🛡️ LSN-0113-1 — linux

Kernel Live Patch Security Notice

In the Linux kernel, the following vulnerability has been

resolved: smb: client: fix UAF in async decryption Doing an async

decryption (large read) crashes with a slab-use-after-free way down in the

crypto API.

In the Linux kernel, the following vulnerability has been

resolved: ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit

After an insertion in TNC, the tree might split and cause a node to change

its znode->parent.

In the Linux kernel, the following vulnerability has been

resolved: drm/amdgpu: fix usage slab after free

In the Linux kernel, the following vulnerability has been

resolved: jfs: fix array-index-out-of-bounds in jfs_readdir The stbl might

contain some invalid values.

In the Linux kernel, the following vulnerability has been

resolved: drm/amd/display: Fix out-of-bounds access in

'dcn21_link_encoder_create' An issue was identified in the

dcn21_link_encoder_create function where an out-of-bounds access could

occur when the hpd_source index was used to reference the link_enc_hpd_regs

array.

In the Linux kernel, the following vulnerability has been

resolved: jffs2: Prevent rtime decompress memory corruption The rtime

decompression routine does not fully check bounds during the entirety of

the decompression pass and can corrupt memory outside the decompression

buffer if the compressed data is corrupted.