MGASA-2021-0419

This kernel-linus update is based on upstream 5.10.62 and fixes at least the following security issues:

Specifically timed and handcrafted traffic can cause internal errors in a WLAN device that lead to improper layer 2 Wi-Fi encryption with a consequent possibility of information disclosure over the air for a discrete set of traffic in ath9k (CVE-2020-3702).

A process with CAPSYSADMIN can cause a kernel NULL pointer dereference in btrfs code (CVE-2021-3739).

there is an out-of-bound read bug in qrtrendpointpost in net/qrtr/qrtr.c (CVE-2021-3743).

An out-of-bounds read due to a race condition has been found in the Linux kernel due to write access to vcmode is not protected by a lock in vtioctl (KDSETMDE) (CVE-2021-3753).

For other upstream fixes, see the referenced changelogs.