In the Linux kernel, the following vulnerability has been resolved: xfrm: ipcomp: Free destination pages on acomp errors Move the out_free_req label up by a couple of lines so that the allocated dst SG list gets freed on error as well as success.
https://git.kernel.org/stable/c/dc6dcba80d72a27ab61831ad3d253316e0c9b9d5
https://git.kernel.org/stable/c/b30aa173c3809f6af4c83a86099be1be19aa48eb
https://git.kernel.org/stable/c/7dbac7680eb629b3b4dc7e98c34f943b8814c0c8