Linux Kernel

smb: client: fix potential UAF in is_valid_oplock_break()

smb: client: fix potential UAF in cifs_signal_cifsd_for_reconnect()

nfs: Fix KMSAN warning in decode_getfattr_attrs()

net: esp: fix bad handling of pages from page_pool

ipv6: sr: fix invalid unregister error path

NVIDIA Isaac Launchable for Linux contains a vulnerability where sensitive information is transmitted in clear text. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering.

NFSD: Fix potential use-after-free in nfsd_file_put()

tcp: Add preempt_{disable,enable}_nested() in reqsk_queue_hash_req().

ksmbd: fix use-after-free in smb2_open during durable reconnect

netfs: Fix early put of sink folio in netfs_read_gaps()

mm: call ->free_folio() directly in folio_unmap_invalidate()

ksmbd: fix use-after-free and NULL deref in smb_grant_oplock()

ksmbd: fix use-after-free in __ksmbd_close_fd() via durable scavenger

ksmbd: fix use-after-free in smb_lazy_parent_lease_break_close()

ksmbd: fix use-after-free by using call_rcu() for oplock_info

smb: client: fix use-after-free in crypt_message when using async crypto

IBM Engineering Lifecycle Optimization Publishing file upload

usb: vhci-hcd: Do not drop references before new references are gained

netfilter: nft_inner: release local_lock before re-enabling softirqs

idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init()

rxgk: Fix potential integer overflow in length check

RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE

smb: server: let send_done handle a completion without IB_SEND_SIGNALED

net: do not pass flow_id to set_rps_cpu()

netfs: Fix netfs_read_to_pagecache() to pause on subreq failure

netfs: Fix cancellation of a DIO and single read subrequests

nfsd: clear acl_access/acl_default after releasing them

smb: client: guarantee refcounted children from parent session

Tauri vulnerable to Regression on Filesystem Scope Checks for Dotfiles

scsi: target: pscsi: Fix bio_put() for error case

RDMA/rtrs: Ensure 'ib_sge list' is accessible

tcp: Fix use-after-free of nreq in reqsk_timer_handler().

crypto: hisilicon/sec2 - prevent req used-after-free for sec

smb: client: fix potential UAF in smb2_is_valid_oplock_break()

net: rswitch: Avoid use-after-free in rswitch_poll()

crypto: krb5 - filter out async aead implementations at alloc

net/mlx5e: Fix use-after-free in mlx5e_tx_reporter_timeout_recover

skbuff: fix coalescing for page_pool fragment recycling

igc: avoid returning frame twice in XDP_REDIRECT

net/smc: check smcd_v2_ext_offset when receiving proposal msg