media: s5p-jpeg: prevent buffer overflows

drm/amdgpu: prevent NULL pointer dereference if ATIF is not supported

wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()

net: stmmac: TSO: Fix unbalanced DMA map/unmap for non-paged SKB data

net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT

drm/mediatek: Fix potential NULL dereference in mtk_crtc_destroy()

wifi: iwlwifi: mvm: fix 6 GHz scan construction

io_uring/rw: fix missing NOWAIT check for O_DIRECT start write

drm/i915/hdcp: Add encoder check in intel_hdcp_get_capability

drm/i915/hdcp: Add encoder check in hdcp2_get_capability

mptcp: init: protect sched with rcu_read_lock

arm64: dts: imx8ulp: correct the flexspi compatible string

mctp i2c: handle NULL header address

ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_init_flow()

An issue was discovered in Elasticsearch, where a large recursion using the Well-KnownText formatted string with nested GeometryCollection objects could cause a stackoverflow.

Elasticsearch Uncontrolled Resource Consumption vulnerability

Elasticsearch Uncontrolled Resource Consumption vulnerability

iptraf-ng 1.2.1 has a stack-based buffer overflow. In src/ifaces.c, the strcpy function consistently fails to control the size, and it is consequently possible to overflow memory on the stack.

An issue was discovered in Ubuntu wpa_supplicant that resulted in loading of arbitrary shared objects, which allows a local unprivileged attacker to escalate privileges to the user that wpa_supplicant runs as (usually root). Membership in the netdev group or access to the dbus interface of wpa_supplicant allow an unprivileged user to specify an arbitrary path to a module to be loaded by the wpa_supplicant process; other escalation paths might exist.