Linux Kernel any version

NFSv4: Fix free of uninitialized nfs4_label on referral lookup.

sunrpc: handle SVC_GARBAGE during svc auth processing as auth error

net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg

netfilter: conntrack: remove sprintf usage

tipc: fix double-free in tipc_buf_append()

ipv6: fix possible UAF in icmpv6_rcv()

ixgbevf: fix use-after-free in VEPA multicast source pruning

pNFS: Fix use-after-free in pnfs_update_layout()

Incorrect Permission Assignment for Critical Resource

fs/ntfs3: Use variable length array instead of fixed size

nfsd: nfsd4_spo_must_allow() must check this is a v4 compound request

ceph: blocklist the kclient when receiving corrupted snap trace

smb: client: fix UAF in async decryption

mptcp: fix TCP options overflow.

bpf: devmap: provide rxq after redirect

NVIDIA Nemo Framework contains a vulnerability where a user could cause a relative path traversal issue by arbitrary file write. A successful exploit of this vulnerability may lead to code execution and data tampering.

serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails

nvmet: avoid potential UAF in nvmet_req_complete()

net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring

net: ethernet: cortina: Carry over frag counter

ipv6: sit: reload inner IPv6 header after GSO offloads

bpf: Reject fragmented frames in devmap

staging: gdm724x: fix use after free in gdm_lte_rx()

bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT

nvmet-tcp: propagate nvmet_tcp_build_pdu_iovec() errors to its callers

IBM Curam Social Program Management 8.0.0 and 8.0.1 does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 218281.

libceph: Fix potential out-of-bounds access in crush_decode()

NVIDIA NemoClaw for Linux contains a vulnerability in its deployment process, where an attacker could cause improper certificate validation. A successful exploit of this vulnerability might lead to information disclosure, data tampering, code execution, and escalation of privileges.

tipc: improve size validations for received domain records

ksmbd: fix racy issue from session lookup and expire

netfs: Fix missing locking around retry adding new subreqs

RDMA/siw: Reject MPA FPDU length underflow before signed receive math

net/smc: Fix possible access to freed memory in link clear

ibmvnic: fix race between xmit and reset

nfsd: fix race between laundromat and free_stateid

NFSD: Fix nfsd4_encode_fattr4() crasher

RDMA/iwcm: Fix workqueue list corruption by removing work_list

net/mlx5e: kTLS, Fix crash in RX resync flow

block: add pgmap check to biovec_phys_mergeable

tls: Fix race condition in tls_sw_cancel_work_tx()