RHSA-2024:2394 Red Hat Security Advisory: kernel security, bug fix, and enhancement update
kernel: Bluetooth BR/EDR PIN Pairing procedure is vulnerable to an impersonation attack kernel: ovl: fix warning in ovl_create_real() kernel: memcg does not limit the number of POSIX file locks allowing memory exhaustion kernel: vmwgfx: NULL pointer dereference in vmw_cmd_dx_define_query kernel: integer overflow in l2cap_config_req() in net/bluetooth/l2cap_core.c kernel: i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction() kernel: Bluetooth: L2CAP: Fix u8 overflow kernel: hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() kernel: tracing: Fix sleeping function called from invalid context on RT kernel kernel: net: mdio: unexport __init-annotated mdio_bus_init() kernel: arm64: ftrace: consistently handle PLTs. kernel: mm/uffd: fix pte marker when fork() without fork event kernel: Bluetooth: Fix a buffer overflow in mgmt_mesh_add() kernel: tty: n_gsm: add sanity check for gsm->receive in gsm_receive_buf() kernel: ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead kernel: tee: add overflow check in register_shm_helper() kernel: tty: n_gsm: fix deadlock and link starvation in outgoing data path kernel: PM: hibernate: defer device probing when resuming from hibernation kernel: ext4: don't allow journal inode to have encrypt flag kernel: ext4: fix delayed allocation bug in ext4_clu_mapped for bigalloc + inline kernel: erofs: fix order >= MAX_ORDER warning due to crafted negative i_size kernel: perf/x86/intel/uncore: Fix reference count leak in hswep_has_limit_sbox() kernel: ext4: init quota for 'old.inode' in 'ext4_rename' kernel: Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure kernel: ext4: check and assert if marking an no_delete evicting inode dirty kernel: Bluetooth: hci_conn: Fix crash on hci_create_cis_sync kernel: gpiolib: cdev: fix NULL-pointer dereferences kernel: ext4: add EXT4_IGET_BAD flag to prevent unexpected bad inode kernel: cpufreq: qcom-hw: Fix memory leak in qcom_cpufreq_hw_read_lut() kernel: ext4: fix bug_on in __es_tree_search caused by bad boot loader inode kernel: platform/chrome: cros_ec_typec: zero out stale pointers kernel: ext4: fix use-after-free in ext4_orphan_cleanup kernel: Linux kernel: Privilege escalation via out-of-bounds write in RDMA/siw kernel: Kernel: Denial of Service due to reference count leak kernel: net: fix UAF issue in nfqnl_nf_hook_drop() when ops_init() failed kernel: ext4: fix bug_on in __es_tree_search caused by bad quota inode kernel: Linux kernel (ext4): Denial of Service due to inode leak via failed extended attribute creation kernel: objtool: Fix SEGFAULT kernel: use after free in vcs_read in drivers/tty/vt/vc_screen.c due to race kernel: cxgb4: use-after-free in ch_flower_stats_cb() kernel: netfilter: nf_tables: out-of-bounds access in nf_tables_newtable() kernel: NVMe: info leak due to out-of-bounds read in nvmet_ctrl_find_get kernel: local dos vulnerability in scatterwalk_copychunks kernel: GC's deletion of an SKB races with unix_stream_read_generic()  leading to UAF kernel: GSM multiplexing race condition leads to privilege escalation kernel: null pointer dereference vulnerability in nft_dynset_init() kernel: Null Pointer Dereference vulnerability in ida_free in lib/idr.c kernel: Out of boundary write in perf_read_group() as result of overflow a perf_event's read_size kernel: use-after-free in IPv4 IGMP kernel: Bluetooth Forward and Future Secrecy Attacks and Defenses kernel: irdma: Improper access control Kernel: double free in hci_conn_cleanup of the bluetooth subsystem kernel: Bluetooth: HCI: global out-of-bounds access in net/bluetooth/hci_sync.c kernel: race condition between HCIUARTSETPROTO and HCIUARTGETPROTO in hci_uart_tty_ioctl kernel: usb: out-of-bounds read in read_descriptors kernel: netfilter: nftables out-of-bounds read in nf_osf_match_one() kernel: netfilter: xtables sctp out-of-bounds read in match_flags() kernel: xfrm: out-of-bounds read in __xfrm_state_filter_match() kernel: QXL: race condition leading to use-after-free in qxl_mode_dumb_create() kernel: ipv4: NULL pointer dereference in ipv4_send_dest_unreach() kernel: netfilter: race condition between IPSET_CMD_ADD and IPSET_CMD_SWAP kernel: lib/kobject.c vulnerable to fill_kobj_path out-of-bounds write kernel: NULL pointer dereference vulnerability in io_uring_show_fdinfo kernel: use-after-free during a race condition between a nonblocking atomic commit and a driver unload in drivers/gpu/drm/drm_atomic.c kernel: bluetooth: bt_sock_ioctl race condition leads to use-after-free in bt_sock_recvmsg kernel: use-after-free in net/atm/ioctl.c kernel: smb: client: fix potential OOBs in smb2_parse_contexts() kernel: gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump kernel: intel: Fix NULL pointer dereference issue in upi_fill_topology() kernel: use-after-free in kv_parse_power_table kernel: null-ptr-deref in alloc_workqueue kernel: perf/x86/lbr: Filter vsyscall addresses kernel: HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect kernel: drm: Don't unref the same fb many times by mistake due to deadlock handling kernel: mm/sparsemem: fix race in accessing memory_section->usage kernel: net: fix possible store tearing in neigh_periodic_work() kernel: HID: sony: Fix a potential memory leak in sony_probe() kernel: team: NULL pointer dereference when team device type is changed kernel: net: bridge: data races indata-races in br_handle_frame_finish() kernel: net/core: kernel crash in ETH_P_1588 flow dissector kernel: netfilter: nf_tables: memory leak when more than 255 elements expired kernel: KVM: s390: fix setting of fpc register kernel: net/sched: act_ct: fix skb leak and crash on ooo frags kernel: netfilter: nf_tables: disallow timeout for anonymous sets kernel: netfilter: nftables: exthdr: fix 4-byte stack OOB write kernel: drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL kernel: wifi: mac80211: don&#39;t return unset power in ieee80211_get_tx_power() kernel: TCP-spoofed ghost ACKs and leak leak initial sequence number kernel: netfilter: nf_tables: don't skip expired elements during walk kernel: mm/MADV_COLLAPSE: catch !none !huge !bad pmd lookups kernel: mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() kernel: mm: multi-gen LRU: fix crash during cgroup migration kernel: vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF kernel: efi: fix potential NULL deref in efi_mem_reserve_persistent kernel: net: phy: dp83822: Fix null pointer access on DP83825/DP83826 devices kernel: arm64: dts: imx8mm-verdin: Do not power down eth-phy kernel: net: fix UaF in netns ops registration error path kernel: ovl: fix tmpfile leak kernel: Bluetooth: Fix possible deadlock in rfcomm_sk_state_change kernel: Bluetooth: hci_sync: fix memory leak in hci_update_adv_data() kernel: Bluetooth: hci_conn: Fix memory leaks kernel: net: mdio: validate parameter addr in mdiobus_get_phy() kernel: Bluetooth: Fix race condition in hci_cmd_sync_clear kernel: tee: amdtee: fix race condition in amdtee_open_session kernel: cifs: fix use-after-free bug in refresh_cache_worker() kernel: Bluetooth: HCI: Fix global-out-of-bounds kernel: tty: serial: fsl_lpuart: fix race on RX DMA shutdown kernel: powerpc/iommu: fix memory leak with using debugfs_lookup() kernel: bnxt_en: Avoid order-5 memory allocation for TPA data kernel: scsi: core: Remove the /proc/scsi/${proc_name} directory earlier kernel: igb: Fix igb_down hung on surprise removal kernel: ext4: avoid deadlock in fs reclaim with page writeback kernel: scsi: qla2xxx: Pointer may be dereferenced kernel: Linux kernel: md/raid10 soft lockup due to unlimited plugged bio kernel: drm/amdgpu: fix calltrace warning in amddrm_buddy_fini kernel: irqchip/ti-sci: Fix refcount leak in ti_sci_intr_irq_domain_probe kernel: wifi: ath12k: Avoid NULL pointer access during management transmit cleanup kernel: dma-buf/dma-resv: Stop leaking on krealloc() failure kernel: arm64/sme: Set new vector length before reallocating kernel: Linux kernel: Out-of-bounds write in VXLAN due to incorrect nexthop hash size leading to denial of service kernel: Kernel: Denial of Service in amdgpu driver due to improper interrupt handling kernel: PM: domains: fix memory leak with using debugfs_lookup() kernel: af_unix: Fix data-races around user->unix_inflight kernel: Linux kernel KVM: Denial of Service in nested SVM due to TSC multiplier manipulation kernel: wifi: mac80211_hwsim: Fix possible NULL dereference kernel: md/raid5-cache: fix null-ptr-deref for r5l_flush_stripe_to_raid() kernel: bpf: Fix memleak due to fentry attach failure kernel: drm/amdgpu: drop redundant sched job cleanup when cs is aborted kernel: drm/tests: helpers: Avoid a driver uaf kernel: Linux kernel (amdgpu): Denial of Service via incorrect interrupt handling kernel: cifs: fix DFS traversal oops without CONFIG_CIFS_DFS_UPCALL kernel: drm/amdgpu: install stub fence into potential unused fence pointers kernel: Bluetooth: use RCU for hci_conn_params and iterate safely in hci_sync kernel: Linux kernel: Denial of Service in ARM FF-A due to duplicate device names during logical partition registration. kernel: drm/amd/display: Fix possible underflow for displays with large vblank kernel: drm/nouveau/disp: fix use-after-free in error handling of nouveau_connector_create kernel: ext4: fix i_disksize exceeding i_size problem in paritally written case kernel: ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync() kernel: scsi: qla2xxx: Remove unused nvme_ls_waitq wait queue kernel: ext4: add bounds checking in get_max_inline_xattr_value_size() kernel: drm/client: Fix memory leak in drm_client_modeset_probe kernel: Linux kernel: Denial of Service due to file descriptor leak in BPF sample code kernel: Bluetooth: btrtl: check for NULL in btrtl_set_quirks() kernel: Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp kernel: Linux kernel: Denial of Service in netfilter due to improper garbage collection kernel: Linux kernel: Denial of Service via integer overflow in radeon_cs_parser_init kernel: ext4: fix WARNING in mb_find_extent kernel: wifi: mac80211_hwsim: drop short frames kernel: scsi: qla2xxx: Wait for io return on terminate rport kernel: RDMA/cxgb4: Fix potential null-ptr-deref in pass_establish() kernel: lwt: Fix return values of BPF xmit ops kernel: icmp6: Fix null-ptr-deref of ip6_null_entry->rt6i_idev in icmp6_dev() kernel: Linux kernel: Denial of Service in DRM scheduler due to improper work queue handling kernel: drm/ttm: check null pointer before accessing when swapping kernel: skbuff: skb_segment, Call zero copy functions before using skbuff frags kernel: ip6mr: Fix skb_under_panic in ip6mr_cache_report() kernel: drm/amdgpu: fix memory leak in mes self test kernel: net/mlx5e: fix memory leak in mlx5e_fs_tt_redirect_any_create kernel: md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request kernel: wifi: mwifiex: avoid possible NULL skb pointer dereference kernel: net/mlx5e: xsk: Fix crash on regular rq reactivation kernel: USB: dwc3: fix memory leak with using debugfs_lookup() kernel: blk-cgroup: Reinit blkg_iostat_set after clearing in blkcg_reset_stats() kernel: bpf: cpumap: Fix memory leak in cpu_map_update_elem kernel: ice: Block switchdev mode when ADQ is active and vice versa kernel: drm/ttm: fix bulk_move corruption when adding a entry kernel: scsi: qla2xxx: Fix potential NULL pointer dereference kernel: Linux kernel HSR driver: Denial of Service via uninitialized value access kernel: soundwire: qcom: fix storing port config out-of-bounds kernel: drm/amdgpu/gfx: disable gfx9 cp_ecc_error_irq only when enabling legacy gfx ras kernel: ext4: improve error handling from ext4_dirhash() kernel: iw_cxgb4: Fix potential NULL dereference in c4iw_fill_res_cm_id_entry() kernel: Linux kernel CXL driver: Use-after-free vulnerability leading to system instability or privilege escalation kernel: powerpc/rtas_flash: allow user copy to flash block cache objects kernel: mptcp: fix disconnect vs accept race kernel: x86/platform/uv: Use alternate source for socket to node data kernel: Linux kernel: Denial of Service due to race condition in IOMMU pasid unbinding kernel: nbd: fix incomplete validation of ioctl arg kernel: RDMA/cma: Allow UD qp_type to join multicast only kernel: thunderbolt: Fix memory leak in tb_handle_dp_bandwidth_request() kernel: scsi: qla2xxx: Use raw_smp_processor_id() instead of smp_processor_id() kernel: blk-crypto: make blk_crypto_evict_key() more robust kernel: RDMA/rxe: Fix incomplete state save in rxe_requester kernel: cpufreq: davinci: Fix clk use after free kernel: drm/amdgpu: unmap and remove csa_va properly kernel: net/mlx5: DR, fix memory leak in mlx5dr_cmd_create_reformat_ctx kernel: drm/amdgpu: Fix sdma v4 sw fini error kernel: cpufreq: amd-pstate: fix global sysfs attribute type kernel: drm/i915: mark requests for GuC virtual engines to avoid use-after-free kernel: HID: hyperv: avoid struct memcpy overrun warning kernel: ip_vti: fix potential slab-use-after-free in decode_session6 kernel: cpufreq: amd-pstate-ut: Fix kernel panic when loading the driver kernel: wifi: nl80211: fix integer overflow in nl80211_parse_mbssid_elems() kernel: bpf, cpumap: Make sure kthread is running before map update returns kernel: USB: Gadget: core: Help prevent panic during UVC unconfigure kernel: net/mlx5e: Check for NOT_READY flag state after locking kernel: bpf: reject unhashed sockets in bpf_sk_assign kernel: scsi: target: Fix multiple LUN_RESET handling kernel: ipmi_si: fix a memleak in try_smi_init() kernel: hwmon: (coretemp) Simplify platform device handling kernel: scsi: qla2xxx: Fix deletion race condition kernel: memcontrol: ensure memcg acquired by id is properly set up kernel: drm/amdgpu: drop gfx_v11_0_cp_ecc_error_irq_funcs kernel: net/mlx5e: Take RTNL lock when needed before calling xdp_set_features() kernel: bpf: Make bpf_refcount_acquire fallible for non-owning refs kernel: drm/i915/perf: add sentinel to xehp_oa_b_counters kernel: Drivers: hv: vmbus: Don't dereference ACPI root object handle kernel: perf trace: Really free the evsel->priv area kernel: vdpa: Add features attr to vdpa_nl_policy for nlattr length check kernel: rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed kernel: ice: Don't tx before switchdev is fully configured kernel: bpf, cpumap: Handle skb as well when clean up ptr_ring kernel: bnxt: avoid overflow in bnxt_get_nvram_directory() kernel: KVM: nSVM: Check instead of asserting on nested TSC scaling support kernel: OPP: Fix potential null ptr dereference in dev_pm_opp_get_required_pstate() kernel: md: don't dereference mddev after export_rdev() kernel: Linux kernel: Denial of Service in ASoC wcd938x codec due to improper error handling kernel: Bluetooth: hci_event: call disconnect callback before deleting conn kernel: drm/i915: Fix memory leaks in i915 selftests kernel: scsi: qla2xxx: Fix memory leak in qla2x00_probe_one() kernel: ring-buffer: Handle race between rb_move_tail and rb_check_pages kernel: NFS: Fix a potential data corruption kernel: arm64: sme: Use STR P to clear FFR context field in streaming SVE mode kernel: md: raid1: fix potential OOB in raid1_remove_disk() kernel: arm64: csum: Fix OoB access in IP checksum code for negative lengths kernel: blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost kernel: Linux kernel: Denial of Service due to PCI resource leak kernel: Linux kernel (CIFS): Use-after-free vulnerability allows data integrity compromise and denial of service kernel: USB: usbtmc: Fix direction for 0-length ioctl control messages kernel: Linux kernel Bluetooth: Denial of Service due to use-after-free in connection handling kernel: drm: bridge: dw_hdmi: fix connector access for scdc kernel: md: fix warning for holder mismatch from export_rdev() kernel: iommufd: IOMMUFD_DESTROY should not increase the refcount kernel: drm/amd/display: populate subvp cmd info only for the top pipe kernel: blk-mq: release crypto keyslot before reporting I/O complete kernel: ext4: fix rbtree traversal bug in ext4_mb_use_preallocated kernel: amdgpu: validate offset_in_bo of drm_amdgpu_gem_va kernel: ip6_vti: fix slab-use-after-free in decode_session6 kernel: block/rq_qos: protect rq_qos apis with a new lock kernel: drm/i915: Fix NULL ptr deref by checking new_crtc_state kernel: ASoC: codecs: wcd-mbhc-v2: fix resource leaks on component remove kernel: net: openvswitch: reject negative ifindex kernel: drm/ttm: Don't leak a resource on swapout move error kernel: usb-storage: alauda: Fix uninit-value in alauda_check_media() kernel: md/raid5-cache: fix a deadlock in r5l_exit_log() kernel: bpf: bpf_sk_storage: Fix invalid wait context lockdep report kernel: dm: don't attempt to queue IO under RCU protection kernel: netlink: do not hard code device address lenth in fdb dumps kernel: SMB3: Add missing locks to protect deferred close file list kernel: wifi: cfg80211: ocb: don't leave if not joined kernel: Kernel: Denial of Service due to memory leak in PCI/DOE kernel: Linux kernel: Denial of Service due to memory leak in IP address deletion kernel: Linux kernel: Denial of Service due to memory leak in mlx5e driver kernel: Linux kernel: RDMA/core GID entry leak causes Denial of Service kernel: af_unix: Fix data-race around unix_tot_inflight kernel: virtio_vdpa: build affinity masks conditionally kernel: scsi: qla2xxx: Check valid rport returned by fc_bsg_to_rport() kernel: Linux kernel: Memory leak in ath12k Wi-Fi driver can lead to denial of service kernel: ext4: set goal start correctly in ext4_mb_normalize_request kernel: Linux kernel ALSA USB audio: Denial of Service due to memory leaks in MIDI 2.0 / UMP device handling kernel: opp: Fix use-after-free in lazy_opp_tables after probe deferral kernel: Linux kernel: Denial of Service vulnerability in RDMA/rxe component kernel: io_uring/net: don't overflow multishot recv kernel: vdpa: Add queue index attr to vdpa_nl_policy for nlattr length check kernel: kernel: Denial of Service via memory leak in LRU hash maps kernel: netfilter: nf_tables: fix underflow in chain reference counter kernel: Linux kernel: Denial of Service in Bluetooth HCI connection handling kernel: Linux kernel: Denial of Service in RDMA/bnxt_re driver due to race condition during QP destruction kernel: Linux kernel Wi-Fi driver: Denial of Service due to missing transmit status kernel: iommufd: Set end correctly when doing batch carry kernel: ext4: fix invalid free tracking in ext4_xattr_move_to_block() kernel: Kernel: Memory leak in IPMI SSIF module leads to Denial of Service kernel: ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow kernel: Linux kernel igb driver: Denial of Service due to improper SR-IOV cleanup kernel: Linux kernel: Denial of service or memory corruption due to a data race in ALSA PCM memory allocation kernel: smb: client: fix missed ses refcounting kernel: ixgbe: Fix panic during XDP_TX with > 64 CPUs kernel: Linux kernel: Denial of Service due to memory leak in drm_client_target_cloned function kernel: Linux kernel (soundwire): Memory corruption due to incorrect device enumeration completion kernel: scsi: qedi: Fix use after free bug in qedi_remove() kernel: Linux kernel: Denial of Service via memory leak in mlx5e_init_rep_rx kernel: Linux kernel Bluetooth: Denial of Service via race condition in hidp_session_thread kernel: maple_tree: fix potential out-of-bounds access in mas_wr_end_piv() kernel: Linux kernel: Information disclosure in VFIO Type1 module via uninitialized stack memory kernel: wifi: ath11k: Add missing hw_ops->get_ring_selector() for IPQ5018 kernel: Linux kernel: BPF verifier log truncation via crafted user input kernel: net/mlx5e: Move representor neigh cleanup to profile cleanup_tx kernel: Linux kernel: Denial of Service due to memory leak in target_cmd_counter kernel: Linux kernel: Denial of service in network core via incorrect frame size handling kernel: sfc: fix crash when reading stats while NIC is resetting kernel: firmware: arm_sdei: Fix sleep from invalid context BUG kernel: igc: Fix Kernel Panic during ndo_tx_timeout callback kernel: net/mlx5e: fix memory leak in mlx5e_ptp_open kernel: keys: Fix linking a duplicate key to a keyring's assoc_array kernel: bpf: Disable preemption in bpf_event_output kernel: scsi: qla2xxx: Array index may go out of bound kernel: scsi: target: iscsit: Free cmds before session free kernel: usb: typec: altmodes/displayport: fix pin_assignment_show kernel: Revert "Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work" kernel: RDMA/efa: Fix wrong resources deallocation order kernel: Bluetooth: L2CAP: Fix potential user-after-free kernel: virtio-vdpa: Fix cpumask memory leak in virtio_vdpa_find_vqs() kernel: clk: imx93: fix memory leak and missing unwind goto in imx93_clocks_probe kernel: wifi: fix registration of 6Ghz-only phy without the full channel range kernel: PCI/DOE: Fix destroy_work_on_stack() race kernel: block, bfq: Fix division by zero error on zero wsum kernel: net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX kernel: Kernel: Denial of Service via resource leak in drm/ttm kernel: cifs: Fix lost destroy smbd connection when MR allocate failed kernel: drm/amdkfd: Add missing gfx11 MQD manager callbacks kernel: drm/nouveau/kms/nv50-: init hpd_irq_lock for PIOR DP kernel: RDMA/srpt: Add a check for valid 'mad_agent' pointer kernel: bpf: Address KCSAN report on bpf_lru_list kernel: scsi: qedf: Fix NULL dereference in error handling kernel: RDMA/irdma: Fix data race on CQP request done kernel: KVM: SVM: Get source vCPUs from source VM for SEV-ES intrahost migration kernel: RDMA/irdma: Fix data race on CQP completion stats kernel: bpf: Disable preemption in bpf_perf_event_output kernel: samples/bpf: Fix buffer overflow in tcp_basertt kernel: refscale: Fix uninitalized use of wait_queue_head_t kernel: dm: fix a race condition in retrieve_deps kernel: misc: pci_endpoint_test: Free IRQs before removing the device kernel: CIFS Filesystem Decryption Improper Input Validation Remote Code Execution Vulnerability in function receive_encrypted_standard of client kernel: hugetlbfs: Null pointer dereference in hugetlbfs_fill_super function kernel: nf_tables: use-after-free vulnerability in the nft_setelem_catchall_deactivate() function kernel: nf_tables: use-after-free vulnerability in the nft_verdict_init() function kernel: untrusted VMM can trigger int80 syscall handling kernel: tls: use-after-free with partial reads and async decrypt kernel: tls: race between async notify and socket close kernel: tls: handle backlogging of crypto requests kernel: tls: race between tx work scheduling and socket close kernel: mlxsw: spectrum_acl_tcam: Fix stack corruption kernel: i2c: i801: Fix block process call transactions kernel: sched/membarrier: reduce the ability to hammer on sys_membarrier kernel: netfilter: nf_tables: reject QUEUE/DROP verdict parameters kernel: ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim() kernel: null pointer when load rlc firmware kernel: blk-mq: fix IO hang from sbitmap wakeup race kernel: i40e: Do not allow untrusted VF to remove administratively set MAC kernel: idpf: fix null-ptr-deref in idpf_features_check
CVSS v3.1 score: 5.5