tls: fix handling of zero-length records on the rx_list

crypto: algif_aead - Revert to operating out-of-place

A vulnerability has been identified in SIMATIC CN 4100 (All versions < V3.0)

Heap Buffer Overflow in Hexadecimal Conversion

A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1)

A vulnerability has been identified in SIMATIC CN 4100 (All versions < V3.0)

Apache Tomcat: console manipulation via escape sequences in log messages

A vulnerability has been identified in SIMATIC CN 4100 (All versions < V5.0)

A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1)

Potential Use-after-free in DANE Client Code

In GStreamer through 1.26.1, the isomp4 plugin's qtdemux_parse_trak function may read past the end of a heap buffer while parsing an MP4 file, possibly leading to information…

fs: writeback: fix use-after-free in __mark_inode_dirty()

wifi: cfg80211: fix use-after-free in cmp_bss()

Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen()

wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result()

scsi: lpfc: Fix buffer free/clear order in deferred receive path

xfs: do not propagate ENODATA disk errors into xattr code

atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control().

HID: asus: fix UAF via HID_CLAIMED_INPUT validation

KVM: x86: use array_index_nospec with indices that come from guest

bus: mhi: host: Detect events pointing to unexpected TREs

scsi: ufs: exynos: Fix programming of HCI_UTRL_NEXUS_TYPE

PCI: endpoint: Fix configfs group list head handling

mm/debug_vm_pgtable: clear page table entries at destroy_args()

net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit

jfs: truncate good inode pages when hard link is 0

btrfs: do not allow relocation of partially dropped subvolumes

ACPI: pfr_update: Fix the driver update version check

fs/buffer: fix use-after-free when call bh_read() helper

ftrace: Also allocate and copy hash for reading of filter files

comedi: Make insn_rw_emulate_bits() do insn->n samples

ALSA: usb-audio: Validate UAC3 power domain descriptors, too

nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm()

drbd: add missing kref_get in handle_write_conflicts

fs/ntfs3: Add sanity check for file name

fbdev: fix potential buffer overflow in do_register_framebuffer()

scsi: bfa: Double-free fix

jfs: upper bound check of tree index in dbAllocAG

fbdev: Fix vmalloc out-of-bounds write in fast_imageblit

tls: separate no-async decryption request handling from async

iommu/amd: Avoid stack buffer overflow from kernel cmdline

mptcp: plug races between subflow fail and subflow creation

Libxslt: libxml2: heap use-after-free in libxslt caused by atype corruption in xmlattrptr

A vulnerability has been identified in SIMATIC CN 4100 (All versions < V3.0)

A vulnerability has been identified in SIMATIC CN 4100 (All versions < V5.0)

Incorrect Failure Handling in RSA KEM RSASVE Encapsulation

Possible NULL Dereference When Processing CMS KeyTransportRecipientInfo

Possible NULL Dereference When Processing CMS KeyAgreeRecipientInfo

NULL Pointer Dereference When Processing a Delta CRL

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security)