linux-stable.git - Linux kernel stable tree

Age	Commit message (Expand)	Author
23 hours	net: gro: properly validate BIG TCP aggregation criteria	Eric Dumazet
23 hours	Bluetooth: hci_event: fix LE list UAF on reset	Chengfeng Ye
23 hours	can: isotp: fix timer drain order, wakeup handling and tx_gen ordering	Oliver Hartkopp
23 hours	can: use skb hash instead of private variable in headroom	Oliver Hartkopp
23 hours	xfrm: fix sk_dst_cache double-free in xfrm_user_policy()	Xiang Mei (Microsoft)
23 hours	mptcp: pm: fix data race in add_addr timer callback	Qing Luo
23 hours	mptcp: pm: ADD_ADDR rtx: free sk if last	Matthieu Baerts (NGI0)
23 hours	mptcp: pm: ADD_ADDR rtx: always decrease sk refcount	Matthieu Baerts (NGI0)
23 hours	ipv6: fix use-after-free in ip6_finish_output2()	Luxiao Xu
23 hours	ipv4: reject undersized MTUs in ip_do_fragment()	Yong Wang
23 hours	libceph: fix OOB read in decode_watchers() via missing bounds check	Pavitra Jha
23 hours	ndisc: ndisc_send_redirect() cleanup	Eric Dumazet
23 hours	nfc: nci: free destination parameters when closing a connection	Linmao Li
23 hours	nfc: nci: fix uninit-value in the RF discover/activated NTF handlers	Samuel Page
23 hours	nfc: nci: fix out-of-bounds write in nci_target_auto_activated()	Samuel Page
23 hours	nfc: llcp: reject PDUs shorter than the LLCP header	Doruk Tan Ozturk
23 hours	nfc: llcp: fix OOB read and u8 offset wrap in TLV parsers	Muhammad Bilal
23 hours	nfc: llcp: bound the connect_sn TLV walk to the skb	Doruk Tan Ozturk
23 hours	nfc: digital: clamp SENSF_RES length to the destination buffer	Doruk Tan Ozturk
23 hours	tls: handle data disappearing from under the TLS ULP	Jakub Kicinski
23 hours	tls: fix lockless read of strp->msg_ready in ->poll	Sabrina Dubroca
23 hours	inet: frags: publish queues before arming timer	Zhiling Zou
23 hours	packet: synchronize pressure clearing with ring reconfiguration	Zihan Xi
23 hours	net/packet: convert po->pressure to an atomic flag	Eric Dumazet
23 hours	packet: use consistent hard_header_len in TX_RING send path	Qihang Tang
23 hours	packet: use consistent hard_header_len in non-ring send paths	Qihang Tang
23 hours	Bluetooth: RFCOMM: take rfcomm_mutex for the deferred setup accept	Ali Ahmet Memis
5 days	Bluetooth: mgmt: fix pending command UAF in EIR updates	Zihan Xi
5 days	Bluetooth: mgmt: fix locking in unpair_device/disconnect_sync	Pauli Virtanen
5 days	Bluetooth: hci_sync: call destroy in hci_cmd_sync_run if immediate	Pauli Virtanen
5 days	Bluetooth: hci_sock: Prevent race in socket write iter and sock bind	Edward Adam Davis
5 days	Bluetooth: hci_sync: Fix not using correct handle	Luiz Augusto von Dentz
5 days	net/x25: fix use-after-free of the socket by its timers	Baul Lee
5 days	net/sched: cls_u32: skip hash tables in u32_bind_class()	Zhang Changzhong
5 days	af_packet: Don't send zero-byte data in tpacket_snd().	Eric Dumazet
5 days	net/tls: Fail tls_sw_splice_read() after a failed async decrypt	Chuck Lever
5 days	net: packet: fix wrong transport_header when sending VLAN-tagged frame	Wei Fang
5 days	netfilter: ipset: let destroy callbacks adjust ext mem size	Florian Westphal
5 days	netfilter: ipset: fix list type element drift bug	Florian Westphal
5 days	netfilter: flowtable: publish GC-visible tuple last	Jérémy Jean
5 days	netfilter: nf_tables_offload: suppress WARN_ON_ONCE for ENOMEM in abort path	Alexey Velichayshiy
5 days	netfilter: ipset: fix refcount race between list:set GC and swap	Xiang Mei (Microsoft)
5 days	netfilter: nf_conntrack: defer invalid log until after unlock	Zihan Xi
5 days	netfilter: conntrack: sctp: use nf log infrastructure for invalid packets	Florian Westphal
5 days	net/sched: act_ct: fix sk_buff leak when the header checks reject a packet	Hyunjung Ko
5 days	openvswitch: move key and ovs_cb update out of handle_fragments	Xin Long
5 days	net: sched: use skb_ip_totlen and iph_totlen	Xin Long
5 days	openvswitch: use skb_ip_totlen in conntrack	Xin Long
5 days	net: pktgen: fix proc entry use-after-free	Chengfeng Ye
5 days	net: pktgen: fix code style (WARNING: Block comments)	Peter Seiderer