Linux Kernel any version

scsi: target: pscsi: Fix bio_put() for error case

RDMA/rtrs: Ensure 'ib_sge list' is accessible

tcp: Fix use-after-free of nreq in reqsk_timer_handler().

smb: client: fix potential UAF in smb2_is_valid_oplock_break()

net: rswitch: Avoid use-after-free in rswitch_poll()

crypto: hisilicon/sec2 - prevent req used-after-free for sec

net/mlx5e: Fix use-after-free in mlx5e_tx_reporter_timeout_recover

crypto: krb5 - filter out async aead implementations at alloc

skbuff: fix coalescing for page_pool fragment recycling

igc: avoid returning frame twice in XDP_REDIRECT

net/smc: check smcd_v2_ext_offset when receiving proposal msg

bnxt_en: Fix receive ring space parameters when XDP is active

NVIDIA NeMo Framework contains a vulnerability where an attacker could cause an improper limitation of a pathname to a restricted directory by an arbitrary file write. A successful exploit of this vulnerability might lead to code execution and data tampering.

ksmbd: fix slab-use-after-free in smb3_preauth_hash_rsp

Use of Default Password

Unvalidated File Upload vulnerability in ArcGIS Server.

netfilter: nf_conntrack_sip: don't use simple_strtoul

smb: client: fix UAF in smb2_reconnect_server()

nvme: fix SRCU protection of nvme_ns_head list

can: j1939: fix Use-after-Free, hold skb ref while in use

ionic: fix kernel panic in XDP_TX action

RDMA/srp: Do not call scsi_done() from srp_abort()

net/smc: fix LGR and link use-after-free issue

hv_netvsc: Don't free decrypted memory

tcp: do not accept ACK of bytes we never sent

Sensitive information disclosure and manipulation due to improper authentication. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186.

PostgreSQL Upgrade from v10 to v17.4 in AxxonSoft Axxon One (C-Werk) 2.0.8 and earlier to Address Multiple Vulnerabilities

ksmbd: fix integer overflows on 32 bit systems

smb: client: fix double put of @cfile in smb2_rename_path()

smb: client: fix use-after-free of signing key

crypto: safexcel - Add error handling for dma_map_sg() calls

net: lantiq: fix memory corruption in RX ring

ch_ktls: Fix kernel panic

net/smc: fix wrong list_del in smc_lgr_cleanup_early

net: mana: Fix race on per-CQ variable napi work_done

RDMA/siw: Add sendpage_ok() check to disable MSG_SPLICE_PAGES

nvmet: fix a use-after-free

sunrpc: fix handling of server side tls alerts

tls: fix race between tx work scheduling and socket close

mptcp: pm: ADD_ADDR rtx: fix potential data-race