btrfs: fix information leak in btrfs_ioctl_logical_to_ino()

Squashfs: check the inode number is not the invalid value of zero

Kernel: out-of-bounds read vulnerability in smbcalcsize

An out of bounds (OOB) memory access flaw was found in the Linux kernel in relay_file_read_start_pos in kernel/relay.c in the relayfs

A use-after-free flaw was found in r592_remove in drivers/memstick/host/r592.c in media access in the Linux Kernel

A use-after-free flaw was found in nfsd4_ssc_setup_dul in fs/nfsd/nfs4proc.c in the NFS filesystem in the Linux Kernel

In the Linux kernel 6.0.8, there is an out-of-bounds read in ntfs_attr_find in fs/ntfs/attrib.c

An issue was discovered in the Linux kernel before 6.0.11

Linux Kernel Bluetooth l2cap_core.c l2cap_reassemble_sdu use after free

An out-of-bounds (OOB) memory write flaw was found in the NFSD in the Linux kernel

pfifo_tail_enqueue: Drop new packet when sch->limit == 0

blk-cgroup: Fix UAF in blkcg_unpin_online()

jfs: Fix uaf in dbFreeBits

net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition

exec: Fix ToCToU between perm check and set-uid/gid usage

netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type

ipv6: sr: fix invalid unregister error path

gpiolib: cdev: Fix use after free in lineinfo_changed_notify

netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()

netfilter: nf_tables: use timestamp to check for set element timeout

netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()

crypto: qat - resolve race condition during AER recovery

mm: swap: fix race between free_swap_and_cache() and swapoff()

RDMA/srpt: Do not register event handler until srpt device is fully setup

io_uring UAF, Unix SCM garbage collection

OpenSSH through 10.0, when common types of DRAM are used, might allow row hammer attacks (for authentication bypass) because the integer value of authenticated in…

Use-after-free in Linux kernel's ipv4: igmp component

Out-of-bounds write in Linux kernel's Performance Events system component

An issue was discovered in the Linux kernel through 6.3.8

In the Linux kernel, pick_next_rt_entity() may return a type confused entry, not detected by the BUG_ON condition, as the confused entry will not be NULL, but list_head.The buggy…

Linux Kernel IPsec idt77252.c tst_timer use after free

Linux Kernel BPF inode.c nilfs_new_inode use after free

In emulation_proc_handler of armv8_deprecated.c, there is a possible way to corrupt memory due to a race condition

mm/mremap.c in the Linux kernel before 5.13.3 has a use-after-free via a stale TLB because an rmap lock is not held during a PUD move

A race condition was found in the Linux kernel's IP framework for transforming packets (XFRM subsystem) when multiple calls to xfrm_probe_algs occurred simultaneously

A race condition was found in the Linux kernel's watch queue due to a missing lock in pipe_resize_ring()