Open Source Vulnerabilities

Kernel

IB/rdmavt: add lock to call to rvt_error_qp to prevent a race condition

Kernel

net: openvswitch: fix leak of nested actions

Kernel

dpaa2-ptp: Fix refcount leak in dpaa2_ptp_probe

Kernel

qede: confirm skb is allocated before using

Kernel

rxrpc: fix a race in rxrpc_exit_net()

Kernel

drbd: Fix five use after free bugs in get_initial_state

Kernel

iommu/omap: Fix regression in probe for NULL pointer dereference

Kernel

scsi: mpt3sas: Fix use after free in _scsih_expander_node_remove()

Kernel

mm/mempolicy: fix mpol_new leak in shared_policy_replace

Kernel

highmem: fix checks in __kmap_local_sched_{in,out}

Kernel

lz4: fix LZ4_decompress_safe_partial read out of bound

Kernel

mmmremap.c: avoid pointless invalidate_range_start/end on mremap(old_size=0)

Kernel

btrfs: zoned: traverse devices under chunk_mutex in btrfs_can_activate_zone

Kernel

RDMA/hfi1: Fix use-after-free bug for mm struct

Kernel

btrfs: fix qgroup reserve overflow the qgroup limit

Kernel

ata: sata_dwc_460ex: Fix crash due to OOB write

Kernel

fbdev: Fix unregistering of framebuffers without device

Kernel

irqchip/gic-v3: Fix GICR_CTLR.RWP polling

Kernel

gpio: Restrict usage of GPIO chip irq members before initialization

Kernel

drm/panel: ili9341: fix optional regulator handling

Kernel

SUNRPC: Ensure we flush any closed sockets before xs_xprt_free()

Kernel

mm/sparsemem: fix 'mem_section' will never be NULL gcc 12 warning

Kernel

net/smc: use memcpy instead of snprintf to avoid out of bounds read

Kernel

drm/amd/display: Fix by adding FPU protection for dcn30_internal_validate_bw

Kernel

KVM: avoid NULL pointer dereference in kvm_dirty_ring_push

Kernel

powerpc: Fix virt_addr_valid() for 64-bit Book3E & 32-bit

Kernel

drm/virtio: Ensure that objs is not NULL in virtio_gpu_array_put_free()

Kernel

netfilter: nf_tables: initialize registers in nft_do_chain()

Kernel

ALSA: oss: Fix PCM OSS buffer allocation overflow

Kernel

ALSA: pcm: Fix races among concurrent hw_params and hw_free calls

Kernel

jbd2: fix use-after-free of transaction_t race

Kernel

mac80211: fix potential double free on mesh join

Kernel

uaccess: fix integer overflow on access_ok()

Kernel

ALSA: pcm: Fix races among concurrent prealloc proc writes

Kernel

tpm: fix reference counting for struct tpm_chip

Kernel

locking/lockdep: Avoid potential access of invalid memory in lock_class

Kernel

llc: only change llc->dev when bind() succeeds

Kernel

tpm: use try_get_ops() in tpm-space.c

Kernel

iio: accel: mma8452: use the correct logic to get mma8452_data

Kernel

coresight: syscfg: Fix memleak on registration failure in cscfg_create_device

Kernel

firmware: sysfb: fix platform-device leak in error path

Kernel

f2fs: quota: fix loop condition at f2fs_quota_sync()

Kernel

cifs: fix handlecache and multiuser

Kernel

NFSD: prevent underflow in nfssvc_decode_writeargs()

Kernel

NFSD: prevent integer overflow on 32 bit systems

Kernel

remoteproc: Fix count check in rproc_coredump_write()

Kernel

pinctrl: samsung: drop pin banks references on error paths

Kernel

jffs2: fix memory leak in jffs2_do_mount_fs

Kernel

jffs2: fix use-after-free in jffs2_clear_xattr_subsystem

Kernel

mm/pages_alloc.c: don't create ZONE_MOVABLE beyond the end of a node