Open Source Vulnerabilities

Kernel

kernel/irq/irqdomain.c: fix memory leak with using debugfs_lookup()

Kernel

Squashfs: fix handling and sanity checking of xattr_ids count

Kernel

drm/i915: Fix potential bit_17 double-free

Kernel

mm/swapfile: add cond_resched() in get_swap_pages()

Kernel

ovl: Use "buf" flexible array for memcpy() destination

Kernel

fbdev: smscufx: fix error handling code in ufx_usb_probe

Kernel

f2fs: fix to do sanity check on i_extra_isize in is_alive()

Kernel

wifi: brcmfmac: Check the count value of channel spec to prevent out-of-bounds reads

Kernel

gfs2: Always check inode size of inline inodes

Kernel

bpf: Skip invalid kfunc call in backtrack_insn

Kernel

netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits

Kernel

io_uring/poll: add hash if ready poll request can't complete inline

Kernel

drm/virtio: Fix GEM handle creation UAF

Kernel

drm/i915: Fix potential context UAFs

Kernel

s390/cpum_sf: add READ_ONCE() semantics to compare and swap loops

Kernel

drm/msm: another fix for the headless Adreno GPU

Kernel

arm64/mm: fix incorrect file_map_count for invalid pmd

Kernel

drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer

Kernel

drm/amdgpu: Fixed bug on error when unloading amdgpu

Kernel

ixgbe: fix pci device refcount leak

Kernel

ipv6: raw: Deduct extension header length in rawv6_push_pending_frames

Kernel

mm: Always release pages to the buddy allocator in memblock_free_late().

Kernel

iommu/iova: Fix alloc iova overflows issue

Kernel

sched/core: Fix use-after-free bug in dup_user_cpus_ptr()

Kernel

netfilter: ipset: Fix overflow before widen in the bitmap_ip_create() function.

Kernel

powerpc/imc-pmu: Fix use of mutex in IRQs disabled section

Kernel

x86/resctrl: Fix event counts regression in reused RMIDs

Kernel

regulator: da9211: Use irq handler when ready

Kernel

scsi: storvsc: Fix swiotlb bounce buffer leak in confidential VM

Kernel

ASoC: Intel: sof-nau8825: fix module alias overflow

Kernel

drm/msm/dpu: Fix memory leak in msm_mdss_parse_data_bus_icc_path

Kernel

nfsd: fix handling of cached open files in nfsd4_open codepath

Kernel

sched/core: Fix arch_scale_freq_tick() on tickless systems

Kernel

nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()

Kernel

drm/amdgpu: Fix potential NULL dereference

Kernel

ice: Fix potential memory leak in ice_gnss_tty_write()

Kernel

ice: Add check for kzalloc

Kernel

drm/vmwgfx: Remove rcu locks from user resources

Kernel

net/sched: act_mpls: Fix warning during failed attribute validation

Kernel

net/mlx5: Fix command stats access after free

Kernel

net/mlx5e: IPoIB, Block PKEY interfaces with less rx queues than parent

Kernel

net/mlx5e: Fix macsec possible null dereference when updating MAC security entity (SecY)

Kernel

octeontx2-pf: Fix resource leakage in VF driver unbind

Kernel

platform/surface: aggregator: Add missing call to ssam_request_sync_free()

Kernel

platform/x86/amd: Fix refcount leak in amd_pmc_probe

Kernel

ALSA: usb-audio: Fix possible NULL pointer dereference in snd_usb_pcm_has_fixed_rate()

Kernel

efi: fix NULL-deref in init error path

Kernel

io_uring/io-wq: only free worker if it was allocated for creation

Kernel

io_uring: lock overflowing for IOPOLL

Kernel

Bluetooth: hci_qca: Fix driver shutdown on closed serdev