Debian Debian Linux 10.0

wifi: nl80211: reject iftype change with mesh ID change

i40e: fix vf may be used uninitialized in this function warning

x86/srso: Add SRSO mitigation for Hygon processors

netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain

nilfs2: prevent kernel bug at submit_bh_wbc()

nilfs2: fix failure to detect DAT corruption in btree and direct mappings

An issue was discovered in Xen through 4.14.x allowing x86 guest OS users to cause a denial of service (data corruption), cause a data leak, or possibly gain privileges because an AMD IOMMU page-table entry can be half-updated.

Use-after-free in Linux kernel's netfilter: nf_tables component

gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()

bpf: Fix stackmap overflow check on 32-bit arches

netfilter: nf_tables: discard table flag update with pending basechain deletion

llc: call sock_orphan() at release time

jfs: fix array-index-out-of-bounds in dbAdjTree

jfs: fix slab-out-of-bounds Read in dtSearch

tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()

drm/amd/pm: fix a double-free in si_dpm_init

of: Fix double free in of_parse_phandle_with_args_map

hwmon: (coretemp) Fix out-of-bounds memory access

powerpc/kasan: Fix addr error caused by page alignment

mmc: core: Avoid negative index with array access

vfio/pci: Create persistent INTx handler

pinctrl: core: delete incorrect free in pinctrl_enable()

Insufficient policy enforcement in Intents in Google Chrome on Android prior to 86.0.4240.75 allowed a local attacker to bypass navigation restrictions via crafted Intents.

irqchip/gic-v3-its: Prevent double free on error

tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc

The JIT created incorrect code for arguments in certain cases. This led to potential use-after-free crashes during garbage collection. This vulnerability affects Firefox < 125, Firefox ESR < 115.10, and Thunderbird < 115.10.

net: ip_tunnel: prevent perpetual headroom growth

net: gtp: Fix Use-After-Free in gtp_dellink

nfs: fix UAF in direct writes

net: openvswitch: Fix Use-After-Free in ovs_ct_exit

wireguard: netlink: access device through ctx instead of peer

nilfs2: fix data corruption in dsync block recovery for small block sizes

A flaw use after free in the Linux kernel NILFS file system was found in the way user triggers function security_inode_alloc to fail with following call to function nilfs_mdt_destroy. A local user could use this flaw to crash the system or potentially escalate their privileges on the system.

media: tc358743: register v4l2 async device only after successful setup

Use-after-free in Linux kernel's netfilter: nf_tables component

tcp: add sanity checks to rx zerocopy

xhci: handle isoc Babble and Buffer Overrun events properly

crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init

s390/zcrypt: fix reference counting on zcrypt card objects

KVM: SVM: Flush pages under kvm->lock to fix UAF in svm_register_enc_region()