release 4.19.90-2406.1.0 · Pull Request !1615 · src-openEuler/kernel

# 1TASK
-------
# 4.19.90-2405.5.0~1...4.19.90-2406.1.0
-------
| TASK | COMMIT |
|:----:|:------:|
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9RD6O | d3fa218972c1 comedi: dt9812: fix DMA buffers on stack |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9R4CC | 80e664495e6b mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq 8a6046ce7b59 mISDN: fix possible use-after-free in HFC_cleanup() |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9R4I7 | d13a97a4f976 bcache: avoid oversized read request in cache missing code path |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9R4LM | a62e62fe4f33 smb: client: fix use-after-free bug in cifs_debug_data_proc_show() |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9R4CD | 92529c2f7c5c udf: Fix NULL pointer dereference in udf_symlink function |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9OZAK | 2b8a7fa4d670 Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9R4K3 | aba828d558af net: hamradio: fix memory leak in mkiss_close |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9T6MM | 1acf09cb504b ppdev: Add an error check in register_device f19b09ec9c04 ppdev: Remove usage of the deprecated ida_simple_xx() API |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9RL3N | 0e3875e1a43f memory: fsl_ifc: fix leak of private memory on probe failure |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9Q98W | b62936e36331 md/dm-raid: don't clear MD_RECOVERY_FROZEN after setting frozen b23d90c677d4 md/dm-raid: don't call md_reap_sync_thread() directly |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9QGM9 | 43f532f16c7f block: prevent division by zero in blk_rq_stat_sum() |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9S3H8 | 1668d19dbbf2 watchdog: sc520_wdt: Fix possible use-after-free in wdt_turnoff() |
| bugzilla: https://gitee.com/openeuler/kernel/issues/I9SZXR | 22801ad20e66 hugetlb: pass head page to remove_hugetlb_page() 6dd6a407d0e4 hugetlbfs: fix hugetlbfs_statfs() locking caafc0a98fd6 hugetlb: make free_huge_page irq safe 16f8b80fad16 hugetlb: change free_pool_huge_page to remove_pool_huge_page 5f723833bf2d hugetlb: call update_and_free_page without hugetlb_lock f6bd0de486a2 hugetlb: create remove_hugetlb_page() to separate functionality 6fb7b2687f80 Revert "hugetlb: make free_huge_page irq safe" ddf26a67abf7 Revert "hugetlbfs: fix hugetlbfs_statfs() locking" |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9RE6D | 8adcf0888e11 wifi: mac80211: don't return unset power in ieee80211_get_tx_power() |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9R4LE | 45e02b8863ad net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9REBH | 9fb89640a114 jfs: fix array-index-out-of-bounds in dbFindLeaf 3bdee0ef213e fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9RFK8 | c38c6cc6609c tty: vcc: Add check for kstrdup() in vcc_probe() |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9TM8C | e9c11657ba94 pinctrl: core: delete incorrect free in pinctrl_enable() |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9R4L4 | eccaf70b1dd7 arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer e7623003a57d arm64: Make CPU_BIG_ENDIAN depend on ld.bfd or ld.lld 13.0.0+ |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9R4O8 | c59ddbda502f drm/amd/pm: Update intermediate power state for SI |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9R4I0 | 85f749fa1d04 net: fix uninit-value in caif_seqpkt_sendmsg |
| bugzilla: 189755, https://gitee.com/openeuler/kernel/issues/I9K0H3 | 62497afb8043 block: fix overflow in blk_ioctl_discard() |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9R4O4 | efa8000a327e scsi: iscsi: Fix iscsi_task use after free aa6ec519c3f2 scsi: iscsi: Have abort handler get ref to conn |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9S6FQ | 45a95239491e sata_fsl: fix UAF in sata_fsl_port_stop when rmmod sata_fsl |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9RBHJ | 9177a1d02775 NFC: digital: fix possible memory leak in digital_tg_listen_mdaa() |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9RBH0 | 0bdc56f63b30 NFC: digital: fix possible memory leak in digital_in_send_sdd_req() |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9RB24 | 29abd308cb01 can: j1939: j1939_netdev_start(): fix UAF for rx_kref of j1939_priv |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9QRBX | 188320901ecd Bluetooth: Fix memory leak in hci_req_sync_complete() |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9S273 | 8e3c5ed9498b perf hist: Fix memory leak of a perf_hpp_fmt |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9R4E8 | cd5e3b766960 atm: iphase: fix possible use-after-free in ia_module_exit() |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9R4CI | 40e2d67ca0aa powerpc/mm: Fix lockup on kernel exec fault |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9S6TL | de4633796716 tty: serial: 8250: serial_cs: Fix a memory leak in error handling path |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9R4OD | c5914797c847 mac80211: limit injected vht mcs/nss in ieee80211_parse_tx_radiotap |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9R4K5 | 36d4e7a0e073 kvm: fix previous commit for 32-bit builds 81f70a86d0a2 kvm: avoid speculation-based attacks from out-of-range memslot accesses |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9R4NL | b2f3e34e2bec drm/nouveau/debugfs: fix file release memory leak |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9RBPH | a0e504d5fbe3 net/mlx5e: nullify cq->dbg pointer in mlx5_debug_cq_remove() ee04075736cd net/mlx5e: Fix memory leak in mlx5_core_destroy_cq() error path |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9R4NV | 603875d23401 mac80211: fix use-after-free in CCMP/GCMP RX |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9QRLI | 5dde15cdf5e4 net/mlx5: Properly link new fs rules into the tree |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9R4OM | f7af731fe290 HID: betop: fix slab-out-of-bounds Write in betop_probe |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9R4NP | 64d039aea57e HID: usbhid: free raw_report buffers in usbhid_stop |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9R4M2 | 7a75e367be5d mcb: fix error handling in mcb_alloc_bus() |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9RFI8 | 2567bb3bef85 KVM: x86: Handle SRCU initialization failure during page track init |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9Q98P | b1c28b84510f usb: udc: remove warning when queue disabled ep |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9QRF9 | cd39f3a070a4 i40e: Do not use WQ_MEM_RECLAIM flag for workqueue |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9REBR | 2611f48412e8 iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe() |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9RFMU | eaf88f320293 jfs: fix array-index-out-of-bounds in diAlloc |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9R4NQ | df18700c9a2b netfilter: conntrack: serialize hash resizes and cleanups |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9S24Z | 36783b50b5ee ethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array overflow in hns_dsaf_ge_srst_by_port() |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9RFE8 | 67a12c71e3f0 drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga |
| bugzilla: https://gitee.com/openeuler/kernel/issues/I9SZXR | 6983a327d516 hugetlbfs: fix hugetlbfs_statfs() locking |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9Q9CJ | 937ac1830e10 ACPI: video: check for error while searching for backlight device parent |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9RFH5 | 71af92fe6cd1 ipvlan: add ipvlan_route_v6_outbound() helper |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9QG8B | 92396929ae3c x86/mm/pat: fix VM_PAT handling in COW mappings |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9Q994 | 1f6c17a42a8b vt: fix unicode buffer corruption when deleting characters |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9R4NI | b698b53ef2c9 ipack: ipoctal: fix stack information leak |
| bugzilla: https://gitee.com/openeuler/kernel/issues/I9OZI6 | de526968c4ac x86/ioapic: Unbreak check_timer() 4e827343168a irqchip/gic-v3: Ensure pseudo-NMIs have an ISB between ack and handling bab2540384e0 genirq/ipi: Fix NULL pointer deref in irq_data_get_affinity_mask() |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9R4DH | 2411e537dccd atm: nicstar: Fix possible use-after-free in nicstar_cleanup() |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9RFL2 | 38964766ba17 cpu/hotplug: Don't offline the last non-isolated CPU |
| bugzilla: https://gitee.com/openeuler/kernel/issues/I9SZXR | 7f5b02162b3c hugetlb: make free_huge_page irq safe 850276620911 mm/hugetlb: defer freeing of huge pages if in non-task context |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9RD17 | 029b3bebdb11 comedi: vmk80xx: fix expression for tx buffer size c779007a20bf comedi: vmk80xx: fix transfer-buffer overflows |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9QGIO | aeee0e6ca926 sysv: don't call sb_bread() with pointers_lock held |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9R4LN | f2f90e94c729 gfs2: ignore negated quota changes |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9R4GV | 2dc7f1141531 RDMA: Verify port when creating flow rule |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9RFB7 | 070d05290ae5 tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9RG40 | 46498e5b475f fs/jfs: Add validity check for db_maxag and db_agpref e4828f7da418 fs: jfs: fix shift-out-of-bounds in dbAllocAG 4b28e37b5167 jfs: fix divide error in dbNextAG |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9S242 | c82290c5664d net/smc: Fix NULL pointer dereferencing in smc_vlan_by_tcpsk() |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9REA2 | d83caf5c4b71 can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9Q8YT | b832eb986989 wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes 3c0010cf4356 mac80211: clear sta->fast_rx when STA removed from 4-addr VLAN |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9QG73 | 04409b6350ea selinux: avoid dereference of garbage after mount failure |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9RFHM | a4d51cc78b43 ALSA: hda: Fix possible null-ptr-deref when assigning a stream |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9RBKI | a7af9966727d ocfs2: mount fails with buffer overflow in strlen |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9RB7E | 97136ba560ae drm/msm: Fix null pointer dereference on pointer edp |
| bugzilla: https://gitee.com/openeuler/kernel/issues/I9NZ3E | d57579011d8c x86/cpufeatures: Fix dependencies for GFNI, VAES, and VPCLMULQDQ |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9Q9DK | 26603946ed66 crypto: s390/aes - Fix buffer overread in CTR mode |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9QRD6 | af3c04e57960 ACPI: CPPC: Fix access width used for PCC registers c7613e09076c ACPI: CPPC: Fix bit_offset shift in MASK_VAL() macro 40d50af09a6c ACPI: CPPC: Use access_width over bit_width for system memory accesses 89c8b25c2e2b ACPI: CPPC: Fix up I/O port access in cpc_read() 8639e3b75590 ACPI: CPPC: Implement support for SystemIO registers |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9RCX9 | 2015ffc7aea2 usbnet: fix error return code in usbnet_probe() 9fe1ae188b82 usbnet: sanity check for maxpacket |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9R4L9 | 2d3adc9894bb pinctrl: single: fix potential NULL dereference |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9R4O3 | 0e9d3861c135 sctp: break out if skb_header_pointer returns NULL in sctp_rcv_ootb |
| bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9RG0L | 65dd25df0962 scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup() |
# 2CVE
-------
| CVE | issue |
|:---:|:-----:|
| CVE-2021-47237 | #I9R4K3 |
| CVE-2021-47265 | #I9R4GV |
| CVE-2021-47275 | #I9R4I7 |
| CVE-2021-47277 | #I9R4K5 |
| CVE-2021-47297 | #I9R4I0 |
| CVE-2021-47314 | #I9RL3N |
| CVE-2021-47323 | #I9S3H8 |
| CVE-2021-47330 | #I9S6TL |
| CVE-2021-47350 | #I9R4CI |
| CVE-2021-47353 | #I9R4CD |
| CVE-2021-47355 | #I9R4DH |
| CVE-2021-47356 | #I9R4CC |
| CVE-2021-47357 | #I9R4E8 |
| CVE-2021-47361 | #I9R4M2 |
| CVE-2021-47362 | #I9R4O8 |
| CVE-2021-47388 | #I9R4NV |
| CVE-2021-47395 | #I9R4OD |
| CVE-2021-47397 | #I9R4O3 |
| CVE-2021-47401 | #I9R4NI |
| CVE-2021-47404 | #I9R4OM |
| CVE-2021-47405 | #I9R4NP |
| CVE-2021-47407 | #I9RFI8 |
| CVE-2021-47407 | #I9R4P8 |
| CVE-2021-47408 | #I9R4NQ |
| CVE-2021-47423 | #I9R4NL |
| CVE-2021-47427 | #I9R4O4 |
| CVE-2021-47438 | #I9RBPH |
| CVE-2021-47442 | #I9RBH0 |
| CVE-2021-47443 | #I9RBHJ |
| CVE-2021-47445 | #I9RB7E |
| CVE-2021-47458 | #I9RBKI |
| CVE-2021-47459 | #I9RB24 |
| CVE-2021-47475 | #I9RD17 |
| CVE-2021-47477 | #I9RD6O |
| CVE-2021-47495 | #I9RCX9 |
| CVE-2021-47545 | #I9S273 |
| CVE-2021-47548 | #I9S24Z |
| CVE-2021-47549 | #I9S6FQ |
| CVE-2021-47559 | #I9S242 |
| CVE-2022-48708 | #I9R4L9 |
| CVE-2023-52669 | #I9Q9DK |
| CVE-2023-52693 | #I9Q9CJ |
| CVE-2023-52699 | #I9QGIO |
| CVE-2023-52703 | #I9R4LE |
| CVE-2023-52750 | #I9R4L4 |
| CVE-2023-52752 | #I9R4LM |
| CVE-2023-52759 | #I9R4LN |
| CVE-2023-52789 | #I9RFK8 |
| CVE-2023-52796 | #I9RFH5 |
| CVE-2023-52799 | #I9REBH |
| CVE-2023-52802 | #I9REBR |
| CVE-2023-52804 | #I9RG40 |
| CVE-2023-52805 | #I9RFMU |
| CVE-2023-52806 | #I9RFHM |
| CVE-2023-52809 | #I9RG0L |
| CVE-2023-52819 | #I9RFE8 |
| CVE-2023-52831 | #I9RFL2 |
| CVE-2023-52832 | #I9RE6D |
| CVE-2023-52845 | #I9RFB7 |
| CVE-2023-52878 | #I9REA2 |
| CVE-2024-27399 | #I9OZAK |
| CVE-2024-35789 | #I9Q8YT |
| CVE-2024-35808 | #I9Q98W |
| CVE-2024-35822 | #I9Q98P |
| CVE-2024-35823 | #I9Q994 |
| CVE-2024-35877 | #I9QG8B |
| CVE-2024-35904 | #I9QG73 |
| CVE-2024-35925 | #I9QGM9 |
| CVE-2024-35960 | #I9QRLI |
| CVE-2024-35978 | #I9QRBX |
| CVE-2024-35995 | #I9QRD6 |
| CVE-2024-36004 | #I9QRF9 |
| CVE-2024-36015 | #I9T6MM |
| CVE-2024-36940 | #I9TM8C |

src-openEuler/kernel .gitee-modal { width: 500px !important; }

搜索帮助

src-openEuler/kernel