CVE-2023-53360

CVE-2023-53360 affects the Linux kernel NFSv4.2 path for READ_PLUS and can cause a hole-decode oops and scratch buffer NULL/length mismatch due to reworked scratch handling that reused an nfs_pgio_header across multiple requests. The root cause is that multiple reads could be sent with a single n...

openssl: double free after calling PEM_read_bio_ex

A double-free vulnerability was found in OpenSSL's PEMreadbioex function. The function PEMreadbioex reads a PEM file from a BIO and parses and decodes the "name" for example, "CERTIFICATE", any header data, and the payload data. If the function succeeds, then the "nameout," "header," and "data"...