Linux Kernel any version

mptcp: Fix out of bounds when parsing TCP options

ksmbd: do not expire session on binding failure

IBM Engineering Insights XML external entity injection

NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause deserialization of untrusted data. A successful exploit of this vulnerability might lead to denial of service and data tampering.

crypto: s390/aes - Fix buffer overread in CTR mode

net/smc: avoid data corruption caused by decline

wifi: carl9170: re-fix fortified-memset warning

NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to denial of service and data tampering.

netfilter: br_netfilter: skip conntrack input hook for promisc packets

ipv4: icmp: validate reply type before using icmp_pointers

smb: client: restrict implied bcc[0] exemption to responses without data area

netfilter: x_tables: guard option walkers against 1-byte tail reads

netfilter: xt_tcpmss: check remaining length before reading optlen

netfilter: nf_conntrack_h323: fix OOB read in decode_choice()

s390/vfio-ap: always filter entire AP matrix

NFSD: prevent integer overflow on 32 bit systems

sctp: properly validate chunk size in sctp_sf_ootb()

ksmbd: fix slab-out-of-bounds in smb2_allocate_rsp_buf

.NET Security Feature Bypass Vulnerability

net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery

ksmbd: validate request buffer size in smb2_allocate_rsp_buf()

xfs: fix undersized l_iclog_roundoff values

mptcp: handle consistently DSS corruption

rxrpc: Fix buffer overread in rxgk_do_verify_authenticator()

isofs: validate Rock Ridge CE continuation extent against volume size

Kernel: ebpf: insufficient stack type checks in dynptr

mptcp: pm: only decrement add_addr_accepted for MPJ req

netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case

libceph: just wait for more data to be available on the socket

slip: bound decode() reads against the compressed packet length

audit: Fix data races of skb_queue_len() readers on audit_queue

ksmbd: validate NTLMv2 response before updating session key

smb: client: harden POSIX SID length parsing

net: reenable NETIF_F_IPV6_CSUM offload for BIG TCP packets

netfilter: conntrack: fix wrong ct->timeout value

mptcp: fix data races on remote_id

fs/ntfs3: Initialize allocated memory before use

xsk: recycle buffer in case Rx queue was full

net: ppp: Add bound checking for skb data on ppp_sync_txmung

ip_tunnel: adapt iptunnel_xmit_stats() to NETDEV_PCPU_STAT_DSTATS