Open Source Vulnerabilities

Kernel

cgroup: Use separate src/dst nodes when preloading css_sets for migration

Kernel

btrfs: zoned: fix a leaked bioc in read_zone_info

Kernel

drm/panfrost: Fix shrinker list corruption by madvise IOCTL

Kernel

ARM: 9210/1: Mark the FDT_FIXED sections as shareable

Kernel

Revert "evm: Fix memleak in init_desc"

Kernel

drm/i915: fix a possible refcount leak in intel_dp_add_mst_connector()

Kernel

ima: Fix a potential integer overflow in ima_appraise_measurement

Kernel

net: stmmac: dwc-qos: Disable split header for Tegra194

Kernel

sysctl: Fix data races in proc_douintvec().

Kernel

sysctl: Fix data races in proc_douintvec_minmax().

Kernel

cipso: Fix data-races around sysctl.

Kernel

icmp: Fix data-races around sysctl.

Kernel

ipv4: Fix a data-race around sysctl_fib_sync_mem.

Kernel

sysctl: Fix data-races in proc_dou8vec_minmax().

Kernel

icmp: Fix data-races around sysctl_icmp_echo_enable_probe.

Kernel

icmp: Fix a data-race around sysctl_icmp_errors_use_inbound_ifaddr.

Kernel

raw: Fix a data-race around sysctl_raw_l3mdev_accept.

Kernel

tcp: Fix a data-race around sysctl_tcp_ecn_fallback.

Kernel

net: stmmac: fix leaks in probe

Kernel

ima: Fix potential memory leak in ima_init_crypto()

Kernel

nexthop: Fix data-races around nexthop_compat_mode.

Kernel

sfc: fix kernel panic when creating VF

Kernel

seg6: bpf: fix skb checksum in bpf_push_seg6_encap()

Kernel

sfc: fix use after free when disabling sriov

Kernel

seg6: fix skb checksum in SRv6 End.B6 and End.B6.Encaps behaviors

Kernel

net: atlantic: remove deep parameter on suspend/resume functions

Kernel

net: atlantic: remove aq_nic_deinit() when resume

Kernel

KVM: x86: Fully initialize 'struct kvm_lapic_irq' in kvm_pv_kick_cpu_op()

Kernel

powerpc/xive/spapr: correct bitmap allocation size

Kernel

cpufreq: pmac32-cpufreq: Fix refcount leak bug

Kernel

net: tipc: fix possible refcount leak in tipc_sk_create()

Kernel

net: sfp: fix memory leak in sfp_probe()

Kernel

pinctrl: aspeed: Fix potential NULL dereference in aspeed_pinmux_set_mux()

Kernel

ASoC: Intel: sof_sdw: handle errors on card registration

Kernel

ASoC: rt7*-sdw: harden jack_detect_handler

Kernel

ASoC: rt711-sdca: fix kernel NULL pointer dereference when IO error

Kernel

vt: fix memory overlapping when deleting chars in the buffer

Kernel

serial: 8250: Fix PM usage_count for console handover

Kernel

drm/aperture: Run fbdev removal before internal helpers

Kernel

x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported

Kernel

x86/entry: Add kernel IBRS implementation

Kernel

x86/bugs: Report Intel retbleed vulnerability

Kernel

x86/speculation: Fill RSB on vmexit for IBRS

Kernel

efi/x86: use naked RET on mixed mode call wrapper

Kernel

x86/kvm: fix FASTOP_SIZE when return thunks are enabled

Kernel

x86/speculation: Disable RRSBA behavior

Kernel

lockdown: Fix kexec lockdown bypass with ima policy

Kernel

RDMA/irdma: Fix sleep from invalid context BUG

Kernel

power/reset: arm-versatile: Fix refcount leak in versatile_reboot_probe

Kernel

net: usb: ax88179_178a needs FLAG_SEND_ZLP