Skip to content

Commit 3aa1bbf

Browse files
aboutcode-automationaboutcode-automation
committed
Sync Collecting Fix Commits: Mon Sep 7 18:18:27 UTC 2026
Signed-off-by: AboutCode Automation <automation@aboutcode.org>
1 parent c37af3b commit 3aa1bbf

14 files changed

Lines changed: 291 additions & 23 deletions

‎data/fix-commits/advisory-database-b78f1d41.json‎

Lines changed: 45 additions & 17 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,51 @@
11
{
22
"vcs_url": "https://github.com/github/advisory-database",
33
"vulnerabilities": {
4+
"GHSA-9W5V-HQ8Q-C6H7": {
5+
"b432bb23502b337cdd9605ea4d4afeb809b82503": "Improve GHSA-9w5v-hq8q-c6h7"
6+
},
7+
"GHSA-VJ7F-9Q44-G5XV": {
8+
"b843f9364735308773844829b594b7a88d4b8fc4": "Improve GHSA-vj7f-9q44-g5xv"
9+
},
10+
"GHSA-92PX-7R7F-W562": {
11+
"b17707d977356935d32a5d9d665f67ee80969e82": "Publish Advisories\n\nGHSA-92px-7r7f-w562\nGHSA-jrwc-g36x-gqc7\nGHSA-pfmg-m2fv-v732"
12+
},
13+
"GHSA-JRWC-G36X-GQC7": {
14+
"b17707d977356935d32a5d9d665f67ee80969e82": "Publish Advisories\n\nGHSA-92px-7r7f-w562\nGHSA-jrwc-g36x-gqc7\nGHSA-pfmg-m2fv-v732"
15+
},
16+
"GHSA-PFMG-M2FV-V732": {
17+
"b17707d977356935d32a5d9d665f67ee80969e82": "Publish Advisories\n\nGHSA-92px-7r7f-w562\nGHSA-jrwc-g36x-gqc7\nGHSA-pfmg-m2fv-v732"
18+
},
19+
"GHSA-CP6Q-959Q-F8RH": {
20+
"d023347982a0e48eac83b26fc5cdb2ae69fdc927": "Improve GHSA-cp6q-959q-f8rh",
21+
"f4f155e8b8ddc0d114c9e03baae2a835bf3f08ec": "Improve GHSA-cp6q-959q-f8rh",
22+
"d4741382dc58cd8cf90cccdbf594362af08d7dc5": "Improve GHSA-cp6q-959q-f8rh",
23+
"b2a1df9e3433a339b2255b8e0dc5e4703f61d90d": "Improve GHSA-cp6q-959q-f8rh",
24+
"69b58522cef9fa1d0c736b242cc88ccb075ce9af": "Publish Advisories\n\nGHSA-wx95-c6cv-8532\nGHSA-c4rq-3m3g-8wgx\nGHSA-v2fc-qm4h-8hqv\nGHSA-5jhf-fpp7-v2pv\nGHSA-crp9-r7rq-c8cg\nGHSA-gx65-c5hj-vpv5\nGHSA-jx89-3qg8-p2mr\nGHSA-rh9x-7xjc-vwx2\nGHSA-vp9c-2pjm-8925\nGHSA-xqqh-3w52-q8p7\nGHSA-cp6q-959q-f8rh\nGHSA-5jhf-fpp7-v2pv\nGHSA-crp9-r7rq-c8cg\nGHSA-gx65-c5hj-vpv5\nGHSA-jx89-3qg8-p2mr\nGHSA-rh9x-7xjc-vwx2\nGHSA-vp9c-2pjm-8925\nGHSA-xqqh-3w52-q8p7"
25+
},
26+
"GHSA-47M2-WP7J-P9VC": {
27+
"04ba504ff1a204d716cbd341f41cdb4a77ef28cf": "Improve GHSA-47m2-wp7j-p9vc"
28+
},
29+
"GHSA-53PF-4457-QG7G": {
30+
"aa68f3b4c13f890e893747cf41cf76110ddadfff": "Publish Advisories\n\nGHSA-53pf-4457-qg7g\nGHSA-cq44-x9vf-fpqg"
31+
},
32+
"GHSA-CQ44-X9VF-FPQG": {
33+
"aa68f3b4c13f890e893747cf41cf76110ddadfff": "Publish Advisories\n\nGHSA-53pf-4457-qg7g\nGHSA-cq44-x9vf-fpqg",
34+
"6d3aba94b45563b2202a6f7bfa7223bfa46bf3f9": "Publish Advisories\n\nGHSA-2c9f-8whq-v3fc\nGHSA-6425-cjxv-52gp\nGHSA-6q2x-6fhj-r3w8\nGHSA-9x6x-w4xq-rw3g\nGHSA-cq44-x9vf-fpqg\nGHSA-hj63-3ggp-wcj8\nGHSA-j9wg-77fw-f22f\nGHSA-m7q3-cwh2-ffg5\nGHSA-pqp3-gjgf-83cf"
35+
},
36+
"GHSA-P286-R3VC-Q86Q": {
37+
"8b5ad5d88207851062967b0a4c0c298983f82100": "Publish GHSA-p286-r3vc-q86q",
38+
"cbf2f5c7207dd4c00561934751efe53e547d22f7": "Publish Advisories\n\nGHSA-4f66-847v-p2c5\nGHSA-6j8v-fv4p-986p\nGHSA-7r6p-phc7-gq23\nGHSA-p286-r3vc-q86q\nGHSA-rqq2-5355-gw96"
39+
},
40+
"GHSA-HFPC-7MR4-P297": {
41+
"747eb7550d3cf3f52bf1ba04ea706b62e2fbb4df": "Improve GHSA-hfpc-7mr4-p297"
42+
},
43+
"GHSA-V56Q-MH7H-F735": {
44+
"a86d6d91bb3aec2370679ff024abc885eab4522b": "Improve GHSA-v56q-mh7h-f735",
45+
"3bc04d6a72fb904b8546c6511815701659c0639a": "Improve GHSA-v56q-mh7h-f735",
46+
"5d839983321c436942f1ec3bc0609a9d038418a3": "Improve GHSA-v56q-mh7h-f735",
47+
"0e291808cb617ccf4c842a91d82530cb507f8570": "Publish GHSA-v56q-mh7h-f735"
48+
},
449
"GHSA-2HGW-7HF5-VQR6": {
550
"8bdf7036083f9c22d5dad3a7a82354fcdabbc06c": "Publish Advisories\n\nGHSA-2hgw-7hf5-vqr6\nGHSA-34p5-v8mh-qq4r\nGHSA-5f2p-cxp6-7r28\nGHSA-87xp-6j4x-v5wv\nGHSA-92g4-p7r6-w4j8\nGHSA-ffq2-j44j-g69m\nGHSA-fgh6-ch3f-2p3c\nGHSA-pcw6-8cpc-9hvx\nGHSA-pj96-33w4-9mgg\nGHSA-rvf5-cc93-5w55\nGHSA-xh23-cpx8-xqgm"
651
},
@@ -94,12 +139,6 @@
94139
"GHSA-X6VC-HQP6-WXJ4": {
95140
"183e24fb6b1c7fe0f89e900af38fb39872126b95": "Publish GHSA-x6vc-hqp6-wxj4"
96141
},
97-
"GHSA-CP6Q-959Q-F8RH": {
98-
"f4f155e8b8ddc0d114c9e03baae2a835bf3f08ec": "Improve GHSA-cp6q-959q-f8rh",
99-
"d4741382dc58cd8cf90cccdbf594362af08d7dc5": "Improve GHSA-cp6q-959q-f8rh",
100-
"b2a1df9e3433a339b2255b8e0dc5e4703f61d90d": "Improve GHSA-cp6q-959q-f8rh",
101-
"69b58522cef9fa1d0c736b242cc88ccb075ce9af": "Publish Advisories\n\nGHSA-wx95-c6cv-8532\nGHSA-c4rq-3m3g-8wgx\nGHSA-v2fc-qm4h-8hqv\nGHSA-5jhf-fpp7-v2pv\nGHSA-crp9-r7rq-c8cg\nGHSA-gx65-c5hj-vpv5\nGHSA-jx89-3qg8-p2mr\nGHSA-rh9x-7xjc-vwx2\nGHSA-vp9c-2pjm-8925\nGHSA-xqqh-3w52-q8p7\nGHSA-cp6q-959q-f8rh\nGHSA-5jhf-fpp7-v2pv\nGHSA-crp9-r7rq-c8cg\nGHSA-gx65-c5hj-vpv5\nGHSA-jx89-3qg8-p2mr\nGHSA-rh9x-7xjc-vwx2\nGHSA-vp9c-2pjm-8925\nGHSA-xqqh-3w52-q8p7"
102-
},
103142
"GHSA-2XGV-7Q8P-67GC": {
104143
"80ab0afbf963e166c03e371218714f2e98e0fcd0": "Publish Advisories\n\nGHSA-2xgv-7q8p-67gc\nGHSA-3968-82gf-vhpr\nGHSA-3hpw-4mfr-9f85\nGHSA-6fjm-7mv9-c325\nGHSA-8rq8-f59m-9cjg\nGHSA-j8qw-c658-vr9r\nGHSA-jrp3-jq4v-w9gc\nGHSA-pvcx-w2qj-fpm3\nGHSA-q4f3-jf9f-788f\nGHSA-r8j3-cwj5-4j73\nGHSA-rhw6-3rrg-mwjq\nGHSA-vmmm-3jqx-jgx8\nGHSA-w4h4-7ff5-56xr\nGHSA-xcm8-9xjx-f5jq"
105144
},
@@ -157,9 +196,6 @@
157196
"GHSA-7R6P-PHC7-GQ23": {
158197
"cbf2f5c7207dd4c00561934751efe53e547d22f7": "Publish Advisories\n\nGHSA-4f66-847v-p2c5\nGHSA-6j8v-fv4p-986p\nGHSA-7r6p-phc7-gq23\nGHSA-p286-r3vc-q86q\nGHSA-rqq2-5355-gw96"
159198
},
160-
"GHSA-P286-R3VC-Q86Q": {
161-
"cbf2f5c7207dd4c00561934751efe53e547d22f7": "Publish Advisories\n\nGHSA-4f66-847v-p2c5\nGHSA-6j8v-fv4p-986p\nGHSA-7r6p-phc7-gq23\nGHSA-p286-r3vc-q86q\nGHSA-rqq2-5355-gw96"
162-
},
163199
"GHSA-RQQ2-5355-GW96": {
164200
"cbf2f5c7207dd4c00561934751efe53e547d22f7": "Publish Advisories\n\nGHSA-4f66-847v-p2c5\nGHSA-6j8v-fv4p-986p\nGHSA-7r6p-phc7-gq23\nGHSA-p286-r3vc-q86q\nGHSA-rqq2-5355-gw96"
165201
},
@@ -323,9 +359,6 @@
323359
"GHSA-9X6X-W4XQ-RW3G": {
324360
"6d3aba94b45563b2202a6f7bfa7223bfa46bf3f9": "Publish Advisories\n\nGHSA-2c9f-8whq-v3fc\nGHSA-6425-cjxv-52gp\nGHSA-6q2x-6fhj-r3w8\nGHSA-9x6x-w4xq-rw3g\nGHSA-cq44-x9vf-fpqg\nGHSA-hj63-3ggp-wcj8\nGHSA-j9wg-77fw-f22f\nGHSA-m7q3-cwh2-ffg5\nGHSA-pqp3-gjgf-83cf"
325361
},
326-
"GHSA-CQ44-X9VF-FPQG": {
327-
"6d3aba94b45563b2202a6f7bfa7223bfa46bf3f9": "Publish Advisories\n\nGHSA-2c9f-8whq-v3fc\nGHSA-6425-cjxv-52gp\nGHSA-6q2x-6fhj-r3w8\nGHSA-9x6x-w4xq-rw3g\nGHSA-cq44-x9vf-fpqg\nGHSA-hj63-3ggp-wcj8\nGHSA-j9wg-77fw-f22f\nGHSA-m7q3-cwh2-ffg5\nGHSA-pqp3-gjgf-83cf"
328-
},
329362
"GHSA-HJ63-3GGP-WCJ8": {
330363
"6d3aba94b45563b2202a6f7bfa7223bfa46bf3f9": "Publish Advisories\n\nGHSA-2c9f-8whq-v3fc\nGHSA-6425-cjxv-52gp\nGHSA-6q2x-6fhj-r3w8\nGHSA-9x6x-w4xq-rw3g\nGHSA-cq44-x9vf-fpqg\nGHSA-hj63-3ggp-wcj8\nGHSA-j9wg-77fw-f22f\nGHSA-m7q3-cwh2-ffg5\nGHSA-pqp3-gjgf-83cf"
331364
},
@@ -795,11 +828,6 @@
795828
"26eb47b76902215bdda054af46808118dc38a3df": "Publish GHSA-43wq-xrcm-3vgr",
796829
"76653a5aecbdf3d9527dad1859ca0a1d0a87b7ec": "Publish Advisories\n\nGHSA-43wq-xrcm-3vgr\nGHSA-7vhm-fmph-7wxw\nGHSA-83qh-pw42-g76w\nGHSA-9jmf-237g-qf46\nGHSA-f6f8-9mx6-9mx2\nGHSA-g533-xq5w-jmf3\nGHSA-mg8q-6jqj-3r4r\nGHSA-qg2p-9jwr-mmqf\nGHSA-vjpv-x8p9-7p85\nGHSA-w5fc-gj3h-26rx\nGHSA-wgp4-g5wv-7wf9\nGHSA-wxr3-2hgv-qm8f\nGHSA-x7q2-wr7g-xqmf"
797830
},
798-
"GHSA-V56Q-MH7H-F735": {
799-
"3bc04d6a72fb904b8546c6511815701659c0639a": "Improve GHSA-v56q-mh7h-f735",
800-
"5d839983321c436942f1ec3bc0609a9d038418a3": "Improve GHSA-v56q-mh7h-f735",
801-
"0e291808cb617ccf4c842a91d82530cb507f8570": "Publish GHSA-v56q-mh7h-f735"
802-
},
803831
"GHSA-49PQ-RGJ7-Q6MH": {
804832
"5348e366e977301a559a6e4b02cbb9c3399dc8af": "Publish Advisories\n\nGHSA-49pq-rgj7-q6mh\nGHSA-5w5p-m5fw-5c8v\nGHSA-66q3-jgvh-847r\nGHSA-763h-54f2-rfvw\nGHSA-fcpf-2c9p-9w89\nGHSA-fq5x-c72w-p2cq\nGHSA-g7x4-45c8-wpx3\nGHSA-gmh4-cmc7-776h\nGHSA-h6vx-22pm-pj9v\nGHSA-hjm2-6cx2-f549\nGHSA-j5c5-5r34-44pm\nGHSA-mf2r-h4rv-564g\nGHSA-mqpg-g4xh-h9jm\nGHSA-mvj6-g22q-4pr3\nGHSA-p98f-83cx-fhff\nGHSA-v9r8-p5q7-mgmq\nGHSA-vjqr-p6rh-8pwg"
805833
},

‎data/fix-commits/common-dd5d765c.json‎

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -2,10 +2,12 @@
22
"vcs_url": "https://android.googlesource.com/kernel/common",
33
"vulnerabilities": {
44
"CVE-2026-68445": {
5+
"3f5677d2f817355147337f0453174c7bb0f3b66a": "ptp: vmclock: prevent read-only mappings from becoming writable\n\ncommit a5edadbae57e2298a56cf7a4e774a027905a331f upstream.\n\nvmclock_miscdev_mmap() rejects writable mappings of the shared vmclock\nABI page with -EROFS, but leaves VM_MAYWRITE set. Userspace can map the\npage read-only and then upgrade it to writable with mprotect(), after\nwhich the guest can corrupt the host-written timekeeping data (sequence\ncounter, UTC time, TSC offset) that the vmclock ABI defines as read-only.\n\nClear VM_MAYWRITE on the read-only path so the mapping cannot be\nupgraded, as i915 does for its read-only objects and as fixed in drm/vc4\n(CVE-2026-68445) and drm/panthor (CVE-2024-53071).\n\nCc: stable@vger.kernel.org\nFixes: 205032724226 (\"ptp: Add support for the AMZNC10C 'vmclock' device\")\nSigned-off-by: Abdifatah Suruur <suruurism@gmail.com>\nLink: https://patch.msgid.link/20260813174707.14809-1-suruurism@gmail.com\nSigned-off-by: Jakub Kicinski <kuba@kernel.org>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>",
56
"5b4f2bec7bea6c04084d720d731bedee7caf878d": "ptp: vmclock: prevent read-only mappings from becoming writable\n\ncommit a5edadbae57e2298a56cf7a4e774a027905a331f upstream.\n\nvmclock_miscdev_mmap() rejects writable mappings of the shared vmclock\nABI page with -EROFS, but leaves VM_MAYWRITE set. Userspace can map the\npage read-only and then upgrade it to writable with mprotect(), after\nwhich the guest can corrupt the host-written timekeeping data (sequence\ncounter, UTC time, TSC offset) that the vmclock ABI defines as read-only.\n\nClear VM_MAYWRITE on the read-only path so the mapping cannot be\nupgraded, as i915 does for its read-only objects and as fixed in drm/vc4\n(CVE-2026-68445) and drm/panthor (CVE-2024-53071).\n\nCc: stable@vger.kernel.org\nFixes: 205032724226 (\"ptp: Add support for the AMZNC10C 'vmclock' device\")\nSigned-off-by: Abdifatah Suruur <suruurism@gmail.com>\nLink: https://patch.msgid.link/20260813174707.14809-1-suruurism@gmail.com\nSigned-off-by: Jakub Kicinski <kuba@kernel.org>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>",
67
"a5edadbae57e2298a56cf7a4e774a027905a331f": "ptp: vmclock: prevent read-only mappings from becoming writable\n\nvmclock_miscdev_mmap() rejects writable mappings of the shared vmclock\nABI page with -EROFS, but leaves VM_MAYWRITE set. Userspace can map the\npage read-only and then upgrade it to writable with mprotect(), after\nwhich the guest can corrupt the host-written timekeeping data (sequence\ncounter, UTC time, TSC offset) that the vmclock ABI defines as read-only.\n\nClear VM_MAYWRITE on the read-only path so the mapping cannot be\nupgraded, as i915 does for its read-only objects and as fixed in drm/vc4\n(CVE-2026-68445) and drm/panthor (CVE-2024-53071).\n\nCc: stable@vger.kernel.org\nFixes: 205032724226 (\"ptp: Add support for the AMZNC10C 'vmclock' device\")\nSigned-off-by: Abdifatah Suruur <suruurism@gmail.com>\nLink: https://patch.msgid.link/20260813174707.14809-1-suruurism@gmail.com\nSigned-off-by: Jakub Kicinski <kuba@kernel.org>"
78
},
89
"CVE-2024-53071": {
10+
"3f5677d2f817355147337f0453174c7bb0f3b66a": "ptp: vmclock: prevent read-only mappings from becoming writable\n\ncommit a5edadbae57e2298a56cf7a4e774a027905a331f upstream.\n\nvmclock_miscdev_mmap() rejects writable mappings of the shared vmclock\nABI page with -EROFS, but leaves VM_MAYWRITE set. Userspace can map the\npage read-only and then upgrade it to writable with mprotect(), after\nwhich the guest can corrupt the host-written timekeeping data (sequence\ncounter, UTC time, TSC offset) that the vmclock ABI defines as read-only.\n\nClear VM_MAYWRITE on the read-only path so the mapping cannot be\nupgraded, as i915 does for its read-only objects and as fixed in drm/vc4\n(CVE-2026-68445) and drm/panthor (CVE-2024-53071).\n\nCc: stable@vger.kernel.org\nFixes: 205032724226 (\"ptp: Add support for the AMZNC10C 'vmclock' device\")\nSigned-off-by: Abdifatah Suruur <suruurism@gmail.com>\nLink: https://patch.msgid.link/20260813174707.14809-1-suruurism@gmail.com\nSigned-off-by: Jakub Kicinski <kuba@kernel.org>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>",
911
"5b4f2bec7bea6c04084d720d731bedee7caf878d": "ptp: vmclock: prevent read-only mappings from becoming writable\n\ncommit a5edadbae57e2298a56cf7a4e774a027905a331f upstream.\n\nvmclock_miscdev_mmap() rejects writable mappings of the shared vmclock\nABI page with -EROFS, but leaves VM_MAYWRITE set. Userspace can map the\npage read-only and then upgrade it to writable with mprotect(), after\nwhich the guest can corrupt the host-written timekeeping data (sequence\ncounter, UTC time, TSC offset) that the vmclock ABI defines as read-only.\n\nClear VM_MAYWRITE on the read-only path so the mapping cannot be\nupgraded, as i915 does for its read-only objects and as fixed in drm/vc4\n(CVE-2026-68445) and drm/panthor (CVE-2024-53071).\n\nCc: stable@vger.kernel.org\nFixes: 205032724226 (\"ptp: Add support for the AMZNC10C 'vmclock' device\")\nSigned-off-by: Abdifatah Suruur <suruurism@gmail.com>\nLink: https://patch.msgid.link/20260813174707.14809-1-suruurism@gmail.com\nSigned-off-by: Jakub Kicinski <kuba@kernel.org>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>",
1012
"a5edadbae57e2298a56cf7a4e774a027905a331f": "ptp: vmclock: prevent read-only mappings from becoming writable\n\nvmclock_miscdev_mmap() rejects writable mappings of the shared vmclock\nABI page with -EROFS, but leaves VM_MAYWRITE set. Userspace can map the\npage read-only and then upgrade it to writable with mprotect(), after\nwhich the guest can corrupt the host-written timekeeping data (sequence\ncounter, UTC time, TSC offset) that the vmclock ABI defines as read-only.\n\nClear VM_MAYWRITE on the read-only path so the mapping cannot be\nupgraded, as i915 does for its read-only objects and as fixed in drm/vc4\n(CVE-2026-68445) and drm/panthor (CVE-2024-53071).\n\nCc: stable@vger.kernel.org\nFixes: 205032724226 (\"ptp: Add support for the AMZNC10C 'vmclock' device\")\nSigned-off-by: Abdifatah Suruur <suruurism@gmail.com>\nLink: https://patch.msgid.link/20260813174707.14809-1-suruurism@gmail.com\nSigned-off-by: Jakub Kicinski <kuba@kernel.org>"
1113
},

0 commit comments

Comments
 (0)