NVIDIA Container Toolkit for Linux contains a Time-of-Check Time-of-Use (TOCTOU) vulnerability when used with default configuration, where a crafted container image could gain access to the host file system. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.

NVIDIA Container Toolkit for all platforms contains a vulnerability in some hooks used to initialize the container, where an attacker could execute arbitrary code with elevated permissions. A successful exploit of this vulnerability might lead to escalation of privileges, data tampering, information disclosure, and denial of service.

net: vlan: don't propagate flags on open

PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type

media: venus: hfi: add a check to handle OOB in sfr region

media: venus: hfi: add check to handle incorrect queue size

media: venus: hfi_parser: add check to avoid out of bound access

media: venus: hfi_parser: refactor hfi packet parsing logic

net: stmmac: Fix accessing freed irq affinity_hint

ext4: fix off-by-one error in do_split

soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()

i3c: Add NULL pointer check in i3c_master_queue_ibi()

mfd: ene-kb3930: Fix a potential NULL pointer dereference

mptcp: fix NULL pointer in can_accept_new_subflow

backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()

net: Fix null-ptr-deref by sock_lock_init_class_and_name() and rmmod.

sctp: detect and prevent references to a freed transport in sendmsg