Open Source Vulnerabilities

Kernel

misc: fastrpc: fix memory corruption on open

Kernel

misc: fastrpc: fix memory corruption on probe

Kernel

binder: fix alloc->vma_vm_mm null-ptr dereference

Kernel

clk: bcm: rpi: Prevent out-of-bounds access

Kernel

hwmon: (gpio-fan) Fix array out of bounds access

Kernel

xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()

Kernel

wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected

Kernel

tty: n_gsm: add sanity check for gsm->receive in gsm_receive_buf()

Kernel

vt: Clear selection before changing the font

Kernel

binder: fix UAF of ref->proc caused by race condition

Kernel

cifs: fix small mempool leak in SMB2_negotiate()

Kernel

media: mceusb: Use new usb_control_msg_*() routines

Kernel

USB: core: Prevent nested device-reset calls

Kernel

wifi: mac80211: Fix UAF in ieee80211_scan_rx()

Kernel

ALSA: seq: oss: Fix data-race for max_midi_devs access

Kernel

ALSA: seq: Fix data-race at module auto-loading

Kernel

crypto: arm64/poly1305 - fix a read out-of-bound

Kernel

arm64: set UXN on swapper page tables

Kernel

nfsd: eliminate the NFSD_FILE_BREAK_* flags

Kernel

ALSA: bcd2000: Fix a UAF bug on the error path of probing

Kernel

KVM: nVMX: Snapshot pre-VM-Enter BNDCFGS for !nested_run_pending case

Kernel

KVM: nVMX: Snapshot pre-VM-Enter DEBUGCTL for !nested_run_pending case

Kernel

KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0

Kernel

KVM: x86: Mark TSS busy during LTR emulation _after_ all fault checks

Kernel

KVM: x86/xen: Stop Xen timer before changing IRQ

Kernel

KVM: x86/xen: Initialize Xen timer only once

Kernel

lockd: detect and reject lock arguments that overflow

Kernel

vfs: Check the truncate maximum size in inode_newsize_ok()

Kernel

crypto: ccp - Use kzalloc for sev ioctl interfaces to prevent kernel memory leak

Kernel

riscv:uprobe fix SR_SPIE set/clear handling

Kernel

KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT

Kernel

RISC-V: kexec: Fixup use of smp_processor_id() in preemptible context

Kernel

RISC-V: Fixup get incorrect user mode PC for kernel mode regs

Kernel

RISC-V: Fixup schedule out issue in machine_crash_shutdown()

Kernel

RISC-V: Fix counter restart during overflow for RV32

Kernel

RISC-V: Update user page mapping only once during start

Kernel

LoongArch: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK

Kernel

rtc: rx8025: fix 12/24 hour mode detection on RX-8035

Kernel

tty: vt: initialize unicode screen buffer

Kernel

drm/fb-helper: Fix out-of-bounds access

Kernel

drm/nouveau: fix another off-by-one in nvbios_addr

Kernel

usbnet: Fix linkwatch use-after-free on disconnect

Kernel

bpf: Fix KASAN use-after-free Read in compute_effective_progs

Kernel

iio: light: isl29028: Fix the warning in isl29028_remove()

Kernel

ksmbd: fix memory leak in smb2_handle_negotiate

Kernel

ksmbd: prevent out of bound read for SMB2_TREE_CONNNECT

Kernel

ksmbd: fix use-after-free bug in smb2_tree_disconect

Kernel

ksmbd: prevent out of bound read for SMB2_WRITE

Kernel

ksmbd: fix heap-based overflow in set_ntacl_dacl()

Kernel

btrfs: reject log replay if there is unsupported RO compat flag