From: Ulrich Hecht <uli@fpond.eu>
To: "cip-dev@lists.cip-project.org" <cip-dev@lists.cip-project.org>,
"pavel@denx.de" <pavel@denx.de>,
"jan.kiszka@siemens.com" <jan.kiszka@siemens.com>,
"masami.ichikawa@cybertrust.co.jp"
<masami.ichikawa@cybertrust.co.jp>,
"chris.paterson2@renesas.com" <chris.paterson2@renesas.com>,
"nobuhiro1.iwamatsu@toshiba.co.jp"
<nobuhiro1.iwamatsu@toshiba.co.jp>
Subject: [ANNOUNCE] Release v4.19.325-cip125
Date: Tue, 21 Oct 2025 11:31:06 +0200 (CEST) [thread overview]
Message-ID: <4337027.175672.1761039096556@webmail.strato.de> (raw)
Hi,
the CIP kernel team has released Linux kernel v4.19.325-cip125. The linux-4.19.y-cip tree's base version has been updated to v4.19-st9. The trees are up-to-date with kernel 5.4.300.
You can get this release via the git tree or as a tarball from https://mirrors.edge.kernel.org/pub/linux/kernel/projects/cip/4.19/
v4.19.325-cip125:
repository:
https://git.kernel.org/pub/scm/linux/kernel/git/cip/linux-cip.git
branch:
linux-4.19.y-cip
commit hash:
d68802a940fe1efb4315cbd06f2fc8d9c861aec3
Fixed CVEs:
CVE-2023-52935: mm/khugepaged: fix ->anon_vma race
CVE-2025-21861: mm/migrate_device: don't add folio to be freed to LRU in migrate_device_finalize()
CVE-2025-23143: net: Fix null-ptr-deref by sock_lock_init_class_and_name() and rmmod.
CVE-2025-37968: iio: light: opt3001: fix deadlock due to concurrent flag access
CVE-2025-39839: batman-adv: fix OOB read/write in network-coding decode
CVE-2025-39846: pcmcia: Fix a NULL pointer dereference in __iodyn_find_io_region()
CVE-2025-39847: ppp: fix memory leak in pad_compress_skb
CVE-2025-39848: ax25: properly unshare skbs in ax25_kiss_rcv()
CVE-2025-39853: i40e: Fix potential invalid access when MAC list is empty
CVE-2025-39860: Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen()
CVE-2025-39869: dmaengine: ti: edma: Fix memory allocation size for queue_priority_map
CVE-2025-39876: net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable()
CVE-2025-39883: mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory
CVE-2025-39885: ocfs2: fix recursive semaphore deadlock in fiemap call
CVE-2025-39891: wifi: mwifiex: Initialize the chan_stats array to zero
CVE-2025-39898: e1000e: fix heap overflow in e1000_set_eeprom
CVE-2025-39902: mm/slub: avoid accessing metadata when pointer is invalid in object_err()
CVE-2025-39911: i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path
CVE-2025-39920: pcmcia: Add error handling for add_interval() in do_validate_mem()
CVE-2025-39923: dmaengine: qcom: bam_dma: Fix DT error handling for num-channels/ees
CVE-2025-39937: net: rfkill: gpio: Fix crash due to dereferencering uninitialized pointer
CVE-2025-39945: cnic: Fix use-after-free bugs in cnic_delete_task
CVE-2025-39953: cgroup: split cgroup_destroy_wq into 3 workqueues
CVE-2025-39955: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect().
CVE-2025-39967: fbcon: fix integer overflow in fbcon_do_set_font
CVE-2025-39968: i40e: add max boundary check for VF filters
CVE-2025-39970: i40e: fix input validation logic for action_meta
CVE-2025-39972: i40e: fix idx validation in i40e_validate_queue_map
CVE-2025-39973: i40e: add validation for ring_len param
CVE-2025-39985: can: mcba_usb: populate ndo_change_mtu() to prevent buffer overflow
CVE-2025-39986: can: sun4i_can: populate ndo_change_mtu() to prevent buffer overflow
CVE-2025-39987: can: hi311x: populate ndo_change_mtu() to prevent buffer overflow
Best regards,
Ulrich Hecht
reply other threads:[~2025-10-21 9:32 UTC|newest]
Thread overview: [no followups] expand[flat|nested] mbox.gz Atom feed
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=4337027.175672.1761039096556@webmail.strato.de \
--to=uli@fpond.eu \
--cc=chris.paterson2@renesas.com \
--cc=cip-dev@lists.cip-project.org \
--cc=jan.kiszka@siemens.com \
--cc=masami.ichikawa@cybertrust.co.jp \
--cc=nobuhiro1.iwamatsu@toshiba.co.jp \
--cc=pavel@denx.de \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox