Linux Kernel any version

IBM Security Guardium 11.2 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 196279.

Vasion Print (formerly PrinterLogic) Usage of Outdated and Unsupported OpenSSL Version

SUNRPC: fix some memleaks in gssx_dec_option_array

inet: fully convert sk->sk_rx_dst to RCU rules

Adobe Campaign Classic (ACC) | Incorrect Authorization (CWE-863)

SQL Injection in Nefteprodukttekhnika BUK TS-G Allows Remote Code Execution

nvme-rdma: fix possible use-after-free in transport error_recovery work

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5, 6.1.0.0 through 6.1.0.4, and 6.1.1.0 through 6.1.1.1 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 215888.

Memory exhaustion in LZ4 decompression in UniRPC daemon

Spectrum command injection in NCM service

of: module: add buffer overflow check in of_modalias()

NVIDIA Dynamo for Linux contains a vulnerability in the multimodal serving topology, where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure.

IBM QRadar SIEM 7.3, 7.4, and 7.5 in some situations may not automatically log users out after they exceede their idle timeout. IBM X-Force ID: 208341.

Maxboard SQL injection and LFI vulnerability

tipc: force a dst refcount before doing decryption

ipv6: prevent possible UAF in ip6_xmit()

ila: block BH in ila_output()

RDMA/iwcm: Fix a use-after-free related to destroying CM IDs

net/x25: Fix potential double free of skb

net: stmmac: fix integer underflow in chain mode

dlm: fix plock invalid read

tcp: fix page frag corruption on page fault

ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data()

IBM HTTP Server is affected by multiple vulnerabilities

NFSD: Fix READDIR buffer overflow

sctp: purge outqueue on stale COOKIE-ECHO handling

ip6_tunnel: clear skb2->cb[] in ip4ip6_err()

mptcp: fix slab-use-after-free in __inet_lookup_established

netfilter: conntrack: re-fetch conntrack after insertion

RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt

ksmbd: validate payload size in ipc response

seg6: separate dst_cache for input and output paths in seg6 lwtunnel

vmxnet3: disable rx data ring on dma allocation failure

nvme: fix a possible use-after-free in controller reset during load

atm: idt77252: prevent use after free in dequeue_rx()

slip: make slhc_remember() more robust against malicious packets

net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send

nfsd: fix use-after-free due to delegation race

Remote Code Execution

net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ