Linux Kernel any version

libceph: Fix potential out-of-bounds access in osdmap_decode()

libceph: Fix potential out-of-bounds access in ceph_handle_auth_reply()

ocfs2/dlm: validate qr_numregions in dlm_match_regions()

drm/sched: Avoid data corruptions

libceph: prevent potential out-of-bounds reads in process_message_header()

libceph: Fix slab-out-of-bounds access in auth message processing

RDMA/rtrs-srv: Bound RDMA-Write length to chunk size in rdma_write_sg

inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP

ksmbd: run set info with opener credentials

smb: client: reject overlapping data areas in SMB2 responses

smb/client: fix out-of-bounds read in symlink_data()

A vulnerability in the Spectrum Scale 5.1 core component and IBM Elastic Storage System 6.1 could allow unauthorized access to user data or injection of arbitrary data in the communication protocol. IBM X-Force ID: 191600.

isofs: Fix out of bound access for corrupted isofs image

ksmbd: fix out of bounds in init_smb2_rsp_hdr()

tunnels: fix out of bounds access when building IPv6 PMTU error

IBM Sterling Secure Proxy improper input validation

IBM Spectrum Protect Plus 10.1.0.0 through 10.1.8.x uses Cross-Origin Resource Sharing (CORS) which could allow an attacker to carry out privileged actions and retrieve sensitive information due to a misconfiguration in access control headers. IBM X-Force ID: 214956.

netconsole: avoid OOB reads, msg is not nul-terminated

NFSD: Fix NFSv3 SETATTR/CREATE's handling of large file sizes

smb/client: fix out-of-bounds read in smb2_compound_op()

rxrpc: fix RESPONSE authenticator parser OOB read

net: ioam6: fix OOB and missing lock

NFSD: Fix ia_size underflow

Insufficient Authentication Brute Force Protection on Login Endpoint

iommufd: Fix missing update of domains_itree after splitting iopt_area

IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities

net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg

Sensitive information disclosure and manipulation due to improper authentication. The following products are affected: Acronis Cyber Protect 15 (Linux, macOS, Windows) before build 35979.

In Nextcloud Desktop Client 3.13.1 through 3.13.3 on Linux, synchronized files (between the server and client) may become world writable or world readable. This is fixed in 3.13.4.

Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)

IBM QRadar SIEM command execution

NFSD: Prevent a potential integer overflow

tipc: fix out-of-bounds read in broadcast Gap ACK blocks

IBM Aspera Console SQL injection

nvmet-auth: validate reply message payload bounds against transfer length

NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where an attacker could cause an integer overflow through specially crafted inputs. A successful exploit of this vulnerability might lead to denial of service and data tampering.

RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv

Multiple Vulnerabilities in IBM Concert Software

IBM Sterling Secure Proxy improper input validation

ksmbd: use opener credentials for delete-on-close