Jonghwan Kim

The issue is related to the RegexRequestMatcher component in Spring Security, which can be misconfigured, allowing for an authorization bypass on some servlet containers. Applications using RegexRequestMatcher with `.` in the regular expression are possibly vulnerable. The vulnerability can be exploited by a remote attacker to elevate their privileges. The issue can be triggered using symbols such as %0d or %0a.

The issue concerns the TCP stack in the Linux kernel, which improperly handles the `SCM TIMESTAMPING OPT STATS` feature. This mishandling allows local users to either obtain sensitive information from the kernel's internal socket data structures or cause a denial of service through an out-of-bounds read. The issue is related to the `net/core/skbuff.c` and `net/socket.c` files.

A race condition exists in the Linux kernel, allowing local users to cause a denial of service, such as a system crash, via crafted system calls. This issue is related to incorrect interaction between `put ucounts` and `get ucounts` due to certain decrement behavior.