Open Source Vulnerabilities

Kernel

nilfs2: fix general protection fault in nilfs_btree_insert()

Kernel

usb: xhci: Check endpoint is valid before dereferencing it

Kernel

misc: fastrpc: Don't remove map on creater_process and device_release

Kernel

xhci: Fix null pointer dereference when host dies

Kernel

misc: fastrpc: Fix use-after-free race condition for maps

Kernel

btrfs: fix race between quota rescan and disable leading to NULL pointer deref

Kernel

USB: gadgetfs: Fix race between mounting and unmounting

Kernel

usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()

Kernel

gsmi: fix null-deref in gsmi_get_variable

Kernel

HID: intel_ish-hid: Add check for ishtp_dma_tx_map

Kernel

EDAC/highbank: Fix memory leak in highbank_mc_probe()

Kernel

RDMA/core: Fix ib block iterator counter overflow

Kernel

bpf: Fix pointer-leak due to insufficient speculative store bypass mitigation

Kernel

net: nfc: Fix use-after-free in local_cleanup()

Kernel

wifi: rndis_wlan: Prevent buffer overflow in rndis_query_oid

Kernel

net/sched: sch_taprio: fix possible use-after-free

Kernel

net: mdio: validate parameter addr in mdiobus_get_phy()

Kernel

usb: gadget: f_fs: Prevent race during ffs_ep0_queue_wait

Kernel

net: mlx5: eliminate anonymous module_init & module_exit

Kernel

dmaengine: Fix double increment of client_count in dma_chan_get()

Kernel

HID: betop: check shape of output reports

Kernel

w1: fix WARNING after calling w1_process()

Kernel

tracing: Make sure trace_printk() can output as soon as it can be used

Kernel

trace_events_hist: add check for return value of 'create_hist_field'

Kernel

cifs: Fix oops due to uncleared server->smbd_conn in reconnect

Kernel

EDAC/qcom: Do not pass llcc_driv_data as edac_device_ctl_info's pvt_info

Kernel

netlink: prevent potential spectre v1 gadgets

Kernel

net: fix UaF in netns ops registration error path

Kernel

ipv4: prevent potential spectre v1 gadget in ip_metrics_convert()

Kernel

ipv4: prevent potential spectre v1 gadget in fib_metrics_match()

Kernel

netrom: Fix use-after-free of a listening socket.

Kernel

net/sched: sch_taprio: do not schedule in taprio_reset()

Kernel

x86/i8259: Mark legacy PIC interrupts with IRQ_LEVEL

Kernel

perf/x86/amd: fix potential integer overflow on shift of a int

Kernel

bpf: Skip task with pid=1 in send_signal_common()

Kernel

dmaengine: imx-sdma: Fix a possible memory leak in sdma_transfer_init

Kernel

netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits

Kernel

drm/virtio: Fix GEM handle creation UAF

Kernel

s390/cpum_sf: add READ_ONCE() semantics to compare and swap loops

Kernel

drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer

Kernel

ixgbe: fix pci device refcount leak

Kernel

ipv6: raw: Deduct extension header length in rawv6_push_pending_frames

Kernel

mm: Always release pages to the buddy allocator in memblock_free_late().

Kernel

netfilter: ipset: Fix overflow before widen in the bitmap_ip_create() function.

Kernel

powerpc/imc-pmu: Fix use of mutex in IRQs disabled section

Kernel

nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()

Kernel

regulator: da9211: Use irq handler when ready

Kernel

net/sched: act_mpls: Fix warning during failed attribute validation

Kernel

efi: fix NULL-deref in init error path

Kernel

io_uring/io-wq: only free worker if it was allocated for creation