Debian Debian Linux 10.0

fat: fix uninitialized field in nostale filehandles

x86/mm/pat: fix VM_PAT handling in COW mappings

ppp_async: limit MRU to 64K

fbdev: savage: Error out if pixclock equals zero

fbdev: sis: Error out if pixclock equals zero

Libvirt: null pointer dereference in udevconnectlistallinterfaces()

Kernel: smsusb: use-after-free caused by do_submit_urb()

x86/mm: Disallow vsyscall page read for copy_from_kernel_nofault()

l2tp: pass correct message length to ip6_append_data

ACPI: LPIT: Avoid u32 multiplication overflow

powerpc/powernv: Add a null pointer check in opal_event_init()

geneve: fix header validation in geneve[6]_xmit_skb

nilfs2: fix potential bug in end_buffer_async_write

net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()

Kernel: xfrm: out-of-bounds read of xfrma_mtimer_thresh nlattr

ACPI: video: check for error while searching for backlight device parent

fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion

hsr: Fix uninit-value access in hsr_get_node()

tipc: fix a possible memleak in tipc_buf_append

rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation

usb: dwc2: host: Fix dereference issue in DDMA completion flow.

An issue was discovered in the Linux kernel before 6.3.3. There is an out-of-bounds read in crc16 in lib/crc16.c when called from fs/ext4/super.c because ext4_group_desc_csum does not properly check an offset. NOTE: this is disputed by third parties because the kernel is not intended to defend against attackers with the stated "When modifying the block device while it is mounted by the filesystem" access.

power: supply: bq27xxx-i2c: Do not free non existing IRQ

efi/capsule-loader: fix incorrect allocation size

i40e: Do not use WQ_MEM_RECLAIM flag for workqueue

ARM: ep93xx: Add terminator to gpiod_lookup_table

fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super

cpu: Re-enable CPU mitigations by default for !X86 architectures

A flaw was found in the Linux kernel. A denial of service flaw may occur if there is a consecutive request of the NVME_IOCTL_RESET and the NVME_IOCTL_SUBSYS_RESET through the device file of the driver, resulting in a PCIe link disconnect.

ext4: avoid online resizing failures due to oversized flex bg

pstore/ram: Fix crash when setting number of cpus to an odd number

tracing: Ensure visibility when inserting an element into tracing_map

spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected

USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command

netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter

llc: Drop support for ETH_P_TR_802_2.

RDMA/qedr: Fix qedr_create_user_qp error flow

scsi: core: Fix unremoved procfs host directory regression

crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked

vfio/pci: Disable auto-enable of exclusive INTx IRQ