linux-stable.git - Linux kernel stable tree

Age	Commit message (Expand)	Author
31 hours	can: j1939: use netdevice_tracker for j1939_{priv,session,ecu} tracking	Tetsuo Handa
31 hours	can: j1939: transport: j1939_session_fresh_new(): initialize receive buffer	Oleksij Rempel
31 hours	can: isotp: fix timer drain order, wakeup handling and tx_gen ordering	Oliver Hartkopp
31 hours	net: openvswitch: fix skb leak on flow key update failure during ct	Ilya Maximets
31 hours	net: openvswitch: fix skb leak on flow key update failure during recirculation	Ilya Maximets
31 hours	net: openvswitch: fix potential UAF on meter attach failure	Ilya Maximets
31 hours	sctp: prevent peer transport count overflow	Asim Viladi Oglu Manizada
31 hours	sctp: reject stale cookies with mismatched verification tags	Yuxiang Yang
31 hours	veth: convert frag_list skbs before running XDP	Matt Fleming
31 hours	net: pktgen: fix proc entry use-after-free	Chengfeng Ye
31 hours	net: ipv6: clear suppressed fib6 rule result	Zhiling Zou
31 hours	net: bridge: stop fast-leave after deleting a port group	Zhiling Zou
31 hours	wifi: mac80211: fix tid_tx use-after-free on BA session stop	Zhao Li
31 hours	tipc: avoid use-after-free in poll trace queue dumps	Zihan Xi
31 hours	netfilter: ipset: do not update comments from kernel-side hash adds	David Lee
31 hours	net/smc: fix socket use-after-free during link group termination	Xuanqiang Luo
31 hours	ipvs: do not propagate one-packet flag to synced conns	Zhiling Zou
31 hours	fou: Fix use-after-free in fou_create()	Xuanqiang Luo
31 hours	bpf: lwt: Fix dst reference leak on reroute failure	Xuanqiang Luo
31 hours	Bluetooth: HIDP: validate numbered report payloads	Sangho Lee
31 hours	Bluetooth: HIDP: reject frames without a transaction header	Sangho Lee
31 hours	Bluetooth: hci_sync: Fix advertising data UAFs	Chengfeng Ye
31 hours	Bluetooth: mgmt: fix UAF in pair command cancellation	Zihan Xi
31 hours	Bluetooth: SCO: give the socket its own sco_conn reference	Aldo Ariel Panzardo
31 hours	Bluetooth: mgmt: fix pending command UAF in EIR updates	Zihan Xi
31 hours	sctp: validate Adaptation Indication parameter length	Charles Vosburgh
31 hours	ipv6: release fib6_null_entry on subtree failure	Shuangpeng Bai
31 hours	can: isotp: check register_netdevice_notifier() error in module init	Minhong He
31 hours	Bluetooth: hci_sync: remove unnecessary hci_conn_get in create_conn_sync	Pauli Virtanen
31 hours	Bluetooth: hci_sync: fix hci_conn_del() use in hci_le_create_conn_sync	Pauli Virtanen
31 hours	Bluetooth: hci_sync: hold conn in hci_past_sync() callback	Pauli Virtanen
31 hours	Bluetooth: hci_sync: hold conn in hci_connect_pa_sync() callback	Pauli Virtanen
31 hours	Bluetooth: hci_sync: hold conn in hci_connect_big_sync() callback	Pauli Virtanen
31 hours	Bluetooth: hci_sync: hold conn in hci_connect_acl/le_sync() callbacks	Pauli Virtanen
31 hours	Bluetooth: hci_conn: hold conn reference in abort_conn_sync()	Pauli Virtanen
31 hours	Bluetooth: ISO: fix race of kfree vs kref_get_unless_zero	Pauli Virtanen
31 hours	Bluetooth: ISO: fix refcounting of iso_conn	Pauli Virtanen
31 hours	Bluetooth: ISO: ensure no dangling hcon references in iso_conn	Pauli Virtanen
31 hours	Bluetooth: ISO: avoid deadlocks in iso_sock_timeout	Pauli Virtanen
31 hours	Bluetooth: ISO: fix leaking sk after socket release	Pauli Virtanen
31 hours	Bluetooth: ISO: hold sk properly in iso_conn_ready	Pauli Virtanen
31 hours	Bluetooth: ISO: validate sockaddr_iso first in iso_sock_rebind_bis()	Pauli Virtanen
31 hours	Bluetooth: ISO: fix timeout vs sync_timeout typo in check_bcast_qos	Pauli Virtanen
31 hours	Bluetooth: ISO: lock sk in iso_connect_ind	Pauli Virtanen
31 hours	Bluetooth: ISO: lock sk in iso_sock_getname	Pauli Virtanen
31 hours	Bluetooth: ISO: fix CONNECTED -> CLOSED transition on shutdown/release	Pauli Virtanen
31 hours	Bluetooth: L2CAP: fix UAF in l2cap_le_connect_rsp	Jiale Yao
31 hours	Bluetooth: ISO: clear iso_data always when detaching conn from hcon	Pauli Virtanen
31 hours	wifi: mac80211: validate individual TWT params before driver setup	Zhao Li
31 hours	net: udp_tunnel: fix memory leak in udp_tunnel_nic_unregister()	Eric Dumazet