tls: fix handling of zero-length records on the rx_list

crypto: algif_aead - Revert to operating out-of-place

Heap Buffer Overflow in Hexadecimal Conversion

A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1)

Apache Tomcat: console manipulation via escape sequences in log messages

A vulnerability has been identified in SIMATIC CN 4100 (All versions < V5.0)

A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1)

Potential Use-after-free in DANE Client Code

In GStreamer through 1.26.1, the isomp4 plugin's qtdemux_parse_trak function may read past the end of a heap buffer while parsing an MP4 file, possibly leading to information…

fs: writeback: fix use-after-free in __mark_inode_dirty()

wifi: cfg80211: fix use-after-free in cmp_bss()

Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen()

wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result()

scsi: lpfc: Fix buffer free/clear order in deferred receive path

xfs: do not propagate ENODATA disk errors into xattr code

atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control().

HID: asus: fix UAF via HID_CLAIMED_INPUT validation

KVM: x86: use array_index_nospec with indices that come from guest

bus: mhi: host: Detect events pointing to unexpected TREs

scsi: ufs: exynos: Fix programming of HCI_UTRL_NEXUS_TYPE

PCI: endpoint: Fix configfs group list head handling

mm/debug_vm_pgtable: clear page table entries at destroy_args()

net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit

jfs: truncate good inode pages when hard link is 0

btrfs: do not allow relocation of partially dropped subvolumes

ACPI: pfr_update: Fix the driver update version check

fs/buffer: fix use-after-free when call bh_read() helper

ftrace: Also allocate and copy hash for reading of filter files

comedi: Make insn_rw_emulate_bits() do insn->n samples

ALSA: usb-audio: Validate UAC3 power domain descriptors, too

nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm()

drbd: add missing kref_get in handle_write_conflicts

fs/ntfs3: Add sanity check for file name

fbdev: fix potential buffer overflow in do_register_framebuffer()

scsi: bfa: Double-free fix

jfs: upper bound check of tree index in dbAllocAG

fbdev: Fix vmalloc out-of-bounds write in fast_imageblit

tls: separate no-async decryption request handling from async

iommu/amd: Avoid stack buffer overflow from kernel cmdline

mptcp: plug races between subflow fail and subflow creation

Libxslt: libxml2: heap use-after-free in libxslt caused by atype corruption in xmlattrptr

A vulnerability has been identified in SIMATIC CN 4100 (All versions < V5.0)

Incorrect Failure Handling in RSA KEM RSASVE Encapsulation

Possible NULL Dereference When Processing CMS KeyTransportRecipientInfo

Possible NULL Dereference When Processing CMS KeyAgreeRecipientInfo

NULL Pointer Dereference When Processing a Delta CRL

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security)

Apache Tomcat: Directory traversal via rewrite with possible RCE if PUT is enabled

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP)

Out-of-bounds read & write in RFC 3211 KEK Unwrap