Open Source Vulnerabilities

Kernel

nfp: flower: Fix a potential leak in nfp_tunnel_add_shared_mac()

Kernel

netfilter: nf_tables: fix memory leak during stateful obj update

Kernel

net/smc: Use a mutex for locking "struct smc_pnettable"

Kernel

net/mlx5: DR, Fix slab-out-of-bounds in mlx5_cmd_dr_create_fte

Kernel

spi: spi-zynq-qspi: Fix a NULL pointer dereference in zynq_qspi_exec_mem_op()

Kernel

net-timestamp: convert sk->sk_tskey to atomic_t

Kernel

configfs: fix a race in configfs_{,un}register_subsystem()

Kernel

RDMA/ib_srp: Fix a deadlock

Kernel

bpf: Fix crash due to out of bounds access into reg2btf_ids.

Kernel

iio: adc: men_z188_adc: Fix a resource leak in an error handling path

Kernel

iio: adc: tsc2046: fix memory corruption by preventing array overflow

Kernel

iio: imu: st_lsm6dsx: wait for settling time in st_lsm6dsx_read_oneshot

Kernel

sc16is7xx: Fix for incorrect data being transmitted

Kernel

usb: gadget: rndis: add spinlock for rndis response list

Kernel

xhci: Prevent futile URB re-submissions due to incorrect return value.

Kernel

RDMA/cma: Do not change route.addr.src_addr outside state checks

Kernel

thermal: int340x: fix memory leak in int3400_notify()

Kernel

btrfs: prevent copying too big compressed lzo segment

Kernel

btrfs: defrag: allow defrag_one_cluster() to skip large extent which is not a target

Kernel

riscv: fix oops caused by irqsoff latency tracer

Kernel

mac80211_hwsim: initialize ieee80211_tx_info at hw_scan_work

Kernel

sched/fair: Fix fault in reweight_entity

Kernel

btrfs: get rid of warning on transaction commit when using flushoncommit

Kernel

tipc: fix a bit overflow in tipc_crypto_key_rcv()

Kernel

cifs: fix double free race when mount fails in cifs_get_root()

Kernel

usb: gadget: clear related members when goto fail

Kernel

riscv: Fix config KASAN && SPARSEMEM && !SPARSE_VMEMMAP

Kernel

riscv: Fix config KASAN && DEBUG_VIRTUAL

Kernel

iwlwifi: mvm: check debugfs_dir ptr before use

Kernel

ASoC: ops: Shift tested values in snd_soc_put_volsw() by +min

Kernel

iommu/vt-d: Fix double list_add when enabling VMD in scalable mode

Kernel

thermal: core: Fix TZ_GET_TRIP NULL pointer dereference

Kernel

xen/netfront: destroy queues before real_num_tx_queues is zeroed

Kernel

blktrace: fix use after free for struct blk_trace

Kernel

iommu/amd: Recover from event log overflow

Kernel

mm: Consider __GFP_NOWARN flag for oversized kvmalloc() calls

Kernel

xfrm: fix MTU regression

Kernel

netfilter: fix use-after-free in __nf_register_net_hook()

Kernel

bpf, sockmap: Do not ignore orig_len parameter

Kernel

net: fix up skbs delta_truesize in UDP GRO frag_list

Kernel

netfilter: nf_queue: fix possible use-after-free

Kernel

net: ipv6: ensure we call ipv6_mc_down() at most once

Kernel

net/smc: fix connection leak

Kernel

net: dsa: microchip: fix bridging with more than two member ports

Kernel

net: arcnet: com20020: Fix null-ptr-deref in com20020pci_probe()

Kernel

auxdisplay: lcd2s: Fix memory leak in ->remove()

Kernel

mptcp: Correctly set DATA_FIN timeout when number of retransmits is large

Kernel

ibmvnic: free reset-work-item when flushing

Kernel

iommu/amd: Fix I/O page table memory leak

Kernel

btrfs: fix relocation crash due to premature return from btrfs_commit_transaction()