speakup: Fix sizeof() vs ARRAY_SIZE() bug

ecryptfs: Fix buffer size for tag 66 packet

net: sched: sch_multiq: fix possible OOB write in multiq_tune()

net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP

pinctrl: core: delete incorrect free in pinctrl_enable()

bna: ensure the copied buf is NUL terminated

tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().

net: gtp: Fix Use-After-Free in gtp_dellink

net: openvswitch: Fix Use-After-Free in ovs_ct_exit

init/main.c: Fix potential static_command_line memory overflow

Out-of-bounds read & write in RFC 3211 KEK Unwrap

libexpat in Expat before 2.7.2 allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing

Libxml: null pointer dereference leads to denial of service (dos)

Libexpat: expat: improper restriction of xml entity expansion depth in libexpat

net: ethernet: lantiq_etop: fix memory disclosure

Possible denial of service in X.509 name checks

An issue was discovered in libexpat before 2.6.3

Validating the order of the public keys in the Diffie-Hellman Key Agreement Protocol, when an approved safe prime is used, allows remote attackers (from the client side) to…

gzip integer overflow

net/dpaa2: Avoid explicit cpumask var allocation on stack

igb: Fix potential invalid memory access in igb_init_module()

netfilter: x_tables: fix LED ID check in led_tg_check()

security/keys: fix slab-out-of-bounds in key_task_permission

ppp: fix ppp_async_encode() illegal access

slip: make slhc_remember() more robust against malicious packets

of/irq: Prevent device address out-of-bounds read in interrupt map walk

net/iucv: Avoid explicit cpumask var allocation on stack

bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()

enic: Validate length of nl attributes in enic_set_vf_port

nfc: nci: Fix uninit-value in nci_rx_work

blk-iocost: avoid out of bounds shift

xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING

Busybox: busybox: arbitrary file modification and privilege escalation via unvalidated tar archive entries

Busybox: busybox: arbitrary file overwrite and potential code execution via incomplete path sanitization

eventfd double close

net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition

exec: Fix ToCToU between perm check and set-uid/gid usage

netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type

ipv6: sr: fix invalid unregister error path

netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()

wrong proxy connection reuse with credentials

OCSP stapling bypass with GnuTLS

ASN.1 date parser overread

netfilter: nft_payload: sanitize offset and length before calling skb_checksum()

Angular has XSS Vulnerability via Unsanitized SVG Script Attributes

pam_cap: Fix potential configuration parsing error

Out-of-bounds read in HTTP client no_proxy handling

An issue was discovered in libexpat before 2.6.4

Unbounded memory growth with session handling in TLSv1.3

A vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (All versions < V4.0)