Linux Kernel 4.14

x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache

net_sched: hfsc: Fix a UAF vulnerability in class handling

crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl

Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count

HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse()

A flaw was found in the Linux kernel's vfio interface implementation that permits violation of the user's locked memory limit. If a device is bound to a vfio driver, such as vfio-pci, and the local attacker is administratively granted ownership of the device, it may cause a system memory exhaustion and thus a denial of service (DoS). Versions 3.10, 4.14 and 4.18 are vulnerable.

The Linux Kernel versions 4.14, 4.15, and 4.16 has a null pointer dereference which can result in an out of memory (OOM) killing of large mlocked processes. The issue arises from an oom killed process's final thread calling exit_mmap(), which calls munlock_vma_pages_all() for mlocked vmas.This can happen synchronously with the oom reaper's unmap_page_range() since the vma's VM_LOCKED bit is cleared before munlocking (to determine if any other vmas share the memory and are mlocked).

apparmor: fix reference count leak in aa_pivotroot()

x86/CPU: Fix FPDSS on Zen1

crypto: algif_aead - Fix minimum RX size check for decryption

netfilter: ipset: stop hash:* range iteration at end

drm/ttm: Avoid NULL pointer deref for evicted BOs