Linux Kernel

virtio-net: fix overflow inside virtnet_rq_alloc

nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec

smb: client: fix use-after-free in cifs_oplock_break

nvmet: Fix crash when a namespace is disabled

NVIDIA NemoClaw for Linux contains a vulnerability in its installation process, where an attacker could cause execution of untrusted code. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, information disclosure, and denial of service.

smb: client: fix double free of TCP_Server_Info::hostname

ksmbd: add free_transport ops in ksmbd connection

RDMA/siw: Fix the sendmsg byte count in siw_tcp_sendpages

IBM WebSphere Application Server Liberty could provide weaker than expected security

RDMA/bnxt_re: Fix max SGEs for the Work Request

NFSv4.2: Rework scratch handling for READ_PLUS (again)

nfsd: fix nfsd4_deleg_getattr_conflict in presence of third party lease

ocfs2/dlm: fix off-by-one in dlm_match_regions() region comparison

skmsg: pass gfp argument to alloc_sk_msg()

RDMA/rxe: Fix the warning "__rxe_cleanup+0x12c/0x170 [rdma_rxe]"

nvmet-tcp: fix race between ICReq handling and queue teardown

tls: always refresh the queue when reading sock

tcp: fix potential race in tcp_v6_syn_recv_sock()

netfilter: nf_conntrack: fix crash due to removal of uninitialised entry

RDMA/rtrs: Add missing deinit() call

fs: dlm: fix race in lowcomms

libceph: prevent potential out-of-bounds reads in handle_auth_done()

[ceph] parse_longname(): strrchr() expects NUL-terminated string

nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm()

Langflow is affected by remote code execution, denial of service, path traversal, and exposed credentials due to multiple unauthenticated and insufficiently authorized API endpoints

fs/netfs/read_collect: add to next->prev_donated

netfilter: nfnetlink_queue: Initialize ctx to avoid memory allocation error

vxlan: Fix nexthop hash size

RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction

cifs: Fix oops due to uninitialised variable

nvme: move stopping keep-alive into nvme_uninit_ctrl()

drbd: add missing kref_get in handle_write_conflicts

9p: set req refcount to zero to avoid uninitialized usage

Revert "smb: client: fix TCP timers deadlock after rmmod"

net, hsr: reject HSR frame if skb can't hold tag

bnxt_en: Fix aggregation ID mask to prevent oops on 5760X chips

Out of bounds read and write in Tint in Google Chrome on Mac prior to 145.0.7632.116 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)

net: ethernet: mtk_eth_soc: fix memory corruption during fq dma init

smb: client: fix UAF in decryption with multichannel

EL Injection Vulnerability in Hitachi Tuning Manager