Open Source Vulnerabilities

Kernel

mm/khugepaged: take the right locks for page table retraction

Kernel

mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths

Kernel

xen/netback: Ensure protocol headers don't fall in the non-linear area

Kernel

xen/netback: don't call kfree_skb() with interrupts disabled

Kernel

media: v4l2-dv-timings.c: fix too strict blanking sanity checks

Kernel

memcg: fix possible use-after-free in memcg_write_event_control()

Kernel

mm/gup: fix gup_pud_range() for dax

Kernel

net: mana: Fix race on per-CQ variable napi work_done

Kernel

io_uring: Fix a null-ptr-deref in io_tctx_exit_cb()

Kernel

Bluetooth: Fix crash when replugging CSR fake controllers

Kernel

HID: core: fix shift-out-of-bounds in hid_report_raw_event

Kernel

drm/shmem-helper: Remove errant put in error path

Kernel

net: dsa: sja1105: avoid out of bounds access in sja1105_init_l2_policing()

Kernel

gpiolib: fix memory leak in gpiochip_setup_dev()

Kernel

can: af_can: fix NULL pointer dereference in can_rcv_filter

Kernel

netfilter: ctnetlink: fix compilation warning after data race fixes in ct mark

Kernel

gpio: amd8111: Fix PCI device reference count leak

Kernel

af_unix: Get user_ns from in_skb in unix_diag_get_exact().

Kernel

Bluetooth: Fix not cleanup led when bt_init fails

Kernel

mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add()

Kernel

octeontx2-pf: Fix potential memory leak in otx2_init_tc()

Kernel

xen-netfront: Fix NULL sring after live migration

Kernel

net: mvneta: Prevent out of bounds read in mvneta_config_rss()

Kernel

gpio/rockchip: fix refcount leak in rockchip_gpiolib_register()

Kernel

NFC: nci: Bounds check struct nfc_target arrays

Kernel

net: hisilicon: Fix potential use-after-free in hisi_femac_rx()

Kernel

net: mdio: fix unbalanced fwnode reference count in mdio_device_release()

Kernel

net: hisilicon: Fix potential use-after-free in hix5hd2_rx()

Kernel

net: dsa: sja1105: fix memory leak in sja1105_setup_devlink_regions()

Kernel

tipc: call tipc_lxc_xmit without holding node_read_lock

Kernel

ethernet: aeroflex: fix potential skb leak in greth_init_rings()

Kernel

dpaa2-switch: Fix memory leak in dpaa2_switch_acl_entry_add() and dpaa2_switch_acl_entry_remove()

Kernel

net: thunderbolt: fix memory leak in tbnet_open()

Kernel

ipv6: avoid use-after-free in ip6_fragment()

Kernel

net: mvneta: Fix an out of bounds check

Kernel

s390/qeth: fix use-after-free in hsci

Kernel

rtc: cmos: Fix event handler registration ordering issue

Kernel

ASoC: ops: Check bounds for second channel in snd_soc_put_volsw_sx()

Kernel

PCI: mt7621: Add sentinel to quirks table

Kernel

pinctrl: meditatek: Startup with the IRQs disabled

Kernel

udf: Discard preallocation before extending file with a hole

Kernel

usb: gadget: uvc: Prevent buffer overflow in setup handler

Kernel

igb: Initialize mailbox message for VF reset

Kernel

perf: Fix perf_pending_task() UaF

Kernel

udf: Fix preallocation discarding at indirect extent boundary

Kernel

udf: Fix extending file within last block

Kernel

Bluetooth: L2CAP: Fix u8 overflow

Kernel

btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit()

Kernel

clk: qcom: gdsc: Remove direct runtime PM calls

Kernel

iio: health: afe4404: Fix oob read in afe4404_[read|write]_raw