Open Source Vulnerabilities

Kernel

block, bfq: fix uaf for bfqq in bic_set_bfqq()

Kernel

block, bfq: replace 0/1 with false/true in bic apis

Kernel

fscache: Use wait_on_bit() to wait for the freeing of relinquished volume

Kernel

drm/i915: Fix request ref counting during error capture & debugfs dump

Kernel

block: ublk: extending queue_size to fix overflow

Kernel

squashfs: harden sanity check in squashfs_read_xattr_id_table

Kernel

riscv: kprobe: Fixup kernel panic when probing an illegal position

Kernel

can: j1939: fix errant WARN_ON_ONCE in j1939_session_deactivate

Kernel

net: openvswitch: fix flow memory leak in ovs_flow_cmd_new

Kernel

efi: fix potential NULL deref in efi_mem_reserve_persistent

Kernel

scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress

Kernel

scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress

Kernel

vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF

Kernel

fbcon: Check font dimension limits

Kernel

cgroup/cpuset: Fix wrong check in update_parent_subparts_cpumask()

Kernel

can: isotp: split tx timer into transmission and timeout

Kernel

nvmem: brcm_nvram: Add check for kzalloc

Kernel

mm: multi-gen LRU: fix crash during cgroup migration

Kernel

mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()

Kernel

usb: typec: ucsi: Don't attempt to resume the ports before they exist

Kernel

HV: hv_balloon: fix memory leak with using debugfs_lookup()

Kernel

fpga: m10bmc-sec: Fix probe rollback

Kernel

mm/uffd: fix pte marker when fork() without fork event

Kernel

kernel/irq/irqdomain.c: fix memory leak with using debugfs_lookup()

Kernel

mm/khugepaged: fix ->anon_vma race

Kernel

mm/MADV_COLLAPSE: catch !none !huge !bad pmd lookups

Kernel

Squashfs: fix handling and sanity checking of xattr_ids count

Kernel

mm/swapfile: add cond_resched() in get_swap_pages()

Kernel

drm/i915: Avoid potential vm use-after-free

Kernel

drm/i915: Fix potential bit_17 double-free

Kernel

ASoC: SOF: sof-audio: prepare_widgets: Check swidget for NULL on sink failure

Kernel

nvmem: core: fix cleanup after dev_set_name()

Kernel

ovl: Use "buf" flexible array for memcpy() destination

Kernel

f2fs: initialize locks earlier in f2fs_fill_super()

Kernel

fbdev: smscufx: fix error handling code in ufx_usb_probe

Kernel

wifi: brcmfmac: Check the count value of channel spec to prevent out-of-bounds reads

Kernel

gfs2: Always check inode size of inline inodes

Kernel

bpf: Skip invalid kfunc call in backtrack_insn

Kernel

f2fs: fix to do sanity check on i_extra_isize in is_alive()

Nextcloud Server previews are accessible without a watermark

ownCloud Android app vulnerable to SQL Injection

ownCloud Android app vulnerable to Path Traversal

github.com/pion/dtls/v2

Panic during unmarshal of Server Hello in github.com/pion/dtls/v2

github.com/pion/dtls/v2

Panic during unmarshal of Hello Verify Request in github.com/pion/dtls/v2

freerdp, freerdp

Security update for freerdp

freerdp, freerdp, freerdp

Security update for freerdp