Open Source Vulnerabilities
Kernel
scsi: scsi_debug: Fix type in min_t to avoid stack OOB
Kernel
scsi: scsi_debug: Fix type in min_t to avoid stack OOB
Kernel
xen/netback: don't queue unlimited number of packages
Kernel
xen/netback: don't queue unlimited number of packages
Kernel
USB: core: Make do_proc_control() and do_proc_bulk() killable
Kernel
USB: core: Make do_proc_control() and do_proc_bulk() killable
Kernel
io-wq: drop wqe lock before creating new worker
Kernel
media: mxl111sf: change mutex_init() location
Kernel
iocost: Fix divide-by-zero on donation from low hweight cgroup
Kernel
iocost: Fix divide-by-zero on donation from low hweight cgroup
Kernel
usb: xhci-mtk: fix list_del warning when enable list debug
Kernel
usb: xhci-mtk: fix list_del warning when enable list debug
Kernel
btrfs: fix memory leak in __add_inode_ref()
Kernel
selinux: fix sleeping function called from invalid context
Kernel
selinux: fix sleeping function called from invalid context
Kernel
net: stmmac: dwmac-rk: fix oob read in rk_gmac_setup
Kernel
net: stmmac: dwmac-rk: fix oob read in rk_gmac_setup
Kernel
net: systemport: Add global locking for descriptor lifecycle
Kernel
net: systemport: Add global locking for descriptor lifecycle
Kernel
sit: do not call ipip6_dev_free() from sit_init_net()
Kernel
sit: do not call ipip6_dev_free() from sit_init_net()
Kernel
netdevsim: Zero-initialize memory for new map's value in function nsim_bpf_map_alloc
Kernel
netdevsim: Zero-initialize memory for new map's value in function nsim_bpf_map_alloc
Kernel
net/packet: rx_owner_map depends on pg_vec
Kernel
igbvf: fix double free in `igbvf_probe`
Kernel
mptcp: fix deadlock in __mptcp_push_pending()
Kernel
mptcp: remove tcp ulp setsockopt support
Kernel
net: stmmac: fix tc flower deletion for VLAN priority Rx steering
Kernel
net: stmmac: fix tc flower deletion for VLAN priority Rx steering
Kernel
mptcp: clear 'kern' flag from fallback sockets
Kernel
mptcp: never allow the PM to close a listener subflow
Kernel
mptcp: never allow the PM to close a listener subflow
Kernel
drm/amd/pm: fix a potential gpu_metrics_table memory leak
Kernel
drm/amd/pm: fix a potential gpu_metrics_table memory leak
Kernel
rds: memory leak in __rds_conn_create()
Kernel
net/sched: sch_ets: don't remove idle classes from the round-robin list
Kernel
net/sched: sch_ets: don't remove idle classes from the round-robin list
Kernel
net: hns3: fix use-after-free bug in hclgevf_send_mbx_msg
Kernel
net: hns3: fix use-after-free bug in hclgevf_send_mbx_msg
Kernel
inet_diag: fix kernel-infoleak for UDP sockets
Kernel
sch_cake: do not call cake_destroy() from cake_init()
Kernel
sch_cake: do not call cake_destroy() from cake_init()
Kernel
btrfs: use latest_dev in btrfs_show_devname
Kernel
dm btree remove: fix use after free in rebalance_children()
Kernel
dm btree remove: fix use after free in rebalance_children()
Kernel
tee: amdtee: fix an IS_ERR() vs NULL bug
Kernel
mac80211: track only QoS data frames for admission control
Kernel
mac80211: track only QoS data frames for admission control
Kernel
audit: improve robustness of the audit queue handling
Kernel
audit: improve robustness of the audit queue handling
Kernel
vduse: check that offset is within bounds in get_config()
Kernel
vduse: check that offset is within bounds in get_config()
Kernel
vduse: fix memory corruption in vduse_dev_ioctl()
Kernel
net: netlink: af_netlink: Prevent empty skb by adding a check on len.
Kernel
net: netlink: af_netlink: Prevent empty skb by adding a check on len.
Kernel
bpf: Fix kernel address leakage in atomic cmpxchg's r0 aux reg
Kernel
bpf: Fix kernel address leakage in atomic cmpxchg's r0 aux reg
Kernel
bpf: Fix kernel address leakage in atomic fetch
Kernel
bpf: Fix signed bounds propagation after mov32
Kernel
firmware: arm_scpi: Fix string overflow in SCPI genpd driver
Kernel
firmware: arm_scpi: Fix string overflow in SCPI genpd driver
Kernel
drm/msm: Fix null ptr access msm_ioctl_gem_submit()
Kernel
drm/msm: Fix null ptr access msm_ioctl_gem_submit()
Kernel
mac80211: validate extended element ID is present
Kernel
nfc: fix segfault in nfc_genl_dump_devices_done
Kernel
i2c: virtio: fix completion handling
Kernel
RDMA/irdma: Fix a user-after-free in add_pble_prm
Kernel
netfs: Fix lockdep warning from taking sb_writers whilst holding mmap_lock
Kernel
netfs: Fix lockdep warning from taking sb_writers whilst holding mmap_lock
Kernel
RDMA/mlx5: Fix releasing unallocated memory in dereg MR flow
Kernel
RDMA/mlx5: Fix releasing unallocated memory in dereg MR flow
Kernel
RDMA: Fix use-after-free in rxe_queue_cleanup
Kernel
xen/console: harden hvc_xen against event channel storms
Kernel
xen/console: harden hvc_xen against event channel storms
Kernel
xen/netfront: harden netfront against event channel storms
Kernel
xen/netfront: harden netfront against event channel storms
Kernel
xen/blkfront: harden blkfront against event channel storms
Kernel
xen/blkfront: harden blkfront against event channel storms
Kernel
scsi: scsi_debug: Sanity check block descriptor length in resp_mode_select()
Kernel
scsi: scsi_debug: Sanity check block descriptor length in resp_mode_select()
