Linux Kernel 6.2

Spectre V1 Gadget in do_prlimit in the Linux Kernel

An issue was discovered in drivers/bluetooth/hci_ldisc.c in the Linux kernel 6.2. In hci_uart_tty_ioctl, there is a race condition between HCIUARTSETPROTO and HCIUARTGETPROTO. HCI_UART_PROTO_SET is set before hu->proto is set. A NULL pointer dereference may occur.

xhci: Fix null pointer dereference when host dies

btrfs: fix race between quota rescan and disable leading to NULL pointer deref

btrfs: qgroup: do not warn on record without old_roots populated

drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer

powerpc/64s/interrupt: Fix interrupt exit race with security mitigation switch

l2tp: close all race conditions in l2tp_tunnel_register()

rxrpc: Fix potential data race in rxrpc_wait_to_be_connected()

net/mlx5e: Prevent concurrent access to IPSec ASO context

A denial of service problem was found, due to a possible recursive locking scenario, resulting in a deadlock in table_clear in drivers/md/dm-ioctl.c in the Linux Kernel Device Mapper-Multipathing sub-component.

xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()