Linux Kernel any version

MSP360 Backup (for Linux) insecure filesystem permissions

ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach()

sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing

netfilter: nf_set_pipapo: fix initial map fill

usbip: validate number_of_packets in usbip_pack_ret_submit()

IBM Curam Social Program Management 8.0.0 and 8.0.1 does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system.

smb: server: fix use-after-free in smb2_open()

net: wwan: t7xx: Fix napi rx poll issue

ipv6: sr: Fix MAC comparison to be constant-time

nfsd: fix potential UAF in nfsd4_cb_getattr_release

ksmbd: fix Preauh_HashValue race condition

SQL Injection in the Octopus Server REST API

nfsd: under NFSv4.1, fix double svc_xprt_put on rpc_create failure

netfs: Fix missing barriers when accessing stream->subrequests locklessly

dlm: validate length in dlm_search_rsb_tree

net: rds: clear i_sends on setup unwind

NFSD: Protect against send buffer overflow in NFSv2 READ

NFSD: Protect against send buffer overflow in NFSv2 READDIR

nfsd: fix possible badness in FREE_STATEID

nfsd: ensure that nfsd4_fattr_args.context is zeroed out

netfs: Fix oops in write-retry from mis-resetting the subreq iterator

virtio-net: fix overflow inside virtnet_rq_alloc

smb: client: fix use-after-free in cifs_oplock_break

nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec

nvmet: Fix crash when a namespace is disabled

NVIDIA NemoClaw for Linux contains a vulnerability in its installation process, where an attacker could cause execution of untrusted code. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, information disclosure, and denial of service.

tls: always refresh the queue when reading sock

smb: client: fix double free of TCP_Server_Info::hostname

netfilter: nf_conntrack: fix crash due to removal of uninitialised entry

ksmbd: add free_transport ops in ksmbd connection

RDMA/siw: Fix the sendmsg byte count in siw_tcp_sendpages

IBM WebSphere Application Server Liberty could provide weaker than expected security

RDMA/bnxt_re: Fix max SGEs for the Work Request

nfsd: fix nfsd4_deleg_getattr_conflict in presence of third party lease

NFSv4.2: Rework scratch handling for READ_PLUS (again)

skmsg: pass gfp argument to alloc_sk_msg()

ocfs2/dlm: fix off-by-one in dlm_match_regions() region comparison

nvmet-tcp: fix race between ICReq handling and queue teardown

RDMA/rxe: Fix the warning "__rxe_cleanup+0x12c/0x170 [rdma_rxe]"

tcp: fix potential race in tcp_v6_syn_recv_sock()