Paolo

The Linux kernel contains an issue related to network packet scheduling. Specifically, the `act ct` action was found to potentially cause a Use-After-Free (UAF) condition when interacting with the defragmentation engine if a packet returns `TC ACT CONSUMED` while held by the engine. This can occur when `act ct` is used in the egress path. To address this, the kernel now restricts `act ct` to only bind to `clsact/ingress` qdiscs and shared blocks. This allows `act ct` to still function in egress scenarios, but only with `clsact`. The `skb` variable is involved in this issue.

Name of the Vulnerable Software and Affected Versions: Photo Station versions prior to 6.0.11 Description: This issue allows remote attackers to inject malicious code through a cross-site scripting vulnerability in Photo Station. Recommendations: For versions prior to 6.0.11, update to version 6.0.11 or later to resolve the issue.

There is a possible out-of-bounds read in the Linux kernel. The `restart syscall` function uses uninitialized data when restarting `compat sys nanosleep`. However, this issue is disputed because the code path is reportedly unreachable.