GNU Binutils objdump debug.c debug_type_samep memory corruption

GNU Binutils ld elflink.c elf_gc_sweep memory corruption

vhost-scsi: Fix handling of multiple calls to vhost_scsi_set_endpoint

netfilter: nft_tunnel: fix geneve_opt type confusion addition

proc: fix UAF in proc_get_inode()

sched/fair: Fix potential memory corruption in child_cfs_rq_on_list

ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up

bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type()

netfilter: allow exp not to be removed in nf_ct_find_expectation

io_uring: prevent opcode speculation

drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()

ndisc: use RCU protection in ndisc_alloc_skb()

vsock: Keep the binding until socket destruction

scsi: ufs: bsg: Set bsg_queue to NULL after removal

nbd: don't allow reconnect after disconnect

iommufd/iova_bitmap: Fix shift-out-of-bounds in iova_bitmap_offset_to_index()

pps: Fix a use-after-free

topology: Keep the cpumask unchanged when printing cpumap

scsi: sg: Fix slab-use-after-free read in sg_release()

af_packet: avoid erroring out after sock_init_data() in packet_create()

net: inet: do not leave a dangling sk pointer in inet_create()

net: inet6: do not leave a dangling sk pointer in inet6_create()

ovl: Filter invalid inodes with missing lookup function

block: fix uaf for flush rq while iterating tags

block, bfq: fix bfqq uaf in bfq_limit_depth()

sh: intc: Fix use-after-free bug in register_intc_controller()

net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT

bpf: Fix out-of-bounds write in trie_get_next_key()

fs/ntfs3: Add rough attr alloc_size check

bpf: Prevent tail call between progs attached to different hooks

aoe: fix the potential use-after-free problem in more places

ext4: fix slab-use-after-free in ext4_split_extent_at()

ext4: avoid OOB when system.data xattr changes underneath the filesystem

fscache: delete fscache_cookie_lru_timer when fscache exits to avoid UAF

net: ethernet: lantiq_etop: fix double free in detach

scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory

bna: ensure the copied buf is NUL terminated

tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().

netfilter: nf_tables: do not compare internal table flags on updates

s390/zcrypt: fix reference counting on zcrypt card objects

aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts

ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()

crypto: scomp - fix req->dst buffer overflow

EDAC/thunderx: Fix possible out-of-bounds string access

f2fs: fix to avoid dirent corruption

Glibc: heap-based buffer overflow in __vsyslog_internal()

Use-after-free in Linux kernel's netfilter: nf_tables component

Out-of-bounds write in Linux kernel's Linux Kernel Performance Events (perf) component

The Linux kernel before 6.5.4 has an es1 use-after-free in fs/ext4/extents_status.c, related to ext4_es_insert_extent

Linux: buffer overrun in netback due to unusual packet