Linux Kernel any version

KVM: arm64: Fix uninitialized memcache pointer in user_mem_abort()

drm/xe/pf: Clear all LMTT pages on alloc

KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation

LoongArch: KVM: Fix stack protector issue in send_ipi_data()

net: hns3: add VLAN id validation before using

LoongArch: KVM: Avoid overflow with array index

IBM Personal Communications command execution

Revert "arm64: dts: qcom: sdm845: Affirm IDR0.CCTW on apps_smmu"

KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level

vsock/vmci: fix UAF when peer resets connection during handshake

iommu/vt-d: Fix race condition during PASID entry replacement

misc: fastrpc: fix DMA address corruption due to find_vma misuse

af_unix: Fix UAF read of tail->len in unix_stream_data_wait()

iommu/amd: Fix clone_alias() to use the original device's devid

accel/ethosu: reject DMA commands with uninitialized length

accel/ethosu: fix arithmetic issues in dma_length()

CSRF Vulnerability When Using Client Certificate Authentication with the LXD-UI

RDMA/core: Validate the passed in fops for ib_get_ucaps()

KVM: arm64: Reassign nested_mmus array behind mmu_lock

KVM: arm64: nv: Fix handling of XN[0] when !FEAT_XNX

KVM: arm64: Fix ID register initialization for non-protected pKVM guests

iommu/sva: invalidate stale IOTLB entries for kernel address space

iommu/amd/pgtbl: Fix possible race while increase page table level

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a user with DBADM authority to access other databases and read or modify files. IBM X-Force ID: 199914.

Allocation of resources without limits in parsing components in Amazon Athena ODBC driver

Authenticated Stored XSS in OSNEXUS QuantaStor 6.0.0.335

CommServe Information Disclosure

CommServe Denial of Service

CommServe Stack-based Buffer Overflow

Spectrum broken authentication

RustDesk Client Accepts Pseudo-Encrypted Config Strings Without Cryptographic Validation

RustDesk Server Generates Config Strings Using Reversible Encoding (Base64 + Reverse) Instead of Encryption

RustDesk HTTP Client Silently Accepts Invalid TLS Certificates After Handshake Failure

smb: client: set correct id, uid and cruid for multiuser automounts

perf/x86/intel: KVM: Mask PEBS_ENABLE loaded for guest with vCPU's value.

ice: fix using untrusted value of pkt_len in ice_vc_fdir_parse_raw()

virt: sev-guest: Explicitly leak pages in unknown state

net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list

Server-side request forgery (SSRF) in Campaign Classic could lead to sensitive information disclosure

NVIDIA’s distribution of the Data Plane Development Kit (MLNX_DPDK) contains a vulnerability in the network stack, where error recovery is not handled properly, which can allow a remote attacker to cause denial of service and some impact to data integrity and confidentiality.