RHSA-2023:6583 Red Hat Security Advisory: kernel security, bug fix, and enhancement update
kernel: seg6: fix the iif in the IPv6 socket control block Kernel: race when faulting a device private page in memory manager kernel: use-after-free in l1oip timer handlers kernel: Rate limit overflow messages in r8152 in intr_callback kernel: vmwgfx: use-after-free in vmw_cmd_res_check kernel: vmwgfx: use-after-free in vmw_execbuf_tie_context hw: Intel: Gather Data Sampling (GDS) side channel vulnerability kernel: Information leak in l2cap_parse_conf_req in net/bluetooth/l2cap_core.c kernel: perf: Fix perf_pending_task() UaF kernel: gpiolib: fix memory leak in gpiochip_setup_dev() kernel: memcg: fix possible use-after-free in memcg_write_event_control() kernel: mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths kernel: char: tpm: Protect tpm_pm_suspend with locks kernel: ixgbevf: Fix resource leak in ixgbevf_init_module() kernel: dax: make sure inodes are flushed before destroy cache kernel: watch_queue: Actually free the watch kernel: watch_queue: Fix NULL dereference in error cleanup kernel: rtc: pl031: fix rtc features null pointer dereference kernel: tpm: fix reference counting for struct tpm_chip kernel: NFSv4: Don't hold the layoutget locks across multiple RPC calls kernel: xprtrdma: treat all calls not a bcall when bc_serv is NULL kernel: net: ipv6: unexport __init-annotated seg6_hmac_init() kernel: af_unix: Fix a data-race in unix_dgram_peer_wake_me(). kernel: regulator: scmi: Fix refcount leak in scmi_regulator_probe kernel: mm/mempolicy: fix uninit-value in mpol_rebind_policy() kernel: i2c: piix4: Fix a memory leak in the EFCH MMIO support kernel: virtio_net: fix xdp_rxq_info bug after suspend/resume kernel: filemap: Handle sibling entries in filemap_get_read_batch() kernel: irqchip/gic-v3: Fix refcount leak in gic_populate_ppi_partitions kernel: irqchip/gic-v3: Fix error handling in gic_populate_ppi_partitions kernel: ata: libata-core: fix NULL pointer deref in ata_host_alloc_pinfo() kernel: dmaengine: imx-sdma: Fix a possible memory leak in sdma_transfer_init kernel: perf/x86/amd: fix potential integer overflow on shift of a int kernel: cpufreq: CPPC: Add u64 casts to avoid overflowing kernel: device property: fix of node refcount leak in fwnode_graph_get_next_endpoint() kernel: VMCI: Use threaded irqs instead of tasklets kernel: mm/hugetlb: fix PTE marker handling in hugetlb_change_protection() kernel: drm/amd/display: Fix optc2_configure warning on dcn314 kernel: KVM: x86/xen: Fix eventfd error handling in kvm_xen_eventfd_assign() kernel: rethook: fix a potential memleak in rethook_alloc() kernel: drbd: use after free in drbd_create_device() kernel: drm: Fix potential null-ptr-deref in drm_vblank_destroy_worker() kernel: bpf: Fix memory leaks in __check_func_call kernel: scsi: scsi_transport_sas: Fix error handling in sas_phy_add() kernel: net: wwan: iosm: fix memory leak in ipc_pcie_read_bios_cfg kernel: drm/amdkfd: Fix NULL pointer dereference in svm_migrate_to_ram() kernel: bpf: Fix wrong reg type conversion in release_reference() kernel: bpftool: Fix NULL pointer dereference when pin {PROG, MAP, LINK} without FILE kernel: bpf, verifier: Fix memory leak in array reallocation for stack state kernel: KVM: Reject attempts to consume or refresh inactive gfn_to_pfn_cache kernel: ACPI: APEI: Fix integer overflow in ghes_estatus_pool_init() kernel: cifs: fix small mempool leak in SMB2_negotiate() kernel: xfrm: policy: fix metadata dst->dev xmit null pointer dereference kernel: nfc: pn533: Fix use-after-free bugs caused by pn532_cmd_timeout kernel: net: genl: fix error path memory leak in policy dumping kernel: virtio-blk: Avoid use-after-free on suspend/resume kernel: net: atlantic: fix aq_vec index out of range error kernel: NFSv4/pnfs: Fix a use-after-free bug in open kernel: cifs: Fix memory leak on the deferred close kernel: firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails kernel: locking/csd_lock: Change csdlock_debug from early_param to __setup kernel: cifs: Fix memory leak when using fscache kernel: watchdog: sp5100_tco: Fix a memory leak of EFCH MMIO resource kernel: vfio: Split migration ops from main device ops kernel: RDMA/rxe: Fix error unwind in rxe_create_qp() kernel: RDMA/rxe: Fix BUG: KASAN: null-ptr-deref in rxe_qp_do_cleanup kernel: regulator: of: Fix refcount leak bug in of_get_regulation_constraints() kernel: selinux: Add boundary check in put_entry() kernel: selinux: fix memleak in security_read_state_kernel() kernel: Linux kernel: Denial of Service due to improper io_uring/af_unix file cleanup kernel: cpufreq: qcom: fix writes in read-only memory region kernel: usb: typec: tcpci: fix of node refcount leak in tcpci_register_port() kernel: usb: xhci-mtk: fix leakage of shared hcd when fail to set wakeup irq kernel: memory: of: Fix refcount leak bug in of_get_ddr_timings() kernel: regulator: core: fix use_count leakage when handling boot-on kernel: wifi: brcmfmac: Fix potential stack-out-of-bounds in brcmf_c_preinit_dcmds() kernel: drm/vkms: Fix memory leak in vkms_init() kernel: media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer() kernel: drm/radeon: Add the missed acpi_put_table() to fix memory leak kernel: power: supply: fix null pointer dereferencing in power_supply_get_battery_info kernel: wifi: rtlwifi: Fix global-out-of-bounds bug in _rtl8812ae_phy_set_txpower_limit() kernel: drm/i915/bios: fix a memory leak in generate_lfp_data_ptrs kernel: wifi: mac80211: fix memory leak in ieee80211_if_add() kernel: io_uring/msg_ring: Fix NULL pointer dereference in io_msg_send_fd() kernel: wifi: ath9k: verify the expected usb_endpoints are present kernel: drm/amdkfd: Fix double release compute pasid kernel: drm/bridge: megachips: Fix a null pointer dereference bug kernel: perf/x86/intel/uncore: Fix reference count leak in hswep_has_limit_sbox() kernel: Linux kernel: Denial of Service due to function prototype mismatch kernel: ACPI: processor: idle: Check acpi_fetch_acpi_dev() return value kernel: Linux kernel: Denial of Service due to use-after-free in BFQ scheduler kernel: cifs: fix oops during encryption kernel: floppy: Fix memory leak in do_floppy_init() kernel: Kernel: Denial of Service in CIFS due to xid leak kernel: Linux kernel: NULL pointer dereference in drm/amdkfd leads to Denial of Service kernel: net: sched: sfb: fix null pointer access issue when sfb_init() fails kernel: usb: dwc3: core: fix some leaks in probe kernel: wifi: wilc1000: add missing unregister_netdev() in wilc_netdev_ifc_init() kernel: drm/vkms: Fix null-ptr-deref in vkms_release() kernel: cifs: Fix memory leak when build ntlmssp negotiate blob failed kernel: tpm: tpm_crb: Add the missed acpi_put_table() to fix memory leak kernel: Linux kernel: Denial of Service and information disclosure via undefined bit shift in drm/ttm kernel: mm/mempolicy: fix memory leak in set_mempolicy_home_node system call kernel: drm/amdgpu: SDMA update use unlocked iterator kernel: iomap: iomap: fix memory corruption when recording errors during writeback kernel: drm: bridge: adv7511: unregister cec i2c device after cec adapter kernel: irqchip/wpcm450: Fix memory leak in wpcm450_aic_of_init() kernel: Linux kernel: Information disclosure and denial of service via use-after-free in ACPI subsystem kernel: remoteproc: imx_dsp_rproc: Add mutex protection for workqueue kernel: memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings() kernel: Linux kernel: Denial of Service in vmwgfx due to invalid DMA surface copies kernel: clk: tegra20: Fix refcount leak in tegra20_clock_init kernel: gpiolib: cdev: fix NULL-pointer dereferences kernel: clk: tegra: Fix refcount leak in tegra210_clock_init kernel: kernel: Denial of Service due to xid leak in cifs_flock() kernel: mt76: mt7915: Fix PCI device refcount leak in mt7915_pci_init_hif2() kernel: xhci: Remove device endpoints from bandwidth list when freeing the device kernel: IB/mad: Don't call to function that might sleep while in atomic context kernel: cpufreq: Init completion before kobject_init_and_add() kernel: RDMA/core: Make sure "ib_port" is valid when access sysfs node kernel: rtc: class: Fix potential memleak in devm_rtc_allocate_device() kernel: drm/amd: fix potential memory leak kernel: iommu/vt-d: Clean up si_domain in the init_dmars() error path kernel: block, bfq: fix possible uaf for 'bfqq->bic' kernel: drm/mipi-dsi: Detach devices when removing the host kernel: thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash kernel: iommu/amd: Fix pci device refcount leak in ppr_notifier() kernel: perf/smmuv3: Fix hotplug callback leak in arm_smmu_pmu_init() kernel: drm/amdgpu: Fix memory leak in hpd_rx_irq_create_workqueue() kernel: drm/radeon: Fix PCI device refcount leak in radeon_atrm_get_bios() kernel: drm/amdgpu: Fix size validation for non-exclusive domains (v4) kernel: drm/amdkfd: Fix memory leakage kernel: scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add() kernel: drm/amd/display: Fix potential null-deref in dm_resume kernel: bpf, sockmap: Fix repeated calls to sock_put() when msg has more_data kernel: dmaengine: qcom-adm: fix wrong sizeof config in slave_config kernel: RDMA/rxe: Fix mr->map double free kernel: usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info() kernel: blk-iolatency: Fix memory leak on add_disk() failures kernel: drm: Fix potential null-ptr-deref due to drmm_mode_config_init() kernel: regmap-irq: Use the new num_config_regs property in regmap_add_irq_chip_fwnode kernel: tpm: acpi: Call acpi_put_table() to fix memory leak kernel: Linux kernel: Memory leak in __class_register() kernel: regulator: core: Prevent integer underflow kernel: regulator: core: Use different devices for resource allocation and DT lookup kernel: drm/amdgpu/powerplay/psm: Fix memory leak in power state init kernel: drm/amdkfd: Fix memory leak in kfd_mem_dmamap_userptr() kernel: media: dvb-usb: fix memory leak in dvb_usb_adapter_init() kernel: wifi: ath11k: fix monitor mode bringup crash kernel: drm/gud: Fix UBSAN warning kernel: mm: hugetlb: fix UAF in hugetlb_handle_userfault kernel: Linux kernel: Local denial of service in marvell_cn10k perf driver kernel: usb: dwc3: qcom: Fix memory leak in dwc3_qcom_interconnect_init kernel: PCI: Fix pci_device_is_present() for VFs by checking PF kernel: io-wq: Fix memory leak in worker creation kernel: cifs: Fix xid leak in cifs_copy_file_range() kernel: EDAC/i10nm: fix refcount leak in pci_get_dev_wrapper() kernel: bpf: Fix reference state management for synchronous callbacks kernel: cpufreq: qcom: fix memory leak in error path kernel: drm/vmwgfx: Fix memory leak in vmw_mksstat_add_ioctl() kernel: RDMA/rxe: Fix "kernel NULL pointer dereference" error kernel: arm64: mte: Avoid setting PG_mte_tagged if no tags cleared or restored kernel: ipmi: fix use after free in _ipmi_destroy_user() kernel: selinux: enable use of both GFP_KERNEL and GFP_ATOMIC in convert_context() kernel: wifi: ath10k: Delay the unmapping of the buffer kernel: wifi: mt76: mt7921s: fix slab-out-of-bounds access in sdio host kernel: USB: gadget: Fix use-after-free during usb config switch kernel: io_uring/rw: defer fsnotify calls to task context kernel: Linux kernel: Denial of Service in ice driver via uninitialized transmit rings kernel: devlink: hold region lock when flushing snapshots kernel: Linux kernel: Denial of Service due to PCI device reference count leak kernel: dmaengine: qcom-adm: fix wrong calling convention for prep_slave_sg kernel: Linux kernel: Resource leak in regulator_register can cause system unavailability kernel: Linux kernel: Denial of Service in s390/lcs network driver due to incompatible function pointer type kernel: usb: idmouse: fix an uninit-value in idmouse_open kernel: wifi: mt76: do not run mt76u_status_worker if the device is not running kernel: Linux kernel: Denial of Service in ath9k Wi-Fi driver due to URB memory leak kernel: drm/panel/panel-sitronix-st7701: Remove panel on DSI attach failure kernel: nvme-pci: fix mempool alloc size kernel: Linux kernel: Resource exhaustion in amdgpu due to PCI device reference count leak kernel: rcu: Fix __this_cpu_read() lockdep warning in rcu_force_quiescent_state() kernel: Linux kernel: Denial of Service due to memory leak in netdevsim kernel: amdgpu/pm: prevent array underflow in vega20_odn_edit_dpm_table() kernel: wifi: fix potential NULL-ptr deref after clone kernel: Linux kernel xHCI DbC: Denial of Service via memory leak kernel: net: hsr: avoid possible NULL deref in skb_clone() kernel: udmabuf: Set ubuf->sg = NULL if the creation of sg table fails kernel: perf/arm_dmc620: Fix hotplug callback leak in dmc620_pmu_init() kernel: Linux kernel: Memory leak in RDMA restrack leads to Denial of Service kernel: clk: tegra: Fix refcount leak in tegra114_clock_init kernel: tpm: tpm_tis: Add the missed acpi_put_table() to fix memory leak kernel: usb: typec: wusb3801: fix fwnode refcount leak in wusb3801_probe() kernel: wifi: ath9k: hif_usb: Fix use-after-free in ath9k_hif_usb_reg_in_cb() kernel: Linux kernel: Memory leak in wilc1000 Wi-Fi driver causes Denial of Service kernel: drm/virtio: Check whether transferred 2D BO is shmem kernel: drm/amdgpu: Fix type of second parameter in odn_edit_dpm_table() callback kernel: drm/bridge: it6505: Initialize AUX channel in it6505_i2c_probe kernel: cifs: Fix xid leak in cifs_ses_add_channel() kernel: bpf: prevent decl_tag from being referenced in func_proto kernel: tcp: fix a signed-integer-overflow bug in tcp_add_backlog() kernel: Linux kernel: Denial of service in lontium-lt9611 GPU driver due to NULL pointer dereference kernel: wifi: ath9k: Fix use-after-free in ath9k_hif_usb_disconnect() kernel: media: uvcvideo: Fix memory leak in uvc_gpio_parse kernel: bpf: Prevent decl_tag from being referenced in func_proto arg kernel: Linux kernel: Denial of Service in RDMA/rxe due to null-pointer dereference kernel: x86/mm: Randomize per-cpu entry area kernel: HID: check empty report_list in hid_validate_values() kernel: sctp: fail if no bound addresses can be used for a given scope kernel: net/tls: tls_is_tx_ready() checked list_entry kernel: tap: tap_open(): correctly initialize socket uid kernel: Type confusion in pick_next_rt_entity() kernel: hid: Use After Free in asus_remove() kernel: hash collisions in the IPv6 connection lookup table kernel: missing mmap_lock in file_files_note that could possibly lead to a use after free in the coredump code kernel: ovl: fix use after free in struct ovl_aio_req Kernel: a USB-accessible slab-out-of-bounds read in brcmfmac Kernel: use-after-free in nfsd4_ssc_setup_dul in fs/nfsd/nfs4proc.c kernel: Possible use-after-free since the two fdget() during vhost_net_set_backend() kernel: use-after-free bug in remove function xgene_hwmon_remove kernel: Use after free bug in btsdio_remove due to race condition kernel: net: IPv6 RPL protocol reachable assertion leads to DoS kernel: A possible deadlock in dm_get_inactive_table in dm- ioctl.c leads to dos kernel: Use after free bug in r592_remove kernel: fbcon: shift-out-of-bounds in fbcon_set_font() kernel: gfs2: NULL pointer dereference in gfs2_evict_inode() kernel: out-of-bounds access in relay_file_read kernel: NULL pointer dereference due to missing kalloc() return value check in shtp_cl_get_dma_send_buf() kernel: net/sched: cls_u32 component reference counter leak if tcf_change_indev() fails Kernel: x86/mm: a per-cpu entry area leak was identified through the init_cea_offsets function when prefetchnta and prefetcht2 instructions being used for the per-cpu entry area mapping to the user space kernel: xfrm: NULL pointer dereference in xfrm_update_ae_params() kernel: xfrm: out-of-bounds read of XFRMA_MTIMER_THRESH nlattr kernel: KVM: SEV-ES / SEV-SNP VMGEXIT double fetch vulnerability kernel: tap: tap_open(): correctly initialize socket uid next fix of i_uid to current_fsuid kernel: net/sched: Use-after-free vulnerabilities in the net/sched classifiers: cls_fw, cls_u32 and cls_route kernel: net/sched: Use-after-free vulnerabilities in the net/sched classifiers: cls_fw, cls_u32 and cls_route kernel: net/sched: Use-after-free vulnerabilities in the net/sched classifiers: cls_fw, cls_u32 and cls_route kernel: exFAT: stack overflow in exfat_get_uniname_from_ext_entry kernel: mpls: double free on sysctl allocation failure kernel: KVM: nVMX: missing consistency checks for CR0 and CR4 kernel: net: qcom/emac: race condition leading to use-after-free in emac_remove() kernel: vmwgfx: race condition leading to information disclosure vulnerability kernel: vmwgfx: double free within the handling of vmw_buffer_object objects kernel: r592: race condition leading to use-after-free in r592_remove() kernel: eBPF: insufficient stack type checks in dynptr kernel: sched/psi: Fix use-after-free in ep_remove_wait_queue() kernel: bpf, sockmap: Don&#39;t let sock_map_{close,destroy,unhash} call itself kernel: bpf: Skip invalid kfunc call in backtrack_insn kernel: drm/i915: Avoid potential vm use-after-free kernel: HV: hv_balloon: fix memory leak with using debugfs_lookup() kernel: usb: typec: ucsi: Don't attempt to resume the ports before they exist kernel: net: openvswitch: fix flow memory leak in ovs_flow_cmd_new kernel: drm/i915: Fix request ref counting during error capture & debugfs dump kernel: bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener kernel: ALSA: hda/via: Avoid potential array out-of-bound in add_secret_dac_path() kernel: net: fix NULL pointer in skb_segment_list kernel: bpf: Skip task with pid=1 in send_signal_common() kernel: x86/i8259: Mark legacy PIC interrupts with IRQ_LEVEL kernel: acpi: Fix suspend with Xen PV kernel: ipv4: prevent potential spectre v1 gadget in ip_metrics_convert() kernel: drm/i915: Fix a memory leak with reused mmap_offset kernel: cifs: Fix oops due to uncleared server->smbd_conn in reconnect kernel: drm/amdkfd: Add sync after creating vram bo kernel: bnxt: Do not read past the end of test names kernel: thermal: core: call put_device() only after device_register() fails kernel: ptdma: pt_core_execute_cmd() should use spinlock kernel: dmaengine: tegra: Fix memory leak in terminate_all() kernel: HID: betop: check shape of output reports kernel: bpf: Fix pointer-leak due to insufficient speculative store bypass mitigation kernel: NFSD: fix use-after-free in nfsd4_ssc_setup_dul() kernel: RDMA/core: Fix ib block iterator counter overflow kernel: Revert "wifi: mac80211: fix memory leak in ieee80211_if_add()" kernel: powerpc/imc-pmu: Fix use of mutex in IRQs disabled section kernel: drm/amdgpu: Fix call trace warning and hang when removing amdgpu device kernel: scsi: lpfc: Check kzalloc() in lpfc_sli4_cgn_params_read() kernel: HID: intel-ish-hid: ipc: Fix potential use-after-free in work function kernel: drm/amd/display: Do not set DRR on pipe Commit kernel: dm stats: check for and propagate alloc_percpu failure kernel: thunderbolt: Fix memory leak in margining kernel: dm crypt: add cond_resched() to dmcrypt_write() kernel: erspan: do not use skb_mac_header() in ndo_start_xmit() kernel: scsi: qla2xxx: Synchronize the IOCB count to be in order kernel: net/mlx5: E-Switch, Fix an Oops in error handling code kernel: igb: revert rtnl_lock() that causes deadlock kernel: perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output kernel: ACPI: PPTT: Fix to avoid sleep in the atomic context when PPTT is absent kernel: wifi: mt76: do not run mt76_unregister_device() on unregistered hw kernel: mptcp: use the workqueue to destroy unaccepted sockets kernel: perf/x86/amd/core: Always clear status for idx kernel: drm/amd/display: fix shift-out-of-bounds in CalculateVMAndRowBytes kernel: scsi: scsi_dh_alua: Fix memleak for 'qdata' in alua_activate() kernel: net/mlx5: Fix steering rules cleanup kernel: drm/shmem-helper: Remove another errant put in error path kernel: drm/edid: fix info leak when failing to get panel id kernel: wifi: mt76: connac: do not check WED status for non-mmio devices kernel: drm/i915/active: Fix misuse of non-idle barriers as fence trackers kernel: mptcp: fix UaF in listener shutdown kernel: ext4: fix task hung in ext4_xattr_delete_inode kernel: drm/amdkfd: Fix an illegal memory access kernel: drm/ttm: Fix a NULL pointer dereference kernel: interconnect: fix mem leak when freeing nodes kernel: ext4: fix WARNING in ext4_update_inline_data kernel: ice: xsk: disable txq irq before flushing hw kernel: bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails kernel: net/mlx5e: Fix cleanup null-ptr deref on encap lock kernel: veth: Fix use after free in XDP_REDIRECT kernel: net/iucv: Fix size of interrupt data kernel: net/smc: fix NULL sndbuf_desc in smc_cdc_tx_handler() kernel: drm/i915/sseu: fix max_subslices array-index-out-of-bounds access kernel: wifi: nl80211: fix NULL-ptr deref in offchan check kernel: i40e: Fix kernel crash during reboot when adapter is in recovery mode kernel: nvmet: avoid potential UAF in nvmet_req_complete() kernel: scsi: mpi3mr: Fix config page DMA memory leak kernel: tcp: tcp_make_synack() can be called from process context kernel: scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add() kernel: scsi: mpi3mr: Fix sas_hba.phy memory leak in mpi3mr_remove() kernel: ext4: Fix deadlock during directory rename kernel: scsi: mpi3mr: Fix mpi3mr_hba_port memory leak in mpi3mr_remove() kernel: usb: ucsi_acpi: Increase the command completion timeout kernel: Linux kernel: Denial of Service in vfio/type1 due to locked_vm underflow kernel: wifi: ath9k: don't allow to overwrite ENDPOINT0 attributes kernel: net: openvswitch: fix race on port output kernel: USB: uhci: fix memory leak with using debugfs_lookup() kernel: raw: Fix NULL deref in raw_get_next() kernel: KVM: s390/diag: fix racy access of physical cpu number in diag 9c handler kernel: Linux kernel: Memory leak in driver core location can lead to denial of service kernel: wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies() kernel: rxrpc: Make it so that a waiting process can be aborted kernel: ext4: Fix function prototype mismatch for ext4_feat_ktype kernel: wifi: mac80211: fix invalid drv_sta_pre_rcu_remove calls for non-uploaded sta kernel: mt76: mt7921: fix kernel panic by accessing unallocated eeprom.data kernel: Linux kernel: Denial of Service via deadlock in net/smc kernel: nfsd: call op_release, even when op_func returns an error kernel: scsi: storvsc: Fix handling of virtual Fibre Channel timeouts kernel: cacheinfo: Fix shared_cpu_map to handle shared caches at different levels kernel: ASoC: fsl_mqs: move of_node_put() to the correct location kernel: blk-mq: fix NULL dereference on q->elevator in blk_mq_elv_switch_none kernel: sctp: check send stream number after wait_for_sndbuf kernel: md/raid10: fix leak of 'r10bio->remaining' for recovery kernel: Linux kernel KVM: Denial of Service due to incorrect kvm_arm_init failure handling in finalize_pkvm kernel: scsi: mpi3mr: Fix issues in mpi3mr_get_all_tgt_info() kernel: netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one kernel: USB: chipidea: fix memory leak with using debugfs_lookup() kernel: USB: fix memory leak with using debugfs_lookup() kernel: PCI: Fix use-after-free in pci_bus_release_domain_nr() kernel: block: be a bit more careful in checking for NULL bdev while polling kernel: sctp: fix a potential overflow in sctp_ifwdtsn_skip kernel: scsi: mpi3mr: Use number of bits to manage bitmap sizes kernel: Linux kernel: Denial of Service due to GIC state corruption on NVIDIA T241 platforms kernel: Linux kernel: Denial of Service in UFS subsystem kernel: drivers: base: dd: fix memory leak with using debugfs_lookup() kernel: HID: intel-ish-hid: Fix kernel panic during warm reset kernel: mlx5: fix possible ptp queue fifo use-after-free kernel: Linux kernel: ALSA HDA denial of service via array overflow kernel: trace/blktrace: fix memory leak with using debugfs_lookup() kernel: drivers: base: component: fix memory leak with using debugfs_lookup() kernel: USB: ULPI: fix memory leak with using debugfs_lookup() kernel: wifi: iwlwifi: fw: fix memory leak in debugfs kernel: wifi: mt76: dma: fix memory leak running mt76_dma_tx_cleanup kernel: Linux kernel: Denial of Service in scsi_ses due to enclosure with no components kernel: net: add vlan_get_protocol_and_depth() helper kernel: media: uvcvideo: Handle cameras with invalid descriptors kernel: mfd: arizona: Use pm_runtime_resume_and_get() to prevent refcnt leak kernel: drm/radeon: free iio for atombios when driver shutdown kernel: Linux kernel: Denial of Service in io_uring due to hung task detection kernel: scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param() kernel: wifi: mt76: mt7915: fix memory leak in mt7915_mcu_exit kernel: ipv6: Add lwtunnel encap size of all siblings in nexthop calculation kernel: Linux kernel CXL driver: Use-after-free vulnerability leading to system instability or privilege escalation kernel: tcp/udp: Fix memleaks of sk and zerocopy skbs with TX timestamp kernel: netfilter: nf_tables: do not ignore genmask when looking up chain by id kernel: virtio_net: Fix error unwinding of XDP initialization kernel: Linux kernel: Denial of Service due to file descriptor leak in io_uring with ocfs2 kernel: scsi: mpt3sas: Fix a memory leak kernel: Linux kernel: Denial of Service via malicious MTU negotiation in TIPC kernel: scsi: ses: Fix slab-out-of-bounds in ses_intf_remove() kernel: Linux kernel: Integer overflow in iwlwifi debugfs function kernel: wifi: ath11k: fix deinitialization of firmware resources kernel: netfilter: ipset: Rework long task execution when adding/deleting entries kernel: HID: hyperv: avoid struct memcpy overrun warning kernel: Linux kernel iavf driver: Denial of Service via use-after-free vulnerability kernel: net: wwan: iosm: fix NULL pointer dereference when removing device kernel: cpufreq: amd-pstate-ut: Fix kernel panic when loading the driver kernel: netfilter: nft_set_rbtree: fix null deref on element insertion kernel: wifi: iwlwifi: mvm: fix potential array out of bounds access kernel: null_blk: Always check queue mode setting from configfs kernel: net: qrtr: Fix an uninit variable access bug in qrtr_tx_resume() kernel: wifi: brcmfmac: ensure CLM version is null-terminated to prevent stack-out-of-bounds kernel: net/mlx5e: Fix deadlock in tc route query code kernel: driver core: fix resource leak in device_add() kernel: bus: mhi: host: Range check CHDBOFF and ERDBOFF kernel: wifi: ath11k: fix memory leak in WMI firmware stats kernel: drm: amd: display: Fix memory leakage kernel: ALSA: ymfpci: Fix BUG_ON in probe function kernel: scsi: Revert "scsi: core: Do not increase scsi_device's iorequest_cnt if dispatch failed" kernel: md: fix soft lockup in status_resync kernel: mm/swap: fix swap_info_struct race between swapoff and get_swap_pages() kernel: net/sched: sch_fq: fix integer overflow of "credit" kernel: drm/i915/gvt: fix vgpu debugfs clean in remove kernel: ext4: fix possible double unlock when moving a directory kernel: bpf, arm64: Fixed a BTI error on returning to patched function kernel: netfilter: conntrack: fix wrong ct->timeout value kernel: wifi: ath6kl: reduce WARN to dev_dbg() in callback kernel: ASoC: lpass: Fix for KASAN use_after_free out of bounds kernel: wifi: ath9k: hif_usb: fix memory leak of remain_skbs kernel: nvme-tcp: don't access released socket during error recovery kernel: drm/i915/perf: add sentinel to xehp_oa_b_counters kernel: drivers/perf: hisi: Don't migrate perf to the CPU going to teardown kernel: tcp: fix skb_copy_ubufs() vs BIG TCP kernel: nvme-core: fix dev_pm_qos memleak kernel: srcu: Delegate work to the boot cpu if using SRCU_SIZE_SMALL kernel: scsi: ses: Fix possible desc_ptr out-of-bounds accesses kernel: drm/i915: Fix memory leaks in i915 selftests kernel: drm/i915: Fix system suspend without fbdev being initialized kernel: wifi: mt7601u: fix an integer underflow kernel: ipv6: Fix out-of-bounds access in ipv6_find_tlv() kernel: mm/vmemmap/devdax: fix kernel crash when probing devdax devices kernel: wifi: mt76: mt7921: fix error code of return in mt7921_acpi_read kernel: Linux kernel: Network subsystem memory leak kernel: wifi: ath9k: Fix potential stack-out-of-bounds write in ath9k_wmi_rsp_callback() kernel: s390/vfio-ap: fix memory leak in vfio_ap device driver kernel: drm/amd/display: fix mapping to non-allocated address kernel: dmaengine: ptdma: check for null desc before calling pt_cmd_callback kernel: KVM: VMX: Fix crash due to uninitialized current_vmcs kernel: Linux kernel: Denial of Service due to deadlock in Universal Flash Storage driver kernel: wifi: ath12k: Handle lock during peer_id find kernel: Linux kernel: Denial of Service via memory leak in ath12k Wi-Fi driver kernel: drm/amd/display: fix FCLK pstate change underflow kernel: dm flakey: fix a crash with invalid table line kernel: iommu/amd: Improve page fault error reporting kernel: nvme-core: fix memory leak in dhchap_ctrl_secret kernel: iommufd: IOMMUFD_DESTROY should not increase the refcount kernel: scsi: ses: Fix slab-out-of-bounds in ses_enclosure_data_process() kernel: PCI: Fix dropping valid root bus resources with .end = zero kernel: drm/amdkfd: fix potential kgd_mem UAFs kernel: md/raid10: fix null-ptr-deref in raid10_sync_request kernel: nvme-core: fix memory leak in dhchap_secret_store kernel: ASoC: soc-compress: Reposition and add pcm_mutex kernel: ceph: fix potential use-after-free bug when trimming caps kernel: Linux kernel UDPLITE: Denial of Service via null pointer dereference kernel: scsi: mpi3mr: Fix an issue found by KASAN kernel: net/mlx5: Devcom, fix error flow in mlx5_devcom_register_device kernel: Linux kernel KVM: Memory leak via coalesced MMIO unregistration failure kernel: wifi: iwlwifi: fix iwl_mvm_max_amsdu_size() for MLO kernel: Kernel (iommufd): Information Disclosure via uninitialized memory padding kernel: Linux kernel: Denial of Service due to memory leak in rtl8xxxu Wi-Fi driver kernel: Linux kernel: Denial of Service in ice driver via ethtool reload kernel: Linux kernel: Denial of Service due to incorrect FDIR filter fallback logic kernel: Linux kernel: Memory leak in io_uring can lead to denial of service kernel: iommufd: Do not add the same hwpt to the ioas->hwpt_list twice kernel: Linux kernel: Denial of Service in iwlwifi due to NULL pointer dereference kernel: Linux kernel: Memory leak in RDMA/irdma subsystem leads to Denial of Service kernel: iommu/amd: Add a length limitation for the ivrs_acpihid command-line parameter kernel: wifi: rtw88: use work to update rate to avoid RCU warning kernel: tpm: Add !tpm_amd_is_rng_defective() to the hwrng_unregister() call site kernel: Linux kernel: Denial of Service in mlx5e due to incorrect encap attribute handling kernel: Linux kernel: Denial of Service due to NULL pointer dereference in mptcp fastopen kernel: blk-cgroup: hold queue_lock when removing blkg->q_node kernel: KVM: s390: pv: fix index value of replaced ASCE kernel: Linux kernel: Memory leak in stm32-pwr regulator driver can lead to denial of service kernel: Kernel: NULL pointer dereference in Intel GVT-g debugfs during device removal kernel: scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow kernel: scsi: qla2xxx: Fix DMA-API call trace on NVMe LS requests kernel: Kernel: Denial of Service due to memory leak in RAID10 functionality kernel: octeontx2-af: Add validation for lmac type kernel: Linux kernel rt2x00 Wi-Fi driver: Denial of Service via memory leak during device removal kernel: drm/amdkfd: Fix kernel warning during topology setup kernel: vfio: Fix NULL pointer dereference caused by uninitialized group->iommufd kernel: mptcp: stricter state check in mptcp_worker kernel: Linux kernel: Memory leak in mt76 Wi-Fi driver leads to Denial of Service kernel: rxrpc: Fix timeout of a call that hasn't yet been granted a channel kernel: Linux kernel: netfilter use-after-free vulnerability leading to denial of service kernel: drm/i915: fix race condition UAF in i915_perf_add_config_ioctl kernel: net/sched: flower: fix filter idr initialization kernel: net/mlx5e: TC, Fix using eswitch mapping in nic mode kernel: ASoC: SOF: avoid a NULL dereference with unsupported widgets kernel: scsi: mpi3mr: Fix missing mrioc->evtack_cmds initialization kernel: Linux kernel: Denial of Service in mlx5 driver due to memory leaks kernel: iommufd: Check for uptr overflow kernel: ASoC: codecs: tx-macro: Fix for KASAN: slab-out-of-bounds kernel: soundwire: bus: Fix unbalanced pm_runtime_put() causing usage count underflow kernel: net/mlx5e: Don't clone flow post action attributes second time kernel: ipv6: Fix an uninit variable access bug in __ip6_make_skb() kernel: SUNRPC: double free xprt_ctxt while still in use kernel: media: usb: siano: Fix use after free bugs caused by do_submit_urb kernel: Linux kernel: Denial of Service due to xfrm resource leak kernel: Linux kernel: Memory leak in ath11k Wi-Fi driver leads to Denial of Service kernel: nfsd: move init of percpu reply_cache_stats counters back to nfsd_init_net kernel: wifi: iwlwifi: dvm: Fix memcpy: detected field-spanning write backtrace kernel: md/raid10: fix memleak of md thread kernel: wifi: ath9k: avoid referencing uninit memory in ath9k_wmi_ctrl_rx kernel: net: tls: avoid hanging tasks on the tx_lock kernel: ALSA: ymfpci: Create card with device-managed snd_devm_card_new() kernel: tpm: tpm_vtpm_proxy: fix a race condition in /dev/vtpmx creation kernel: dm flakey: don't corrupt the zero page kernel: platform/x86/amd: pmc: Fix memory leak in amd_pmc_stb_debugfs_open_v2() kernel: driver core: fix potential null-ptr-deref in device_add() kernel: crypto: qat - fix out-of-bounds read kernel: blkio memory leakage due to blkcg and some blkgs are not freed after they are made offline. kernel: potential deadlock on &net->sctp.addr_wq_lock leading to DOS kernel: null pointer when load rlc firmware kernel: drm/dp_mst: Fix resetting msg rx state after topology removal
CVSS v3.1 score: 4.6