CVE-2023-53793

CVE-2023-53793 affects the Linux kernel perf tool on x86; memory-leak in perf_env__read_cpuid (LeakSanitizer-detected) is fixed by a kernel/perf patch. Affected versions are addressed in vendor advisories; upgrade to the patched kernel/perf tool as remediation. If details are needed: root cause i...

GHSA-JF5H-CF95-W759 Optional `Deserialize` implementations lacking validation

When activating the non-default feature serialize, most structs implement serde::Deserialize without sufficient validation. This allows breaking invariants in safe code, leading to: Undefined behavior in asstring methods which use std::str::fromutf8unchecked internally. Panics due to failed...