linux-stable.git - Linux kernel stable tree

Age	Commit message (Expand)	Author
11 hours	inet: frags: strip GSO state from fragments before reassembly	Xinyang Ge
29 hours	Bluetooth: MGMT: reject HCI_CMD_SYNC params_len above 255	Ali Ahmet Memis
29 hours	Bluetooth: ISO: zero the sockaddr before returning it in getname	Ali Ahmet Memis
29 hours	Bluetooth: ISO: do not force BT_LISTEN after a failed BIG sync	Ali Ahmet Memis
29 hours	Bluetooth: hci_sync: Fix accept list UAF during suspend	Chengfeng Ye
29 hours	Bluetooth: hci_event: validate LE Set CIG Parameters response	Laxman Acharya Padhya
29 hours	Bluetooth: hci_event: fix LE list UAF on reset	Chengfeng Ye
29 hours	mptcp: pm: fix memory leak from alloc-during-teardown race	Shardul Bankar
29 hours	mptcp: pm: uniform announced addresses helpers	Matthieu Baerts (NGI0)
29 hours	mptcp: pm: rename add_entry structure to add_addr	Matthieu Baerts (NGI0)
29 hours	ipv6: fix use-after-free in ip6_finish_output2()	Luxiao Xu
29 hours	ipv4: reject undersized MTUs in ip_do_fragment()	Yong Wang
29 hours	nfc: nci: free destination parameters when closing a connection	Linmao Li
29 hours	nfc: nci: fix uninit-value in the RF discover/activated NTF handlers	Samuel Page
29 hours	nfc: nci: fix out-of-bounds write in nci_target_auto_activated()	Samuel Page
29 hours	nfc: nci: add data_len bound checks to activation parameter extractors	Bryam Vargas
29 hours	nfc: llcp: reject PDUs shorter than the LLCP header	Doruk Tan Ozturk
29 hours	nfc: llcp: fix OOB read and u8 offset wrap in TLV parsers	Muhammad Bilal
29 hours	nfc: llcp: bound the connect_sn TLV walk to the skb	Doruk Tan Ozturk
29 hours	nfc: digital: clamp SENSF_RES length to the destination buffer	Doruk Tan Ozturk
29 hours	Bluetooth: RFCOMM: take rfcomm_mutex for the deferred setup accept	Ali Ahmet Memis
5 days	l2tp: fix tunnel and session refcount leak on seq_file release	Eric Dumazet
5 days	net/sched: cls_bpf: reject dev-bound programs bound to a different device	Jamal Hadi Salim
5 days	net/sched: cls_u32: skip hash tables in u32_bind_class()	Zhang Changzhong
5 days	net/sched: act_api: fix TOCTOU NULL deref on a->goto_chain	Jamal Hadi Salim
5 days	af_packet: Don't send zero-byte data in tpacket_snd().	Eric Dumazet
5 days	net/tls: Fail tls_sw_splice_read() after a failed async decrypt	Chuck Lever
5 days	net: packet: fix wrong transport_header when sending VLAN-tagged frame	Wei Fang
5 days	tcp: fix icsk_ack.ato bitfield overflow	Jiayuan Chen
5 days	netfilter: ipset: let destroy callbacks adjust ext mem size	Florian Westphal
5 days	netfilter: ipset: fix list type element drift bug	Florian Westphal
5 days	netfilter: flowtable: publish GC-visible tuple last	Jérémy Jean
5 days	netfilter: nf_tables_offload: suppress WARN_ON_ONCE for ENOMEM in abort path	Alexey Velichayshiy
5 days	ipvs: revalidate ihl to prevent out-of-bounds access	Julian Anastasov
5 days	netfilter: ipset: fix refcount race between list:set GC and swap	Xiang Mei (Microsoft)
5 days	sctp: validate cookie AUTH state before use	Jérémy Jean
5 days	af_unix: Unlink scc_entry in unix_del_edge().	Kuniyuki Iwashima
5 days	net: expect instance lock in netdev_queue_get_dma_dev()	Jakub Kicinski
5 days	net: rename netdev_ops_assert_locked()	Jakub Kicinski
5 days	libceph: tolerate addrvecs with multiple entries of the same type	Kefu Chai
5 days	libceph: fix OOB read in decode_watchers() via missing bounds check	Pavitra Jha
5 days	libceph: Avoid using invalid osd indices from primary_temp	Raphael Zimmer
5 days	libceph: fix multiple unsafe decodes in decode_locker()	Pavitra Jha
5 days	mptcp: fastopen: only mark MPTFO subflows with SYN data	Wyatt Feng
5 days	mptcp: pm: fix data race in add_addr timer callback	Qing Luo
5 days	mptcp: options: reset DSS fields in case of unexpected size	Matthieu Baerts (NGI0)
5 days	mptcp: avoid combining some incoming suboptions	Matthieu Baerts (NGI0)
5 days	mptcp: reclaim forward-allocated memory on RX path errors	Paolo Abeni
9 days	sctp: clear new_transport when removing a peer	Qing Ming
9 days	sctp: fix use-after-free of cached ASCONF chunk	Yuxiang Yang