iommufd/iova_bitmap: Fix shift-out-of-bounds in iova_bitmap_offset_to_index()

pps: Fix a use-after-free

topology: Keep the cpumask unchanged when printing cpumap

scsi: sg: Fix slab-use-after-free read in sg_release()

af_packet: avoid erroring out after sock_init_data() in packet_create()

net: inet: do not leave a dangling sk pointer in inet_create()

net: inet6: do not leave a dangling sk pointer in inet6_create()

ovl: Filter invalid inodes with missing lookup function

block: fix uaf for flush rq while iterating tags

block, bfq: fix bfqq uaf in bfq_limit_depth()

sh: intc: Fix use-after-free bug in register_intc_controller()

net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT

bpf: Fix out-of-bounds write in trie_get_next_key()

fs/ntfs3: Add rough attr alloc_size check

bpf: Prevent tail call between progs attached to different hooks

aoe: fix the potential use-after-free problem in more places

ext4: fix slab-use-after-free in ext4_split_extent_at()

ext4: avoid OOB when system.data xattr changes underneath the filesystem

fscache: delete fscache_cookie_lru_timer when fscache exits to avoid UAF

net: ethernet: lantiq_etop: fix double free in detach

scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory

bna: ensure the copied buf is NUL terminated

tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().

netfilter: nf_tables: do not compare internal table flags on updates

s390/zcrypt: fix reference counting on zcrypt card objects

aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts

ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()

crypto: scomp - fix req->dst buffer overflow

EDAC/thunderx: Fix possible out-of-bounds string access

f2fs: fix to avoid dirent corruption

Glibc: heap-based buffer overflow in __vsyslog_internal()

Use-after-free in Linux kernel's netfilter: nf_tables component

Out-of-bounds write in Linux kernel's Linux Kernel Performance Events (perf) component

The Linux kernel before 6.5.4 has an es1 use-after-free in fs/ext4/extents_status.c, related to ext4_es_insert_extent

Linux: buffer overrun in netback due to unusual packet

A flaw was found in GLib

Use-after-free in Linux kernel's net/sched: sch_qfq component

POLY1305 MAC implementation corrupts XMM registers on Windows

Use-after-free in Linux kernel's net/sched: sch_hfsc (HFSC qdisc traffic control) component

An issue was discovered in l2cap_sock_release in net/bluetooth/l2cap_sock.c in the Linux kernel before 6.4.10

Out-of-bounds write in Linux kernel's net/sched: sch_qfq component

Use-after-free in Linux kernel's net/sched: cls_u32 component

Linux Kernel nftables Out-Of-Bounds Read/Write Vulnerability

ncurses before 6.4 20230408, when used by a setuid application, allows local users to trigger security-relevant memory corruption via malformed data in a terminfo database file…

systemd before 247 does not adequately block local privilege escalation for some Sudo configurations, e.g., plausible sudoers files in which the "systemctl status" command may be…

A flaw was found in the bash package, where a heap-buffer overflow can occur in valid parameter_transform

An issue was discovered in libxml2 before 2.10.3

A flaw was found in glibc

An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5

In doProlog in xmlparse.c in Expat (aka libexpat) before 2.4.3, an integer overflow exists for m_groupSize