Linux Kernel 5.3

tls: Fix race condition in tls_sw_cancel_work_tx()

Mishandling of file-system uid/gid with namespaces in shiftfs

net: hns3: add VLAN id validation before using

iommu/amd/pgtbl: Fix possible race while increase page table level

An issue was discovered in xfs_setattr_nonsize in fs/xfs/xfs_iops.c in the Linux kernel through 5.2.9. XFS partially wedges when a chgrp fails on account of being out of disk quota. xfs_setattr_nonsize is failing to unlock the ILOCK after the xfs_qm_vop_chown_reserve call fails. This is primarily a local DoS attack vector, but it might result as well in remote DoS if the XFS filesystem is exported for instance via NFS.

rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present

Reference count underflow in shiftfs

Type confusion in shiftfs

A buffer overflow flaw was found, in versions from 2.6.34 to 5.2.x, in the way Linux kernel's vhost functionality that translates virtqueue buffers to IOVs, logged the buffer descriptors during migration. A privileged guest user able to pass descriptors with invalid length to the host when migration is underway, could use this flaw to increase their privileges on the host.

ceph: fix a buffer leak in __ceph_setxattr()

skbuff: Account for tail adjustment during pull operations

net: gso: fix panic on frag_list with mixed head alloc types

RDMA/siw: Fix potential NULL pointer dereference in header processing

Reference counting error in overlayfs/shiftfs error path when used in conjuction with aufs

ipv4: Fix reference count leak when using error routes with nexthop objects

scsi: target: Fix recursive locking in __configfs_open_file()

An issue was discovered in the Linux kernel before 5.2.6. On NUMA systems, the Linux fair scheduler has a use-after-free in show_numa_stats() because NUMA fault statistics are inappropriately freed, aka CID-16d51a590a8c.