Linux 7.1.13 (stable) delivered a broad round of bug fixes across USB, ALSA, networking, filesystems, KVM, and cryptographic subsystems, with particular emphasis on hardening against memory-safety issues such as use-after-free, out-of-bounds reads/writes, and stale pointer dereferences. Notable security-relevant fixes include a use-after-free in usbdev_release(), an out-of-bounds write in ALSA's snd_usbmidi_novation_output(), a slab out-of-bounds read in the USB serial "option" driver's interrupt URB callback, and multiple xfrm/TCP-AO use-after-free and key-leak fixes affecting network security state handling. The crypto subsystem saw several corrections, including removal of unsafe/deprecated qce algorithms, a CCM AAD buffer underallocation fix, and safer key buffer clearing via kfree_sensitive(). Additional important work touched SELinux policy parsing hardening, ext4 WRITE_ZEROES correctness and journaling safety, KVM SEV/VMSA handling, and RDMA rxe responder QP fixes, reflecting a stability- and security-focused maintenance release.
Betroffene Bereiche
Bereich
Commits
crypto
10
usb
8
KVM
7
xfrm
6
ext4
6
selinux
5
USB
3
ALSA
3
Änderungen (76)
usb: usbfs: fix use-after-free of usb_device in usbdev_release()
wifi: mt76: mt7925: ensure tx headroom in usb_sdio_tx_prepare_skb
USB: c67x00: fix use-after-free in c67x00_add_iso_urb()
USB: serial: spcp8x5: drop broken carrier detect support