An issue was discovered in drivers/net/ethernet/intel/igb/igb_main.c in the IGB driver in the Linux kernel before 6.5.3

Excessive Resource Usage Verifying X.509 Policy Constraints

Double free after calling PEM_read_bio_ex

Use-after-free following BIO_new_NDEF

The Linux kernel NFSD implementation prior to versions 5.19.17 and 6.0.2 are vulnerable to buffer overflow

nfqnl_mangle in net/netfilter/nfnetlink_queue.c in the Linux kernel through 5.18.14 allows remote attackers to cause a denial of service (panic) because, in the case of an…

Resource leakage when decoding certificates and keys

fs/nfsd/trace.h in the Linux kernel before 5.13.4 might allow remote attackers to cause a denial of service (out-of-bounds read in strlen) by sending NFS traffic when the trace…

tap: free page on error paths in tap_get_user_xdp()

ksmbd: Compare MACs in constant time

Out of bounds write in PKCS12_get_friendlyname() UTF-8 conversion

X.400 address type confusion in X.509 GeneralName

net/dpaa2: Avoid explicit cpumask var allocation on stack

netfilter: nf_tables: flush pending destroy work before exit_net release

erspan: make sure erspan_base_hdr is present in skb->head

SQLite SQLite3 make alltest sqlite3session.c sessionReadRecord heap-based overflow

The c_rehash script allows command injection

The c_rehash script allows command injection

Bluetooth: MGMT: validate advertising TLV before type checks

Bluetooth: bnep: reject short frames before parsing

thunderbolt: Bound root directory content to block size

thunderbolt: Limit XDomain response copy to actual frame size

netfilter: nf_log: validate MAC header was set before dumping it

sctp: diag: reject stale associations in dump_one path

tun: free page on build_skb failure in tun_xdp_one()

tun: free page on short-frame rejection in tun_xdp_one()

smb: client: reject userspace cifs.spnego descriptions

fbcon: Avoid OOB font access if console rotation fails

mtd: spi-nor: debugfs: fix out-of-bounds read in spi_nor_params_show()

fanotify: fix false positive on permission events

scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show()

md/raid5: validate payload size before accessing journal metadata

ibmasm: fix heap over-read in ibmasm_send_i2o_message()

crypto: authencesn - reject short ahash digests during instance creation

misc: ibmasm: fix OOB MMIO read in ibmasm_handle_mouse_interrupt()

wifi: mac80211: check tdls flag in ieee80211_tdls_oper

crypto: ccp: Don't attempt to copy CSR to userspace if PSP command failed

crypto: ccp: Don't attempt to copy PDH cert to userspace if PSP command failed

crypto: ccp: Don't attempt to copy ID to userspace if PSP command failed

netfilter: conntrack: add missing netlink policy validations

nfnetlink_osf: validate individual option lengths in fingerprints

Squashfs: check metadata block offset is within range

ALSA: usb-audio: Use correct version for UAC3 header validation

wifi: mt76: Fix possible oob access in mt76_connac2_mac_write_txwi_80211()

net/sched: cls_u32: use skb_header_pointer_careful()

wifi: brcmsmac: add gain range check to wlc_phy_iqcal_gainparams_nphy()

ipmr: do not call mr_mfc_uses_dev() for unres entries

dm array: fix releasing a faulty array block twice in dm_array_cursor_end

sched: sch_cake: add bounds checks to host bulk flow fairness counts

security/keys: fix slab-out-of-bounds in key_task_permission