Open Source Vulnerabilities

Kernel

exfat: check if cluster num is valid

Kernel

pipe: Fix missing lock in pipe_resize_ring()

Kernel

netfilter: nf_tables: hold mutex on netns pre_exit path

Kernel

netfilter: nf_tables: double hook unregistration in netns path

Kernel

netfilter: conntrack: re-fetch conntrack after insertion

Kernel

KVM: x86: Use __try_cmpxchg_user() to update guest PTE A/D bits

Kernel

KVM: x86: fix typo in __try_cmpxchg_user causing non-atomicness

Kernel

zsmalloc: fix races between asynchronous zspage free and page migration

Kernel

x86/fpu: KVM: Set the base guest FPU uABI size to sizeof(struct kvm_xsave)

Kernel

KVM: x86: avoid calling x86 emulator without a decoded instruction

Kernel

bpf: Fix potential array overflow in bpf_trampoline_get_progs()

Kernel

Bluetooth: hci_qca: Use del_timer_sync() before freeing

Kernel

KVM: SVM: Use kzalloc for sev ioctl interfaces to prevent kernel data leak

Kernel

bpf: Fix combination of jit blinding and pointers to bpf subprogs.

Kernel

fs/ntfs3: validate BOOT sectors_per_clusters

Kernel

raid5: introduce MD_BROKEN

Kernel

KVM: x86: Drop WARNs that assert a triple fault never "escapes" from L2

Kernel

fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'

Kernel

kthread: Don't allocate kthread_struct for init and umh

Kernel

x86/MCE/AMD: Fix memory leak when threshold_create_bank() fails

Kernel

usb: isp1760: Fix out-of-bounds array access

Kernel

bpf: Fix excessive memory allocation in stack_map_alloc()

Kernel

random: do not pretend to handle premature next security model

Kernel

lockdown: also lock down previous kgdb use

Kernel

drm/i915: Fix -Wstringop-overflow warning in call to intel_read_wm_latency()

Kernel

x86/uaccess: Implement macros for CMPXCHG on user addresses

Kernel

dm crypt: make printing of the key constant-time

Kernel

dm stats: add cond_resched when looping over entries

Kernel

cifs: fix potential double free during failed mount

Kernel

x86/kexec: fix memory leak of elf header buffer

Kernel

ath11k: Change max no of active probe SSID and BSSID to fw capability

Kernel

ALSA: usb-audio: Cancel pending work at closing a MIDI substream

Kernel

ipw2x00: Fix potential NULL dereference in libipw_xmit()

Kernel

ath11k: fix the warning of dev_wake in mhi_pm_disable_transition()

Kernel

drm/virtio: fix NULL pointer dereference in virtio_gpu_conn_get_modes

Kernel

ipv6: fix locking issues with loops over idev->addr_list

Kernel

ALSA: jack: Access input_dev under mutex

Kernel

rcu-tasks: Fix race in schedule and flush work

Kernel

scsi: lpfc: Move cfg_log_verbose check before calling lpfc_dmp_dbg()

Kernel

regulator: da9121: Fix uninit-value in da9121_assign_chip_model()

Kernel

scsi: lpfc: Fix call trace observed during I/O with CMF enabled

Kernel

scsi: target: tcmu: Avoid holding XArray lock when calling lock_page

Kernel

mtd: rawnand: denali: Use managed device resources

Kernel

ASoC: mediatek: Fix missing of_node_put in mt2701_wm8960_machine_probe

Kernel

NFC: NULL out the dev->rfkill to prevent UAF

Kernel

drm/omap: fix NULL but dereferenced coccicheck error

Kernel

scsi: lpfc: Fix SCSI I/O completion and abort handler deadlock

Kernel

drm/amd/pm: fix double free in si_parse_power_table()

Kernel

ASoC: cs35l41: Fix an out-of-bounds access in otp_packed_element_t

Kernel

drm/vc4: txp: Don't set TXP_VSTART_AT_EOF