Open Source Vulnerabilities

Kernel

NFSD: Fix ia_size underflow

Kernel

NFSD: Fix NFSv3 SETATTR/CREATE's handling of large file sizes

Kernel

can: isotp: fix potential CAN frame reception race in isotp_rcv()

Kernel

ima: fix reference leak in asymmetric_verify()

Kernel

audit: don't deref the syscall args when checking the openat2 open_how::flags

Kernel

xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create

Kernel

pidfd: fix test failure due to stack overflow on some arches

Kernel

staging: vc04_services: Fix RCU dereference check

Kernel

scsi: ufs: Fix a deadlock in the error handler

Kernel

Drivers: hv: vmbus: Fix memory leak in vmbus_add_channel_kobj

Kernel

HID: elo: fix memory leak in elo_probe

Kernel

lockdep: Correct lock_classes index mapping

Kernel

copy_process(): Move fd_install() out of sighand->siglock critical section

Kernel

dmaengine: ptdma: Fix the error handling path in pt_core_init()

Kernel

mtd: parsers: qcom: Fix missing free for pparts in cleanup

Kernel

mtd: parsers: qcom: Fix kernel panic on skipped partition

Kernel

mtd: rawnand: gpmi: don't leak PM reference in error path

Kernel

perf bpf: Defer freeing string after possible strlen() on it

Kernel

net/smc: Avoid overwriting the copies of clcsock callback functions

Kernel

libsubcmd: Fix use-after-free for realloc(..., 0)

Kernel

net_sched: add __rcu annotation to netdev->qdisc

Kernel

drop_monitor: fix data-race in dropmon_net_event / trace_napi_poll_hit

Kernel

cfg80211: fix race in netlink owner interface destruction

Kernel

net: dsa: lantiq_gswip: fix use after free in gswip_remove()

Kernel

gcc-plugins/stackleak: Use noinstr in favor of notrace

Kernel

ipv6: mcast: use rcu-safe version of ipv6_get_lladdr()

Kernel

ipv6: fix data-race in fib6_info_hw_flags_set / fib6_purge_rt

Kernel

ipv4: fix data races in fib_alias_hw_flags_set

Kernel

vsock: remove vsock from connected table when connect is interrupted by a signal

Kernel

nvme-rdma: fix possible use-after-free in transport error_recovery work

Kernel

nvme-tcp: fix possible use-after-free in transport error_recovery work

Kernel

iwlwifi: fix use-after-free

Kernel

KVM: x86: nSVM: fix potential NULL derefernce on nested migration

Kernel

nvme: fix a possible use-after-free in controller reset during load

Kernel

scsi: pm8001: Fix use-after-free for aborted SSP/STP sas_task

Kernel

scsi: pm8001: Fix use-after-free for aborted TMF sas_task

Kernel

ax25: improve the incomplete fix to avoid UAF and NPD bugs

Kernel

net: ieee802154: at86rf230: Stop leaking skb's

Kernel

parisc: Fix data TLB miss in sba_unmap_sg

Kernel

iommu: Fix potential use-after-free during probe

Kernel

mm: don't try to NUMA-migrate COW pages that have other uses

Kernel

vt_ioctl: fix array_index_nospec in vt_setactivate

Kernel

perf: Fix list corruption in perf_cgroup_switch()

Kernel

mm: memcg: synchronize objcg lists with a dedicated spinlock

Kernel

s390/cio: verify the driver availability for path_event call

Kernel

iio: buffer: Fix file related error handling in IIO_BUFFER_GET_FD_IOCTL

Kernel

fs/proc: task_mmu.c: don't read mapcount for migration entry

Kernel

phy: ti: Fix missing sentinel for clk_div_table

Kernel

net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup

Kernel

eeprom: ee1004: limit i2c reads to I2C_SMBUS_BLOCK_MAX