Linux Kernel 6.0

drm/gma500: Fix BUG: sleeping function called from invalid context errors

This vulnerability allows local attackers to disclose sensitive information on affected installations of the Linux Kernel 6.0-rc2. An attacker must first obtain the ability to execute high-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the nft_osf_eval function. The issue results from the lack of proper initialization of memory prior to accessing it. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the kernel. Was ZDI-CAN-18540.

A race condition flaw was found in the Linux kernel sound subsystem due to improper locking. It could lead to a NULL pointer dereference while handling the SNDCTL_DSP_SYNC ioctl. A privileged local user (root or member of the audio group) could use this flaw to crash the system, resulting in a denial of service condition

scsi: qla2xxx: Fix memory leak in __qlt_24xx_handle_abts()

bpf: Fix a data-race around bpf_jit_limit.

net: qrtr: start MHI channel after endpoit creation

Out-of-bounds read when setting hmac data

smb3: fix temporary data corruption in collapse range

smb3: fix temporary data corruption in insert range