Linux Kernel any version

hisi_acc_vfio_pci: bugfix live migration function without VF device driver

Use after free in PDFium in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (Chromium security severity: Low)

Use after free in Cast in Google Chrome prior to 149.0.7827.53 allowed an attacker on the local network segment to execute arbitrary code via malicious network traffic. (Chromium security severity: High)

KVM: SVM: Forcibly leave SMM mode on SHUTDOWN interception

iommufd: Fix unpinning of pages when an access is present

x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache

net: skbuff: propagate shared-frag marker through frag-transfer helpers

wifi: cfg80211: Add missing lock in cfg80211_check_and_end_cac()

Use after free in PDFium in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (Chromium security severity: High)

ice: validate queue quanta parameters to prevent OOB access

arm64: errata: Mitigate TLBI errata on various Arm CPUs

Insufficient policy enforcement in DevTools in Google Chrome prior to 149.0.7827.53 allowed an attacker who convinced a user to install a malicious extension to perform privilege escalation via a crafted Chrome Extension. (Chromium security severity: Medium)

iommu/vt-d: Avoid NULL pointer dereference or refcount corruption

wifi: mt76: mt7996: add missing check for rx wcid entries

wifi: rtl8xxxu: fix slab-out-of-bounds in rtl8xxxu_sta_add

iommu: Fix WARN_ON in __iommu_group_set_domain_nofail() due to reset

KVM: s390: pci: fix GAIT table indexing due to double-scaling pointer arithmetic

net: ethernet: ec_bhf: Fix dma_free_coherent() dma handle

ppp: require CAP_NET_ADMIN in target netns for unattached ioctls

drm/msm: Fix iommu_map_sgtable() return value check and avoid WARN

netrom: fix double-free in nr_route_frame()

drm/amdgpu: zero-initialize GART table on allocation

drm/amdgpu/vce: Prevent partial address patches

nsfs: tighten permission checks for ns iteration ioctls

LoongArch: KVM: Make kvm_get_vcpu_by_cpuid() more robust

nsfs: tighten permission checks for handle opening

iommu/riscv: Add IOTINVAL after updating DDT/PDT entries

net: devmem: reject dma-buf bind with non-page-aligned size or SG length

ice: fix concurrent reset and removal of VFs

IBM TXSeries for Multiplatforms cross-site request forgery

KVM: x86: Fix shadow paging use-after-free due to unexpected role

KVM: x86: Fix shadow paging use-after-free due to unexpected GFN

crypto: qat - fix VF2PF work teardown race in adf_disable_sriov()

fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region()

iommufd: Prevent ALIGN() overflow

KVM: arm64: Fix the descriptor address in __kvm_at_swap_desc()

drm/xe/pf: Fix sysfs initialization

iommupt: Fix short gather if the unmap goes into a large mapping

scsi: qla2xxx: Fix deletion race condition

iommu/vt-d: Restore context entry setup order for aliased devices