wrong proxy connection reuse with credentials

BusyBox wget thru 1.3.7 accepted raw CR (0x0D)/LF (0x0A) and other C0 control bytes in the HTTP request-target (path/query), allowing the request line to be split and…

OCSP stapling bypass with GnuTLS

ASN.1 date parser overread

netfilter: nft_payload: sanitize offset and length before calling skb_checksum()

Angular has XSS Vulnerability via Unsanitized SVG Script Attributes

pam_cap: Fix potential configuration parsing error

Out-of-bounds read in HTTP client no_proxy handling

An issue was discovered in libexpat before 2.6.4

Unbounded memory growth with session handling in TLSv1.3

A vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (All versions < V4.0)

romfs: check sb_set_blocksize() return value

fbdev: smscufx: properly copy ioctl memory to kernelspace

smb: client: split cached_fid bitfields to avoid shared-byte RMW races

crypto: virtio - Add spinlock protection with virtqueue notification

smb: server: fix leak of active_num_conn in ksmbd_tcp_new_connection()

crypto: omap - Allocate OMAP_CRYPTO_FORCE_COPY scatterlists correctly

ksmbd: fix infinite loop caused by next_smb2_rcv_hdr_off reset in error paths

dmaengine: qcom: gpi: Fix memory leak in gpi_peripheral_config()

dmaengine: at_hdmac: fix device leak on of_dma_xlate()

dmaengine: bcm-sba-raid: fix device leak on probe

dmaengine: dw: dmamux: fix OF node leak on route allocation failure

dmaengine: lpc18xx-dmamux: fix device leak on route allocation

dmaengine: stm32: dmamux: fix device leak on route allocation

dmaengine: ti: dma-crossbar: fix device leak on am335x route allocation

net: sock: fix hardened usercopy panic in sock_recv_errqueue

net/sched: sch_qfq: Fix NULL deref when deactivating inactive aggregate in qfq_reset

devlink: rate: Unset parent pointer in devl_rate_nodes_destroy

In libexpat through 2.7.3, a crafted file with an approximate size of 2 MiB can lead to dozens of seconds of processing time

do_change_type(): refuse to operate on unmounted/not ours mounts

fs/proc: fix softlockup in __read_vmcore (part 2)

bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again

quota: flush quota_release_work upon quota writeback

net/sched: netem: account for backlog updates from child qdisc

net/ipv6: release expired exception dst cached in socket

ftrace: Fix regression with module command in stack_trace_filter

fs: Fix uninitialized value issue in from_kuid and from_kgid

sctp: properly validate chunk size in sctp_sf_ootb()

net: phy: dp83869: fix memory corruption when enabling fiber

RDMA/mad: Improve handling of timed out WRs of mad agent

NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()

netfilter: br_netfilter: fix panic with metadata_dst skb

igb: Do not bring the device up after non-fatal error

net/sched: accept TCA_STAB only for root qdisc

ext4: dax: fix overflowing extents beyond inode size when partially writing

net/mlx5: Fix error path in multi-packet WQE transmit

net: stmmac: Fix zero-division error when disabling tc cbs

ACPI: battery: Fix possible crash when unregistering a battery hook

netfilter: nf_tables: prevent nf_skb_duplicated corruption

net: avoid potential underflow in qdisc_pkt_len_init() with UFO