kernel 发行版 - Gitee.com

2024-05-29 09:29 4.19.90-2405.5.0 5dac66d

# 1TASK
-------
# 4.19.90-2405.4.0~1...4.19.90-2405.5.0
-------
| TASK | COMMIT |
|:----:|:------:|
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9RFET | 48dbe0ca04ac drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7 |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9RE4X | 181a46bb998e drm/amdgpu/debugfs: fix error code when smc register accessors are NULL 1365c38a021d drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9R4C8 | 14ed5f93fbb0 usb: dwc3: ep0: fix NULL pointer exception |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9Q970 | d2ded74ea35b soc: fsl: qbman: Always disable interrupts when taking cgr_lock |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9RE1F | 9181cc5daf25 perf/core: Bail out early if the request AUX area is out of bound |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9R4K2 | 9777b33f24f9 isdn: mISDN: netjet: Fix crash in nj_probe: |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9QRIQ | a39006f37617 xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9QRRC | 1b67ca8a45dd drm/client: Fully protect modes[] with dev->mode_config.mutex |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9RCYN | 8e53829dead7 net/tls: Fix flipped sign in tls_err_abort() calls |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9QG2A | 8aec6aa89dad netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9RB0N | e8ee7b626c70 scsi: qla2xxx: Fix a memory leak in an error path of qla2x00_process_els() |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9QRN6 | 4607a2a9d170 HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9Q8LQ | e40569cb00f6 netfilter: nft_flow_offload: reset dst in route object after setting up flow |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9RD7J | adcd445b71e1 nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells |
| bugzilla: https://gitee.com/openeuler/kernel/issues/I9RZC8 | 5cb5bd378953 sched/rt: Fix rt_runtime leaks with cpu hotplug and RT_RUNTIME_SHARE |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9RBLZ | ed8e2ad18d49 ptp: fix code indentation issues ba15a63e43b3 ptp: Fix possible memory leak in ptp_clock_register() |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9RLZ0 | 21d0fe9fd291 f2fs: fix to avoid racing on fsync_entry_slab by multi filesystem instances |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9QGLA | cfeb3b964e4f scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc() |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9Q9CC | 89859a02fb30 dm snapshot: fix lockup in dm_exception_table_exit |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9RFON | 2e54b5f756c0 media: bttv: fix use after free error due to btv->timeout timer |
| bugzilla: https://gitee.com/openeuler/kernel/issues/I9NZ3E | 0884503efc27 x86/CPU/AMD: Update the Zenbleed microcode revisions 569b7c91553e cpu/SMT: Make SMT control more robust against enumeration failures |
| bugzilla: https://gitee.com/openeuler/kernel/issues/I9PX8J | e5d68e4157aa ip: Treat IPv4 segment's lowest address as unicast |
| bugzilla: https://gitee.com/openeuler/kernel/issues/I9PGWG | d9d7c71afe45 scsi: sr: Do not leak information in ioctl |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9QGIW | 3563b5e0fcc9 fbmon: prevent division by zero in fb_videomode_from_videomode() |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9QG76 | 7ee5278d8467 ipv6: Fix infinite recursion in fib6_dump_done(). |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9R4KL | 6ad42dad603f drm/radeon: fix a possible null pointer dereference |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9Q94J | ea5f79ee6849 netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries |
| bugzilla: https://gitee.com/openeuler/kernel/issues/I9RDP6 | 213fd9067199 Input: synaptics-rmi4 - fix use after free in rmi_unregister_function() |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9RFK5 | e569cd17c375 thermal: core: prevent potential string overflow |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9R4O0 | 1ebdfd512965 hwmon: (mlxreg-fan) Return non-zero value when fan current state is enforced from sysfs |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9Q91I | acd99e6aa3dd netrom: Fix data-races around sysctl_netrom_network_ttl_initialiser |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9Q9IE | 9b0ceca57c93 net/mlx5e: fix a double-free in arfs_create_groups |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9P06W | 789cfaf71bb2 io_uring: drop any code related to SCM_RIGHTS fcba719ae4ff io_uring/unix: drop usage of io_uring socket |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9Q95M | 70274af7103c netrom: Fix a data-race around sysctl_netrom_transport_timeout |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9Q9IJ | 5d10e581be44 drm/amd/pm: fix a double-free in si_dpm_init |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9Q9HX | 8493f3792b57 irqchip/gic-v3-its: Prevent double free on error |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9QGIP | a9c262a39d27 btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks() aa01c355d0d0 btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks() |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9Q9IT | b19dd71d5e1c calipso: fix memory leak in netlbl_calipso_add_pass() 99f82ed3d871 netlabel: remove unused parameter in netlbl_netlink_auditinfo() 78d56f13404f net: netlabel: Fix kerneldoc warnings |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9Q94D | 483eafa7f9e4 netrom: Fix data-races around sysctl_net_busy_read |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9R7JN | 53127d3fb393 drm/radeon: possible buffer overflow |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9QGIK | 8a880bede130 btrfs: send: handle path ref underflow in header iterate_inode_ref() |
# 2CVE
-------
| CVE | issue |
|:---:|:-----:|
| CVE-2021-47269 | #I9R4C8 |
| CVE-2021-47284 | #I9R4K2 |
| CVE-2021-47335 | #I9RLZ0 |
| CVE-2021-47393 | #I9R4O0 |
| CVE-2021-47455 | #I9RBLZ |
| CVE-2021-47473 | #I9RB0N |
| CVE-2021-47496 | #I9RCYN |
| CVE-2021-47497 | #I9RD7J |
| CVE-2022-48710 | #I9R4KL |
| CVE-2023-52656 | #I9P06W |
| CVE-2023-52691 | #I9Q9IJ |
| CVE-2023-52698 | #I9Q9IT |
| CVE-2023-52817 | #I9RE4X |
| CVE-2023-52818 | #I9RFET |
| CVE-2023-52835 | #I9RE1F |
| CVE-2023-52840 | #I9RFE5 |
| CVE-2023-52847 | #I9RFON |
| CVE-2023-52867 | #I9RFL9 |
| CVE-2023-52867 | #I9R7JN |
| CVE-2023-52868 | #I9RFK5 |
| CVE-2024-27403 | #I9Q8LQ |
| CVE-2024-27419 | #I9Q94D |
| CVE-2024-27426 | #I9Q94J |
| CVE-2024-27427 | #I9Q95M |
| CVE-2024-27428 | #I9Q91I |
| CVE-2024-35805 | #I9Q9CC |
| CVE-2024-35806 | #I9Q970 |
| CVE-2024-35835 | #I9Q9IE |
| CVE-2024-35847 | #I9Q9HX |
| CVE-2024-35886 | #I9QG76 |
| CVE-2024-35898 | #I9QG2A |
| CVE-2024-35922 | #I9QGIW |
| CVE-2024-35930 | #I9QGLA |
| CVE-2024-35935 | #I9QGIK |
| CVE-2024-35936 | #I9QGIP |
| CVE-2024-35950 | #I9QRRC |
| CVE-2024-35976 | #I9QRIQ |
| CVE-2024-35997 | #I9QRN6 |

最后提交信息为： !8066 drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7

openEuler 20.03 update 4.19.90-2405.4.0

2024-05-22 10:02 4.19.90-2405.4.0 5796553

# 1TASK
-------
# 4.19.90-2405.3.0~1...4.19.90-2405.4.0
-------
| TASK | COMMIT |
|:----:|:------:|
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9HK0R | 61711948c697 Bluetooth: af_bluetooth: Fix deadlock |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9Q9CF | e5e93595638c ext4: fix corruption during on-line resize |
| bugzilla: https://gitee.com/openeuler/kernel/issues/I9QW75 | 45fb4e58b06c sched/all: Change all BUG_ON() instances in the scheduler to WARN_ON_ONCE() |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9Q9FV | 2e4a725380b9 pstore: ram_core: fix possible overflow in persistent_ram_init_ecc() |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9Q9HO | 91d6f6861aee btrfs: fix information leak in btrfs_ioctl_logical_to_ino() |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9Q9J4 | b497680de9ec powerpc/imc-pmu: Add a null pointer check in update_events_in_group() |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9OZA3 | 6e7dac9af8ca firewire: nosy: ensure user_length is taken into account when fetching packet contents |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9OZA9 | 011bbfc41e04 Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9O0MU | 270701f0a72e net: gtp: Fix Use-After-Free in gtp_dellink |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9O0MV | 0e8cb911e626 net: openvswitch: Fix Use-After-Free in ovs_ct_exit |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9L4T8 | 2bcb413f8f84 s390/zcrypt: fix reference counting on zcrypt card objects |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9HVTH | 45b76b42a874 sk_buff: Fix KABI break for the modification of struct sk_buff 6b22f55d66c4 inet: inet_defrag: prevent sk release while still in use b63589bf1867 inet: frags: re-introduce skb coalescing for local delivery a4b71bcf6b46 net: Fix KABI break for introducing is_skb_wmem() be442c0357ca skb_expand_head() adjust skb->truesize incorrectly ddeeabbc321d skbuff: introduce skb_expand_head() |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9HK3Q | 44c0752a2a22 tcp: Fix NEW_SYN_RECV handling in inet_twsk_purge() a6d4af8169cd tcp: Clean up kernel listener's reqsk in inet_twsk_purge() |
# 2CVE
-------
| CVE | issue |
|:---:|:-----:|
| CVE-2023-52675 | #I9Q9J4 |
| CVE-2023-52685 | #I9Q9FV |
| CVE-2024-26865 | #I9HK3Q |
| CVE-2024-26886 | #I9HK0R |
| CVE-2024-26921 | #I9HVTH |
| CVE-2024-26957 | #I9L4T8 |
| CVE-2024-27395 | #I9O0MV |
| CVE-2024-27396 | #I9O0MU |
| CVE-2024-27398 | #I9OZA9 |
| CVE-2024-27401 | #I9OZA3 |
| CVE-2024-35807 | #I9Q9CF |
| CVE-2024-35849 | #I9Q9HO |

最后提交信息为： !7694 Bluetooth: af_bluetooth: Fix deadlock

openEuler 20.03 update 4.19.90-2405.3.0

2024-05-15 10:32 4.19.90-2405.3.0 98ca839

# 1TASK
-------
# 4.19.90-2405.1.0~1...4.19.90-2405.3.0
-------
| TASK | COMMIT |
|:----:|:------:|
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9L9NF | 55c326d9d5e0 s390/dasd: fix double module refcount decrement |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9L5DI | ee7dcf51ab27 nilfs2: prevent kernel bug at submit_bh_wbc() |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9L5KV | 82fc99fee0e5 usb: gadget: f_ncm: Fix UAF ncm object at re-bind after usb ep transport error |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9L4ZX | 6c4840250c5e KVM: Always flush async #PF workqueue when vCPU is being destroyed |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9L9IV | 3894f464e542 NTB: fix possible name leak in ntb_register_device() |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9L5DF | 7b65801e3204 Squashfs: check the inode number is not the invalid value of zero |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9L5GC | 3455718adfb9 nfs: fix UAF in direct writes |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9L9IX | 901dbb48d8a4 nouveau: lock the client object tree. |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9L9NB | 8819e19bee64 clk: zynq: Prevent null pointer dereference caused by kmalloc failure |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9L5JJ | 54b07eda9a5a nilfs2: fix failure to detect DAT corruption in btree and direct mappings |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9FNFK | a708a0576786 scsi: sd: Fix sd_do_mode_sense() buffer length handling |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9HL6U | e9d3d17939a1 Revert "tracing/trigger: Fix to return error if failed to alloc snapshot" |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9LKE0 | 85f2e2007f2b nvmet: fix a use-after-free |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9L9JS | d3fa005858da media: usbtv: Remove useless locks in usbtv_video_free() |
| bugzilla: 189914, https://gitee.com/src-openeuler/kernel/issues/I9L9IF | def52e204685 SUNRPC: fix a memleak in gss_import_v2_context |
| bugzilla: 189901, https://gitee.com/src-openeuler/kernel/issues/I9L9J1 | 3cb5b917d3ff SUNRPC: fix some memleaks in gssx_dec_option_array |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9L4T1 | fcbebb8e7791 netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9L5P0 | f3e29671ede2 netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() 63c94bffeb25 netfilter: nf_tables: __nft_expr_type_get() selects specific family type |
| bugzilla: https://gitee.com/openeuler/kernel/issues/I9NU9F | 15e8c4849c47 THP: avoid lock when check whether THP is in deferred list 4acc39e809b5 mm/mmu_gather: limit free batch count and add schedule point in tlb_batch_pages_flush be3a0ee8691a mm, thp: do not queue fully unmapped pages for deferred split |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9L5A8 | 1df55a0c31a0 comedi: vmk80xx: fix incomplete endpoint checking |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9L5G5 | 69af14ab609c clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9LKDS | e9e0f400e2c8 drm/radeon: add a force flush to delay work when radeon |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9L4QT | d9e2de631a86 scsi: qla2xxx: Fix command flush on cable pull |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9L4RJ | 9b3ba7800bc0 mm: swap: fix race between free_swap_and_cache() and swapoff() dc81ad339c7d mm/swapfile.c: use __try_to_reclaim_swap() in free_swap_and_cache() |
| bugzilla: https://gitee.com/openeuler/kernel/issues/I9GV9R | 40a1fb497d83 packet: move from strlcpy with unused retval to strscpy |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9L9IM | 7462e2a86f2c USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9L9M2 | 9418e1a8cac4 net/rds: fix possible cp null dereference cb5a4fcae523 net/rds: fix WARNING in rds_conn_connect_if_down |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9LKC3 | d7be29a452f5 ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface() |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9L5LB | 5d0cb9f1f0d6 net/mlx5e: Prevent deadlock while disabling aRFS |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9FNFW | 14540b43149c i40e: Fix NULL ptr dereference on VSI filter sync |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9L9JG | b90059887878 media: v4l2-tpg: fix some memleaks in tpg_alloc |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9L9MA | 13bfac7c4945 media: edia: dvbdev: fix a use-after-free |
| bugzilla: 189835, https://gitee.com/src-openeuler/kernel/issues/I9HK94 | e930fd0cebf0 wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled d8320dd066b9 b43: dma: Fix use true/false for bool type variable |
| bugzilla: 189830, https://gitee.com/src-openeuler/kernel/issues/I9HK6T | fdcecd92ed64 wifi: ath9k: delay all of ath9k_wmi_event_tasklet() until init is complete 5745b3daaa39 ath9k_htc: fix NULL pointer dereference at ath9k_htc_tx_get_packet() |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9LK64 | 1adea7f29237 soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs d9691f551a7f soc: bcm: brcmstb: pm: pm-arm: Fix refcount leak in brcmstb_pm_probe |
| bugzilla: https://gitee.com/openeuler/kernel/issues/I9NOH8 | 5e58a417b2f7 clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9L5OC | 45fac775e739 mac802154: fix llsec key resources release in mac802154_llsec_key_del |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9L9IH | 4c02261bea49 media: ttpci: fix two memleaks in budget_av_attach |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9L5GD | 41df555bb7cf nilfs2: fix OOB in nilfs_set_de_type |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9L5IO | adc532bad930 net/sched: fix kabi change in struct Qdisc a699283e1e14 net/sched: Fix mirred deadlock on device recursion |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9L9IB | 3360f055ba92 media: go7007: fix a memleak in go7007_load_encoder |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9L5N3 | c4b7247d4d40 clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays |
| bugzilla: https://gitee.com/openeuler/kernel/issues/I9N6Q0 | 5bfdf47235f0 cpufreq: brcmstb-avs-cpufreq: add check for cpufreq_cpu_get's return value |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9L5OD | e82e08e84333 netfilter: nf_tables: fix memleak in map from abort path |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9KHGT | 4c0c7f59343f s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9L5JU | 8207e6b17323 drm: nv04: Fix out of bounds access |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9L5LW | e7836e1bc88d crypto: qat - resolve race condition during AER recovery 94aca86f1d25 crypto: qat - fix double free during reset |
| bugzilla: https://gitee.com/openeuler/kernel/issues/I9NDFD | aa1a4e2fc8ec nfp: flower: handle acti_netdevs allocation failure |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9L5GW | f79fa6eda370 USB: core: Fix deadlock in usb_deauthorize_interface() |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9LKDT | 157f4fbfc61e scsi: mpt3sas: Fix use-after-free warning |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9L5L5 | c3b12fcb1791 speakup: Avoid crash on very long word |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9L5H7 | bd445a182f9f serial: core: fix kernel-doc for uart_port_unlock_irqrestore() ce52c2fa23dc serial: mxs-auart: add spinlock around changing cts state 797190cc2837 serial: core: Provide port lock wrappers |
| bugzilla: https://gitee.com/openeuler/kernel/issues/I9AAM6 | e418901af697 ima: fix deadlock when traversing "ima_default_rules". |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9L9O8 | e436064d0a29 spi: spi-mt65xx: Fix NULL pointer access in interrupt handler |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9HJSI | 7620e9fedb99 nvme-fc: do not wait in vain when unloading module a7cbc15ab1f3 nvme-fc: remove err_work work item |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9L4OR | 3a0d14996fb5 tun: limit printing rate when illegal packet received by tun dev |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I917NR | 38d925f69c4e Bluetooth: Fix TOCTOU in HCI debugfs implementation |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9L9J6 | dfbc46dffaf0 media: dvb-frontends: avoid stack overflow warnings with clang |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9L9OA | 9a433135118f drm/tegra: dsi: Add missing check for of_find_device_by_node |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9L9JK | fcddb570dea3 media: v4l2-mem2mem: fix a memleak in v4l2_m2m_register_entity |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9LK8M | 3c5f738b6f33 nouveau: fix instmem race condition around ptr stores |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9L5KR | 1285554fe823 serial/pmac_zilog: Remove flawed mitigation for rx irq flood |
# 2CVE
-------
| CVE | issue |
|:---:|:-----:|
| CVE-2021-47182 | #I9FNFK |
| CVE-2021-47184 | #I9FNFW |
| CVE-2022-48636 | #I9KHGT |
| CVE-2022-48693 | #I9LK64 |
| CVE-2022-48695 | #I9LKDT |
| CVE-2022-48697 | #I9LKE0 |
| CVE-2022-48701 | #I9LKC3 |
| CVE-2022-48704 | #I9LKDS |
| CVE-2023-52644 | #I9HK94 |
| CVE-2023-52650 | #I9L9OA |
| CVE-2023-52652 | #I9L9IV |
| CVE-2023-52653 | #I9L9IF |
| CVE-2024-24858 | #I917NR |
| CVE-2024-26846 | #I9HJSI |
| CVE-2024-26897 | #I9HK6T |
| CVE-2024-26920 | #I9HL6U |
| CVE-2024-26931 | #I9L4QT |
| CVE-2024-26934 | #I9L5GW |
| CVE-2024-26955 | #I9L5DI |
| CVE-2024-26956 | #I9L5JJ |
| CVE-2024-26958 | #I9L5GC |
| CVE-2024-26960 | #I9L4RJ |
| CVE-2024-26961 | #I9L5OC |
| CVE-2024-26965 | #I9L5N3 |
| CVE-2024-26966 | #I9L5G5 |
| CVE-2024-26969 | #I9L5JZ |
| CVE-2024-26974 | #I9L5LW |
| CVE-2024-26976 | #I9L4ZX |
| CVE-2024-26981 | #I9L5GD |
| CVE-2024-26982 | #I9L5DF |
| CVE-2024-26984 | #I9LK8M |
| CVE-2024-26984 | #I9L5H6 |
| CVE-2024-26994 | #I9L5L5 |
| CVE-2024-26996 | #I9L5KV |
| CVE-2024-26999 | #I9L5KR |
| CVE-2024-27000 | #I9L5H7 |
| CVE-2024-27001 | #I9L5A8 |
| CVE-2024-27008 | #I9L5JU |
| CVE-2024-27010 | #I9L5IO |
| CVE-2024-27011 | #I9L5OD |
| CVE-2024-27013 | #I9L4OR |
| CVE-2024-27014 | #I9L5LB |
| CVE-2024-27019 | #I9L4T1 |
| CVE-2024-27020 | #I9L5P0 |
| CVE-2024-27024 | #I9L9M2 |
| CVE-2024-27028 | #I9L9O8 |
| CVE-2024-27037 | #I9L9NB |
| CVE-2024-27043 | #I9L9MA |
| CVE-2024-27046 | #I9L9NT |
| CVE-2024-27051 | #I9L9O3 |
| CVE-2024-27054 | #I9L9NF |
| CVE-2024-27059 | #I9L9IM |
| CVE-2024-27062 | #I9L9IX |
| CVE-2024-27072 | #I9L9JS |
| CVE-2024-27073 | #I9L9IH |
| CVE-2024-27074 | #I9L9IB |
| CVE-2024-27075 | #I9L9J6 |
| CVE-2024-27077 | #I9L9JK |
| CVE-2024-27078 | #I9L9JG |
| CVE-2024-27388 | #I9L9J1 |

最后提交信息为： !7194 s390/dasd: fix double module refcount decrement

openEuler 20.03 update 4.19.90-2405.1.0

2024-05-07 22:28 4.19.90-2405.1.0 b9f13a6

# 1TASK
-------
# 4.19.90-2404.3.0~1...4.19.90-2405.1.0
-------
| TASK | COMMIT |
|:----:|:------:|
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9HKCB | 473788b5a95b bpf: Fix stackmap overflow check on 32-bit arches 25aea32f0685 bpf: Check for integer overflow when using roundup_pow_of_two() |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9L5IQ | c1d7b97600af fs: sysfs: Fix reference leak in sysfs_break_active_protection() |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9LK3Y | 187356da2d06 erofs: fix pcluster use-after-free on UP platforms |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9L5QJ | 4ec96a85967b fat: fix uninitialized field in nostale filehandles |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9JFG0 | 88c161a5e753 af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc(). 0508eb65e3e8 af_unix: Fix garbage collector racing against connect() |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9LKE1 | 3af390a49f62 ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc() |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9KHGY | 4586a194db13 btrfs: fix hang during unmount when stopping a space reclaim worker 84f64fed232f Btrfs: fix crash during unmount due to race with delayed inode workers |
| bugzilla: https://gitee.com/openeuler/kernel/issues/I9JNPZ | 087591489594 rtmutex: Add acquire semantics for rtmutex lock acquisition slow path |
| bugzilla: https://gitee.com/openeuler/kernel/issues/I9GV9R | 2f11b9f8fabe tun: Fix xdp_rxq_info's queue_index when detaching |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9HJQC | 96941c1cfb36 scsi: target: core: Add TMF to tmr_list handling |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9HJX7 | 037d1ad67c9e quota: Fix potential NULL pointer dereference c259c7c5761e quota: check time limit when back out space/inode change c2efdfab63e3 quota: code cleanup for __dquot_alloc_space() |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9HJRD | 44ed09210cd8 cifs: fix underflow in parse_server_interfaces() |
| bugzilla: https://gitee.com/openeuler/kernel/issues/I9HSOM | 85cfe67f8d6b mm: oom_kill: fix KABI broken by "oom_kill.c: futex: delay the OOM reaper to allow time for proper futex cleanup" 5438ea147ea6 oom_kill.c: futex: delay the OOM reaper to allow time for proper futex cleanup 38cd60df2d9f sched: Allocate a new task_struct_resvd object for fork task |
| bugzilla: https://gitee.com/openeuler/kernel/issues/I9J08D | 433e301fb4b9 PCI/IOV: Improve performance of creating VFs concurrently |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9JJ2F | 219795675671 binder: check offset alignment in binder_get_object() |
| bugzilla: https://gitee.com/openeuler/kernel/issues/I9K8XT | abbe11e76e0c mm/madvise: fix potential pte_unmap_unlock pte error |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9J3KG | 69e5f4ec426b drm/amdgpu: validate the parameters of bo mapping operations more clearly a36feeb8865f amdgpu: validate offset_in_bo of drm_amdgpu_gem_va 80c29a673fcd drm/amdgpu: restrict bo mapping within gpu address limits fa2fe487b471 drm/amdgpu: check alignment on CPU page for bo map |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9HK9B | c252313ed6ce geneve: make sure to pull inner header in geneve_rx() |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9HKEE | ee155b831ff5 drm/bridge: adv7511: fix crash on irq during probe |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9HK9R | 78b01d9ce7e4 net/ipv6: avoid possible UAF in ip6_route_mpath_notify() |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9HJVQ | 4a1c8175fd57 cachefiles: fix memory leak in cachefiles_add_cache() |
| bugzilla: https://gitee.com/openeuler/kernel/issues/I9K4JZ | 88da0ed4e046 sched/rt: Disallow writing invalid values to sched_rt_period_us |
| bugzilla: https://gitee.com/openeuler/kernel/issues/I9K4H3 | f107b400a00b sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset |
| bugzilla: https://gitee.com/openeuler/kernel/issues/I9K34B | 15235663e23f sched/rt: Fix sysctl_sched_rr_timeslice intial value |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9HK5V | c03da9a64210 drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9HJXK | a75e2e36bfc9 hsr: Fix uninit-value access in hsr_get_node() 724e97d9392d net: hsr: fix placement of logical operator in a multi-line statement |
| bugzilla: https://gitee.com/openeuler/kernel/issues/I9ER36 | f3ac4475be3a cpuset: fix race between rebuild scheduler domains and hotplug work |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9FNFO | 1f51ce689904 x86/hyperv: Fix NULL deref in set_hv_tscchange_cb() if Hyper-V setup fails |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9GE8D | 09bda260a7a7 amdkfd: use calloc instead of kzalloc to avoid integer overflow |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9HK9J | 9fcd79ee431e net/bnx2x: Prevent access to a freed page in page_pool |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9HJZO | 239bc50bf2a9 net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv() |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9HK4U | 5a1ba47b85ef btrfs: fix data race at btrfs_use_block_rsv() when accessing block reserve |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9HL6R | ff613de9c3e6 drm/amdgpu: Reset IH OVERFLOW_CLEAR bit |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I917MX | 71923a9c1f2d Bluetooth: Fix atomicity violation in {min,max}_key_size_set |
| bugzilla: 1https://gitee.com/src-openeuler/kernel/issues/I917MX | c7055c022310 Bluetooth: Move {min,max}_key_size debugfs into hci_debugfs_create_le |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9HK1I | a9ece0ebf71e do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9HK63 | 32ab2947aea5 ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit() |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9HJVU | a50054e8b95a media: rc: bpf attach/detach requires write permission |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9HJPD | 4c08d9541d27 IB/hfi1: Fix a memleak in init_credit_return |
| bugzilla: https://gitee.com/openeuler/kernel/issues/I9IPML | f182c8ff8b51 tty: fix read of tty->pgrp outside of ctrl_lock |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9HJXV | e94cbe59940c dm: call the resume method on internal suspend |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9HJUW | 0f4d1aa0dd21 nfc: nci: free rx_data_reassembly skb on NCI device cleanup |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9HK8R | 25bc7f500ba8 media: pvrusb2: fix uaf in pvr2_context_set_notify |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9HK8Y | dd52f1cd29a6 RDMA/srpt: Do not register event handler until srpt device is fully setup |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9E6TQ | d2f72523e5c1 vfio/platform: Create persistent IRQ handlers 3aa6e3f9a5be vfio/platform: Disable virqfds on cleanup |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9FNFF | 2392a0f9ddae scsi: lpfc: Fix link down processing to address NULL pointer dereference |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9HKAZ | 3c3b8f138582 netfilter: nf_conntrack_h323: Add protection for bmp length out of range |
| bugzilla: 189811, https://gitee.com/src-openeuler/kernel/issues/I9FNFK | 907ea672e30b scsi: core: Fix scsi_mode_sense() buffer length handling 5048cf353b24 scsi: core: Reshuffle response handling in scsi_mode_sense() faa13c715f9d scsi: core: Fixup calling convention for scsi_mode_sense() |
# 2CVE
-------
| CVE | issue |
|:---:|:-----:|
| CVE-2021-47182 | #I9FNFK |
| CVE-2021-47183 | #I9FNFF |
| CVE-2021-47217 | #I9FNFO |
| CVE-2022-48664 | #I9KHGY |
| CVE-2022-48674 | #I9LK3Y |
| CVE-2022-48702 | #I9LKE1 |
| CVE-2023-52642 | #I9HJVU |
| CVE-2024-24860 | #I917MX |
| CVE-2024-26813 | #I9J7N6 |
| CVE-2024-26813 | #I9E6TQ |
| CVE-2024-26817 | #I9GE8D |
| CVE-2024-26825 | #I9HJUW |
| CVE-2024-26828 | #I9HJRD |
| CVE-2024-26839 | #I9HJPD |
| CVE-2024-26840 | #I9HJVQ |
| CVE-2024-26845 | #I9HJQC |
| CVE-2024-26851 | #I9HKAZ |
| CVE-2024-26852 | #I9HK9R |
| CVE-2024-26857 | #I9HK9B |
| CVE-2024-26859 | #I9HK9J |
| CVE-2024-26863 | #I9HJXK |
| CVE-2024-26872 | #I9HK8Y |
| CVE-2024-26874 | #I9HK5V |
| CVE-2024-26875 | #I9HK8R |
| CVE-2024-26876 | #I9HKEE |
| CVE-2024-26878 | #I9HJX7 |
| CVE-2024-26880 | #I9HJXV |
| CVE-2024-26882 | #I9HJZO |
| CVE-2024-26883 | #I9HKCB |
| CVE-2024-26894 | #I9HK63 |
| CVE-2024-26901 | #I9HK1I |
| CVE-2024-26904 | #I9HK4U |
| CVE-2024-26915 | #I9HL6R |
| CVE-2024-26922 | #I9J3KG |
| CVE-2024-26923 | #I9JFG0 |
| CVE-2024-26926 | #I9JJ2F |
| CVE-2024-26973 | #I9L5QJ |
| CVE-2024-26993 | #I9L5IQ |

最后提交信息为： !6858 CVE-2024-26883

openEuler 20.03 update 4.19.90-2404.3.0

2024-04-24 10:40 4.19.90-2404.3.0 e15f5ef

最后提交信息为： !6313 fixup CVE-2024-26908

openEuler 20.03 update 4.19.90-2404.2.0

2024-04-17 14:21 4.19.90-2404.2.0 3fc54ba

# 1TASK
-------
# 4.19.90-2404.1.0~1...4.19.90-2404.2.0
-------
| TASK | COMMIT |
|:----:|:------:|
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I97R4T | 3a6e2c3a125c drm/vkms: call drm_atomic_helper_shutdown before drm_dev_put() |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9E2H0 | 38095d431e65 can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER) |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9E2LZ | 8853ccb08115 net/sched: act_mirred: don't override retval if we already lost the skb |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9E6TE | 632dc114a9af vfio/pci: Create persistent INTx handler 43c4211edba5 vfio: Introduce interface to flush virqfd inject workqueue |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9FNG0 | a415d73c853e iavf: free q_vectors before queues in iavf_disable_vf |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9FNG2 | e4bd4459ad71 cfg80211: call cfg80211_stop_ap when switch from P2P_GO type |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9E2GS | d32ea8d9ea56 xen/events: close evtchn after mapping cleanup |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9E47C | d9bd4b355b1f net: ip_tunnel: prevent perpetual headroom growth |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9E2GQ | 78dd77efcef0 KVM: s390: vsie: fix race during shadow creation |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9E6TU | bf2222575aee vfio/pci: Disable auto-enable of exclusive INTx IRQ 8e07a68209c8 genirq: Add IRQF_NO_AUTOEN for request_irq/nmi() |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9E2EL | 4f8730514c73 fs/proc: do_task_stat: use sig->stats_lock to gather the threads/children stats f59c1abf66d1 fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand() dfb6ca3bc5ce fs/proc: do_task_stat: use __for_each_thread() 08132d3d089b exit: Use the correct exit_code in /proc/<pid>/stat |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9E2MI | c2e1ca48ad0b wifi: mac80211: fix race condition on enabling fast-xmit |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9E2F9 | 089b5acac053 ext4: fix double-free of blocks due to wrong extents moved_len |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9E6TS | b6f47d04e499 vfio/pci: Lock external INTx masking ops |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9E2MH | 9c10b0446227 gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp() |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9E2LW | 4a1f40d0cd2d dm-crypt: don't modify the data when using authenticated encryption |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9E2FH | 85553d8cb3c6 nilfs2: fix data corruption in dsync block recovery for small block sizes |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9E2FP | ec3e7aad838f nilfs2: fix potential bug in end_buffer_async_write 9d540b8f09df nilfs2: fix buffer corruption due to concurrent device reads |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9E2F7 | c671f65e8aa5 btrfs: don't drop extent_map for free space inode on write error |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9E469 | 7d0161833fd3 btrfs: dev-replace: properly validate device names |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9E2M2 | 0cf13f3bcff1 mm/swap: fix race when skipping swapcache |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9E2LT | 2dc6241e1bbc net/sched: act_mirred: use the backlog for mirred ingress |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9DNGK | 104955a02cd3 PM / devfreq: Synchronize devfreq_monitor_[start/stop] |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9E2MF | b11a05b583ba ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal() |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9E3E4 | a967a094839e ipv6: sr: fix possible use-after-free and null-ptr-deref |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9E2M7 | e2fbaa3269df RDMA/qedr: Fix qedr_create_user_qp error flow |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9E2Y8 | 9bddf52475f7 fbdev: savage: Error out if pixclock equals zero |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9E2MP | a654421e56cc dmaengine: ti: edma: Add some null pointer checks to the edma_probe f8fe893919c2 dmaengine: ti: edma: Fix error return code in edma_probe() fbdb41fc7bf0 dmaengine: ti: edma: add missed operations f7e3bd41f723 dmaengine: ti: edma: fix missed failure handling |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9E3EE | b2139f57cfa0 RDMA/srpt: Support specifying the srpt_service_guid parameter |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9E2M9 | 5e19c94aa663 ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found() |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9E2MG | 03e98280b89d fbdev: sis: Error out if pixclock equals zero |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9E2EQ | 174f712be9f6 nilfs2: fix hang in nilfs_lookup_dirty_data_buffers() |
# 2CVE
-------
| CVE | issue |
|:---:|:-----:|
| CVE-2021-47194 | #I9FNG2 |
| CVE-2021-47201 | #I9FNG0 |
| CVE-2023-52635 | #I9DNGK |
| CVE-2023-52637 | #I9E2H0 |
| CVE-2023-52639 | #I9E2GQ |
| CVE-2024-26685 | #I9E2FP |
| CVE-2024-26686 | #I9E2EL |
| CVE-2024-26687 | #I9E2GS |
| CVE-2024-26696 | #I9E2EQ |
| CVE-2024-26697 | #I9E2FH |
| CVE-2024-26704 | #I9E2F9 |
| CVE-2024-26726 | #I9E2F7 |
| CVE-2024-26735 | #I9E3E4 |
| CVE-2024-26739 | #I9E2LZ |
| CVE-2024-26740 | #I9E2LT |
| CVE-2024-26743 | #I9E2M7 |
| CVE-2024-26744 | #I9E3EE |
| CVE-2024-26754 | #I9E2MH |
| CVE-2024-26759 | #I9E2M2 |
| CVE-2024-26763 | #I9E2LW |
| CVE-2024-26771 | #I9E2MP |
| CVE-2024-26772 | #I9E2MF |
| CVE-2024-26773 | #I9E2M9 |
| CVE-2024-26777 | #I9E2MG |
| CVE-2024-26778 | #I9E2Y8 |
| CVE-2024-26779 | #I9E2MI |
| CVE-2024-26791 | #I9E469 |
| CVE-2024-26804 | #I9E47C |
| CVE-2024-26810 | #I9E6TS |
| CVE-2024-26812 | #I9E6TE |
| CVE-2024-27437 | #I9E6TU |

最后提交信息为： !6231 v2 drm/vkms: call drm_atomic_helper_shutdown before drm_dev_...

openEuler 20.03 update 4.19.90-2404.1.0

2024-04-09 20:30 4.19.90-2404.1.0 7912351

# 1TASK
-------
# 4.19.90-2403.4.0~1...4.19.90-2404.1.0
-------
| TASK | COMMIT |
|:----:|:------:|
| bugzilla: https://gitee.com/openeuler/kernel/issues/I9DOVK | 85ed5064596b scsi: hisi_sas: Update disk locked timeout to 7 seconds |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9E2O0 | 89d40ee5ae5b ARM: ep93xx: Add terminator to gpiod_lookup_table |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9BGUR | 50783b0b7e7d drm/amd/amdgpu: fix refcount leak |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9DNPD | d349852dd4c6 netfilter: nft_limit: reject configurations that cause integer overflow |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9CTGE | 96a00fdf5d2a sh: push-switch: Reorder cleanup operations to avoid use-after-free bug |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9BGVY | 34137c8b7d21 net: fec: fix the potential memory leak in fec_enet_init() |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9DD86 | 6c1e3e8ac974 ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs 89ce8022ea56 ALSA: aica: Fix a long-time build breakage |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9BV23 | b6fa4a8aeead btrfs: don't abort filesystem when attempting to snapshot deleted subvolume |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I95RDW | 4b064126b152 asix: fix wrong return value in asix_check_host_enable() dfb9ca86b4b0 asix: fix uninit-value in asix_mdio_read() 1fab74578b96 net: asix: fix uninit value bugs |
| bugzilla: 189704, https://gitee.com/src-openeuler/kernel/issues/I99K08 | b81ce7b0e223 ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim() |
| bugzilla: https://gitee.com/openeuler/kernel/issues/I9D6UN | 121f7cbfa4bd net: hns3: update hns3 version to 24.3.1 757e5e597e9a net: hns3: fix port vlan filter not disabled problem in dynamic vlan mode |
| bugzilla: 189707, https://gitee.com/src-openeuler/kernel/issues/I99JV2 | 0811841453b1 ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv() |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9C6FA | a5b1a9c18946 sr9800: Add check for usbnet_get_endpoints |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9BHQL | 1e0bcecb843e USB: usbfs: Don't WARN about excessively large memory allocations |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I96G8W | 5a96249788b5 IB/ipoib: Fix mcast list locking f59e1febf4af RDMA/IPoIB: Fix error code return in ipoib_mcast_join |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9BHRY | f147e8f44610 tipc: wait and exit until all work queues are done |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9BHTI | b446fb35f549 NFS: Fix an Oopsable condition in __nfs_pageio_add_request() |
| bugzilla: https://gitee.com/openeuler/kernel/issues/I97HJA | e75ed030f090 ext4: Validate inode pa before using preallocation blocks |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9BHF9 | 8dc154b39cef tipc: skb_linearize the head skb when reassembling msgs |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I95REH | fda018f28825 mac80211: fix locking in ieee80211_start_ap error path |
| bugzilla: https://gitee.com/openeuler/kernel/issues/I9ARW6 | 81f45e29b8d3 arm64/mpam: Allocate new partid for the created ctrl group 10459c388c78 arm64/mpam_ctrlmon: Update ctrl group config with rdtgrp's partid |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9BGQL | 7632b28676f9 btrfs: do not BUG_ON in link_to_fixup_dir |
| bugzilla: 189713, https://gitee.com/src-openeuler/kernel/issues/I8YV0T | 79e98b24c6de md/raid5: fix atomicity violation in raid5_cache_count |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9BV4P | 0857995b84dd ext4: avoid online resizing failures due to oversized flex bg 81c7e3d5f79c ext4: unify the type of flexbg_size to unsigned int 079a6738cff8 ext4: remove unnecessary check from alloc_flex_gd() |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I990AF | d6e2083efaf4 net/tls: Use RCU API to access tls_ctx->netdev c6a5424ab8b9 net/tls: Remove the context from the list in tls_device_down b931292e459f tls: Fix context leak on tls_device_down f6f1005c250b net/tls: Resolve KABI break when backport bugfix of CVE-2021-47131 dabeade360de net/tls: Fix use-after-free after the TLS device goes down and up cdbd5f865f09 net/tls: Replace TLS_RX_SYNC_RUNNING with RCU |
| bugzilla: https://gitee.com/openeuler/kernel/issues/I9AZFU | e4e46c59cd78 arm64/mpam: Fix repeated enabling in mpam_enable() |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9BHNX | 0d8c6131c906 usb: misc: fix improper handling of refcount in uss720_probe() 47480348589c misc/uss720: fix memory leak in uss720_probe |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9BHSG | c407eccfc6a5 net: dsa: fix a crash if ->get_sset_count() fails |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9BGWP | 390063cfc347 i2c: i801: Don't generate an interrupt on bus reset |
| bugzilla: 189706, https://gitee.com/openeuler/kernel/issues/I9BD67 | 3830dbeebc54 dm: revert partial fix for redundant bio-based IO accounting |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I96GQ3 | c691e6bb8a0c jfs: fix array-index-out-of-bounds in dbAdjTree |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9BGV4 | 363c0e70ce37 mld: fix panic in mld_newpack() |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9BV24 | 585148ff745f tracing: Ensure visibility when inserting an element into tracing_map |
| bugzilla: https://gitee.com/openeuler/kernel/issues/I9C0QZ | 44c9dc8e578b mm/mlock: return EINVAL for illegal user memory range in mlock |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9BHNM | f391b8457c4b net: usb: fix possible use-after-free in smsc75xx_bind 2420c3f50d50 net: usb: fix memory leak in smsc75xx_bind |
| bugzilla: https://gitee.com/openeuler/kernel/issues/I9BWES | a036242f1eb2 mm: ksm: fix use-after-free kasan report in ksm_might_need_to_copy |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9BHG2 | b2edfdce5905 net: dsa: mt7530: fix VLAN traffic leaks again d9fc8462dab8 net: dsa: mt7530: fix VLAN traffic leaks |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9BHLP | 37f699a3b584 serial: rp2: use 'request_firmware' instead of 'request_firmware_nowait' |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9BGUB | b0269da6ea54 drm/amdgpu: Fix a use-after-free |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9BGKK | b4d420a37995 net: fujitsu: fix potential null-ptr-deref |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9BHQ7 | 60bdd92e1f4f NFC: nci: fix memory leak in nci_allocate_device |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9BGMR | 46ab3871c606 net/smc: remove device from smcd_dev_list after failed device_add() |
| bugzilla: https://gitee.com/openeuler/kernel/issues/I991GQ | fa397ee98939 crypto: af_alg - Work around empty control messages without MSG_MORE cd37d3f02ee7 crypto: af_alg - Fix regression on empty requests |
| bugzilla: https://gitee.com/openeuler/kernel/issues/I992IL | e162d78db431 crypto: algif_aead - Only wake up when ctx->more is zero |
| bugzilla: https://gitee.com/openeuler/kernel/issues/I9355O | 99847750a655 keys: safe concurrent user->{session,uid}_keyring access |
| bugzilla: https://gitee.com/openeuler/kernel/issues/I8Z2JH | 6d4294ae8769 pciehp: clear p_slot->work.data after powering off a slot |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9AK6C | 0d14814278cf netfilter: nf_tables: disallow timeout for anonymous sets |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9AK56 | 1251131c6d24 netfilter: nf_tables: disallow anonymous set with timeout flag |
# 2CVE
-------
| CVE | issue |
|:---:|:-----:|
| CVE-2021-47091 | #I95REH |
| CVE-2021-47101 | #I95RDW |
| CVE-2021-47131 | #I990AF |
| CVE-2021-47142 | #I9BGUB |
| CVE-2021-47143 | #I9BGMR |
| CVE-2021-47144 | #I9BGUR |
| CVE-2021-47145 | #I9BGQL |
| CVE-2021-47146 | #I9BGV4 |
| CVE-2021-47149 | #I9BGKK |
| CVE-2021-47150 | #I9BGVY |
| CVE-2021-47153 | #I9BGWP |
| CVE-2021-47159 | #I9BHSG |
| CVE-2021-47160 | #I9BHG2 |
| CVE-2021-47162 | #I9BHF9 |
| CVE-2021-47163 | #I9BHRY |
| CVE-2021-47167 | #I9BHTI |
| CVE-2021-47169 | #I9BHLP |
| CVE-2021-47170 | #I9BHQL |
| CVE-2021-47171 | #I9BHNM |
| CVE-2021-47173 | #I9BHNX |
| CVE-2021-47180 | #I9BHQ7 |
| CVE-2023-52587 | #I96G8W |
| CVE-2023-52601 | #I96GQ3 |
| CVE-2023-52620 | #I9AK6C |
| CVE-2023-52622 | #I9BV4P |
| CVE-2023-52629 | #I9CTGE |
| CVE-2024-23307 | #I8YV0T |
| CVE-2024-26633 | #I99K08 |
| CVE-2024-26641 | #I99JV2 |
| CVE-2024-26642 | #I9AK56 |
| CVE-2024-26644 | #I9BV23 |
| CVE-2024-26645 | #I9BV24 |
| CVE-2024-26651 | #I9C6FA |
| CVE-2024-26654 | #I9DD86 |
| CVE-2024-26668 | #I9DNPD |
| CVE-2024-26751 | #I9E2O0 |

最后提交信息为： !5874 scsi: hisi_sas: Update disk locked timeout to 7 seconds

openEuler 20.03 update 4.19.90-2403.4.0

2024-03-27 09:52 4.19.90-2403.4.0 fc69664

# 1TASK
-------
# 4.19.90-2403.3.0~1...4.19.90-2403.4.0
-------
| TASK | COMMIT |
|:----:|:------:|
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9BHN7 | c75a6dea0308 spi: spi-fsl-dspi: Fix a resource leak in an error handling path |
| bugzilla: https://gitee.com/openeuler/kernel/issues/I970CO | 780c87965a77 l2tp: pass correct message length to ip6_append_data 867e9913dc37 ipv6: Fix signed integer overflow in l2tp_ip6_sendmsg |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I917LZ | 47880b804785 scsi: lpfc: Fix a possible data race in lpfc_unregister_fcf_rescan() |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I990A4 | 34289c789a97 x86/kvm: Do not try to disable kvmclock if it was not enabled d7874dfddfb0 x86/kvm: Disable kvmclock on all CPUs on shutdown |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I99JSA | 6b64292be541 llc: Drop support for ETH_P_TR_802_2. |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I99JVI | 9a3e6ca865af llc: make llc_ui_sendmsg() more robust against bonding changes |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I99JO6 | 4c62d6f969d0 tcp: add sanity checks to rx zerocopy |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I99JQV | 78ba63569685 pstore/ram: Fix crash when setting number of cpus to an odd number |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I990AA | 127d0b8f5561 x86/kvm: Teardown PV features on boot CPU as well |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I96G7N | 68ed91772d7c jfs: fix uaf in jfs_evict_inode 7026a1037b0a JFS: fix memleak in jfs_mount |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I96G7F | 33092290bc3f jfs: fix array-index-out-of-bounds in diNewExt |
| bugzilla: https://gitee.com/openeuler/kernel/issues/I99EU2 | b9fdf0861829 nfsd: fix use-after-free due to delegation race |
| bugzilla: https://gitee.com/openeuler/kernel/issues/I991OV | e6471ff3b38a printk: avoid deadlock in panic |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I96G7W | 7ef2f9c5d580 wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9909R | 97ec433b7ae8 btrfs: abort in rename_exchange if we fail to insert the second ref |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I95LPF | 17a5ae4695a2 tomoyo: fix UAF write bug in tomoyo_write_control() |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I96G93 | 9d1494e7e7c9 UBSAN: array-index-out-of-bounds in dtSplitRoot |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9909V | 36b9b5d21613 ocfs2: issue zeroout to EOF blocks 86577ba8addd ocfs2: fix zero out valid data f1ff6193f03d ocfs2: fix data corruption by fallocate |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I96G8Y | 29a8f98b1286 jfs: fix slab-out-of-bounds Read in dtSearch |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I99JR3 | 37cbd0307027 hwrng: core - Fix page fault dead lock on mmap-ed hwrng |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I96GPO | 5e7b3e30214a KVM: s390: fix setting of fpc register |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I97NHS | 4d5f751df3b3 net/smc: fix illegal rmb_desc access in SMC-D connection dump |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I95RE9 | 7675e34e279f phonet/pep: refuse to enable an unbound pipe |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I990A7 | 50e871d7ca6f net: caif: fix memory leak in caif_device_notify |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I990B2 | ee7b84650cc9 net: caif: fix memory leak in cfusbl_device_notify d22a0056b0c3 net: caif: add proper error handling 6e1ea6a46530 net: caif: added cfserl_release function |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I96GO9 | 99254b9d7a41 rt2x00: Fix kabi breakage in struct rt2x00lib_ops 50fc0dbef129 wifi: rt2x00: restart beacon queue when hardware reset 7363e91c3236 rt2x00: clear up IV's on key removal 5bd8d4e2541a rt2x00: clear IV's on start to fix AP mode regression d1e1ab9553b6 rt2800: add pre_reset_hw callback 2aa98197ca46 rt2800: do not nullify initialization vector data |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I99JWJ | 202a54d42ed2 binder: fix race between mmput() and do_exit() |
# 2CVE
-------
| CVE | issue |
|:---:|:-----:|
| CVE-2021-47086 | #I95RE9 |
| CVE-2021-47110 | #I990A4 |
| CVE-2021-47112 | #I990AA |
| CVE-2021-47113 | #I9909R |
| CVE-2021-47114 | #I9909V |
| CVE-2021-47121 | #I990B2 |
| CVE-2021-47122 | #I990A7 |
| CVE-2021-47161 | #I9BHN7 |
| CVE-2023-52594 | #I96G7W |
| CVE-2023-52595 | #I96GO9 |
| CVE-2023-52597 | #I96GPO |
| CVE-2023-52599 | #I96G7F |
| CVE-2023-52600 | #I96G7N |
| CVE-2023-52602 | #I96G8Y |
| CVE-2023-52603 | #I96G93 |
| CVE-2023-52609 | #I99JWJ |
| CVE-2023-52615 | #I99JR3 |
| CVE-2023-52619 | #I99JQV |
| CVE-2024-24855 | #I917LZ |
| CVE-2024-26615 | #I97NHS |
| CVE-2024-26622 | #I95LPF |
| CVE-2024-26635 | #I99JSA |
| CVE-2024-26636 | #I99JVI |
| CVE-2024-26640 | #I99JO6 |

最后提交信息为： !5539 spi: spi-fsl-dspi: Fix a resource leak in an error handling ...

5.10.0-192.0.0

预览版本

2024-03-22 14:22 5.10.0-192.0.0 aab1f2b

最后提交信息为： !5342 CVE-2023-52447

openEuler 20.03 update 4.19.90-2403.3.0

2024-03-20 10:31 4.19.90-2403.3.0 a09536c

# 1TASK
-------
# 4.19.90-2403.2.0~1...4.19.90-2403.3.0
-------
| TASK | COMMIT |
|:----:|:------:|
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I96GNQ | 0752ec8c3198 FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I96G7Q | cc9d9d1efea0 s390/ptrace: handle setting of fpc register correctly |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I96GNY | a0877cfbbcfd drm/msm/dpu: Add mutex lock in control vblank irq |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I96GXM | de6bdd578319 llc: call sock_orphan() at release time |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I96G83 | 91cbb996eea5 powerpc/lib: Validate size for vector operations |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I96G92 | 614bc6e0bf9b ceph: fix deadlock or deadcode of misusing dget() |
| bugzilla: https://gitee.com/openeuler/kernel/issues/I991GQ | 5d8f3c06defe crypto: algif_aead - fix uninitialized ctx->init |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I96GP1 | 08590ef6c167 powerpc/mm: Fix null-pointer dereference in pgtable_cache_add |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I97NI1 | 6923fea1f2ba drm: Don't unref the same fb many times by mistake due to deadlock handling |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I963JJ | 680612323ad0 crypto: qcom-rng - fix infinite loop on requests not multiple of WORD_SZ |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I963KI | 2a17d9bd6ff3 crypto: qcom-rng - ensure buffer for generate is completely filled |
| bugzilla: https://gitee.com/openeuler/kernel/issues/I975PZ | d07b938a2751 arm64/mpam: Fix use-after-free when deleting resource groups dbde2382cbe4 arm64/mpam: remove kernfs_get() calls() and add kernfs_put() calls to prevent refcount leak |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I95B1K | 5940d4ecd512 nfc: nci: assert requested protocol is valid |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I95AXP | be03af01d71d net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn() bcd56cde2376 nfc: constify several pointers to u8, char and sk_buff |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I95B1R | 261c860a9aec net: nfc: llcp: Add lock when modifying device list |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I95B1O | edc3191ff8e1 RDMA/srp: Do not call scsi_done() from srp_abort() |
| bugzilla: https://gitee.com/openeuler/kernel/issues/I9758Q | 259af950b26a arm64/mpam: Expand the monitor number of the resctrl root |
# 2CVE
-------
| CVE | issue |
|:---:|:-----:|
| CVE-2022-48629 | #I963KI |
| CVE-2022-48630 | #I963JJ |
| CVE-2023-52486 | #I97NI1 |
| CVE-2023-52502 | #I95AXP |
| CVE-2023-52507 | #I95B1K |
| CVE-2023-52515 | #I95B1O |
| CVE-2023-52524 | #I95B1R |
| CVE-2023-52583 | #I96G92 |
| CVE-2023-52586 | #I96GNY |
| CVE-2023-52598 | #I96G7Q |
| CVE-2023-52604 | #I96GNQ |
| CVE-2023-52606 | #I96G83 |
| CVE-2023-52607 | #I96GP1 |
| CVE-2024-26625 | #I96GXM |

最后提交信息为： !5306 FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree

openEuler 20.03 update 4.19.90-2403.2.0

2024-03-13 09:35 4.19.90-2403.2.0 c38cc0a

# 1TASK
-------
# 4.19.90-2403.1.0~1...4.19.90-2403.2.0
-------
| TASK | COMMIT |
|:----:|:------:|
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I947TK | 5a3d07324cd6 ALSA: hda: intel-sdw-acpi: harden detection of controller 96728e188cbd soundwire: intel: filter SoundWire controller device search |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I949C5 | ba4c79dc6e70 NFS: fs_context: validate UDP retrans to prevent shift out-of-bounds |
| bugzilla: https://gitee.com/openeuler/kernel/issues/I93S7P | 75626b88fd5d sched: remove wait bookmarks 63c0e8b2b33c filemap: remove use of wait bookmarks |
| bugzilla: https://gitee.com/openeuler/kernel/issues/I970CO | 0299853c014a dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I95ATV | 1bb70528b2bc net: fix kabi check warning b2aa4a36772e net: Fix unwanted sign extension in netdev_stats_to_stats64() 9118dfe38da7 net: bridge: use DEV_STATS_INC() 8934ec12c5c3 net: add atomic_long_t to net_device_stats fields |
| bugzilla: https://gitee.com/openeuler/kernel/issues/I970CO | 66ff15772203 crypto: scomp - fix req->dst buffer overflow |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I93EBW | c33219a34ff9 EDAC/thunderx: Fix possible out-of-bounds string access |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I94P85 | 8cb3de49253f HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I95ASP | a225793bc80d wifi: mac80211: fix potential key use-after-free |
| bugzilla: https://gitee.com/openeuler/kernel/issues/I970CO | 6598630569f7 netfilter: nft_compat: reject unused compat flag dfa643777d1f ppp_async: limit MRU to 64K 642212a54cce inet: read sk->sk_family once in inet_recv_error() e5056f3b094a bonding: remove print in bond_verify_device_path 3153fae7a7dc af_unix: fix lockdep positive in sk_diag_dump_icons() 759860e8ac75 net: ipv4: fix a memleak in ip_setup_cork 8be5ba65916a ipv6: Ensure natural alignment of const ipv6 loopback and router addresses 5ed9259decc7 virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings 30dfe3d07dcb bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk 1e1541f083d4 SUNRPC: Fix a suspicious RCU usage warning 0ee67ec84f8e tcp: Add memory barrier to tcp_push() 5f1d10afd1a5 vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING ce289a4d6cc5 md: Whenassemble the array, consult the superblock of the freshest device f58697dc6d70 jbd2: correct the printing of write_flags in jbd2_write_superblock() |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I94VOL | f169adc17418 drm: bridge/panel: Cleanup connector on bridge detach |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I956GH | 807378830df3 uio_hv_generic: Fix a memory leak in error handling paths |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I956GS | aacf804e2981 scsi: qedf: Add pointer checks in qedf_update_link_speed() |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I956G7 | fd528a86e14d nvme-loop: fix memory leak in nvme_loop_create_ctrl() d0ba42abd535 nvme-loop: don't put ctrl on nvme_init_ctrl error |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I956GP | e2dd78fd02a7 RDMA/rxe: Clear all QP fields if creation failed |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I956FT | 3ebdf7fc6c65 RDMA/rxe: Return CQE error if invalid lkey was supplied |
| bugzilla: https://gitee.com/openeuler/kernel/issues/I970CO | 5af44d53da0e of: unittest: Fix of_count_phandle_with_args() expected value message a42aabb6197e of: unittest: Fix compile in the non-dynamic case 9b2640f70cc8 of: Fix double free in of_parse_phandle_with_args_map 8c6a8898081f pmdomain: core: Move the unused cleanup to a _sync initcall 4248cfde9e92 tick/sched: Preserve number of idle sleeps across CPU hotplug events 2e4e656b8408 acpi: property: Let args be NULL in __acpi_node_get_property_reference a87bdae8811c tick-sched: Fix idle and iowait sleeptime accounting vs CPU hotplug 57f59c927296 ACPI: LPIT: Avoid u32 multiplication overflow 33db98795906 audit: Send netlink ACK before setting connection in auditd_set 71dc7a7b9e2c crypto: scompress - return proper error code for allocation failure 1ab96c4b552e crypto: af_alg - Disallow multiple in-flight AIO requests 74b24201e83b x86/mm/ident_map: Use gbpages only where full GB page should be mapped. fa01b968a6bd mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I95AWK | a543b4a98101 net: fix possible store tearing in neigh_periodic_work() |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I947SJ | 761b932a77ee usb: gadget: f_fs: Clear ffs_eventfd in ffs_data_clear. |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I95B2S | e8d67d153c1c scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I93EC9 | 93e85eaa18e5 block: add check that partition length needs to be aligned with block size |
| bugzilla: https://gitee.com/openeuler/kernel/issues/I943P5 | 6c0d1baed6af blk-mq: fix IO hang from sbitmap wakeup race |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I8UJF0 | 5d43f37f3d88 nvme: sanitize metadata bounce buffer for reads |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I947OW | 34341c4f218c NFC: st21nfca: Fix memory leak in device probe and remove |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I96DIN | a20521dbe9b6 kyber: fix kabi broken in ->bio_merge() ccf16d01d7c9 kyber: fix out of bounds access when preempted |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I94VOZ | a2e8cb93e8c6 crypto: qat - ADF_STATUS_PF_RUNNING should be set after adf_dev_init |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I95ATI | 1fbab5e7e7fd vt: fix memory overlapping when deleting chars in the buffer |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I95AT5 | a7aba71f0b88 nilfs2: fix potential use after free in nilfs_gccache_submit_read_data() |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I94JCD | 706ff7bf82a0 ethernet:enic: Fix a use after free bug in enic_hard_start_xmit |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I94J1Q | 40e2e11fc3ca bnxt_en: Fix RX consumer index logic in the error path. |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I95AT0 | 0c721cd8f553 x86/alternatives: Disable KASAN in apply_alternatives() |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I94JR1 | 776c9da2ccd1 i2c: img-scb: fix reference leak when pm_runtime_get_sync fails |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I94JI5 | 17c69ea6bb03 net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send |
| bugzilla: https://gitee.com/openeuler/kernel/issues/I95A33 | cf4331b1dce1 mpam/mpam_ctrlmon: update monitor config with its parent's ctrl_val |
| bugzilla: https://gitee.com/openeuler/kernel/issues/I95IFO | fe0be3e8a2ef arm64/mpam: set default feedback of last_cmd_status interface as null string |
| bugzilla: https://gitee.com/openeuler/kernel/issues/I95IFL | 842833f76061 arm64/mpam: support resctrl fs to show mounting option |
| bugzilla: https://gitee.com/openeuler/kernel/issues/I95IFB | 931acdbf2c68 arm64/mpam: Skip updates of unrelated ctrl type |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I94VOP | 526fb9f90368 soundwire: stream: fix memory leak in stream config error path |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I94JIH | 46777309968b io_uring: fix overflows checks in provide buffers |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I932VC | 04d0df02aa03 powerpc/64s: Fix crashes when toggling entry flush barrier |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I95ASM | e264072ab502 ieee802154: ca8210: Fix a potential UAF in ca8210_probe |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I94P3R | 81b1c455f8fb perf/x86/lbr: Filter vsyscall addresses |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I94JCX | f60542ea4249 i2c: xiic: fix reference leak when pm_runtime_get_sync fails |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I947U7 | 2e93b775e91b binder: fix async_free_space accounting for empty parcels |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I93XA7 | 270c30c0ad9b HID: usbhid: fix info leak in hid_submit_ctrl |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I95AXT | e3ec418a7bc6 net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I94J63 | a160dc468198 vsock/virtio: free queued packets when closing socket be0f4f330a8e vsock/virtio: discard packets only when socket is really closed 194cea2d46d7 virtio_vsock: Fix race condition in virtio_transport_recv_pkt |
# 2CVE
-------
| CVE | issue |
|:---:|:-----:|
| CVE-2020-36778 | #I94JCX |
| CVE-2020-36783 | #I94JR1 |
| CVE-2021-46906 | #I93XA7 |
| CVE-2021-46924 | #I947OW |
| CVE-2021-46926 | #I947TK |
| CVE-2021-46933 | #I947SJ |
| CVE-2021-46935 | #I947U7 |
| CVE-2021-46952 | #I949C5 |
| CVE-2021-46984 | #I96DIN |
| CVE-2021-46990 | #I94K3P |
| CVE-2021-46998 | #I94JCD |
| CVE-2021-47013 | #I94JI5 |
| CVE-2021-47015 | #I94J1Q |
| CVE-2021-47020 | #I94VOP |
| CVE-2021-47024 | #I94J63 |
| CVE-2021-47040 | #I94JIH |
| CVE-2021-47056 | #I94VOZ |
| CVE-2021-47063 | #I94VOL |
| CVE-2021-47071 | #I956GH |
| CVE-2021-47074 | #I956G7 |
| CVE-2021-47076 | #I956FT |
| CVE-2021-47077 | #I956GS |
| CVE-2021-47078 | #I956GP |
| CVE-2022-48627 | #I95ATI |
| CVE-2023-52458 | #I93EC9 |
| CVE-2023-52464 | #I93EBW |
| CVE-2023-52476 | #I94P3R |
| CVE-2023-52478 | #I94P85 |
| CVE-2023-52500 | #I95B2S |
| CVE-2023-52504 | #I95AT0 |
| CVE-2023-52510 | #I95ASM |
| CVE-2023-52522 | #I95AWK |
| CVE-2023-52528 | #I95AXT |
| CVE-2023-52530 | #I95ASP |
| CVE-2023-52566 | #I95AT5 |
| CVE-2023-52578 | #I95ATV |

最后提交信息为： !5133 CVE-2021-46926

openEuler 20.03 update 4.19.90-2403.1.0

2024-03-06 10:01 4.19.90-2403.1.0 8c54010

最后提交信息为： !4947 powerpc/64s: Fix pte update for kernel memory on radix

openEuler 20.03 update 4.19.90-2402.6.0

2024-02-27 20:22 4.19.90-2402.6.0 835ce21

最后提交信息为： !4701 v2 mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in...

openEuler 20.03 update 4.19.90-2402.5.0

2024-02-21 09:28 4.19.90-2402.5.0 caea209

# 1TASK
-------
# 4.19.90-2402.4.0~1...4.19.90-2402.5.0
-------
| TASK | COMMIT |
|:----:|:------:|
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I8YCSC | 9dc65c662836 xen-netback: don't produce zero-size SKB frags |
| bugzilla: https://gitee.com/openeuler/kernel/issues/I91FSH | aaa5509c8584 net: hns3: update hns3 version to 24.2.1 30d529c8b720 net: hns3: fix tm port shapping of fibre port is incorrect after driver initialization |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I8ZGOZ | 9ea037e5b65a ipv6: fix kabi broken in struct dst_ops 7d42b1eb18aa ipv6: Document that max_size sysctl is deprecated d01cc5bcf849 ipv6: remove max_size check inline with ipv4 |
| bugzilla: https://gitee.com/openeuler/kernel/issues/I8WPQW | 0ad8c4169c43 fs:/dcache.c: fix negative dentry flag warning in dentry_free |
| bugzilla: https://gitee.com/openeuler/kernel/issues/I9093Z | b16e88e5e6f7 arm64/openeuler_defconfig: add not set config to fix compiling error 6ed7ce891d0c tracing/kprobes: Do the notrace functions check without kprobes on ftrace |
# 2CVE
-------
| CVE | issue |
|:---:|:-----:|
| CVE-2023-46838 | #I8YCSC |
| CVE-2023-52340 | #I8ZGOZ |

最后提交信息为： !4601 v2 xen-netback: don't produce zero-size SKB frags

openEuler 20.03 update 4.19.90-2402.4.0

2024-02-05 20:30 4.19.90-2402.4.0 3a28772

# 1TASK
-------
# 4.19.90-2402.1.0~1...4.19.90-2402.4.0
-------
| TASK | COMMIT |
|:----:|:------:|
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I90B2K | d01855f356d5 netfilter: nf_tables: reject QUEUE/DROP verdict parameters |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I8YD5O | 33811fb3fc50 drm/atomic: Fix potential use-after-free in nonblocking commits |
| bugzilla: https://gitee.com/openeuler/kernel/issues/I90HST | 0ac2fa082981 net: Save and restore msg_namelen in sock_sendmsg 1380b4f73f27 net: prevent rewrite of msg_name in sock_sendmsg() 6bb432e9acb1 net/dst: use a smaller percpu_counter batch for dst entries accounting f5703759e9bc net: add a route cache full diagnostic message |
| bugzilla: https://gitee.com/openeuler/kernel/issues/I90DDU | 015307abdd03 net: check dev->gso_max_size in gso_features_check() 35dcfffe22a1 net: warn if gso_type isn't set for a GSO SKB 21ba1d8e2c15 mm: fix unmap_mapping_range high bits shift bug 57c640908436 x86/alternatives: Sync core before enabling interrupts |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I8RRAT | 6927b17e6b55 mm/filemap: avoid buffered read/write race to read inconsistent data |
| bugzilla: https://gitee.com/openeuler/kernel/issues/I902AI | cd7b614037cf net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I8RWPE | 942cf9e3c538 io_uring/af_unix: disable sending io_uring over sockets |
# 2CVE
-------
| CVE | issue |
|:---:|:-----:|
| CVE-2023-51043 | #I8YD5O |
| CVE-2023-6531 | #I8RWPE |
| CVE-2024-1086 | #I90B2K |

最后提交信息为： !4454 netfilter: nf_tables: reject QUEUE/DROP verdict parameters

openEuler 20.03 update 4.19.90-2402.1.0

2024-01-30 20:03 4.19.90-2402.1.0 86fa3a7

# 1TASK
-------
# 4.19.90-2401.5.0~1...4.19.90-2402.1.0
-------
| TASK | COMMIT |
|:----:|:------:|
| bugzilla: https://gitee.com/openeuler/kernel/issues/I8WPQW | 0f4e7166bfab fs:/dcache.c: fix negative dentry limit not complete problem |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I8YC9I | 1fd54506cdd6 net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv |
| bugzilla: https://gitee.com/openeuler/kernel/issues/I8ZPJF | 7edca569b886 smb: client: fix NULL deref in asn1_ber_decoder() |
| bugzilla: https://gitee.com/openeuler/kernel/issues/I8RJRU | 3e43a040ffac ipv6: init the accept_queue's spinlocks in inet6_create 30f27164de60 tcp: make sure init the accept_queue's spinlocks once |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I8YCSH | 902416bffda0 nfc: nci: fix possible NULL pointer dereference in send_acknowledge() |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I8YD58 | 7a514405c347 drm/amdgpu: Fix potential fence use-after-free v2 |
| bugzilla: https://gitee.com/openeuler/kernel/issues/I8YWPT | 596500bdf4dc dhugetlb: skip unexpected migration 096ad87561c0 dhugetlb: introduce page_belong_to_dynamic_hugetlb() function |
| bugzilla: https://gitee.com/openeuler/kernel/issues/I8ZA13 | 267bce716c10 crypto: hisilicon/qm - drop unnecessary IS_ENABLE(CONFIG_NUMA) check |
| bugzilla: https://gitee.com/openeuler/kernel/issues/I8Z1LM | f35453010a5c netlink: fix potential sleeping issue in mqueue_flush_file |
| bugzilla: https://gitee.com/openeuler/kernel/issues/I8MCB5 | d7adf3280ad2 time: Handle negative seconds correctly in timespec64_to_ns() ba0ac2e8b776 timerqueue: Use rb_entry_safe() in timerqueue_getnext() a5d647cbe9d1 efi/x86: Map the entire EFI vendor string before copying it |
| bugzilla: https://gitee.com/openeuler/kernel/issues/I8YHBT | 8e17c72c327f sched/fair: Fix qos_timer deadlock when cpuhp offline |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I8WZLA | 3f469030c4d1 sctp: fix potential deadlock on &net->sctp.addr_wq_lock |
# 2CVE
-------
| CVE | issue |
|:---:|:-----:|
| CVE-2023-46343 | #I8YCSH |
| CVE-2023-51042 | #I8YD58 |
| CVE-2024-0639 | #I8WZLA |
| CVE-2024-23849 | #I8YC9I |

最后提交信息为： !4277 fs:/dcache.c: fix negative dentry limit not complete problem

openEuler 20.03 update 4.19.90-2401.5.0

2024-01-23 21:28 4.19.90-2401.5.0 fb3a713

最后提交信息为： !4101 netfilter: nf_tables: fix pointer math issue in nft_byteorde...

openEuler 20.03 update 4.19.90-2401.4.0

2024-01-16 22:23 4.19.90-2401.4.0 deb75da

最后提交信息为： !4006 crypto: hisilicon/sec2: fix memory use-after-free issue

openEuler 20.03 update 4.19.90-2401.3.0

2024-01-09 21:23 4.19.90-2401.3.0 9b8b6ad

# 1TASK
-------
# 4.19.90-2401.1.0~1...4.19.90-2401.3.0
-------
| TASK | COMMIT |
|:----:|:------:|
| bugzilla: https://gitee.com/openeuler/kernel/issues/I8TKTW | 8a4c9fc6bf0a iomap: add support to track dirty state of sub pages |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I8SL4W | 9d445bf0c0f3 netfilter: ctnetlink: fix possible refcount leak in ctnetlink_create_conntrack() |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I8H4UJ | f6ffd92933f7 nvmet: nul-terminate the NQNs passed in the connect command |
| bugzilla: https://gitee.com/openeuler/kernel/issues/I8UH13 | ff206ede930b team: Fix use-after-free when an option instance allocation fails b2486f8ad862 packet: Move reference count in packet_sock to atomic_long_t 6acca9b1e016 tcp: do not accept ACK of bytes we never sent 70b09f35281c ipv4: ip_gre: Avoid skb_pull() failure in ipgre_xmit() 718b1164e222 ipv6: fix potential NULL deref in fib6_add() 3aeffaa97e95 ipv4: Correct/silence an endian warning in __ip_do_redirect 8652ced73c04 net: sched: fix race condition in qdisc_graft() 721d0e461ab6 macvlan: Don't propagate promisc change to lower dev in passthru 7c47581ec5f5 ppp: limit MRU to 64K 48ed2d918cdf tty: Fix uninit-value access in ppp_sync_receive() 995f9b676121 net: annotate data-races around sk->sk_dst_pending_confirm c2ff4dad290b net: annotate data-races around sk->sk_tx_queue_mapping be7367b3856a ring-buffer: Fix memory leak of free page 6df6ed71d511 arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify cb154d931dbf asm-generic: qspinlock: fix queued_spin_value_unlocked() implementation 7978f9d75bac Revert "PCI: acpiphp: Reassign resources on bridge if necessary" 67c4ef1c9ec7 x86/CPU/AMD: Check vendor in the AMD microcode callback 5843948433e8 genirq/generic_chip: Make irq_remove_generic_chip() irqdomain aware fe8847f77e60 audit: don't WARN_ON_ONCE(!current->mm) in audit_exe_compare() 19c82a7a105b audit: don't take task_lock() in audit_exe_compare() code path |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I8U2KA | cf1d16ea2f10 ext4: fix kernel BUG in 'ext4_write_inline_data_end()' |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I8TS78 | b2239f607df2 net/sched: cbs: Fix not adding cbs instance to list |
| bugzilla: https://gitee.com/openeuler/kernel/issues/I8TM21 | 4bb3021a1ab1 ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() |
| bugzilla: https://gitee.com/openeuler/kernel/issues/I8T1U8 | c221b29d9d8d devcoredump: Send uevent once devcd is ready f8fd036c9f3e devcoredump : Serialize devcd_del work 96cb9cba4854 driver core: Release all resources during unbind before updating device links |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I8RXOY | 865c6290b939 appletalk: Fix Use-After-Free in atalk_ioctl |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I8RXMW | d6754016ca19 net/rose: Fix Use-After-Free in rose_ioctl |
# 2CVE
-------
| CVE | issue |
|:---:|:-----:|
| CVE-2023-51781 | #I8RXOY |
| CVE-2023-51782 | #I8RXMW |
| CVE-2023-6121 | #I8H4UJ |
| CVE-2023-7192 | #I8SL4W |
| CVE-2021-33630 | #I8UACL |
| CVE-2021-33631 | #I8UAHM |

最后提交信息为： !3768 iomap: add support to track dirty state of sub pages

openEuler 20.03 update 4.19.90-2401.1.0

2024-01-02 20:42 4.19.90-2401.1.0 67e00fe

# 1TASK
-------
# 4.19.90-2312.6.0~1...4.19.90-2401.1.0
-------
| TASK | COMMIT |
|:----:|:------:|
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I8RXNR | 114a7062059a atm: Fix Use-After-Free in do_vcc_ioctl |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I8RXOD | 4e6a2c5b37da Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I8MXXY | d887e2c0cc07 smb: client: fix potential OOB in smb2_dump_detail() |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I8MXXW | 8e266ede52c4 smb: client: fix OOB in smbCalcSize() |
| bugzilla: https://gitee.com/openeuler/kernel/issues/I8RRXU?from=project-issue | f451338c8882 jbd2: fix soft lockup in journal_finish_inode_data_buffers() |
| bugzilla: https://gitee.com/openeuler/kernel/issues/I8LQI5?from=project-issue | 766ab5dcac65 fs: don't audit the capability check in simple_xattr_list() |
| bugzilla: https://gitee.com/openeuler/kernel/issues/I8KNM7 | e454b028dbee net: check vlan filter feature in vlan_vids_add_by_dev() and vlan_vids_del_by_dev() |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I7EDZ1 | c3a12f117bbf ravb: Fix races between ravb_tx_timeout_work() and net related ops 6763259e79e8 ravb: Fix use-after-free issue in ravb_tx_timeout_work() |
| bugzilla: https://gitee.com/openeuler/kernel/issues/I8P5HO | 8498a1c2adb9 ip: Fix data-races around sysctl_ip_no_pmtu_disc. 18bfaaff840a ip: Fix data-races around sysctl_ip_fwd_update_priority. |
# 2CVE
-------
| CVE | issue |
|:---:|:-----:|
| CVE-2023-35827 | #I7EDZ1 |
| CVE-2023-51779 | #I8RXOD |
| CVE-2023-51780 | #I8RXNR |
| CVE-2023-6606 | #I8MXXW |
| CVE-2023-6610 | #I8MXXY |

最后提交信息为： !3660 atm: Fix Use-After-Free in do_vcc_ioctl

GVPopenEuler / kernel关闭

搜索帮助

GVP openEuler / kernel
关闭