Linux Kernel any version

RDMA/rtrs: Add missing deinit() call

fs: dlm: fix race in lowcomms

libceph: prevent potential out-of-bounds reads in handle_auth_done()

[ceph] parse_longname(): strrchr() expects NUL-terminated string

nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm()

smb: client: fix UAF in decryption with multichannel

Langflow is affected by remote code execution, denial of service, path traversal, and exposed credentials due to multiple unauthenticated and insufficiently authorized API endpoints

fs/netfs/read_collect: add to next->prev_donated

netfilter: nfnetlink_queue: Initialize ctx to avoid memory allocation error

vxlan: Fix nexthop hash size

cifs: Fix oops due to uninitialised variable

nvme: move stopping keep-alive into nvme_uninit_ctrl()

RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction

drbd: add missing kref_get in handle_write_conflicts

9p: set req refcount to zero to avoid uninitialized usage

Revert "smb: client: fix TCP timers deadlock after rmmod"

net, hsr: reject HSR frame if skb can't hold tag

bnxt_en: Fix aggregation ID mask to prevent oops on 5760X chips

Out of bounds read and write in Tint in Google Chrome on Mac prior to 145.0.7632.116 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)

net: ethernet: mtk_eth_soc: fix memory corruption during fq dma init

EL Injection Vulnerability in Hitachi Tuning Manager

Improper Use of Validation Framework

Use of Password Hash with Insufficient Computational Effort

Missing Cryptographic Step

svcrdma: bound check rq_pages index in inline path

rpl: Fix use-after-free in rpl_do_srh_inline().

Type Confusion in Dawn in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

Incorrect security UI in Google Chrome on Android prior to 144.0.7559.59 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium security severity: Low)

idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init()

RustDesk Flutter URI Handler Sets Permanent Password Without Privilege Check or User Confirmation

netfs: Fix double put of request

nvme-tcp: remove tag set when second admin queue config fails

ksmbd: fix use-after-free of share_conf in compound request

Race in Media in Google Chrome on Android prior to 147.0.7727.55 allowed a remote attacker who had compromised the renderer process to corrupt media stream metadata via a crafted HTML page. (Chromium security severity: Low)

tls: separate no-async decryption request handling from async

RustDesk Auth Proof Uses Server-Controlled Salt/Challenge and Fast Double-SHA256, Enabling Offline Brute-Force

libceph: fix invalid accesses to ceph_connection_v1_info

Spectrum session token in URL

xfrm: iptfs: preserve shared-frag marker in iptfs_consume_frags()

Use after free in GPU in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)