An issue was discovered in the Linux kernel through 6.3.8

In the Linux kernel, pick_next_rt_entity() may return a type confused entry, not detected by the BUG_ON condition, as the confused entry will not be NULL, but list_head.The buggy…

Linux Kernel IPsec idt77252.c tst_timer use after free

Linux Kernel BPF inode.c nilfs_new_inode use after free

In emulation_proc_handler of armv8_deprecated.c, there is a possible way to corrupt memory due to a race condition

mm/mremap.c in the Linux kernel before 5.13.3 has a use-after-free via a stale TLB because an rmap lock is not held during a PUD move

A race condition was found in the Linux kernel's IP framework for transforming packets (XFRM subsystem) when multiple calls to xfrm_probe_algs occurred simultaneously

A race condition was found in the Linux kernel's watch queue due to a missing lock in pipe_resize_ring()

Race condition vulnerability in Linux kernel bluetooth in conn_info_{min,max}_age_set()

In the linux kernel, if IMA appraisal is used with the "ima_appraise=log" boot param, lockdown can be defeated with kexec on any machine when Secure Boot is disabled or…

bpf: Defer the free of inner map when necessary

Kernel: exfat: stack overflow in exfat_get_uniname_from_ext_entry

In verity_target of dm-verity-target.c, there is a possible way to modify read-only files due to a missing permission check

drivers/usb/mon/mon_bin.c in usbmon in the Linux kernel before 5.19.15 and 6.x before 6.0.1 allows a user-space client to corrupt the monitor's internal memory

Linux Kernel LoadPin bypass via dm-verity table reload

When sending malicous data to kernel by ioctl cmd FBIOPUT_VSCREENINFO,kernel will write memory out of bounds

Use-after-free in Linux kernel's netfilter: nf_tables component

A buffer overflow flaw was found in the Linux kernel Broadcom Full MAC Wi-Fi driver

A flaw was found in the Linux kernel in linux/net/netfilter/nf_tables_api.c of the netfilter subsystem

nfsd: return -EINVAL when namelen is 0

Information exposure through microarchitectural state after transient execution from some register files for some Intel(R) Atom(R) Processors may allow an authenticated user to…

POLY1305 MAC implementation corrupts vector registers on PowerPC

In ssh in OpenSSH before 9.6, OS command injection might occur if a user name or host name has shell metacharacters, and this name is referenced by an expansion token in certain…

NCurse v6.4-20230418 was discovered to contain a segmentation fault via the component _nc_wrap_entry()

Crash due to a null pointer dereference in the dn_nsp_send function

Info Leak in l2cap_core in the Linux Kernel

Linux Kernel nilfs2 inode.c nilfs_bmap_lookup_at_level null pointer dereference

media: pvrusb2: fix uaf in pvr2_context_set_notify

An issue was discovered in lib/kobject.c in the Linux kernel before 6.2.3

An out-of-bounds read flaw was found in the Linux kernel’s TeleTYpe subsystem

netfilter: nft_payload: sanitize offset and length before calling skb_checksum()

ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()

Kernel: netfilter: xtables sctp out-of-bounds read in match_flags()

Kernel: netfilter: xtables out-of-bounds read in u32_match_it()

Kernel: netfilter: nftables out-of-bounds read in nf_osf_match_one()

Excessive time spent checking invalid RSA public keys

Unbounded memory growth with session handling in TLSv1.3

Systemd-resolved: unsigned name response in signed zone is not refused when dnssec=yes

The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some…

Timing Oracle in RSA Decryption

Incorrect MAC key used in the RC4-MD5 ciphersuite

tcp: properly terminate timers for kernel sockets

A hash collision flaw was found in the IPv6 connection lookup table in the Linux kernel’s IPv6 functionality when a user makes a new kind of SYN flood attack

ASoC: wm_adsp: Fix NULL dereference when removing firmware controls

netfilter: nf_conntrack: destroy stale expectfn expectations on unregister

net: bonding: fix NULL pointer dereference in bond_do_ioctl()

agp/amd64: Fix broken error propagation in agp_amd64_probe()

netfilter: synproxy: add mutex to guard hook reference counting

6lowpan: fix off-by-one in multicast context address compression

ipv4: restrict IPOPT_SSRR and IPOPT_LSRR options