Linux Kernel any version

mptcp: pm: ADD_ADDR rtx: fix potential data-race

NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause an authentication bypass. A successful exploit of this vulnerability might lead to escalation of privileges, denial of service, or information disclosure.

nfsd: fix heap overflow in NFSv4.0 LOCK replay cache

NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()

NVIDIA NeMo Framework for all platforms contains a vulnerability where a user could cause a deserialization of untrusted data by remote code execution. A successful exploit of this vulnerability might lead to code execution and data tampering.

NVIDIA NVFlare Dashboard contains a vulnerability in the user management and authentication system where an unauthenticated attacker may cause authorization bypass through user-controlled key. A successful exploit of this vulnerability may lead to privilege escalation, data tampering, information disclosure, code execution, and denial of service.

ceph: avoid putting the realm twice when decoding snaps fails

gfs2: add some missing log locking

net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink

smb: client: Fix use-after-free of network namespace.

net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock()

tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().

smb: During unmount, ensure all cached dir instances drop their dentry

net: bcmgenet: fix racing timeout handler

smb: prevent use-after-free due to open_cached_dir error paths

netfilter: flowtable: IPIP tunnel hardware offload is not yet support

scsi: qla2xxx: Completely fix fcport double free

iomap: fix invalid folio access when i_blkbits differs from I/O granularity

net: ti: icssg-prueth: fix use-after-free of CPPI descriptor in RX path

net: ti: icssg-prueth: fix missing data copy and wrong recycle in ZC RX dispatch

netfs: Fix potential for tearing in ->remote_i_size and ->zero_point

net: ethernet: cortina: Make RX SKB per-port

batman-adv: tt: fix negative last_changeset_len

net: bcmgenet: keep RBUF EEE/PM disabled

net: systemport: Add global locking for descriptor lifecycle

net/mlx5e: kTLS, Fix incorrect page refcounting

tls: fix race between async notify and socket close

NFSD: Fix SECINFO_NO_NAME decode error cleanup

nfsd: release layout stid on setlease failure

cifs: Fix oops due to uncleared server->smbd_conn in reconnect

nvme-fabrics: fix kernel crash while shutting down controller

lwt: Fix return values of BPF xmit ops

net: ena: Add validation for completion descriptors consistency

GPU DDK - Integer overflow in _PMRLogicalOffsetToPhysicalOffset

nfsd: fix nfs4_openowner leak when concurrent nfsd4_open occur

EL Injection Vulnerability in Hitachi Replication Manager

udp: skip L4 aggregation for UDP tunnel packets

selinux,smack: don't bypass permissions check in inode_setsecctx hook

RDMA/erdma: Prevent use-after-free in erdma_accept_newconn()

NFSv4: Fix free of uninitialized nfs4_label on referral lookup.