Linux Kernel 5.5

net: tls: prevent chain-after-chain in plain text SG

net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring

wifi: cfg80211: Add missing lock in cfg80211_check_and_end_cac()

A memory leak in the crypto_reportstat() function in crypto/crypto_user_stat.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering crypto_reportstat_alg() failures, aka CID-c03b04dcdba1.

A memory leak in the spi_gpio_probe() function in drivers/spi/spi-gpio.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering devm_add_action_or_reset() failures, aka CID-d3b0ffa1d75d. NOTE: third parties dispute the relevance of this because the system must have already been out of memory before the probe began

bnxt_en: Fix out-of-bound memcpy() during ethtool -w

apparmor: Fix double free of ns_name in aa_replace_profiles()

drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat

bpf, sockmap: fix race in sock_map_free()

SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf

sfc: fix considering that all channels have TX queues

futex: Clear stale exiting pointer in futex_lock_pi() retry path

nfc: pn533: allocate rx skb before consuming bytes

A flaw was found in the Linux kernel netfilter implementation in versions prior to 5.5-rc7. A user with root (CAP_SYS_ADMIN) access is able to panic the system when issuing netfilter netflow commands.