Open Source Vulnerabilities

Kernel

powerpc/64s: Fix crashes when toggling entry flush barrier

Kernel

i40e: Fix use-after-free in i40e_client_subtask()

Kernel

netfilter: nftables: avoid overflows in nft_hash_buckets()

Kernel

can: mcp251x: fix resume from sleep before interface was brought up

Kernel

sched: Fix out-of-bound access in uclamp

Kernel

netfilter: nftables: Fix a memleak from userdata error path in new objects

Kernel

arm64: entry: always set GIC_PRIO_PSR_I_SET during entry

Kernel

KVM: VMX: Disable preemption when probing user return MSRs

Kernel

drm/i915: Fix crash in auto_retire

Kernel

iio: core: fix ioctl handlers removal

Kernel

KVM: nVMX: Always make an attempt to map eVMCS after migration

Kernel

usb: typec: ucsi: Retrieve all the PDOs instead of just the first 4

Kernel

nbd: Fix NULL pointer in flush_workqueue

Kernel

nvmet-rdma: Fix NULL deref when SEND is completed with error

Kernel

f2fs: compress: fix race condition of overwrite vs truncate

Kernel

kyber: fix out of bounds access when preempted

Kernel

usb: dwc3: gadget: Free gadget structure only after freeing endpoints

Kernel

ACPI: scan: Fix a memory leak in an error handling path

Kernel

btrfs: fix deadlock when cloning inline extents and using qgroups

Kernel

userfaultfd: release page in error path to avoid BUG_ON

Kernel

hfsplus: prevent corruption in shrinking truncate

Kernel

i40e: Fix use-after-free in i40e_client_subtask()

Kernel

powerpc/64s: Fix crashes when toggling entry flush barrier

Kernel

sched: Fix out-of-bound access in uclamp

Kernel

netfilter: nftables: avoid overflows in nft_hash_buckets()

Kernel

can: mcp251x: fix resume from sleep before interface was brought up

Kernel

netfilter: nftables: Fix a memleak from userdata error path in new objects

Kernel

ACPI: scan: Fix a memory leak in an error handling path

Kernel

can: mcp251xfd: mcp251xfd_probe(): fix an error pointer dereference in probe

Kernel

arm64: entry: always set GIC_PRIO_PSR_I_SET during entry

Kernel

libbpf: Fix signed overflow in ringbuf_process_ring

Kernel

ethernet:enic: Fix a use after free bug in enic_hard_start_xmit

Kernel

sctp: do asoc update earlier in sctp_sf_do_dupcook_a

Kernel

xprtrdma: Fix cwnd update ordering

Kernel

ceph: fix inode leak on getattr error in __fh_to_dentry

Kernel

SUNRPC: Fix null pointer dereference in svc_rqst_free()

Kernel

f2fs: fix to avoid touching checkpointed data in get_victim()

Kernel

dmaengine: idxd: Fix potential null dereference on pointer status

Kernel

PCI: endpoint: Fix NULL pointer dereference for ->get_features()

Kernel

ARM: 9064/1: hw_breakpoint: Do not directly check the event's overflow_handler hook

Kernel

f2fs: fix panic during f2fs_resize_fs()

Kernel

KEYS: trusted: Fix memory leak on object td

Kernel

KVM: SVM: Make sure GHCB is mapped before updating

Kernel

net: Only allow init netns to set default tcp cong to a restricted algo

Kernel

mm: memcontrol: slab: fix obtain a reference to a freeing memcg

Kernel

RDMA/siw: Fix a use after free in siw_alloc_mr

Kernel

net/sched: act_ct: fix wild memory access when clearing fragments

Kernel

net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send

Kernel

bnxt_en: Fix RX consumer index logic in the error path.

Kernel

ath10k: Fix a use after free in ath10k_htc_send_bundle