Linux Kernel 5.12

mptcp: fix slab-use-after-free in __inet_lookup_established

wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes

A flaw was found in the Nosy driver in the Linux kernel. This issue allows a device to be inserted twice into a doubly-linked list, leading to a use-after-free when one of these devices is removed. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability. Versions before kernel 5.12-rc6 are affected

RDMA/efa: Fix use of completion ctx after free

nvme: fix reconnection fail due to reserved tag allocation

An out-of-bounds (OOB) memory access flaw was found in fs/f2fs/node.c in the f2fs module in the Linux kernel in versions before 5.12.0-rc4. A bounds check failure allows a local attacker to gain access to out-of-bounds memory leading to a system crash or a leak of internal kernel information. The highest threat from this vulnerability is to system availability.

An issue was discovered in the Linux kernel through 5.11.3, as used with Xen PV. A certain part of the netback driver lacks necessary treatment of errors such as failed memory allocations (as a result of changes to the handling of grant mapping errors). A host OS denial of service may occur during misbehavior of a networking frontend driver. NOTE: this issue exists because of an incomplete fix for CVE-2021-26931.

tcp: add sanity tests to TCP_QUEUE_SEQ

net: hso: fix NULL-deref on disconnect regression

KEYS: trusted: Fix memory leak on object td

net: tap: NULL pointer derefence in dev_parse_header_protocol when skb->dev is null

s390/syscalls: Add spectre boundary for syscall dispatch table

wifi: mac80211: Fix static_branch_dec() underflow for aql_disable.

perf/x86/intel/uncore: Fix reference count leak in hswep_has_limit_sbox()

bpf: Fix memleak due to fentry attach failure

RDMA/cm: Fix leaking the multicast GID table reference

net: mvpp2: guard flow control update with global_tx_fc in buffer switching

io_uring/io-wq: check IO_WQ_BIT_EXIT inside work run loop

A flaw possibility of race condition and incorrect initialization of the process id was found in the Linux kernel child/parent process identification handling while filtering signal handlers. A local attacker is able to abuse this flaw to bypass checks to send any signal to a privileged process.