Skip to content
This repository has been archived by the owner on May 2, 2024. It is now read-only.

Commit

Permalink
Update 15Jan24
Browse files Browse the repository at this point in the history
  • Loading branch information
@nluedtke
nluedtke committed Jan 15, 2024
1 parent d22c3fe commit 0b24fc7
Show file tree
Hide file tree
Showing 110 changed files with 851 additions and 942 deletions.
47 changes: 7 additions & 40 deletions CHANGES.md
View file
Original file line number Diff line number Diff line change
@@ -1,58 +1,25 @@

# **Linux Kernel CVE Changes**

## Last Update - 12Jan24 17:39
## Last Update - 15Jan24 09:35

### **New CVEs Added:**

[CVE-2023-6040](cves/CVE-2023-6040)
[CVE-2023-6270](cves/CVE-2023-6270)
[CVE-2023-6531](cves/CVE-2023-6531)
[CVE-2023-7192](cves/CVE-2023-7192)
[CVE-2024-0193](cves/CVE-2024-0193)
[CVE-2024-0340](cves/CVE-2024-0340)
[CVE-2024-0443](cves/CVE-2024-0443)
[CVE-2022-48619](cves/CVE-2022-48619)
[CVE-2023-1476](cves/CVE-2023-1476)


### **New Versions Checked:**

[4.14.336](streams/4.14)
[4.19.304](streams/4.19)
[5.10.206](streams/5.10)
[5.15.146](streams/5.15)
[5.4.266](streams/5.4)
[6.1.72](streams/6.1)
[6.6.11](streams/6.6)
[6.7](streams/6.7)
[5.10.207](streams/5.10)


### **Updated CVEs:**

[CVE-2022-1508](cves/CVE-2022-1508)
[CVE-2022-1786](cves/CVE-2022-1786)
[CVE-2022-2327](cves/CVE-2022-2327)
[CVE-2023-1193](cves/CVE-2023-1193)
[CVE-2023-2430](cves/CVE-2023-2430)
[CVE-2023-39198](cves/CVE-2023-39198)
[CVE-2023-50431](cves/CVE-2023-50431)
[CVE-2023-51779](cves/CVE-2023-51779)
[CVE-2023-51780](cves/CVE-2023-51780)
[CVE-2023-51781](cves/CVE-2023-51781)
[CVE-2023-6121](cves/CVE-2023-6121)
[CVE-2023-6546](cves/CVE-2023-6546)
[CVE-2023-6560](cves/CVE-2023-6560)
[CVE-2023-6606](cves/CVE-2023-6606)
[CVE-2023-6610](cves/CVE-2023-6610)
[CVE-2023-6679](cves/CVE-2023-6679)
[CVE-2023-6932](cves/CVE-2023-6932)
[CVE-2023-7042](cves/CVE-2023-7042)
[CVE-2021-3600](cves/CVE-2021-3600)
[CVE-2022-2585](cves/CVE-2022-2585)
[CVE-2022-2586](cves/CVE-2022-2586)
[CVE-2022-2588](cves/CVE-2022-2588)
[CVE-2022-2602](cves/CVE-2022-2602)
[CVE-2023-1032](cves/CVE-2023-1032)
[CVE-2023-33952](cves/CVE-2023-33952)
[CVE-2023-34324](cves/CVE-2023-34324)
[CVE-2023-4610](cves/CVE-2023-4610)
[CVE-2023-4732](cves/CVE-2023-4732)
[CVE-2023-51782](cves/CVE-2023-51782)
[CVE-2023-6931](cves/CVE-2023-6931)
[CVE-2024-0193](cves/CVE-2024-0193)
6 changes: 2 additions & 4 deletions data/3.12/3.12_CVEs.txt
View file
Original file line number Diff line number Diff line change
Expand Up @@ -1231,6 +1231,7 @@ CVE-2022-45919: Fix not seen in stream
CVE-2022-45934: Fix not seen in stream
CVE-2022-4662: Fix not seen in stream
CVE-2022-4744: Fix not seen in stream
CVE-2022-48619: Fix not seen in stream
CVE-2023-0030: Fix not seen in stream
CVE-2023-0047: Fix not seen in stream
CVE-2023-0266: Fix not seen in stream
Expand All @@ -1247,6 +1248,7 @@ CVE-2023-1206: Fix not seen in stream
CVE-2023-1249: Fix not seen in stream
CVE-2023-1380: Fix not seen in stream
CVE-2023-1382: Fix not seen in stream
CVE-2023-1476: Fix unknown
CVE-2023-1513: Fix not seen in stream
CVE-2023-1611: Fix not seen in stream
CVE-2023-1670: Fix not seen in stream
Expand Down Expand Up @@ -1320,10 +1322,8 @@ CVE-2023-4459: Fix not seen in stream
CVE-2023-45862: Fix not seen in stream
CVE-2023-45863: Fix not seen in stream
CVE-2023-45871: Fix not seen in stream
CVE-2023-4610: Fix not seen in stream
CVE-2023-4623: Fix not seen in stream
CVE-2023-47233: Fix unknown
CVE-2023-4732: Fix not seen in stream
CVE-2023-4921: Fix not seen in stream
CVE-2023-51779: Fix not seen in stream
CVE-2023-5178: Fix not seen in stream
Expand All @@ -1340,9 +1340,7 @@ CVE-2023-6606: Fix not seen in stream
CVE-2023-6610: Fix not seen in stream
CVE-2023-6622: Fix not seen in stream
CVE-2023-6817: Fix not seen in stream
CVE-2023-6931: Fix not seen in stream
CVE-2023-6932: Fix not seen in stream
CVE-2023-7042: Fix unknown
CVE-2023-7192: Fix not seen in stream
CVE-2024-0193: Fix not seen in stream
CVE-2024-0340: Fix not seen in stream
6 changes: 2 additions & 4 deletions data/3.12/3.12_security.txt
View file
Original file line number Diff line number Diff line change
Expand Up @@ -1369,6 +1369,7 @@ Outstanding CVEs:
CVE-2022-45934: (unk) Bluetooth: L2CAP: Fix u8 overflow
CVE-2022-4662: (unk) USB: core: Prevent nested device-reset calls
CVE-2022-4744: (unk) tun: avoid double free in tun_free_netdev
CVE-2022-48619: (unk) Input: add bounds checking to input_set_capability()
CVE-2023-0030: (unk) drm/nouveau/mmu: add more general vmm free/node handling functions
CVE-2023-0047: (unk) mm, oom: do not trigger out_of_memory from the #PF
CVE-2023-0266: (unk) ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF
Expand All @@ -1385,6 +1386,7 @@ Outstanding CVEs:
CVE-2023-1249: (unk) coredump: Use the vma snapshot in fill_files_note
CVE-2023-1380: (unk) wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
CVE-2023-1382: (unk) tipc: set con sock in tipc_conn_alloc
CVE-2023-1476: (unk)
CVE-2023-1513: (unk) kvm: initialize all of the kvm_debugregs structure before sending it to userspace
CVE-2023-1611: (unk) btrfs: fix race between quota disable and quota assign ioctls
CVE-2023-1670: (unk) xirc2ps_cs: Fix use after free bug in xirc2ps_detach
Expand Down Expand Up @@ -1458,10 +1460,8 @@ Outstanding CVEs:
CVE-2023-45862: (unk) USB: ene_usb6250: Allocate enough memory for full object
CVE-2023-45863: (unk) kobject: Fix slab-out-of-bounds in fill_kobj_path()
CVE-2023-45871: (unk) igb: set max size RX buffer when store bad packet is enabled
CVE-2023-4610: (unk) Revert "mm: vmscan: make global slab shrink lockless"
CVE-2023-4623: (unk) net/sched: sch_hfsc: Ensure inner classes have fsc curve
CVE-2023-47233: (unk)
CVE-2023-4732: (unk) mm/userfaultfd: fix uffd-wp special cases for fork()
CVE-2023-4921: (unk) net: sched: sch_qfq: Fix UAF in qfq_dequeue()
CVE-2023-51779: (unk) Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
CVE-2023-5178: (unk) nvmet-tcp: Fix a possible UAF in queue intialization setup
Expand All @@ -1478,9 +1478,7 @@ Outstanding CVEs:
CVE-2023-6610: (unk) smb: client: fix potential OOB in smb2_dump_detail()
CVE-2023-6622: (unk) netfilter: nf_tables: bail out on mismatching dynset and set expressions
CVE-2023-6817: (unk) netfilter: nft_set_pipapo: skip inactive elements during set walk
CVE-2023-6931: (unk) perf: Fix perf_event_validate_size()
CVE-2023-6932: (unk) ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
CVE-2023-7042: (unk)
CVE-2023-7192: (unk) netfilter: ctnetlink: fix possible refcount leak in ctnetlink_create_conntrack()
CVE-2024-0193: (unk) netfilter: nf_tables: skip set commit for deleted/destroyed sets
CVE-2024-0340: (unk) vhost: use kzalloc() instead of kmalloc() followed by memset()
6 changes: 2 additions & 4 deletions data/3.14/3.14_CVEs.txt
View file
Original file line number Diff line number Diff line change
Expand Up @@ -1200,6 +1200,7 @@ CVE-2022-45919: Fix not seen in stream
CVE-2022-45934: Fix not seen in stream
CVE-2022-4662: Fix not seen in stream
CVE-2022-4744: Fix not seen in stream
CVE-2022-48619: Fix not seen in stream
CVE-2023-0030: Fix not seen in stream
CVE-2023-0047: Fix not seen in stream
CVE-2023-0266: Fix not seen in stream
Expand All @@ -1216,6 +1217,7 @@ CVE-2023-1206: Fix not seen in stream
CVE-2023-1249: Fix not seen in stream
CVE-2023-1380: Fix not seen in stream
CVE-2023-1382: Fix not seen in stream
CVE-2023-1476: Fix unknown
CVE-2023-1513: Fix not seen in stream
CVE-2023-1611: Fix not seen in stream
CVE-2023-1670: Fix not seen in stream
Expand Down Expand Up @@ -1290,10 +1292,8 @@ CVE-2023-4459: Fix not seen in stream
CVE-2023-45862: Fix not seen in stream
CVE-2023-45863: Fix not seen in stream
CVE-2023-45871: Fix not seen in stream
CVE-2023-4610: Fix not seen in stream
CVE-2023-4623: Fix not seen in stream
CVE-2023-47233: Fix unknown
CVE-2023-4732: Fix not seen in stream
CVE-2023-4921: Fix not seen in stream
CVE-2023-51779: Fix not seen in stream
CVE-2023-5178: Fix not seen in stream
Expand All @@ -1310,9 +1310,7 @@ CVE-2023-6606: Fix not seen in stream
CVE-2023-6610: Fix not seen in stream
CVE-2023-6622: Fix not seen in stream
CVE-2023-6817: Fix not seen in stream
CVE-2023-6931: Fix not seen in stream
CVE-2023-6932: Fix not seen in stream
CVE-2023-7042: Fix unknown
CVE-2023-7192: Fix not seen in stream
CVE-2024-0193: Fix not seen in stream
CVE-2024-0340: Fix not seen in stream
6 changes: 2 additions & 4 deletions data/3.14/3.14_security.txt
View file
Original file line number Diff line number Diff line change
Expand Up @@ -1334,6 +1334,7 @@ Outstanding CVEs:
CVE-2022-45934: (unk) Bluetooth: L2CAP: Fix u8 overflow
CVE-2022-4662: (unk) USB: core: Prevent nested device-reset calls
CVE-2022-4744: (unk) tun: avoid double free in tun_free_netdev
CVE-2022-48619: (unk) Input: add bounds checking to input_set_capability()
CVE-2023-0030: (unk) drm/nouveau/mmu: add more general vmm free/node handling functions
CVE-2023-0047: (unk) mm, oom: do not trigger out_of_memory from the #PF
CVE-2023-0266: (unk) ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF
Expand All @@ -1350,6 +1351,7 @@ Outstanding CVEs:
CVE-2023-1249: (unk) coredump: Use the vma snapshot in fill_files_note
CVE-2023-1380: (unk) wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
CVE-2023-1382: (unk) tipc: set con sock in tipc_conn_alloc
CVE-2023-1476: (unk)
CVE-2023-1513: (unk) kvm: initialize all of the kvm_debugregs structure before sending it to userspace
CVE-2023-1611: (unk) btrfs: fix race between quota disable and quota assign ioctls
CVE-2023-1670: (unk) xirc2ps_cs: Fix use after free bug in xirc2ps_detach
Expand Down Expand Up @@ -1424,10 +1426,8 @@ Outstanding CVEs:
CVE-2023-45862: (unk) USB: ene_usb6250: Allocate enough memory for full object
CVE-2023-45863: (unk) kobject: Fix slab-out-of-bounds in fill_kobj_path()
CVE-2023-45871: (unk) igb: set max size RX buffer when store bad packet is enabled
CVE-2023-4610: (unk) Revert "mm: vmscan: make global slab shrink lockless"
CVE-2023-4623: (unk) net/sched: sch_hfsc: Ensure inner classes have fsc curve
CVE-2023-47233: (unk)
CVE-2023-4732: (unk) mm/userfaultfd: fix uffd-wp special cases for fork()
CVE-2023-4921: (unk) net: sched: sch_qfq: Fix UAF in qfq_dequeue()
CVE-2023-51779: (unk) Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
CVE-2023-5178: (unk) nvmet-tcp: Fix a possible UAF in queue intialization setup
Expand All @@ -1444,9 +1444,7 @@ Outstanding CVEs:
CVE-2023-6610: (unk) smb: client: fix potential OOB in smb2_dump_detail()
CVE-2023-6622: (unk) netfilter: nf_tables: bail out on mismatching dynset and set expressions
CVE-2023-6817: (unk) netfilter: nft_set_pipapo: skip inactive elements during set walk
CVE-2023-6931: (unk) perf: Fix perf_event_validate_size()
CVE-2023-6932: (unk) ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
CVE-2023-7042: (unk)
CVE-2023-7192: (unk) netfilter: ctnetlink: fix possible refcount leak in ctnetlink_create_conntrack()
CVE-2024-0193: (unk) netfilter: nf_tables: skip set commit for deleted/destroyed sets
CVE-2024-0340: (unk) vhost: use kzalloc() instead of kmalloc() followed by memset()
6 changes: 2 additions & 4 deletions data/3.16/3.16_CVEs.txt
View file
Original file line number Diff line number Diff line change
Expand Up @@ -1186,6 +1186,7 @@ CVE-2022-45919: Fix not seen in stream
CVE-2022-45934: Fix not seen in stream
CVE-2022-4662: Fix not seen in stream
CVE-2022-4744: Fix not seen in stream
CVE-2022-48619: Fix not seen in stream
CVE-2023-0030: Fix not seen in stream
CVE-2023-0047: Fix not seen in stream
CVE-2023-0266: Fix not seen in stream
Expand All @@ -1204,6 +1205,7 @@ CVE-2023-1206: Fix not seen in stream
CVE-2023-1249: Fix not seen in stream
CVE-2023-1380: Fix not seen in stream
CVE-2023-1382: Fix not seen in stream
CVE-2023-1476: Fix unknown
CVE-2023-1513: Fix not seen in stream
CVE-2023-1611: Fix not seen in stream
CVE-2023-1670: Fix not seen in stream
Expand Down Expand Up @@ -1282,10 +1284,8 @@ CVE-2023-4459: Fix not seen in stream
CVE-2023-45862: Fix not seen in stream
CVE-2023-45863: Fix not seen in stream
CVE-2023-45871: Fix not seen in stream
CVE-2023-4610: Fix not seen in stream
CVE-2023-4623: Fix not seen in stream
CVE-2023-47233: Fix unknown
CVE-2023-4732: Fix not seen in stream
CVE-2023-4921: Fix not seen in stream
CVE-2023-51779: Fix not seen in stream
CVE-2023-5178: Fix not seen in stream
Expand All @@ -1302,9 +1302,7 @@ CVE-2023-6606: Fix not seen in stream
CVE-2023-6610: Fix not seen in stream
CVE-2023-6622: Fix not seen in stream
CVE-2023-6817: Fix not seen in stream
CVE-2023-6931: Fix not seen in stream
CVE-2023-6932: Fix not seen in stream
CVE-2023-7042: Fix unknown
CVE-2023-7192: Fix not seen in stream
CVE-2024-0193: Fix not seen in stream
CVE-2024-0340: Fix not seen in stream
6 changes: 2 additions & 4 deletions data/3.16/3.16_security.txt
View file
Original file line number Diff line number Diff line change
Expand Up @@ -1293,6 +1293,7 @@ Outstanding CVEs:
CVE-2022-45934: (unk) Bluetooth: L2CAP: Fix u8 overflow
CVE-2022-4662: (unk) USB: core: Prevent nested device-reset calls
CVE-2022-4744: (unk) tun: avoid double free in tun_free_netdev
CVE-2022-48619: (unk) Input: add bounds checking to input_set_capability()
CVE-2023-0030: (unk) drm/nouveau/mmu: add more general vmm free/node handling functions
CVE-2023-0047: (unk) mm, oom: do not trigger out_of_memory from the #PF
CVE-2023-0266: (unk) ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF
Expand All @@ -1311,6 +1312,7 @@ Outstanding CVEs:
CVE-2023-1249: (unk) coredump: Use the vma snapshot in fill_files_note
CVE-2023-1380: (unk) wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
CVE-2023-1382: (unk) tipc: set con sock in tipc_conn_alloc
CVE-2023-1476: (unk)
CVE-2023-1513: (unk) kvm: initialize all of the kvm_debugregs structure before sending it to userspace
CVE-2023-1611: (unk) btrfs: fix race between quota disable and quota assign ioctls
CVE-2023-1670: (unk) xirc2ps_cs: Fix use after free bug in xirc2ps_detach
Expand Down Expand Up @@ -1388,10 +1390,8 @@ Outstanding CVEs:
CVE-2023-45862: (unk) USB: ene_usb6250: Allocate enough memory for full object
CVE-2023-45863: (unk) kobject: Fix slab-out-of-bounds in fill_kobj_path()
CVE-2023-45871: (unk) igb: set max size RX buffer when store bad packet is enabled
CVE-2023-4610: (unk) Revert "mm: vmscan: make global slab shrink lockless"
CVE-2023-4623: (unk) net/sched: sch_hfsc: Ensure inner classes have fsc curve
CVE-2023-47233: (unk)
CVE-2023-4732: (unk) mm/userfaultfd: fix uffd-wp special cases for fork()
CVE-2023-4921: (unk) net: sched: sch_qfq: Fix UAF in qfq_dequeue()
CVE-2023-51779: (unk) Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
CVE-2023-5178: (unk) nvmet-tcp: Fix a possible UAF in queue intialization setup
Expand All @@ -1408,9 +1408,7 @@ Outstanding CVEs:
CVE-2023-6610: (unk) smb: client: fix potential OOB in smb2_dump_detail()
CVE-2023-6622: (unk) netfilter: nf_tables: bail out on mismatching dynset and set expressions
CVE-2023-6817: (unk) netfilter: nft_set_pipapo: skip inactive elements during set walk
CVE-2023-6931: (unk) perf: Fix perf_event_validate_size()
CVE-2023-6932: (unk) ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
CVE-2023-7042: (unk)
CVE-2023-7192: (unk) netfilter: ctnetlink: fix possible refcount leak in ctnetlink_create_conntrack()
CVE-2024-0193: (unk) netfilter: nf_tables: skip set commit for deleted/destroyed sets
CVE-2024-0340: (unk) vhost: use kzalloc() instead of kmalloc() followed by memset()
6 changes: 2 additions & 4 deletions data/3.18/3.18_CVEs.txt
View file
Original file line number Diff line number Diff line change
Expand Up @@ -1171,6 +1171,7 @@ CVE-2022-45919: Fix not seen in stream
CVE-2022-45934: Fix not seen in stream
CVE-2022-4662: Fix not seen in stream
CVE-2022-4744: Fix not seen in stream
CVE-2022-48619: Fix not seen in stream
CVE-2023-0030: Fix not seen in stream
CVE-2023-0047: Fix not seen in stream
CVE-2023-0266: Fix not seen in stream
Expand All @@ -1190,6 +1191,7 @@ CVE-2023-1206: Fix not seen in stream
CVE-2023-1249: Fix not seen in stream
CVE-2023-1380: Fix not seen in stream
CVE-2023-1382: Fix not seen in stream
CVE-2023-1476: Fix unknown
CVE-2023-1513: Fix not seen in stream
CVE-2023-1611: Fix not seen in stream
CVE-2023-1670: Fix not seen in stream
Expand Down Expand Up @@ -1273,10 +1275,8 @@ CVE-2023-4459: Fix not seen in stream
CVE-2023-45862: Fix not seen in stream
CVE-2023-45863: Fix not seen in stream
CVE-2023-45871: Fix not seen in stream
CVE-2023-4610: Fix not seen in stream
CVE-2023-4623: Fix not seen in stream
CVE-2023-47233: Fix unknown
CVE-2023-4732: Fix not seen in stream
CVE-2023-4921: Fix not seen in stream
CVE-2023-51779: Fix not seen in stream
CVE-2023-5178: Fix not seen in stream
Expand All @@ -1293,9 +1293,7 @@ CVE-2023-6606: Fix not seen in stream
CVE-2023-6610: Fix not seen in stream
CVE-2023-6622: Fix not seen in stream
CVE-2023-6817: Fix not seen in stream
CVE-2023-6931: Fix not seen in stream
CVE-2023-6932: Fix not seen in stream
CVE-2023-7042: Fix unknown
CVE-2023-7192: Fix not seen in stream
CVE-2024-0193: Fix not seen in stream
CVE-2024-0340: Fix not seen in stream
6 changes: 2 additions & 4 deletions data/3.18/3.18_security.txt
View file
Original file line number Diff line number Diff line change
Expand Up @@ -1407,6 +1407,7 @@ Outstanding CVEs:
CVE-2022-45934: (unk) Bluetooth: L2CAP: Fix u8 overflow
CVE-2022-4662: (unk) USB: core: Prevent nested device-reset calls
CVE-2022-4744: (unk) tun: avoid double free in tun_free_netdev
CVE-2022-48619: (unk) Input: add bounds checking to input_set_capability()
CVE-2023-0030: (unk) drm/nouveau/mmu: add more general vmm free/node handling functions
CVE-2023-0047: (unk) mm, oom: do not trigger out_of_memory from the #PF
CVE-2023-0266: (unk) ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF
Expand All @@ -1426,6 +1427,7 @@ Outstanding CVEs:
CVE-2023-1249: (unk) coredump: Use the vma snapshot in fill_files_note
CVE-2023-1380: (unk) wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
CVE-2023-1382: (unk) tipc: set con sock in tipc_conn_alloc
CVE-2023-1476: (unk)
CVE-2023-1513: (unk) kvm: initialize all of the kvm_debugregs structure before sending it to userspace
CVE-2023-1611: (unk) btrfs: fix race between quota disable and quota assign ioctls
CVE-2023-1670: (unk) xirc2ps_cs: Fix use after free bug in xirc2ps_detach
Expand Down Expand Up @@ -1509,10 +1511,8 @@ Outstanding CVEs:
CVE-2023-45862: (unk) USB: ene_usb6250: Allocate enough memory for full object
CVE-2023-45863: (unk) kobject: Fix slab-out-of-bounds in fill_kobj_path()
CVE-2023-45871: (unk) igb: set max size RX buffer when store bad packet is enabled
CVE-2023-4610: (unk) Revert "mm: vmscan: make global slab shrink lockless"
CVE-2023-4623: (unk) net/sched: sch_hfsc: Ensure inner classes have fsc curve
CVE-2023-47233: (unk)
CVE-2023-4732: (unk) mm/userfaultfd: fix uffd-wp special cases for fork()
CVE-2023-4921: (unk) net: sched: sch_qfq: Fix UAF in qfq_dequeue()
CVE-2023-51779: (unk) Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
CVE-2023-5178: (unk) nvmet-tcp: Fix a possible UAF in queue intialization setup
Expand All @@ -1529,9 +1529,7 @@ Outstanding CVEs:
CVE-2023-6610: (unk) smb: client: fix potential OOB in smb2_dump_detail()
CVE-2023-6622: (unk) netfilter: nf_tables: bail out on mismatching dynset and set expressions
CVE-2023-6817: (unk) netfilter: nft_set_pipapo: skip inactive elements during set walk
CVE-2023-6931: (unk) perf: Fix perf_event_validate_size()
CVE-2023-6932: (unk) ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
CVE-2023-7042: (unk)
CVE-2023-7192: (unk) netfilter: ctnetlink: fix possible refcount leak in ctnetlink_create_conntrack()
CVE-2024-0193: (unk) netfilter: nf_tables: skip set commit for deleted/destroyed sets
CVE-2024-0340: (unk) vhost: use kzalloc() instead of kmalloc() followed by memset()
6 changes: 2 additions & 4 deletions data/3.2/3.2_CVEs.txt
View file
Original file line number Diff line number Diff line change
Expand Up @@ -1203,6 +1203,7 @@ CVE-2022-45919: Fix not seen in stream
CVE-2022-45934: Fix not seen in stream
CVE-2022-4662: Fix not seen in stream
CVE-2022-4744: Fix not seen in stream
CVE-2022-48619: Fix not seen in stream
CVE-2023-0030: Fix not seen in stream
CVE-2023-0047: Fix not seen in stream
CVE-2023-0266: Fix not seen in stream
Expand All @@ -1217,6 +1218,7 @@ CVE-2023-1077: Fix not seen in stream
CVE-2023-1118: Fix not seen in stream
CVE-2023-1206: Fix not seen in stream
CVE-2023-1380: Fix not seen in stream
CVE-2023-1476: Fix unknown
CVE-2023-1513: Fix not seen in stream
CVE-2023-1611: Fix not seen in stream
CVE-2023-1670: Fix not seen in stream
Expand Down Expand Up @@ -1282,10 +1284,8 @@ CVE-2023-4385: Fix not seen in stream
CVE-2023-4459: Fix not seen in stream
CVE-2023-45862: Fix not seen in stream
CVE-2023-45863: Fix not seen in stream
CVE-2023-4610: Fix not seen in stream
CVE-2023-4623: Fix not seen in stream
CVE-2023-47233: Fix unknown
CVE-2023-4732: Fix not seen in stream
CVE-2023-51779: Fix not seen in stream
CVE-2023-5178: Fix not seen in stream
CVE-2023-51780: Fix not seen in stream
Expand All @@ -1301,7 +1301,5 @@ CVE-2023-6606: Fix not seen in stream
CVE-2023-6610: Fix not seen in stream
CVE-2023-6622: Fix not seen in stream
CVE-2023-6817: Fix not seen in stream
CVE-2023-6931: Fix not seen in stream
CVE-2023-6932: Fix not seen in stream
CVE-2024-0193: Fix not seen in stream
CVE-2024-0340: Fix not seen in stream
Loading

0 comments on commit 0b24fc7

Please sign in to comment.