* Update to upstream stable Linux 5.10.272 (from 5.10.271). * Bump kernel ABI to 51: ship the ELS kernel as 5.10.0-51-*, distinct from the prior 5.10.0-50. * CVE-2021-47200 - drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap {CVE-2021-47200} * CVE-2022-50000 - netfilter: flowtable: fix stuck flows on cleanup due to pending work {CVE-2022-50000} * CVE-2023-53111 - loop: Fix use-after-free issues {CVE-2023-53111} * CVE-2023-53577 - bpf, cpumap: Make sure kthread is running before map update returns {CVE-2023-53577} * CVE-2024-35864 - smb: client: fix potential UAF in smb2_is_valid_lease_break() {CVE-2024-35864} * CVE-2024-35939 - dma-direct: Leak pages on dma_set_decrypted() failure {CVE-2024-35939} * CVE-2024-41013 - xfs: don't walk off the end of a directory data block {CVE-2024-41013} * CVE-2024-44934 - net: bridge: mcast: wait for previous gc cycles when removing port {CVE-2024-44934} * CVE-2024-50063 - bpf: Prevent tail call between progs attached to different hooks {CVE-2024-50063} * CVE-2024-53095 - net: make sock_inuse_add() available {CVE-2024-53095} - smb: client: Fix use-after-free of network namespace. {CVE-2024-53095} * CVE-2024-53168 - sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket {CVE-2024-53168} * CVE-2025-39797 - xfrm: Duplicate SPI Handling {CVE-2025-39797} * CVE-2025-39965 - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI {CVE-2025-39965} * CVE-2025-40075 - net: dst: introduce dst->dev_rcu {CVE-2025-40075} - tcp_metrics: use dst_dev_net_rcu() {CVE-2025-40075} * CVE-2025-68188 - tcp: use dst_dev_rcu() in tcp_fastopen_active_disable_ofo_check() {CVE-2025-68188} * CVE-2026-31527 - driver core: platform: use generic driver_override infrastructure {CVE-2026-31527} * CVE-2026-43329 - netfilter: flowtable: separate replace, destroy and stats to different workqueues {CVE-2026-43329} - netfilter: flowtable: pass flowtable to nf_flow_table_iterate() {CVE-2026-43329} - netfilter: flowtable: add function to invoke garbage collection immediately {CVE-2026-43329} - netfilter: flowtable: strictly check for maximum number of actions {CVE-2026-43329} * CVE-2026-46119 - libceph: Fix slab-out-of-bounds access in auth message processing {CVE-2026-46119} * CVE-2026-46266 - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP {CVE-2026-46266} * CVE-2026-52956 - libceph: Fix potential out-of-bounds access in __ceph_x_decrypt() {CVE-2026-52956} * CVE-2026-53091 - net: pull headers in qdisc_pkt_len_segs_init() {CVE-2026-53091} - xfrm: Don't clobber inner headers when already set {CVE-2026-53091} * CVE-2026-53120 - PCI: use generic driver_override infrastructure {CVE-2026-53120} * CVE-2026-53131 - netfilter: require Ethernet MAC header before using eth_hdr() {CVE-2026-53131} * CVE-2026-64109 - af_unix: Fix UAF read of tail->len in unix_stream_data_wait() {CVE-2026-64109} * CVE-2026-64424 - netpoll: fix a use-after-free on shutdown path {CVE-2026-64424} * CVE-2026-68399 - bpf: Fix UAF in sock clone early bailouts {CVE-2026-68399} * CVE-2026-68426 - xfrm: fix stale skb->prev after async crypto steals a GSO segment {CVE-2026-68426} * CVE-2026-72389 - bridge: stp: Fix a potential use-after-free when deleting a bridge {CVE-2026-72389} * CVE-2026-74289 - ipv4: fib: Don't dump dying fib_info in fib_leaf_notify(). {CVE-2026-74289} * CVE-2026-74550 - net: do not send ICMP/NDISC Redirects when peer allocation fails {CVE-2026-74550} * CVE-2026-89537 - SUNRPC: Reject short RFC 4121 MIC tokens in gss_krb5_verify_mic_v2 {CVE-2026-89537} * CVE-2026-89550 - SUNRPC: svcauth_gss: enforce krb5 token minimum length {CVE-2026-89550} * CVE-2026-89564 - ip: orphan prefetched skbs before multicast forwarding {CVE-2026-89564} * CVE-2026-90111 - ip6mr: do not clone dst in ip6mr_cache_report() {CVE-2026-90111} * CVE-2026-98364 - xfrm: hold net_device reference under RCU in bundle creation {CVE-2026-98364} * CVE-2026-98432 - ipv4: free inet_opt and ireq_opt after an RCU grace period {CVE-2026-98432} * CVE-2026-99999 - ipv4: validate checksum_start before completing checksum {CVE-2026-99999} * Miscellaneous upstream changes - netfilter: nfnetlink_queue: unbreak SCTP traffic - Linux 5.10.272 - driver core: generalize driver_override in struct device - hwmon: axi-fan: don't use driver_override as IRQ name - netfilter: nf_tables: fix bidirectional offload regression