huzaifas-sidhpurwala/security-commit huggingface dataset:
CVE-2025-69223: aiohttp: AIOHTTP's HTTP Parser auto_decompress feature is vulnerable to zip bomb
Component: aiohttp
Severity: Important
CWE: CWE-770 (Allocation of Resources Without Limits or Throttling)
CVSS v3: 7.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Public date: 2026-01-05T22:00:17.715000+00:00

A decompression based denial of service flaw has been discovered in the AIOHTTP python library. Library versions 3.13.2 and below allow a zip bomb to be used to execute a DoS against the AIOHTTP server. An attacker may be able to send a compressed request that when decompressed by AIOHTTP could exhaust the host's memory.


Affected upstream versions: < 3.13.3
Fixed upstream versions: v3.13.3
Upstream repository: https://github.com/aio-libs/aiohttp
Upstream fix commit: 2b920c39002cee0ec5b402581779bbaaf7c9138a
CVE-2025-69227: aiohttp: aiohttp: Denial of Service via specially crafted POST request
Component: aiohttp
Severity: Moderate
CWE: CWE-835 (Loop with Unreachable Exit Condition ('Infinite Loop'))
CVSS v3: 7.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Public date: 2026-01-05T23:19:31.396000+00:00

A flaw was found in aiohttp, an asynchronous HTTP client/server framework for Python. A remote attacker could exploit this vulnerability by sending a specially crafted POST request to an application using the Request.post() method, provided that Python optimizations are enabled. This could lead to an infinite loop, resulting in a Denial of Service (DoS) attack, making the affected application unavailable.

Statement: This vulnerability is rated Moderate for Red Hat products as it can lead to a Denial of Service (DoS) in applications utilizing the `aiohttp` library. Exploitation requires Python optimizations to be explicitly enabled (e.g., via `-O` or `PYTHONOPTIMIZE=1`) and the application to process POST requests using the `Request.post()` method. Red Hat products are affected if they meet these specific configuration and usage criteria.

Affected upstream versions: < 3.13.3
Fixed upstream versions: v3.13.3
Upstream repository: https://github.com/aio-libs/aiohttp
Upstream fix commit: bc1319ec3cbff9438a758951a30907b072561259
CVE-2025-69228: aiohttp: aiohttp: Denial of Service via memory exhaustion from crafted POST request
Component: aiohttp
Severity: Moderate
CWE: CWE-770 (Allocation of Resources Without Limits or Throttling)
CVSS v3: 6.8 (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H)
Public date: 2026-01-05T23:30:33.440000+00:00

A flaw was found in aiohttp. A remote attacker can craft a malicious request that, when processed by an aiohttp server using the `Request.post()` method, causes the server's memory to fill uncontrollably. This can lead to a Denial of Service (DoS) by freezing the server, making it unavailable to legitimate users.

Statement: This vulnerability is rated Moderate for Red Hat products. A flaw in aiohttp allows a remote attacker to cause a Denial of Service (DoS) by sending a specially crafted POST request to an aiohttp server that utilizes the `Request.post()` method. This can lead to uncontrolled memory consumption, freezing the server and making the server unavailable.

Affected upstream versions: < 3.13.3
Fixed upstream versions: v3.13.3
Upstream repository: https://github.com/aio-libs/aiohttp
Upstream fix commit: b7dbd35375aedbcd712cbae8ad513d56d11cce60
CVE-2025-69277: libsodium: pynacl: libsodium: Improper validation of elliptic curve points could lead to data integrity or information disclosure.
Component: libsodium
Severity: Moderate
CWE: CWE-184 (Incomplete List of Disallowed Inputs)
CVSS v3: 4.5 (CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N)
Public date: 2025-12-31T05:50:07.422000+00:00

A flaw was found in libsodium and pynacl. When processing untrusted data in specific cryptographic operations, the library's crypto_core_ed25519_is_valid_point function incorrectly validates elliptic curve points. This improper validation could allow an attacker to bypass security checks, potentially leading to a compromise of data integrity or the disclosure of sensitive information in certain custom cryptographic implementations.

Statement: This vulnerability is rated Moderate for Red Hat products as it primarily affects atypical use cases involving custom cryptographic implementations or untrusted data processing with `crypto_core_ed25519_is_valid_point`. Standard libsodium deployments are not expected to be impacted by this flaw.

Affected upstream versions: <= 1.0.17-RELEASE
Upstream repository: https://github.com/jedisct1/libsodium
Upstream fix commit: ad3004ec8731730e93fcfbbc824e67eadc1c1bae
CVE-2025-69418: openssl: OpenSSL: Information disclosure and data tampering via specific low-level OCB encryption/decryption calls
Component: openssl
Severity: Low
CWE: CWE-325 (Missing Cryptographic Step)
CVSS v3: 4 (CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N)
Public date: 2026-01-27T00:00:00+00:00

A flaw was found in OpenSSL. When applications directly call the low-level CRYPTO_ocb128_encrypt() or CRYPTO_ocb128_decrypt() functions with non-block-aligned lengths in a single call on hardware-accelerated builds, the trailing 1-15 bytes of a message may be exposed in cleartext. These exposed bytes are not covered by the authentication tag, allowing an attacker to read or tamper with them without detection.

Statement: This vulnerability is rated Low for Red Hat products. In the Red Hat context, impact is limited because typical OpenSSL consumers using higher-level EVP APIs are not affected. The flaw only manifests when applications directly call low-level CRYPTO_ocb128_encrypt() or CRYPTO_ocb128_decrypt() functions with non-block-aligned lengths in hardware-accelerated builds. Additionally, TLS does not use OCB ciphersuites, and FIPS modules are not affected.

Affected upstream versions: 3.6.0 < 3.6.1, 3.5.0 < 3.5.5, 3.4.0 < 3.4.4, 3.3.0 < 3.3.6, 3.0.0 < 3.0.19, 1.1.1 < 1.1.1ze
Fixed upstream versions: 1.1.1ze, 3.0.19, 3.3.6, 3.4.4, 3.5.5, 3.6.1
Upstream repository: https://github.com/openssl/openssl
Upstream fix commit: ed40856d7d4ba6cb42779b6770666a65f19cb977
CVE-2025-69419: openssl: OpenSSL: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing
Component: openssl
Severity: Moderate
CWE: CWE-131 (Incorrect Calculation of Buffer Size)
CVSS v3: 7.4 (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N)
Public date: 2026-01-27T00:00:00+00:00

A flaw was found in OpenSSL. When processing a specially crafted PKCS#12 (Personal Information Exchange Syntax Standard) file, a remote attacker can exploit an out-of-bounds write vulnerability. This issue, occurring within the OPENSSL_uni2utf8() function, leads to memory corruption by writing data beyond its allocated buffer. Successful exploitation could result in a denial of service or potentially allow for arbitrary code execution.

Statement: This vulnerability is rated Moderate for Red Hat. An out-of-bounds write in OpenSSL's PKCS12_get_friendlyname() function can lead to denial of service or arbitrary code execution. Exploitation requires an application to parse a specially crafted malicious PKCS#12 file. Red Hat FIPS modules are not affected as the PKCS#12 implementation is outside the FIPS module boundary.

Affected upstream versions: 3.6.0 < 3.6.1, 3.5.0 < 3.5.5, 3.4.0 < 3.4.4, 3.3.0 < 3.3.6, 3.0.0 < 3.0.19, 1.1.1 < 1.1.1ze
Fixed upstream versions: 1.1.1ze, 3.0.19, 3.3.6, 3.4.4, 3.5.5, 3.6.1
Upstream repository: https://github.com/openssl/openssl
Upstream fix commit: 7e9cac9832e4705b91987c2474ed06a37a93cecb
CVE-2025-69420: openssl: OpenSSL: Denial of Service via malformed TimeStamp Response
Component: openssl
Severity: Low
CWE: CWE-843 (Access of Resource Using Incompatible Type ('Type Confusion'))
CVSS v3: 5.9 (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H)
Public date: 2026-01-27T00:00:00+00:00

A flaw was found in OpenSSL. A type confusion vulnerability exists in the TimeStamp Response verification code, where an ASN1_TYPE union member is accessed without proper type validation. A remote attacker can exploit this by providing a malformed TimeStamp Response to an application that verifies timestamp responses. This can lead to an invalid or NULL pointer dereference, resulting in a Denial of Service (DoS) due to an application crash.

Statement: This vulnerability is rated Low for Red Hat products. A type confusion flaw in the TimeStamp Response verification code can lead to a Denial of Service when processing a specially crafted TimeStamp Response. Exploitation requires an application to call `TS_RESP_verify_response()` with a malformed response, and the TimeStamp protocol (RFC 3161) is not widely used. Red Hat FIPS modules are not affected as the TimeStamp Response implementation is outside the FIPS module boundary.

Affected upstream versions: 3.6.0 < 3.6.1, 3.5.0 < 3.5.5, 3.4.0 < 3.4.4, 3.3.0 < 3.3.6, 3.0.0 < 3.0.19, 1.1.1 < 1.1.1ze
Fixed upstream versions: 1.1.1ze, 3.0.19, 3.3.6, 3.4.4, 3.5.5, 3.6.1
Upstream repository: https://github.com/openssl/openssl
Upstream fix commit: a99349ebfc519999edc50620abe24d599b9eb085
CVE-2025-69421: openssl: OpenSSL: Denial of Service via malformed PKCS#12 file processing
Component: openssl
Severity: Low
CWE: CWE-476 (NULL Pointer Dereference)
CVSS v3: 6.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Public date: 2026-01-27T00:00:00+00:00

A flaw was found in OpenSSL. This vulnerability allows a remote attacker to trigger a Denial of Service (DoS) by providing a specially crafted, malformed PKCS#12 file to an application that processes it. The flaw occurs due to a NULL pointer dereference in the PKCS12_item_decrypt_d2i_ex() function when handling the malformed file, leading to an application crash.

Statement: This vulnerability is rated Low for Red Hat because it requires an application to process a specially crafted, malformed PKCS#12 file, leading to a Denial of Service. The vulnerability is limited to a crash and cannot be escalated to achieve code execution or memory disclosure. Red Hat FIPS modules are not affected as the PKCS#12 implementation is outside the OpenSSL FIPS module boundary.

Affected upstream versions: 3.6.0 < 3.6.1, 3.5.0 < 3.5.5, 3.4.0 < 3.4.4, 3.3.0 < 3.3.6, 3.0.0 < 3.0.19, 1.1.1 < 1.1.1ze, 1.0.2 < 1.0.2zn
Fixed upstream versions: 1.0.2zn, 1.1.1ze, 3.0.19, 3.3.6, 3.4.4, 3.5.5, 3.6.1
Upstream repository: https://github.com/openssl/openssl
Upstream fix commit: a2dbc539f0f9cc63832709fa5aa33ad9495eb19c
CVE-2025-69644: binutils: Binutils: Denial of Service via crafted binary with malformed DWARF debug information
Component: binutils
Severity: Low
CWE: CWE-606 (Unchecked Input for Loop Condition)
CVSS v3: 2.8 (CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L)
Public date: 2026-03-06T00:00:00+00:00

A flaw was found in binutils. A local attacker can exploit a logic flaw in the handling of DWARF (Debugging With Attributed Record Formats) location list headers within the objdump utility. By supplying a crafted binary with malformed debug information, the attacker can cause objdump to enter an unbounded loop, leading to excessive resource consumption and a Denial of Service (DoS).


Affected upstream versions: n/a
Upstream repository: https://sourceware.org/git/binutils-gdb.git
Upstream fix commit: 455446bbdc8675f34808187de2bbad4682016ff7
CVE-2025-69645: binutils: Binutils objdump: Denial of Service via crafted DWARF debug information
Component: binutils
Severity: Low
CWE: CWE-1285 (Improper Validation of Specified Index, Position, or Offset in Input)
CVSS v3: 2.8 (CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L)
Public date: 2026-03-06T00:00:00+00:00

A flaw was found in binutils, specifically in the `objdump` utility. A local attacker can exploit this vulnerability by providing a specially crafted binary file containing malformed DWARF (Debugging With Attributed Record Formats) debug information. This can lead to a logic error during the processing of DWARF compilation units, causing the `objdump` utility to crash and resulting in a denial of service.


Affected upstream versions: n/a
Upstream repository: https://sourceware.org/git/binutils-gdb.git
Upstream fix commit: cdb728d4da6184631989b192f1022c219dea7677
CVE-2025-69646: binutils: Binutils: Denial of Service via malformed DWARF debug_rnglists data
Component: binutils
Severity: Low
CWE: CWE-606 (Unchecked Input for Loop Condition)
CVSS v3: 2.8 (CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L)
Public date: 2026-03-06T00:00:00+00:00

A flaw was found in binutils. A local attacker can exploit this vulnerability by supplying a malicious input file containing malformed DWARF debug_rnglists data. This can cause the objdump tool to enter an unbounded logging loop, leading to excessive CPU and I/O usage and preventing analysis completion. This issue results in a Denial of Service (DoS).


Affected upstream versions: n/a
Upstream repository: https://sourceware.org/git/binutils-gdb.git
Upstream fix commit: 598704a00cbac5e85c2bedd363357b5bf6fcee33
CVE-2025-69647: binutils: infinite loop in readelf via crafted binary with malformed DWARF loclists data
Component: binutils
Severity: Low
CWE: CWE-835 (Loop with Unreachable Exit Condition ('Infinite Loop'))
CVSS v3: 3.3 (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L)
Public date: 2026-03-09T00:00:00+00:00

A flaw was found in binutils. Processing a specially crafted ELF binary file containing malformed DWARF loclists data with the readelf program can trigger an infinite loop and result in a denial of service.

Statement: This issue is classified with a low severity primarily because binutils is not typically exposed to untrusted inputs in most environments, limiting the possibility of exploitation. Additionally, this infinite loop is only triggered during the parsing of a specially crafted file, requiring an attacker to convince a user to process this file with readelf. Furthermore, binutils does not handle privileged operations, meaning that exploitation is unlikely to lead to system compromise or escalation of privileges. Also, the impact is limited to the application itself, without affecting the broader system or network security.

Affected upstream versions: n/a
Upstream repository: https://sourceware.org/git/binutils-gdb.git
Upstream fix commit: 455446bbdc8675f34808187de2bbad4682016ff7
CVE-2025-69648: binutils: infinite loop in readelf via crafted binary with malformed DWARF .debug_rnglists data
Component: binutils
Severity: Low
CWE: CWE-835 (Loop with Unreachable Exit Condition ('Infinite Loop'))
CVSS v3: 3.3 (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L)
Public date: 2026-03-09T00:00:00+00:00

A flaw was found in binutils. Processing a specially crafted ELF binary file containing malformed DWARF .debug_rnglists data with the readelf program can trigger an infinite loop and result in a denial of service.

Statement: This issue is classified with a low severity primarily because binutils is not typically exposed to untrusted inputs in most environments, limiting the possibility of exploitation. Additionally, this infinite loop is only triggered during the parsing of a specially crafted file, requiring an attacker to convince a user to process this file with readelf. Furthermore, binutils does not handle privileged operations, meaning that exploitation is unlikely to lead to system compromise or escalation of privileges. Also, the impact is limited to the application itself, without affecting the broader system or network security.

Affected upstream versions: n/a
Upstream repository: https://sourceware.org/git/binutils-gdb.git
Upstream fix commit: 598704a00cbac5e85c2bedd363357b5bf6fcee33
CVE-2025-69649: binutils: NULL pointer dereference in readelf via crafted ELF binary with malformed header fields
Component: binutils
Severity: Low
CWE: CWE-476 (NULL Pointer Dereference)
CVSS v3: 3.3 (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L)
Public date: 2026-03-06T00:00:00+00:00

A flaw was found in binutils. Processing a specially crafted ELF binary file containing malformed header fields with the readelf program can trigger a NULL pointer dereference, causing a crash and resulting in a denial of service.

Statement: This issue is classified with a low severity primarily because binutils is not typically exposed to untrusted inputs in most environments, limiting the possibility of exploitation. Additionally, this NULL pointer dereference is only triggered during the parsing of a specially crafted file, requiring an attacker to convince a user to process this file with readelf. Furthermore, binutils does not handle privileged operations, meaning that exploitation is unlikely to lead to system compromise or escalation of privileges. Also, the impact is limited to the application itself, without affecting the broader system or network security.

Affected upstream versions: n/a
Upstream repository: https://sourceware.org/git/binutils-gdb.git
Upstream fix commit: 66a3492ce68e1ae45b2489bd9a815c39ea5d7f66
CVE-2025-69650: binutils: double free in readelf via crafted ELF binary with malformed relocation data
Component: binutils
Severity: Low
CWE: CWE-415 (Double Free)
CVSS v3: 3.3 (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L)
Public date: 2026-03-06T00:00:00+00:00

A flaw was found in binutils. Processing a specially crafted ELF binary file containing malformed relocation data with the readelf program can trigger a double free, causing a crash and resulting in a denial of service.

Statement: This issue is classified with a low severity primarily because binutils is not typically exposed to untrusted inputs in most environments, limiting the possibility of exploitation. Additionally, this double free vulnerability is only triggered during the parsing of a specially crafted file, requiring an attacker to convince a user to process this file with readelf. Furthermore, binutils does not handle privileged operations, meaning that exploitation is unlikely to lead to system compromise or escalation of privileges. Also, the impact is limited to the application itself, without affecting the broader system or network security.

Affected upstream versions: n/a
Upstream repository: https://sourceware.org/git/binutils-gdb.git
Upstream fix commit: ea4bc025abdba85a90e26e13f551c16a44bfa921
CVE-2025-69651: binutils: Binutils: Denial of Service via crafted ELF binary processing
Component: binutils
Severity: Low
CWE: CWE-824 (Access of Uninitialized Pointer)
CVSS v3: 2.8 (CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L)
Public date: 2026-03-06T00:00:00+00:00

A flaw was found in binutils. An attacker could exploit this vulnerability by providing a crafted Executable and Linkable Format (ELF) binary with malformed relocation or symbol data. Processing this malicious binary leads to an invalid pointer free, which triggers memory corruption checks and causes the program to terminate.

Statement: The readelf utility is a command line tool invoked by a user. There is no availability risk to host Red Hat systems.

Affected upstream versions: n/a
Upstream repository: https://sourceware.org/git/binutils-gdb.git
Upstream fix commit: ea4bc025abdba85a90e26e13f551c16a44bfa921
CVE-2025-69652: binutils: abort in readelf via crafted ELF binary with malformed DWARF abbrev or debug information
Component: binutils
Severity: Low
CWE: CWE-617 (Reachable Assertion)
CVSS v3: 3.3 (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L)
Public date: 2026-03-06T00:00:00+00:00

A flaw was found in binutils. Processing a specially crafted ELF binary file containing malformed DWARF abbrev or debug information with the readelf program using the -w abbrev command line option can trigger an abort, causing a crash and resulting in a denial of service.

Statement: This issue is classified with a low severity primarily because binutils is not typically exposed to untrusted inputs in most environments, limiting the possibility of exploitation. Additionally, this reachable abort is only triggered during the parsing of a specially crafted file, requiring an attacker to convince a user to process this file with readelf. Furthermore, binutils does not handle privileged operations, meaning that exploitation is unlikely to lead to system compromise or escalation of privileges. Also, the impact is limited to the application itself, without affecting the broader system or network security.

Affected upstream versions: n/a
Upstream repository: https://sourceware.org/git/binutils-gdb.git
Upstream fix commit: 44b79abd0fa12e7947252eb4c6e5d16ed6033e01
CVE-2025-6984: langchain-community: Langchain-community insecure XML parsing
Component: langchain-community
Severity: Important
CWE: CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor)
CVSS v3: 7.5 (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Public date: 2025-09-04T08:07:41.996000+00:00

An XML External Entity flaw has been discovered in the langchain-community python package. The EverNoteLoader component has an insecure use of the `etree.iterparse()` function which does not disable external entity references. This can lead to sensitive information disclosure. An attacker could exploit this by crafting a malicious XML payload that references local files, potentially exposing sensitive data


Affected upstream versions: unspecified <= latest
Fixed upstream versions: libs/community/v0.3.27
Upstream repository: https://github.com/langchain-ai/langchain-community
Upstream fix commit: e842452108089524e22c3a2ced851c021884556f
CVE-2025-71089: kernel: iommu: disable SVA when CONFIG_X86 is set
Component: kernel
Severity: Moderate
CWE: CWE-820 (Missing Synchronization)
CVSS v3: 7.8 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Public date: 2026-01-13T00:00:00+00:00

A security vulnerability was found in the Linux kernel's IOMMU Shared Virtual Addressing (SVA) implementation on x86 architecture. When SVA is enabled, the IOMMU caches kernel page table entries. Since the kernel lacks a mechanism to notify the IOMMU when kernel page table pages are freed and reallocated, the IOMMU can retain stale entries pointing to reused memory. This can lead to use-after-free or write-after-free conditions, potentially enabling arbitrary physical memory DMA access or privilege escalation.

Statement: This is a significant security vulnerability affecting x86 systems with IOMMU SVA support enabled. While SVA contexts are unprivileged and cannot directly access kernel mappings, the IOMMU still walks and caches intermediate kernel page table entries. An attacker could potentially exploit the stale cache entries to gain arbitrary DMA access or escalate privileges. The fix disables SVA on x86 until proper cache invalidation mechanisms are implemented.

Affected upstream versions: 5.2
Fixed upstream versions: 0, 5.15.200, 6.1.163, 6.12.64, 6.18.4, 6.19, 6.6.120
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: b34289505180a83607fcfdce14b5a290d0528476
CVE-2025-71113: kernel: crypto: af_alg - zero initialize memory allocated via sock_kmalloc
Component: kernel
Severity: Low
CWE: CWE-909 (Missing Initialization of Resource)
CVSS v3: 3.3 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L)
Public date: 2026-01-14T00:00:00+00:00

A flaw was found in the Linux kernel's crypto AF_ALG subsystem. Memory allocated via sock_kmalloc() for crypto user API contexts is not zero-initialized, leaving fields with garbage values. Specifically, the 'inflight' variable can contain random data, causing af_alg_alloc_areq() to spuriously return -EBUSY errors when the garbage value is interpreted as true.

Statement: This issue manifests as random -EBUSY failures when using the kernel's crypto socket interface, primarily affecting applications using AF_ALG for cryptographic operations. While the uninitialized memory causes functional issues, there is no evidence of exploitable information disclosure or code execution, making this primarily a reliability concern.

Affected upstream versions: 2.6.38
Fixed upstream versions: 0, 5.10.248, 5.15.198, 6.1.160, 6.12.64, 6.18.3, 6.19, 6.6.120
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: e125c8e346e4eb7b3e854c862fcb4392bc13ddba