Linux Kernel

NVIDIA NeMo Framework contains a vulnerability where an attacker could cause an improper limitation of a pathname to a restricted directory by an arbitrary file write. A successful exploit of this vulnerability might lead to code execution and data tampering.

ksmbd: fix slab-use-after-free in smb3_preauth_hash_rsp

Use of Default Password

bnxt_en: Fix receive ring space parameters when XDP is active

Unvalidated File Upload vulnerability in ArcGIS Server.

smb: client: fix UAF in smb2_reconnect_server()

netfilter: nf_conntrack_sip: don't use simple_strtoul

nvme: fix SRCU protection of nvme_ns_head list

net/smc: fix LGR and link use-after-free issue

can: j1939: fix Use-after-Free, hold skb ref while in use

ionic: fix kernel panic in XDP_TX action

RDMA/srp: Do not call scsi_done() from srp_abort()

hv_netvsc: Don't free decrypted memory

tcp: do not accept ACK of bytes we never sent

Sensitive information disclosure and manipulation due to improper authentication. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186.

PostgreSQL Upgrade from v10 to v17.4 in AxxonSoft Axxon One (C-Werk) 2.0.8 and earlier to Address Multiple Vulnerabilities

ksmbd: fix integer overflows on 32 bit systems

smb: client: fix double put of @cfile in smb2_rename_path()

smb: client: fix use-after-free of signing key

crypto: safexcel - Add error handling for dma_map_sg() calls

net: lantiq: fix memory corruption in RX ring

net/smc: fix wrong list_del in smc_lgr_cleanup_early

ch_ktls: Fix kernel panic

net: mana: Fix race on per-CQ variable napi work_done

RDMA/siw: Add sendpage_ok() check to disable MSG_SPLICE_PAGES

sunrpc: fix handling of server side tls alerts

nvmet: fix a use-after-free

tls: fix race between tx work scheduling and socket close

nvmet-tcp: fix race between ICReq handling and queue teardown

mptcp: pm: ADD_ADDR rtx: fix potential data-race

batman-adv: tt: fix TOCTOU race for reported vlans

NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause an authentication bypass. A successful exploit of this vulnerability might lead to escalation of privileges, denial of service, or information disclosure.

nfsd: fix heap overflow in NFSv4.0 LOCK replay cache

NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()

NVIDIA NeMo Framework for all platforms contains a vulnerability where a user could cause a deserialization of untrusted data by remote code execution. A successful exploit of this vulnerability might lead to code execution and data tampering.

NVIDIA NVFlare Dashboard contains a vulnerability in the user management and authentication system where an unauthenticated attacker may cause authorization bypass through user-controlled key. A successful exploit of this vulnerability may lead to privilege escalation, data tampering, information disclosure, code execution, and denial of service.

gfs2: add some missing log locking

net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink

smb: client: Fix use-after-free of network namespace.

net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock()