RGW DoS attack with empty HTTP header in S3 object copy

CUPS cups-browsed before 2.5b1 will send an HTTP POST request to an arbitrary destination and port in response to a single IPP UDP packet requesting a printer to be added, a different vulnerability than CVE-2024-47176. (The request is meant to probe the new printer but can be used to create DDoS amplification attacks.)

use-after-free when closing buffers in Vim

dlm: fix possible lkb_resource null dereference

bpf: Prevent tailcall infinite loop caused by freplace

Memory safety bugs present in Firefox 125. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 126.

Memory safety bugs present in Firefox 125, Firefox ESR 115.10, and Thunderbird 115.10. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 126, Firefox ESR < 115.11, and Thunderbird < 115.11.

cookie accepts cookie name path and domain with out of bounds characters

An iterator stop condition was missing when handling WASM code in the built-in profiler, potentially leading to invalid memory access and undefined behavior. *Note:* This issue only affects the application when the profiler is running. This vulnerability affects Firefox < 126.

nilfs2: fix potential oob read in nilfs_btree_check_delete()

PCI: keystone: Fix if-statement expression in ks_pcie_quirk()

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

media: mediatek: vcodec: Fix H264 multi stateless decoder smatch warning

media: mediatek: vcodec: Fix VP8 stateless decoder smatch warning

media: mediatek: vcodec: Fix H264 stateless decoder smatch warning

PCI: kirin: Fix buffer overflow in kirin_pcie_parse_port()

RDMA/hns: Fix Use-After-Free of rsv_qp on HIP08

RDMA/cxgb4: Added NULL check for lookup_atid

vhost_vdpa: assign irq bypass producer token correctly

net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition