HID: core: zero-initialize the report buffer

Race condition vulnerability in Linux kernel bluetooth in conn_info_{min,max}_age_set()

In the linux kernel, if IMA appraisal is used with the "ima_appraise=log" boot param, lockdown can be defeated with kexec on any machine when Secure Boot is disabled or…

bpf: Defer the free of inner map when necessary

Kernel: exfat: stack overflow in exfat_get_uniname_from_ext_entry

In verity_target of dm-verity-target.c, there is a possible way to modify read-only files due to a missing permission check

drivers/usb/mon/mon_bin.c in usbmon in the Linux kernel before 5.19.15 and 6.x before 6.0.1 allows a user-space client to corrupt the monitor's internal memory

Linux Kernel LoadPin bypass via dm-verity table reload

When sending malicous data to kernel by ioctl cmd FBIOPUT_VSCREENINFO,kernel will write memory out of bounds

Use-after-free in Linux kernel's netfilter: nf_tables component

A buffer overflow flaw was found in the Linux kernel Broadcom Full MAC Wi-Fi driver

A flaw was found in the Linux kernel in linux/net/netfilter/nf_tables_api.c of the netfilter subsystem

nfsd: return -EINVAL when namelen is 0

Information exposure through microarchitectural state after transient execution from some register files for some Intel(R) Atom(R) Processors may allow an authenticated user to…

POLY1305 MAC implementation corrupts vector registers on PowerPC

In ssh in OpenSSH before 9.6, OS command injection might occur if a user name or host name has shell metacharacters, and this name is referenced by an expansion token in certain…

NCurse v6.4-20230418 was discovered to contain a segmentation fault via the component _nc_wrap_entry()

Crash due to a null pointer dereference in the dn_nsp_send function

Info Leak in l2cap_core in the Linux Kernel

Linux Kernel nilfs2 inode.c nilfs_bmap_lookup_at_level null pointer dereference

media: pvrusb2: fix uaf in pvr2_context_set_notify

An issue was discovered in lib/kobject.c in the Linux kernel before 6.2.3

An out-of-bounds read flaw was found in the Linux kernel’s TeleTYpe subsystem

netfilter: nft_payload: sanitize offset and length before calling skb_checksum()

ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()

Kernel: netfilter: xtables sctp out-of-bounds read in match_flags()

Kernel: netfilter: xtables out-of-bounds read in u32_match_it()

Kernel: netfilter: nftables out-of-bounds read in nf_osf_match_one()

Excessive time spent checking invalid RSA public keys

Unbounded memory growth with session handling in TLSv1.3

Systemd-resolved: unsigned name response in signed zone is not refused when dnssec=yes

The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some…

Timing Oracle in RSA Decryption

Incorrect MAC key used in the RC4-MD5 ciphersuite

tcp: properly terminate timers for kernel sockets

A hash collision flaw was found in the IPv6 connection lookup table in the Linux kernel’s IPv6 functionality when a user makes a new kind of SYN flood attack

ASoC: wm_adsp: Fix NULL dereference when removing firmware controls

netfilter: nf_conntrack: destroy stale expectfn expectations on unregister

net: bonding: fix NULL pointer dereference in bond_do_ioctl()

agp/amd64: Fix broken error propagation in agp_amd64_probe()

netfilter: synproxy: add mutex to guard hook reference counting

6lowpan: fix off-by-one in multicast context address compression

ipv4: restrict IPOPT_SSRR and IPOPT_LSRR options

net/802/mrp: fix vector attribute parsing in mrp_pdu_parse_vecattr

tcp: restrict SO_ATTACH_FILTER to priv users

net: openvswitch: fix possible kfree_skb of ERR_PTR

netfilter: x_tables: avoid leaking percpu counter pointers

netfilter: nft_exthdr: fix register tracking for F_PRESENT flag

Bluetooth: L2CAP: reject BR/EDR signaling packets over MTUsig

vsock/vmci: fix sk_ack_backlog leak on failed handshake