Linux Kernel 4.18

smb3: fix for slab out of bounds on mount to ksmbd

ieee802154/adf7242: defer destroy_workqueue call

Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can lead to a denial of service

uio: Fix use-after-free in uio_open

net/smc: fix double-free of smc_spd_priv when tee() duplicates splice pipe buffer

A flaw was found in the Linux kernel's vfio interface implementation that permits violation of the user's locked memory limit. If a device is bound to a vfio driver, such as vfio-pci, and the local attacker is administratively granted ownership of the device, it may cause a system memory exhaustion and thus a denial of service (DoS). Versions 3.10, 4.14 and 4.18 are vulnerable.