ppp: fix ppp_async_encode() illegal access

slip: make slhc_remember() more robust against malicious packets

jfs: Fix uninit-value access of new_ea in ea_buffer

jfs: fix out-of-bounds in dbNextAG() and diAlloc()

fou: fix initialization of grc

net: dpaa: Pad packets to ETH_ZLEN

of/irq: Prevent device address out-of-bounds read in interrupt map walk

kobject_uevent: Fix OOB access within zap_modalias_env()

net/iucv: Avoid explicit cpumask var allocation on stack

NFSD: Fix the behavior of READ near OFFSET_MAX

scsi: qedi: Fix crash while reading debugfs attribute

enic: Validate length of nl attributes in enic_set_vf_port

soundwire: cadence: fix invalid PDI offset

nfc: nci: Fix uninit-value in nci_rx_work

jffs2: prevent xattr node from overflowing the eraseblock

scsi: bfa: Ensure the copied buf is NUL terminated

blk-iocost: avoid out of bounds shift

xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING

Bluetooth: SCO: Fix not validating setsockopt user input

Bluetooth: RFCOMM: Fix not validating setsockopt user input

Bluetooth: L2CAP: Fix not validating setsockopt user input

netfilter: validate user input for expected length

btrfs: fix information leak in btrfs_ioctl_logical_to_ino()

Squashfs: check the inode number is not the invalid value of zero

Kernel: out-of-bounds read vulnerability in smbcalcsize

An out of bounds (OOB) memory access flaw was found in the Linux kernel in relay_file_read_start_pos in kernel/relay.c in the relayfs

A use-after-free flaw was found in r592_remove in drivers/memstick/host/r592.c in media access in the Linux Kernel

A use-after-free flaw was found in nfsd4_ssc_setup_dul in fs/nfsd/nfs4proc.c in the NFS filesystem in the Linux Kernel

In the Linux kernel 6.0.8, there is an out-of-bounds read in ntfs_attr_find in fs/ntfs/attrib.c

An issue was discovered in the Linux kernel before 6.0.11

Linux Kernel Bluetooth l2cap_core.c l2cap_reassemble_sdu use after free

An out-of-bounds (OOB) memory write flaw was found in the NFSD in the Linux kernel

pfifo_tail_enqueue: Drop new packet when sch->limit == 0

blk-cgroup: Fix UAF in blkcg_unpin_online()

jfs: Fix uaf in dbFreeBits

net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition

exec: Fix ToCToU between perm check and set-uid/gid usage

netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type

ipv6: sr: fix invalid unregister error path

gpiolib: cdev: Fix use after free in lineinfo_changed_notify

netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()

netfilter: nf_tables: use timestamp to check for set element timeout

netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()

crypto: qat - resolve race condition during AER recovery

mm: swap: fix race between free_swap_and_cache() and swapoff()

RDMA/srpt: Do not register event handler until srpt device is fully setup

io_uring UAF, Unix SCM garbage collection

OpenSSH through 10.0, when common types of DRAM are used, might allow row hammer attacks (for authentication bypass) because the integer value of authenticated in…

Use-after-free in Linux kernel's ipv4: igmp component

Out-of-bounds write in Linux kernel's Performance Events system component