Linux Kernel 5.13

IB/mlx5: Fix initializing CQ fragments buffer

net: ll_temac: Make sure to free skb when it is completely used

habanalabs/gaudi: Fix a potential use after free in gaudi_memset_device_memory

net: dsa: sja1105: add error handling in sja1105_setup()

usb: typec: tcpm: cancel vdm and state machine hrtimer when unregister tcpm port

i2c: i801: Don't generate an interrupt on bus reset

mac80211: fix skb length check in ieee80211_scan_rx()

spi: bcm2835: Fix out-of-bounds access with more than 4 slaves

net: ethernet: fix potential use-after-free in ec_bhf_remove

net/mlx5e: Fix use-after-free of encap entry in neigh update handler

bus: mhi: pci_generic: Fix possible use-after-free in mhi_pci_remove()

io_uring: fix ltout double free on completion race

mt76: mt7921: fix possible AOOB issue in mt7921_mcu_tx_rate_report

udp: fix race between close() and udp_abort()

tipc: wait and exit until all work queues are done

ethtool: strset: fix message length calculation

neighbour: allow NUD_NOARP entries to be forced GCed

nvmet: fix freeing unallocated p2pmem

nvmet-rdma: Fix NULL deref when SEND is completed with error

scsi: target: core: Avoid smp_processor_id() in preemptible code

mptcp: fix sk_forward_memory corruption on retransmission

net: lantiq_xrx200: restore buffer if memory allocation failed

btrfs: abort in rename_exchange if we fail to insert the second ref

sch_cake: Fix out of bounds when parsing TCP options and header

kvm: avoid speculation-based attacks from out-of-range memslot accesses

kvm: LAPIC: Restore guard to prevent illegal APIC register access

cxgb4: avoid accessing registers when clearing filters

x86/kvm: Disable kvmclock on all CPUs on shutdown

hfsplus: prevent corruption in shrinking truncate

KVM: x86: Ensure liveliness of nested VM-Enter fail tracepoint message

usb: typec: ucsi: Retrieve all the PDOs instead of just the first 4

x86/fpu: Invalidate FPU state after a failed XRSTOR from a user buffer

drm: Fix use-after-free read in drm_getunique()

A use-after-free in function hci_sock_bound_ioctl() of the Linux kernel HCI subsystem was found in the way user calls ioct HCIUNBLOCKADDR or other way triggers race condition of the call hci_unregister_dev() together with one of the calls hci_sock_blacklist_add(), hci_sock_blacklist_del(), hci_get_conn_info(), hci_get_auth_info(). A privileged local user could use this flaw to crash the system or escalate their privileges on the system. This flaw affects the Linux kernel versions prior to 5.13-rc5.

KVM: x86: Immediately reset the MMU context when the SMM flag is cleared

usb: fix various gadget panics on 10gbps cabling

x86/ioremap: Map EFI-reserved memory as encrypted for SEV

ptp: ocp: Fix a resource leak in an error handling path

Improper access control in BlueZ may allow an authenticated user to potentially enable information disclosure via adjacent access.

btrfs: do not BUG_ON in link_to_fixup_dir