Linux Kernel 5.6

A flaw was found in the Linux kernel’s futex implementation. This flaw allows a local attacker to corrupt system memory or escalate their privileges when creating a futex on a filesystem that is about to be unmounted. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.

The root cause of this vulnerability is that the ioctl$DRM_IOCTL_MODE_DESTROY_DUMB can decrease refcount of *drm_vgem_gem_object *(created in *vgem_gem_dumb_create*) concurrently, and *vgem_gem_dumb_create *will access the freed drm_vgem_gem_object.

net_sched: keep alloc_hash updated after hash allocation

octeontx2-pf: fix "UBSAN: shift-out-of-bounds error"

net: rds: fix MR cleanup on copy error

netfilter: ipset: fix region locking in hash types

netfilter: nft_set_pipapo: split gc into unlink and reclaim phase

backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()

bpf: Send signals asynchronously if !preemptible

netfilter: ipset: drop logically empty buckets in mtype_del

net/sched: ets: fix divide by zero in the offload path