Linux Kernel any version

smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked()

netfs: Fix potential UAF in netfs_unlock_abandoned_read_pages()

lib/scatterlist: fix length calculations in extract_kvec_to_sg

kthread: consolidate kthread exit paths to prevent use-after-free

ksmbd: fix slab-use-after-free in ksmbd_smb2_session_create

net/tls: fix slab-out-of-bounds bug in decrypt_internal

crypto: hisilicon/sec - fix the aead software fallback for engine

Langflow is affected by remote code execution, denial of service, path traversal, and exposed credentials due to multiple unauthenticated and insufficiently authorized API endpoints

nvme-tcp: fix possible use-after-free in transport error_recovery work

net: vertexcom: mse102x: Fix possible double free of TX skb

smb: client: fix potential UAF in smb2_is_valid_lease_break()

smb: client: fix potential UAF in smb2_is_network_name_deleted()

smb: client: fix potential UAF in is_valid_oplock_break()

Server-Side Request Forgery Vulnerability in Hitachi Infrastructure Analytics Advisor, Hitachi Ops Center Analyzer

smb: client: fix potential UAF in cifs_signal_cifsd_for_reconnect()

nfs: Fix KMSAN warning in decode_getfattr_attrs()

net: esp: fix bad handling of pages from page_pool

NFSD: Fix potential use-after-free in nfsd_file_put()

NVIDIA Isaac Launchable for Linux contains a vulnerability where sensitive information is transmitted in clear text. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering.

ipv6: sr: fix invalid unregister error path

mm: call ->free_folio() directly in folio_unmap_invalidate()

ksmbd: fix use-after-free in smb2_open during durable reconnect

ksmbd: fix use-after-free in smb_lazy_parent_lease_break_close()

netfs: Fix early put of sink folio in netfs_read_gaps()

tcp: Add preempt_{disable,enable}_nested() in reqsk_queue_hash_req().

ksmbd: fix use-after-free and NULL deref in smb_grant_oplock()

ksmbd: fix use-after-free by using call_rcu() for oplock_info

ksmbd: fix use-after-free in __ksmbd_close_fd() via durable scavenger

IBM Engineering Lifecycle Optimization Publishing file upload

usb: vhci-hcd: Do not drop references before new references are gained

RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE

net: do not pass flow_id to set_rps_cpu()

netfs: Fix cancellation of a DIO and single read subrequests

netfs: Fix netfs_read_to_pagecache() to pause on subreq failure

netfilter: nft_inner: release local_lock before re-enabling softirqs

smb: server: let send_done handle a completion without IB_SEND_SIGNALED

rxgk: Fix potential integer overflow in length check

nfsd: clear acl_access/acl_default after releasing them

smb: client: guarantee refcounted children from parent session

Tauri vulnerable to Regression on Filesystem Scope Checks for Dotfiles