- smb: client: fix use-after-free in smb2_query_info_compound() {CVE-2023-52751} - smb: client: prevent new fids from being removed by laundromat {CVE-2023-52751} - cifs: fix dentry lookups in directory handle cache {CVE-2023-52751} - cifs: return a single-use cfid if we did not get a lease {CVE-2023-52751} - cifs: Check the lease context if we actually got a lease {CVE-2023-52751} - cifs: set rc to -ENOENT if we can not get a dentry for the cached dir {CVE-2023-52751} - cifs: use LIST_HEAD() and list_move() to simplify code {CVE-2023-52751} - cifs: fix wrong unlock before return from cifs_tree_connect() {CVE-2023-52751} - uprobe: avoid out-of-bounds memory access of fetching args {CVE-2024-50067} - net: do not delay dst_entries_add() in dst_release() {CVE-2024-50036} - smb: client: fix UAF in async decryption {CVE-2024-50047} - smb3: rename encryption/decryption TFMs - mm: call the security_mmap_file() LSM hook in remap_file_pages() {CVE-2024-47745} - ext4: avoid OOB when system.data xattr changes underneath the filesystem {CVE-2024-47701} - tty: n_gsm: Fix use-after-free in gsm_cleanup_mux {CVE-2024-50073} - driver core: bus: Fix double free in driver API bus_register() {CVE-2024-50055} - drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer {CVE-2024-49991} - drm/amd/display: fix double free issue during amdgpu module unload {CVE-2024-49989} - ext4: fix timer use-after-free on failed mount {CVE-2024-49960} - Bluetooth: L2CAP: Fix uaf in l2cap_connect {CVE-2024-49950} - Bluetooth: l2cap: Don't double set the HCI_CONN_MGMT_CONNECTED bit {CVE-2024-49950} - mptcp: pm: Fix uaf in __timer_delete_sync {CVE-2024-46858} - of: fdt: fix off-by-one error in unflatten_dt_nodes() {CVE-2022-48672} - filelock: fix potential use-after-free in posix_lock_inode {CVE-2024-41049} - locks: fix KASAN: use-after-free in trace_event_raw_event_filelock_lock {CVE-2024-41049} - drm/i915/gt: Fix potential UAF by revoke of fence registers {CVE-2024-41092} - ext4: no need to continue when the number of entries is 1 {CVE-2024-49967} - drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation {CVE-2024-49895} - slip: make slhc_remember() more robust against malicious packets {CVE-2024-50033} - drm/amd/display: Fix index out of bounds in DCN30 color transformation {CVE-2024-49969} - drm/amd/display: Fix index out of bounds in degamma hardware format translation {CVE-2024-49894} - ext4: aovid use-after-free in ext4_ext_insert_extent() {CVE-2024-49883} - ACPI: sysfs: validate return type of _STR method {CVE-2024-49860} - ext4: fix double brelse() the buffer of the extents path {CVE-2024-49882} - tipc: guard against string buffer overrun {CVE-2024-49995} - drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error {CVE-2024-47698} - firmware_loader: Block path traversal {CVE-2024-47742} - ppp: fix ppp_async_encode() illegal access {CVE-2024-50035} - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() {CVE-2024-47685} - ext4: fix slab-use-after-free in ext4_split_extent_at() {CVE-2024-49884} - drm/amd/display: Correct the defined value for AMDGPU_DMUB_NOTIFICATION_MAX {CVE-2024-46871} - ext4: avoid use-after-free in ext4_ext_show_leaf() {CVE-2024-49889} - wifi: ath11k: fix array out-of-bound access in SoC stats {CVE-2024-49930} - net: do not leave a dangling sk pointer, when socket creation fails {CVE-2024-40954} - net: sched: sch_multiq: fix possible OOB write in multiq_tune() {CVE-2024-36978} - drm/amdgpu: Validate TA binary size {CVE-2024-44977}