Linux Kernel 4.13

net: bcmgenet: fix off-by-one in bcmgenet_put_txcb

net/ipv4/route.c in the Linux kernel 4.13-rc1 through 4.13-rc6 is too late to check for a NULL fi field when RTM_F_FIB_MATCH is set, which allows local users to cause a denial of service (NULL pointer dereference) or possibly have unspecified other impact via crafted system calls. NOTE: this does not affect any stable release.

apparmor: fix race between freeing data and fs accessing it

apparmor: fix race on rawdata dereference

libceph: Fix potential null-ptr-deref in decode_choose_args()

A flaw was found in the Linux kernel present since v4.0-rc1 and through v4.13-rc4. A crafted network packet sent remotely by an attacker may force the kernel to enter an infinite loop in the cipso_v4_optptr() function in net/ipv4/cipso_ipv4.c leading to a denial-of-service. A certain non-default configuration of LSM (Linux Security Module) and NetLabel should be set up on a system before an attacker could leverage this flaw.

dmaengine: bcm-sba-raid: fix device leak on probe

rxrpc: Fix call removal to use RCU safe deletion

usb: typec: ucsi: Handle incorrect num_connectors capability