http://www.openwall.com/lists/oss-security/2024/09/24/3

http://www.openwall.com/lists/oss-security/2024/09/24/4

http://www.openwall.com/lists/oss-security/2024/09/25/3

https://git.kernel.org/stable/c/19d997b59fa1fd7a02e770ee0881c0652b9c32c9

https://git.kernel.org/stable/c/2a2e79dbe2236a1289412d2044994f7ab419b44c

https://git.kernel.org/stable/c/31f03bb04146c1c6df6c03e9f45401f5f5a985d3

https://git.kernel.org/stable/c/3d550dd5418729a6e77fe7721d27adea7152e321

https://git.kernel.org/stable/c/66be40e622e177316ae81717aa30057ba9e61dff

https://git.kernel.org/stable/c/8c2debdd170e395934ac0e039748576dfde14e99

https://git.kernel.org/stable/c/cdffc358717e436bb67122bb82c1a2a26e050f98

https://git.kernel.org/stable/c/ef7c428b425beeb52b894e16f1c4b629d6cebfb6

https://security.netapp.com/advisory/ntap-20240828-0010/

NIST AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

NIST AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NIST AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NIST CWE-754

OR
     *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 3.14 up to (excluding) 4.19.318
     *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 4.20 up to (excluding) 5.4.280
     *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.5 up to (excluding) 5.10.222
     *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.11 up to (excluding) 5.15.163
     *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions fro

https://git.kernel.org/stable/c/19d997b59fa1fd7a02e770ee0881c0652b9c32c9 No Types Assigned

https://git.kernel.org/stable/c/19d997b59fa1fd7a02e770ee0881c0652b9c32c9 Mailing List, Patch

https://git.kernel.org/stable/c/2a2e79dbe2236a1289412d2044994f7ab419b44c No Types Assigned

https://git.kernel.org/stable/c/2a2e79dbe2236a1289412d2044994f7ab419b44c Mailing List, Patch

https://git.kernel.org/stable/c/31f03bb04146c1c6df6c03e9f45401f5f5a985d3 No Types Assigned

https://git.kernel.org/stable/c/31f03bb04146c1c6df6c03e9f45401f5f5a985d3 Mailing List, Patch

https://git.kernel.org/stable/c/3d550dd5418729a6e77fe7721d27adea7152e321 No Types Assigned

https://git.kernel.org/stable/c/3d550dd5418729a6e77fe7721d27adea7152e321 Mailing List, Patch

https://git.kernel.org/stable/c/66be40e622e177316ae81717aa30057ba9e61dff No Types Assigned

https://git.kernel.org/stable/c/66be40e622e177316ae81717aa30057ba9e61dff Mailing List, Patch

https://git.kernel.org/stable/c/8c2debdd170e395934ac0e039748576dfde14e99 No Types Assigned

https://git.kernel.org/stable/c/8c2debdd170e395934ac0e039748576dfde14e99 Mailing List, Patch

https://git.kernel.org/stable/c/cdffc358717e436bb67122bb82c1a2a26e050f98 No Types Assigned

https://git.kernel.org/stable/c/cdffc358717e436bb67122bb82c1a2a26e050f98 Mailing List, Patch

https://git.kernel.org/stable/c/ef7c428b425beeb52b894e16f1c4b629d6cebfb6 No Types Assigned

https://git.kernel.org/stable/c/ef7c428b425beeb52b894e16f1c4b629d6cebfb6 Mailing List, Patch

In the Linux kernel, the following vulnerability has been resolved:

tcp_metrics: validate source addr length

I don't see anything checking that TCP_METRICS_ATTR_SADDR_IPV4
is at least 4 bytes long, and the policy doesn't have an entry
for this attribute at all (neither does it for IPv6 but v6 is
manually validated).

kernel.org https://git.kernel.org/stable/c/19d997b59fa1fd7a02e770ee0881c0652b9c32c9 [No types assigned]

kernel.org https://git.kernel.org/stable/c/2a2e79dbe2236a1289412d2044994f7ab419b44c [No types assigned]

kernel.org https://git.kernel.org/stable/c/31f03bb04146c1c6df6c03e9f45401f5f5a985d3 [No types assigned]

kernel.org https://git.kernel.org/stable/c/3d550dd5418729a6e77fe7721d27adea7152e321 [No types assigned]

kernel.org https://git.kernel.org/stable/c/66be40e622e177316ae81717aa30057ba9e61dff [No types assigned]

kernel.org https://git.kernel.org/stable/c/8c2debdd170e395934ac0e039748576dfde14e99 [No types assigned]

kernel.org https://git.kernel.org/stable/c/cdffc358717e436bb67122bb82c1a2a26e050f98 [No types assigned]

kernel.org https://git.kernel.org/stable/c/ef7c428b425beeb52b894e16f1c4b629d6cebfb6 [No types assigned]