NVIDIA Container Toolkit for all platforms contains a vulnerability in some hooks used to initialize the container, where an attacker could execute arbitrary code with elevated permissions. A successful exploit of this vulnerability might lead to escalation of privileges, data tampering, information disclosure, and denial of service.

A flaw in Node.js 20's HTTP parser allows improper termination of HTTP/1 headers using `\r\n\rX` instead of the required `\r\n\r\n`. This inconsistency enables request smuggling, allowing attackers to bypass proxy-based access controls and submit unauthorized requests. The issue was resolved by upgrading `llhttp` to version 9, which enforces correct header termination. Impact: * This vulnerability affects only Node.js 20.x users prior to the `llhttp` v9 upgrade.

The C++ method SignTraits::DeriveBits() may incorrectly call ThrowException() based on user-supplied inputs when executing in a background thread, crashing the Node.js process. Such cryptographic operations are commonly applied to untrusted inputs. Thus, this mechanism potentially allows an adversary to remotely crash a Node.js runtime.

In Node.js, the `ReadFileUtf8` internal binding leaks memory due to a corrupted pointer in `uv_fs_s.file`: a UTF-16 path buffer is allocated but subsequently overwritten when the file descriptor is set. This results in an unrecoverable memory leak on every call. Repeated use can cause unbounded memory growth, leading to a denial of service. Impact: * This vulnerability affects APIs relying on `ReadFileUtf8` on Node.js release lines: v20 and v22.

net: vlan: don't propagate flags on open

PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type

media: venus: hfi: add a check to handle OOB in sfr region

media: venus: hfi: add check to handle incorrect queue size

media: venus: hfi_parser: add check to avoid out of bound access

media: venus: hfi_parser: refactor hfi packet parsing logic

net: stmmac: Fix accessing freed irq affinity_hint

ext4: fix off-by-one error in do_split

soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()

i3c: Add NULL pointer check in i3c_master_queue_ibi()

mfd: ene-kb3930: Fix a potential NULL pointer dereference

mptcp: fix NULL pointer in can_accept_new_subflow

backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()

net: Fix null-ptr-deref by sock_lock_init_class_and_name() and rmmod.

sctp: detect and prevent references to a freed transport in sendmsg

KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses