smb: client: require a full NFS mode SID before reading mode bits

udp: clear skb->dev before running a sockmap verdict

mptcp: allow subflow rcv wnd to shrink

fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling

sctp: stream: fully roll back denied add-stream state

flow_dissector: do not dissect PPPoE PFC frames

nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free

ipmi: Add limits to event and receive message requests

isofs: validate block number from NFS file handle in isofs_export_iget

net: stmmac: Prevent NULL deref when RX memory exhausted

net: strparser: fix skb_head leak in strp_abort_strp()

ipv4: icmp: fix null-ptr-deref in icmp_build_probe()

smb: server: fix active_num_conn leak on transport allocation failure

rxrpc: only handle RESPONSE during service challenge

ksmbd: validate EaNameLength in smb2_get_ea()

Possible NULL Dereference When Processing CMS KeyTransportRecipientInfo

Possible NULL Dereference When Processing CMS KeyAgreeRecipientInfo

NULL Pointer Dereference When Processing a Delta CRL

NULL Pointer Dereference in PKCS12_item_decrypt_d2i_ex function

Missing ASN1_TYPE validation in TS_RESP_verify_response() function

netfilter: nft_ct: add seqadj extension for natted connections

Out-of-bounds read & write in RFC 3211 KEK Unwrap

net: ethernet: lantiq_etop: fix memory disclosure

Validating the order of the public keys in the Diffie-Hellman Key Agreement Protocol, when an approved safe prime is used, allows remote attackers (from the client side) to…

M2crypto: bleichenbacher timing attacks in the rsa decryption api - incomplete fix for cve-2020-25657

An issue was discovered in libxml2 before 2.11.7 and 2.12.x before 2.12.5

Gnutls: rejects certificate chain with distributed trust

Gnutls: incomplete fix for cve-2023-5981

An issue was discovered in drivers/net/ethernet/intel/igb/igb_main.c in the IGB driver in the Linux kernel before 6.5.3

Excessive Resource Usage Verifying X.509 Policy Constraints

Double free after calling PEM_read_bio_ex

Use-after-free following BIO_new_NDEF

The Linux kernel NFSD implementation prior to versions 5.19.17 and 6.0.2 are vulnerable to buffer overflow

nfqnl_mangle in net/netfilter/nfnetlink_queue.c in the Linux kernel through 5.18.14 allows remote attackers to cause a denial of service (panic) because, in the case of an…

Resource leakage when decoding certificates and keys

fs/nfsd/trace.h in the Linux kernel before 5.13.4 might allow remote attackers to cause a denial of service (out-of-bounds read in strlen) by sending NFS traffic when the trace…

tap: free page on error paths in tap_get_user_xdp()

ksmbd: Compare MACs in constant time

Out of bounds write in PKCS12_get_friendlyname() UTF-8 conversion

X.400 address type confusion in X.509 GeneralName

net/dpaa2: Avoid explicit cpumask var allocation on stack

netfilter: nf_tables: flush pending destroy work before exit_net release

erspan: make sure erspan_base_hdr is present in skb->head

SQLite SQLite3 make alltest sqlite3session.c sessionReadRecord heap-based overflow

The c_rehash script allows command injection

The c_rehash script allows command injection

Bluetooth: MGMT: validate advertising TLV before type checks

Bluetooth: bnep: reject short frames before parsing

thunderbolt: Bound root directory content to block size

thunderbolt: Limit XDomain response copy to actual frame size