Debian Debian Linux 11.0

pwm: mediatek: Prevent divide-by-zero in pwm_mediatek_config()

fbdev: omapfb: Add 'plane' value check

Found Linux Kernel flaw in the i740 driver. The Userspace program could pass any values to the driver through ioctl() interface. The driver doesn't check the value of 'pixclock', so it may cause a divide by zero error.

Oxenstored 32->31 bit integer truncation issues Integers in Ocaml are 63 or 31 bits of signed precision. The Ocaml Xenbus library takes a C uint32_t out of the ring and casts it directly to an Ocaml integer. In 64-bit Ocaml builds this is fine, but in 32-bit builds, it truncates off the most significant bit, and then creates unsigned/signed confusion in the remainder. This in turn can feed a negative value into logic not expecting a negative value, resulting in unexpected exceptions being thrown. The unexpected exception is not handled suitably, creating a busy-loop trying (and failing) to take the bad packet out of the xenstore ring.

Xenstore: Guests can create orphaned Xenstore nodes By creating multiple nodes inside a transaction resulting in an error, a malicious guest can create orphaned nodes in the Xenstore data base, as the cleanup after the error will not remove all nodes already created. When the transaction is committed after this situation, nodes without a valid parent can be made permanent in the data base.

igc: fix PTM cycle trigger logic

s390/sclp: Add check for get_zeroed_page()

net: dsa: mv88e6xxx: fix -ENOENT when deleting VLANs and MST is unsupported

atm_tc_enqueue in net/sched/sch_atm.c in the Linux kernel through 6.1.4 allows attackers to cause a denial of service because of type confusion (non-negative numbers can sometimes indicate a TC_ACT_SHOT condition rather than valid classification results).

Kernel: tap: tap_open(): correctly initialize socket uid next fix of i_uid to current_fsuid

ASoC: ops: Consistently treat platform_max as control value

ksmbd: use aead_request_free to match aead_request_alloc

drm/amdgpu: handle amdgpu_cgs_create_device() errors in amd_powerplay_create()

media: atomisp: Add check for rgby_data memory allocation failure

Kernel: smsusb: use-after-free caused by do_submit_urb()

A use-after-free vulnerability was found in the Linux kernel in drivers/net/hamradio. This flaw allows a local attacker with a user privilege to cause a denial of service (DOS) when the mkiss or sixpack device is detached and reclaim resources early.

objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()

sch_htb: make htb_qlen_notify() idempotent

wifi: brcm80211: fmac: Add error handling for brcmf_usb_dl_writeimage()

backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()

misc: pci_endpoint_test: Avoid issue of interrupts remaining after request_irq error

net: lan743x: Fix memleak issue when GSO enabled

drm/nouveau: Fix WARN_ON in nouveau_fence_context_kill()

mm/huge_memory: fix dereferencing invalid pmd migration entry

vxlan: Annotate FDB data races

mfd: ene-kb3930: Fix a potential NULL pointer dereference

i3c: Add NULL pointer check in i3c_master_queue_ibi()

net: Fix null-ptr-deref by sock_lock_init_class_and_name() and rmmod.

soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()

drm/amd/pm: Prevent division by zero

media: mediatek: vcodec: Fix a resource leak related to the scp device in FW initialization

watch_queue: fix pipe accounting mismatch

drm/amd/pm: Prevent division by zero

drm/amd/pm: Prevent division by zero

nfs: handle failure of nfs_get_lock_context in unlock path

i2c: cros-ec-tunnel: defer probe if parent EC is not present

btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref

media: cx231xx: set device_caps for 417

crypto: null - Use spin lock instead of mutex

module: ensure that kobject_put() is safe for module type kobjects