-53315: drm/amd/ras: Fix NULL deref in ras_core_get_utc_second_timestamp() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2026/06/26 #32: CVE-2026-53314: padata: Put CPU offline callback in ONLINE section to allow failure (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2026/06/26 #31: CVE-2026-53313: drm/amd/display: Avoid NULL dereference in dc_dmub_srv error paths (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2026/06/26 #30: CVE-2026-53312: iommu/riscv: Remove overflows on the invalidation path (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2026/06/26 #29: CVE-2026-53311: fuse: fix uninit-value in fuse_dentry_revalidate() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2026/06/26 #28: CVE-2026-53310: soc/tegra: cbb: Fix cross-fabric target timeout lookup (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2026/06/26 #27: CVE-2026-53309: ocfs2/dlm: fix off-by-one in dlm_match_regions() region comparison (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2026/06/26 #26: CVE-2026-53308: power: supply: max77705: Free allocated workqueue and fix removal order (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2026/06/26 #25: CVE-2026-53281: iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2026/06/26 #24: CVE-2026-53307: pinctrl: pinconf-generic: Fully validate 'pinmux' property (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2026/06/26 #23: CVE-2026-53306: tty: hvc_iucv: fix off-by-one in number of supported devices (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2026/06/26 #22: CVE-2026-53305: usb: typec: ps883x: Fix Oops at unbind (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2026/06/26 #21: CVE-2026-53304: scsi: sg: Resolve soft lockup issue when opening /dev/sgX (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2026/06/26 #20: CVE-2026-53303: f2fs: protect extension_list reading with sb_lock in f2fs_sbi_show() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2026/06/26 #19: CVE-2026-53302: crypto: eip93 - fix hmac setkey algo selection (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2026/06/26 #18: CVE-2026-53301: reset: amlogic: t7: Fix null reset ops (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2026/06/26 #17: CVE-2026-53300: net: enetc: fix NTMP DMA use-after-free issue (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2026/06/26 #16: CVE-2026-53299: net: airoha: Move ndesc initialization at end of airoha_qdma_init_tx() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2026/06/26 #15: CVE-2026-53298: net: airoha: Move ndesc initialization at end of airoha_qdma_init_rx_queue() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2026/06/26 #14: CVE-2026-53280: iommu: Fix NULL group->domain dereference in pci_dev_reset_iommu_done() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2026/06/26 #13: CVE-2026-53297: net: mana: Guard mana_remove against double invocation (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2026/06/26 #12: CVE-2026-53296: mailbox: mailbox-test: free channels on probe error (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2026/06/26 #11: CVE-2026-53295: mailbox: add sanity check for channel array (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2026/06/26 #10: CVE-2026-53294: mailbox: mailbox-test: don't free the reused channel (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2026/06/26 #9: CVE-2026-53293: drm/amdgpu: fix AMDGPU_INFO_READ_MMR_REG (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2026/06/26 #8: CVE-2026-53292: net: phonet: do not BUG_ON() in pn_socket_autobind() on failed bind (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2026/06/26 #7: CVE-2026-53291: ALSA: hda/conexant: Fix missing error check for jack detection (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2026/06/26 #6: CVE-2026-53288: arm64: Reserve an extra page for early kernel mapping (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2026/06/26 #5: CVE-2026-53290: drm/xe/eustall: Fix drm_dev_put called before stream disable in close (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2026/06/26 #4: CVE-2026-53289: ice: fix NULL pointer dereference in ice_reset_all_vfs() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2026/06/26 #3: CVE-2026-53288: arm64: Reserve an extra page for early kernel mapping (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2026/06/26 #2: CVE-2026-53278: arm_mpam: Check whether the config array is allocated before destroying it (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2026/06/26 #1: CVE-2026-53279: drm/gma500/oaktrail_lvds: fix hang on init failure (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2026/06/25 #147: CVE-2026-53258: wifi: fix leak if split 6 GHz scanning fails (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2026/06/25 #146: CVE-2026-53255: Bluetooth: MGMT: validate advertising TLV before type checks (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2026/06/25 #145: CVE-2026-53253: Bluetooth: bnep: reject short frames before parsing (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2026/06/25 #144: CVE-2026-53248: net: airoha: Fix use-after-free in metadata dst teardown (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2026/06/25 #143: CVE-2026-53228: ipv6: sit: reload inner IPv6 header after GSO offloads (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2026/06/25 #142: CVE-2026-53263: 6lowpan: fix off-by-one in multicast context address compression (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2026/06/25 #141: CVE-2026-53262: l2tp: pppol2tp: hold reference to session in pppol2tp_ioctl() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2026/06/25 #140: CVE-2026-53271: ksmbd: fix NULL-deref of opinfo->conn in oplock/lease break notifiers (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2026/06/25 #139: CVE-2026-53270: ipvs: clear the svc scheduler ptr early on edit (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2026/06/25 #138: CVE-2026-53269: netfilter: synproxy: add mutex to guard hook reference counting (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2026/06/25 #137: CVE-2026-53260: tcp: Add preempt_{disable,enable}_nested() in reqsk_queue_hash_req(). (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2026/06/25 #136: CVE-2026-53225: sctp: fix uninit-value in __sctp_rcv_asconf_lookup() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2026/06/25 #135: CVE-2026-53233: netdev: fix double-free in netdev_nl_bind_rx_doit() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2026/06/25 #134: CVE-2026-53244: VFS: fix possible failure to unlock in nfsd4_create_file() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2026/06/25 #133: CVE-2026-53230: net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2026/06/25 #132: CVE-2026-53257: wifi: cfg80211: enforce HE/EHT cap/oper consistency (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2026/06/25 #131: CVE-2026-53239: xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2026/06/25 #130: CVE-2026-53254: Bluetooth: RFCOMM: validate skb length in MCC handlers (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2026/06/25 #129: CVE-2026-53251: Bluetooth: ISO: Fix not releasing hdev reference on iso_conn_big_sync (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2026/06/25 #128: CVE-2026-53250: xsk: cache csum_start/csum_offset to fix TOCTOU in xsk_skb_metadata() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2026/06/25 #127: CVE-2026-53249: ipv4: restrict IPOPT_SSRR and IPOPT_LSRR options (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2026/06/25 #126: CVE-2026-53259: ipv6: anycast: insert aca into global hash under idev->lock (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2026/06/25 #125: CVE-2026-53268: netfilter: conntrack_irc: fix possible out-of-bounds read (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2026/06/25 #124: CVE-2026-53267: netfilter: nft_ct: bail out on template ct in get eval (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2026/06/25 #123: CVE-2026-53266: netfilter: bridge: make ebt_snat ARP rewrite writable (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2026/06/25 #122: CVE-2026-53265: dm cache policy smq: check allocation under invalidate lock (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2026/06/25 #121: CVE-2026-53264: net/sched: act_api: use RCU with deferred freeing for action lifecycle (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2026/06/25 #120: CVE-2026-53261: devlink: Release nested relation on devlink free (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2026/06/25 #119: CVE-2026-53247: net: ethernet: mtk_eth_soc: Fix use-after-free in metadata dst teardown (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2026/06/25 #118: CVE-2026-53277: KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2026/06/25 #117: CVE-2026-53276: Bluetooth: ISO: Fix a use-after-free of the hci_conn pointer (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2026/06/25 #116: CVE-2026-53275: ipv6: mcast: Fix use-after-free when processing MLD queries (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2026/06/25 #115: CVE-2026-53274: net/smc: fix sleep-inside-lock in __smc_setsockopt() causing local DoS (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2026/06/25 #114: CVE-2026-53273: tee: optee: prevent use-after-free when the client exits before the supplicant (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2026/06/25 #113: CVE-2026-53272: erofs: fix use-after-free on sbi->sync_decompress (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2026/06/25 #112: CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2026/06/25 #111: CVE-2026-53231: net: phy: don't try to setup PHY-driven SFP cages when using genphy (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2026/06/25 #110: CVE-2026-53234: net: ibm: emac: Fix use-after-free during device removal (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2026/06/25 #109: CVE-2026-53232: net: phy: clean the sfp upstream if phy probing fails (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2026/06/25 #108: CVE-2026-53229: net/mlx5e: xsk: Fix DMA and xdp_frame leak on XDP_TX xmit failure (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2026/06/25 #107: CVE-2026-53256: Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2026/06/25 #106: CVE-2026-53252: Bluetooth: fix memory leak in error path of hci_alloc_dev() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2026/06/25 #105: CVE-2026-53227: net: openvswitch: fix possible kfree_skb of ERR_PTR (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2026/06/25 #104: CVE-2026-53245: net/802/mrp: fix vector attribute parsing in mrp_pdu_parse_vecattr (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2026/06/25 #103: CVE-2026-53243: rseq: Fix using an uninitialized stack variable in rseq_exit_user_update() (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2026/06/25 #102: CVE-2026-53242: ALSA: PCM: Fix wait queue list corruption in snd_pcm_drain() on linked streams (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2026/06/25 #101: CVE-2026-53241: ALSA: seq: dummy: fix UMP event stack overread (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2026/06/25 #100: CVE-2026-53240: xfrm: iptfs: fix use-after-free on first_skb in __input_process_payload (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2026/06/25 #99: CVE-2026-53238: netlabel: validate unlabeled address and mask attribute lengths (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2026/06/25 #98: CVE-2026-53211: netfilter: nft_meta_bridge: fix stale stack leak via IIFHWADDR register (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2026/06/25 #97: CVE-2026-53237: gpio: mvebu: fix NULL pointer dereference in suspend/resume (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
2026/06/25 #96: CVE-2026-53236: tcp: restrict SO_ATTACH_FILTER to priv users (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)

13250 messages

URL: https://lists.openwall.net/linux-cve-announce/

⇱ linux-cve-announce mailing list

linux-cve-announce mailing list