Release v4.4.302-cip89
Hi,
the CIP kernel team has released Linux kernel v4.4.302-cip89. The linux-4.4.y-cip tree's base version has been updated to v4.4-st54. The trees are up-to-date with kernel 4.19.316.
You can get this release via the git tree or as a tarball from https://mirrors.edge.kernel.org/pub/linux/kernel/projects/cip/4.4/
v4.4.302-cip89:
repository:
https://git.kernel.org/pub/scm/linux/kernel/git/cip/linux-cip.git
branch:
linux-4.4.y-cip
commit hash:
66bc7bd5b1c1d589edc9f96367624555b4684837
Fixed CVEs:
CVE-2024-33621: ipvlan: Dont Use skb->sk in ipvlan_process_v{4,6}_outbound
CVE-2024-36286: netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
CVE-2024-37356: tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
CVE-2024-38381: nfc: nci: Fix uninit-value in nci_rx_work
CVE-2024-38583: nilfs2: fix use-after-free of timer for log writer thread
CVE-2024-38621: media: stk1160: fix bounds checking in stk1160_copy_video()
CVE-2024-38627: stm class: Fix a double free in stm_register_device()
CVE-2024-38633: serial: max3100: Update uart_driver_registered on driver removal
CVE-2024-38634: serial: max3100: Lock port->lock when calling uart_handle_cts_change()
CVE-2024-38659: enic: Validate length of nl attributes in enic_set_vf_port
CVE-2024-39292: um: Add winch to winch_handlers before registering winch IRQ
CVE-2024-39301: net/9p: fix uninit-value in p9_client_rpc()
CVE-2024-39475: fbdev: savage: Handle err return when savagefb_check_var failed
CVE-2024-39480: kdb: Fix buffer overflow during tab-complete
Best regards,
Ulrich Hecht