- drm/amd/pm: Fix negative array index read {CVE-2024-46821} - drm/amd/display: Check gpio_id before used as array index {CVE-2024-46818} - drm/amd/display: Check link_index before accessing dc->links[] {CVE-2024-46813} - drm/amd/display: Fix index may exceed array range within fpu_update_bw_bounding_box {CVE-2024-46811} - Squashfs: sanity check symbolic link size {CVE-2024-46744} - platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses {CVE-2024-46859} - net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc() {CVE-2024-40995} - net/sched: act_api: rely on rcu in tcf_idr_check_alloc {CVE-2024-40995} - netfilter: bridge: confirm multicast packets before passing them up the stack {CVE-2024-27415} - netfilter: let reset rules clean out conntrack entries {CVE-2024-27415} - mm/filemap: make MAX_PAGECACHE_ORDER acceptable to xarray {CVE-2024-42243} - gpiolib: cdev: Fix use after free in lineinfo_changed_notify {CVE-2024-36899} - bpf, sockmap: Prevent lock inversion deadlock in map delete elem {CVE-2024-35895} - bpf, sockmap: Fix preempt_rt splat when using raw_spin_lock_t {CVE-2024-35895} - mm/huge_memory: don't unpoison huge_zero_folio {CVE-2024-40914} - cxgb4: fix use after free bugs caused by circular dependency problem {CVE-2023-4133} - timers: Restore ABI Compatibility with timer_delete Functions {CVE-2023-4133} - timers: Provide timer_shutdown[_sync]() {CVE-2023-4133} - timers: Add shutdown mechanism to the internal functions {CVE-2023-4133} - timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode {CVE-2023-4133} - timers: Silently ignore timers with a NULL function {CVE-2023-4133} - timers: Rename del_timer() to timer_delete() {CVE-2023-4133} - timers: Rename del_timer_sync() to timer_delete_sync() {CVE-2023-4133} - timers: Use del_timer_sync() even on UP {CVE-2023-4133} - timers: Update kernel-doc for various functions {CVE-2023-4133} - timers: Replace BUG_ON()s {CVE-2023-4133} - timers: Get rid of del_singleshot_timer_sync() {CVE-2023-4133} - clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function {CVE-2023-4133} - clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function {CVE-2023-4133} - mm: avoid overflows in dirty throttling logic {CVE-2024-42131} - ring-buffer: Fix a race between readers and resize checks {CVE-2024-38601} - igc: avoid returning frame twice in XDP_REDIRECT {CVE-2024-26853} - igc: Avoid transmit queue timeout for XDP {CVE-2024-26853} - nfsd: fix RELEASE_LOCKOWNER {CVE-2024-26629} - tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc {CVE-2023-52880} - nvmet: fix a possible leak when destroy a ctrl during qp establishment {CVE-2024-42152} - net: ntb_netdev: Move ntb_netdev_rx_handler() to call netif_rx() from __netif_rx() {CVE-2024-42110} - x86: stop playing stack games in profile_pc() {CVE-2024-42096} - xdp: Remove WARN() from __xdp_reg_mem_model() {CVE-2024-42082} - NFSv4: Fix memory leak in nfs4_set_security_label {CVE-2024-41076} - ppp: reject claimed-as-LCP but actually malformed packets {CVE-2024-41044} - udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port(). {CVE-2024-41041} - sched/deadline: Fix task_struct reference leak {CVE-2024-41023} - tipc: force a dst refcount before doing decryption {CVE-2024-40983} - scsi: qedi: Fix crash while reading debugfs attribute {CVE-2024-40978} - wifi: iwlwifi: mvm: don't read past the mfuart notifcation {CVE-2024-40941} - wifi: iwlwifi: mvm: check n_ssids before accessing the ssids {CVE-2024-40929} - xhci: Handle TD clearing for multiple streams case {CVE-2024-40927} - wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup() {CVE-2024-40912} - wifi: cfg80211: Lock wiphy in cfg80211_get_station {CVE-2024-40911} - ipv6: fix possible race in __fib6_drop_pcpu_from() {CVE-2024-40905} - md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING {CVE-2024-39476} - usb-storage: alauda: Check whether the media is initialized {CVE-2024-38619} - usb-storage: alauda: Fix uninit-value in alauda_check_media() {CVE-2024-38619} - crypto: bcm - Fix pointer arithmetic {CVE-2024-38579} - scsi: qedf: Ensure the copied buf is NUL terminated {CVE-2024-38559} - wifi: nl80211: don't free NULL coalescing rule {CVE-2024-36941} - scsi: qla2xxx: Fix off by one in qla_edif_app_getstats() {CVE-2024-36025} - netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() {CVE-2024-35898} - mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work {CVE-2024-35852} - wifi: iwlwifi: dbg-tlv: ensure NUL termination {CVE-2024-35845} - KVM: SVM: Flush pages under kvm->lock to fix UAF in svm_register_enc_region() {CVE-2024-35791} - wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes {CVE-2024-35789} - wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work {CVE-2024-27052} - nfp: flower: handle acti_netdevs allocation failure {CVE-2024-27046} - octeontx2-af: Use separate handlers for interrupts {CVE-2024-27030} - netfilter: flowtable: validate pppoe header {CVE-2024-27016} - kprobes/x86: Use copy_from_kernel_nofault() to read from unsafe address {CVE-2024-26946} - scsi: qla2xxx: Fix command flush on cable pull {CVE-2024-26931} - net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink() {CVE-2024-26855} - bpf: Fix racing between bpf_timer_cancel_and_free and bpf_timer_cancel {CVE-2024-26737} - Input: cyapa - add missing input core locking to suspend/resume functions {CVE-2023-52884} - bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself {CVE-2023-52735} - wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev() {CVE-2023-52651} - net: tap_open(): set sk_uid from current_fsuid() {CVE-2023-4194} - net: tun_chr_open(): set sk_uid from current_fsuid() {CVE-2023-4194} - seg6: fix the iif in the IPv6 socket control block {CVE-2021-47515} - tty: Fix out-of-bound vmalloc access in imageblit {CVE-2021-47383} - bnx2x: Fix multiple UBSAN array-index-out-of-bounds {CVE-2024-42148} - hwmon: (adc128d818) Fix underflows seen when writing limit attributes {CVE-2024-46759} - net: bridge: mst: fix vlan use-after-free {CVE-2024-36979} - stm class: Fix a double free in stm_register_device() {CVE-2024-38627} - wifi: mac80211: Avoid address calculations via out of bounds array indexing {CVE-2024-41071} - of/irq: Prevent device address out-of-bounds read in interrupt map walk {CVE-2024-46743} - HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup {CVE-2024-46747} - drm/amdgpu: fix mc_data out-of-bounds read warning {CVE-2024-46722} - drm/amdgpu: Fix out-of-bounds write warning {CVE-2024-46725} - drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number {CVE-2024-46724} - wifi: nl80211: Avoid address calculations via out of bounds array indexing {CVE-2024-38562} - wifi: nl80211: convert cfg80211_scan_request allocation to *_size macros {CVE-2024-38562} - overflow: Implement size_t saturating arithmetic helpers {CVE-2024-38562} - cdrom: rearrange last_media_change check to avoid unintentional overflow {CVE-2024-42136} - ftrace: Fix possible use-after-free issue in ftrace_location() {CVE-2024-38588} - ftrace: Fix possible warning on checking all pages used in ftrace_process_locs() {CVE-2024-38588} - drm/amdgpu: fix ucode out-of-bounds read warning {CVE-2024-46723} - VMCI: Fix use-after-free when removing resource in vmci_resource_remove() {CVE-2024-46738} - sch/netem: fix use after free in netem_dequeue {CVE-2024-46800} - firmware: cs_dsp: Fix overflow checking of wmfw header {CVE-2024-41039} - hwmon: (lm95234) Fix underflows seen when writing limit attributes {CVE-2024-46758} - HID: amd_sfh: free driver_data after destroying hid device {CVE-2024-46746} - xfs: don't walk off the end of a directory data block {CVE-2024-41013} - hwmon: (w83627ehf) Fix underflows seen when writing limit attributes {CVE-2024-46756} - tunnels: fix out of bounds access when building IPv6 PMTU error {CVE-2024-26665} - hwmon: (nct6775-core) Fix underflows seen when writing limit attributes {CVE-2024-46757} - drm/amd/pm: fix the Out-of-bounds read warning {CVE-2024-46731} - drm/amdgpu/mes: fix mes ring buffer overflow {CVE-2024-46700} - exec: Fix ToCToU between perm check and set-uid/gid usage {CVE-2024-43882} - PCI/MSI: Fix UAF in msi_capability_init {CVE-2024-41096}