Linux Kernel 4.17

batman-adv: tt: fix TOCTOU race for reported vlans

kernel KVM before versions kernel 4.16, kernel 4.16-rc7, kernel 4.17-rc1, kernel 4.17-rc2 and kernel 4.17-rc3 is vulnerable to a flaw in the way the Linux kernel's KVM hypervisor handled exceptions delivered after a stack switch operation via Mov SS or Pop SS instructions. During the stack switch operation, the processor did not deliver interrupts and exceptions, rather they are delivered once the first instruction after the stack switch is executed. An unprivileged KVM guest user could use this flaw to crash the guest or, potentially, escalate their privileges in the guest.

apparmor: fix missing bounds check on DEFAULT table in verify_dfa()

apparmor: fix side-effect bug in match_char() macro usage

ip6_gre: Use cached t->net in ip6erspan_changelink().

Linux kernel ext4 filesystem is vulnerable to an out-of-bound access in the ext4_ext_drop_refs() function when operating on a crafted ext4 filesystem image.

dmaengine: qcom: bam_dma: fix runtime PM underflow

apparmor: fix differential encoding verification

tracing: Do not register unsupported perf events

net: 3com: 3c59x: fix possible null dereference in vortex_probe1()

ice: Fix memory leak in ice_set_ringparam()

KVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV timer