Open Source Vulnerabilities
Kernel
Revert "evm: Fix memleak in init_desc"
Kernel
ARM: 9210/1: Mark the FDT_FIXED sections as shareable
Kernel
ARM: 9210/1: Mark the FDT_FIXED sections as shareable
Kernel
drm/i915: fix a possible refcount leak in intel_dp_add_mst_connector()
Kernel
drm/i915: fix a possible refcount leak in intel_dp_add_mst_connector()
Kernel
ima: Fix a potential integer overflow in ima_appraise_measurement
Kernel
ima: Fix a potential integer overflow in ima_appraise_measurement
Kernel
net: stmmac: dwc-qos: Disable split header for Tegra194
Kernel
net: stmmac: dwc-qos: Disable split header for Tegra194
Kernel
sysctl: Fix data races in proc_douintvec().
Kernel
sysctl: Fix data races in proc_douintvec_minmax().
Kernel
cipso: Fix data-races around sysctl.
Kernel
icmp: Fix data-races around sysctl.
Kernel
ipv4: Fix a data-race around sysctl_fib_sync_mem.
Kernel
vlan: fix memory leak in vlan_newlink()
Kernel
drm/i915/selftests: fix subtraction overflow bug
Kernel
sysctl: Fix data-races in proc_dou8vec_minmax().
Kernel
icmp: Fix data-races around sysctl_icmp_echo_enable_probe.
Kernel
icmp: Fix data-races around sysctl_icmp_echo_enable_probe.
Kernel
icmp: Fix a data-race around sysctl_icmp_errors_use_inbound_ifaddr.
Kernel
icmp: Fix a data-race around sysctl_icmp_errors_use_inbound_ifaddr.
Kernel
raw: Fix a data-race around sysctl_raw_l3mdev_accept.
Kernel
raw: Fix a data-race around sysctl_raw_l3mdev_accept.
Kernel
tcp: Fix a data-race around sysctl_tcp_ecn_fallback.
Kernel
tcp: Fix a data-race around sysctl_tcp_ecn_fallback.
Kernel
nexthop: Fix data-races around nexthop_compat_mode.
Kernel
nexthop: Fix data-races around nexthop_compat_mode.
Kernel
net: stmmac: fix leaks in probe
Kernel
ima: Fix potential memory leak in ima_init_crypto()
Kernel
ima: Fix potential memory leak in ima_init_crypto()
Kernel
sfc: fix use after free when disabling sriov
Kernel
seg6: fix skb checksum in SRv6 End.B6 and End.B6.Encaps behaviors
Kernel
seg6: fix skb checksum in SRv6 End.B6 and End.B6.Encaps behaviors
Kernel
sfc: fix kernel panic when creating VF
Kernel
seg6: bpf: fix skb checksum in bpf_push_seg6_encap()
Kernel
seg6: bpf: fix skb checksum in bpf_push_seg6_encap()
Kernel
net: atlantic: remove deep parameter on suspend/resume functions
Kernel
net: atlantic: remove deep parameter on suspend/resume functions
Kernel
net: atlantic: remove aq_nic_deinit() when resume
Kernel
KVM: x86: Fully initialize 'struct kvm_lapic_irq' in kvm_pv_kick_cpu_op()
Kernel
KVM: x86: Fully initialize 'struct kvm_lapic_irq' in kvm_pv_kick_cpu_op()
Kernel
powerpc/xive/spapr: correct bitmap allocation size
Kernel
netfilter: nf_tables: avoid skb access on nf_stolen
Kernel
netfilter: nf_tables: avoid skb access on nf_stolen
Kernel
cpufreq: pmac32-cpufreq: Fix refcount leak bug
Kernel
net: tipc: fix possible refcount leak in tipc_sk_create()
Kernel
net: tipc: fix possible refcount leak in tipc_sk_create()
Kernel
net: sfp: fix memory leak in sfp_probe()
Kernel
pinctrl: aspeed: Fix potential NULL dereference in aspeed_pinmux_set_mux()
Kernel
pinctrl: aspeed: Fix potential NULL dereference in aspeed_pinmux_set_mux()
Kernel
ASoC: Intel: sof_sdw: handle errors on card registration
Kernel
ASoC: Intel: sof_sdw: handle errors on card registration
Kernel
vt: fix memory overlapping when deleting chars in the buffer
Kernel
vt: fix memory overlapping when deleting chars in the buffer
Kernel
ASoC: rt7*-sdw: harden jack_detect_handler
Kernel
ASoC: rt711-sdca: fix kernel NULL pointer dereference when IO error
Kernel
ASoC: rt711-sdca: fix kernel NULL pointer dereference when IO error
Kernel
nvme: use struct group for generic command dwords
Kernel
serial: 8250: Fix PM usage_count for console handover
Kernel
serial: 8250: Fix PM usage_count for console handover
Kernel
power: supply: core: Fix boundary conditions in interpolation
Kernel
power: supply: core: Fix boundary conditions in interpolation
Kernel
drm/aperture: Run fbdev removal before internal helpers
Kernel
drm/aperture: Run fbdev removal before internal helpers
Kernel
x86/entry: Add kernel IBRS implementation
Kernel
x86/bugs: Report Intel retbleed vulnerability
Kernel
x86/speculation: Fill RSB on vmexit for IBRS
Kernel
x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported
Kernel
x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported
Kernel
efi/x86: use naked RET on mixed mode call wrapper
Kernel
KVM: VMX: Prevent RSB underflow before vmenter
Kernel
x86/speculation: Disable RRSBA behavior
Kernel
lockdown: Fix kexec lockdown bypass with ima policy
Kernel
lockdown: Fix kexec lockdown bypass with ima policy
Kernel
x86/kvm: fix FASTOP_SIZE when return thunks are enabled
Kernel
x86/kvm: fix FASTOP_SIZE when return thunks are enabled
