Linux Kernel any version

wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers

Laundry 2.3.0 - Account Takeover via CSRF

wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result()

iommu/vt-d: Use device rbtree in iopf reporting path

swiotlb: fix out-of-bounds TLB allocations with CONFIG_SWIOTLB_DYNAMIC

Insufficient validation of untrusted input in Codecs in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform an out of bounds memory write via a crafted video file. (Chromium security severity: Medium)

HID: wacom: fix crash in wacom_aes_battery_handler()

scsi: ses: Handle enclosure with just a primary component gracefully

Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp

scsi: ses: Fix possible desc_ptr out-of-bounds accesses

iommu/vt-d: Remove cache tags before disabling ATS

iommu/vt-d: Fix suspicious RCU usage

Bluetooth: hci_conn: fail SCO/ISO via hci_conn_failed if ACL gone early

net: rose: include node references in rose_neigh refcount

wifi: ath12k: Prevent sending WMI commands to firmware during firmware crash

wifi: mt76: mt7996: Fix possible OOB access in mt7996_tx()

IBM OpenPages cross-site request forgery

Inappropriate implementation in LiveCaption in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform out of bounds memory access via malicious network traffic. (Chromium security severity: Low)

scsi: qla2xxx: Wait for io return on terminate rport

wifi: mt76: connac: do not check WED status for non-mmio devices

Use after free in ServiceWorker in Google Chrome prior to 149.0.7827.53 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code via a crafted Chrome Extension. (Chromium security severity: Medium)

KVM: arm64: Fix host stage-2 PGD refcount

wifi: mac80211: fix use-after-free

NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause use of a hard-coded password. A successful exploit of this vulnerability might lead to data tampering, denial of service, and information disclosure.

Use after free in Ozone in Google Chrome on Linux prior to 149.0.7827.103 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

firewire: net: fix use after free in fwnet_finish_incoming_packet()

wifi: mt76: fix linked list corruption

net: rose: convert 'use' field to refcount_t

Docker Desktop Enhanced Container Isolation bypass via --use-api-socket CLI flag

Inappropriate implementation in DevTools in Google Chrome prior to 145.0.7632.116 allowed an attacker who convinced a user to install a malicious extension to inject scripts or HTML into a privileged page via DevTools. (Chromium security severity: High)

Improper initialization in some Intel(R) Aptio* V UEFI Firmware Integrator Tools may allow an authenticated user to potentially enable escalation of privilege via local access.

vhost-scsi: protect vq->log_used with vq->mutex

scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out

nvmet: pci-epf: Do not complete commands twice if nvmet_req_init() fails

IBM CICS TX Standard cross-site request forgery

io_uring/futex: ensure io_futex_wait() cleans up properly on failure

iommu: Restore lost return in iommu_report_device_fault()

HID: nvidia-shield: Reference hid_device devm allocation of input_dev name

Integer overflow in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

wifi: mt76: mt7915: fix list corruption after hardware restart