commit b7baaa945c7f24984f4829e43a919fa209ac019d Author: Greg Kroah-Hartman Date: Tue Aug 22 12:09:35 2006 -0700 Linux 2.6.17.10 commit 4bf7989b2326fecad1181985f5fa9860d50fb89f Author: Oleg Nesterov Date: Tue Aug 22 21:22:13 2006 +0400 elv_unregister: fix possible crash on module unload An exiting task or process which didn't do I/O yet have no io context, elv_unregister() should check it is not NULL. Signed-off-by: Oleg Nesterov Acked-by: Jens Axboe Signed-off-by: Greg Kroah-Hartman commit 7127be29378b1230eb8dd8b84f18d6b69c56e959 Author: Jan Kara Date: Tue Aug 15 13:56:26 2006 +0200 Fix possible UDF deadlock and memory corruption (CVE-2006-4145) UDF code is not really ready to handle extents larger that 1GB. This is the easy way to forbid creating those. Also truncation code did not count with the case when there are no extents in the file and we are extending the file. Signed-off-by: Jan Kara Signed-off-by: Greg Kroah-Hartman commit 96ec9da385cf72c5f775e5f163420ea92e66ded2 Author: Sridhar Samudrala Date: Tue Aug 22 11:50:39 2006 -0700 Fix sctp privilege elevation (CVE-2006-3745) sctp_make_abort_user() now takes the msg_len along with the msg so that we don't have to recalculate the bytes in iovec. It also uses memcpy_fromiovec() so that we don't go beyond the length allocated. It is good to have this fix even if verify_iovec() is fixed to return error on overflow. Signed-off-by: Sridhar Samudrala Signed-off-by: Greg Kroah-Hartman