Michal Schmidt

**Name of the Vulnerable Software and Affected Versions** Linux kernel (affected versions not specified) **Description** The issue arises when a new skb is allocated for transmitting an xsk descriptor, but the descriptor is later found to have invalid options set for the TX metadata. As a result, the new skb is never freed, leading to a potential leak of skbs until the send buffer is full, which can make sending more packets impossible. The problem is resolved by freeing the skb in the error path if it is the first frag, i.e., an skb allocated in the current iteration of `xsk build skb()`. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** systemd versions prior to 44 **Description** The issue concerns the rm rf children function in util.c within the systemd-logind login manager. It allows local users to delete arbitrary files via a symlink attack on unspecified files related to user session records when logging out. **Recommendations** For versions prior to 44, update to version 44 or later to resolve the issue. As a temporary workaround, consider restricting access to the rm rf children function until a patch is available.