- tracing: Verify event formats that have "%*p.." {CVE-2025-37938} - HID: pidff: Fix null pointer dereference in pidff_find_fields {CVE-2025-37862} - scsi: st: Fix array overflow in st_setup() {CVE-2025-37857} - drm/amdkfd: debugfs hang_hws skip GPU with MES {CVE-2025-37853} - mm/vmscan: don't try to reclaim hwpoison folio {CVE-2025-37834} - cpufreq: scmi: Fix null-ptr-deref in scmi_cpufreq_get_rate() {CVE-2025-37830} - drm/amdgpu: handle amdgpu_cgs_create_device() errors in amd_powerplay_create() {CVE-2025-37852} - cpufreq: scpi: Fix null-ptr-deref in scpi_cpufreq_get_rate() {CVE-2025-37829} - sound/virtio: Fix cancel_sync warnings on uninitialized work_structs {CVE-2025-37805} - net: tls: explicitly disallow disconnect {CVE-2025-37756} - drm/amd/pm: Prevent division by zero {CVE-2025-37770} - drm/amd/pm: Prevent division by zero {CVE-2025-37768} - net: Remove RTNL dance for SIOCBRADDIF and SIOCBRDELIF. {CVE-2025-22111} - wifi: ath11k: Clear affinity hint before calling ath11k_pcic_free_irq() in error path {CVE-2025-23129} - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs {CVE-2025-22045} - ftrace: Avoid potential division by zero in function_stat_show() {CVE-2025-21898} - md/md-bitmap: Synchronize bitmap_get_stats() with bitmap lifetime {CVE-2025-21712} - bpf: Fix softlockup in arena_map_free on 64k page kernel {CVE-2025-21851} - RDMA/rxe: Fix the warning "__rxe_cleanup+0x12c/0x170 [rdma_rxe]" {CVE-2025-21829} - mm: zswap: properly synchronize freeing resources during CPU hotunplug {CVE-2025-21693} - drop_monitor: fix incorrect initialization order {CVE-2025-21862} - ptp: Ensure info->enable callback is always set {CVE-2025-21814} - efi: Don't map the entire mokvar table to determine its size {CVE-2025-21872} - drm/amd/display: Assign normalized_pix_clk when color depth = 14 {CVE-2025-21956} - net: usb: rtl8150: enable basic endpoint checking {CVE-2025-21708} - nfp: bpf: Add check for nfp_app_ctrl_msg_alloc() {CVE-2025-21848} - netfilter: nf_tables: reject mismatching sum of field_len with set key length {CVE-2025-21826} - mm: clear uffd-wp PTE/PMD state on mremap() {CVE-2025-21696} - wifi: cfg80211: regulatory: improve invalid hints checking {CVE-2025-21910} - eth: bnxt: always recalculate features after XDP clearing, fix null-deref {CVE-2025-21682} - vxlan: check vxlan_vnigroup_init() return value {CVE-2025-21790} - ata: libata-sff: Ensure that we cannot write outside the allocated buffer {CVE-2025-21738} - wifi: mac80211: don't flush non-uploaded STAs {CVE-2025-21828} - team: better TEAM_OPTION_TYPE_STRING validation {CVE-2025-21787} - ppp: Fix KMSAN uninit-value warning with bpf {CVE-2025-21922} - scsi: storvsc: Ratelimit warning logs to prevent VM denial of service {CVE-2025-21690} - sctp: sysctl: udp_port: avoid using current->nsproxy {CVE-2025-21637} - cgroup/cpuset: remove kernfs active break {CVE-2025-21634} - KVM: Explicitly verify target vCPU is online in kvm_get_vcpu() {CVE-2024-58083} - idpf: convert workqueues to unbound {CVE-2024-58057} - xfrm: state: fix out-of-bounds read during lookup {CVE-2024-57982} - printk: Fix signed integer overflow when defining LOG_BUF_LEN_MAX {CVE-2024-58017} - Bluetooth: btbcm: Fix NULL deref in btbcm_get_board_name() {CVE-2024-57988} - HID: core: Fix assumption that Resolution Multipliers must be in Logical Collections {CVE-2024-57986} - virtio-blk: don't keep queue frozen during system suspend {CVE-2024-57946} - drm/amd/display: Initialize denominator defaults to 1 {CVE-2024-57950} - fs: relax assertions on failure to encode file handles {CVE-2024-57924} - drm/amd/display: Add check for granularity in dml ceil/floor helpers {CVE-2024-57922} - scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb() {CVE-2024-56748} - ACPI: x86: Add adev NULL check to acpi_quirk_skip_serdev_enumeration() {CVE-2024-56782} - scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb() {CVE-2024-56747} - netdevsim: prevent bad user input in nsim_dev_health_break_write() {CVE-2024-56716} - scsi: hisi_sas: Add cond_resched() for no forced preemption model {CVE-2024-56589} - wifi: brcmfmac: Fix oops due to NULL pointer dereference in brcmf_sdiod_sglist_rw() {CVE-2024-56593} - ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() {CVE-2024-53680} - xen: Fix the issue of resource not being properly released in xenbus_dev_probe() {CVE-2024-53198} - RDMA/rxe: Fix the qp flush warnings in req {CVE-2024-53229} - KVM: VMX: Bury Intel PT virtualization (guest/host mode) behind CONFIG_BROKEN {CVE-2024-53135} - exfat: fix out-of-bounds access of directory entries {CVE-2024-53147} - io_uring: check for overflows in io_pin_pages {CVE-2024-53187} - firmware: arm_scpi: Check the DVFS OPP count returned by the firmware {CVE-2024-53157} - drm/xe/tracing: Fix a potential TP_printk UAF {CVE-2024-49570} - rxrpc: Fix a race between socket set up and I/O thread creation {CVE-2024-49864} - netdevsim: Add trailing zero to terminate the string in nsim_nexthop_bucket_activity_write() {CVE-2024-50259} - udf: Avoid excessive partition lengths {CVE-2024-46777} - tracing: Fix overflow in get_free_elt() {CVE-2024-43890} - dma-debug: fix a possible deadlock on radix_lock {CVE-2024-47143} - x86/mtrr: Check if fixed MTRRs exist before saving them {CVE-2024-44948} - net: hns3: fix a deadlock problem when config TC during resetting {CVE-2024-44995} - net: usb: qmi_wwan: fix memory leak for not ip packets {CVE-2024-43861} - serial: core: check uartclk for zero to avoid divide by zero {CVE-2024-43893} - wireguard: allowedips: avoid unaligned 64-bit memory accesses {CVE-2024-42247} - crypto: ecdh - explicitly zeroize private_key {CVE-2024-42098} - skmsg: Skip zero length skb in sk_msg_recvmsg {CVE-2024-41048} - serial: imx: Introduce timeout when waiting on transmitter empty {CVE-2024-40967} - tracing: Build event generation tests only as modules {CVE-2024-41004} - xen/events: close evtchn after mapping cleanup {CVE-2024-26687} - hwmon: (xgene) Fix ioremap and memremap leak {CVE-2023-53682} - firmware: arm_scmi: Fix double free in SMC transport cleanup path {CVE-2024-26893} - start_kernel: Add __no_stack_protector function attribute {CVE-2023-53491} - spi: qup: Don't skip cleanup in remove's error path {CVE-2023-53567} - i2c: designware: Fix handling of real but unexpected device interrupts {CVE-2022-50370} - rbd: avoid use-after-free in do_rbd_add() when rbd_dev_create() fails {CVE-2023-53307} - fs/binfmt_elf: Fix memory leak in load_elf_binary() {CVE-2022-50466} - recordmcount: Fix memory leaks in the uwrite function {CVE-2023-53318} - mtd: core: fix possible resource leak in init_mtd() {CVE-2022-50304} - net: hns: fix possible memory leak in hnae_ae_register() {CVE-2022-50352} - crypto: cavium - prevent integer overflow loading firmware {CVE-2022-50330} - pnode: terminate at peers of source {CVE-2022-50280} - PNP: fix name memory leak in pnp_alloc_dev() {CVE-2022-50278} - mfd: max77620: Fix refcount leak in max77620_initialise_fps {CVE-2022-50108} - ovl: Use "buf" flexible array for memcpy() destination {CVE-2022-49743} - kprobes: Fix check for probe enabled in kill_kprobe() {CVE-2022-50266} - ipv6: Fix signed integer overflow in __ip6_append_data {CVE-2022-49728} - linux/dim: Fix divide by 0 in RDMA DIM {CVE-2022-49670} - net: tun: unlink NAPI from device on destruction {CVE-2022-49672} - tracing/histograms: Fix memory leak problem {CVE-2022-49648} - configfs: fix a race in configfs_{,un}register_subsystem() {CVE-2022-48931} - ima: Fix potential memory leak in ima_init_crypto() {CVE-2022-49627} - list: fix a data-race around ep->rdllist {CVE-2022-49443} - fs: add S_ANON_INODE