Debian Debian Linux 11.0

jfs: upper bound check of tree index in dbAllocAG

perf/core: Exit early on perf_mmap() fail

ipv6: reject malicious packets in ipv6_gso_segment()

ftrace: Also allocate and copy hash for reading of filter files

tracing: Limit access to parser->buffer when trace_get_user failed

In multiple functions of binder.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

scsi: bfa: Double-free fix

tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock->cork.

net: tipc: fix refcount warning in tipc_aead_encrypt

Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete

mtk-sd: Prevent memory corruption from DMA map failure

atm: clip: Fix infinite recursive call of clip_push().

tipc: Fix use-after-free in tipc_conn_close().

net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit

jfs: truncate good inode pages when hard link is 0

ftrace: Fix UAF when lookup kallsym after ftrace disabled

drivers/rapidio/rio_cm.c: prevent possible heap overwrite

f2fs: fix to avoid panic in f2fs_evict_inode

crypto: marvell/cesa - Handle zero-length skcipher requests

f2fs: fix to avoid UAF in f2fs_sync_inode_meta()

fs/buffer: fix use-after-free when call bh_read() helper

jfs: validate AG parameters in dbMount() to prevent crashes

media: vivid: Change the siize of the composing

usb: gadget : fix use-after-free in composite_dev_cleanup()

sch_hfsc: make hfsc_qlen_notify() idempotent

exfat: fix double free in delayed_free

eventpoll: Fix semi-unbounded recursion

KVM: x86: use array_index_nospec with indices that come from guest

wifi: ath9k_htc: Abort software beacon handling if disabled

net: usb: lan78xx: fix WARN in __netif_napi_del_locked on disconnect

i2c: tegra: check msg length in SMBUS block read

wifi: p54: prevent buffer-overflow in p54_rx_eeprom_readback()

platform/x86: dell-wmi-sysman: Fix WMI data block retrieval in sysfs callbacks

jfs: fix array-index-out-of-bounds read in add_missing_indices

btrfs: fix iteration of extrefs during log replay

net: lan743x: Modify the EEPROM and OTP size for PCI1xxxx devices

fbdev: Fix vmalloc out-of-bounds write in fast_imageblit

bpf, sockmap: Avoid using sk_socket after free when sending

fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass

net: lan743x: fix potential out-of-bounds write in lan743x_ptp_io_event_clock_get()