Open Source Vulnerabilities

Kernel

bpf: Fix insufficient bounds propagation from adjust_scalar_min_max_vals

Kernel

usbnet: fix memory leak in error case

Kernel

netfilter: nft_set_pipapo: release elements in clone from abort path

Kernel

ARM: meson: Fix refcount leak in meson_smp_prepare_cpus

Kernel

dmaengine: pl330: Fix lockdep warning about non-static key

Kernel

dmaengine: ti: Fix refcount leak in ti_dra7_xbar_route_allocate

Kernel

xen/netback: avoid entering xenvif_rx_next_skb() with an empty rx queue

Kernel

tracing/histograms: Fix memory leak problem

Kernel

cgroup: Use separate src/dst nodes when preloading css_sets for migration

Kernel

ARM: 9214/1: alignment: advance IT state after emulating Thumb instruction

Kernel

wifi: mac80211: fix queue selection for mesh/OCB interfaces

Kernel

drm/panfrost: Fix shrinker list corruption by madvise IOCTL

Kernel

Revert "evm: Fix memleak in init_desc"

Kernel

drm/i915: fix a possible refcount leak in intel_dp_add_mst_connector()

Kernel

ARM: 9210/1: Mark the FDT_FIXED sections as shareable

Kernel

ima: Fix a potential integer overflow in ima_appraise_measurement

Kernel

net: stmmac: dwc-qos: Disable split header for Tegra194

Kernel

sysctl: Fix data races in proc_douintvec().

Kernel

sysctl: Fix data races in proc_douintvec_minmax().

Kernel

cipso: Fix data-races around sysctl.

Kernel

icmp: Fix data-races around sysctl.

Kernel

ipv4: Fix a data-race around sysctl_fib_sync_mem.

Kernel

raw: Fix a data-race around sysctl_raw_l3mdev_accept.

Kernel

nexthop: Fix data-races around nexthop_compat_mode.

Kernel

ima: Fix potential memory leak in ima_init_crypto()

Kernel

sfc: fix use after free when disabling sriov

Kernel

seg6: fix skb checksum in SRv6 End.B6 and End.B6.Encaps behaviors

Kernel

seg6: bpf: fix skb checksum in bpf_push_seg6_encap()

Kernel

sfc: fix kernel panic when creating VF

Kernel

net: atlantic: remove deep parameter on suspend/resume functions

Kernel

net: atlantic: remove aq_nic_deinit() when resume

Kernel

KVM: x86: Fully initialize 'struct kvm_lapic_irq' in kvm_pv_kick_cpu_op()

Kernel

cpufreq: pmac32-cpufreq: Fix refcount leak bug

Kernel

net: tipc: fix possible refcount leak in tipc_sk_create()

Kernel

net: sfp: fix memory leak in sfp_probe()

Kernel

pinctrl: aspeed: Fix potential NULL dereference in aspeed_pinmux_set_mux()

Kernel

vt: fix memory overlapping when deleting chars in the buffer

Kernel

serial: 8250: Fix PM usage_count for console handover

Kernel

x86/entry: Add kernel IBRS implementation

Kernel

x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported

Kernel

x86/bugs: Report Intel retbleed vulnerability

Kernel

x86/speculation: Fill RSB on vmexit for IBRS

Kernel

efi/x86: use naked RET on mixed mode call wrapper

Kernel

x86/speculation: Disable RRSBA behavior

Kernel

x86/kvm: fix FASTOP_SIZE when return thunks are enabled

Kernel

lockdown: Fix kexec lockdown bypass with ima policy

Kernel

net: usb: ax88179_178a needs FLAG_SEND_ZLP

Kernel

power/reset: arm-versatile: Fix refcount leak in versatile_reboot_probe

Kernel

pinctrl: ralink: Check for null return of devm_kcalloc

Kernel

perf/core: Fix data race between perf_event_set_output() and perf_mmap_close()