CVE Browser

xfrm: iptfs: fix stack OOB read in iptfs_skb_reset_frag_walk()

xfrm: iptfs: fix runt reassembly panic from short inner tot_len

xfrm: fix compat ALLOCSPI request use-after-free

xfrm: add missing rcu_read_lock(), skb_dst_force() and dev_hold() for xfrm_trans_reinject()

esp: downgrade zerocopy managed frags before mutating skb frags

RDMA/siw: Clear association under lock if siw_qp_modify fails in siw_accept

RDMA/rxe: validate access flags before swapping the MR's PD

RDMA/rxe: Fix integer overflow in mr_check_range() leading to OOB access

xfrm: hold net_device reference under RCU in bundle creation

firmware: arm_scpi: reject DVFS OPP count above MAX_DVFS_OPPS

clk: scpi: bound-check DVFS index in scpi_dvfs_recalc_rate

RDMA/rxe: Restore HMM_PFN_WRITE check in ODP write paths

RDMA/rxe: insert mcg into mcg_tree only after rxe_mcast_add() succeeds

RDMA/core: Reject unregistering netdevs in ib_get_eth_speed

IB/iser: reject a remote invalidation of an unregistered direction

IB/isert: wait for deferred control PDU completions before releasing the connection

RDMA/bnxt_re: check create_singlethread_workqueue() in DCB setup

RDMA/rtrs: guard against null kobj name

RDMA/mad: Fix receive buffer leak when PKey enforcement fails

RDMA/erdma: Use IRQ-safe XArray helpers for QP and CQ tables

RDMA/rtrs-clt: Fix CQ pool leak when connect is interrupted

wifi: virt_wifi: free skb when disconnected

wifi: brcmfmac: cyw: pass PMKID to firmware if present

wifi: libipw: reject too-short beacon and probe responses

wifi: libipw: reject too-short association responses