Linux Linux Kernel 2.6.12

md: fix soft lockup in status_resync

mtd: Avoid boot crash in RedBoot partition table parser

net: usb: pegasus: validate USB endpoints

net: atm: fix crash due to unvalidated vcc pointer in sigd_send()

dm mirror: fix integer overflow in create_dirty_log()

usb: usblp: fix uninitialized heap leak via LPGETSTATUS ioctl

ipmi: Check event message buffer response for bad data

hfsplus: fix uninit-value by validating catalog record size

atm: lec: fix null-ptr-deref in lec_arp_clear_vccs

fbdev: Fix fb_new_modelist to prevent null-ptr-deref in fb_videomode_to_var

net: usb: kaweth: validate USB endpoints

module: Fix kernel panic when a symbol st_shndx is out of bounds

posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path

ipv4: restrict IPOPT_SSRR and IPOPT_LSRR options

net/rose: fix NULL pointer dereference in rose_transmit_link on reconnect

minix: Add required sanity checking to minix_check_superblock()

Bluetooth: L2CAP: reject BR/EDR signaling packets over MTUsig

fbdev: tdfxfb: avoid divide-by-zero on FBIOPUT_VSCREENINFO

tcp: restrict SO_ATTACH_FILTER to priv users

usb: usblp: fix heap leak in IEEE 1284 device ID via short response

ipmi:si: Return state to normal if message allocation fails

net: af_key: zero aligned sockaddr tail in PF_KEY exports

usb: image: mdc800: kill download URB on timeout

ext2: reject inodes with zero i_nlink and valid mode in ext2_iget()

ACPI: processor: Fix NULL-pointer dereference in acpi_processor_errata_piix4()

USB: core: Limit the length of unkillable synchronous timeouts

net: usb: pegasus: enable basic endpoint checking

USB: serial: digi_acceleport: fix broken rx after throttle

fbdev: rivafb: fix divide error in nv3_arb()

net: add proper RCU protection to /proc/net/ptype

net/sched: sch_hfsc: fix divide-by-zero in rtsc_min()

xfrm: clear trailing padding in build_polexpire()

sunrpc: fix cache_request leak in cache_release

hfsplus: pretend special inodes as regular files

8021q: delete cleared egress QoS mappings

sctp: fix soft lockup from unpadded ASCONF-ACK parameter iteration

USB: serial: digi_acceleport: fix hard lockup on disconnect

Race condition vulnerability in Linux kernel media/dvb-core in dvbdmx_write()

The huft_build function in inflate.c in the zlib routines in the Linux kernel before 2.6.12.5 returns the wrong value, which allows remote attackers to cause a denial of service (kernel crash) via a certain compressed file that leads to a null pointer dereference, a different vulnerability than CVE-2005-2458.

inflate.c in the zlib routines in the Linux kernel before 2.6.12.5 allows remote attackers to cause a denial of service (kernel crash) via a compressed file with "improper tables".