Open Source Vulnerabilities

Kernel

nbd: call genl_unregister_family() first in nbd_cleanup()

Kernel

netfilter: nf_tables: disallow non-stateful expression in sets earlier

Kernel

netfilter: nf_tables: hold mutex on netns pre_exit path

Kernel

i2c: ismt: prevent memory corruption in ismt_access()

Kernel

KVM: x86: Use __try_cmpxchg_user() to update guest PTE A/D bits

Kernel

pipe: Fix missing lock in pipe_resize_ring()

Kernel

netfilter: conntrack: re-fetch conntrack after insertion

Kernel

KVM: x86: avoid calling x86 emulator without a decoded instruction

Kernel

exfat: check if cluster num is valid

Kernel

KVM: x86: Drop WARNs that assert a triple fault never "escapes" from L2

Kernel

netfilter: nf_tables: double hook unregistration in netns path

Kernel

x86/fpu: KVM: Set the base guest FPU uABI size to sizeof(struct kvm_xsave)

Kernel

KVM: x86: fix typo in __try_cmpxchg_user causing non-atomicness

Kernel

KVM: SVM: Use kzalloc for sev ioctl interfaces to prevent kernel data leak

Kernel

Bluetooth: hci_qca: Use del_timer_sync() before freeing

Kernel

zsmalloc: fix races between asynchronous zspage free and page migration

Kernel

fs/ntfs3: validate BOOT sectors_per_clusters

Kernel

bpf: Fix combination of jit blinding and pointers to bpf subprogs.

Kernel

raid5: introduce MD_BROKEN

Kernel

bpf: Fix excessive memory allocation in stack_map_alloc()

Kernel

usb: isp1760: Fix out-of-bounds array access

Kernel

fs/ntfs3: provide block_invalidate_folio to fix memory leak

Kernel

kthread: Don't allocate kthread_struct for init and umh

Kernel

fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'

Kernel

x86/MCE/AMD: Fix memory leak when threshold_create_bank() fails

Kernel

bpf: Fix potential array overflow in bpf_trampoline_get_progs()

Kernel

btrfs: fix deadlock between concurrent dio writes when low on free data space

Kernel

lockdown: also lock down previous kgdb use

Kernel

random: do not pretend to handle premature next security model

Kernel

drm/i915: Fix -Wstringop-overflow warning in call to intel_read_wm_latency()

Kernel

x86/uaccess: Implement macros for CMPXCHG on user addresses

Kernel

dm crypt: make printing of the key constant-time

Kernel

dm stats: add cond_resched when looping over entries

Kernel

x86/kexec: fix memory leak of elf header buffer

Kernel

ALSA: usb-audio: Cancel pending work at closing a MIDI substream

Kernel

ipw2x00: Fix potential NULL dereference in libipw_xmit()

Kernel

ath11k: fix the warning of dev_wake in mhi_pm_disable_transition()

Kernel

scsi: lpfc: Move cfg_log_verbose check before calling lpfc_dmp_dbg()

Kernel

cifs: fix potential double free during failed mount

Kernel

rcu-tasks: Fix race in schedule and flush work

Kernel

rtw89: ser: fix CAM leaks occurring in L2 reset

Kernel

ALSA: jack: Access input_dev under mutex

Kernel

scsi: lpfc: Fix call trace observed during I/O with CMF enabled

Kernel

scsi: lpfc: Fix SCSI I/O completion and abort handler deadlock

Kernel

scsi: lpfc: Fix null pointer dereference after failing to issue FLOGI and PLOGI

Kernel

ipv6: fix locking issues with loops over idev->addr_list

Kernel

scsi: lpfc: Protect memory leak for NPIV ports sending PLOGI_RJT

Kernel

ath11k: Change max no of active probe SSID and BSSID to fw capability

Kernel

drm/virtio: fix NULL pointer dereference in virtio_gpu_conn_get_modes

Kernel

scsi: target: tcmu: Avoid holding XArray lock when calling lock_page