Linux Kernel any version

ext4: handle wraparound when searching for blocks for indirect mapped blocks

ksmbd: fix out-of-bounds write in smb2_get_ea() EA alignment

tinyfiledialogs (aka tiny file dialogs) before 3.15.0 allows shell metacharacters (such as a backquote or a dollar sign) in titles, messages, and other input data. NOTE: this issue exists because of an incomplete fix for CVE-2020-36767, which only considered single and double quote characters.

ksmbd: fix use-after-free from async crypto on Qualcomm crypto engine

net: tls: fix use-after-free with partial reads and async decrypt

NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability in the Python backend, where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to code execution, denial of service, data tampering, and information disclosure.

RDMA/siw: bound Read Response placement to the RREAD length

mptcp: fix double-free on socket dismantle

NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability in the Python backend, where an attacker could cause a remote code execution by manipulating the model name parameter in the model control APIs. A successful exploit of this vulnerability might lead to remote code execution, denial of service, information disclosure, and data tampering.

net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption

ksmbd: close durable scavenger races against m_fp_list lookups

nvme-tcp: fix UAF when detecting digest errors

ksmbd: fix signededness bug in smb_direct_prepare_negotiation()

ksmbd: serialize QUERY_DIRECTORY requests per file

spi: fsl-lpspi: terminate the RX channel on TX prepare failure path

net: bcmgenet: Use stronger register read/writes to assure ordering

rxrpc: Fix integer overflow in rxgk_verify_response()

NVIDIA NeMo Framework contains a vulnerability where a user could cause an improper control of generation of code by remote code execution. A successful exploit of this vulnerability might lead to code execution and data tampering.

cifs: Fix server re-repick on subrequest retry

9p/net: fix improper handling of bogus negative read/write replies

IBM Sterling Partner Engagement Manager SQL injection

NFSD: prevent underflow in nfssvc_decode_writeargs()

udp: do not accept non-tunnel GSO skbs landing in a tunnel

RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds

net: ethernet: mtk_eth_soc: Fix use-after-free in metadata dst teardown

NVIDIA NeMo Framework contains a vulnerability where a user could cause a deserialization of untrusted data by remote code execution. A successful exploit of this vulnerability might lead to code execution and data tampering.

can: j1939: j1939_session_new(): fix skb reference counting

IBM InfoSphere Information Server SQL injection

SUNRPC: Trap RDMA segment overflows

gfs2: Fix potential glock use-after-free on unmount

smb: client: validate dacloffset before building DACL pointers

nvme: avoid double free special payload

lib/scatterlist: fix length calculations in extract_kvec_to_sg

rxrpc: Fix the ACK parser to extract the SACK table for parsing

smb: server: avoid double-free in smb_direct_free_sendmsg after smb_direct_flush_send_list()

ipv6: ioam: refresh hdr pointer before ioam6_event()

smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked()

dmaengine: idxd: fix possible wrong descriptor completion in llist_abort_desc()

smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush()

netfs: Fix potential UAF in netfs_unlock_abandoned_read_pages()