# high-offset triage 2026-10-01T18:18:58+00:00
# list=/srv/rom/src/lineage/vendor/sunfish-a16/patches/009-kernel-hardening/cve-high-offset-ge200.txt count=73
mmfs,	CVE-2020-29372/^5.7/0001.patch	mm: check that mm is still valid in madvise()	mm/madvise.c,
other,	CVE-2021-47209/^5.15/0001.patch	sched/fair: Prevent dead task groups from regaining cfs_rq's	kernel/sched/autogroup.c,kernel/sched/core.c,kernel/sched/fair.c,kernel/sched/rt.c,kernel/sched/sched.h,
net,	CVE-2021-47299/^5.13/0001.patch	xdp, net: Fix use-after-free in bpf_xdp_link_release	net/core/dev.c,
offarch,	CVE-2022-48825/^5.17/0001.patch	scsi: qedf: Add stag_work to all the vports	drivers/scsi/qedf/qedf_main.c,
net,	CVE-2022-48969/^6.1/0001.patch	xen-netfront: Fix NULL sring after live migration	drivers/net/xen-netfront.c,
net,	CVE-2022-49086/ANY/0001.patch	net: openvswitch: fix leak of nested actions	net/openvswitch/flow_netlink.c,
net,	CVE-2022-49341/ANY/0001.patch	bpf, arm64: Clear prog->jited_len along prog->jited	arch/arm64/net/bpf_jit_comp.c,
mmfs,	CVE-2022-49412/ANY/0001.patch	bfq: Avoid merging queues with different parents	block/bfq-iosched.c,
other,	CVE-2022-49641/ANY/0001.patch	sysctl: Fix data races in proc_douintvec().	kernel/sysctl.c,
net,	CVE-2022-49687/ANY/0001.patch	virtio_net: fix xdp_rxq_info bug after suspend/resume	drivers/net/virtio_net.c,
net,	CVE-2022-49695/ANY/0001.patch	igb: fix a use-after-free issue in igb_clean_tx_ring	drivers/net/ethernet/intel/igb/igb_main.c,
other,	CVE-2022-49715/ANY/0001.patch	irqchip/gic-v3: Fix refcount leak in gic_populate_ppi_partitions	drivers/irqchip/irq-gic-v3.c,
usb,	CVE-2022-50246/ANY/0001.patch	usb: typec: tcpci: fix of node refcount leak in tcpci_register_port()	drivers/usb/typec/tcpm/tcpci.c,
other,	CVE-2022-50304/ANY/0001.patch	mtd: core: fix possible resource leak in init_mtd()	drivers/mtd/mtdcore.c,
net,	CVE-2023-3777/^6.5/0001.patch	netfilter: nf_tables: skip bound chain on rule flush	net/netfilter/nf_tables_api.c,
other,	CVE-2023-52486/^6.7/0001.patch	drm: Don't unref the same fb many times by mistake due to deadlock	drivers/gpu/drm/drm_plane.c,
other,	CVE-2023-52676/^6.7/0001.patch	bpf: Guard stack limits against 32bit overflow	kernel/bpf/verifier.c,
other,	CVE-2023-52707/^6.2/0001.patch	sched/psi: Fix use-after-free in ep_remove_wait_queue()	kernel/sched/psi.c,
other,	CVE-2023-52847/^6.6/0001.patch	media: bttv: fix use after free error due to btv->timeout timer	drivers/media/pci/bt8xx/bttv-driver.c,
other,	CVE-2023-53594/ANY/0001.patch	driver core: fix resource leak in device_add()	drivers/base/core.c,
net,	CVE-2023-53669/ANY/0001.patch	tcp: fix skb_copy_ubufs() vs BIG TCP	net/core/skbuff.c,
other,	CVE-2023-53709/ANY/0001.patch	ring-buffer: Handle race between rb_move_tail and rb_check_pages	kernel/trace/ring_buffer.c,
offarch,	CVE-2024-2201/^6.9/0001.patch	x86/bugs: Change commas to semicolons in 'spectre_v2' sysfs file	arch/x86/kernel/cpu/bugs.c,
offarch,	CVE-2024-24855/^6.4/0001.patch	scsi: lpfc: Fix a possible data race in lpfc_unregister_fcf_rescan()	drivers/scsi/lpfc/lpfc_hbadisc.c,
net,	CVE-2024-26643/^6.8/0001.patch	netfilter: nf_tables: mark set as dead when unbinding anonymous set	net/netfilter/nf_tables_api.c,
other,	CVE-2024-26900/^6.8/0001.patch	md: fix kmemleak of rdev->serial	drivers/md/md.c,
net,	CVE-2024-39296/^6.9/0001.patch	bonding: fix oops during rmmod	drivers/net/bonding/bond_main.c,
mmfs,	CVE-2024-40917/^6.10/0001.patch	memblock: make memblock_set_node() also warn about use of	mm/memblock.c,
net,	CVE-2024-40923/^6.10/0001.patch	vmxnet3: disable rx data ring on dma allocation failure	drivers/net/vmxnet3/vmxnet3_drv.c,
net,	CVE-2024-40954/^6.10/0001.patch	net: do not leave a dangling sk pointer, when socket creation fails	net/core/sock.c,
mmfs,	CVE-2024-41014/^6.10/0001.patch	xfs: add bounds checking to xlog_recover_process_data	fs/xfs/xfs_log_recover.c,
net,	CVE-2024-43879/^6.10/0001.patch	wifi: cfg80211: handle 2x996 RU allocation in	net/wireless/util.c,
net,	CVE-2024-46754/^6.10/0001.patch	bpf: Remove tst_run from lwt_seg6local_prog_ops.	net/core/filter.c,
offarch,	CVE-2024-46830/^6.11/0001.patch	KVM: x86: Acquire kvm->srcu when handling KVM_SET_VCPU_EVENTS	arch/x86/kvm/x86.c,
net,	CVE-2024-50186/^6.12/0001.patch	net: explicitly clear the sk pointer, when pf->create fails	net/socket.c,
mmfs,	CVE-2024-50273/^6.11/0001.patch	btrfs: reinitialize delayed ref list after deleting it from the list	fs/btrfs/delayed-ref.c,
mmfs,	CVE-2024-53066/^6.12/0001.patch	nfs: Fix KMSAN warning in decode_getfattr_attrs()	fs/nfs/inode.c,
mmfs,	CVE-2024-53173/ANY/0002.patch	NFSv4.0: Fix a use-after-free problem in the asynchronous open()	fs/nfs/nfs4proc.c,
mmfs,	CVE-2024-53217/ANY/0002.patch	NFSD: Prevent NULL dereference in nfsd4_process_cb_update()	fs/nfsd/nfs4callback.c,
net,	CVE-2024-53240/ANY/0001.patch	xen/netfront: fix crash when removing device	drivers/net/xen-netfront.c,
mmfs,	CVE-2024-56558/ANY/0001.patch	nfsd: make sure exp active before svc_export_show	fs/nfsd/export.c,
other,	CVE-2024-56569/ANY/0001.patch	ftrace: Fix regression with module command in stack_trace_filter	kernel/trace/ftrace.c,
mmfs,	CVE-2024-56596/ANY/0002.patch	jfs: fix array-index-out-of-bounds in jfs_readdir	fs/jfs/jfs_dtree.c,
mmfs,	CVE-2024-56598/ANY/0002.patch	jfs: array-index-out-of-bounds fix in dtReadFirst	fs/jfs/jfs_dtree.c,
net,	CVE-2024-56605/ANY/0002.patch	Bluetooth: L2CAP: do not leave dangling sk pointer on error in	net/bluetooth/l2cap_sock.c,
mmfs,	CVE-2024-56779/ANY/0002.patch	nfsd: fix nfs4_openowner leak when concurrent nfsd4_open occur	fs/nfsd/nfs4state.c,
offarch,	CVE-2024-57849/ANY/0002.patch	s390/cpum_sf: Handle CPU hotplug remove during sampling	arch/s390/kernel/perf_cpum_sf.c,
net,	CVE-2024-58009/ANY/0001.patch	Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc	net/bluetooth/l2cap_sock.c,
other,	CVE-2024-58083/ANY/0001.patch	KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()	include/linux/kvm_host.h,
mmfs,	CVE-2025-21671/ANY/0001.patch	zram: fix potential UAF of zram table	drivers/block/zram/zram_drv.c,
net,	CVE-2025-21909/ANY/0001.patch	wifi: nl80211: reject cooked mode if it is set along with other flags	net/wireless/nl80211.c,
net,	CVE-2025-37789/ANY/0001.patch	net: openvswitch: fix nested key length validation in the set()	net/openvswitch/flow_netlink.c,
net,	CVE-2025-37795/ANY/0001.patch	wifi: mac80211: Update skb's control block key in	net/mac80211/tx.c,
mmfs,	CVE-2025-37839/ANY/0001.patch	jbd2: remove wrong sb->s_sequence check	fs/jbd2/journal.c,
other,	CVE-2025-37923/ANY/0001.patch	tracing: Fix oob write in trace_seq_to_buffer()	kernel/trace/trace.c,
net,	CVE-2025-37932/ANY/0001.patch	sch_htb: make htb_qlen_notify() idempotent	net/sched/sch_htb.c,
other,	CVE-2025-38034/ANY/0001.patch	btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref	include/trace/events/btrfs.h,
other,	CVE-2025-38044/ANY/0001.patch	media: cx231xx: set device_caps for 417	drivers/media/usb/cx231xx/cx231xx-417.c,
net,	CVE-2025-38200/ANY/0001.patch	i40e: fix MMIO write access to an invalid page in i40e_clear_hw	drivers/net/ethernet/intel/i40e/i40e_common.c,
mmfs,	CVE-2025-38204/ANY/0001.patch	jfs: fix array-index-out-of-bounds read in add_missing_indices	fs/jfs/jfs_dtree.c,
mmfs,	CVE-2025-38218/ANY/0001.patch	f2fs: fix to do sanity check on sit_bitmap_size	fs/f2fs/super.c,
other,	CVE-2025-38285/ANY/0001.patch	bpf: Fix WARN() in get_bpf_raw_tp_regs	kernel/trace/bpf_trace.c,
net,	CVE-2025-38473/ANY/0001.patch	Bluetooth: Fix null-ptr-deref in l2cap_sock_resume_cb()	net/bluetooth/l2cap_sock.c,
other,	CVE-2025-38495/ANY/0001.patch	HID: core: ensure the allocated report buffer can contain the	drivers/hid/hid-core.c,
mmfs,	CVE-2025-38498/ANY/0002.patch	do_change_type(): refuse to operate on unmounted/not ours mounts	fs/namespace.c,
other,	CVE-2025-39742/ANY/0001.patch	RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask()	drivers/infiniband/hw/hfi1/affinity.c,
audio,	CVE-2025-39751/ANY/0001.patch	ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control	sound/pci/hda/patch_ca0132.c,
other,	CVE-2025-39824/ANY/0001.patch	HID: asus: fix UAF via HID_CLAIMED_INPUT validation	drivers/hid/hid-asus.c,
net,	CVE-2025-39847/ANY/0001.patch	ppp: fix memory leak in pad_compress_skb	drivers/net/ppp/ppp_generic.c,
net,	CVE-2025-39874/ANY/0001.patch	macsec: sync features on RTM_NEWLINK	drivers/net/macsec.c,
other,	CVE-2025-39998/ANY/0001.patch	scsi: target: target_core_configfs: Add length check to avoid buffer	drivers/target/target_core_configfs.c,
net,	CVE-2025-40078/ANY/0001.patch	bpf: Explicitly check accesses to bpf_sock_addr	net/core/filter.c,
mmfs,	CVE-2025-40080/ANY/0001.patch	nbd: restrict sockets to TCP and UDP	drivers/block/nbd.c,
--- counts ---
     27 net,
     21 other,
     18 mmfs,
      5 offarch,
      1 usb,
      1 audio,
      1 --- counts ---
