Open Source Vulnerabilities

Kernel

xen/blkfront: harden blkfront against event channel storms

Kernel

xen/netfront: harden netfront against event channel storms

Kernel

xen/console: harden hvc_xen against event channel storms

Kernel

scsi: scsi_debug: Sanity check block descriptor length in resp_mode_select()

Kernel

io-wq: check for wq exit after adding new worker task_work

Kernel

scsi: scsi_debug: Don't call kcalloc() if size arg is zero

Kernel

ovl: fix warning in ovl_create_real()

Kernel

scsi: scsi_debug: Fix type in min_t to avoid stack OOB

Kernel

xen/netback: don't queue unlimited number of packages

Kernel

USB: core: Make do_proc_control() and do_proc_bulk() killable

Kernel

io-wq: drop wqe lock before creating new worker

Kernel

media: mxl111sf: change mutex_init() location

Kernel

iocost: Fix divide-by-zero on donation from low hweight cgroup

Kernel

usb: xhci-mtk: fix list_del warning when enable list debug

Kernel

btrfs: fix memory leak in __add_inode_ref()

Kernel

selinux: fix sleeping function called from invalid context

Kernel

net: stmmac: dwmac-rk: fix oob read in rk_gmac_setup

Kernel

net: systemport: Add global locking for descriptor lifecycle

Kernel

sit: do not call ipip6_dev_free() from sit_init_net()

Kernel

netdevsim: Zero-initialize memory for new map's value in function nsim_bpf_map_alloc

Kernel

net/packet: rx_owner_map depends on pg_vec

Kernel

igbvf: fix double free in `igbvf_probe`

Kernel

mptcp: fix deadlock in __mptcp_push_pending()

Kernel

mptcp: remove tcp ulp setsockopt support

Kernel

net: stmmac: fix tc flower deletion for VLAN priority Rx steering

Kernel

mptcp: clear 'kern' flag from fallback sockets

Kernel

mptcp: never allow the PM to close a listener subflow

Kernel

drm/amd/pm: fix a potential gpu_metrics_table memory leak

Kernel

rds: memory leak in __rds_conn_create()

Kernel

net/sched: sch_ets: don't remove idle classes from the round-robin list

Kernel

net: hns3: fix use-after-free bug in hclgevf_send_mbx_msg

Kernel

inet_diag: fix kernel-infoleak for UDP sockets

Kernel

sch_cake: do not call cake_destroy() from cake_init()

Kernel

btrfs: use latest_dev in btrfs_show_devname

Kernel

dm btree remove: fix use after free in rebalance_children()

Kernel

tee: amdtee: fix an IS_ERR() vs NULL bug

Kernel

mac80211: track only QoS data frames for admission control

Kernel

audit: improve robustness of the audit queue handling

Kernel

vduse: check that offset is within bounds in get_config()

Kernel

vduse: fix memory corruption in vduse_dev_ioctl()

Kernel

net: netlink: af_netlink: Prevent empty skb by adding a check on len.

Kernel

bpf: Fix kernel address leakage in atomic cmpxchg's r0 aux reg

Kernel

bpf: Fix kernel address leakage in atomic fetch

Kernel

bpf: Fix signed bounds propagation after mov32