Apache Tomcat: Directory traversal via rewrite with possible RCE if PUT is enabled

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP)

Out-of-bounds read & write in RFC 3211 KEK Unwrap

Apache Tomcat: h2 DoS - Made You Reset

Glib: integer overflow in g_string_maybe_expand() leading to potential buffer overflow in glib gstring

Libxml2: integer overflow in xmlbuildqname() leads to stack buffer overflow in libxml2

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: AWT, JavaFX)

i40e: Fix potential invalid access when MAC list is empty

batman-adv: fix OOB read/write in network-coding decode

efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare

HID: multitouch: fix slab out-of-bounds access in mt_report_fixup()

usb: core: config: Prevent OOB read in SS endpoint companion parsing

ALSA: usb-audio: Validate UAC3 cluster segment descriptors

iio: imu: bno055: fix OOB access of hw_xlate array

media: venus: Add a check for packet size after reading from shared memory

iio: light: as73211: Ensure buffer holes are zeroed

comedi: pcl726: Prevent invalid irq number

tracing: Limit access to parser->buffer when trace_get_user failed

net: usb: asix_devices: Fix PHY address mask in MDIO bus initialization

smb3: fix for slab out of bounds on mount to ksmbd

hfs: fix slab-out-of-bounds in hfs_bnode_read()

hfsplus: fix slab-out-of-bounds in hfsplus_bnode_read()

hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc()

media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format()

media: venus: Fix OOB read due to missing payload bound check

f2fs: fix to avoid out-of-boundary access in dnode page

arm64/entry: Mask DAIF in cpu_switch_to(), call_on_irq_stack()

bpf: Fix oob access in cgroup local storage

net: rose: convert 'use' field to refcount_t

btrfs: qgroup: fix race between quota disable and quota rescan ioctl

rcu: Protect ->defer_qs_iw_pending from data race

ipv6: sr: Fix MAC comparison to be constant-time

Out-of-Bounds read vulnerability in TCG TPM2.0 reference implementation

OpenSSL TLS 1.3 server may choose unexpected key agreement group

Timing side-channel in SM2 algorithm on 64 bit ARM

A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0)

Possible DOS in processing large name constraint structures in PKIXCertPathReveiwer

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking)

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security)

Out-of-bounds read in HTTP client no_proxy handling

tee: fix NULL pointer dereference in tee_shm_put

net/smc: fix one NULL pointer dereference in smc_ib_is_sg_need_sync()

ax25: properly unshare skbs in ax25_kiss_rcv()

ppp: fix memory leak in pad_compress_skb

pcmcia: Fix a NULL pointer dereference in __iodyn_find_io_region()

x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings()

mm: move page table sync declarations to linux/pgtable.h

mm: slub: avoid wake up kswapd in set_track_prepare

ocfs2: prevent release journal inode after journal shutdown

cifs: prevent NULL pointer dereference in UTF16 conversion