Open Source Vulnerabilities

Kernel

vsock/virtio: initialize vdev->priv before using VQs

Kernel

net: hns3: add vlan list lock to protect vlan list

Kernel

net/x25: Fix null-ptr-deref caused by x25_disconnect

Kernel

xen: fix is_xen_pmu()

Kernel

net: sparx5: switchdev: fix possible NULL pointer dereference

Kernel

net/sched: act_ct: fix ref leak when switching zones

Kernel

lib/test: use after free in register_test_dev_kmod()

Kernel

fs: fix fd table size alignment properly

Kernel

LSM: general protection fault in legacy_parse_param

Kernel

gcc-plugins/stackleak: Exactly match strings instead of prefixes

Kernel

block, bfq: don't move oom_bfqq

Kernel

selinux: allow FIOCLEX and FIONCLEX with policy capability

Kernel

bfq: fix use-after-free in bfq_dispatch_request

Kernel

PM: core: keep irq flags in device_pm_check_callbacks()

Kernel

Revert "Revert "block, bfq: honor already-setup queue merges""

Kernel

ext4: don't BUG if someone dirty pages without asking ext4 first

Kernel

ext4: fix ext4_mb_mark_bb() with flex_bg with fast_commit

Kernel

f2fs: fix to do sanity check on curseg->alloc_type

Kernel

btrfs: make search_csum_tree return 0 if we get -EFBIG

Kernel

f2fs: use spin_lock to avoid hang

Kernel

ntfs: add sanity check on allocation size

Kernel

media: staging: media: zoran: move videodev alloc

Kernel

media: imx-jpeg: Prevent decoding NV12M jpegs into single-planar buffers

Kernel

media: staging: media: zoran: calculate the right buffer number for zoran_reap_stat_com

Kernel

media: ir_toy: free before error exiting

Kernel

video: fbdev: nvidiafb: Use strscpy() to prevent buffer overflow

Kernel

video: fbdev: cirrusfb: check pixclock to avoid divide by zero

Kernel

media: atomisp: fix dummy_ptr check to avoid duplicate active_bo

Kernel

media: imx-jpeg: fix a bug of accessing array out of bounds

Kernel

powerpc/kasan: Fix early region not updated correctly

Kernel

KVM: x86/mmu: Zap _all_ roots when unmapping gfn range in TDP MMU

Kernel

drm/dp: Fix off-by-one in register cache size

Kernel

video: fbdev: sm712fb: Fix crash in smtcfb_write()

Kernel

ARM: mmp: Fix failure to remove sram device

Kernel

mmc: host: Return an error when ->enable_sdio_irq() ops is missing

Kernel

drm/i915: Treat SAGV block time 0 as SAGV disabled

Kernel

scsi: qla2xxx: Fix warning message due to adisc being flushed

Kernel

scsi: qla2xxx: Implement ref count for SRB

Kernel

ubifs: rename_whiteout: Fix double free for whiteout_ui->data

Kernel

KVM: x86/mmu: do compare-and-exchange of gPTE via the user address

Kernel

scsi: qla2xxx: Fix scheduling while atomic

Kernel

scsi: qla2xxx: Fix premature hw access after PCI error

Kernel

scsi: qla2xxx: Suppress a kernel complaint in qla_create_qpair()

Kernel

KVM: x86: Avoid theoretical NULL pointer dereference in kvm_irq_delivery_to_apic_fast()

Kernel

KVM: SVM: fix panic on out-of-bounds guest IRQ

Kernel

ubifs: Fix deadlock in concurrent rename whiteout and inode writeback

Kernel

ubifs: Fix 'ui->dirty' race between do_tmpfile() and writeback work

Kernel

ubifs: Fix read out-of-bounds in ubifs_wbuf_write_nolock()

Kernel

ubifs: Fix to add refcount once page is set private

Kernel

wireguard: socket: ignore v6 endpoints when ipv6 is disabled