{"id":"CVE-2024-53073","aliases":["BELL-CVE-2024-53073","DEBIAN-CVE-2024-53073","EUVD-2024-50489","GHSA-4f73-836m-4mcr","OESA-2024-2518","OESA-2024-2519","OESA-2024-2521","OESA-2024-2522","SUSE-SU-2026:24550-1","SUSE-SU-2026:24619-1","SUSE-SU-2026:5091-1","UBUNTU-CVE-2024-53073"],"status":"published","title":"NFSD: Never decrement pending_async_copies on error","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nNFSD: Never decrement pending_async_copies on error\n\nThe error flow in nfsd4_copy() calls cleanup_async_copy(), which\nalready decrements nn-\u003epending_async_copies.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-12","score":0.00507,"percentile":0.43814,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2024-11-19T17:31:38Z","modified":"2026-11-12T17:29:32Z","fixes":[{"ecosystem":"Linux","package":"Kernel","fixed_in":["6.11.7"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"linux","fixed_in":["6.11.7-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"linux","fixed_in":["6.11.7-1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Linux","package":"Kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.11.3"},{"fixed":"6.11.7"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.11.7-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.11.7-1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.10.0-239.0.0.138.oe2203sp4"}]}],"bundled":27},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP3","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.10.0-239.0.0.141.oe2203sp3"}]}],"bundled":27},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP1","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.10.0-136.104.0.185.oe2203sp1"}]}],"bundled":27},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.6.0-61.0.0.60.oe2403"}]}],"bundled":66},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-159998.55.1"}]}],"bundled":1056},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"kernel-default-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-159998.55.1.159998.21.42"}]}],"bundled":1056},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"kernel-kvmsmall","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-159998.55.1"}]}],"bundled":1056},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-159998.55.1"}]}],"bundled":1056},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-159998.55.1"}]}],"bundled":1056},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"kernel-default-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-159998.55.1.159998.21.41"}]}],"bundled":1056},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"kernel-kvmsmall","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-159998.55.1"}]}],"bundled":1056},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-159998.55.1"}]}],"bundled":1056},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"kernel-64kb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150700.53.90.1"}]}],"bundled":1077},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150700.53.90.1"}]}],"bundled":1077},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"kernel-default-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150700.53.90.1.150700.17.51.1"}]}],"bundled":1077},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150700.53.90.1"}]}],"bundled":1077},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"kernel-zfcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150700.53.90.1"}]}],"bundled":1077},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP7","package":"kernel-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150700.53.90.1"}]}],"bundled":1077},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP7","package":"kernel-obs-build","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150700.53.90.1"}]}],"bundled":1077},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP7","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150700.53.90.1"}]}],"bundled":1077},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP7","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150700.53.90.1"}]}],"bundled":1077},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Legacy 15 SP7","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150700.53.90.1"}]}],"bundled":1077},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Live Patching 15 SP7","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150700.53.90.1"}]}],"bundled":1077},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Live Patching 15 SP7","package":"kernel-livepatch-SLE15-SP7_Update_24","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1-150700.15.3.1"}]}],"bundled":1077},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP7","package":"kernel-azure","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150700.53.90.1"}]}],"bundled":1077},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Availability Extension 15 SP7","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150700.53.90.1"}]}],"bundled":1077},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP7","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150700.53.90.1"}]}],"bundled":1077},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"linux-hwe-edge","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.8.0-28.30~16.04.1","4.8.0-30.32~16.04.1","4.8.0-32.34~16.04.1","4.8.0-34.36~16.04.1","4.10.0-14.16~16.04.1","4.10.0-19.21~16.04.1","4.10.0-20.22~16.04.1","4.10.0-21.23~16.04.1","4.10.0-22.24~16.04.1","4.10.0-24.28~16.04.1","4.10.0-26.30~16.04.1","4.11.0-13.19~16.04.1","4.11.0-14.20~16.04.1","4.13.0-16.19~16.04.3","4.13.0-17.20~16.04.1","4.13.0-19.22~16.04.1","4.13.0-21.24~16.04.1","4.13.0-25.29~16.04.2","4.15.0-13.14~16.04.1","4.15.0-15.16~16.04.1","4.15.0-20.21~16.04.1","4.15.0-22.24~16.04.1","4.15.0-23.25~16.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-aws-5.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.0.0-1021.24~18.04.1","5.0.0-1022.25~18.04.1","5.0.0-1023.26~18.04.1","5.0.0-1024.27~18.04.1","5.0.0-1025.28","5.0.0-1027.30"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-aws-5.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.3.0-1016.17~18.04.1","5.3.0-1017.18~18.04.1","5.3.0-1019.21~18.04.1","5.3.0-1023.25~18.04.1","5.3.0-1028.30~18.04.1","5.3.0-1030.32~18.04.1","5.3.0-1032.34~18.04.2","5.3.0-1033.35","5.3.0-1034.36","5.3.0-1035.37"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"linux-aws-5.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-1018.18~18.04.1","5.4.0-1020.20~18.04.2","5.4.0-1022.22~18.04.1","5.4.0-1024.24~18.04.1","5.4.0-1025.25~18.04.1","5.4.0-1028.29~18.04.1","5.4.0-1029.30~18.04.1","5.4.0-1030.31~18.04.1","5.4.0-1032.33~18.04.1","5.4.0-1034.35~18.04.1","5.4.0-1035.37~18.04.1","5.4.0-1037.39~18.04.1","5.4.0-1038.40~18.04.1","5.4.0-1039.41~18.04.1","5.4.0-1041.43~18.04.1","5.4.0-1043.45~18.04.1","5.4.0-1045.47~18.04.1","5.4.0-1047.49~18.04.1","5.4.0-1048.50~18.04.1","5.4.0-1049.51~18.04.1","5.4.0-1051.53~18.04.1","5.4.0-1054.57~18.04.1","5.4.0-1055.58~18.04.1","5.4.0-1056.59~18.04.1","5.4.0-1057.60~18.04.1","5.4.0-1058.61~18.04.3","5.4.0-1059.62~18.04.1","5.4.0-1060.63~18.04.1","5.4.0-1061.64~18.04.1","5.4.0-1063.66~18.04.1","5.4.0-1064.67~18.04.1","5.4.0-1065.68~18.04.1","5.4.0-1066.69~18.04.1","5.4.0-1068.72~18.04.1","5.4.0-1069.73~18.04.1","5.4.0-1071.76~18.04.1","5.4.0-1072.77~18.04.1","5.4.0-1075.80~18.04.1","5.4.0-1078.84~18.04.1","5.4.0-1080.87~18.04.1","5.4.0-1081.88~18.04.1","5.4.0-1083.90~18.04.1","5.4.0-1084.91~18.04.1","5.4.0-1085.92~18.04.1","5.4.0-1086.93~18.04.1","5.4.0-1088.96~18.04.1","5.4.0-1089.97~18.04.1","5.4.0-1090.98~18.04.1","5.4.0-1092.100~18.04.2","5.4.0-1093.102~18.04.2","5.4.0-1094.102~18.04.1","5.4.0-1096.104~18.04.1","5.4.0-1097.105~18.04.1","5.4.0-1099.107~18.04.1","5.4.0-1100.108~18.04.1","5.4.0-1101.109~18.04.1","5.4.0-1103.111~18.04.1","5.4.0-1104.112~18.04.1","5.4.0-1105.113~18.04.1","5.4.0-1106.114~18.04.1","5.4.0-1107.115~18.04.1","5.4.0-1108.116~18.04.1","5.4.0-1109.118~18.04.1","5.4.0-1110.119~18.04.1","5.4.0-1111.120~18.04.1","5.4.0-1112.121~18.04.2","5.4.0-1113.123~18.04.1","5.4.0-1114.124~18.04.1","5.4.0-1116.126~18.04.1","5.4.0-1117.127~18.04.1","5.4.0-1118.128~18.04.1","5.4.0-1119.129~18.04.1","5.4.0-1120.130~18.04.1","5.4.0-1121.131~18.04.1","5.4.0-1122.132~18.04.1","5.4.0-1123.133~18.04.1","5.4.0-1124.134~18.04.1","5.4.0-1125.135~18.04.1","5.4.0-1126.136~18.04.1","5.4.0-1127.137~18.04.2","5.4.0-1128.138~18.04.1","5.4.0-1129.139~18.04.1","5.4.0-1130.140~18.04.1","5.4.0-1131.141~18.04.1","5.4.0-1132.142~18.04.1","5.4.0-1133.143~18.04.1","5.4.0-1134.144~18.04.1","5.4.0-1135.145~18.04.1","5.4.0-1136.146~18.04.1","5.4.0-1137.147~18.04.1","5.4.0-1139.149~18.04.1","5.4.0-1142.152~18.04.1","5.4.0-1144.154~18.04.1","5.4.0-1145.155~18.04.1","5.4.0-1146.156~18.04.1","5.4.0-1147.157~18.04.1","5.4.0-1148.158~18.04.1","5.4.0-1149.159~18.04.1","5.4.0-1150.160~18.04.1","5.4.0-1151.161~18.04.1","5.4.0-1152.162~18.04.1","5.4.0-1153.163~18.04.1","5.4.0-1154.164~18.04.1","5.4.0-1156.166~18.04.1","5.4.0-1157.167~18.04.1","5.4.0-1158.168~18.04.1","5.4.0-1160.170~18.04.1","5.4.0-1161.172~18.04.1","5.4.0-1162.173~18.04.1","5.4.0-1163.174~18.04.1","5.4.0-1165.176~18.04.1","5.4.0-1167.178~18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-azure","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.15.0-1002.2","4.15.0-1003.3","4.15.0-1004.4","4.15.0-1008.8","4.15.0-1009.9","4.15.0-1012.12","4.15.0-1013.13","4.15.0-1014.14","4.15.0-1018.18","4.15.0-1019.19","4.15.0-1021.21","4.15.0-1022.23","4.15.0-1023.24","4.15.0-1025.26","4.15.0-1028.29","4.15.0-1030.31","4.15.0-1031.32","4.15.0-1032.33","4.15.0-1035.36","4.15.0-1036.38","4.15.0-1037.39","4.18.0-1011.11~18.04.1","4.18.0-1013.13~18.04.1","4.18.0-1014.14~18.04.1","4.18.0-1018.18~18.04.1","4.18.0-1019.19~18.04.1","4.18.0-1020.20~18.04.1","4.18.0-1023.24~18.04.1","4.18.0-1024.25~18.04.1","4.18.0-1025.27~18.04.1","5.0.0-1014.14~18.04.1","5.0.0-1016.17~18.04.1","5.0.0-1018.19~18.04.1","5.0.0-1020.21~18.04.1","5.0.0-1022.23~18.04.1","5.0.0-1023.24~18.04.1","5.0.0-1025.27~18.04.1","5.0.0-1027.29~18.04.1","5.0.0-1028.30~18.04.1","5.0.0-1029.31~18.04.1","5.0.0-1031.33","5.0.0-1032.34","5.0.0-1035.37","5.0.0-1036.38"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-azure-5.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.3.0-1007.8~18.04.1","5.3.0-1008.9~18.04.1","5.3.0-1009.10~18.04.1","5.3.0-1010.11~18.04.1","5.3.0-1012.13~18.04.1","5.3.0-1013.14~18.04.1","5.3.0-1016.17~18.04.1","5.3.0-1018.19~18.04.1","5.3.0-1019.20~18.04.1","5.3.0-1020.21~18.04.1","5.3.0-1022.23~18.04.1","5.3.0-1028.29~18.04.1","5.3.0-1031.32~18.04.1","5.3.0-1032.33~18.04.1","5.3.0-1034.35~18.04.1","5.3.0-1035.36"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"linux-azure-5.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-1020.20~18.04.1","5.4.0-1022.22~18.04.1","5.4.0-1023.23~18.04.1","5.4.0-1025.25~18.04.1","5.4.0-1026.26~18.04.1","5.4.0-1031.32~18.04.1","5.4.0-1032.33~18.04.1","5.4.0-1034.35~18.04.1","5.4.0-1035.36~18.04.1","5.4.0-1036.38~18.04.1","5.4.0-1039.41~18.04.1","5.4.0-1040.42~18.04.1","5.4.0-1041.43~18.04.1","5.4.0-1043.45~18.04.1","5.4.0-1044.46~18.04.1","5.4.0-1046.48~18.04.1","5.4.0-1047.49~18.04.1","5.4.0-1048.50~18.04.1","5.4.0-1049.51~18.04.1","5.4.0-1051.53~18.04.1","5.4.0-1055.57~18.04.1","5.4.0-1056.58~18.04.1","5.4.0-1058.60~18.04.1","5.4.0-1059.62~18.04.1","5.4.0-1061.64~18.04.1","5.4.0-1062.65~18.04.1","5.4.0-1063.66~18.04.1","5.4.0-1064.67~18.04.1","5.4.0-1065.68~18.04.1","5.4.0-1067.70~18.04.1","5.4.0-1068.71~18.04.1","5.4.0-1069.72~18.04.1","5.4.0-1070.73~18.04.1","5.4.0-1072.75~18.04.1","5.4.0-1073.76~18.04.1","5.4.0-1074.77~18.04.1","5.4.0-1077.80~18.04.1","5.4.0-1078.81~18.04.1","5.4.0-1080.83~18.04.2","5.4.0-1083.87~18.04.1","5.4.0-1085.90~18.04.1","5.4.0-1086.91~18.04.1","5.4.0-1089.94~18.04.1","5.4.0-1090.95~18.04.1","5.4.0-1091.96~18.04.1","5.4.0-1094.100~18.04.1","5.4.0-1095.101~18.04.1","5.4.0-1098.104~18.04.2","5.4.0-1100.106~18.04.1","5.4.0-1101.107~18.04.1","5.4.0-1103.109~18.04.1","5.4.0-1104.110~18.04.1","5.4.0-1105.111~18.04.1","5.4.0-1106.112~18.04.1","5.4.0-1107.113~18.04.1","5.4.0-1108.114~18.04.1","5.4.0-1109.115~18.04.1","5.4.0-1110.116~18.04.1","5.4.0-1111.117~18.04.1","5.4.0-1112.118~18.04.1","5.4.0-1113.119~18.04.1","5.4.0-1115.122~18.04.1","5.4.0-1116.123~18.04.1","5.4.0-1117.124~18.04.1","5.4.0-1118.125~18.04.1","5.4.0-1119.126~18.04.2","5.4.0-1120.127~18.04.1","5.4.0-1121.128~18.04.1","5.4.0-1122.129~18.04.1","5.4.0-1123.130~18.04.1","5.4.0-1124.131~18.04.1","5.4.0-1126.133~18.04.1","5.4.0-1127.134~18.04.1","5.4.0-1128.135~18.04.1","5.4.0-1129.136~18.04.1","5.4.0-1130.137~18.04.1","5.4.0-1131.138~18.04.1","5.4.0-1132.139~18.04.1","5.4.0-1133.140~18.04.1","5.4.0-1134.141~18.04.1","5.4.0-1135.142~18.04.1","5.4.0-1136.143~18.04.1","5.4.0-1137.144~18.04.1","5.4.0-1138.145~18.04.1","5.4.0-1139.146~18.04.1","5.4.0-1140.147~18.04.1","5.4.0-1142.149~18.04.1","5.4.0-1143.150~18.04.1","5.4.0-1145.152~18.04.1","5.4.0-1147.154~18.04.1","5.4.0-1148.155~18.04.1","5.4.0-1149.156~18.04.1","5.4.0-1150.157~18.04.1","5.4.0-1151.158~18.04.1","5.4.0-1152.159~18.04.1","5.4.0-1153.160~18.04.1","5.4.0-1154.161~18.04.1","5.4.0-1156.163~18.04.1","5.4.0-1157.164~18.04.1","5.4.0-1161.167~18.04.1","5.4.0-1162.168~18.04.1","5.4.0-1163.169~18.04.1","5.4.0-1164.170~18.04.1","5.4.0-1166.172~18.04.1","5.4.0-1167.173~18.04.1","5.4.0-1168.174~18.04.1","5.4.0-1169.175~18.04.1","5.4.0-1170.176~18.04.1","5.4.0-1171.177~18.04.1","5.4.0-1172.178~18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-azure-edge","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.18.0-1006.6~18.04.1","4.18.0-1007.7~18.04.1","4.18.0-1008.8~18.04.1","5.0.0-1012.12~18.04.2"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-gcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.15.0-1001.1","4.15.0-1003.3","4.15.0-1005.5","4.15.0-1006.6","4.15.0-1008.8","4.15.0-1009.9","4.15.0-1010.10","4.15.0-1014.14","4.15.0-1015.15","4.15.0-1017.18","4.15.0-1018.19","4.15.0-1019.20","4.15.0-1021.22","4.15.0-1023.24","4.15.0-1024.25","4.15.0-1025.26","4.15.0-1026.27","4.15.0-1027.28","4.15.0-1028.29","4.15.0-1029.31","4.15.0-1030.32","4.15.0-1032.34","4.15.0-1033.35","4.15.0-1034.36","4.15.0-1036.38","4.15.0-1037.39","4.15.0-1040.42","4.15.0-1042.45","4.15.0-1044.70","5.0.0-1020.20~18.04.1","5.0.0-1021.21~18.04.1","5.0.0-1025.26~18.04.1","5.0.0-1026.27~18.04.1","5.0.0-1028.29~18.04.1","5.0.0-1029.30~18.04.1","5.0.0-1031.32","5.0.0-1033.34","5.0.0-1034.35"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-gcp-5.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.3.0-1008.9~18.04.1","5.3.0-1009.10~18.04.1","5.3.0-1010.11~18.04.1","5.3.0-1012.13~18.04.1","5.3.0-1014.15~18.04.1","5.3.0-1016.17~18.04.1","5.3.0-1017.18~18.04.1","5.3.0-1018.19~18.04.1","5.3.0-1020.22~18.04.1","5.3.0-1026.28~18.04.1","5.3.0-1029.31~18.04.1","5.3.0-1030.32~18.04.1","5.3.0-1032.34~18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"linux-gcp-5.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-1019.19~18.04.2","5.4.0-1021.21~18.04.1","5.4.0-1022.22~18.04.1","5.4.0-1024.24~18.04.1","5.4.0-1025.25~18.04.1","5.4.0-1028.29~18.04.1","5.4.0-1029.31~18.04.1","5.4.0-1030.32~18.04.1","5.4.0-1032.34~18.04.1","5.4.0-1033.35~18.04.1","5.4.0-1034.37~18.04.1","5.4.0-1036.39~18.04.1","5.4.0-1037.40~18.04.1","5.4.0-1038.41~18.04.1","5.4.0-1040.43~18.04.1","5.4.0-1041.44~18.04.1","5.4.0-1042.45~18.04.1","5.4.0-1043.46~18.04.1","5.4.0-1044.47~18.04.2","5.4.0-1046.49~18.04.1","5.4.0-1049.53~18.04.1","5.4.0-1051.55~18.04.1","5.4.0-1052.56~18.04.1","5.4.0-1053.57~18.04.1","5.4.0-1055.59~18.04.1","5.4.0-1056.60~18.04.1","5.4.0-1057.61~18.04.1","5.4.0-1058.62~18.04.1","5.4.0-1059.63~18.04.1","5.4.0-1060.64~18.04.1","5.4.0-1062.66~18.04.1","5.4.0-1063.67~18.04.1","5.4.0-1064.68~18.04.1","5.4.0-1065.69~18.04.1","5.4.0-1067.71~18.04.1","5.4.0-1068.72~18.04.1","5.4.0-1069.73~18.04.1","5.4.0-1072.77~18.04.1","5.4.0-1073.78~18.04.1","5.4.0-1075.80~18.04.1","5.4.0-1078.84~18.04.1","5.4.0-1080.87~18.04.1","5.4.0-1083.91~18.04.1","5.4.0-1084.92~18.04.1","5.4.0-1086.94~18.04.1","5.4.0-1087.95~18.04.1","5.4.0-1089.97~18.04.1","5.4.0-1092.101~18.04.1","5.4.0-1093.102~18.04.1","5.4.0-1096.105~18.04.2","5.4.0-1097.106~18.04.1","5.4.0-1098.107~18.04.1","5.4.0-1100.109~18.04.1","5.4.0-1101.110~18.04.1","5.4.0-1102.111~18.04.2","5.4.0-1103.112~18.04.1","5.4.0-1104.113~18.04.1","5.4.0-1105.114~18.04.1","5.4.0-1106.115~18.04.1","5.4.0-1107.116~18.04.1","5.4.0-1108.117~18.04.1","5.4.0-1109.118~18.04.1","5.4.0-1110.119~18.04.1","5.4.0-1111.120~18.04.1","5.4.0-1112.121~18.04.1","5.4.0-1113.122~18.04.1","5.4.0-1115.124~18.04.1","5.4.0-1116.125~18.04.1","5.4.0-1117.126~18.04.1","5.4.0-1118.127~18.04.1","5.4.0-1120.129~18.04.1","5.4.0-1121.130~18.04.1","5.4.0-1122.131~18.04.1","5.4.0-1123.132~18.04.1","5.4.0-1124.133~18.04.1","5.4.0-1125.134~18.04.1","5.4.0-1126.135~18.04.1","5.4.0-1127.136~18.04.1","5.4.0-1128.137~18.04.1","5.4.0-1129.138~18.04.1","5.4.0-1130.139~18.04.1","5.4.0-1132.141~18.04.1","5.4.0-1133.142~18.04.1","5.4.0-1134.143~18.04.1","5.4.0-1135.144~18.04.1","5.4.0-1136.145~18.04.1","5.4.0-1137.146~18.04.1","5.4.0-1138.147~18.04.1","5.4.0-1139.148~18.04.1","5.4.0-1140.149~18.04.1","5.4.0-1141.150~18.04.1","5.4.0-1142.151~18.04.1","5.4.0-1143.152~18.04.1","5.4.0-1145.154~18.04.1","5.4.0-1147.156~18.04.1","5.4.0-1148.157~18.04.1","5.4.0-1149.158~18.04.1","5.4.0-1150.159~18.04.1","5.4.0-1151.160~18.04.1","5.4.0-1152.161~18.04.1","5.4.0-1153.162~18.04.1","5.4.0-1154.163~18.04.1","5.4.0-1155.164~18.04.1","5.4.0-1156.165~18.04.1","5.4.0-1157.166~18.04.1","5.4.0-1159.168~18.04.1","5.4.0-1160.169~18.04.1","5.4.0-1161.170~18.04.1","5.4.0-1162.171~18.04.1","5.4.0-1163.172~18.04.1","5.4.0-1164.173~18.04.1","5.4.0-1165.174~18.04.1","5.4.0-1166.175~18.04.1","5.4.0-1167.176~18.04.1","5.4.0-1168.178~18.04.1","5.4.0-1169.179~18.04.1","5.4.0-1170.180~18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-gke-4.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.15.0-1030.32","4.15.0-1032.34","4.15.0-1033.35","4.15.0-1034.36","4.15.0-1036.38","4.15.0-1037.39","4.15.0-1040.42","4.15.0-1041.43","4.15.0-1042.44","4.15.0-1044.46","4.15.0-1045.48","4.15.0-1046.49","4.15.0-1048.51","4.15.0-1049.52","4.15.0-1050.53","4.15.0-1052.55","4.15.0-1055.58","4.15.0-1057.60","4.15.0-1058.61","4.15.0-1059.62","4.15.0-1063.66","4.15.0-1064.67","4.15.0-1066.69","4.15.0-1067.70","4.15.0-1069.72","4.15.0-1070.73","4.15.0-1072.76","4.15.0-1073.78","4.15.0-1074.79","4.15.0-1076.81","4.15.0-1077.82","4.15.0-1078.83","4.15.0-1079.84"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-gke-5.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-1025.25~18.04.1","5.4.0-1027.28~18.04.1","5.4.0-1029.31~18.04.1","5.4.0-1030.32~18.04.1","5.4.0-1032.34~18.04.1","5.4.0-1033.35~18.04.1","5.4.0-1035.37~18.04.1","5.4.0-1036.38~18.04.1","5.4.0-1037.39~18.04.1","5.4.0-1039.41~18.04.1","5.4.0-1040.42~18.04.1","5.4.0-1042.44~18.04.1","5.4.0-1043.45~18.04.1","5.4.0-1044.46~18.04.1","5.4.0-1046.48~18.04.1","5.4.0-1049.52~18.04.1","5.4.0-1051.54~18.04.1","5.4.0-1052.55~18.04.1","5.4.0-1053.56~18.04.1","5.4.0-1054.57~18.04.1","5.4.0-1055.58~18.04.1","5.4.0-1056.59~18.04.1","5.4.0-1057.60~18.04.1","5.4.0-1059.62~18.04.1","5.4.0-1061.64~18.04.1","5.4.0-1062.65~18.04.1","5.4.0-1063.66~18.04.1","5.4.0-1065.68~18.04.1","5.4.0-1066.69~18.04.1","5.4.0-1067.70~18.04.1","5.4.0-1068.71~18.04.1","5.4.0-1071.76~18.04.3","5.4.0-1072.77~18.04.1","5.4.0-1074.79~18.04.1","5.4.0-1076.82~18.04.1","5.4.0-1078.84~18.04.1","5.4.0-1080.86~18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-gkeop-5.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-1001.1","5.4.0-1003.3","5.4.0-1004.5","5.4.0-1005.6","5.4.0-1007.8~18.04.1","5.4.0-1008.9~18.04.1","5.4.0-1009.10~18.04.1","5.4.0-1010.11~18.04.1","5.4.0-1011.12~18.04.2","5.4.0-1012.13~18.04.1","5.4.0-1013.14~18.04.1","5.4.0-1014.15~18.04.1","5.4.0-1015.16~18.04.1","5.4.0-1016.17~18.04.1","5.4.0-1018.19~18.04.1","5.4.0-1021.22~18.04.1","5.4.0-1022.23~18.04.1","5.4.0-1023.24~18.04.1","5.4.0-1024.25~18.04.1","5.4.0-1025.26~18.04.1","5.4.0-1026.27~18.04.1","5.4.0-1027.28~18.04.1","5.4.0-1029.30~18.04.2","5.4.0-1031.32~18.04.1","5.4.0-1032.33~18.04.1","5.4.0-1033.34~18.04.1","5.4.0-1034.35~18.04.1","5.4.0-1036.37~18.04.1","5.4.0-1037.38~18.04.1","5.4.0-1038.39~18.04.1","5.4.0-1039.40~18.04.1","5.4.0-1040.41~18.04.1","5.4.0-1043.44~18.04.1","5.4.0-1046.48~18.04.1","5.4.0-1048.51~18.04.1","5.4.0-1049.52~18.04.1","5.4.0-1051.54~18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-hwe","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.18.0-13.14~18.04.1","4.18.0-14.15~18.04.1","4.18.0-15.16~18.04.1","4.18.0-16.17~18.04.1","4.18.0-17.18~18.04.1","4.18.0-18.19~18.04.1","4.18.0-20.21~18.04.1","4.18.0-21.22~18.04.1","4.18.0-22.23~18.04.1","4.18.0-24.25~18.04.1","4.18.0-25.26~18.04.1","5.0.0-23.24~18.04.1","5.0.0-25.26~18.04.1","5.0.0-27.28~18.04.1","5.0.0-29.31~18.04.1","5.0.0-31.33~18.04.1","5.0.0-32.34~18.04.2","5.0.0-35.38~18.04.1","5.0.0-36.39~18.04.1","5.0.0-37.40~18.04.1","5.3.0-26.28~18.04.1","5.3.0-28.30~18.04.1","5.3.0-40.32~18.04.1","5.3.0-42.34~18.04.1","5.3.0-45.37~18.04.1","5.3.0-46.38~18.04.1","5.3.0-51.44~18.04.2","5.3.0-53.47~18.04.1","5.3.0-59.53~18.04.1","5.3.0-61.55~18.04.1","5.3.0-62.56~18.04.1","5.3.0-64.58~18.04.1","5.3.0-65.59","5.3.0-66.60","5.3.0-67.61","5.3.0-68.63","5.3.0-69.65","5.3.0-70.66","5.3.0-72.68","5.3.0-73.69","5.3.0-74.70","5.3.0-75.71","5.3.0-76.72"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"linux-hwe-5.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-37.41~18.04.1","5.4.0-39.43~18.04.1","5.4.0-40.44~18.04.1","5.4.0-42.46~18.04.1","5.4.0-45.49~18.04.2","5.4.0-47.51~18.04.1","5.4.0-48.52~18.04.1","5.4.0-51.56~18.04.1","5.4.0-52.57~18.04.1","5.4.0-53.59~18.04.1","5.4.0-54.60~18.04.1","5.4.0-56.62~18.04.1","5.4.0-58.64~18.04.1","5.4.0-59.65~18.04.1","5.4.0-60.67~18.04.1","5.4.0-62.70~18.04.1","5.4.0-64.72~18.04.1","5.4.0-65.73~18.04.1","5.4.0-66.74~18.04.2","5.4.0-67.75~18.04.1","5.4.0-70.78~18.04.1","5.4.0-71.79~18.04.1","5.4.0-72.80~18.04.1","5.4.0-73.82~18.04.1","5.4.0-74.83~18.04.1","5.4.0-77.86~18.04.1","5.4.0-80.90~18.04.1","5.4.0-81.91~18.04.1","5.4.0-84.94~18.04.1","5.4.0-86.97~18.04.1","5.4.0-87.98~18.04.1","5.4.0-89.100~18.04.1","5.4.0-90.101~18.04.1","5.4.0-91.102~18.04.1","5.4.0-92.103~18.04.2","5.4.0-94.106~18.04.1","5.4.0-96.109~18.04.1","5.4.0-97.110~18.04.1","5.4.0-99.112~18.04.1","5.4.0-100.113~18.04.1","5.4.0-104.118~18.04.1","5.4.0-105.119~18.04.1","5.4.0-107.121~18.04.1","5.4.0-109.123~18.04.1","5.4.0-110.124~18.04.1","5.4.0-113.127~18.04.1","5.4.0-117.132~18.04.1","5.4.0-120.136~18.04.1","5.4.0-121.137~18.04.1","5.4.0-122.138~18.04.1","5.4.0-124.140~18.04.1","5.4.0-125.141~18.04.1","5.4.0-126.142~18.04.1","5.4.0-128.144~18.04.1","5.4.0-131.147~18.04.1","5.4.0-132.148~18.04.1","5.4.0-133.149~18.04.1","5.4.0-135.152~18.04.2","5.4.0-136.153~18.04.1","5.4.0-137.154~18.04.1","5.4.0-139.156~18.04.1","5.4.0-144.161~18.04.1","5.4.0-146.163~18.04.1","5.4.0-147.164~18.04.1","5.4.0-148.165~18.04.1","5.4.0-149.166~18.04.1","5.4.0-150.167~18.04.1","5.4.0-152.169~18.04.1","5.4.0-153.170~18.04.1","5.4.0-155.172~18.04.1","5.4.0-156.173~18.04.1","5.4.0-159.176~18.04.1","5.4.0-162.179~18.04.1","5.4.0-163.180~18.04.1","5.4.0-164.181~18.04.1","5.4.0-165.182~18.04.1","5.4.0-166.183~18.04.2","5.4.0-167.184~18.04.1","5.4.0-169.187~18.04.1","5.4.0-170.188~18.04.1","5.4.0-171.189~18.04.1","5.4.0-172.190~18.04.1","5.4.0-173.191~18.04.1","5.4.0-174.193~18.04.1","5.4.0-175.195~18.04.1","5.4.0-177.197~18.04.1","5.4.0-181.201~18.04.1","5.4.0-182.202~18.04.1","5.4.0-186.206~18.04.1","5.4.0-187.207~18.04.1","5.4.0-189.209~18.04.1","5.4.0-190.210~18.04.1","5.4.0-192.212~18.04.1","5.4.0-193.213~18.04.1","5.4.0-195.215~18.04.1","5.4.0-196.216~18.04.1","5.4.0-198.218~18.04.1","5.4.0-200.220~18.04.1","5.4.0-202.222~18.04.1","5.4.0-204.224~18.04.1","5.4.0-205.225~18.04.1","5.4.0-208.228~18.04.1","5.4.0-211.231~18.04.1","5.4.0-212.232~18.04.1","5.4.0-214.234~18.04.1","5.4.0-215.235~18.04.1","5.4.0-216.236~18.04.1","5.4.0-218.238~18.04.1","5.4.0-219.239~18.04.1","5.4.0-220.240~18.04.1","5.4.0-221.241~18.04.1","5.4.0-222.242~18.04.1","5.4.0-223.243~18.04.1","5.4.0-224.244~18.04.1","5.4.0-225.245~18.04.1","5.4.0-227.247~18.04.1","5.4.0-228.248~18.04.1","5.4.0-229.249~18.04.1","5.4.0-231.251~18.04.1","5.4.0-233.253~18.04.1","5.4.0-234.254~18.04.1","5.4.0-238.258~18.04.1","5.4.0-241.261~18.04.1","5.4.0-242.262~18.04.1","5.4.0-244.264~18.04.1","5.4.0-245.265~18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"linux-ibm-5.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-1010.11~18.04.2","5.4.0-1012.13~18.04.1","5.4.0-1014.15~18.04.1","5.4.0-1015.16~18.04.1","5.4.0-1017.19~18.04.1","5.4.0-1018.20~18.04.1","5.4.0-1019.21~18.04.1","5.4.0-1020.22~18.04.1","5.4.0-1021.23~18.04.1","5.4.0-1023.25~18.04.1","5.4.0-1026.29~18.04.1","5.4.0-1028.32~18.04.1","5.4.0-1029.33~18.04.1","5.4.0-1031.35~18.04.1","5.4.0-1032.36~18.04.1","5.4.0-1033.37~18.04.1","5.4.0-1034.38~18.04.1","5.4.0-1036.41~18.04.1","5.4.0-1037.42~18.04.1","5.4.0-1040.45~18.04.2","5.4.0-1041.46~18.04.1","5.4.0-1042.47~18.04.1","5.4.0-1044.49~18.04.1","5.4.0-1045.50~18.04.1","5.4.0-1046.51~18.04.1","5.4.0-1047.52~18.04.1","5.4.0-1048.53~18.04.1","5.4.0-1049.54~18.04.1","5.4.0-1050.55~18.04.1","5.4.0-1051.56~18.04.1","5.4.0-1052.57~18.04.1","5.4.0-1053.58~18.04.1","5.4.0-1054.59~18.04.1","5.4.0-1056.61~18.04.1","5.4.0-1057.62~18.04.1","5.4.0-1058.63~18.04.1","5.4.0-1059.64~18.04.1","5.4.0-1060.65~18.04.1","5.4.0-1061.66~18.04.1","5.4.0-1063.68~18.04.1","5.4.0-1064.69~18.04.1","5.4.0-1065.70~18.04.1","5.4.0-1066.71~18.04.1","5.4.0-1067.72~18.04.1","5.4.0-1068.73~18.04.1","5.4.0-1069.74~18.04.1","5.4.0-1070.75~18.04.1","5.4.0-1071.76~18.04.1","5.4.0-1072.77~18.04.1","5.4.0-1073.78~18.04.1","5.4.0-1074.79~18.04.1","5.4.0-1075.80~18.04.1","5.4.0-1076.81~18.04.1","5.4.0-1077.82~18.04.1","5.4.0-1078.83~18.04.1","5.4.0-1079.84~18.04.1","5.4.0-1080.85~18.04.1","5.4.0-1081.86~18.04.1","5.4.0-1082.87~18.04.1","5.4.0-1083.88~18.04.1","5.4.0-1084.89~18.04.1","5.4.0-1085.90~18.04.1","5.4.0-1086.91~18.04.1","5.4.0-1090.95~18.04.1","5.4.0-1092.97~18.04.1","5.4.0-1093.98~18.04.1","5.4.0-1094.99~18.04.1","5.4.0-1095.100~18.04.1","5.4.0-1096.101~18.04.1","5.4.0-1097.102~18.04.1","5.4.0-1098.103~18.04.1","5.4.0-1099.104~18.04.1","5.4.0-1100.105~18.04.1","5.4.0-1102.107~18.04.1","5.4.0-1103.108~18.04.1","5.4.0-1104.109~18.04.1","5.4.0-1105.110~18.04.1","5.4.0-1107.112~18.04.1","5.4.0-1108.113~18.04.1","5.4.0-1109.114~18.04.1","5.4.0-1111.116~18.04.1","5.4.0-1112.117~18.04.1","5.4.0-1113.118~18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-oem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.15.0-1002.3","4.15.0-1004.5","4.15.0-1006.9","4.15.0-1008.11","4.15.0-1009.12","4.15.0-1012.15","4.15.0-1013.16","4.15.0-1015.18","4.15.0-1017.20","4.15.0-1018.21","4.15.0-1021.24","4.15.0-1024.29","4.15.0-1026.31","4.15.0-1028.33","4.15.0-1030.35","4.15.0-1033.38","4.15.0-1034.39","4.15.0-1035.40","4.15.0-1036.41","4.15.0-1038.43","4.15.0-1039.44","4.15.0-1043.48","4.15.0-1045.50","4.15.0-1050.57","4.15.0-1056.65","4.15.0-1057.66","4.15.0-1059.68","4.15.0-1063.72","4.15.0-1064.73","4.15.0-1065.75","4.15.0-1066.76","4.15.0-1067.77","4.15.0-1069.79","4.15.0-1073.83","4.15.0-1076.86","4.15.0-1079.89","4.15.0-1080.90","4.15.0-1081.91","4.15.0-1087.97","4.15.0-1090.100","4.15.0-1091.101","4.15.0-1093.103","4.15.0-1094.104","4.15.0-1096.106","4.15.0-1097.107","4.15.0-1099.109","4.15.0-1100.110","4.15.0-1101.112","4.15.0-1102.113","4.15.0-1103.114"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-oracle-5.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.0.0-1007.12~18.04.1","5.0.0-1008.13~18.04.1","5.0.0-1009.14~18.04.1","5.0.0-1010.15~18.04.1","5.0.0-1011.16","5.0.0-1013.18","5.0.0-1014.19"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-oracle-5.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.3.0-1011.12~18.04.1","5.3.0-1013.14~18.04.1","5.3.0-1014.15~18.04.1","5.3.0-1016.18~18.04.1","5.3.0-1018.20~18.04.1","5.3.0-1024.26~18.04.1","5.3.0-1027.29~18.04.1","5.3.0-1028.30~18.04.1","5.3.0-1030.32~18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"linux-oracle-5.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-1019.19~18.04.1","5.4.0-1021.21~18.04.1","5.4.0-1022.22~18.04.1","5.4.0-1024.24~18.04.1","5.4.0-1025.25~18.04.1","5.4.0-1028.29~18.04.1","5.4.0-1029.31~18.04.1","5.4.0-1030.32~18.04.1","5.4.0-1033.35","5.4.0-1034.36~18.04.1","5.4.0-1035.38~18.04.1","5.4.0-1037.40~18.04.1","5.4.0-1038.41~18.04.1","5.4.0-1039.42~18.04.1","5.4.0-1041.44~18.04.1","5.4.0-1042.45~18.04.1","5.4.0-1043.46~18.04.1","5.4.0-1044.47~18.04.1","5.4.0-1046.50~18.04.2","5.4.0-1048.52~18.04.1","5.4.0-1049.53~18.04.1","5.4.0-1052.56~18.04.1","5.4.0-1053.57~18.04.1","5.4.0-1054.58~18.04.1","5.4.0-1055.59~18.04.1","5.4.0-1056.60~18.04.1","5.4.0-1057.61~18.04.1","5.4.0-1058.62~18.04.1","5.4.0-1059.63~18.04.1","5.4.0-1061.65~18.04.1","5.4.0-1062.66~18.04.1","5.4.0-1063.67~18.04.1","5.4.0-1064.68~18.04.1","5.4.0-1066.71~18.04.1","5.4.0-1067.72~18.04.1","5.4.0-1069.75~18.04.1","5.4.0-1070.76~18.04.1","5.4.0-1071.77~18.04.1","5.4.0-1073.79~18.04.1","5.4.0-1076.83~18.04.1","5.4.0-1078.86~18.04.1","5.4.0-1079.87~18.04.1","5.4.0-1081.89~18.04.1","5.4.0-1082.90~18.04.1","5.4.0-1083.91~18.04.1","5.4.0-1084.92~18.04.1","5.4.0-1086.95~18.04.1","5.4.0-1087.96~18.04.1","5.4.0-1090.99~18.04.2","5.4.0-1091.100~18.04.1","5.4.0-1092.101~18.04.1","5.4.0-1093.102~18.04.1","5.4.0-1094.103~18.04.1","5.4.0-1098.107~18.04.1","5.4.0-1099.108~18.04.1","5.4.0-1100.109~18.04.1","5.4.0-1101.110~18.04.1","5.4.0-1102.111~18.04.1","5.4.0-1103.112~18.04.1","5.4.0-1104.113~18.04.1","5.4.0-1105.114~18.04.1","5.4.0-1106.115~18.04.1","5.4.0-1107.116~18.04.1","5.4.0-1108.117~18.04.1","5.4.0-1109.118~18.04.1","5.4.0-1110.119~18.04.1","5.4.0-1111.120~18.04.1","5.4.0-1112.121~18.04.4","5.4.0-1113.122~18.04.1","5.4.0-1115.124~18.04.1","5.4.0-1116.125~18.04.1","5.4.0-1117.126~18.04.1","5.4.0-1118.127~18.04.1","5.4.0-1119.128~18.04.1","5.4.0-1120.129~18.04.1","5.4.0-1121.130~18.04.1","5.4.0-1122.131~18.04.1","5.4.0-1123.132~18.04.1","5.4.0-1124.133~18.04.1","5.4.0-1125.134~18.04.1","5.4.0-1126.135~18.04.1","5.4.0-1127.136~18.04.1","5.4.0-1129.138~18.04.1","5.4.0-1130.139~18.04.1","5.4.0-1131.140~18.04.1","5.4.0-1132.141~18.04.1","5.4.0-1133.142~18.04.1","5.4.0-1134.143~18.04.1","5.4.0-1135.144~18.04.1","5.4.0-1136.145~18.04.1","5.4.0-1137.146~18.04.1","5.4.0-1138.147~18.04.1","5.4.0-1140.149~18.04.1","5.4.0-1141.151~18.04.1","5.4.0-1142.152~18.04.1","5.4.0-1143.153~18.04.1","5.4.0-1144.154~18.04.1","5.4.0-1145.155~18.04.1","5.4.0-1146.156~18.04.1","5.4.0-1148.158~18.04.1","5.4.0-1149.159~18.04.1","5.4.0-1150.160~18.04.1","5.4.0-1151.161~18.04.1","5.4.0-1152.162~18.04.1","5.4.0-1154.164~18.04.1","5.4.0-1155.165~18.04.1","5.4.0-1156.166~18.04.2","5.4.0-1157.167~18.04.1","5.4.0-1158.168~18.04.1","5.4.0-1159.169~18.04.1","5.4.0-1161.171~18.04.1","5.4.0-1162.172~18.04.1","5.4.0-1163.173~18.04.1","5.4.0-1164.174~18.04.1","5.4.0-1165.175~18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"linux-raspi-5.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-1013.13~18.04.1","5.4.0-1015.15~18.04.1","5.4.0-1016.17~18.04.1","5.4.0-1018.20~18.04.1","5.4.0-1019.21~18.04.1","5.4.0-1021.24~18.04.1","5.4.0-1022.25~18.04.1","5.4.0-1023.26~18.04.1","5.4.0-1025.28~18.04.1","5.4.0-1026.29~18.04.1","5.4.0-1028.31~18.04.1","5.4.0-1029.32~18.04.1","5.4.0-1030.33~18.04.1","5.4.0-1032.35~18.04.1","5.4.0-1033.36~18.04.1","5.4.0-1034.37~18.04.1","5.4.0-1035.38~18.04.1","5.4.0-1036.39~18.04.1","5.4.0-1038.41~18.04.1","5.4.0-1041.45~18.04.1","5.4.0-1042.46~18.04.3","5.4.0-1043.47~18.04.1","5.4.0-1044.48~18.04.1","5.4.0-1045.49~18.04.1","5.4.0-1046.50~18.04.1","5.4.0-1047.52~18.04.1","5.4.0-1048.53~18.04.1","5.4.0-1050.56~18.04.1","5.4.0-1052.58~18.04.1","5.4.0-1053.60~18.04.1","5.4.0-1055.62~18.04.1","5.4.0-1056.63~18.04.1","5.4.0-1058.65~18.04.1","5.4.0-1059.66~18.04.1","5.4.0-1060.68~18.04.1","5.4.0-1062.70~18.04.1","5.4.0-1065.75~18.04.1","5.4.0-1066.76~18.04.1","5.4.0-1068.78~18.04.1","5.4.0-1069.79~18.04.1","5.4.0-1070.80~18.04.1","5.4.0-1071.81~18.04.1","5.4.0-1073.84~18.04.1","5.4.0-1074.85~18.04.1","5.4.0-1077.88~18.04.2","5.4.0-1078.89~18.04.1","5.4.0-1079.90~18.04.1","5.4.0-1080.91~18.04.1","5.4.0-1081.92~18.04.1","5.4.0-1082.93~18.04.1","5.4.0-1083.94~18.04.1","5.4.0-1084.95~18.04.1","5.4.0-1085.96~18.04.1","5.4.0-1086.97~18.04.1","5.4.0-1088.99~18.04.1","5.4.0-1089.100~18.04.1","5.4.0-1090.101~18.04.1","5.4.0-1091.102~18.04.1","5.4.0-1092.103~18.04.1","5.4.0-1093.104~18.04.1","5.4.0-1094.105~18.04.1","5.4.0-1095.106~18.04.1","5.4.0-1096.107~18.04.1","5.4.0-1097.109~18.04.2","5.4.0-1098.110~18.04.2","5.4.0-1100.112~18.04.1","5.4.0-1101.113~18.04.1","5.4.0-1102.114~18.04.1","5.4.0-1103.115~18.04.1","5.4.0-1104.116~18.04.1","5.4.0-1105.117~18.04.1","5.4.0-1106.118~18.04.1","5.4.0-1107.119~18.04.1","5.4.0-1108.120~18.04.1","5.4.0-1109.121~18.04.1","5.4.0-1110.122~18.04.1","5.4.0-1111.123~18.04.1","5.4.0-1112.124~18.04.1","5.4.0-1114.126~18.04.1","5.4.0-1115.127~18.04.1","5.4.0-1116.128~18.04.1","5.4.0-1117.129~18.04.1","5.4.0-1118.130~18.04.1","5.4.0-1119.131~18.04.1","5.4.0-1120.132~18.04.1","5.4.0-1121.133~18.04.1","5.4.0-1122.134~18.04.1","5.4.0-1129.142~18.04.1","5.4.0-1130.143~18.04.1","5.4.0-1131.144~18.04.1","5.4.0-1132.145~18.04.1","5.4.0-1133.146~18.04.1","5.4.0-1134.147~18.04.1","5.4.0-1135.148~18.04.1","5.4.0-1136.149~18.04.1","5.4.0-1137.150~18.04.1","5.4.0-1139.152~18.04.1","5.4.0-1140.153~18.04.1","5.4.0-1143.156~18.04.1","5.4.0-1144.157~18.04.1","5.4.0-1145.158~18.04.1","5.4.0-1146.159~18.04.1","5.4.0-1147.160~18.04.1","5.4.0-1148.161~18.04.1","5.4.0-1149.162~18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.3.0-18.19","5.3.0-24.26","5.4.0-9.12","5.4.0-18.22","5.4.0-21.25","5.4.0-24.28","5.4.0-25.29","5.4.0-26.30","5.4.0-28.32","5.4.0-29.33","5.4.0-31.35","5.4.0-33.37","5.4.0-37.41","5.4.0-39.43","5.4.0-40.44","5.4.0-42.46","5.4.0-45.49","5.4.0-47.51","5.4.0-48.52","5.4.0-51.56","5.4.0-52.57","5.4.0-53.59","5.4.0-54.60","5.4.0-56.62","5.4.0-58.64","5.4.0-59.65","5.4.0-60.67","5.4.0-62.70","5.4.0-64.72","5.4.0-65.73","5.4.0-66.74","5.4.0-67.75","5.4.0-70.78","5.4.0-71.79","5.4.0-72.80","5.4.0-73.82","5.4.0-74.83","5.4.0-77.86","5.4.0-80.90","5.4.0-81.91","5.4.0-84.94","5.4.0-86.97","5.4.0-88.99","5.4.0-89.100","5.4.0-90.101","5.4.0-91.102","5.4.0-92.103","5.4.0-94.106","5.4.0-96.109","5.4.0-97.110","5.4.0-99.112","5.4.0-100.113","5.4.0-104.118","5.4.0-105.119","5.4.0-107.121","5.4.0-109.123","5.4.0-110.124","5.4.0-113.127","5.4.0-117.132","5.4.0-120.136","5.4.0-121.137","5.4.0-122.138","5.4.0-124.140","5.4.0-125.141","5.4.0-126.142","5.4.0-128.144","5.4.0-131.147","5.4.0-132.148","5.4.0-135.152","5.4.0-136.153","5.4.0-137.154","5.4.0-139.156","5.4.0-144.161","5.4.0-146.163","5.4.0-147.164","5.4.0-148.165","5.4.0-149.166","5.4.0-150.167","5.4.0-152.169","5.4.0-153.170","5.4.0-155.172","5.4.0-156.173","5.4.0-159.176","5.4.0-162.179","5.4.0-163.180","5.4.0-164.181","5.4.0-165.182","5.4.0-166.183","5.4.0-167.184","5.4.0-169.187","5.4.0-170.188","5.4.0-171.189","5.4.0-172.190","5.4.0-173.191","5.4.0-174.193","5.4.0-176.196","5.4.0-177.197","5.4.0-181.201","5.4.0-182.202","5.4.0-186.206","5.4.0-187.207","5.4.0-189.209","5.4.0-190.210","5.4.0-192.212","5.4.0-193.213","5.4.0-195.215","5.4.0-196.216","5.4.0-198.218","5.4.0-200.220","5.4.0-202.222","5.4.0-204.224","5.4.0-205.225","5.4.0-208.228","5.4.0-211.231","5.4.0-212.232","5.4.0-214.234","5.4.0-215.235","5.4.0-216.236","5.4.0-218.238","5.4.0-219.239","5.4.0-220.240","5.4.0-221.241","5.4.0-222.242","5.4.0-223.243","5.4.0-224.244","5.4.0-225.245","5.4.0-227.247","5.4.0-228.248","5.4.0-229.249","5.4.0-230.250","5.4.0-231.251","5.4.0-233.253","5.4.0-234.254","5.4.0-238.258","5.4.0-241.261","5.4.0-242.262","5.4.0-244.264","5.4.0-245.265"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"linux-aws","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.3.0-1003.3","5.3.0-1008.9","5.3.0-1009.10","5.3.0-1010.11","5.4.0-1005.5","5.4.0-1007.7","5.4.0-1008.8","5.4.0-1009.9","5.4.0-1011.11","5.4.0-1015.15","5.4.0-1017.17","5.4.0-1018.18","5.4.0-1020.20","5.4.0-1021.21","5.4.0-1022.22","5.4.0-1024.24","5.4.0-1025.25","5.4.0-1028.29","5.4.0-1029.30","5.4.0-1030.31","5.4.0-1032.33","5.4.0-1034.35","5.4.0-1035.37","5.4.0-1037.39","5.4.0-1038.40","5.4.0-1039.41","5.4.0-1041.43","5.4.0-1043.45","5.4.0-1045.47","5.4.0-1047.49","5.4.0-1048.50","5.4.0-1049.51","5.4.0-1051.53","5.4.0-1054.57","5.4.0-1055.58","5.4.0-1056.59","5.4.0-1057.60","5.4.0-1058.61","5.4.0-1059.62","5.4.0-1060.63","5.4.0-1061.64","5.4.0-1063.66","5.4.0-1064.67","5.4.0-1065.68","5.4.0-1066.69","5.4.0-1068.72","5.4.0-1069.73","5.4.0-1071.76","5.4.0-1072.77","5.4.0-1073.78","5.4.0-1075.80","5.4.0-1078.84","5.4.0-1080.87","5.4.0-1081.88","5.4.0-1083.90","5.4.0-1084.91","5.4.0-1085.92","5.4.0-1086.93","5.4.0-1088.96","5.4.0-1089.97","5.4.0-1092.100","5.4.0-1093.101","5.4.0-1094.102","5.4.0-1096.104","5.4.0-1097.105","5.4.0-1099.107","5.4.0-1100.108","5.4.0-1101.109","5.4.0-1102.110","5.4.0-1103.111","5.4.0-1104.112","5.4.0-1105.113","5.4.0-1106.114","5.4.0-1107.115","5.4.0-1108.116","5.4.0-1109.118","5.4.0-1110.119","5.4.0-1111.120","5.4.0-1112.121","5.4.0-1113.123","5.4.0-1114.124","5.4.0-1116.126","5.4.0-1117.127","5.4.0-1118.128","5.4.0-1119.129","5.4.0-1120.130","5.4.0-1121.131","5.4.0-1122.132","5.4.0-1123.133","5.4.0-1124.134","5.4.0-1125.135","5.4.0-1126.136","5.4.0-1127.137","5.4.0-1128.138","5.4.0-1129.139","5.4.0-1130.140","5.4.0-1131.141","5.4.0-1132.142","5.4.0-1133.143","5.4.0-1134.144","5.4.0-1135.145","5.4.0-1136.146","5.4.0-1137.147","5.4.0-1139.149","5.4.0-1140.150","5.4.0-1142.152","5.4.0-1144.154","5.4.0-1145.155","5.4.0-1146.156","5.4.0-1147.157","5.4.0-1148.158","5.4.0-1149.159","5.4.0-1150.160","5.4.0-1151.161","5.4.0-1152.162","5.4.0-1153.163","5.4.0-1154.164","5.4.0-1156.166","5.4.0-1157.167","5.4.0-1158.168","5.4.0-1159.169","5.4.0-1160.170","5.4.0-1161.172","5.4.0-1162.173","5.4.0-1163.174","5.4.0-1164.175","5.4.0-1165.176","5.4.0-1166.177","5.4.0-1167.178"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-aws-5.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.11.0-1009.9~20.04.2","5.11.0-1014.15~20.04.1","5.11.0-1016.17~20.04.1","5.11.0-1017.18~20.04.1","5.11.0-1019.20~20.04.1","5.11.0-1020.21~20.04.2","5.11.0-1021.22~20.04.2","5.11.0-1022.23~20.04.1","5.11.0-1023.24~20.04.1","5.11.0-1025.27~20.04.1","5.11.0-1027.30~20.04.1","5.11.0-1028.31~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-aws-5.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.13.0-1008.9~20.04.2","5.13.0-1011.12~20.04.1","5.13.0-1012.13~20.04.1","5.13.0-1014.15~20.04.1","5.13.0-1017.19~20.04.1","5.13.0-1019.21~20.04.1","5.13.0-1021.23~20.04.2","5.13.0-1022.24~20.04.1","5.13.0-1023.25~20.04.1","5.13.0-1025.27~20.04.1","5.13.0-1028.31~20.04.1","5.13.0-1029.32~20.04.1","5.13.0-1031.35~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-aws-5.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.8.0-1035.37~20.04.1","5.8.0-1038.40~20.04.1","5.8.0-1041.43~20.04.1","5.8.0-1042.44~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"linux-azure","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.3.0-1003.3","5.3.0-1008.9","5.3.0-1009.10","5.4.0-1006.6","5.4.0-1008.8","5.4.0-1009.9","5.4.0-1010.10","5.4.0-1012.12","5.4.0-1016.16","5.4.0-1019.19","5.4.0-1020.20","5.4.0-1022.22","5.4.0-1023.23","5.4.0-1025.25","5.4.0-1026.26","5.4.0-1031.32","5.4.0-1032.33","5.4.0-1034.35","5.4.0-1035.36","5.4.0-1036.38","5.4.0-1039.41","5.4.0-1040.42","5.4.0-1041.43","5.4.0-1043.45","5.4.0-1044.46","5.4.0-1046.48","5.4.0-1047.49","5.4.0-1048.50","5.4.0-1049.51","5.4.0-1051.53","5.4.0-1055.57","5.4.0-1056.58","5.4.0-1058.60","5.4.0-1059.62","5.4.0-1061.64","5.4.0-1062.65","5.4.0-1063.66","5.4.0-1064.67","5.4.0-1065.68","5.4.0-1067.70","5.4.0-1068.71","5.4.0-1069.72","5.4.0-1070.73","5.4.0-1072.75","5.4.0-1073.76","5.4.0-1074.77","5.4.0-1077.80","5.4.0-1078.81","5.4.0-1080.83","5.4.0-1083.87","5.4.0-1085.90","5.4.0-1086.91","5.4.0-1089.94","5.4.0-1090.95","5.4.0-1091.96","5.4.0-1094.100","5.4.0-1095.101","5.4.0-1098.104","5.4.0-1100.106","5.4.0-1101.107","5.4.0-1103.109","5.4.0-1104.110","5.4.0-1105.111","5.4.0-1106.112","5.4.0-1107.113","5.4.0-1108.114","5.4.0-1109.115","5.4.0-1110.116","5.4.0-1111.117","5.4.0-1112.118","5.4.0-1113.119","5.4.0-1114.120","5.4.0-1115.122","5.4.0-1116.123","5.4.0-1117.124","5.4.0-1118.125","5.4.0-1119.126","5.4.0-1120.127","5.4.0-1121.128","5.4.0-1122.129","5.4.0-1123.130","5.4.0-1124.131","5.4.0-1126.133","5.4.0-1127.134","5.4.0-1128.135","5.4.0-1129.136","5.4.0-1130.137","5.4.0-1131.138","5.4.0-1132.139","5.4.0-1133.140","5.4.0-1134.141","5.4.0-1135.142","5.4.0-1136.143","5.4.0-1137.144","5.4.0-1138.145","5.4.0-1139.146","5.4.0-1140.147","5.4.0-1142.149","5.4.0-1143.150","5.4.0-1145.152","5.4.0-1147.154","5.4.0-1148.155","5.4.0-1149.156","5.4.0-1150.157","5.4.0-1151.158","5.4.0-1152.159","5.4.0-1153.160","5.4.0-1154.161","5.4.0-1156.163","5.4.0-1157.164","5.4.0-1160.166","5.4.0-1161.167","5.4.0-1162.168","5.4.0-1163.169","5.4.0-1164.170","5.4.0-1166.172","5.4.0-1167.173","5.4.0-1168.174","5.4.0-1169.175","5.4.0-1170.176","5.4.0-1171.177","5.4.0-1172.178"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-azure-5.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.11.0-1007.7~20.04.2","5.11.0-1012.13~20.04.1","5.11.0-1013.14~20.04.1","5.11.0-1015.16~20.04.1","5.11.0-1017.18~20.04.1","5.11.0-1019.20~20.04.1","5.11.0-1020.21~20.04.1","5.11.0-1021.22~20.04.1","5.11.0-1022.23~20.04.1","5.11.0-1023.24~20.04.1","5.11.0-1025.27~20.04.1","5.11.0-1027.30~20.04.1","5.11.0-1028.31~20.04.2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-azure-5.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.13.0-1009.10~20.04.2","5.13.0-1012.14~20.04.1","5.13.0-1013.15~20.04.1","5.13.0-1014.16~20.04.1","5.13.0-1017.19~20.04.1","5.13.0-1021.24~20.04.1","5.13.0-1022.26~20.04.1","5.13.0-1023.27~20.04.1","5.13.0-1025.29~20.04.1","5.13.0-1028.33~20.04.1","5.13.0-1029.34~20.04.1","5.13.0-1031.37~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-azure-5.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.8.0-1033.35~20.04.1","5.8.0-1036.38~20.04.1","5.8.0-1039.42~20.04.1","5.8.0-1040.43~20.04.1","5.8.0-1041.44~20.04.1","5.8.0-1042.45~20.04.1","5.8.0-1043.46~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-azure-fde","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-1063.66+cvm2.2","5.4.0-1063.66+cvm3.2","5.4.0-1064.67+cvm1.1","5.4.0-1065.68+cvm2.1","5.4.0-1067.70+cvm1.1","5.4.0-1068.71+cvm1.1","5.4.0-1069.72+cvm1.1","5.4.0-1070.73+cvm1.1","5.4.0-1072.75+cvm1.1","5.4.0-1073.76+cvm1.1","5.4.0-1074.77+cvm1.1","5.4.0-1076.79+cvm1.1","5.4.0-1078.81+cvm1.1","5.4.0-1080.83+cvm1.1","5.4.0-1083.87+cvm1.1","5.4.0-1085.90+cvm1.1","5.4.0-1085.90+cvm2.1","5.4.0-1086.91+cvm1.1","5.4.0-1089.94+cvm1.2","5.4.0-1090.95+cvm1.1","5.4.0-1091.96+cvm1.1","5.4.0-1092.97+cvm1.1","5.4.0-1095.101+cvm1.1","5.4.0-1098.104+cvm1.1","5.4.0-1100.106+cvm1.1","5.4.0-1103.109+cvm1.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"linux-bluefield","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-1007.10","5.4.0-1011.14","5.4.0-1012.15","5.4.0-1013.16","5.4.0-1016.19","5.4.0-1019.22","5.4.0-1020.23","5.4.0-1021.24","5.4.0-1022.25","5.4.0-1023.26","5.4.0-1025.28","5.4.0-1026.29","5.4.0-1028.31","5.4.0-1030.33","5.4.0-1032.35","5.4.0-1035.38","5.4.0-1036.39","5.4.0-1040.44","5.4.0-1042.47","5.4.0-1044.49","5.4.0-1045.50","5.4.0-1046.51","5.4.0-1047.52","5.4.0-1049.55","5.4.0-1050.56","5.4.0-1054.60","5.4.0-1058.64","5.4.0-1059.65","5.4.0-1060.66","5.4.0-1062.68","5.4.0-1064.70","5.4.0-1065.71","5.4.0-1066.72","5.4.0-1068.74","5.4.0-1070.76","5.4.0-1071.77","5.4.0-1072.78","5.4.0-1073.79","5.4.0-1074.80","5.4.0-1075.81","5.4.0-1076.82","5.4.0-1077.83","5.4.0-1078.84","5.4.0-1079.85","5.4.0-1080.87","5.4.0-1081.88","5.4.0-1082.89","5.4.0-1083.90","5.4.0-1084.91","5.4.0-1085.92","5.4.0-1086.93","5.4.0-1087.94","5.4.0-1088.95","5.4.0-1089.96","5.4.0-1090.97","5.4.0-1091.98","5.4.0-1092.99","5.4.0-1093.100","5.4.0-1094.101","5.4.0-1095.102","5.4.0-1096.103","5.4.0-1097.104","5.4.0-1098.105","5.4.0-1099.106","5.4.0-1101.108","5.4.0-1102.109","5.4.0-1103.110","5.4.0-1105.112","5.4.0-1106.113","5.4.0-1107.114","5.4.0-1108.115","5.4.0-1109.116","5.4.0-1110.117","5.4.0-1111.118","5.4.0-1112.119","5.4.0-1116.123","5.4.0-1117.124","5.4.0-1118.125","5.4.0-1119.126","5.4.0-1120.127","5.4.0-1121.128","5.4.0-1123.130","5.4.0-1125.132","5.4.0-1126.133"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"linux-gcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.3.0-1004.4","5.3.0-1009.10","5.3.0-1011.12","5.4.0-1005.5","5.4.0-1007.7","5.4.0-1008.8","5.4.0-1009.9","5.4.0-1011.11","5.4.0-1015.15","5.4.0-1018.18","5.4.0-1019.19","5.4.0-1021.21","5.4.0-1022.22","5.4.0-1024.24","5.4.0-1025.25","5.4.0-1028.29","5.4.0-1029.31","5.4.0-1030.32","5.4.0-1032.34","5.4.0-1033.35","5.4.0-1034.37","5.4.0-1036.39","5.4.0-1037.40","5.4.0-1038.41","5.4.0-1040.43","5.4.0-1041.44","5.4.0-1042.45","5.4.0-1043.46","5.4.0-1044.47","5.4.0-1046.49","5.4.0-1049.53","5.4.0-1051.55","5.4.0-1052.56","5.4.0-1053.57","5.4.0-1055.59","5.4.0-1056.60","5.4.0-1057.61","5.4.0-1058.62","5.4.0-1059.63","5.4.0-1060.64","5.4.0-1062.66","5.4.0-1063.67","5.4.0-1064.68","5.4.0-1065.69","5.4.0-1067.71","5.4.0-1068.72","5.4.0-1069.73","5.4.0-1072.77","5.4.0-1073.78","5.4.0-1075.80","5.4.0-1078.84","5.4.0-1080.87","5.4.0-1083.91","5.4.0-1084.92","5.4.0-1086.94","5.4.0-1087.95","5.4.0-1089.97","5.4.0-1090.98","5.4.0-1092.101","5.4.0-1093.102","5.4.0-1096.105","5.4.0-1097.106","5.4.0-1098.107","5.4.0-1100.109","5.4.0-1101.110","5.4.0-1102.111","5.4.0-1103.112","5.4.0-1104.113","5.4.0-1105.114","5.4.0-1106.115","5.4.0-1107.116","5.4.0-1108.117","5.4.0-1109.118","5.4.0-1110.119","5.4.0-1111.120","5.4.0-1112.121","5.4.0-1113.122","5.4.0-1115.124","5.4.0-1116.125","5.4.0-1117.126","5.4.0-1118.127","5.4.0-1120.129","5.4.0-1121.130","5.4.0-1122.131","5.4.0-1123.132","5.4.0-1124.133","5.4.0-1125.134","5.4.0-1126.135","5.4.0-1127.136","5.4.0-1128.137","5.4.0-1129.138","5.4.0-1130.139","5.4.0-1131.140","5.4.0-1132.141","5.4.0-1133.142","5.4.0-1134.143","5.4.0-1135.144","5.4.0-1136.145","5.4.0-1137.146","5.4.0-1138.147","5.4.0-1139.148","5.4.0-1140.149","5.4.0-1141.150","5.4.0-1142.151","5.4.0-1143.152","5.4.0-1145.154","5.4.0-1146.155","5.4.0-1147.156","5.4.0-1148.157","5.4.0-1149.158","5.4.0-1150.159","5.4.0-1151.160","5.4.0-1152.161","5.4.0-1153.162","5.4.0-1154.163","5.4.0-1155.164","5.4.0-1156.165","5.4.0-1157.166","5.4.0-1159.168","5.4.0-1160.169","5.4.0-1161.170","5.4.0-1162.171","5.4.0-1163.172","5.4.0-1164.173","5.4.0-1165.174","5.4.0-1166.175","5.4.0-1167.177","5.4.0-1168.178","5.4.0-1169.179","5.4.0-1170.180"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-gcp-5.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.11.0-1009.10~20.04.1","5.11.0-1014.16~20.04.1","5.11.0-1017.19~20.04.1","5.11.0-1018.20~20.04.2","5.11.0-1020.22~20.04.1","5.11.0-1021.23~20.04.1","5.11.0-1022.24~20.04.1","5.11.0-1023.25~20.04.1","5.11.0-1024.26~20.04.1","5.11.0-1026.29~20.04.1","5.11.0-1028.32~20.04.1","5.11.0-1029.33~20.04.3"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-gcp-5.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.13.0-1008.9~20.04.3","5.13.0-1012.15~20.04.1","5.13.0-1013.16~20.04.1","5.13.0-1015.18~20.04.1","5.13.0-1019.23~20.04.1","5.13.0-1021.25~20.04.1","5.13.0-1023.28~20.04.1","5.13.0-1024.29~20.04.1","5.13.0-1025.30~20.04.1","5.13.0-1027.32~20.04.1","5.13.0-1030.36~20.04.1","5.13.0-1031.37~20.04.1","5.13.0-1033.40~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-gcp-5.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.8.0-1032.34~20.04.1","5.8.0-1035.37~20.04.1","5.8.0-1038.40~20.04.1","5.8.0-1039.41"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-gke","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-1033.35","5.4.0-1035.37","5.4.0-1036.38","5.4.0-1037.39","5.4.0-1039.41","5.4.0-1041.43","5.4.0-1042.44","5.4.0-1043.45","5.4.0-1044.46","5.4.0-1046.48","5.4.0-1049.52","5.4.0-1051.54","5.4.0-1052.55","5.4.0-1053.56","5.4.0-1054.57","5.4.0-1055.58","5.4.0-1056.59","5.4.0-1057.60","5.4.0-1059.62","5.4.0-1061.64","5.4.0-1062.65","5.4.0-1063.66","5.4.0-1065.68","5.4.0-1066.69","5.4.0-1067.70","5.4.0-1068.71","5.4.0-1071.76","5.4.0-1072.77","5.4.0-1074.79","5.4.0-1076.82","5.4.0-1078.84","5.4.0-1080.86","5.4.0-1081.87","5.4.0-1083.89","5.4.0-1084.90","5.4.0-1086.93","5.4.0-1087.94","5.4.0-1090.97","5.4.0-1091.98","5.4.0-1094.101","5.4.0-1095.102","5.4.0-1096.103","5.4.0-1097.104","5.4.0-1098.105","5.4.0-1099.106","5.4.0-1100.107","5.4.0-1101.108","5.4.0-1102.109","5.4.0-1103.110","5.4.0-1104.111","5.4.0-1105.112"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-gke-5.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1011.14~20.04.1","5.15.0-1014.17~20.04.1","5.15.0-1015.18~20.04.1","5.15.0-1016.19~20.04.1","5.15.0-1019.23~20.04.1","5.15.0-1020.25~20.04.1","5.15.0-1023.28~20.04.2","5.15.0-1027.32~20.04.1","5.15.0-1028.33~20.04.1","5.15.0-1029.34~20.04.1","5.15.0-1031.36~20.04.1","5.15.0-1032.37~20.04.1","5.15.0-1033.38~20.04.1","5.15.0-1034.39~20.04.1","5.15.0-1036.41~20.04.1","5.15.0-1037.42~20.04.1","5.15.0-1038.43~20.04.1","5.15.0-1039.44~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-gkeop","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-1008.9","5.4.0-1009.10","5.4.0-1010.11","5.4.0-1011.12","5.4.0-1012.13","5.4.0-1013.14","5.4.0-1014.15","5.4.0-1015.16","5.4.0-1016.17","5.4.0-1018.19","5.4.0-1021.22","5.4.0-1022.23","5.4.0-1023.24","5.4.0-1024.25","5.4.0-1025.26","5.4.0-1026.27","5.4.0-1027.28","5.4.0-1029.30","5.4.0-1031.32","5.4.0-1032.33","5.4.0-1033.34","5.4.0-1034.35","5.4.0-1036.37","5.4.0-1037.38","5.4.0-1038.39","5.4.0-1039.40","5.4.0-1040.41","5.4.0-1043.44","5.4.0-1046.48","5.4.0-1048.51","5.4.0-1049.52","5.4.0-1051.54","5.4.0-1052.55","5.4.0-1053.56","5.4.0-1054.57","5.4.0-1056.60","5.4.0-1057.61","5.4.0-1060.64","5.4.0-1061.65","5.4.0-1062.66","5.4.0-1064.68","5.4.0-1065.69","5.4.0-1066.70","5.4.0-1067.71","5.4.0-1068.72","5.4.0-1069.73","5.4.0-1070.74","5.4.0-1071.75","5.4.0-1072.76","5.4.0-1073.77","5.4.0-1074.78","5.4.0-1075.79","5.4.0-1076.80","5.4.0-1077.81","5.4.0-1078.82","5.4.0-1079.83","5.4.0-1080.84","5.4.0-1081.85","5.4.0-1083.87","5.4.0-1084.88","5.4.0-1085.89","5.4.0-1086.90","5.4.0-1087.91","5.4.0-1088.92","5.4.0-1089.93","5.4.0-1090.94","5.4.0-1091.95","5.4.0-1092.96","5.4.0-1093.97","5.4.0-1094.98","5.4.0-1095.99","5.4.0-1096.100","5.4.0-1097.101","5.4.0-1098.102","5.4.0-1099.103","5.4.0-1100.104","5.4.0-1101.105","5.4.0-1102.106"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-gkeop-5.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1003.5~20.04.2","5.15.0-1005.7~20.04.1","5.15.0-1007.10~20.04.1","5.15.0-1008.12~20.04.1","5.15.0-1011.15~20.04.2","5.15.0-1012.16~20.04.1","5.15.0-1013.17~20.04.1","5.15.0-1015.19~20.04.1","5.15.0-1016.21~20.04.1","5.15.0-1017.22~20.04.1","5.15.0-1018.23~20.04.1","5.15.0-1019.24~20.04.1","5.15.0-1020.25~20.04.1","5.15.0-1021.26~20.04.1","5.15.0-1022.27~20.04.1","5.15.0-1023.28~20.04.1","5.15.0-1024.29~20.04.1","5.15.0-1025.30~20.04.1","5.15.0-1026.31~20.04.1","5.15.0-1027.32~20.04.1","5.15.0-1028.33~20.04.1","5.15.0-1030.35~20.04.1","5.15.0-1031.37~20.04.1","5.15.0-1032.38~20.04.1","5.15.0-1033.39~20.04.1","5.15.0-1034.40~20.04.1","5.15.0-1035.41~20.04.1","5.15.0-1036.42~20.04.1","5.15.0-1037.43~20.04.1","5.15.0-1038.44~20.04.1","5.15.0-1039.45~20.04.1","5.15.0-1040.46~20.04.1","5.15.0-1043.50~20.04.1","5.15.0-1044.51~20.04.1","5.15.0-1045.52~20.04.1","5.15.0-1046.53~20.04.1","5.15.0-1047.54~20.04.1","5.15.0-1048.55~20.04.1","5.15.0-1049.56~20.04.1","5.15.0-1050.57~20.04.1","5.15.0-1051.58~20.04.1","5.15.0-1052.59~20.04.1","5.15.0-1053.60~20.04.1","5.15.0-1054.61~20.04.1","5.15.0-1055.62~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-hwe-5.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.11.0-22.23~20.04.1","5.11.0-25.27~20.04.1","5.11.0-27.29~20.04.1","5.11.0-34.36~20.04.1","5.11.0-36.40~20.04.1","5.11.0-37.41~20.04.2","5.11.0-38.42~20.04.1","5.11.0-40.44~20.04.2","5.11.0-41.45~20.04.1","5.11.0-43.47~20.04.2","5.11.0-44.48~20.04.2","5.11.0-46.51~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-hwe-5.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.13.0-21.21~20.04.1","5.13.0-22.22~20.04.1","5.13.0-23.23~20.04.2","5.13.0-25.26~20.04.1","5.13.0-27.29~20.04.1","5.13.0-28.31~20.04.1","5.13.0-30.33~20.04.1","5.13.0-35.40~20.04.1","5.13.0-37.42~20.04.1","5.13.0-39.44~20.04.1","5.13.0-40.45~20.04.1","5.13.0-41.46~20.04.1","5.13.0-44.49~20.04.1","5.13.0-48.54~20.04.1","5.13.0-51.58~20.04.1","5.13.0-52.59~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-hwe-5.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.8.0-23.24~20.04.1","5.8.0-25.26~20.04.1","5.8.0-28.30~20.04.1","5.8.0-29.31~20.04.1","5.8.0-31.33~20.04.1","5.8.0-33.36~20.04.1","5.8.0-34.37~20.04.2","5.8.0-36.40~20.04.1","5.8.0-38.43~20.04.1","5.8.0-40.45~20.04.1","5.8.0-41.46~20.04.1","5.8.0-43.49~20.04.1","5.8.0-44.50~20.04.1","5.8.0-45.51~20.04.1","5.8.0-48.54~20.04.1","5.8.0-49.55~20.04.1","5.8.0-50.56~20.04.1","5.8.0-53.60~20.04.1","5.8.0-55.62~20.04.1","5.8.0-59.66~20.04.1","5.8.0-63.71~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"linux-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-1003.4","5.4.0-1004.5","5.4.0-1005.6","5.4.0-1006.7","5.4.0-1007.8","5.4.0-1008.9","5.4.0-1010.11","5.4.0-1012.13","5.4.0-1013.14","5.4.0-1014.15","5.4.0-1015.16","5.4.0-1017.19","5.4.0-1018.20","5.4.0-1019.21","5.4.0-1020.22","5.4.0-1021.23","5.4.0-1023.25","5.4.0-1026.29","5.4.0-1028.32","5.4.0-1029.33","5.4.0-1031.35","5.4.0-1032.36","5.4.0-1033.37","5.4.0-1034.38","5.4.0-1036.41","5.4.0-1037.42","5.4.0-1040.45","5.4.0-1041.46","5.4.0-1042.47","5.4.0-1044.49","5.4.0-1045.50","5.4.0-1046.51","5.4.0-1047.52","5.4.0-1048.53","5.4.0-1049.54","5.4.0-1050.55","5.4.0-1051.56","5.4.0-1052.57","5.4.0-1053.58","5.4.0-1054.59","5.4.0-1056.61","5.4.0-1057.62","5.4.0-1058.63","5.4.0-1059.64","5.4.0-1060.65","5.4.0-1061.66","5.4.0-1063.68","5.4.0-1064.69","5.4.0-1065.70","5.4.0-1066.71","5.4.0-1067.72","5.4.0-1068.73","5.4.0-1069.74","5.4.0-1070.75","5.4.0-1071.76","5.4.0-1072.77","5.4.0-1073.78","5.4.0-1074.79","5.4.0-1075.80","5.4.0-1076.81","5.4.0-1077.82","5.4.0-1078.83","5.4.0-1079.84","5.4.0-1080.85","5.4.0-1081.86","5.4.0-1082.87","5.4.0-1083.88","5.4.0-1084.89","5.4.0-1085.90","5.4.0-1086.91","5.4.0-1088.93","5.4.0-1089.94","5.4.0-1090.95","5.4.0-1091.96","5.4.0-1092.97","5.4.0-1093.98","5.4.0-1094.99","5.4.0-1095.100","5.4.0-1096.101","5.4.0-1097.102","5.4.0-1098.103","5.4.0-1099.104","5.4.0-1100.105","5.4.0-1102.107","5.4.0-1103.108","5.4.0-1104.109","5.4.0-1105.110","5.4.0-1107.112","5.4.0-1108.113","5.4.0-1109.114","5.4.0-1111.116","5.4.0-1112.117","5.4.0-1113.118"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-intel-5.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.13.0-1007.7","5.13.0-1008.8","5.13.0-1009.9","5.13.0-1010.10","5.13.0-1011.11","5.13.0-1014.15","5.13.0-1017.19"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"linux-iot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-1001.3","5.4.0-1004.6","5.4.0-1005.7","5.4.0-1006.8","5.4.0-1009.11","5.4.0-1010.12","5.4.0-1011.13","5.4.0-1012.14","5.4.0-1013.15","5.4.0-1014.16","5.4.0-1017.18","5.4.0-1018.19","5.4.0-1019.20","5.4.0-1021.22","5.4.0-1022.23","5.4.0-1023.24","5.4.0-1024.25","5.4.0-1025.26","5.4.0-1026.27","5.4.0-1028.29","5.4.0-1029.30","5.4.0-1030.31","5.4.0-1031.32","5.4.0-1032.33","5.4.0-1033.34","5.4.0-1034.35","5.4.0-1035.36","5.4.0-1036.37","5.4.0-1037.38","5.4.0-1038.39","5.4.0-1039.40","5.4.0-1040.41","5.4.0-1041.42","5.4.0-1042.43","5.4.0-1043.44","5.4.0-1044.45","5.4.0-1045.46","5.4.0-1048.51","5.4.0-1049.52","5.4.0-1051.54","5.4.0-1052.55","5.4.0-1053.56","5.4.0-1054.57","5.4.0-1055.58","5.4.0-1056.59","5.4.0-1057.60","5.4.0-1058.61","5.4.0-1060.63","5.4.0-1061.64","5.4.0-1062.65","5.4.0-1063.66","5.4.0-1064.67","5.4.0-1065.68","5.4.0-1066.69","5.4.0-1067.70","5.4.0-1068.71","5.4.0-1069.72","5.4.0-1070.73","5.4.0-1071.74"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"linux-kvm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.3.0-1003.3","5.3.0-1008.9","5.3.0-1009.10","5.4.0-1004.4","5.4.0-1006.6","5.4.0-1007.7","5.4.0-1008.8","5.4.0-1009.9","5.4.0-1011.11","5.4.0-1015.15","5.4.0-1018.18","5.4.0-1020.20","5.4.0-1021.21","5.4.0-1023.23","5.4.0-1024.24","5.4.0-1026.27","5.4.0-1028.29","5.4.0-1030.31","5.4.0-1031.32","5.4.0-1032.33","5.4.0-1033.34","5.4.0-1034.35","5.4.0-1036.37","5.4.0-1037.38","5.4.0-1038.39","5.4.0-1039.40","5.4.0-1040.41","5.4.0-1041.42","5.4.0-1044.46","5.4.0-1045.47","5.4.0-1046.48","5.4.0-1047.49","5.4.0-1048.50","5.4.0-1049.51","5.4.0-1050.52","5.4.0-1051.53","5.4.0-1053.55","5.4.0-1054.56","5.4.0-1055.57","5.4.0-1056.58","5.4.0-1058.61","5.4.0-1059.62","5.4.0-1061.64","5.4.0-1062.65","5.4.0-1063.66","5.4.0-1065.68","5.4.0-1068.72","5.4.0-1070.75","5.4.0-1071.76","5.4.0-1073.78","5.4.0-1074.79","5.4.0-1075.80","5.4.0-1076.81","5.4.0-1078.84","5.4.0-1079.85","5.4.0-1082.88","5.4.0-1083.89","5.4.0-1084.90","5.4.0-1086.92","5.4.0-1087.93","5.4.0-1088.94","5.4.0-1089.95","5.4.0-1090.96","5.4.0-1091.97","5.4.0-1092.98","5.4.0-1093.99","5.4.0-1094.100","5.4.0-1095.101","5.4.0-1096.102","5.4.0-1097.103","5.4.0-1098.104","5.4.0-1099.105","5.4.0-1100.106","5.4.0-1101.107","5.4.0-1102.108","5.4.0-1103.110","5.4.0-1104.111","5.4.0-1105.112","5.4.0-1106.113","5.4.0-1107.114","5.4.0-1108.115","5.4.0-1109.116","5.4.0-1110.117","5.4.0-1111.118","5.4.0-1112.119","5.4.0-1113.120","5.4.0-1114.121","5.4.0-1115.122","5.4.0-1116.123","5.4.0-1117.124","5.4.0-1118.125","5.4.0-1119.127","5.4.0-1120.128","5.4.0-1121.129","5.4.0-1122.130","5.4.0-1123.131","5.4.0-1124.132","5.4.0-1125.133","5.4.0-1126.134","5.4.0-1127.136","5.4.0-1129.138","5.4.0-1130.139","5.4.0-1131.140","5.4.0-1132.141","5.4.0-1133.142","5.4.0-1134.143","5.4.0-1135.144","5.4.0-1136.145","5.4.0-1137.146","5.4.0-1138.147","5.4.0-1139.148","5.4.0-1140.149","5.4.0-1141.150","5.4.0-1143.152","5.4.0-1144.153","5.4.0-1145.154","5.4.0-1146.155","5.4.0-1147.156","5.4.0-1148.157","5.4.0-1149.158","5.4.0-1150.159","5.4.0-1151.160","5.4.0-1152.161","5.4.0-1153.162","5.4.0-1154.163"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-oem-5.10","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.10.0-1008.9","5.10.0-1011.12","5.10.0-1013.14","5.10.0-1014.15","5.10.0-1016.17","5.10.0-1017.18","5.10.0-1019.20","5.10.0-1021.22","5.10.0-1022.23","5.10.0-1023.24","5.10.0-1025.26","5.10.0-1026.27","5.10.0-1029.30","5.10.0-1032.33","5.10.0-1033.34","5.10.0-1034.35","5.10.0-1038.40","5.10.0-1044.46","5.10.0-1045.47","5.10.0-1049.51","5.10.0-1050.52","5.10.0-1051.53","5.10.0-1052.54","5.10.0-1053.55","5.10.0-1055.58","5.10.0-1057.61"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-oem-5.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.13.0-1009.10","5.13.0-1010.11","5.13.0-1012.16","5.13.0-1014.18","5.13.0-1017.21","5.13.0-1019.23","5.13.0-1020.24","5.13.0-1021.25","5.13.0-1022.26","5.13.0-1026.32","5.13.0-1028.35","5.13.0-1029.36"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-oem-5.14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.14.0-1004.4","5.14.0-1005.5","5.14.0-1007.7","5.14.0-1008.8","5.14.0-1010.10","5.14.0-1011.11","5.14.0-1013.13","5.14.0-1018.19","5.14.0-1020.22","5.14.0-1022.24","5.14.0-1024.26","5.14.0-1027.30","5.14.0-1029.32","5.14.0-1031.34","5.14.0-1032.35","5.14.0-1033.36","5.14.0-1034.37","5.14.0-1036.40","5.14.0-1038.42","5.14.0-1042.47","5.14.0-1044.49","5.14.0-1045.51","5.14.0-1046.53","5.14.0-1047.54","5.14.0-1048.55","5.14.0-1049.56","5.14.0-1050.57","5.14.0-1051.58","5.14.0-1052.59","5.14.0-1054.61","5.14.0-1055.62","5.14.0-1056.63","5.14.0-1057.64","5.14.0-1058.66","5.14.0-1059.67"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-oem-5.6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.6.0-1007.7","5.6.0-1008.8","5.6.0-1010.10","5.6.0-1011.11","5.6.0-1013.13","5.6.0-1017.17","5.6.0-1018.18","5.6.0-1020.20","5.6.0-1021.21","5.6.0-1023.23","5.6.0-1026.26","5.6.0-1027.27","5.6.0-1028.28","5.6.0-1031.32","5.6.0-1032.33","5.6.0-1033.35","5.6.0-1034.36","5.6.0-1035.37","5.6.0-1036.39","5.6.0-1039.43","5.6.0-1042.46","5.6.0-1047.51","5.6.0-1048.52","5.6.0-1050.54","5.6.0-1052.56","5.6.0-1053.57","5.6.0-1054.58","5.6.0-1055.59","5.6.0-1056.60"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"linux-oracle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.3.0-1002.2","5.3.0-1007.8","5.3.0-1008.9","5.4.0-1005.5","5.4.0-1007.7","5.4.0-1008.8","5.4.0-1009.9","5.4.0-1011.11","5.4.0-1015.15","5.4.0-1018.18","5.4.0-1019.19","5.4.0-1021.21","5.4.0-1022.22","5.4.0-1024.24","5.4.0-1025.25","5.4.0-1028.29","5.4.0-1029.31","5.4.0-1030.32","5.4.0-1032.34","5.4.0-1034.36","5.4.0-1035.38","5.4.0-1037.40","5.4.0-1038.41","5.4.0-1039.42","5.4.0-1041.44","5.4.0-1042.45","5.4.0-1043.46","5.4.0-1045.49","5.4.0-1046.50","5.4.0-1048.52","5.4.0-1049.53","5.4.0-1052.56","5.4.0-1053.57","5.4.0-1054.58","5.4.0-1055.59","5.4.0-1056.60","5.4.0-1057.61","5.4.0-1058.62","5.4.0-1059.63","5.4.0-1061.65","5.4.0-1062.66","5.4.0-1063.67","5.4.0-1064.68","5.4.0-1066.71","5.4.0-1067.72","5.4.0-1069.75","5.4.0-1070.76","5.4.0-1071.77","5.4.0-1073.79","5.4.0-1076.83","5.4.0-1078.86","5.4.0-1079.87","5.4.0-1081.89","5.4.0-1082.90","5.4.0-1083.91","5.4.0-1084.92","5.4.0-1086.95","5.4.0-1087.96","5.4.0-1090.99","5.4.0-1091.100","5.4.0-1092.101","5.4.0-1093.102","5.4.0-1094.103","5.4.0-1097.106","5.4.0-1098.107","5.4.0-1099.108","5.4.0-1100.109","5.4.0-1101.110","5.4.0-1102.111","5.4.0-1103.112","5.4.0-1104.113","5.4.0-1105.114","5.4.0-1106.115","5.4.0-1107.116","5.4.0-1108.117","5.4.0-1109.118","5.4.0-1110.119","5.4.0-1111.120","5.4.0-1112.121","5.4.0-1113.122","5.4.0-1115.124","5.4.0-1116.125","5.4.0-1117.126","5.4.0-1118.127","5.4.0-1119.128","5.4.0-1120.129","5.4.0-1121.130","5.4.0-1122.131","5.4.0-1123.132","5.4.0-1124.133","5.4.0-1125.134","5.4.0-1126.135","5.4.0-1127.136","5.4.0-1129.138","5.4.0-1130.139","5.4.0-1131.140","5.4.0-1132.141","5.4.0-1133.142","5.4.0-1134.143","5.4.0-1135.144","5.4.0-1136.145","5.4.0-1137.146","5.4.0-1138.147","5.4.0-1140.150","5.4.0-1141.151","5.4.0-1142.152","5.4.0-1143.153","5.4.0-1144.154","5.4.0-1145.155","5.4.0-1146.156","5.4.0-1147.157","5.4.0-1149.159","5.4.0-1150.160","5.4.0-1151.161","5.4.0-1152.162","5.4.0-1154.164","5.4.0-1155.165","5.4.0-1156.166","5.4.0-1157.167","5.4.0-1158.168","5.4.0-1159.169","5.4.0-1160.170","5.4.0-1161.171","5.4.0-1162.172","5.4.0-1163.173","5.4.0-1164.174","5.4.0-1165.175"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-oracle-5.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.11.0-1008.8~20.04.1","5.11.0-1013.14~20.04.1","5.11.0-1016.17~20.04.1","5.11.0-1017.18~20.04.1","5.11.0-1019.20~20.04.1","5.11.0-1020.21~20.04.1","5.11.0-1021.22~20.04.1","5.11.0-1022.23~20.04.1","5.11.0-1023.24~20.04.1","5.11.0-1025.27~20.04.1","5.11.0-1027.30~20.04.1","5.11.0-1028.31~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-oracle-5.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.13.0-1011.13~20.04.2","5.13.0-1015.19~20.04.1","5.13.0-1016.20~20.04.1","5.13.0-1018.22~20.04.1","5.13.0-1021.26~20.04.1","5.13.0-1025.30~20.04.1","5.13.0-1027.32~20.04.1","5.13.0-1028.33~20.04.1","5.13.0-1030.35~20.04.1","5.13.0-1033.39~20.04.1","5.13.0-1034.40~20.04.1","5.13.0-1036.43~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-oracle-5.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.8.0-1031.32~20.04.2","5.8.0-1033.34~20.04.1","5.8.0-1034.35~20.04.2","5.8.0-1037.38~20.04.1","5.8.0-1038.39~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"linux-raspi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-1007.7","5.4.0-1008.8","5.4.0-1011.11","5.4.0-1012.12","5.4.0-1013.13","5.4.0-1015.15","5.4.0-1016.17","5.4.0-1018.20","5.4.0-1019.21","5.4.0-1021.24","5.4.0-1022.25","5.4.0-1023.26","5.4.0-1025.28","5.4.0-1026.29","5.4.0-1028.31","5.4.0-1029.32","5.4.0-1030.33","5.4.0-1032.35","5.4.0-1033.36","5.4.0-1034.37","5.4.0-1035.38","5.4.0-1036.39","5.4.0-1038.41","5.4.0-1041.45","5.4.0-1042.46","5.4.0-1043.47","5.4.0-1044.48","5.4.0-1045.49","5.4.0-1046.50","5.4.0-1047.52","5.4.0-1048.53","5.4.0-1050.56","5.4.0-1052.58","5.4.0-1053.60","5.4.0-1055.62","5.4.0-1056.63","5.4.0-1058.65","5.4.0-1059.67","5.4.0-1060.68","5.4.0-1062.70","5.4.0-1065.75","5.4.0-1066.76","5.4.0-1068.78","5.4.0-1069.79","5.4.0-1070.80","5.4.0-1071.81","5.4.0-1073.84","5.4.0-1074.85","5.4.0-1077.88","5.4.0-1078.89","5.4.0-1079.90","5.4.0-1080.91","5.4.0-1081.92","5.4.0-1082.93","5.4.0-1083.94","5.4.0-1084.95","5.4.0-1085.96","5.4.0-1086.97","5.4.0-1088.99","5.4.0-1089.100","5.4.0-1090.101","5.4.0-1091.102","5.4.0-1092.103","5.4.0-1093.104","5.4.0-1094.105","5.4.0-1095.106","5.4.0-1096.107","5.4.0-1097.109","5.4.0-1098.110","5.4.0-1100.112","5.4.0-1101.113","5.4.0-1102.114","5.4.0-1103.115","5.4.0-1104.116","5.4.0-1105.117","5.4.0-1106.118","5.4.0-1107.119","5.4.0-1108.120","5.4.0-1109.121","5.4.0-1110.122","5.4.0-1111.123","5.4.0-1112.124","5.4.0-1113.125","5.4.0-1114.126","5.4.0-1115.127","5.4.0-1116.128","5.4.0-1117.129","5.4.0-1118.130","5.4.0-1119.131","5.4.0-1120.132","5.4.0-1121.133","5.4.0-1122.134","5.4.0-1129.142","5.4.0-1130.143","5.4.0-1131.144","5.4.0-1132.145","5.4.0-1133.146","5.4.0-1134.147","5.4.0-1135.148","5.4.0-1136.149","5.4.0-1137.150","5.4.0-1139.152","5.4.0-1140.153","5.4.0-1143.156","5.4.0-1144.157","5.4.0-1145.158","5.4.0-1146.159","5.4.0-1147.160","5.4.0-1148.161","5.4.0-1149.162"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-raspi2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.3.0-1007.8","5.3.0-1014.16","5.3.0-1015.17","5.3.0-1017.19","5.4.0-1004.4","5.4.0-1006.6"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-riscv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-24.28","5.4.0-26.30","5.4.0-27.31","5.4.0-28.32","5.4.0-30.34","5.4.0-31.35","5.4.0-33.37","5.4.0-34.38","5.4.0-36.41","5.4.0-37.42","5.4.0-39.44","5.4.0-40.45"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-riscv-5.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.11.0-1015.16~20.04.1","5.11.0-1017.18~20.04.1","5.11.0-1018.19~20.04.2","5.11.0-1020.21~20.04.1","5.11.0-1021.22~20.04.1","5.11.0-1022.23~20.04.1","5.11.0-1023.24~20.04.1","5.11.0-1024.25~20.04.1","5.11.0-1026.28~20.04.1","5.11.0-1028.31~20.04.1","5.11.0-1029.32~20.04.1","5.11.0-1030.34","5.11.0-1031.35"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-riscv-5.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.8.0-14.16~20.04.1","5.8.0-14.16~20.04.3","5.8.0-16.18~20.04.1","5.8.0-17.19~20.04.1","5.8.0-18.20~20.04.1","5.8.0-20.22~20.04.1","5.8.0-22.24~20.04.1","5.8.0-25.27~20.04.1","5.8.0-26.28~20.04.1","5.8.0-29.31~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"linux-xilinx-zynqmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-1020.24","5.4.0-1021.25","5.4.0-1022.26","5.4.0-1023.27","5.4.0-1024.28","5.4.0-1025.29","5.4.0-1026.30","5.4.0-1027.31","5.4.0-1028.32","5.4.0-1029.33","5.4.0-1030.34","5.4.0-1031.35","5.4.0-1032.36","5.4.0-1033.37","5.4.0-1034.38","5.4.0-1035.39","5.4.0-1036.40","5.4.0-1037.41","5.4.0-1038.42","5.4.0-1039.43","5.4.0-1040.44","5.4.0-1041.45","5.4.0-1042.46","5.4.0-1043.47","5.4.0-1044.48","5.4.0-1045.49","5.4.0-1046.50","5.4.0-1047.51","5.4.0-1048.52","5.4.0-1049.53","5.4.0-1050.54","5.4.0-1051.55","5.4.0-1052.56","5.4.0-1053.57","5.4.0-1054.58","5.4.0-1055.59","5.4.0-1056.60","5.4.0-1058.62","5.4.0-1060.64","5.4.0-1061.65","5.4.0-1062.66","5.4.0-1064.68","5.4.0-1065.69","5.4.0-1066.70","5.4.0-1067.71","5.4.0-1068.72","5.4.0-1069.73","5.4.0-1070.74","5.4.0-1071.75","5.4.0-1072.76","5.4.0-1074.78","5.4.0-1075.79","5.4.0-1076.80","5.4.0-1077.81","5.4.0-1078.82","5.4.0-1079.83","5.4.0-1080.84","5.4.0-1081.85","5.4.0-1082.86","5.4.0-1083.87","5.4.0-1084.88","5.4.0-1085.89"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-updates:20.04:LTS","package":"linux-aws-fips","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-1021.21+fips2","5.4.0-1069.73+fips2","5.4.0-1071.76+fips1","5.4.0-1072.77+fips1","5.4.0-1073.78+fips1","5.4.0-1078.84+fips1","5.4.0-1080.87+fips1","5.4.0-1081.88+fips1","5.4.0-1083.90+fips1","5.4.0-1085.92+fips1","5.4.0-1086.93+fips1","5.4.0-1088.96+fips1","5.4.0-1089.97+fips1","5.4.0-1092.100+fips1","5.4.0-1093.101+fips1","5.4.0-1094.102+fips1","5.4.0-1096.104+fips1","5.4.0-1099.107+fips1","5.4.0-1100.108+fips1","5.4.0-1101.109+fips1","5.4.0-1102.110+fips1","5.4.0-1103.111+fips1","5.4.0-1104.112+fips1","5.4.0-1105.113+fips1","5.4.0-1106.114+fips1","5.4.0-1107.115+fips1","5.4.0-1108.116+fips1","5.4.0-1109.118+fips1","5.4.0-1110.119+fips1","5.4.0-1111.120+fips1","5.4.0-1112.121+fips1","5.4.0-1113.123+fips1","5.4.0-1114.124+fips1","5.4.0-1116.126+fips1","5.4.0-1117.127+fips1","5.4.0-1118.128+fips1","5.4.0-1119.129+fips1","5.4.0-1120.130+fips1","5.4.0-1121.131+fips1","5.4.0-1122.132+fips1","5.4.0-1123.133+fips1","5.4.0-1124.134+fips1","5.4.0-1125.135+fips1","5.4.0-1126.136+fips2","5.4.0-1127.137+fips1","5.4.0-1128.138+fips1","5.4.0-1129.139+fips1","5.4.0-1130.140+fips1","5.4.0-1131.141+fips1","5.4.0-1132.142+fips1","5.4.0-1133.143+fips1","5.4.0-1134.144+fips1","5.4.0-1135.145+fips1","5.4.0-1136.146+fips1","5.4.0-1137.147+fips1","5.4.0-1139.149+fips1","5.4.0-1140.151+fips1","5.4.0-1142.153+fips1","5.4.0-1144.155+fips1","5.4.0-1145.156+fips1","5.4.0-1146.156+fips1","5.4.0-1147.157+fips1","5.4.0-1148.158+fips1","5.4.0-1149.159+fips1","5.4.0-1150.160+fips1","5.4.0-1151.161+fips1","5.4.0-1152.162+fips1","5.4.0-1153.163+fips1","5.4.0-1154.164+fips1","5.4.0-1155.165+fips1","5.4.0-1156.166+fips1","5.4.0-1157.167+fips1","5.4.0-1158.168+fips1","5.4.0-1159.169+fips1","5.4.0-1160.170+fips1","5.4.0-1161.172+fips1","5.4.0-1163.174+fips1","5.4.0-1165.176+fips1","5.4.0-1166.177+fips1","5.4.0-1167.178+fips1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-updates:20.04:LTS","package":"linux-azure-fips","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-1022.22+fips1","5.4.0-1073.76+fips1","5.4.0-1074.77+fips1","5.4.0-1076.79+fips1","5.4.0-1078.81+fips1","5.4.0-1080.83+fips1","5.4.0-1083.87+fips1","5.4.0-1085.90+fips1","5.4.0-1086.91+fips1","5.4.0-1089.94+fips1","5.4.0-1090.95+fips1","5.4.0-1091.96+fips1","5.4.0-1094.100+fips1","5.4.0-1095.101+fips1","5.4.0-1098.104+fips1","5.4.0-1100.106+fips1","5.4.0-1101.107+fips1","5.4.0-1103.109+fips1","5.4.0-1104.110+fips1","5.4.0-1105.111+fips1","5.4.0-1106.112+fips1","5.4.0-1107.113+fips1","5.4.0-1108.114+fips1","5.4.0-1109.115+fips1","5.4.0-1110.116+fips1","5.4.0-1111.117+fips1","5.4.0-1112.118+fips1","5.4.0-1113.119+fips1","5.4.0-1114.120+fips1","5.4.0-1115.122+fips1","5.4.0-1116.123+fips1","5.4.0-1117.124+fips1","5.4.0-1118.125+fips1","5.4.0-1119.126+fips1","5.4.0-1121.128+fips1","5.4.0-1122.129+fips1","5.4.0-1123.130+fips1","5.4.0-1124.131+fips1","5.4.0-1126.133+fips1","5.4.0-1127.134+fips1","5.4.0-1128.135+fips1","5.4.0-1129.136+fips1","5.4.0-1130.137+fips1","5.4.0-1131.138+fips1","5.4.0-1132.139+fips1","5.4.0-1133.140+fips1","5.4.0-1134.141+fips1","5.4.0-1135.142+fips1","5.4.0-1136.143+fips1","5.4.0-1137.144+fips1","5.4.0-1138.145+fips1","5.4.0-1139.146+fips1","5.4.0-1140.147+fips1","5.4.0-1142.149+fips1","5.4.0-1143.150+fips1","5.4.0-1145.152+fips1","5.4.0-1147.154+fips1","5.4.0-1148.156+fips1","5.4.0-1149.157+fips1","5.4.0-1151.158+fips1","5.4.0-1152.159+fips1","5.4.0-1153.160+fips1","5.4.0-1154.161+fips1","5.4.0-1155.162+fips1","5.4.0-1157.164+fips1","5.4.0-1158.165+fips1","5.4.0-1160.166+fips1","5.4.0-1161.167+fips1","5.4.0-1162.168+fips1","5.4.0-1163.169+fips1","5.4.0-1164.170+fips1","5.4.0-1166.172+fips1","5.4.0-1167.173+fips1","5.4.0-1168.174+fips1","5.4.0-1170.176+fips1","5.4.0-1171.177+fips1","5.4.0-1172.178+fips1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-updates:20.04:LTS","package":"linux-fips","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-1026.30","5.4.0-1028.32","5.4.0-1031.36","5.4.0-1032.37","5.4.0-1033.38","5.4.0-1034.40","5.4.0-1035.41","5.4.0-1036.42","5.4.0-1037.43","5.4.0-1038.44","5.4.0-1040.46","5.4.0-1041.47","5.4.0-1042.48","5.4.0-1043.49","5.4.0-1045.51","5.4.0-1046.52","5.4.0-1047.53","5.4.0-1048.54","5.4.0-1049.55","5.4.0-1051.57","5.4.0-1054.61","5.4.0-1056.64","5.4.0-1057.65","5.4.0-1059.67","5.4.0-1060.68","5.4.0-1061.69","5.4.0-1062.70","5.4.0-1064.73","5.4.0-1065.74","5.4.0-1068.77","5.4.0-1069.78","5.4.0-1070.79","5.4.0-1072.81","5.4.0-1073.82","5.4.0-1074.83","5.4.0-1075.84","5.4.0-1076.85","5.4.0-1077.86","5.4.0-1078.87","5.4.0-1079.88","5.4.0-1080.89","5.4.0-1081.90","5.4.0-1082.91","5.4.0-1083.92","5.4.0-1084.93","5.4.0-1085.94","5.4.0-1086.95","5.4.0-1087.96","5.4.0-1088.97","5.4.0-1089.98","5.4.0-1090.100","5.4.0-1091.101","5.4.0-1092.102","5.4.0-1094.104","5.4.0-1095.105","5.4.0-1096.106","5.4.0-1097.107","5.4.0-1098.108","5.4.0-1099.109","5.4.0-1100.110","5.4.0-1101.111","5.4.0-1102.112","5.4.0-1103.113","5.4.0-1104.114","5.4.0-1105.115","5.4.0-1106.116","5.4.0-1107.117","5.4.0-1108.118","5.4.0-1109.119","5.4.0-1110.120","5.4.0-1111.121","5.4.0-1112.122","5.4.0-1116.126","5.4.0-1117.127","5.4.0-1118.128","5.4.0-1119.129","5.4.0-1120.130","5.4.0-1121.131","5.4.0-1122.132","5.4.0-1123.133","5.4.0-1124.134","5.4.0-1125.135","5.4.0-1126.136","5.4.0-1127.137","5.4.0-1128.138","5.4.0-1130.140","5.4.0-1131.141","5.4.0-1132.142","5.4.0-1133.143","5.4.0-1134.144","5.4.0-1135.145","5.4.0-1136.146","5.4.0-1137.147","5.4.0-1138.148","5.4.0-1139.149","5.4.0-1140.150","5.4.0-1141.151"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-updates:20.04:LTS","package":"linux-gcp-fips","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-1021.21+fips1","5.4.0-1067.71~20.04.1","5.4.0-1069.73+fips2","5.4.0-1071.75+fips1","5.4.0-1073.78+fips1","5.4.0-1075.80+fips1","5.4.0-1078.84+fips1","5.4.0-1080.87+fips1","5.4.0-1081.88+fips1","5.4.0-1086.94+fips1","5.4.0-1087.95+fips1","5.4.0-1089.97+fips1","5.4.0-1092.101+fips1","5.4.0-1093.102+fips1","5.4.0-1096.105+fips1","5.4.0-1097.106+fips1","5.4.0-1098.107+fips1","5.4.0-1100.109+fips1","5.4.0-1101.110+fips1","5.4.0-1102.111+fips1","5.4.0-1103.112+fips1","5.4.0-1104.113+fips1","5.4.0-1105.114+fips1","5.4.0-1106.115+fips1","5.4.0-1107.116+fips1","5.4.0-1108.117+fips1","5.4.0-1109.118+fips1","5.4.0-1110.119+fips1","5.4.0-1111.120+fips1","5.4.0-1112.121+fips1","5.4.0-1113.122+fips1","5.4.0-1115.124+fips1","5.4.0-1116.125+fips1","5.4.0-1117.126+fips1","5.4.0-1118.127+fips1","5.4.0-1120.129+fips1","5.4.0-1121.130+fips1","5.4.0-1122.131+fips1","5.4.0-1124.133+fips1","5.4.0-1125.134+fips1","5.4.0-1126.135+fips1","5.4.0-1127.136+fips1","5.4.0-1128.137+fips1","5.4.0-1129.138+fips1","5.4.0-1130.139+fips1","5.4.0-1131.140+fips1","5.4.0-1132.141+fips1","5.4.0-1133.142+fips1","5.4.0-1134.143+fips1","5.4.0-1135.144+fips1","5.4.0-1136.145+fips1","5.4.0-1137.146+fips1","5.4.0-1138.147+fips1","5.4.0-1139.148+fips1","5.4.0-1140.149+fips1","5.4.0-1141.150+fips1","5.4.0-1142.151+fips1","5.4.0-1143.152+fips1","5.4.0-1145.154+fips1","5.4.0-1146.155+fips1","5.4.0-1147.156+fips1","5.4.0-1148.157+fips1","5.4.0-1149.158+fips1","5.4.0-1150.159+fips1","5.4.0-1151.160+fips1","5.4.0-1152.161+fips1","5.4.0-1153.162+fips1","5.4.0-1154.163+fips1","5.4.0-1155.164+fips1","5.4.0-1156.165+fips1","5.4.0-1157.166+fips1","5.4.0-1159.168+fips1","5.4.0-1160.169+fips1","5.4.0-1161.170+fips1","5.4.0-1162.171+fips1","5.4.0-1163.172+fips1","5.4.0-1164.173+fips1","5.4.0-1165.174+fips1","5.4.0-1166.175+fips1","5.4.0-1167.176+fips1","5.4.0-1168.178+fips1","5.4.0-1169.179+fips1","5.4.0-1170.180+fips1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-allwinner-5.19","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.19.0-1007.7~22.04.1","5.19.0-1009.9~22.04.1","5.19.0-1010.10~22.04.1","5.19.0-1011.11~22.04.1","5.19.0-1012.12~22.04.1","5.19.0-1013.13~22.04.1","5.19.0-1014.14~22.04.1","5.19.0-1015.15~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-aws-5.19","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.19.0-1019.20~22.04.1","5.19.0-1020.21~22.04.1","5.19.0-1022.23~22.04.1","5.19.0-1023.24~22.04.1","5.19.0-1024.25~22.04.1","5.19.0-1025.26~22.04.1","5.19.0-1026.27~22.04.1","5.19.0-1027.28~22.04.1","5.19.0-1028.29~22.04.1","5.19.0-1029.30~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-aws-6.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.2.0-1005.5~22.04.1","6.2.0-1006.6~22.04.1","6.2.0-1007.7~22.04.1","6.2.0-1008.8~22.04.1","6.2.0-1009.9~22.04.3","6.2.0-1010.10~22.04.1","6.2.0-1011.11~22.04.1","6.2.0-1012.12~22.04.1","6.2.0-1013.13~22.04.1","6.2.0-1014.14~22.04.1","6.2.0-1015.15~22.04.1","6.2.0-1016.16~22.04.1","6.2.0-1017.17~22.04.1","6.2.0-1018.18~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-aws-6.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.5.0-1008.8~22.04.1","6.5.0-1010.10~22.04.1","6.5.0-1011.11~22.04.1","6.5.0-1012.12~22.04.1","6.5.0-1014.14~22.04.1","6.5.0-1015.15~22.04.1","6.5.0-1016.16~22.04.1","6.5.0-1017.17~22.04.2","6.5.0-1018.18~22.04.1","6.5.0-1020.20~22.04.1","6.5.0-1021.21~22.04.1","6.5.0-1022.22~22.04.1","6.5.0-1023.23~22.04.1","6.5.0-1024.24~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-azure-5.19","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.19.0-1020.21~22.04.1","5.19.0-1021.22~22.04.1","5.19.0-1022.23~22.04.1","5.19.0-1023.24~22.04.1","5.19.0-1025.28~22.04.1","5.19.0-1026.29~22.04.1","5.19.0-1027.30~22.04.2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-azure-6.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.2.0-1005.5~22.04.1","6.2.0-1006.6~22.04.1","6.2.0-1007.7~22.04.1","6.2.0-1008.8~22.04.1","6.2.0-1009.9~22.04.3","6.2.0-1011.11~22.04.1","6.2.0-1012.12~22.04.1","6.2.0-1014.14~22.04.1","6.2.0-1015.15~22.04.1","6.2.0-1016.16~22.04.1","6.2.0-1017.17~22.04.1","6.2.0-1018.18~22.04.1","6.2.0-1019.19~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-azure-6.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.5.0-1007.7~22.04.1","6.5.0-1009.9~22.04.1","6.5.0-1010.10~22.04.1","6.5.0-1011.11~22.04.1","6.5.0-1015.15~22.04.1","6.5.0-1016.16~22.04.1","6.5.0-1017.17~22.04.1","6.5.0-1018.19~22.04.2","6.5.0-1019.20~22.04.1","6.5.0-1021.22~22.04.1","6.5.0-1022.23~22.04.1","6.5.0-1023.24~22.04.1","6.5.0-1024.25~22.04.1","6.5.0-1025.26~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-azure-fde-5.19","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.19.0-1025.28~22.04.1.1","5.19.0-1026.29~22.04.1.1","5.19.0-1027.30~22.04.2.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-azure-fde-6.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.2.0-1008.8~22.04.1.1","6.2.0-1009.9~22.04.3.1","6.2.0-1011.11~22.04.1.1","6.2.0-1012.12~22.04.1.1","6.2.0-1014.14~22.04.1.1","6.2.0-1015.15~22.04.1.1","6.2.0-1016.16~22.04.1.1","6.2.0-1017.17~22.04.1.1","6.2.0-1018.18~22.04.1.1","6.2.0-1019.19~22.04.1.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-gcp-5.19","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.19.0-1020.22~22.04.2","5.19.0-1021.23~22.04.1","5.19.0-1022.24~22.04.1","5.19.0-1024.26~22.04.1","5.19.0-1025.27~22.04.1","5.19.0-1026.28~22.04.1","5.19.0-1027.29~22.04.1","5.19.0-1030.32~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-gcp-6.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.2.0-1009.9~22.04.3","6.2.0-1010.10~22.04.1","6.2.0-1011.11~22.04.1","6.2.0-1011.11~22.04.3","6.2.0-1012.12~22.04.1","6.2.0-1013.13~22.04.1","6.2.0-1014.14~22.04.1","6.2.0-1016.18~22.04.1","6.2.0-1017.19~22.04.1","6.2.0-1018.20~22.04.1","6.2.0-1019.21~22.04.1","6.2.0-1021.23~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-gcp-6.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.5.0-1010.10~22.04.3","6.5.0-1011.11~22.04.1","6.5.0-1013.13~22.04.1","6.5.0-1014.14~22.04.1","6.5.0-1015.15~22.04.1","6.5.0-1016.16~22.04.1","6.5.0-1017.17~22.04.1","6.5.0-1018.18~22.04.1","6.5.0-1020.20~22.04.1","6.5.0-1022.24~22.04.1","6.5.0-1023.25~22.04.1","6.5.0-1024.26~22.04.1","6.5.0-1025.27~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-hwe-5.19","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.19.0-28.29~22.04.1","5.19.0-32.33~22.04.1","5.19.0-35.36~22.04.1","5.19.0-38.39~22.04.1","5.19.0-40.41~22.04.1","5.19.0-41.42~22.04.1","5.19.0-42.43~22.04.1","5.19.0-43.44~22.04.1","5.19.0-45.46~22.04.1","5.19.0-46.47~22.04.1","5.19.0-50.50"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-hwe-6.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.2.0-25.25~22.04.2","6.2.0-26.26~22.04.1","6.2.0-31.31~22.04.1","6.2.0-32.32~22.04.1","6.2.0-33.33~22.04.1","6.2.0-34.34~22.04.1","6.2.0-35.35~22.04.1","6.2.0-36.37~22.04.1","6.2.0-37.38~22.04.1","6.2.0-39.40~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-hwe-6.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.5.0-14.14~22.04.1","6.5.0-15.15~22.04.1","6.5.0-17.17~22.04.1","6.5.0-18.18~22.04.1","6.5.0-21.21~22.04.1","6.5.0-25.25~22.04.1","6.5.0-26.26~22.04.1","6.5.0-27.28~22.04.1","6.5.0-28.29~22.04.1","6.5.0-35.35~22.04.1","6.5.0-41.41~22.04.2","6.5.0-44.44~22.04.1","6.5.0-45.45~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-intel-iot-realtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1073.75"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-lowlatency-hwe-5.19","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.19.0-1017.18~22.04.1","5.19.0-1018.19~22.04.1","5.19.0-1021.22~22.04.1","5.19.0-1022.23~22.04.1","5.19.0-1023.24~22.04.1","5.19.0-1024.25~22.04.1","5.19.0-1025.26~22.04.1","5.19.0-1027.28~22.04.1","5.19.0-1028.29~22.04.1","5.19.0-1030.30"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-lowlatency-hwe-6.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.2.0-1008.8~22.04.1","6.2.0-1009.9~22.04.1","6.2.0-1011.11~22.04.1","6.2.0-1012.12~22.04.1","6.2.0-1013.13~22.04.1","6.2.0-1014.14~22.04.1","6.2.0-1015.15~22.04.1","6.2.0-1016.16~22.04.1","6.2.0-1017.17~22.04.1","6.2.0-1018.18~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-lowlatency-hwe-6.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.5.0-14.14.1~22.04.1","6.5.0-15.15.1.1~22.04.1","6.5.0-17.17.1.1.1~22.04.1","6.5.0-21.21.1~22.04.1","6.5.0-25.25.1~22.04.1","6.5.0-26.26.1~22.04.1","6.5.0-27.28.1~22.04.1","6.5.0-28.29.1~22.04.1","6.5.0-35.35.1~22.04.1","6.5.0-41.41.1~22.04.1","6.5.0-42.42.1~22.04.1","6.5.0-44.44.1~22.04.1","6.5.0-45.45.1~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-nvidia-6.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.2.0-1003.3~22.04.1","6.2.0-1009.9","6.2.0-1010.10","6.2.0-1011.11","6.2.0-1012.12","6.2.0-1013.13","6.2.0-1015.15"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-nvidia-6.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.5.0-1004.4","6.5.0-1007.7","6.5.0-1013.13","6.5.0-1014.14","6.5.0-1015.15","6.5.0-1018.18","6.5.0-1019.19","6.5.0-1021.22","6.5.0-1022.23","6.5.0-1023.24","6.5.0-1024.25"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-oem-5.17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.17.0-1003.3","5.17.0-1004.4","5.17.0-1006.6","5.17.0-1011.12","5.17.0-1012.13","5.17.0-1013.14","5.17.0-1014.15","5.17.0-1015.16","5.17.0-1016.17","5.17.0-1017.18","5.17.0-1018.19","5.17.0-1019.20","5.17.0-1020.21","5.17.0-1021.22","5.17.0-1024.25","5.17.0-1025.26","5.17.0-1026.27","5.17.0-1027.28","5.17.0-1028.29","5.17.0-1029.30","5.17.0-1030.31","5.17.0-1031.32","5.17.0-1032.33","5.17.0-1033.34","5.17.0-1034.35","5.17.0-1035.36"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-oem-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.0.0-1006.6","6.0.0-1007.7","6.0.0-1008.8","6.0.0-1009.9","6.0.0-1010.10","6.0.0-1011.11","6.0.0-1012.12","6.0.0-1013.13","6.0.0-1014.14","6.0.0-1015.15","6.0.0-1016.16","6.0.0-1017.17","6.0.0-1018.18","6.0.0-1019.19","6.0.0-1020.20","6.0.0-1021.21"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-oem-6.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.1.0-1004.4","6.1.0-1006.6","6.1.0-1007.7","6.1.0-1008.8","6.1.0-1009.9","6.1.0-1010.10","6.1.0-1012.12","6.1.0-1013.13","6.1.0-1014.14","6.1.0-1015.15","6.1.0-1016.16","6.1.0-1017.17","6.1.0-1019.19","6.1.0-1020.20","6.1.0-1021.21","6.1.0-1022.22","6.1.0-1023.23","6.1.0-1024.24","6.1.0-1025.25","6.1.0-1026.26","6.1.0-1027.27","6.1.0-1028.28","6.1.0-1029.29","6.1.0-1033.33","6.1.0-1034.34","6.1.0-1035.35","6.1.0-1036.36"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-oem-6.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.5.0-1003.3","6.5.0-1004.4","6.5.0-1006.6","6.5.0-1007.7","6.5.0-1008.8","6.5.0-1009.10","6.5.0-1011.12","6.5.0-1013.14","6.5.0-1014.15","6.5.0-1015.16","6.5.0-1016.17","6.5.0-1018.19","6.5.0-1019.20","6.5.0-1020.21","6.5.0-1022.23","6.5.0-1023.24","6.5.0-1024.25","6.5.0-1025.26","6.5.0-1027.28"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-oracle-6.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.5.0-1013.13~22.04.4","6.5.0-1014.14~22.04.1","6.5.0-1015.15~22.04.1","6.5.0-1016.16~22.04.1","6.5.0-1018.18~22.04.1","6.5.0-1019.19~22.04.1","6.5.0-1020.20~22.04.1","6.5.0-1021.21~22.04.1","6.5.0-1023.23~22.04.1","6.5.0-1024.24~22.04.1","6.5.0-1025.25~22.04.1","6.5.0-1026.26~22.04.1","6.5.0-1027.27~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-realtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1032.35"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-riscv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.13.0-1004.4","5.13.0-1006.6+22.04.1","5.13.0-1007.7+22.04.1","5.13.0-1010.11+22.04.1","5.15.0-1004.4","5.15.0-1005.5","5.15.0-1006.6","5.15.0-1007.7","5.15.0-1008.8","5.15.0-1011.12","5.15.0-1012.13","5.15.0-1014.16","5.15.0-1015.17","5.15.0-1016.18","5.15.0-1017.19","5.15.0-1018.21","5.15.0-1019.22","5.15.0-1020.23","5.15.0-1022.26","5.15.0-1023.27","5.15.0-1026.30","5.15.0-1027.31","5.15.0-1028.32"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-riscv-5.19","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.19.0-1012.13~22.04.1","5.19.0-1015.16~22.04.1","5.19.0-1016.17~22.04.1","5.19.0-1017.18~22.04.1","5.19.0-1018.19~22.04.1","5.19.0-1019.21~22.04.1","5.19.0-1020.22~22.04.1","5.19.0-1021.23~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-riscv-6.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.5.0-17.17.1.1~22.04.1","6.5.0-21.21.1~22.04.1","6.5.0-25.25.1~22.04.1","6.5.0-26.26.1~22.04.1","6.5.0-27.28.1~22.04.1","6.5.0-28.29.1~22.04.1","6.5.0-35.35.1~22.04.1","6.5.0-40.40.1~22.04.1","6.5.0-42.42.1~22.04.1","6.5.0-45.45.1~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-starfive-5.19","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.19.0-1014.16~22.04.1","5.19.0-1015.17~22.04.1","5.19.0-1016.18~22.04.1","5.19.0-1017.19~22.04.1","5.19.0-1018.20~22.04.1","5.19.0-1019.21~22.04.1","5.19.0-1020.22~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-starfive-6.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.2.0-1006.7~22.04.1","6.2.0-1007.8~22.04.1","6.2.0-1009.10~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-starfive-6.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.5.0-1007.8~22.04.1","6.5.0-1008.9~22.04.1","6.5.0-1009.10~22.04.1","6.5.0-1010.11~22.04.1","6.5.0-1011.12~22.04.1","6.5.0-1012.13~22.04.1","6.5.0-1014.15~22.04.1","6.5.0-1015.16~22.04.1","6.5.0-1016.17~22.04.1","6.5.0-1017.18~22.04.1","6.5.0-1018.19~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-raspi-realtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.8.0-2019.20"]}],"products":[{"vendor":"linux","product":"linux"},{"vendor":"linux","product":"linux_kernel"}],"references":[{"url":"https://git.kernel.org/stable/c/ed98d26021db0fe62c327aa9f5e57a90bff3fa94","tags":["web"]},{"url":"https://git.kernel.org/stable/c/9467c49437e948c541569007cd412d577942e635","tags":["web"]},{"url":"https://git.kernel.org/stable/c/949ee5d44d1fd95119b29b3382a933cdc617bf9e","tags":["web"]},{"url":"https://git.kernel.org/stable/c/fb79d68a36e21960341ccab07d1ac06d93830321","tags":["web"]},{"url":"https://git.kernel.org/stable/c/1421883aa30c5d26bc3370e2d19cb350f0d5ca28","tags":["Patch","web","report"]},{"url":"https://git.kernel.org/stable/c/8286f8b622990194207df9ab852e0f87c60d35e9","tags":["Patch","web","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-53073","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-4f73-836m-4mcr"},{"url":"https://docs.bell-sw.com/security/cves/CVE-2024-53073","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/53xxx/CVE-2024-53073.json","tags":["advisory"]},{"url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","tags":["package"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2024-53073","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-2518","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-44950","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-46813","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-47707","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-47718","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-49891","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-49930","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-49938","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-49944","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-49997","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-50024","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-50039","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-50044","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-50135","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-50148","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-50171","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-50196","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-50208","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-50209","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-50234","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-50236","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-50299","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-53059","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-53063","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-53090","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-53099","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-53101","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-2519","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-2521","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-2522","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-39483","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-45026","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-46808","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-46825","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-47682","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-47706","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-47714","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-47715","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-47734","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-47740","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-47750","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-47754","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-49851","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-49861","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-49890","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-49907","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-49929","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-49982","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-50001","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-50010","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-50023","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-50048","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-50078","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-50086","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-50101","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-50108","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-50126","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-50127","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-50128","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-50130","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-50137","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-50139","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-50150","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-50155","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-50158","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-50163","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-50164","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-50187","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-50188","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-50201","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-50211","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-50218","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-50222","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-50226","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-50229","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-50235","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-50259","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-50261","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-50264","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-50278","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-50282","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-50285","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-50286","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-50300","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-53042","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-53060","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202624550-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1215199","tags":["report"]},{"url":"https://bugzilla.suse.com/1232383","tags":["report"]},{"url":"https://bugzilla.suse.com/1233187","tags":["report"]},{"url":"https://bugzilla.suse.com/1233565","tags":["report"]},{"url":"https://bugzilla.suse.com/1244337","tags":["report"]},{"url":"https://bugzilla.suse.com/1246086","tags":["report"]},{"url":"https://bugzilla.suse.com/1248354","tags":["report"]},{"url":"https://bugzilla.suse.com/1250656","tags":["report"]},{"url":"https://bugzilla.suse.com/1255222","tags":["report"]},{"url":"https://bugzilla.suse.com/1256632","tags":["report"]},{"url":"https://bugzilla.suse.com/1257737","tags":["report"]},{"url":"https://bugzilla.suse.com/1258184","tags":["report"]},{"url":"https://bugzilla.suse.com/1264022","tags":["report"]},{"url":"https://bugzilla.suse.com/1264024","tags":["report"]},{"url":"https://bugzilla.suse.com/1264267","tags":["report"]},{"url":"https://bugzilla.suse.com/1264985","tags":["report"]},{"url":"https://bugzilla.suse.com/1267203","tags":["report"]},{"url":"https://bugzilla.suse.com/1267238","tags":["report"]},{"url":"https://bugzilla.suse.com/1267373","tags":["report"]},{"url":"https://bugzilla.suse.com/1267681","tags":["report"]},{"url":"https://bugzilla.suse.com/1267720","tags":["report"]},{"url":"https://bugzilla.suse.com/1269264","tags":["report"]},{"url":"https://bugzilla.suse.com/1269364","tags":["report"]},{"url":"https://bugzilla.suse.com/1269532","tags":["report"]},{"url":"https://bugzilla.suse.com/1269655","tags":["report"]},{"url":"https://bugzilla.suse.com/1269798","tags":["report"]},{"url":"https://bugzilla.suse.com/1271349","tags":["report"]},{"url":"https://bugzilla.suse.com/1272261","tags":["report"]},{"url":"https://bugzilla.suse.com/1272296","tags":["report"]},{"url":"https://bugzilla.suse.com/1273292","tags":["report"]},{"url":"https://bugzilla.suse.com/1273557","tags":["report"]},{"url":"https://bugzilla.suse.com/1273803","tags":["report"]},{"url":"https://bugzilla.suse.com/1273805","tags":["report"]},{"url":"https://bugzilla.suse.com/1273809","tags":["report"]},{"url":"https://bugzilla.suse.com/1273839","tags":["report"]},{"url":"https://bugzilla.suse.com/1273880","tags":["report"]},{"url":"https://bugzilla.suse.com/1273970","tags":["report"]},{"url":"https://bugzilla.suse.com/1273999","tags":["report"]},{"url":"https://bugzilla.suse.com/1274080","tags":["report"]},{"url":"https://bugzilla.suse.com/1274082","tags":["report"]},{"url":"https://bugzilla.suse.com/1274261","tags":["report"]},{"url":"https://bugzilla.suse.com/1274292","tags":["report"]},{"url":"https://bugzilla.suse.com/1274550","tags":["report"]},{"url":"https://bugzilla.suse.com/1274902","tags":["report"]},{"url":"https://bugzilla.suse.com/1274949","tags":["report"]},{"url":"https://bugzilla.suse.com/1275524","tags":["report"]},{"url":"https://bugzilla.suse.com/1275568","tags":["report"]},{"url":"https://bugzilla.suse.com/1275575","tags":["report"]},{"url":"https://bugzilla.suse.com/1275671","tags":["report"]},{"url":"https://bugzilla.suse.com/1275672","tags":["report"]},{"url":"https://bugzilla.suse.com/1275678","tags":["report"]},{"url":"https://bugzilla.suse.com/1275683","tags":["report"]},{"url":"https://bugzilla.suse.com/1275689","tags":["report"]},{"url":"https://bugzilla.suse.com/1275692","tags":["report"]},{"url":"https://bugzilla.suse.com/1275810","tags":["report"]},{"url":"https://bugzilla.suse.com/1275811","tags":["report"]},{"url":"https://bugzilla.suse.com/1275813","tags":["report"]},{"url":"https://bugzilla.suse.com/1275939","tags":["report"]},{"url":"https://bugzilla.suse.com/1275944","tags":["report"]},{"url":"https://bugzilla.suse.com/1275947","tags":["report"]},{"url":"https://bugzilla.suse.com/1275951","tags":["report"]},{"url":"https://bugzilla.suse.com/1275957","tags":["report"]},{"url":"https://bugzilla.suse.com/1275958","tags":["report"]},{"url":"https://bugzilla.suse.com/1275959","tags":["report"]},{"url":"https://bugzilla.suse.com/1276271","tags":["report"]},{"url":"https://bugzilla.suse.com/1276280","tags":["report"]},{"url":"https://bugzilla.suse.com/1276321","tags":["report"]},{"url":"https://bugzilla.suse.com/1276343","tags":["report"]},{"url":"https://bugzilla.suse.com/1276363","tags":["report"]},{"url":"https://bugzilla.suse.com/1276382","tags":["report"]},{"url":"https://bugzilla.suse.com/1276384","tags":["report"]},{"url":"https://bugzilla.suse.com/1276387","tags":["report"]},{"url":"https://bugzilla.suse.com/1276393","tags":["report"]},{"url":"https://bugzilla.suse.com/1276444","tags":["report"]},{"url":"https://bugzilla.suse.com/1276450","tags":["report"]},{"url":"https://bugzilla.suse.com/1276451","tags":["report"]},{"url":"https://bugzilla.suse.com/1276453","tags":["report"]},{"url":"https://bugzilla.suse.com/1276454","tags":["report"]},{"url":"https://bugzilla.suse.com/1276457","tags":["report"]},{"url":"https://bugzilla.suse.com/1276476","tags":["report"]},{"url":"https://bugzilla.suse.com/1276479","tags":["report"]},{"url":"https://bugzilla.suse.com/1276482","tags":["report"]},{"url":"https://bugzilla.suse.com/1276483","tags":["report"]},{"url":"https://bugzilla.suse.com/1276495","tags":["report"]},{"url":"https://bugzilla.suse.com/1276499","tags":["report"]},{"url":"https://bugzilla.suse.com/1276502","tags":["report"]},{"url":"https://bugzilla.suse.com/1276517","tags":["report"]},{"url":"https://bugzilla.suse.com/1276522","tags":["report"]},{"url":"https://bugzilla.suse.com/1276574","tags":["report"]},{"url":"https://bugzilla.suse.com/1276576","tags":["report"]},{"url":"https://bugzilla.suse.com/1276585","tags":["report"]},{"url":"https://bugzilla.suse.com/1276592","tags":["report"]},{"url":"https://bugzilla.suse.com/1276765","tags":["report"]},{"url":"https://bugzilla.suse.com/1276769","tags":["report"]},{"url":"https://bugzilla.suse.com/1276770","tags":["report"]},{"url":"https://bugzilla.suse.com/1276772","tags":["report"]},{"url":"https://bugzilla.suse.com/1276773","tags":["report"]},{"url":"https://bugzilla.suse.com/1276776","tags":["report"]},{"url":"https://bugzilla.suse.com/1276778","tags":["report"]},{"url":"https://bugzilla.suse.com/1276779","tags":["report"]},{"url":"https://bugzilla.suse.com/1276798","tags":["report"]},{"url":"https://bugzilla.suse.com/1276844","tags":["report"]},{"url":"https://bugzilla.suse.com/1276925","tags":["report"]},{"url":"https://bugzilla.suse.com/1276933","tags":["report"]},{"url":"https://bugzilla.suse.com/1276934","tags":["report"]},{"url":"https://bugzilla.suse.com/1276935","tags":["report"]},{"url":"https://bugzilla.suse.com/1276940","tags":["report"]},{"url":"https://bugzilla.suse.com/1276949","tags":["report"]},{"url":"https://bugzilla.suse.com/1276956","tags":["report"]},{"url":"https://bugzilla.suse.com/1277044","tags":["report"]},{"url":"https://bugzilla.suse.com/1277046","tags":["report"]},{"url":"https://bugzilla.suse.com/1277053","tags":["report"]},{"url":"https://bugzilla.suse.com/1277067","tags":["report"]},{"url":"https://bugzilla.suse.com/1277069","tags":["report"]},{"url":"https://bugzilla.suse.com/1277071","tags":["report"]},{"url":"https://bugzilla.suse.com/1277072","tags":["report"]},{"url":"https://bugzilla.suse.com/1277075","tags":["report"]},{"url":"https://bugzilla.suse.com/1277080","tags":["report"]},{"url":"https://bugzilla.suse.com/1277082","tags":["report"]},{"url":"https://bugzilla.suse.com/1277089","tags":["report"]},{"url":"https://bugzilla.suse.com/1277091","tags":["report"]},{"url":"https://bugzilla.suse.com/1277094","tags":["report"]},{"url":"https://bugzilla.suse.com/1277103","tags":["report"]},{"url":"https://bugzilla.suse.com/1277113","tags":["report"]},{"url":"https://bugzilla.suse.com/1277121","tags":["report"]},{"url":"https://bugzilla.suse.com/1277133","tags":["report"]},{"url":"https://bugzilla.suse.com/1277158","tags":["report"]},{"url":"https://bugzilla.suse.com/1277161","tags":["report"]},{"url":"https://bugzilla.suse.com/1277163","tags":["report"]},{"url":"https://bugzilla.suse.com/1277166","tags":["report"]},{"url":"https://bugzilla.suse.com/1277167","tags":["report"]},{"url":"https://bugzilla.suse.com/1277169","tags":["report"]},{"url":"https://bugzilla.suse.com/1277170","tags":["report"]},{"url":"https://bugzilla.suse.com/1277171","tags":["report"]},{"url":"https://bugzilla.suse.com/1277173","tags":["report"]},{"url":"https://bugzilla.suse.com/1277176","tags":["report"]},{"url":"https://bugzilla.suse.com/1277177","tags":["report"]},{"url":"https://bugzilla.suse.com/1277184","tags":["report"]},{"url":"https://bugzilla.suse.com/1277190","tags":["report"]},{"url":"https://bugzilla.suse.com/1277191","tags":["report"]},{"url":"https://bugzilla.suse.com/1277192","tags":["report"]},{"url":"https://bugzilla.suse.com/1277193","tags":["report"]},{"url":"https://bugzilla.suse.com/1277194","tags":["report"]},{"url":"https://bugzilla.suse.com/1277195","tags":["report"]},{"url":"https://bugzilla.suse.com/1277196","tags":["report"]},{"url":"https://bugzilla.suse.com/1277197","tags":["report"]},{"url":"https://bugzilla.suse.com/1277201","tags":["report"]},{"url":"https://bugzilla.suse.com/1277211","tags":["report"]},{"url":"https://bugzilla.suse.com/1277214","tags":["report"]},{"url":"https://bugzilla.suse.com/1277221","tags":["report"]},{"url":"https://bugzilla.suse.com/1277222","tags":["report"]},{"url":"https://bugzilla.suse.com/1277225","tags":["report"]},{"url":"https://bugzilla.suse.com/1277240","tags":["report"]},{"url":"https://bugzilla.suse.com/1277254","tags":["report"]},{"url":"https://bugzilla.suse.com/1277264","tags":["report"]},{"url":"https://bugzilla.suse.com/1277280","tags":["report"]},{"url":"https://bugzilla.suse.com/1277282","tags":["report"]},{"url":"https://bugzilla.suse.com/1277307","tags":["report"]},{"url":"https://bugzilla.suse.com/1277312","tags":["report"]},{"url":"https://bugzilla.suse.com/1277317","tags":["report"]},{"url":"https://bugzilla.suse.com/1277319","tags":["report"]},{"url":"https://bugzilla.suse.com/1277323","tags":["report"]},{"url":"https://bugzilla.suse.com/1277325","tags":["report"]},{"url":"https://bugzilla.suse.com/1277329","tags":["report"]},{"url":"https://bugzilla.suse.com/1277330","tags":["report"]},{"url":"https://bugzilla.suse.com/1277336","tags":["report"]},{"url":"https://bugzilla.suse.com/1277337","tags":["report"]},{"url":"https://bugzilla.suse.com/1277338","tags":["report"]},{"url":"https://bugzilla.suse.com/1277339","tags":["report"]},{"url":"https://bugzilla.suse.com/1277343","tags":["report"]},{"url":"https://bugzilla.suse.com/1277344","tags":["report"]},{"url":"https://bugzilla.suse.com/1277345","tags":["report"]},{"url":"https://bugzilla.suse.com/1277355","tags":["report"]},{"url":"https://bugzilla.suse.com/1277356","tags":["report"]},{"url":"https://bugzilla.suse.com/1277357","tags":["report"]},{"url":"https://bugzilla.suse.com/1277362","tags":["report"]},{"url":"https://bugzilla.suse.com/1277364","tags":["report"]},{"url":"https://bugzilla.suse.com/1277365","tags":["report"]},{"url":"https://bugzilla.suse.com/1277383","tags":["report"]},{"url":"https://bugzilla.suse.com/1277387","tags":["report"]},{"url":"https://bugzilla.suse.com/1277389","tags":["report"]},{"url":"https://bugzilla.suse.com/1277456","tags":["report"]},{"url":"https://bugzilla.suse.com/1277457","tags":["report"]},{"url":"https://bugzilla.suse.com/1277461","tags":["report"]},{"url":"https://bugzilla.suse.com/1277467","tags":["report"]},{"url":"https://bugzilla.suse.com/1277472","tags":["report"]},{"url":"https://bugzilla.suse.com/1277487","tags":["report"]},{"url":"https://bugzilla.suse.com/1277488","tags":["report"]},{"url":"https://bugzilla.suse.com/1277497","tags":["report"]},{"url":"https://bugzilla.suse.com/1277520","tags":["report"]},{"url":"https://bugzilla.suse.com/1277522","tags":["report"]},{"url":"https://bugzilla.suse.com/1277529","tags":["report"]},{"url":"https://bugzilla.suse.com/1277530","tags":["report"]},{"url":"https://bugzilla.suse.com/1277533","tags":["report"]},{"url":"https://bugzilla.suse.com/1277538","tags":["report"]},{"url":"https://bugzilla.suse.com/1277540","tags":["report"]},{"url":"https://bugzilla.suse.com/1277541","tags":["report"]},{"url":"https://bugzilla.suse.com/1277542","tags":["report"]},{"url":"https://bugzilla.suse.com/1277543","tags":["report"]},{"url":"https://bugzilla.suse.com/1277546","tags":["report"]},{"url":"https://bugzilla.suse.com/1277554","tags":["report"]},{"url":"https://bugzilla.suse.com/1277560","tags":["report"]},{"url":"https://bugzilla.suse.com/1277566","tags":["report"]},{"url":"https://bugzilla.suse.com/1277576","tags":["report"]},{"url":"https://bugzilla.suse.com/1277578","tags":["report"]},{"url":"https://bugzilla.suse.com/1277593","tags":["report"]},{"url":"https://bugzilla.suse.com/1277599","tags":["report"]},{"url":"https://bugzilla.suse.com/1277607","tags":["report"]},{"url":"https://bugzilla.suse.com/1277609","tags":["report"]},{"url":"https://bugzilla.suse.com/1277610","tags":["report"]},{"url":"https://bugzilla.suse.com/1277612","tags":["report"]},{"url":"https://bugzilla.suse.com/1277621","tags":["report"]},{"url":"https://bugzilla.suse.com/1277623","tags":["report"]},{"url":"https://bugzilla.suse.com/1277637","tags":["report"]},{"url":"https://bugzilla.suse.com/1277645","tags":["report"]},{"url":"https://bugzilla.suse.com/1277657","tags":["report"]},{"url":"https://bugzilla.suse.com/1277663","tags":["report"]},{"url":"https://bugzilla.suse.com/1277665","tags":["report"]},{"url":"https://bugzilla.suse.com/1277677","tags":["report"]},{"url":"https://bugzilla.suse.com/1277682","tags":["report"]},{"url":"https://bugzilla.suse.com/1277690","tags":["report"]},{"url":"https://bugzilla.suse.com/1277730","tags":["report"]},{"url":"https://bugzilla.suse.com/1277741","tags":["report"]},{"url":"https://bugzilla.suse.com/1277744","tags":["report"]},{"url":"https://bugzilla.suse.com/1277746","tags":["report"]},{"url":"https://bugzilla.suse.com/1277754","tags":["report"]},{"url":"https://bugzilla.suse.com/1277770","tags":["report"]},{"url":"https://bugzilla.suse.com/1277771","tags":["report"]},{"url":"https://bugzilla.suse.com/1277772","tags":["report"]},{"url":"https://bugzilla.suse.com/1277835","tags":["report"]},{"url":"https://bugzilla.suse.com/1277836","tags":["report"]},{"url":"https://bugzilla.suse.com/1277839","tags":["report"]},{"url":"https://bugzilla.suse.com/1277875","tags":["report"]},{"url":"https://bugzilla.suse.com/1277877","tags":["report"]},{"url":"https://bugzilla.suse.com/1277879","tags":["report"]},{"url":"https://bugzilla.suse.com/1277880","tags":["report"]},{"url":"https://bugzilla.suse.com/1277881","tags":["report"]},{"url":"https://bugzilla.suse.com/1277882","tags":["report"]},{"url":"https://bugzilla.suse.com/1277884","tags":["report"]},{"url":"https://bugzilla.suse.com/1277890","tags":["report"]},{"url":"https://bugzilla.suse.com/1277893","tags":["report"]},{"url":"https://bugzilla.suse.com/1277903","tags":["report"]},{"url":"https://bugzilla.suse.com/1277934","tags":["report"]},{"url":"https://bugzilla.suse.com/1278028","tags":["report"]},{"url":"https://bugzilla.suse.com/1278030","tags":["report"]},{"url":"https://bugzilla.suse.com/1278033","tags":["report"]},{"url":"https://bugzilla.suse.com/1278041","tags":["report"]},{"url":"https://bugzilla.suse.com/1278050","tags":["report"]},{"url":"https://bugzilla.suse.com/1278057","tags":["report"]},{"url":"https://bugzilla.suse.com/1278101","tags":["report"]},{"url":"https://bugzilla.suse.com/1278123","tags":["report"]},{"url":"https://bugzilla.suse.com/1278132","tags":["report"]},{"url":"https://bugzilla.suse.com/1278139","tags":["report"]},{"url":"https://bugzilla.suse.com/1278153","tags":["report"]},{"url":"https://bugzilla.suse.com/1278160","tags":["report"]},{"url":"https://bugzilla.suse.com/1278181","tags":["report"]},{"url":"https://bugzilla.suse.com/1278194","tags":["report"]},{"url":"https://bugzilla.suse.com/1278200","tags":["report"]},{"url":"https://bugzilla.suse.com/1278201","tags":["report"]},{"url":"https://bugzilla.suse.com/1278202","tags":["report"]},{"url":"https://bugzilla.suse.com/1278207","tags":["report"]},{"url":"https://bugzilla.suse.com/1278212","tags":["report"]},{"url":"https://bugzilla.suse.com/1278214","tags":["report"]},{"url":"https://bugzilla.suse.com/1278222","tags":["report"]},{"url":"https://bugzilla.suse.com/1278241","tags":["report"]},{"url":"https://bugzilla.suse.com/1278246","tags":["report"]},{"url":"https://bugzilla.suse.com/1278296","tags":["report"]},{"url":"https://bugzilla.suse.com/1278310","tags":["report"]},{"url":"https://bugzilla.suse.com/1278313","tags":["report"]},{"url":"https://bugzilla.suse.com/1278317","tags":["report"]},{"url":"https://bugzilla.suse.com/1278319","tags":["report"]},{"url":"https://bugzilla.suse.com/1278320","tags":["report"]},{"url":"https://bugzilla.suse.com/1278323","tags":["report"]},{"url":"https://bugzilla.suse.com/1278325","tags":["report"]},{"url":"https://bugzilla.suse.com/1278326","tags":["report"]},{"url":"https://bugzilla.suse.com/1278334","tags":["report"]},{"url":"https://bugzilla.suse.com/1278337","tags":["report"]},{"url":"https://bugzilla.suse.com/1278343","tags":["report"]},{"url":"https://bugzilla.suse.com/1278377","tags":["report"]},{"url":"https://bugzilla.suse.com/1278393","tags":["report"]},{"url":"https://bugzilla.suse.com/1278400","tags":["report"]},{"url":"https://bugzilla.suse.com/1278412","tags":["report"]},{"url":"https://bugzilla.suse.com/1278415","tags":["report"]},{"url":"https://bugzilla.suse.com/1278429","tags":["report"]},{"url":"https://bugzilla.suse.com/1278430","tags":["report"]},{"url":"https://bugzilla.suse.com/1278431","tags":["report"]},{"url":"https://bugzilla.suse.com/1278704","tags":["report"]},{"url":"https://bugzilla.suse.com/1278711","tags":["report"]},{"url":"https://bugzilla.suse.com/1279455","tags":["report"]},{"url":"https://bugzilla.suse.com/1279464","tags":["report"]},{"url":"https://bugzilla.suse.com/1279467","tags":["report"]},{"url":"https://bugzilla.suse.com/1279468","tags":["report"]},{"url":"https://bugzilla.suse.com/1279471","tags":["report"]},{"url":"https://bugzilla.suse.com/1279477","tags":["report"]},{"url":"https://bugzilla.suse.com/1279483","tags":["report"]},{"url":"https://bugzilla.suse.com/1279485","tags":["report"]},{"url":"https://bugzilla.suse.com/1279493","tags":["report"]},{"url":"https://bugzilla.suse.com/1279494","tags":["report"]},{"url":"https://bugzilla.suse.com/1279496","tags":["report"]},{"url":"https://bugzilla.suse.com/1279499","tags":["report"]},{"url":"https://bugzilla.suse.com/1279504","tags":["report"]},{"url":"https://bugzilla.suse.com/1279508","tags":["report"]},{"url":"https://bugzilla.suse.com/1279510","tags":["report"]},{"url":"https://bugzilla.suse.com/1279520","tags":["report"]},{"url":"https://bugzilla.suse.com/1279533","tags":["report"]},{"url":"https://bugzilla.suse.com/1279564","tags":["report"]},{"url":"https://bugzilla.suse.com/1279592","tags":["report"]},{"url":"https://bugzilla.suse.com/1279594","tags":["report"]},{"url":"https://bugzilla.suse.com/1279605","tags":["report"]},{"url":"https://bugzilla.suse.com/1279606","tags":["report"]},{"url":"https://bugzilla.suse.com/1279607","tags":["report"]},{"url":"https://bugzilla.suse.com/1279608","tags":["report"]},{"url":"https://bugzilla.suse.com/1279614","tags":["report"]},{"url":"https://bugzilla.suse.com/1279616","tags":["report"]},{"url":"https://bugzilla.suse.com/1279624","tags":["report"]},{"url":"https://bugzilla.suse.com/1279625","tags":["report"]},{"url":"https://bugzilla.suse.com/1279627","tags":["report"]},{"url":"https://bugzilla.suse.com/1279632","tags":["report"]},{"url":"https://bugzilla.suse.com/1279698","tags":["report"]},{"url":"https://bugzilla.suse.com/1279699","tags":["report"]},{"url":"https://bugzilla.suse.com/1279777","tags":["report"]},{"url":"https://bugzilla.suse.com/1279795","tags":["report"]},{"url":"https://bugzilla.suse.com/1279798","tags":["report"]},{"url":"https://bugzilla.suse.com/1279802","tags":["report"]},{"url":"https://bugzilla.suse.com/1279805","tags":["report"]},{"url":"https://bugzilla.suse.com/1279808","tags":["report"]},{"url":"https://bugzilla.suse.com/1279809","tags":["report"]},{"url":"https://bugzilla.suse.com/1279812","tags":["report"]},{"url":"https://bugzilla.suse.com/1279814","tags":["report"]},{"url":"https://bugzilla.suse.com/1279815","tags":["report"]},{"url":"https://bugzilla.suse.com/1279816","tags":["report"]},{"url":"https://bugzilla.suse.com/1279825","tags":["report"]},{"url":"https://bugzilla.suse.com/1279920","tags":["report"]},{"url":"https://bugzilla.suse.com/1279921","tags":["report"]},{"url":"https://bugzilla.suse.com/1279971","tags":["report"]},{"url":"https://bugzilla.suse.com/1280141","tags":["report"]},{"url":"https://bugzilla.suse.com/1280142","tags":["report"]},{"url":"https://bugzilla.suse.com/1280156","tags":["report"]},{"url":"https://bugzilla.suse.com/1280157","tags":["report"]},{"url":"https://bugzilla.suse.com/1280158","tags":["report"]},{"url":"https://bugzilla.suse.com/1280162","tags":["report"]},{"url":"https://bugzilla.suse.com/1280172","tags":["report"]},{"url":"https://bugzilla.suse.com/1280178","tags":["report"]},{"url":"https://bugzilla.suse.com/1280185","tags":["report"]},{"url":"https://bugzilla.suse.com/1280215","tags":["report"]},{"url":"https://bugzilla.suse.com/1280221","tags":["report"]},{"url":"https://bugzilla.suse.com/1280230","tags":["report"]},{"url":"https://bugzilla.suse.com/1280234","tags":["report"]},{"url":"https://bugzilla.suse.com/1280244","tags":["report"]},{"url":"https://bugzilla.suse.com/1280246","tags":["report"]},{"url":"https://bugzilla.suse.com/1280247","tags":["report"]},{"url":"https://bugzilla.suse.com/1280251","tags":["report"]},{"url":"https://bugzilla.suse.com/1280253","tags":["report"]},{"url":"https://bugzilla.suse.com/1280266","tags":["report"]},{"url":"https://bugzilla.suse.com/1280273","tags":["report"]},{"url":"https://bugzilla.suse.com/1280276","tags":["report"]},{"url":"https://bugzilla.suse.com/1280301","tags":["report"]},{"url":"https://bugzilla.suse.com/1280305","tags":["report"]},{"url":"https://bugzilla.suse.com/1280306","tags":["report"]},{"url":"https://bugzilla.suse.com/1280311","tags":["report"]},{"url":"https://bugzilla.suse.com/1280315","tags":["report"]},{"url":"https://bugzilla.suse.com/1280316","tags":["report"]},{"url":"https://bugzilla.suse.com/1280319","tags":["report"]},{"url":"https://bugzilla.suse.com/1280345","tags":["report"]},{"url":"https://bugzilla.suse.com/1280378","tags":["report"]},{"url":"https://bugzilla.suse.com/1280395","tags":["report"]},{"url":"https://bugzilla.suse.com/1280397","tags":["report"]},{"url":"https://bugzilla.suse.com/1280398","tags":["report"]},{"url":"https://bugzilla.suse.com/1280399","tags":["report"]},{"url":"https://bugzilla.suse.com/1280400","tags":["report"]},{"url":"https://bugzilla.suse.com/1280402","tags":["report"]},{"url":"https://bugzilla.suse.com/1280408","tags":["report"]},{"url":"https://bugzilla.suse.com/1280410","tags":["report"]},{"url":"https://bugzilla.suse.com/1280415","tags":["report"]},{"url":"https://bugzilla.suse.com/1280416","tags":["report"]},{"url":"https://bugzilla.suse.com/1280421","tags":["report"]},{"url":"https://bugzilla.suse.com/1280423","tags":["report"]},{"url":"https://bugzilla.suse.com/1280425","tags":["report"]},{"url":"https://bugzilla.suse.com/1280428","tags":["report"]},{"url":"https://bugzilla.suse.com/1280429","tags":["report"]},{"url":"https://bugzilla.suse.com/1280431","tags":["report"]},{"url":"https://bugzilla.suse.com/1280434","tags":["report"]},{"url":"https://bugzilla.suse.com/1280463","tags":["report"]},{"url":"https://bugzilla.suse.com/1280472","tags":["report"]},{"url":"https://bugzilla.suse.com/1280476","tags":["report"]},{"url":"https://bugzilla.suse.com/1280477","tags":["report"]},{"url":"https://bugzilla.suse.com/1280479","tags":["report"]},{"url":"https://bugzilla.suse.com/1280480","tags":["report"]},{"url":"https://bugzilla.suse.com/1280492","tags":["report"]},{"url":"https://bugzilla.suse.com/1280500","tags":["report"]},{"url":"https://bugzilla.suse.com/1280501","tags":["report"]},{"url":"https://bugzilla.suse.com/1280504","tags":["report"]},{"url":"https://bugzilla.suse.com/1280505","tags":["report"]},{"url":"https://bugzilla.suse.com/1280520","tags":["report"]},{"url":"https://bugzilla.suse.com/1280539","tags":["report"]},{"url":"https://bugzilla.suse.com/1280545","tags":["report"]},{"url":"https://bugzilla.suse.com/1280554","tags":["report"]},{"url":"https://bugzilla.suse.com/1280559","tags":["report"]},{"url":"https://bugzilla.suse.com/1280560","tags":["report"]},{"url":"https://bugzilla.suse.com/1280563","tags":["report"]},{"url":"https://bugzilla.suse.com/1280569","tags":["report"]},{"url":"https://bugzilla.suse.com/1280570","tags":["report"]},{"url":"https://bugzilla.suse.com/1280571","tags":["report"]},{"url":"https://bugzilla.suse.com/1280573","tags":["report"]},{"url":"https://bugzilla.suse.com/1280581","tags":["report"]},{"url":"https://bugzilla.suse.com/1280713","tags":["report"]},{"url":"https://bugzilla.suse.com/1280735","tags":["report"]},{"url":"https://bugzilla.suse.com/1280736","tags":["report"]},{"url":"https://bugzilla.suse.com/1280745","tags":["report"]},{"url":"https://bugzilla.suse.com/1280777","tags":["report"]},{"url":"https://bugzilla.suse.com/1280785","tags":["report"]},{"url":"https://bugzilla.suse.com/1280794","tags":["report"]},{"url":"https://bugzilla.suse.com/1280804","tags":["report"]},{"url":"https://bugzilla.suse.com/1280806","tags":["report"]},{"url":"https://bugzilla.suse.com/1280813","tags":["report"]},{"url":"https://bugzilla.suse.com/1280822","tags":["report"]},{"url":"https://bugzilla.suse.com/1280826","tags":["report"]},{"url":"https://bugzilla.suse.com/1280834","tags":["report"]},{"url":"https://bugzilla.suse.com/1280918","tags":["report"]},{"url":"https://bugzilla.suse.com/1280948","tags":["report"]},{"url":"https://bugzilla.suse.com/1280960","tags":["report"]},{"url":"https://bugzilla.suse.com/1280970","tags":["report"]},{"url":"https://bugzilla.suse.com/1280976","tags":["report"]},{"url":"https://bugzilla.suse.com/1280977","tags":["report"]},{"url":"https://bugzilla.suse.com/1280978","tags":["report"]},{"url":"https://bugzilla.suse.com/1280980","tags":["report"]},{"url":"https://bugzilla.suse.com/1280981","tags":["report"]},{"url":"https://bugzilla.suse.com/1280984","tags":["report"]},{"url":"https://bugzilla.suse.com/1280987","tags":["report"]},{"url":"https://bugzilla.suse.com/1280992","tags":["report"]},{"url":"https://bugzilla.suse.com/1280996","tags":["report"]},{"url":"https://bugzilla.suse.com/1281001","tags":["report"]},{"url":"https://bugzilla.suse.com/1281003","tags":["report"]},{"url":"https://bugzilla.suse.com/1281005","tags":["report"]},{"url":"https://bugzilla.suse.com/1281008","tags":["report"]},{"url":"https://bugzilla.suse.com/1281011","tags":["report"]},{"url":"https://bugzilla.suse.com/1281018","tags":["report"]},{"url":"https://bugzilla.suse.com/1281022","tags":["report"]},{"url":"https://bugzilla.suse.com/1281027","tags":["report"]},{"url":"https://bugzilla.suse.com/1281029","tags":["report"]},{"url":"https://bugzilla.suse.com/1281030","tags":["report"]},{"url":"https://bugzilla.suse.com/1281034","tags":["report"]},{"url":"https://bugzilla.suse.com/1281052","tags":["report"]},{"url":"https://bugzilla.suse.com/1281056","tags":["report"]},{"url":"https://bugzilla.suse.com/1281058","tags":["report"]},{"url":"https://bugzilla.suse.com/1281065","tags":["report"]},{"url":"https://bugzilla.suse.com/1281130","tags":["report"]},{"url":"https://bugzilla.suse.com/1281138","tags":["report"]},{"url":"https://bugzilla.suse.com/1281149","tags":["report"]},{"url":"https://bugzilla.suse.com/1281150","tags":["report"]},{"url":"https://bugzilla.suse.com/1281151","tags":["report"]},{"url":"https://bugzilla.suse.com/1281155","tags":["report"]},{"url":"https://bugzilla.suse.com/1281156","tags":["report"]},{"url":"https://bugzilla.suse.com/1281163","tags":["report"]},{"url":"https://bugzilla.suse.com/1281164","tags":["report"]},{"url":"https://bugzilla.suse.com/1281165","tags":["report"]},{"url":"https://bugzilla.suse.com/1281173","tags":["report"]},{"url":"https://bugzilla.suse.com/1281174","tags":["report"]},{"url":"https://bugzilla.suse.com/1281179","tags":["report"]},{"url":"https://bugzilla.suse.com/1281180","tags":["report"]},{"url":"https://bugzilla.suse.com/1281181","tags":["report"]},{"url":"https://bugzilla.suse.com/1281183","tags":["report"]},{"url":"https://bugzilla.suse.com/1281184","tags":["report"]},{"url":"https://bugzilla.suse.com/1281185","tags":["report"]},{"url":"https://bugzilla.suse.com/1281189","tags":["report"]},{"url":"https://bugzilla.suse.com/1281190","tags":["report"]},{"url":"https://bugzilla.suse.com/1281191","tags":["report"]},{"url":"https://bugzilla.suse.com/1281194","tags":["report"]},{"url":"https://bugzilla.suse.com/1281204","tags":["report"]},{"url":"https://bugzilla.suse.com/1281206","tags":["report"]},{"url":"https://bugzilla.suse.com/1281211","tags":["report"]},{"url":"https://bugzilla.suse.com/1281214","tags":["report"]},{"url":"https://bugzilla.suse.com/1281216","tags":["report"]},{"url":"https://bugzilla.suse.com/1281221","tags":["report"]},{"url":"https://bugzilla.suse.com/1281222","tags":["report"]},{"url":"https://bugzilla.suse.com/1281251","tags":["report"]},{"url":"https://bugzilla.suse.com/1281253","tags":["report"]},{"url":"https://bugzilla.suse.com/1281254","tags":["report"]},{"url":"https://bugzilla.suse.com/1281257","tags":["report"]},{"url":"https://bugzilla.suse.com/1281260","tags":["report"]},{"url":"https://bugzilla.suse.com/1281265","tags":["report"]},{"url":"https://bugzilla.suse.com/1281269","tags":["report"]},{"url":"https://bugzilla.suse.com/1281270","tags":["report"]},{"url":"https://bugzilla.suse.com/1281271","tags":["report"]},{"url":"https://bugzilla.suse.com/1281272","tags":["report"]},{"url":"https://bugzilla.suse.com/1281275","tags":["report"]},{"url":"https://bugzilla.suse.com/1281277","tags":["report"]},{"url":"https://bugzilla.suse.com/1281281","tags":["report"]},{"url":"https://bugzilla.suse.com/1281292","tags":["report"]},{"url":"https://bugzilla.suse.com/1281299","tags":["report"]},{"url":"https://bugzilla.suse.com/1281300","tags":["report"]},{"url":"https://bugzilla.suse.com/1281311","tags":["report"]},{"url":"https://bugzilla.suse.com/1281315","tags":["report"]},{"url":"https://bugzilla.suse.com/1281320","tags":["report"]},{"url":"https://bugzilla.suse.com/1281332","tags":["report"]},{"url":"https://bugzilla.suse.com/1281333","tags":["report"]},{"url":"https://bugzilla.suse.com/1281334","tags":["report"]},{"url":"https://bugzilla.suse.com/1281337","tags":["report"]},{"url":"https://bugzilla.suse.com/1281346","tags":["report"]},{"url":"https://bugzilla.suse.com/1281352","tags":["report"]},{"url":"https://bugzilla.suse.com/1281353","tags":["report"]},{"url":"https://bugzilla.suse.com/1281357","tags":["report"]},{"url":"https://bugzilla.suse.com/1281360","tags":["report"]},{"url":"https://bugzilla.suse.com/1281361","tags":["report"]},{"url":"https://bugzilla.suse.com/1281363","tags":["report"]},{"url":"https://bugzilla.suse.com/1281368","tags":["report"]},{"url":"https://bugzilla.suse.com/1281382","tags":["report"]},{"url":"https://bugzilla.suse.com/1281384","tags":["report"]},{"url":"https://bugzilla.suse.com/1281391","tags":["report"]},{"url":"https://bugzilla.suse.com/1281392","tags":["report"]},{"url":"https://bugzilla.suse.com/1281394","tags":["report"]},{"url":"https://bugzilla.suse.com/1281395","tags":["report"]},{"url":"https://bugzilla.suse.com/1281396","tags":["report"]},{"url":"https://bugzilla.suse.com/1281402","tags":["report"]},{"url":"https://bugzilla.suse.com/1281418","tags":["report"]},{"url":"https://bugzilla.suse.com/1281422","tags":["report"]},{"url":"https://bugzilla.suse.com/1281429","tags":["report"]},{"url":"https://bugzilla.suse.com/1281488","tags":["report"]},{"url":"https://bugzilla.suse.com/1281490","tags":["report"]},{"url":"https://bugzilla.suse.com/1281495","tags":["report"]},{"url":"https://bugzilla.suse.com/1281500","tags":["report"]},{"url":"https://bugzilla.suse.com/1281504","tags":["report"]},{"url":"https://bugzilla.suse.com/1281509","tags":["report"]},{"url":"https://bugzilla.suse.com/1281510","tags":["report"]},{"url":"https://bugzilla.suse.com/1281535","tags":["report"]},{"url":"https://bugzilla.suse.com/1281538","tags":["report"]},{"url":"https://bugzilla.suse.com/1281547","tags":["report"]},{"url":"https://bugzilla.suse.com/1281549","tags":["report"]},{"url":"https://bugzilla.suse.com/1281551","tags":["report"]},{"url":"https://bugzilla.suse.com/1281563","tags":["report"]},{"url":"https://bugzilla.suse.com/1281568","tags":["report"]},{"url":"https://bugzilla.suse.com/1281577","tags":["report"]},{"url":"https://bugzilla.suse.com/1281579","tags":["report"]},{"url":"https://bugzilla.suse.com/1281619","tags":["report"]},{"url":"https://bugzilla.suse.com/1281620","tags":["report"]},{"url":"https://bugzilla.suse.com/1281626","tags":["report"]},{"url":"https://bugzilla.suse.com/1281631","tags":["report"]},{"url":"https://bugzilla.suse.com/1281635","tags":["report"]},{"url":"https://bugzilla.suse.com/1281639","tags":["report"]},{"url":"https://bugzilla.suse.com/1281640","tags":["report"]},{"url":"https://bugzilla.suse.com/1281650","tags":["report"]},{"url":"https://bugzilla.suse.com/1281672","tags":["report"]},{"url":"https://bugzilla.suse.com/1281676","tags":["report"]},{"url":"https://bugzilla.suse.com/1281677","tags":["report"]},{"url":"https://bugzilla.suse.com/1281688","tags":["report"]},{"url":"https://bugzilla.suse.com/1281691","tags":["report"]},{"url":"https://bugzilla.suse.com/1281696","tags":["report"]},{"url":"https://bugzilla.suse.com/1281701","tags":["report"]},{"url":"https://bugzilla.suse.com/1281702","tags":["report"]},{"url":"https://bugzilla.suse.com/1281705","tags":["report"]},{"url":"https://bugzilla.suse.com/1281706","tags":["report"]},{"url":"https://bugzilla.suse.com/1281707","tags":["report"]},{"url":"https://bugzilla.suse.com/1281708","tags":["report"]},{"url":"https://bugzilla.suse.com/1281715","tags":["report"]},{"url":"https://bugzilla.suse.com/1281723","tags":["report"]},{"url":"https://bugzilla.suse.com/1281724","tags":["report"]},{"url":"https://bugzilla.suse.com/1281735","tags":["report"]},{"url":"https://bugzilla.suse.com/1281736","tags":["report"]},{"url":"https://bugzilla.suse.com/1281753","tags":["report"]},{"url":"https://bugzilla.suse.com/1281776","tags":["report"]},{"url":"https://bugzilla.suse.com/1281779","tags":["report"]},{"url":"https://bugzilla.suse.com/1281781","tags":["report"]},{"url":"https://bugzilla.suse.com/1281783","tags":["report"]},{"url":"https://bugzilla.suse.com/1281784","tags":["report"]},{"url":"https://bugzilla.suse.com/1281785","tags":["report"]},{"url":"https://bugzilla.suse.com/1281796","tags":["report"]},{"url":"https://bugzilla.suse.com/1281799","tags":["report"]},{"url":"https://bugzilla.suse.com/1281801","tags":["report"]},{"url":"https://bugzilla.suse.com/1281804","tags":["report"]},{"url":"https://bugzilla.suse.com/1281813","tags":["report"]},{"url":"https://bugzilla.suse.com/1281824","tags":["report"]},{"url":"https://bugzilla.suse.com/1281828","tags":["report"]},{"url":"https://bugzilla.suse.com/1281850","tags":["report"]},{"url":"https://bugzilla.suse.com/1281851","tags":["report"]},{"url":"https://bugzilla.suse.com/1281853","tags":["report"]},{"url":"https://bugzilla.suse.com/1281858","tags":["report"]},{"url":"https://bugzilla.suse.com/1281868","tags":["report"]},{"url":"https://bugzilla.suse.com/1281870","tags":["report"]},{"url":"https://bugzilla.suse.com/1281877","tags":["report"]},{"url":"https://bugzilla.suse.com/1281886","tags":["report"]},{"url":"https://bugzilla.suse.com/1281887","tags":["report"]},{"url":"https://bugzilla.suse.com/1281890","tags":["report"]},{"url":"https://bugzilla.suse.com/1281891","tags":["report"]},{"url":"https://bugzilla.suse.com/1281895","tags":["report"]},{"url":"https://bugzilla.suse.com/1281897","tags":["report"]},{"url":"https://bugzilla.suse.com/1281900","tags":["report"]},{"url":"https://bugzilla.suse.com/1281903","tags":["report"]},{"url":"https://bugzilla.suse.com/1281916","tags":["report"]},{"url":"https://bugzilla.suse.com/1281930","tags":["report"]},{"url":"https://bugzilla.suse.com/1281932","tags":["report"]},{"url":"https://bugzilla.suse.com/1281968","tags":["report"]},{"url":"https://bugzilla.suse.com/1281969","tags":["report"]},{"url":"https://bugzilla.suse.com/1281985","tags":["report"]},{"url":"https://bugzilla.suse.com/1281987","tags":["report"]},{"url":"https://bugzilla.suse.com/1281996","tags":["report"]},{"url":"https://bugzilla.suse.com/1282001","tags":["report"]},{"url":"https://bugzilla.suse.com/1282002","tags":["report"]},{"url":"https://bugzilla.suse.com/1282008","tags":["report"]},{"url":"https://bugzilla.suse.com/1282018","tags":["report"]},{"url":"https://bugzilla.suse.com/1282019","tags":["report"]},{"url":"https://bugzilla.suse.com/1282021","tags":["report"]},{"url":"https://bugzilla.suse.com/1282025","tags":["report"]},{"url":"https://bugzilla.suse.com/1282026","tags":["report"]},{"url":"https://bugzilla.suse.com/1282027","tags":["report"]},{"url":"https://bugzilla.suse.com/1282031","tags":["report"]},{"url":"https://bugzilla.suse.com/1282032","tags":["report"]},{"url":"https://bugzilla.suse.com/1282033","tags":["report"]},{"url":"https://bugzilla.suse.com/1282044","tags":["report"]},{"url":"https://bugzilla.suse.com/1282045","tags":["report"]},{"url":"https://bugzilla.suse.com/1282063","tags":["report"]},{"url":"https://bugzilla.suse.com/1282065","tags":["report"]},{"url":"https://bugzilla.suse.com/1282068","tags":["report"]},{"url":"https://bugzilla.suse.com/1282080","tags":["report"]},{"url":"https://bugzilla.suse.com/1282081","tags":["report"]},{"url":"https://bugzilla.suse.com/1282082","tags":["report"]},{"url":"https://bugzilla.suse.com/1282083","tags":["report"]},{"url":"https://bugzilla.suse.com/1282095","tags":["report"]},{"url":"https://bugzilla.suse.com/1282114","tags":["report"]},{"url":"https://bugzilla.suse.com/1282116","tags":["report"]},{"url":"https://bugzilla.suse.com/1282117","tags":["report"]},{"url":"https://bugzilla.suse.com/1282122","tags":["report"]},{"url":"https://bugzilla.suse.com/1282128","tags":["report"]},{"url":"https://bugzilla.suse.com/1282133","tags":["report"]},{"url":"https://bugzilla.suse.com/1282134","tags":["report"]},{"url":"https://bugzilla.suse.com/1282145","tags":["report"]},{"url":"https://bugzilla.suse.com/1282146","tags":["report"]},{"url":"https://bugzilla.suse.com/1282149","tags":["report"]},{"url":"https://bugzilla.suse.com/1282151","tags":["report"]},{"url":"https://bugzilla.suse.com/1282154","tags":["report"]},{"url":"https://bugzilla.suse.com/1282156","tags":["report"]},{"url":"https://bugzilla.suse.com/1282158","tags":["report"]},{"url":"https://bugzilla.suse.com/1282167","tags":["report"]},{"url":"https://bugzilla.suse.com/1282174","tags":["report"]},{"url":"https://bugzilla.suse.com/1282178","tags":["report"]},{"url":"https://bugzilla.suse.com/1282189","tags":["report"]},{"url":"https://bugzilla.suse.com/1282192","tags":["report"]},{"url":"https://bugzilla.suse.com/1282196","tags":["report"]},{"url":"https://bugzilla.suse.com/1282262","tags":["report"]},{"url":"https://bugzilla.suse.com/1282276","tags":["report"]},{"url":"https://bugzilla.suse.com/1282289","tags":["report"]},{"url":"https://bugzilla.suse.com/1282296","tags":["report"]},{"url":"https://bugzilla.suse.com/1282298","tags":["report"]},{"url":"https://bugzilla.suse.com/1282302","tags":["report"]},{"url":"https://bugzilla.suse.com/1282304","tags":["report"]},{"url":"https://bugzilla.suse.com/1282325","tags":["report"]},{"url":"https://bugzilla.suse.com/1282327","tags":["report"]},{"url":"https://bugzilla.suse.com/1282328","tags":["report"]},{"url":"https://bugzilla.suse.com/1282677","tags":["report"]},{"url":"https://bugzilla.suse.com/1282684","tags":["report"]},{"url":"https://bugzilla.suse.com/1282686","tags":["report"]},{"url":"https://bugzilla.suse.com/1282690","tags":["report"]},{"url":"https://bugzilla.suse.com/1282691","tags":["report"]},{"url":"https://bugzilla.suse.com/1282695","tags":["report"]},{"url":"https://bugzilla.suse.com/1282697","tags":["report"]},{"url":"https://bugzilla.suse.com/1282729","tags":["report"]},{"url":"https://bugzilla.suse.com/1282737","tags":["report"]},{"url":"https://bugzilla.suse.com/1282744","tags":["report"]},{"url":"https://bugzilla.suse.com/1282753","tags":["report"]},{"url":"https://bugzilla.suse.com/1282754","tags":["report"]},{"url":"https://bugzilla.suse.com/1282759","tags":["report"]},{"url":"https://bugzilla.suse.com/1282763","tags":["report"]},{"url":"https://bugzilla.suse.com/1282764","tags":["report"]},{"url":"https://bugzilla.suse.com/1282769","tags":["report"]},{"url":"https://bugzilla.suse.com/1282772","tags":["report"]},{"url":"https://bugzilla.suse.com/1282773","tags":["report"]},{"url":"https://bugzilla.suse.com/1282775","tags":["report"]},{"url":"https://bugzilla.suse.com/1282776","tags":["report"]},{"url":"https://bugzilla.suse.com/1282778","tags":["report"]},{"url":"https://bugzilla.suse.com/1282805","tags":["report"]},{"url":"https://bugzilla.suse.com/1282814","tags":["report"]},{"url":"https://bugzilla.suse.com/1282867","tags":["report"]},{"url":"https://bugzilla.suse.com/1282870","tags":["report"]},{"url":"https://bugzilla.suse.com/1282879","tags":["report"]},{"url":"https://bugzilla.suse.com/1282885","tags":["report"]},{"url":"https://bugzilla.suse.com/1282887","tags":["report"]},{"url":"https://bugzilla.suse.com/1282889","tags":["report"]},{"url":"https://bugzilla.suse.com/1282890","tags":["report"]},{"url":"https://bugzilla.suse.com/1282893","tags":["report"]},{"url":"https://bugzilla.suse.com/1282898","tags":["report"]},{"url":"https://bugzilla.suse.com/1282911","tags":["report"]},{"url":"https://bugzilla.suse.com/1282914","tags":["report"]},{"url":"https://bugzilla.suse.com/1282915","tags":["report"]},{"url":"https://bugzilla.suse.com/1282920","tags":["report"]},{"url":"https://bugzilla.suse.com/1282924","tags":["report"]},{"url":"https://bugzilla.suse.com/1282925","tags":["report"]},{"url":"https://bugzilla.suse.com/1282926","tags":["report"]},{"url":"https://bugzilla.suse.com/1282927","tags":["report"]},{"url":"https://bugzilla.suse.com/1282935","tags":["report"]},{"url":"https://bugzilla.suse.com/1282955","tags":["report"]},{"url":"https://bugzilla.suse.com/1282957","tags":["report"]},{"url":"https://bugzilla.suse.com/1282962","tags":["report"]},{"url":"https://bugzilla.suse.com/1282963","tags":["report"]},{"url":"https://bugzilla.suse.com/1282974","tags":["report"]},{"url":"https://bugzilla.suse.com/1282984","tags":["report"]},{"url":"https://bugzilla.suse.com/1283004","tags":["report"]},{"url":"https://bugzilla.suse.com/1283016","tags":["report"]},{"url":"https://bugzilla.suse.com/1283017","tags":["report"]},{"url":"https://bugzilla.suse.com/1283018","tags":["report"]},{"url":"https://bugzilla.suse.com/1283036","tags":["report"]},{"url":"https://bugzilla.suse.com/1283039","tags":["report"]},{"url":"https://bugzilla.suse.com/1283045","tags":["report"]},{"url":"https://bugzilla.suse.com/1283047","tags":["report"]},{"url":"https://bugzilla.suse.com/1283051","tags":["report"]},{"url":"https://bugzilla.suse.com/1283058","tags":["report"]},{"url":"https://bugzilla.suse.com/1283076","tags":["report"]},{"url":"https://bugzilla.suse.com/1283077","tags":["report"]},{"url":"https://bugzilla.suse.com/1283078","tags":["report"]},{"url":"https://bugzilla.suse.com/1283081","tags":["report"]},{"url":"https://bugzilla.suse.com/1283087","tags":["report"]},{"url":"https://bugzilla.suse.com/1283113","tags":["report"]},{"url":"https://bugzilla.suse.com/1283114","tags":["report"]},{"url":"https://bugzilla.suse.com/1283122","tags":["report"]},{"url":"https://bugzilla.suse.com/1283132","tags":["report"]},{"url":"https://bugzilla.suse.com/1283134","tags":["report"]},{"url":"https://bugzilla.suse.com/1283136","tags":["report"]},{"url":"https://bugzilla.suse.com/1283145","tags":["report"]},{"url":"https://bugzilla.suse.com/1283155","tags":["report"]},{"url":"https://bugzilla.suse.com/1283157","tags":["report"]},{"url":"https://bugzilla.suse.com/1283159","tags":["report"]},{"url":"https://bugzilla.suse.com/1283164","tags":["report"]},{"url":"https://bugzilla.suse.com/1283175","tags":["report"]},{"url":"https://bugzilla.suse.com/1283177","tags":["report"]},{"url":"https://bugzilla.suse.com/1283196","tags":["report"]},{"url":"https://bugzilla.suse.com/1283197","tags":["report"]},{"url":"https://bugzilla.suse.com/1283202","tags":["report"]},{"url":"https://bugzilla.suse.com/1283206","tags":["report"]},{"url":"https://bugzilla.suse.com/1283208","tags":["report"]},{"url":"https://bugzilla.suse.com/1283209","tags":["report"]},{"url":"https://bugzilla.suse.com/1283211","tags":["report"]},{"url":"https://bugzilla.suse.com/1283214","tags":["report"]},{"url":"https://bugzilla.suse.com/1283215","tags":["report"]},{"url":"https://bugzilla.suse.com/1283220","tags":["report"]},{"url":"https://bugzilla.suse.com/1283223","tags":["report"]},{"url":"https://bugzilla.suse.com/1283224","tags":["report"]},{"url":"https://bugzilla.suse.com/1283225","tags":["report"]},{"url":"https://bugzilla.suse.com/1283226","tags":["report"]},{"url":"https://bugzilla.suse.com/1283229","tags":["report"]},{"url":"https://bugzilla.suse.com/1283231","tags":["report"]},{"url":"https://bugzilla.suse.com/1283271","tags":["report"]},{"url":"https://bugzilla.suse.com/1283276","tags":["report"]},{"url":"https://bugzilla.suse.com/1283278","tags":["report"]},{"url":"https://bugzilla.suse.com/1283287","tags":["report"]},{"url":"https://bugzilla.suse.com/1283288","tags":["report"]},{"url":"https://bugzilla.suse.com/1283292","tags":["report"]},{"url":"https://bugzilla.suse.com/1283333","tags":["report"]},{"url":"https://bugzilla.suse.com/1283334","tags":["report"]},{"url":"https://bugzilla.suse.com/1283335","tags":["report"]},{"url":"https://bugzilla.suse.com/1283337","tags":["report"]},{"url":"https://bugzilla.suse.com/1283339","tags":["report"]},{"url":"https://bugzilla.suse.com/1283343","tags":["report"]},{"url":"https://bugzilla.suse.com/1283349","tags":["report"]},{"url":"https://bugzilla.suse.com/1283356","tags":["report"]},{"url":"https://bugzilla.suse.com/1283360","tags":["report"]},{"url":"https://bugzilla.suse.com/1283364","tags":["report"]},{"url":"https://bugzilla.suse.com/1283416","tags":["report"]},{"url":"https://bugzilla.suse.com/1283418","tags":["report"]},{"url":"https://bugzilla.suse.com/1283429","tags":["report"]},{"url":"https://bugzilla.suse.com/1283445","tags":["report"]},{"url":"https://bugzilla.suse.com/1283453","tags":["report"]},{"url":"https://bugzilla.suse.com/1283464","tags":["report"]},{"url":"https://bugzilla.suse.com/1283469","tags":["report"]},{"url":"https://bugzilla.suse.com/1283474","tags":["report"]},{"url":"https://bugzilla.suse.com/1283481","tags":["report"]},{"url":"https://bugzilla.suse.com/1283483","tags":["report"]},{"url":"https://bugzilla.suse.com/1283485","tags":["report"]},{"url":"https://bugzilla.suse.com/1283486","tags":["report"]},{"url":"https://bugzilla.suse.com/1283502","tags":["report"]},{"url":"https://bugzilla.suse.com/1283511","tags":["report"]},{"url":"https://bugzilla.suse.com/1283585","tags":["report"]},{"url":"https://bugzilla.suse.com/1283662","tags":["report"]},{"url":"https://bugzilla.suse.com/1283668","tags":["report"]},{"url":"https://bugzilla.suse.com/1283741","tags":["report"]},{"url":"https://bugzilla.suse.com/1283746","tags":["report"]},{"url":"https://bugzilla.suse.com/1283752","tags":["report"]},{"url":"https://bugzilla.suse.com/1283754","tags":["report"]},{"url":"https://bugzilla.suse.com/1283782","tags":["report"]},{"url":"https://bugzilla.suse.com/1283793","tags":["report"]},{"url":"https://bugzilla.suse.com/1283810","tags":["report"]},{"url":"https://bugzilla.suse.com/1283812","tags":["report"]},{"url":"https://bugzilla.suse.com/1283821","tags":["report"]},{"url":"https://bugzilla.suse.com/1283830","tags":["report"]},{"url":"https://bugzilla.suse.com/1283833","tags":["report"]},{"url":"https://bugzilla.suse.com/1283834","tags":["report"]},{"url":"https://bugzilla.suse.com/1283837","tags":["report"]},{"url":"https://bugzilla.suse.com/1283838","tags":["report"]},{"url":"https://bugzilla.suse.com/1283842","tags":["report"]},{"url":"https://bugzilla.suse.com/1283844","tags":["report"]},{"url":"https://bugzilla.suse.com/1283845","tags":["report"]},{"url":"https://bugzilla.suse.com/1283846","tags":["report"]},{"url":"https://bugzilla.suse.com/1283850","tags":["report"]},{"url":"https://bugzilla.suse.com/1283853","tags":["report"]},{"url":"https://bugzilla.suse.com/1283855","tags":["report"]},{"url":"https://bugzilla.suse.com/1283856","tags":["report"]},{"url":"https://bugzilla.suse.com/1283858","tags":["report"]},{"url":"https://bugzilla.suse.com/1283859","tags":["report"]},{"url":"https://bugzilla.suse.com/1283862","tags":["report"]},{"url":"https://bugzilla.suse.com/1283863","tags":["report"]},{"url":"https://bugzilla.suse.com/1283869","tags":["report"]},{"url":"https://bugzilla.suse.com/1283871","tags":["report"]},{"url":"https://bugzilla.suse.com/1283873","tags":["report"]},{"url":"https://bugzilla.suse.com/1283877","tags":["report"]},{"url":"https://bugzilla.suse.com/1283878","tags":["report"]},{"url":"https://bugzilla.suse.com/1283884","tags":["report"]},{"url":"https://bugzilla.suse.com/1283886","tags":["report"]},{"url":"https://bugzilla.suse.com/1283903","tags":["report"]},{"url":"https://bugzilla.suse.com/1283916","tags":["report"]},{"url":"https://bugzilla.suse.com/1283920","tags":["report"]},{"url":"https://bugzilla.suse.com/1283921","tags":["report"]},{"url":"https://bugzilla.suse.com/1283928","tags":["report"]},{"url":"https://bugzilla.suse.com/1283933","tags":["report"]},{"url":"https://bugzilla.suse.com/1283941","tags":["report"]},{"url":"https://bugzilla.suse.com/1283958","tags":["report"]},{"url":"https://bugzilla.suse.com/1283960","tags":["report"]},{"url":"https://bugzilla.suse.com/1283967","tags":["report"]},{"url":"https://bugzilla.suse.com/1284024","tags":["report"]},{"url":"https://bugzilla.suse.com/1284031","tags":["report"]},{"url":"https://bugzilla.suse.com/1284064","tags":["report"]},{"url":"https://bugzilla.suse.com/1284150","tags":["report"]},{"url":"https://bugzilla.suse.com/1284243","tags":["report"]},{"url":"https://bugzilla.suse.com/1284292","tags":["report"]},{"url":"https://bugzilla.suse.com/1284293","tags":["report"]},{"url":"https://bugzilla.suse.com/1284296","tags":["report"]},{"url":"https://bugzilla.suse.com/1284298","tags":["report"]},{"url":"https://bugzilla.suse.com/1284302","tags":["report"]},{"url":"https://bugzilla.suse.com/1284304","tags":["report"]},{"url":"https://bugzilla.suse.com/1284305","tags":["report"]},{"url":"https://bugzilla.suse.com/1284310","tags":["report"]},{"url":"https://bugzilla.suse.com/1284312","tags":["report"]},{"url":"https://bugzilla.suse.com/1284313","tags":["report"]},{"url":"https://bugzilla.suse.com/1284346","tags":["report"]},{"url":"https://bugzilla.suse.com/1284349","tags":["report"]},{"url":"https://bugzilla.suse.com/1284350","tags":["report"]},{"url":"https://bugzilla.suse.com/1284358","tags":["report"]},{"url":"https://bugzilla.suse.com/1284360","tags":["report"]},{"url":"https://bugzilla.suse.com/1284363","tags":["report"]},{"url":"https://bugzilla.suse.com/1284419","tags":["report"]},{"url":"https://bugzilla.suse.com/1284422","tags":["report"]},{"url":"https://bugzilla.suse.com/1284446","tags":["report"]},{"url":"https://bugzilla.suse.com/1284455","tags":["report"]},{"url":"https://bugzilla.suse.com/1284477","tags":["report"]},{"url":"https://bugzilla.suse.com/1284483","tags":["report"]},{"url":"https://bugzilla.suse.com/1284484","tags":["report"]},{"url":"https://bugzilla.suse.com/1284485","tags":["report"]},{"url":"https://bugzilla.suse.com/1284498","tags":["report"]},{"url":"https://bugzilla.suse.com/1284503","tags":["report"]},{"url":"https://bugzilla.suse.com/1284504","tags":["report"]},{"url":"https://bugzilla.suse.com/1284505","tags":["report"]},{"url":"https://bugzilla.suse.com/1284509","tags":["report"]},{"url":"https://bugzilla.suse.com/1284512","tags":["report"]},{"url":"https://bugzilla.suse.com/1284513","tags":["report"]},{"url":"https://bugzilla.suse.com/1284514","tags":["report"]},{"url":"https://bugzilla.suse.com/1284515","tags":["report"]},{"url":"https://bugzilla.suse.com/1284517","tags":["report"]},{"url":"https://bugzilla.suse.com/1284537","tags":["report"]},{"url":"https://bugzilla.suse.com/1284540","tags":["report"]},{"url":"https://bugzilla.suse.com/1284541","tags":["report"]},{"url":"https://bugzilla.suse.com/1284542","tags":["report"]},{"url":"https://bugzilla.suse.com/1284543","tags":["report"]},{"url":"https://bugzilla.suse.com/1284544","tags":["report"]},{"url":"https://bugzilla.suse.com/1284545","tags":["report"]},{"url":"https://bugzilla.suse.com/1284553","tags":["report"]},{"url":"https://bugzilla.suse.com/1284554","tags":["report"]},{"url":"https://bugzilla.suse.com/1284555","tags":["report"]},{"url":"https://bugzilla.suse.com/1284557","tags":["report"]},{"url":"https://bugzilla.suse.com/1284563","tags":["report"]},{"url":"https://bugzilla.suse.com/1284568","tags":["report"]},{"url":"https://bugzilla.suse.com/1284577","tags":["report"]},{"url":"https://bugzilla.suse.com/1284578","tags":["report"]},{"url":"https://bugzilla.suse.com/1284579","tags":["report"]},{"url":"https://bugzilla.suse.com/1284584","tags":["report"]},{"url":"https://bugzilla.suse.com/1284595","tags":["report"]},{"url":"https://bugzilla.suse.com/1284601","tags":["report"]},{"url":"https://bugzilla.suse.com/1284602","tags":["report"]},{"url":"https://bugzilla.suse.com/1284605","tags":["report"]},{"url":"https://bugzilla.suse.com/1284609","tags":["report"]},{"url":"https://bugzilla.suse.com/1284615","tags":["report"]},{"url":"https://bugzilla.suse.com/1284616","tags":["report"]},{"url":"https://bugzilla.suse.com/1284620","tags":["report"]},{"url":"https://bugzilla.suse.com/1284621","tags":["report"]},{"url":"https://bugzilla.suse.com/1284623","tags":["report"]},{"url":"https://bugzilla.suse.com/1284626","tags":["report"]},{"url":"https://bugzilla.suse.com/1284630","tags":["report"]},{"url":"https://bugzilla.suse.com/1284631","tags":["report"]},{"url":"https://bugzilla.suse.com/1284635","tags":["report"]},{"url":"https://bugzilla.suse.com/1284636","tags":["report"]},{"url":"https://bugzilla.suse.com/1284637","tags":["report"]},{"url":"https://bugzilla.suse.com/1284638","tags":["report"]},{"url":"https://bugzilla.suse.com/1284640","tags":["report"]},{"url":"https://bugzilla.suse.com/1284641","tags":["report"]},{"url":"https://bugzilla.suse.com/1284643","tags":["report"]},{"url":"https://bugzilla.suse.com/1284644","tags":["report"]},{"url":"https://bugzilla.suse.com/1284652","tags":["report"]},{"url":"https://bugzilla.suse.com/1284704","tags":["report"]},{"url":"https://bugzilla.suse.com/1284706","tags":["report"]},{"url":"https://bugzilla.suse.com/1284707","tags":["report"]},{"url":"https://bugzilla.suse.com/1284709","tags":["report"]},{"url":"https://bugzilla.suse.com/1284721","tags":["report"]},{"url":"https://bugzilla.suse.com/1284723","tags":["report"]},{"url":"https://bugzilla.suse.com/1284740","tags":["report"]},{"url":"https://bugzilla.suse.com/1285553","tags":["report"]},{"url":"https://bugzilla.suse.com/1285556","tags":["report"]},{"url":"https://bugzilla.suse.com/1285560","tags":["report"]},{"url":"https://bugzilla.suse.com/1285561","tags":["report"]},{"url":"https://bugzilla.suse.com/1285562","tags":["report"]},{"url":"https://bugzilla.suse.com/1285564","tags":["report"]},{"url":"https://bugzilla.suse.com/1285569","tags":["report"]},{"url":"https://bugzilla.suse.com/1285587","tags":["report"]},{"url":"https://bugzilla.suse.com/1285624","tags":["report"]},{"url":"https://bugzilla.suse.com/1285648","tags":["report"]},{"url":"https://bugzilla.suse.com/1285668","tags":["report"]},{"url":"https://bugzilla.suse.com/1285685","tags":["report"]},{"url":"https://bugzilla.suse.com/1285914","tags":["report"]},{"url":"https://bugzilla.suse.com/1285957","tags":["report"]},{"url":"https://bugzilla.suse.com/1285971","tags":["report"]},{"url":"https://bugzilla.suse.com/1285976","tags":["report"]},{"url":"https://bugzilla.suse.com/1285978","tags":["report"]},{"url":"https://bugzilla.suse.com/1285979","tags":["report"]},{"url":"https://bugzilla.suse.com/1285985","tags":["report"]},{"url":"https://bugzilla.suse.com/1285988","tags":["report"]},{"url":"https://bugzilla.suse.com/1285998","tags":["report"]},{"url":"https://bugzilla.suse.com/1286009","tags":["report"]},{"url":"https://bugzilla.suse.com/1286012","tags":["report"]},{"url":"https://bugzilla.suse.com/1286013","tags":["report"]},{"url":"https://bugzilla.suse.com/1286019","tags":["report"]},{"url":"https://bugzilla.suse.com/1286036","tags":["report"]},{"url":"https://bugzilla.suse.com/1286037","tags":["report"]},{"url":"https://bugzilla.suse.com/1286112","tags":["report"]},{"url":"https://bugzilla.suse.com/1286114","tags":["report"]},{"url":"https://bugzilla.suse.com/1286119","tags":["report"]},{"url":"https://bugzilla.suse.com/1286121","tags":["report"]},{"url":"https://bugzilla.suse.com/1286123","tags":["report"]},{"url":"https://bugzilla.suse.com/1286158","tags":["report"]},{"url":"https://bugzilla.suse.com/1286160","tags":["report"]},{"url":"https://bugzilla.suse.com/1286161","tags":["report"]},{"url":"https://bugzilla.suse.com/1286171","tags":["report"]},{"url":"https://bugzilla.suse.com/1286190","tags":["report"]},{"url":"https://bugzilla.suse.com/1286204","tags":["report"]},{"url":"https://bugzilla.suse.com/1286205","tags":["report"]},{"url":"https://bugzilla.suse.com/1286207","tags":["report"]},{"url":"https://bugzilla.suse.com/1286215","tags":["report"]},{"url":"https://bugzilla.suse.com/1286217","tags":["report"]},{"url":"https://bugzilla.suse.com/1286224","tags":["report"]},{"url":"https://bugzilla.suse.com/1286233","tags":["report"]},{"url":"https://bugzilla.suse.com/1286234","tags":["report"]},{"url":"https://bugzilla.suse.com/1286237","tags":["report"]},{"url":"https://bugzilla.suse.com/1286240","tags":["report"]},{"url":"https://bugzilla.suse.com/1286257","tags":["report"]},{"url":"https://bugzilla.suse.com/1286259","tags":["report"]},{"url":"https://bugzilla.suse.com/1286267","tags":["report"]},{"url":"https://bugzilla.suse.com/1286342","tags":["report"]},{"url":"https://bugzilla.suse.com/1286346","tags":["report"]},{"url":"https://bugzilla.suse.com/1286390","tags":["report"]},{"url":"https://bugzilla.suse.com/1286391","tags":["report"]},{"url":"https://bugzilla.suse.com/1286394","tags":["report"]},{"url":"https://bugzilla.suse.com/1286417","tags":["report"]},{"url":"https://bugzilla.suse.com/1286421","tags":["report"]},{"url":"https://bugzilla.suse.com/1286431","tags":["report"]},{"url":"https://bugzilla.suse.com/1286432","tags":["report"]},{"url":"https://bugzilla.suse.com/1286443","tags":["report"]},{"url":"https://bugzilla.suse.com/1286444","tags":["report"]},{"url":"https://bugzilla.suse.com/1286453","tags":["report"]},{"url":"https://bugzilla.suse.com/1286455","tags":["report"]},{"url":"https://bugzilla.suse.com/1286457","tags":["report"]},{"url":"https://bugzilla.suse.com/1286469","tags":["report"]},{"url":"https://bugzilla.suse.com/1286514","tags":["report"]},{"url":"https://bugzilla.suse.com/1286529","tags":["report"]},{"url":"https://bugzilla.suse.com/1286625","tags":["report"]},{"url":"https://bugzilla.suse.com/1286654","tags":["report"]},{"url":"https://bugzilla.suse.com/1286669","tags":["report"]},{"url":"https://bugzilla.suse.com/1286671","tags":["report"]},{"url":"https://bugzilla.suse.com/1286672","tags":["report"]},{"url":"https://bugzilla.suse.com/1286689","tags":["report"]},{"url":"https://bugzilla.suse.com/1286692","tags":["report"]},{"url":"https://bugzilla.suse.com/1286704","tags":["report"]},{"url":"https://bugzilla.suse.com/1286707","tags":["report"]},{"url":"https://bugzilla.suse.com/1286713","tags":["report"]},{"url":"https://bugzilla.suse.com/1286720","tags":["report"]},{"url":"https://bugzilla.suse.com/1286735","tags":["report"]},{"url":"https://bugzilla.suse.com/1286741","tags":["report"]},{"url":"https://bugzilla.suse.com/1286742","tags":["report"]},{"url":"https://bugzilla.suse.com/1286756","tags":["report"]},{"url":"https://bugzilla.suse.com/1286757","tags":["report"]},{"url":"https://bugzilla.suse.com/1286772","tags":["report"]},{"url":"https://bugzilla.suse.com/1286775","tags":["report"]},{"url":"https://bugzilla.suse.com/1286778","tags":["report"]},{"url":"https://bugzilla.suse.com/1286782","tags":["report"]},{"url":"https://bugzilla.suse.com/1286785","tags":["report"]},{"url":"https://bugzilla.suse.com/1286787","tags":["report"]},{"url":"https://bugzilla.suse.com/1286819","tags":["report"]},{"url":"https://bugzilla.suse.com/1286820","tags":["report"]},{"url":"https://bugzilla.suse.com/1286821","tags":["report"]},{"url":"https://bugzilla.suse.com/1286822","tags":["report"]},{"url":"https://bugzilla.suse.com/1286823","tags":["report"]},{"url":"https://bugzilla.suse.com/1286824","tags":["report"]},{"url":"https://bugzilla.suse.com/1286841","tags":["report"]},{"url":"https://bugzilla.suse.com/1286843","tags":["report"]},{"url":"https://bugzilla.suse.com/1286850","tags":["report"]},{"url":"https://bugzilla.suse.com/1286856","tags":["report"]},{"url":"https://bugzilla.suse.com/1286857","tags":["report"]},{"url":"https://bugzilla.suse.com/1286859","tags":["report"]},{"url":"https://bugzilla.suse.com/1286860","tags":["report"]},{"url":"https://bugzilla.suse.com/1286862","tags":["report"]},{"url":"https://bugzilla.suse.com/1286863","tags":["report"]},{"url":"https://bugzilla.suse.com/1286864","tags":["report"]},{"url":"https://bugzilla.suse.com/1286865","tags":["report"]},{"url":"https://bugzilla.suse.com/1286867","tags":["report"]},{"url":"https://bugzilla.suse.com/1286872","tags":["report"]},{"url":"https://bugzilla.suse.com/1286874","tags":["report"]},{"url":"https://bugzilla.suse.com/1286877","tags":["report"]},{"url":"https://bugzilla.suse.com/1286890","tags":["report"]},{"url":"https://bugzilla.suse.com/1286913","tags":["report"]},{"url":"https://bugzilla.suse.com/1286918","tags":["report"]},{"url":"https://bugzilla.suse.com/1286919","tags":["report"]},{"url":"https://bugzilla.suse.com/1287173","tags":["report"]},{"url":"https://bugzilla.suse.com/1287191","tags":["report"]},{"url":"https://bugzilla.suse.com/1287256","tags":["report"]},{"url":"https://bugzilla.suse.com/1287268","tags":["report"]},{"url":"https://bugzilla.suse.com/1287342","tags":["report"]},{"url":"https://bugzilla.suse.com/1287346","tags":["report"]},{"url":"https://bugzilla.suse.com/1287347","tags":["report"]},{"url":"https://bugzilla.suse.com/1287351","tags":["report"]},{"url":"https://bugzilla.suse.com/1287364","tags":["report"]},{"url":"https://bugzilla.suse.com/1287592","tags":["report"]},{"url":"https://bugzilla.suse.com/1287594","tags":["report"]},{"url":"https://bugzilla.suse.com/1287597","tags":["report"]},{"url":"https://bugzilla.suse.com/1287648","tags":["report"]},{"url":"https://bugzilla.suse.com/1287649","tags":["report"]},{"url":"https://bugzilla.suse.com/1287655","tags":["report"]},{"url":"https://bugzilla.suse.com/1287658","tags":["report"]},{"url":"https://bugzilla.suse.com/1287674","tags":["report"]},{"url":"https://bugzilla.suse.com/1287680","tags":["report"]},{"url":"https://bugzilla.suse.com/1287682","tags":["report"]},{"url":"https://bugzilla.suse.com/1287714","tags":["report"]},{"url":"https://bugzilla.suse.com/1287719","tags":["report"]},{"url":"https://bugzilla.suse.com/1287720","tags":["report"]},{"url":"https://bugzilla.suse.com/1287737","tags":["report"]},{"url":"https://bugzilla.suse.com/1287749","tags":["report"]},{"url":"https://bugzilla.suse.com/1287757","tags":["report"]},{"url":"https://bugzilla.suse.com/1287765","tags":["report"]},{"url":"https://bugzilla.suse.com/1287773","tags":["report"]},{"url":"https://bugzilla.suse.com/1287774","tags":["report"]},{"url":"https://bugzilla.suse.com/1287966","tags":["report"]},{"url":"https://bugzilla.suse.com/1287984","tags":["report"]},{"url":"https://bugzilla.suse.com/1287985","tags":["report"]},{"url":"https://bugzilla.suse.com/1287995","tags":["report"]},{"url":"https://bugzilla.suse.com/1288001","tags":["report"]},{"url":"https://bugzilla.suse.com/1288002","tags":["report"]},{"url":"https://bugzilla.suse.com/1288005","tags":["report"]},{"url":"https://bugzilla.suse.com/1288007","tags":["report"]},{"url":"https://bugzilla.suse.com/1288014","tags":["report"]},{"url":"https://bugzilla.suse.com/1288061","tags":["report"]},{"url":"https://bugzilla.suse.com/1288088","tags":["report"]},{"url":"https://bugzilla.suse.com/1288125","tags":["report"]},{"url":"https://bugzilla.suse.com/1288127","tags":["report"]},{"url":"https://bugzilla.suse.com/1288246","tags":["report"]},{"url":"https://bugzilla.suse.com/1288248","tags":["report"]},{"url":"https://bugzilla.suse.com/1288521","tags":["report"]},{"url":"https://bugzilla.suse.com/1288522","tags":["report"]},{"url":"https://bugzilla.suse.com/1288527","tags":["report"]},{"url":"https://bugzilla.suse.com/1288584","tags":["report"]},{"url":"https://bugzilla.suse.com/1288592","tags":["report"]},{"url":"https://bugzilla.suse.com/1288627","tags":["report"]},{"url":"https://bugzilla.suse.com/1288629","tags":["report"]},{"url":"https://bugzilla.suse.com/1288668","tags":["report"]},{"url":"https://bugzilla.suse.com/1288694","tags":["report"]},{"url":"https://bugzilla.suse.com/1288752","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49974","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50241","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-53073","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-38237","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-38576","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-68219","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-71073","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-100071","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-100078","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-100079","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-23059","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-23112","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31708","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31709","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43350","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45944","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46091","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46135","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46139","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46155","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52989","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53059","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53090","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53179","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63809","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64240","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64324","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64370","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64380","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64413","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64434","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64435","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64441","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64507","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64508","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64525","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64534","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64535","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68186","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68388","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68447","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68466","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68467","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68469","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68475","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68478","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68479","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72004","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72005","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72010","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72029","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72047","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72048","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72049","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72059","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72065","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72074","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72075","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72076","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72077","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72078","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72079","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72105","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72110","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72111","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72120","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72122","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72126","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72127","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72133","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72140","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72142","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72148","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72149","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72152","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72155","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72156","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72158","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72165","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72167","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72171","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72182","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72214","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72216","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72226","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72228","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72230","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72231","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72233","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72234","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72240","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72241","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72245","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72250","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72253","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72257","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72261","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72264","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72265","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72266","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72267","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72268","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72269","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72270","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72271","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72272","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72273","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72274","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72275","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72276","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72284","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72300","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72302","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72304","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72314","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72318","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72334","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72335","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72336","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72391","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72396","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72400","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72405","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72416","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72424","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72428","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72441","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72443","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72464","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72465","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72476","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72479","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72480","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72481","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72483","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72484","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72486","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72489","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74263","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74265","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74271","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74276","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74278","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74279","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74280","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74287","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74291","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74292","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74293","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74294","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74295","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74300","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74320","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74329","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74331","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74339","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74340","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74341","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74368","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74380","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74381","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74387","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74399","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74402","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74404","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74408","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74410","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74411","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74416","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74417","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74424","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74439","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74445","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74446","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74448","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74455","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74456","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74457","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74458","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74459","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74460","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74461","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74463","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74497","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74498","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74499","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74501","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74502","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74505","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74507","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74508","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74519","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74531","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74532","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74546","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74547","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74549","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74552","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74565","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74574","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74585","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74604","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74613","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74620","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74624","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74635","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74641","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74642","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74646","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74647","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74648","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74649","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74650","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74651","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74654","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74655","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74673","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74675","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74676","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74677","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74678","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74679","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74680","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74682","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74683","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74684","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74691","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74715","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74720","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74746","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74748","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74753","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80539","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80541","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80559","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80565","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80566","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80567","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80568","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80569","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80570","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80572","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80573","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80574","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80578","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80593","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80594","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80595","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80597","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80599","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80600","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80601","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80602","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80605","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80609","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80618","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80622","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80635","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80637","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80649","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80652","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80659","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80660","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80677","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80678","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80680","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80684","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80692","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80698","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80700","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80702","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80703","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80704","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80706","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80707","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80709","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80717","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80728","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80743","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80752","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80754","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80755","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80757","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80762","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80763","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80764","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80765","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80767","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80768","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80772","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80781","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80783","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80794","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80795","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80797","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80798","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80800","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80801","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80802","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80803","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80808","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80809","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80812","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80819","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80823","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80824","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80825","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80826","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80827","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80828","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80829","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80830","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80831","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80832","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80855","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80870","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80879","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80881","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80883","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80886","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80887","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80888","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80902","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80907","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80908","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80910","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80911","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80914","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80918","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80923","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80930","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80931","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80937","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80938","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80941","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80944","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80949","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80951","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80952","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80964","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80965","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80966","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80967","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80968","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80969","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80971","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80972","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80973","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80978","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80988","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80989","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80990","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-81005","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-81007","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-81008","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-81017","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89438","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89440","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89442","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89443","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89444","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89461","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89463","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89464","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89465","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89466","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89468","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89469","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89470","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89471","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89473","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89474","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89475","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89491","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89494","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89495","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89504","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89512","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89524","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89537","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89553","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89554","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89559","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89560","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89562","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89583","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89587","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89595","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89597","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89598","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89599","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89608","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89621","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89622","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89623","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89626","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89627","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89628","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89637","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89642","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89649","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89654","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89655","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89656","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89657","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89669","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89684","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89706","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89724","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89725","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89726","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89729","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89730","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89732","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89733","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89736","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89739","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89741","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89742","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89744","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89751","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89761","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89774","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89786","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89787","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89800","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89801","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89802","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89816","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89817","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89818","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89821","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89822","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89823","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89824","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89842","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89843","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89844","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89845","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89846","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89847","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89848","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89849","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89850","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89852","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89853","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89854","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89855","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89856","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89857","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89858","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89859","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89860","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89861","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89862","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89863","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89864","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89865","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89870","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89871","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89872","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89876","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89877","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89878","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89879","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89880","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89881","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89883","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89887","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89888","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89890","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89891","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89892","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89893","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89894","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89895","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89896","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89897","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89901","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89927","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89932","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89933","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89936","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89937","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89938","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89939","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89945","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89946","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89948","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89949","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89951","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89952","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89953","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89979","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89980","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89982","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89993","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89999","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90000","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90017","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90018","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90019","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90020","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90021","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90025","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90030","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90031","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90032","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90033","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90034","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90035","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90042","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90044","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90045","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90055","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90057","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90068","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90070","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90081","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90082","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90087","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90090","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90092","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90093","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90103","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90107","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90114","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90126","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90128","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90138","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90148","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90194","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90196","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90207","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90214","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90220","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90221","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90222","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90223","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90224","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90225","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90226","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90227","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90230","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90245","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90251","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90253","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90254","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90257","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90281","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90284","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90285","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90286","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90287","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90297","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90298","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90316","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90319","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90334","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90335","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90336","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90345","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90348","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90352","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90353","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90354","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90357","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90360","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90362","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90366","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90370","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90372","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90373","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90374","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90378","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90382","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90385","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90386","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90393","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90394","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90395","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90398","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90399","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90403","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90404","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90407","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90435","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92476","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92482","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92496","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92497","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92498","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92504","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92506","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92513","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92521","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92522","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93040","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93041","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93046","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93048","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93049","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93052","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93053","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93054","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93056","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93061","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93062","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93063","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93064","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93065","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93067","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93084","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93085","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93086","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93089","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93092","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93114","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93115","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93118","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93120","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93122","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93126","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93130","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93131","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93136","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93141","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93156","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93158","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93159","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93161","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93162","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93165","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93168","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93170","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93177","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93178","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93179","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93183","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93184","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93185","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93188","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93189","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93190","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93206","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93210","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93213","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93214","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93228","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93231","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93234","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93236","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93242","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93250","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93262","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93271","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93274","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93279","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93281","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93283","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93287","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93783","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93784","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93788","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93789","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93790","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93791","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93792","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93793","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93795","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93797","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93798","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93799","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93802","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93803","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93805","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93807","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93808","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93809","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93814","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93817","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93819","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93823","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93825","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93828","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93830","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97407","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97408","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97418","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97420","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97425","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97427","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97429","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97430","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97442","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97444","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97445","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97446","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97447","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97448","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97449","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97450","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97451","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97452","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97453","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97454","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97455","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97456","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97475","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97481","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97482","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97483","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97484","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97492","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97495","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97497","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97500","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97502","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97507","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97508","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97509","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97510","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97512","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97516","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97517","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97518","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97527","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97528","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97529","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97530","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97531","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97532","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97535","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97536","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97537","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97539","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97540","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97541","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97554","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97556","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97558","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97559","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97561","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97562","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97563","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97565","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97575","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97576","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97581","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97582","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97596","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97599","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97600","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97601","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97603","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97604","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97612","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97613","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97899","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97900","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97907","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97908","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97909","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97910","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97930","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97948","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97954","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97955","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97963","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97964","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97965","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97969","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97970","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97977","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97991","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97993","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98006","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98014","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98022","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98023","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98025","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98031","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98041","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98044","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98055","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98066","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98068","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98069","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98070","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98071","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98072","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98074","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98078","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98085","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98092","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98095","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98108","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98111","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98116","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98121","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98122","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98124","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98125","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98126","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98127","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98154","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98155","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98158","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98159","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98160","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98167","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98169","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98170","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98171","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98175","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98181","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98185","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98186","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98187","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98188","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98189","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98190","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98191","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98195","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98196","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98197","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98201","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98202","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98203","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98204","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98205","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98206","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98207","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98208","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98209","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98210","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98212","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98213","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98221","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98222","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98227","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98236","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98237","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98238","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98246","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98247","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98249","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98257","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98258","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98261","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98263","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98264","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98270","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98282","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98283","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98290","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98292","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98293","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98295","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98298","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98306","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98307","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98308","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98309","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98311","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98312","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98314","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98316","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98319","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98325","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98326","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98328","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98331","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98332","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98334","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98336","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98337","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98339","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98340","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98342","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98343","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98344","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98345","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98348","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98349","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98351","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98353","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98363","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98368","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98374","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98386","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98404","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98406","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98407","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98409","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98410","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98416","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98421","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98422","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98426","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98428","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98432","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98455","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98457","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98460","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98461","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98471","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98481","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98482","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98499","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98501","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98502","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98508","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98509","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98511","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98513","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98514","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98515","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98516","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98519","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98521","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98527","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98529","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98575","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98576","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98577","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98578","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98579","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98580","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98581","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98582","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98583","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98597","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98600","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98602","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98605","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98606","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98607","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98608","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98609","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98612","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98623","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98631","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98632","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98640","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98656","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98657","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98660","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98662","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98663","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98664","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98666","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98668","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98669","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98670","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98671","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98679","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98687","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98694","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98696","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98697","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98698","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98699","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98700","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98701","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98703","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98705","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98706","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98710","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98711","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98717","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98718","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98721","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98732","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98736","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98737","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98739","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98741","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98742","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98744","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98748","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98754","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98755","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98756","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98757","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98758","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98760","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98761","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98763","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98764","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98765","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98766","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98768","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98769","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98771","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98772","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98773","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98779","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98780","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98781","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98782","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98783","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98784","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98809","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98819","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98822","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98823","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98825","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98830","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98835","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98836","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98837","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98838","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98847","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98848","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98863","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98871","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98876","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98884","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98886","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98889","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98891","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98892","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98893","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98896","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98898","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98910","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98912","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98915","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98933","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98935","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98936","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98940","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98956","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98970","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98971","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-99005","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-99006","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-99007","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-99008","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-99010","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-99015","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-99022","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-99034","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-99035","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-99038","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-99039","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-99049","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-99061","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-99089","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-99090","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-99091","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-99095","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-99100","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-99131","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-99150","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202624619-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20265091-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1267882","tags":["report"]},{"url":"https://bugzilla.suse.com/1269182","tags":["report"]},{"url":"https://bugzilla.suse.com/1274257","tags":["report"]},{"url":"https://bugzilla.suse.com/1275521","tags":["report"]},{"url":"https://bugzilla.suse.com/1275955","tags":["report"]},{"url":"https://bugzilla.suse.com/1276245","tags":["report"]},{"url":"https://bugzilla.suse.com/1276275","tags":["report"]},{"url":"https://bugzilla.suse.com/1276440","tags":["report"]},{"url":"https://bugzilla.suse.com/1276443","tags":["report"]},{"url":"https://bugzilla.suse.com/1276774","tags":["report"]},{"url":"https://bugzilla.suse.com/1277079","tags":["report"]},{"url":"https://bugzilla.suse.com/1277084","tags":["report"]},{"url":"https://bugzilla.suse.com/1277130","tags":["report"]},{"url":"https://bugzilla.suse.com/1277135","tags":["report"]},{"url":"https://bugzilla.suse.com/1277142","tags":["report"]},{"url":"https://bugzilla.suse.com/1277157","tags":["report"]},{"url":"https://bugzilla.suse.com/1277168","tags":["report"]},{"url":"https://bugzilla.suse.com/1277182","tags":["report"]},{"url":"https://bugzilla.suse.com/1277200","tags":["report"]},{"url":"https://bugzilla.suse.com/1277333","tags":["report"]},{"url":"https://bugzilla.suse.com/1277451","tags":["report"]},{"url":"https://bugzilla.suse.com/1277675","tags":["report"]},{"url":"https://bugzilla.suse.com/1277732","tags":["report"]},{"url":"https://bugzilla.suse.com/1277785","tags":["report"]},{"url":"https://bugzilla.suse.com/1277819","tags":["report"]},{"url":"https://bugzilla.suse.com/1278074","tags":["report"]},{"url":"https://bugzilla.suse.com/1278081","tags":["report"]},{"url":"https://bugzilla.suse.com/1278117","tags":["report"]},{"url":"https://bugzilla.suse.com/1278172","tags":["report"]},{"url":"https://bugzilla.suse.com/1278198","tags":["report"]},{"url":"https://bugzilla.suse.com/1278213","tags":["report"]},{"url":"https://bugzilla.suse.com/1278217","tags":["report"]},{"url":"https://bugzilla.suse.com/1278350","tags":["report"]},{"url":"https://bugzilla.suse.com/1278379","tags":["report"]},{"url":"https://bugzilla.suse.com/1278405","tags":["report"]},{"url":"https://bugzilla.suse.com/1279420","tags":["report"]},{"url":"https://bugzilla.suse.com/1279460","tags":["report"]},{"url":"https://bugzilla.suse.com/1279700","tags":["report"]},{"url":"https://bugzilla.suse.com/1279823","tags":["report"]},{"url":"https://bugzilla.suse.com/1280312","tags":["report"]},{"url":"https://bugzilla.suse.com/1280330","tags":["report"]},{"url":"https://bugzilla.suse.com/1280331","tags":["report"]},{"url":"https://bugzilla.suse.com/1280332","tags":["report"]},{"url":"https://bugzilla.suse.com/1280346","tags":["report"]},{"url":"https://bugzilla.suse.com/1280988","tags":["report"]},{"url":"https://bugzilla.suse.com/1281006","tags":["report"]},{"url":"https://bugzilla.suse.com/1281080","tags":["report"]},{"url":"https://bugzilla.suse.com/1281145","tags":["report"]},{"url":"https://bugzilla.suse.com/1281256","tags":["report"]},{"url":"https://bugzilla.suse.com/1281274","tags":["report"]},{"url":"https://bugzilla.suse.com/1281342","tags":["report"]},{"url":"https://bugzilla.suse.com/1281528","tags":["report"]},{"url":"https://bugzilla.suse.com/1281532","tags":["report"]},{"url":"https://bugzilla.suse.com/1281536","tags":["report"]},{"url":"https://bugzilla.suse.com/1281552","tags":["report"]},{"url":"https://bugzilla.suse.com/1281555","tags":["report"]},{"url":"https://bugzilla.suse.com/1281588","tags":["report"]},{"url":"https://bugzilla.suse.com/1281883","tags":["report"]},{"url":"https://bugzilla.suse.com/1282165","tags":["report"]},{"url":"https://bugzilla.suse.com/1282169","tags":["report"]},{"url":"https://bugzilla.suse.com/1282735","tags":["report"]},{"url":"https://bugzilla.suse.com/1282741","tags":["report"]},{"url":"https://bugzilla.suse.com/1282886","tags":["report"]},{"url":"https://bugzilla.suse.com/1282958","tags":["report"]},{"url":"https://bugzilla.suse.com/1282971","tags":["report"]},{"url":"https://bugzilla.suse.com/1282993","tags":["report"]},{"url":"https://bugzilla.suse.com/1283038","tags":["report"]},{"url":"https://bugzilla.suse.com/1283173","tags":["report"]},{"url":"https://bugzilla.suse.com/1283228","tags":["report"]},{"url":"https://bugzilla.suse.com/1283233","tags":["report"]},{"url":"https://bugzilla.suse.com/1283504","tags":["report"]},{"url":"https://bugzilla.suse.com/1283508","tags":["report"]},{"url":"https://bugzilla.suse.com/1283513","tags":["report"]},{"url":"https://bugzilla.suse.com/1283737","tags":["report"]},{"url":"https://bugzilla.suse.com/1283780","tags":["report"]},{"url":"https://bugzilla.suse.com/1283781","tags":["report"]},{"url":"https://bugzilla.suse.com/1283785","tags":["report"]},{"url":"https://bugzilla.suse.com/1283887","tags":["report"]},{"url":"https://bugzilla.suse.com/1284303","tags":["report"]},{"url":"https://bugzilla.suse.com/1284306","tags":["report"]},{"url":"https://bugzilla.suse.com/1284561","tags":["report"]},{"url":"https://bugzilla.suse.com/1284600","tags":["report"]},{"url":"https://bugzilla.suse.com/1284632","tags":["report"]},{"url":"https://bugzilla.suse.com/1284642","tags":["report"]},{"url":"https://bugzilla.suse.com/1285594","tags":["report"]},{"url":"https://bugzilla.suse.com/1285645","tags":["report"]},{"url":"https://bugzilla.suse.com/1285647","tags":["report"]},{"url":"https://bugzilla.suse.com/1286001","tags":["report"]},{"url":"https://bugzilla.suse.com/1286133","tags":["report"]},{"url":"https://bugzilla.suse.com/1286186","tags":["report"]},{"url":"https://bugzilla.suse.com/1286208","tags":["report"]},{"url":"https://bugzilla.suse.com/1286458","tags":["report"]},{"url":"https://bugzilla.suse.com/1286665","tags":["report"]},{"url":"https://bugzilla.suse.com/1286667","tags":["report"]},{"url":"https://bugzilla.suse.com/1286670","tags":["report"]},{"url":"https://bugzilla.suse.com/1286673","tags":["report"]},{"url":"https://bugzilla.suse.com/1286674","tags":["report"]},{"url":"https://bugzilla.suse.com/1286694","tags":["report"]},{"url":"https://bugzilla.suse.com/1286708","tags":["report"]},{"url":"https://bugzilla.suse.com/1286744","tags":["report"]},{"url":"https://bugzilla.suse.com/1286826","tags":["report"]},{"url":"https://bugzilla.suse.com/1286870","tags":["report"]},{"url":"https://bugzilla.suse.com/1287647","tags":["report"]},{"url":"https://bugzilla.suse.com/1287981","tags":["report"]},{"url":"https://bugzilla.suse.com/1288126","tags":["report"]},{"url":"https://bugzilla.suse.com/1288226","tags":["report"]},{"url":"https://bugzilla.suse.com/1288406","tags":["report"]},{"url":"https://bugzilla.suse.com/1288513","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-7356","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52968","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64430","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68436","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68460","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72064","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72073","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72089","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72258","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72259","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72286","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72290","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72327","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72360","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72361","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72362","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72386","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72387","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72452","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74301","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74303","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74353","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74393","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74442","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74447","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74451","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74452","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74472","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74514","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80542","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80576","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80577","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80736","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80749","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80815","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80862","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80891","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80903","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-81011","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-81012","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-81013","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-81014","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89439","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89803","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89807","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89819","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89825","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89874","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89886","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89944","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89983","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90015","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90060","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90119","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90136","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90137","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90344","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93101","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93117","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93209","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93223","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93804","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97428","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97494","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97570","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97577","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97578","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97593","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97605","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97917","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97926","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97976","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98054","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98086","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98107","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98109","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98110","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98218","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98291","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98327","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98329","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98335","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98346","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98392","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98411","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98412","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98456","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98459","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98462","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98512","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98517","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98522","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98566","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98601","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98730","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98731","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98733","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98735","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98743","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98785","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98840","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98949","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-99004","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-99012","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-99013","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-99094","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2024-53073","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-53073","tags":["report"]},{"url":"https://git.kernel.org/linus/8286f8b622990194207df9ab852e0f87c60d35e9","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2024-53073","title":"NFSD: Never decrement pending_async_copies on error","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nNFSD: Never decrement pending_async_copies on error\n\nThe error flow in nfsd4_copy() calls cleanup_async_copy(), which\nalready decrements nn-\u003epending_async_copies.","status":"published","published":"2024-11-19T17:31:38.04Z","modified":"2026-08-05T11:43:27.288Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"cna"}],"updated_at":"2026-11-02T14:34:17.865042Z"}],"euvd":[{"id":"EUVD-2024-50489","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nNFSD: Never decrement pending_async_copies on error\n\nThe error flow in nfsd4_copy() calls cleanup_async_copy(), which\nalready decrements nn-\u003epending_async_copies.","status":"published","published":"2024-11-19T17:31:38Z","modified":"2026-08-05T11:43:27Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T18:02:15.33989Z"}],"ghsa":[{"id":"GHSA-4f73-836m-4mcr","title":"In the Linux kernel, the following vulnerability has been resolved:\n\nNFSD: Never decrement...","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nNFSD: Never decrement pending_async_copies on error\n\nThe error flow in nfsd4_copy() calls cleanup_async_copy(), which\nalready decrements nn-\u003epending_async_copies.","status":"published","published":"2024-11-19T18:31:07Z","modified":"2024-12-14T21:31:34Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T14:59:11.996128Z"}],"nvd":[{"id":"CVE-2024-53073","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nNFSD: Never decrement pending_async_copies on error\n\nThe error flow in nfsd4_copy() calls cleanup_async_copy(), which\nalready decrements nn-\u003epending_async_copies.","status":"published","published":"2024-11-19T18:15:26.95Z","modified":"2026-08-04T11:21:47.88Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:10:37.632431Z"}],"osv":[{"id":"BELL-CVE-2024-53073","title":"CVE-2024-53073 does not affect BellSoft software","status":"withdrawn","published":"2024-11-21T05:59:57.900671Z","modified":"2026-01-26T09:45:42.503062Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:28:20.963569Z"},{"id":"CVE-2024-53073","title":"NFSD: Never decrement pending_async_copies on error","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nNFSD: Never decrement pending_async_copies on error\n\nThe error flow in nfsd4_copy() calls cleanup_async_copy(), which\nalready decrements nn-\u003epending_async_copies.","status":"published","published":"2024-11-19T17:31:38.04Z","modified":"2026-11-12T17:29:32.936561201Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-12T17:57:13.337821Z"},{"id":"DEBIAN-CVE-2024-53073","description":"In the Linux kernel, the following vulnerability has been resolved:  NFSD: Never decrement pending_async_copies on error  The error flow in nfsd4_copy() calls cleanup_async_copy(), which already decrements nn-\u003epending_async_copies.","status":"published","published":"2024-11-19T18:15:26.95Z","modified":"2026-11-02T12:03:07.814301704Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:44.117337Z"},{"id":"OESA-2024-2518","title":"kernel security update","description":"The Linux Kernel, the operating system core itself.\r\n\r\nSecurity Fix(es):\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:\r\n\r\nserial: sc16is7xx: fix invalid FIFO access with special register set\r\n\r\nWhen enabling access to the special register set, Receiver time-out and\nRHR interrupts can happen. In this case, the IRQ handler will try to read\nfrom the FIFO thru the RHR register at address 0x00, but address 0x00 is\nmapped to DLL register, resulting in erroneous FIFO reading.\r\n\r\nCall graph example:\n    sc16is7xx_startup(): entry\n    sc16is7xx_ms_proc(): entry\n    sc16is7xx_set_termios(): entry\n    sc16is7xx_set_baud(): DLH/DLL = $009C --\u0026gt; access special register set\n    sc16is7xx_port_irq() entry            --\u0026gt; IIR is 0x0C\n    sc16is7xx_handle_rx() entry\n    sc16is7xx_fifo_read(): --\u0026gt; unable to access FIFO (RHR) because it is\n                               mapped to DLL (LCR=LCR_CONF_MODE_A)\n    sc16is7xx_set_baud(): exit --\u0026gt; Restore access to general register set\r\n\r\nFix the problem by claiming the efr_lock mutex when accessing the Special\nregister set.(CVE-2024-44950)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:\r\n\r\ndrm/amd/display: Check link_index before accessing dc-\u0026gt;links[]\r\n\r\n[WHY \u0026amp; HOW]\ndc-\u0026gt;links[] has max size of MAX_LINKS and NULL is return when trying to\naccess with out-of-bound index.\r\n\r\nThis fixes 3 OVERRUN and 1 RESOURCE_LEAK issues reported by Coverity.(CVE-2024-46813)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:  ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()  Blamed commit accidentally removed a check for rt-\u0026gt;rt6i_idev being NULL, as spotted by syzbot:  Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN PTI KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] CPU: 1 UID: 0 PID: 10998 Comm: syz-executor Not tainted 6.11.0-rc6-syzkaller-00208-g625403177711 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024  RIP: 0010:rt6_uncached_list_flush_dev net/ipv6/route.c:177 [inline]  RIP: 0010:rt6_disable_ip+0x33e/0x7e0 net/ipv6/route.c:4914 Code: 41 80 3c 04 00 74 0a e8 90 d0 9b f7 48 8b 7c 24 08 48 8b 07 48 89 44 24 10 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df \u0026lt;80\u0026gt; 3c 08 00 74 08 4c 89 f7 e8 64 d0 9b f7 48 8b 44 24 18 49 39 06 RSP: 0018:ffffc900047374e0 EFLAGS: 00010246 RAX: 0000000000000000 RBX: 1ffff1100fdf8f33 RCX: dffffc0000000000 RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff88807efc78c0 RBP: ffffc900047375d0 R08: 0000000000000003 R09: fffff520008e6e8c R10: dffffc0000000000 R11: fffff520008e6e8c R12: 1ffff1100fdf8f18 R13: ffff88807efc7998 R14: 0000000000000000 R15: ffff88807efc7930 FS:  0000000000000000(0000) GS:ffff8880b8900000(0000) knlGS:0000000000000000 CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000020002a80 CR3: 0000000022f62000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace:  \u0026lt;TASK\u0026gt;   addrconf_ifdown+0x15d/0x1bd0 net/ipv6/addrconf.c:3856  addrconf_notify+0x3cb/0x1020   notifier_call_chain+0x19f/0x3e0 kernel/notifier.c:93   call_netdevice_notifiers_extack net/core/dev.c:2032 [inline]   call_netdevice_notifiers net/core/dev.c:2046 [inline]   unregister_netdevice_many_notify+0xd81/0x1c40 net/core/dev.c:11352   unregister_netdevice_many net/core/dev.c:11414 [inline]   unregister_netdevice_queue+0x303/0x370 net/core/dev.c:11289   unregister_netdevice include/linux/netdevice.h:3129 [inline]   __tun_detach+0x6b9/0x1600 drivers/net/tun.c:685   tun_detach drivers/net/tun.c:701 [inline]   tun_chr_close+0x108/0x1b0 drivers/net/tun.c:3510   __fput+0x24a/0x8a0 fs/file_table.c:422   task_work_run+0x24f/0x310 kernel/task_work.c:228   exit_task_work include/linux/task_work.h:40 [inline]   do_exit+0xa2f/0x27f0 kernel/exit.c:882   do_group_exit+0x207/0x2c0 kernel/exit.c:1031   __do_sys_exit_group kernel/exit.c:1042 [inline]   __se_sys_exit_group kernel/exit.c:1040 [inline]   __x64_sys_exit_group+0x3f/0x40 kernel/exit.c:1040   x64_sys_call+0x2634/0x2640 arch/x86/include/generated/asm/syscalls_64.h:232   do_syscall_x64 arch/x86/entry/common.c:52 [inline]   do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83  entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f1acc77def9 Code: Unable to access opcode bytes at 0x7f1acc77decf. RSP: 002b:00007ffeb26fa738 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f1acc77def9 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 RBP: 00007f1acc7dd508 R08: 00007ffeb26f84d7 R09: 0000000000000003 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 R13: 0000000000000003 R14: 00000000ffffffff R15: 00007ffeb26fa8e0  \u0026lt;/TASK\u0026gt; Modules linked in: ---[ end trace 0000000000000000 ]---  RIP: 0010:rt6_uncached_list_flush_dev net/ipv6/route.c:177 [inline]  RIP: 0010:rt6_disable_ip+0x33e/0x7e0 net/ipv6/route.c:4914 Code: 41 80 3c 04 00 74 0a e8 90 d0 9b f7 48 8b 7c 24 08 48 8b 07 48 89 44 24 10 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df \u0026lt;80\u0026gt; 3c 08 00 74 08 4c 89 f7 e8 64 d0 9b f7 48 8b 44 24 18 49 39 06 RSP: 0018:ffffc900047374e0 EFLAGS: 00010246 RAX: 0000000000000000 RBX: 1ffff1100fdf8f33 RCX: dffffc0000000000 RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff88807efc78c0 R ---truncated---(CVE-2024-47707)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:  wifi: rtw88: always wait for both firmware loading attempts  In \u0026apos;rtw_wait_firmware_completion()\u0026apos;, always wait for both (regular and wowlan) firmware loading attempts. Otherwise if \u0026apos;rtw_usb_intf_init()\u0026apos; has failed in \u0026apos;rtw_usb_probe()\u0026apos;, \u0026apos;rtw_usb_disconnect()\u0026apos; may issue \u0026apos;ieee80211_free_hw()\u0026apos; when one of \u0026apos;rtw_load_firmware_cb()\u0026apos; (usually the wowlan one) is still in progress, causing UAF detected by KASAN.(CVE-2024-47718)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:  scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths  When the HBA is undergoing a reset or is handling an errata event, NULL ptr dereference crashes may occur in routines such as lpfc_sli_flush_io_rings(), lpfc_dev_loss_tmo_callbk(), or lpfc_abort_handler().  Add NULL ptr checks before dereferencing hdwq pointers that may have been freed due to operations colliding with a reset or errata event handler.(CVE-2024-49891)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:  wifi: ath11k: fix array out-of-bound access in SoC stats  Currently, the ath11k_soc_dp_stats::hal_reo_error array is defined with a maximum size of DP_REO_DST_RING_MAX. However, the ath11k_dp_process_rx() function access ath11k_soc_dp_stats::hal_reo_error using the REO destination SRNG ring ID, which is incorrect. SRNG ring ID differ from normal ring ID, and this usage leads to out-of-bounds array access. To fix this issue, modify ath11k_dp_process_rx() to use the normal ring ID directly instead of the SRNG ring ID to avoid out-of-bounds array access.  Tested-on: QCN9074 hw1.0 PCI WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1(CVE-2024-49930)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:  wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit  Syzbot points out that skb_trim() has a sanity check on the existing length of the skb, which can be uninitialised in some error paths. The intent here is clearly just to reset the length to zero before resubmitting, so switch to calling __skb_set_length(skb, 0) directly. In addition, __skb_set_length() already contains a call to skb_reset_tail_pointer(), so remove the redundant call.  The syzbot report came from ath9k_hif_usb_reg_in_cb(), but there\u0026apos;s a similar usage of skb_trim() in ath9k_hif_usb_rx_cb(), change both while we\u0026apos;re at it.(CVE-2024-49938)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:  sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start  In sctp_listen_start() invoked by sctp_inet_listen(), it should set the sk_state back to CLOSED if sctp_autobind() fails due to whatever reason.  Otherwise, next time when calling sctp_inet_listen(), if sctp_sk(sk)-\u0026gt;reuse is already set via setsockopt(SCTP_REUSE_PORT), sctp_sk(sk)-\u0026gt;bind_hash will be dereferenced as sk_state is LISTENING, which causes a crash as bind_hash is NULL.    KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]   RIP: 0010:sctp_inet_listen+0x7f0/0xa20 net/sctp/socket.c:8617   Call Trace:    \u0026lt;TASK\u0026gt;    __sys_listen_socket net/socket.c:1883 [inline]    __sys_listen+0x1b7/0x230 net/socket.c:1894    __do_sys_listen net/socket.c:1902 [inline](CVE-2024-49944)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:  net: ethernet: lantiq_etop: fix memory disclosure  When applying padding, the buffer is not zeroed, which results in memory disclosure. The mentioned data is observed on the wire. This patch uses skb_put_padto() to pad Ethernet frames properly. The mentioned function zeroes the expanded buffer.  In case the packet cannot be padded it is silently dropped. Statistics are also not incremented. This driver does not support statistics in the old 32-bit format or the new 64-bit format. These will be added in the future. In its current form, the patch should be easily backported to stable versions.  Ethernet MACs on Amazon-SE and Danube cannot do padding of the packets in hardware, so software padding must be applied.(CVE-2024-49997)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:  net: Fix an unsafe loop on the list  The kernel may crash when deleting a genetlink family if there are still listeners for that family:  Oops: Kernel access of bad area, sig: 11 [#1]   ...   NIP [c000000000c080bc] netlink_update_socket_mc+0x3c/0xc0   LR [c000000000c0f764] __netlink_clear_multicast_users+0x74/0xc0   Call Trace: __netlink_clear_multicast_users+0x74/0xc0 genl_unregister_family+0xd4/0x2d0  Change the unsafe loop on the list to a safe one, because inside the loop there is an element removal from this list.(CVE-2024-50024)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:  net/sched: accept TCA_STAB only for root qdisc  Most qdiscs maintain their backlog using qdisc_pkt_len(skb) on the assumption it is invariant between the enqueue() and dequeue() handlers.  Unfortunately syzbot can crash a host rather easily using a TBF + SFQ combination, with an STAB on SFQ [1]  We can\u0026apos;t support TCA_STAB on arbitrary level, this would require to maintain per-qdisc storage.  [1] [   88.796496] BUG: kernel NULL pointer dereference, address: 0000000000000000 [   88.798611] #PF: supervisor read access in kernel mode [   88.799014] #PF: error_code(0x0000) - not-present page [   88.799506] PGD 0 P4D 0 [   88.799829] Oops: Oops: 0000 [#1] SMP NOPTI [   88.800569] CPU: 14 UID: 0 PID: 2053 Comm: b371744477 Not tainted 6.12.0-rc1-virtme #1117 [   88.801107] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [   88.801779] RIP: 0010:sfq_dequeue (net/sched/sch_sfq.c:272 net/sched/sch_sfq.c:499) sch_sfq [ 88.802544] Code: 0f b7 50 12 48 8d 04 d5 00 00 00 00 48 89 d6 48 29 d0 48 8b 91 c0 01 00 00 48 c1 e0 03 48 01 c2 66 83 7a 1a 00 7e c0 48 8b 3a \u0026lt;4c\u0026gt; 8b 07 4c 89 02 49 89 50 08 48 c7 47 08 00 00 00 00 48 c7 07 00 All code ========    0: 0f b7 50 12           movzwl 0x12(%rax),%edx    4: 48 8d 04 d5 00 00 00  lea    0x0(,%rdx,8),%rax    b: 00    c: 48 89 d6              mov    %rdx,%rsi    f: 48 29 d0              sub    %rdx,%rax   12: 48 8b 91 c0 01 00 00  mov    0x1c0(%rcx),%rdx   19: 48 c1 e0 03           shl    $0x3,%rax   1d: 48 01 c2              add    %rax,%rdx   20: 66 83 7a 1a 00        cmpw   $0x0,0x1a(%rdx)   25: 7e c0                 jle    0xffffffffffffffe7   27: 48 8b 3a              mov    (%rdx),%rdi   2a:* 4c 8b 07              mov    (%rdi),%r8  \u0026lt;-- trapping instruction   2d: 4c 89 02              mov    %r8,(%rdx)   30: 49 89 50 08           mov    %rdx,0x8(%r8)   34: 48 c7 47 08 00 00 00  movq   $0x0,0x8(%rdi)   3b: 00   3c: 48                    rex.W   3d: c7                    .byte 0xc7   3e: 07                    (bad)  ...  Code starting with the faulting instruction ===========================================    0: 4c 8b 07              mov    (%rdi),%r8    3: 4c 89 02              mov    %r8,(%rdx)    6: 49 89 50 08           mov    %rdx,0x8(%r8)    a: 48 c7 47 08 00 00 00  movq   $0x0,0x8(%rdi)   11: 00   12: 48                    rex.W   13: c7                    .byte 0xc7   14: 07                    (bad)  ... [   88.803721] RSP: 0018:ffff9a1f892b7d58 EFLAGS: 00000206 [   88.804032] RAX: 0000000000000000 RBX: ffff9a1f8420c800 RCX: ffff9a1f8420c800 [   88.804560] RDX: ffff9a1f81bc1440 RSI: 0000000000000000 RDI: 0000000000000000 [   88.805056] RBP: ffffffffc04bb0e0 R08: 0000000000000001 R09: 00000000ff7f9a1f [   88.805473] R10: 000000000001001b R11: 0000000000009a1f R12: 0000000000000140 [   88.806194] R13: 0000000000000001 R14: ffff9a1f886df400 R15: ffff9a1f886df4ac [   88.806734] FS:  00007f445601a740(0000) GS:ffff9a2e7fd80000(0000) knlGS:0000000000000000 [   88.807225] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [   88.807672] CR2: 0000000000000000 CR3: 000000050cc46000 CR4: 00000000000006f0 [   88.808165] Call Trace: [   88.808459]  \u0026lt;TASK\u0026gt; [   88.808710] ? __die (arch/x86/kernel/dumpstack.c:421 arch/x86/kernel/dumpstack.c:434) [   88.809261] ? page_fault_oops (arch/x86/mm/fault.c:715) [   88.809561] ? exc_page_fault (./arch/x86/include/asm/irqflags.h:26 ./arch/x86/include/asm/irqflags.h:87 ./arch/x86/include/asm/irqflags.h:147 arch/x86/mm/fault.c:1489 arch/x86/mm/fault.c:1539) [   88.809806] ? asm_exc_page_fault (./arch/x86/include/asm/idtentry.h:623) [   88.810074] ? sfq_dequeue (net/sched/sch_sfq.c:272 net/sched/sch_sfq.c:499) sch_sfq [   88.810411] sfq_reset (net/sched/sch_sfq.c:525) sch_sfq [   88.810671] qdisc_reset (./include/linux/skbuff.h:2135 ./include/linux/skbuff.h:2441 ./include/linux/skbuff.h:3304 ./include/linux/skbuff.h:3310 net/sched/sch_g ---truncated---(CVE-2024-50039)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:  Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change  rfcomm_sk_state_change attempts to use sock_lock so it must never be called with it locked but rfcomm_sock_ioctl always attempt to lock it causing the following trace:  ====================================================== WARNING: possible circular locking dependency detected 6.8.0-syzkaller-08951-gfe46a7dd189e #0 Not tainted ------------------------------------------------------ syz-executor386/5093 is trying to acquire lock: ffff88807c396258 (sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM){+.+.}-{0:0}, at: lock_sock include/net/sock.h:1671 [inline] ffff88807c396258 (sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM){+.+.}-{0:0}, at: rfcomm_sk_state_change+0x5b/0x310 net/bluetooth/rfcomm/sock.c:73  but task is already holding lock: ffff88807badfd28 (\u0026amp;d-\u0026gt;lock){+.+.}-{3:3}, at: __rfcomm_dlc_close+0x226/0x6a0 net/bluetooth/rfcomm/core.c:491(CVE-2024-50044)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:  nvme-pci: fix race condition between reset and nvme_dev_disable()  nvme_dev_disable() modifies the dev-\u0026gt;online_queues field, therefore nvme_pci_update_nr_queues() should avoid racing against it, otherwise we could end up passing invalid values to blk_mq_update_nr_hw_queues().   WARNING: CPU: 39 PID: 61303 at drivers/pci/msi/api.c:347           pci_irq_get_affinity+0x187/0x210  Workqueue: nvme-reset-wq nvme_reset_work [nvme]  RIP: 0010:pci_irq_get_affinity+0x187/0x210  Call Trace:   \u0026lt;TASK\u0026gt;   ? blk_mq_pci_map_queues+0x87/0x3c0   ? pci_irq_get_affinity+0x187/0x210   blk_mq_pci_map_queues+0x87/0x3c0   nvme_pci_map_queues+0x189/0x460 [nvme]   blk_mq_update_nr_hw_queues+0x2a/0x40   nvme_reset_work+0x1be/0x2a0 [nvme]  Fix the bug by locking the shutdown_lock mutex before using dev-\u0026gt;online_queues. Give up if nvme_dev_disable() is running or if it has been executed already.(CVE-2024-50135)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:  Bluetooth: bnep: fix wild-memory-access in proto_unregister  There\u0026apos;s issue as follows:   KASAN: maybe wild-memory-access in range [0xdead...108-0xdead...10f]   CPU: 3 UID: 0 PID: 2805 Comm: rmmod Tainted: G        W   RIP: 0010:proto_unregister+0xee/0x400   Call Trace:    \u0026lt;TASK\u0026gt;    __do_sys_delete_module+0x318/0x580    do_syscall_64+0xc1/0x1d0    entry_SYSCALL_64_after_hwframe+0x77/0x7f  As bnep_init() ignore bnep_sock_init()\u0026apos;s return value, and bnep_sock_init() will cleanup all resource. Then when remove bnep module will call bnep_sock_cleanup() to cleanup sock\u0026apos;s resource. To solve above issue just return bnep_sock_init()\u0026apos;s return value in bnep_exit().(CVE-2024-50148)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:  net: systemport: fix potential memory leak in bcm_sysport_xmit()  The bcm_sysport_xmit() returns NETDEV_TX_OK without freeing skb in case of dma_map_single() fails, add dev_kfree_skb() to fix it.(CVE-2024-50171)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:  pinctrl: ocelot: fix system hang on level based interrupts  The current implementation only calls chained_irq_enter() and chained_irq_exit() if it detects pending interrupts.  ``` for (i = 0; i \u0026lt; info-\u0026gt;stride; i++) {  uregmap_read(info-\u0026gt;map, id_reg + 4 * i, \u0026amp;reg);  if (!reg)   continue;   chained_irq_enter(parent_chip, desc); ```  However, in case of GPIO pin configured in level mode and the parent controller configured in edge mode, GPIO interrupt might be lowered by the hardware. In the result, if the interrupt is short enough, the parent interrupt is still pending while the GPIO interrupt is cleared; chained_irq_enter() never gets called and the system hangs trying to service the parent interrupt.  Moving chained_irq_enter() and chained_irq_exit() outside the for loop ensures that they are called even when GPIO interrupt is lowered by the hardware.  The similar code with chained_irq_enter() / chained_irq_exit() functions wrapping interrupt checking loop may be found in many other drivers: ``` grep -r -A 10 chained_irq_enter drivers/pinctrl ```(CVE-2024-50196)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:  RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages  Avoid memory corruption while setting up Level-2 PBL pages for the non MR resources when num_pages \u0026gt; 256K.  There will be a single PDE page address (contiguous pages in the case of \u0026gt; PAGE_SIZE), but, current logic assumes multiple pages, leading to invalid memory access after 256K PBL entries in the PDE.(CVE-2024-50208)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:  RDMA/bnxt_re: Add a check for memory allocation  __alloc_pbl() can return error when memory allocation fails. Driver is not checking the status on one of the instances.(CVE-2024-50209)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:  wifi: iwlegacy: Clear stale interrupts before resuming device  iwl4965 fails upon resume from hibernation on my laptop. The reason seems to be a stale interrupt which isn\u0026apos;t being cleared out before interrupts are enabled. We end up with a race beween the resume trying to bring things back up, and the restart work (queued form the interrupt handler) trying to bring things down. Eventually the whole thing blows up.  Fix the problem by clearing out any stale interrupts before interrupts get enabled during resume.  Here\u0026apos;s a debug log of the indicent: [   12.042589] ieee80211 phy0: il_isr ISR inta 0x00000080, enabled 0xaa00008b, fh 0x00000000 [   12.042625] ieee80211 phy0: il4965_irq_tasklet inta 0x00000080, enabled 0x00000000, fh 0x00000000 [   12.042651] iwl4965 0000:10:00.0: RF_KILL bit toggled to enable radio. [   12.042653] iwl4965 0000:10:00.0: On demand firmware reload [   12.042690] ieee80211 phy0: il4965_irq_tasklet End inta 0x00000000, enabled 0xaa00008b, fh 0x00000000, flags 0x00000282 [   12.052207] ieee80211 phy0: il4965_mac_start enter [   12.052212] ieee80211 phy0: il_prep_station Add STA to driver ID 31: ff:ff:ff:ff:ff:ff [   12.052244] ieee80211 phy0: il4965_set_hw_ready hardware  ready [   12.052324] ieee80211 phy0: il_apm_init Init card\u0026apos;s basic functions [   12.052348] ieee80211 phy0: il_apm_init L1 Enabled; Disabling L0S [   12.055727] ieee80211 phy0: il4965_load_bsm Begin load bsm [   12.056140] ieee80211 phy0: il4965_verify_bsm Begin verify bsm [   12.058642] ieee80211 phy0: il4965_verify_bsm BSM bootstrap uCode image OK [   12.058721] ieee80211 phy0: il4965_load_bsm BSM write complete, poll 1 iterations [   12.058734] ieee80211 phy0: __il4965_up iwl4965 is coming up [   12.058737] ieee80211 phy0: il4965_mac_start Start UP work done. [   12.058757] ieee80211 phy0: __il4965_down iwl4965 is going down [   12.058761] ieee80211 phy0: il_scan_cancel_timeout Scan cancel timeout [   12.058762] ieee80211 phy0: il_do_scan_abort Not performing scan to abort [   12.058765] ieee80211 phy0: il_clear_ucode_stations Clearing ucode stations in driver [   12.058767] ieee80211 phy0: il_clear_ucode_stations No active stations found to be cleared [   12.058819] ieee80211 phy0: _il_apm_stop Stop card, put in low power state [   12.058827] ieee80211 phy0: _il_apm_stop_master stop master [   12.058864] ieee80211 phy0: il4965_clear_free_frames 0 frames on pre-allocated heap on clear. [   12.058869] ieee80211 phy0: Hardware restart was requested [   16.132299] iwl4965 0000:10:00.0: START_ALIVE timeout after 4000ms. [   16.132303] ------------[ cut here ]------------ [   16.132304] Hardware became unavailable upon resume. This could be a software issue prior to suspend or a hardware issue. [   16.132338] WARNING: CPU: 0 PID: 181 at net/mac80211/util.c:1826 ieee80211_reconfig+0x8f/0x14b0 [mac80211] [   16.132390] Modules linked in: ctr ccm sch_fq_codel xt_tcpudp xt_multiport xt_state iptable_filter iptable_nat nf_nat nf_conntrack nf_defrag_ipv4 ip_tables x_tables binfmt_misc joydev mousedev btusb btrtl btintel btbcm bluetooth ecdh_generic ecc iTCO_wdt i2c_dev iwl4965 iwlegacy coretemp snd_hda_codec_analog pcspkr psmouse mac80211 snd_hda_codec_generic libarc4 sdhci_pci cqhci sha256_generic sdhci libsha256 firewire_ohci snd_hda_intel snd_intel_dspcfg mmc_core snd_hda_codec snd_hwdep firewire_core led_class iosf_mbi snd_hda_core uhci_hcd lpc_ich crc_itu_t cfg80211 ehci_pci ehci_hcd snd_pcm usbcore mfd_core rfkill snd_timer snd usb_common soundcore video parport_pc parport intel_agp wmi intel_gtt backlight e1000e agpgart evdev [   16.132456] CPU: 0 UID: 0 PID: 181 Comm: kworker/u8:6 Not tainted 6.11.0-cl+ #143 [   16.132460] Hardware name: Hewlett-Packard HP Compaq 6910p/30BE, BIOS 68MCU Ver. F.19 07/06/2010 [   16.132463] Workqueue: async async_run_entry_fn [   16.132469] RIP: 0010:ieee80211_reconfig+0x8f/0x14b0 [mac80211] [   16.132501] Code: da 02 00 0 ---truncated---(CVE-2024-50234)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:  wifi: ath10k: Fix memory leak in management tx  In the current logic, memory is allocated for storing the MSDU context during management packet TX but this memory is not being freed during management TX completion. Similar leaks are seen in the management TX cleanup logic.  Kmemleak reports this problem as below,  unreferenced object 0xffffff80b64ed250 (size 16):   comm \u0026quot;kworker/u16:7\u0026quot;, pid 148, jiffies 4294687130 (age 714.199s)   hex dump (first 16 bytes):     00 2b d8 d8 80 ff ff ff c4 74 e9 fd 07 00 00 00  .+.......t......   backtrace:     [\u0026lt;ffffffe6e7b245dc\u0026gt;] __kmem_cache_alloc_node+0x1e4/0x2d8     [\u0026lt;ffffffe6e7adde88\u0026gt;] kmalloc_trace+0x48/0x110     [\u0026lt;ffffffe6bbd765fc\u0026gt;] ath10k_wmi_tlv_op_gen_mgmt_tx_send+0xd4/0x1d8 [ath10k_core]     [\u0026lt;ffffffe6bbd3eed4\u0026gt;] ath10k_mgmt_over_wmi_tx_work+0x134/0x298 [ath10k_core]     [\u0026lt;ffffffe6e78d5974\u0026gt;] process_scheduled_works+0x1ac/0x400     [\u0026lt;ffffffe6e78d60b8\u0026gt;] worker_thread+0x208/0x328     [\u0026lt;ffffffe6e78dc890\u0026gt;] kthread+0x100/0x1c0     [\u0026lt;ffffffe6e78166c0\u0026gt;] ret_from_fork+0x10/0x20  Free the memory during completion and cleanup to fix the leak.  Protect the mgmt_pending_tx idr_remove() operation in ath10k_wmi_tlv_op_cleanup_mgmt_tx_send() using ar-\u0026gt;data_lock similar to other instances.  Tested-on: WCN3990 hw1.0 SNOC WLAN.HL.2.0-01387-QCAHLSWMTPLZ-1(CVE-2024-50236)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:  sctp: properly validate chunk size in sctp_sf_ootb()  A size validation fix similar to that in Commit 50619dbf8db7 (\u0026quot;sctp: add size validation when walking chunks\u0026quot;) is also required in sctp_sf_ootb() to address a crash reported by syzbot:    BUG: KMSAN: uninit-value in sctp_sf_ootb+0x7f5/0xce0 net/sctp/sm_statefuns.c:3712   sctp_sf_ootb+0x7f5/0xce0 net/sctp/sm_statefuns.c:3712   sctp_do_sm+0x181/0x93d0 net/sctp/sm_sideeffect.c:1166   sctp_endpoint_bh_rcv+0xc38/0xf90 net/sctp/endpointola.c:407   sctp_inq_push+0x2ef/0x380 net/sctp/inqueue.c:88   sctp_rcv+0x3831/0x3b20 net/sctp/input.c:243   sctp4_rcv+0x42/0x50 net/sctp/protocol.c:1159   ip_protocol_deliver_rcu+0xb51/0x13d0 net/ipv4/ip_input.c:205   ip_local_deliver_finish+0x336/0x500 net/ipv4/ip_input.c:233(CVE-2024-50299)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:  wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()  1. The size of the response packet is not validated. 2. The response buffer is not freed.  Resolve these issues by switching to iwl_mvm_send_cmd_status(), which handles both size validation and frees the buffer.(CVE-2024-53059)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:  media: dvbdev: prevent the risk of out of memory access  The dvbdev contains a static variable used to store dvb minors.  The behavior of it depends if CONFIG_DVB_DYNAMIC_MINORS is set or not. When not set, dvb_register_device() won\u0026apos;t check for boundaries, as it will rely that a previous call to dvb_register_adapter() would already be enforcing it.  On a similar way, dvb_device_open() uses the assumption that the register functions already did the needed checks.  This can be fragile if some device ends using different calls. This also generate warnings on static check analysers like Coverity.  So, add explicit guards to prevent potential risk of OOM issues.(CVE-2024-53063)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:  NFSD: Never decrement pending_async_copies on error  The error flow in nfsd4_copy() calls cleanup_async_copy(), which already decrements nn-\u0026gt;pending_async_copies.(CVE-2024-53073)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:  afs: Fix lock recursion  afs_wake_up_async_call() can incur lock recursion.  The problem is that it is called from AF_RXRPC whilst holding the -\u0026gt;notify_lock, but it tries to take a ref on the afs_call struct in order to pass it to a work queue - but if the afs_call is already queued, we then have an extraneous ref that must be put... calling afs_put_call() may call back down into AF_RXRPC through rxrpc_kernel_shutdown_call(), however, which might try taking the -\u0026gt;notify_lock again.  This case isn\u0026apos;t very common, however, so defer it to a workqueue.  The oops looks something like:    BUG: spinlock recursion on CPU#0, krxrpcio/7001/1646    lock: 0xffff888141399b30, .magic: dead4ead, .owner: krxrpcio/7001/1646, .owner_cpu: 0   CPU: 0 UID: 0 PID: 1646 Comm: krxrpcio/7001 Not tainted 6.12.0-rc2-build3+ #4351   Hardware name: ASUS All Series/H97-PLUS, BIOS 2306 10/09/2014   Call Trace:    \u0026lt;TASK\u0026gt;    dump_stack_lvl+0x47/0x70    do_raw_spin_lock+0x3c/0x90    rxrpc_kernel_shutdown_call+0x83/0xb0    afs_put_call+0xd7/0x180    rxrpc_notify_socket+0xa0/0x190    rxrpc_input_split_jumbo+0x198/0x1d0    rxrpc_input_data+0x14b/0x1e0    ? rxrpc_input_call_packet+0xc2/0x1f0    rxrpc_input_call_event+0xad/0x6b0    rxrpc_input_packet_on_conn+0x1e1/0x210    rxrpc_input_packet+0x3f2/0x4d0    rxrpc_io_thread+0x243/0x410    ? __pfx_rxrpc_io_thread+0x10/0x10    kthread+0xcf/0xe0    ? __pfx_kthread+0x10/0x10    ret_from_fork+0x24/0x40    ? __pfx_kthread+0x10/0x10    ret_from_fork_asm+0x1a/0x30    \u0026lt;/TASK\u0026gt;(CVE-2024-53090)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:  bpf: Check validity of link-\u0026gt;type in bpf_link_show_fdinfo()  If a newly-added link type doesn\u0026apos;t invoke BPF_LINK_TYPE(), accessing bpf_link_type_strs[link-\u0026gt;type] may result in an out-of-bounds access.  To spot such missed invocations early in the future, checking the validity of link-\u0026gt;type in bpf_link_show_fdinfo() and emitting a warning when such invocations are missed.(CVE-2024-53099)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:  fs: Fix uninitialized value issue in from_kuid and from_kgid  ocfs2_setattr() uses attr-\u0026gt;ia_mode, attr-\u0026gt;ia_uid and attr-\u0026gt;ia_gid in a trace point even though ATTR_MODE, ATTR_UID and ATTR_GID aren\u0026apos;t set.  Initialize all fields of newattrs to avoid uninitialized variables, by checking if ATTR_MODE, ATTR_UID, ATTR_GID are initialized, otherwise 0.(CVE-2024-53101)","status":"published","published":"2024-12-06T11:08:00Z","modified":"2026-08-18T01:18:42.62306726Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:42.253598Z"},{"id":"OESA-2024-2519","title":"kernel security update","description":"The Linux Kernel, the operating system core itself.\r\n\r\nSecurity Fix(es):\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:\r\n\r\nserial: sc16is7xx: fix invalid FIFO access with special register set\r\n\r\nWhen enabling access to the special register set, Receiver time-out and\nRHR interrupts can happen. In this case, the IRQ handler will try to read\nfrom the FIFO thru the RHR register at address 0x00, but address 0x00 is\nmapped to DLL register, resulting in erroneous FIFO reading.\r\n\r\nCall graph example:\n    sc16is7xx_startup(): entry\n    sc16is7xx_ms_proc(): entry\n    sc16is7xx_set_termios(): entry\n    sc16is7xx_set_baud(): DLH/DLL = $009C --\u0026gt; access special register set\n    sc16is7xx_port_irq() entry            --\u0026gt; IIR is 0x0C\n    sc16is7xx_handle_rx() entry\n    sc16is7xx_fifo_read(): --\u0026gt; unable to access FIFO (RHR) because it is\n                               mapped to DLL (LCR=LCR_CONF_MODE_A)\n    sc16is7xx_set_baud(): exit --\u0026gt; Restore access to general register set\r\n\r\nFix the problem by claiming the efr_lock mutex when accessing the Special\nregister set.(CVE-2024-44950)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:\r\n\r\ndrm/amd/display: Check link_index before accessing dc-\u0026gt;links[]\r\n\r\n[WHY \u0026amp; HOW]\ndc-\u0026gt;links[] has max size of MAX_LINKS and NULL is return when trying to\naccess with out-of-bound index.\r\n\r\nThis fixes 3 OVERRUN and 1 RESOURCE_LEAK issues reported by Coverity.(CVE-2024-46813)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:  ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()  Blamed commit accidentally removed a check for rt-\u0026gt;rt6i_idev being NULL, as spotted by syzbot:  Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN PTI KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] CPU: 1 UID: 0 PID: 10998 Comm: syz-executor Not tainted 6.11.0-rc6-syzkaller-00208-g625403177711 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024  RIP: 0010:rt6_uncached_list_flush_dev net/ipv6/route.c:177 [inline]  RIP: 0010:rt6_disable_ip+0x33e/0x7e0 net/ipv6/route.c:4914 Code: 41 80 3c 04 00 74 0a e8 90 d0 9b f7 48 8b 7c 24 08 48 8b 07 48 89 44 24 10 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df \u0026lt;80\u0026gt; 3c 08 00 74 08 4c 89 f7 e8 64 d0 9b f7 48 8b 44 24 18 49 39 06 RSP: 0018:ffffc900047374e0 EFLAGS: 00010246 RAX: 0000000000000000 RBX: 1ffff1100fdf8f33 RCX: dffffc0000000000 RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff88807efc78c0 RBP: ffffc900047375d0 R08: 0000000000000003 R09: fffff520008e6e8c R10: dffffc0000000000 R11: fffff520008e6e8c R12: 1ffff1100fdf8f18 R13: ffff88807efc7998 R14: 0000000000000000 R15: ffff88807efc7930 FS:  0000000000000000(0000) GS:ffff8880b8900000(0000) knlGS:0000000000000000 CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000020002a80 CR3: 0000000022f62000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace:  \u0026lt;TASK\u0026gt;   addrconf_ifdown+0x15d/0x1bd0 net/ipv6/addrconf.c:3856  addrconf_notify+0x3cb/0x1020   notifier_call_chain+0x19f/0x3e0 kernel/notifier.c:93   call_netdevice_notifiers_extack net/core/dev.c:2032 [inline]   call_netdevice_notifiers net/core/dev.c:2046 [inline]   unregister_netdevice_many_notify+0xd81/0x1c40 net/core/dev.c:11352   unregister_netdevice_many net/core/dev.c:11414 [inline]   unregister_netdevice_queue+0x303/0x370 net/core/dev.c:11289   unregister_netdevice include/linux/netdevice.h:3129 [inline]   __tun_detach+0x6b9/0x1600 drivers/net/tun.c:685   tun_detach drivers/net/tun.c:701 [inline]   tun_chr_close+0x108/0x1b0 drivers/net/tun.c:3510   __fput+0x24a/0x8a0 fs/file_table.c:422   task_work_run+0x24f/0x310 kernel/task_work.c:228   exit_task_work include/linux/task_work.h:40 [inline]   do_exit+0xa2f/0x27f0 kernel/exit.c:882   do_group_exit+0x207/0x2c0 kernel/exit.c:1031   __do_sys_exit_group kernel/exit.c:1042 [inline]   __se_sys_exit_group kernel/exit.c:1040 [inline]   __x64_sys_exit_group+0x3f/0x40 kernel/exit.c:1040   x64_sys_call+0x2634/0x2640 arch/x86/include/generated/asm/syscalls_64.h:232   do_syscall_x64 arch/x86/entry/common.c:52 [inline]   do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83  entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f1acc77def9 Code: Unable to access opcode bytes at 0x7f1acc77decf. RSP: 002b:00007ffeb26fa738 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f1acc77def9 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 RBP: 00007f1acc7dd508 R08: 00007ffeb26f84d7 R09: 0000000000000003 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 R13: 0000000000000003 R14: 00000000ffffffff R15: 00007ffeb26fa8e0  \u0026lt;/TASK\u0026gt; Modules linked in: ---[ end trace 0000000000000000 ]---  RIP: 0010:rt6_uncached_list_flush_dev net/ipv6/route.c:177 [inline]  RIP: 0010:rt6_disable_ip+0x33e/0x7e0 net/ipv6/route.c:4914 Code: 41 80 3c 04 00 74 0a e8 90 d0 9b f7 48 8b 7c 24 08 48 8b 07 48 89 44 24 10 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df \u0026lt;80\u0026gt; 3c 08 00 74 08 4c 89 f7 e8 64 d0 9b f7 48 8b 44 24 18 49 39 06 RSP: 0018:ffffc900047374e0 EFLAGS: 00010246 RAX: 0000000000000000 RBX: 1ffff1100fdf8f33 RCX: dffffc0000000000 RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff88807efc78c0 R ---truncated---(CVE-2024-47707)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:  wifi: rtw88: always wait for both firmware loading attempts  In \u0026apos;rtw_wait_firmware_completion()\u0026apos;, always wait for both (regular and wowlan) firmware loading attempts. Otherwise if \u0026apos;rtw_usb_intf_init()\u0026apos; has failed in \u0026apos;rtw_usb_probe()\u0026apos;, \u0026apos;rtw_usb_disconnect()\u0026apos; may issue \u0026apos;ieee80211_free_hw()\u0026apos; when one of \u0026apos;rtw_load_firmware_cb()\u0026apos; (usually the wowlan one) is still in progress, causing UAF detected by KASAN.(CVE-2024-47718)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:  scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths  When the HBA is undergoing a reset or is handling an errata event, NULL ptr dereference crashes may occur in routines such as lpfc_sli_flush_io_rings(), lpfc_dev_loss_tmo_callbk(), or lpfc_abort_handler().  Add NULL ptr checks before dereferencing hdwq pointers that may have been freed due to operations colliding with a reset or errata event handler.(CVE-2024-49891)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:  wifi: ath11k: fix array out-of-bound access in SoC stats  Currently, the ath11k_soc_dp_stats::hal_reo_error array is defined with a maximum size of DP_REO_DST_RING_MAX. However, the ath11k_dp_process_rx() function access ath11k_soc_dp_stats::hal_reo_error using the REO destination SRNG ring ID, which is incorrect. SRNG ring ID differ from normal ring ID, and this usage leads to out-of-bounds array access. To fix this issue, modify ath11k_dp_process_rx() to use the normal ring ID directly instead of the SRNG ring ID to avoid out-of-bounds array access.  Tested-on: QCN9074 hw1.0 PCI WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1(CVE-2024-49930)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:  wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit  Syzbot points out that skb_trim() has a sanity check on the existing length of the skb, which can be uninitialised in some error paths. The intent here is clearly just to reset the length to zero before resubmitting, so switch to calling __skb_set_length(skb, 0) directly. In addition, __skb_set_length() already contains a call to skb_reset_tail_pointer(), so remove the redundant call.  The syzbot report came from ath9k_hif_usb_reg_in_cb(), but there\u0026apos;s a similar usage of skb_trim() in ath9k_hif_usb_rx_cb(), change both while we\u0026apos;re at it.(CVE-2024-49938)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:  sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start  In sctp_listen_start() invoked by sctp_inet_listen(), it should set the sk_state back to CLOSED if sctp_autobind() fails due to whatever reason.  Otherwise, next time when calling sctp_inet_listen(), if sctp_sk(sk)-\u0026gt;reuse is already set via setsockopt(SCTP_REUSE_PORT), sctp_sk(sk)-\u0026gt;bind_hash will be dereferenced as sk_state is LISTENING, which causes a crash as bind_hash is NULL.    KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]   RIP: 0010:sctp_inet_listen+0x7f0/0xa20 net/sctp/socket.c:8617   Call Trace:    \u0026lt;TASK\u0026gt;    __sys_listen_socket net/socket.c:1883 [inline]    __sys_listen+0x1b7/0x230 net/socket.c:1894    __do_sys_listen net/socket.c:1902 [inline](CVE-2024-49944)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:  net: ethernet: lantiq_etop: fix memory disclosure  When applying padding, the buffer is not zeroed, which results in memory disclosure. The mentioned data is observed on the wire. This patch uses skb_put_padto() to pad Ethernet frames properly. The mentioned function zeroes the expanded buffer.  In case the packet cannot be padded it is silently dropped. Statistics are also not incremented. This driver does not support statistics in the old 32-bit format or the new 64-bit format. These will be added in the future. In its current form, the patch should be easily backported to stable versions.  Ethernet MACs on Amazon-SE and Danube cannot do padding of the packets in hardware, so software padding must be applied.(CVE-2024-49997)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:  net: Fix an unsafe loop on the list  The kernel may crash when deleting a genetlink family if there are still listeners for that family:  Oops: Kernel access of bad area, sig: 11 [#1]   ...   NIP [c000000000c080bc] netlink_update_socket_mc+0x3c/0xc0   LR [c000000000c0f764] __netlink_clear_multicast_users+0x74/0xc0   Call Trace: __netlink_clear_multicast_users+0x74/0xc0 genl_unregister_family+0xd4/0x2d0  Change the unsafe loop on the list to a safe one, because inside the loop there is an element removal from this list.(CVE-2024-50024)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:  net/sched: accept TCA_STAB only for root qdisc  Most qdiscs maintain their backlog using qdisc_pkt_len(skb) on the assumption it is invariant between the enqueue() and dequeue() handlers.  Unfortunately syzbot can crash a host rather easily using a TBF + SFQ combination, with an STAB on SFQ [1]  We can\u0026apos;t support TCA_STAB on arbitrary level, this would require to maintain per-qdisc storage.  [1] [   88.796496] BUG: kernel NULL pointer dereference, address: 0000000000000000 [   88.798611] #PF: supervisor read access in kernel mode [   88.799014] #PF: error_code(0x0000) - not-present page [   88.799506] PGD 0 P4D 0 [   88.799829] Oops: Oops: 0000 [#1] SMP NOPTI [   88.800569] CPU: 14 UID: 0 PID: 2053 Comm: b371744477 Not tainted 6.12.0-rc1-virtme #1117 [   88.801107] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [   88.801779] RIP: 0010:sfq_dequeue (net/sched/sch_sfq.c:272 net/sched/sch_sfq.c:499) sch_sfq [ 88.802544] Code: 0f b7 50 12 48 8d 04 d5 00 00 00 00 48 89 d6 48 29 d0 48 8b 91 c0 01 00 00 48 c1 e0 03 48 01 c2 66 83 7a 1a 00 7e c0 48 8b 3a \u0026lt;4c\u0026gt; 8b 07 4c 89 02 49 89 50 08 48 c7 47 08 00 00 00 00 48 c7 07 00 All code ========    0: 0f b7 50 12           movzwl 0x12(%rax),%edx    4: 48 8d 04 d5 00 00 00  lea    0x0(,%rdx,8),%rax    b: 00    c: 48 89 d6              mov    %rdx,%rsi    f: 48 29 d0              sub    %rdx,%rax   12: 48 8b 91 c0 01 00 00  mov    0x1c0(%rcx),%rdx   19: 48 c1 e0 03           shl    $0x3,%rax   1d: 48 01 c2              add    %rax,%rdx   20: 66 83 7a 1a 00        cmpw   $0x0,0x1a(%rdx)   25: 7e c0                 jle    0xffffffffffffffe7   27: 48 8b 3a              mov    (%rdx),%rdi   2a:* 4c 8b 07              mov    (%rdi),%r8  \u0026lt;-- trapping instruction   2d: 4c 89 02              mov    %r8,(%rdx)   30: 49 89 50 08           mov    %rdx,0x8(%r8)   34: 48 c7 47 08 00 00 00  movq   $0x0,0x8(%rdi)   3b: 00   3c: 48                    rex.W   3d: c7                    .byte 0xc7   3e: 07                    (bad)  ...  Code starting with the faulting instruction ===========================================    0: 4c 8b 07              mov    (%rdi),%r8    3: 4c 89 02              mov    %r8,(%rdx)    6: 49 89 50 08           mov    %rdx,0x8(%r8)    a: 48 c7 47 08 00 00 00  movq   $0x0,0x8(%rdi)   11: 00   12: 48                    rex.W   13: c7                    .byte 0xc7   14: 07                    (bad)  ... [   88.803721] RSP: 0018:ffff9a1f892b7d58 EFLAGS: 00000206 [   88.804032] RAX: 0000000000000000 RBX: ffff9a1f8420c800 RCX: ffff9a1f8420c800 [   88.804560] RDX: ffff9a1f81bc1440 RSI: 0000000000000000 RDI: 0000000000000000 [   88.805056] RBP: ffffffffc04bb0e0 R08: 0000000000000001 R09: 00000000ff7f9a1f [   88.805473] R10: 000000000001001b R11: 0000000000009a1f R12: 0000000000000140 [   88.806194] R13: 0000000000000001 R14: ffff9a1f886df400 R15: ffff9a1f886df4ac [   88.806734] FS:  00007f445601a740(0000) GS:ffff9a2e7fd80000(0000) knlGS:0000000000000000 [   88.807225] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [   88.807672] CR2: 0000000000000000 CR3: 000000050cc46000 CR4: 00000000000006f0 [   88.808165] Call Trace: [   88.808459]  \u0026lt;TASK\u0026gt; [   88.808710] ? __die (arch/x86/kernel/dumpstack.c:421 arch/x86/kernel/dumpstack.c:434) [   88.809261] ? page_fault_oops (arch/x86/mm/fault.c:715) [   88.809561] ? exc_page_fault (./arch/x86/include/asm/irqflags.h:26 ./arch/x86/include/asm/irqflags.h:87 ./arch/x86/include/asm/irqflags.h:147 arch/x86/mm/fault.c:1489 arch/x86/mm/fault.c:1539) [   88.809806] ? asm_exc_page_fault (./arch/x86/include/asm/idtentry.h:623) [   88.810074] ? sfq_dequeue (net/sched/sch_sfq.c:272 net/sched/sch_sfq.c:499) sch_sfq [   88.810411] sfq_reset (net/sched/sch_sfq.c:525) sch_sfq [   88.810671] qdisc_reset (./include/linux/skbuff.h:2135 ./include/linux/skbuff.h:2441 ./include/linux/skbuff.h:3304 ./include/linux/skbuff.h:3310 net/sched/sch_g ---truncated---(CVE-2024-50039)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:  Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change  rfcomm_sk_state_change attempts to use sock_lock so it must never be called with it locked but rfcomm_sock_ioctl always attempt to lock it causing the following trace:  ====================================================== WARNING: possible circular locking dependency detected 6.8.0-syzkaller-08951-gfe46a7dd189e #0 Not tainted ------------------------------------------------------ syz-executor386/5093 is trying to acquire lock: ffff88807c396258 (sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM){+.+.}-{0:0}, at: lock_sock include/net/sock.h:1671 [inline] ffff88807c396258 (sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM){+.+.}-{0:0}, at: rfcomm_sk_state_change+0x5b/0x310 net/bluetooth/rfcomm/sock.c:73  but task is already holding lock: ffff88807badfd28 (\u0026amp;d-\u0026gt;lock){+.+.}-{3:3}, at: __rfcomm_dlc_close+0x226/0x6a0 net/bluetooth/rfcomm/core.c:491(CVE-2024-50044)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:  nvme-pci: fix race condition between reset and nvme_dev_disable()  nvme_dev_disable() modifies the dev-\u0026gt;online_queues field, therefore nvme_pci_update_nr_queues() should avoid racing against it, otherwise we could end up passing invalid values to blk_mq_update_nr_hw_queues().   WARNING: CPU: 39 PID: 61303 at drivers/pci/msi/api.c:347           pci_irq_get_affinity+0x187/0x210  Workqueue: nvme-reset-wq nvme_reset_work [nvme]  RIP: 0010:pci_irq_get_affinity+0x187/0x210  Call Trace:   \u0026lt;TASK\u0026gt;   ? blk_mq_pci_map_queues+0x87/0x3c0   ? pci_irq_get_affinity+0x187/0x210   blk_mq_pci_map_queues+0x87/0x3c0   nvme_pci_map_queues+0x189/0x460 [nvme]   blk_mq_update_nr_hw_queues+0x2a/0x40   nvme_reset_work+0x1be/0x2a0 [nvme]  Fix the bug by locking the shutdown_lock mutex before using dev-\u0026gt;online_queues. Give up if nvme_dev_disable() is running or if it has been executed already.(CVE-2024-50135)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:  Bluetooth: bnep: fix wild-memory-access in proto_unregister  There\u0026apos;s issue as follows:   KASAN: maybe wild-memory-access in range [0xdead...108-0xdead...10f]   CPU: 3 UID: 0 PID: 2805 Comm: rmmod Tainted: G        W   RIP: 0010:proto_unregister+0xee/0x400   Call Trace:    \u0026lt;TASK\u0026gt;    __do_sys_delete_module+0x318/0x580    do_syscall_64+0xc1/0x1d0    entry_SYSCALL_64_after_hwframe+0x77/0x7f  As bnep_init() ignore bnep_sock_init()\u0026apos;s return value, and bnep_sock_init() will cleanup all resource. Then when remove bnep module will call bnep_sock_cleanup() to cleanup sock\u0026apos;s resource. To solve above issue just return bnep_sock_init()\u0026apos;s return value in bnep_exit().(CVE-2024-50148)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:  net: systemport: fix potential memory leak in bcm_sysport_xmit()  The bcm_sysport_xmit() returns NETDEV_TX_OK without freeing skb in case of dma_map_single() fails, add dev_kfree_skb() to fix it.(CVE-2024-50171)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:  pinctrl: ocelot: fix system hang on level based interrupts  The current implementation only calls chained_irq_enter() and chained_irq_exit() if it detects pending interrupts.  ``` for (i = 0; i \u0026lt; info-\u0026gt;stride; i++) {  uregmap_read(info-\u0026gt;map, id_reg + 4 * i, \u0026amp;reg);  if (!reg)   continue;   chained_irq_enter(parent_chip, desc); ```  However, in case of GPIO pin configured in level mode and the parent controller configured in edge mode, GPIO interrupt might be lowered by the hardware. In the result, if the interrupt is short enough, the parent interrupt is still pending while the GPIO interrupt is cleared; chained_irq_enter() never gets called and the system hangs trying to service the parent interrupt.  Moving chained_irq_enter() and chained_irq_exit() outside the for loop ensures that they are called even when GPIO interrupt is lowered by the hardware.  The similar code with chained_irq_enter() / chained_irq_exit() functions wrapping interrupt checking loop may be found in many other drivers: ``` grep -r -A 10 chained_irq_enter drivers/pinctrl ```(CVE-2024-50196)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:  RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages  Avoid memory corruption while setting up Level-2 PBL pages for the non MR resources when num_pages \u0026gt; 256K.  There will be a single PDE page address (contiguous pages in the case of \u0026gt; PAGE_SIZE), but, current logic assumes multiple pages, leading to invalid memory access after 256K PBL entries in the PDE.(CVE-2024-50208)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:  RDMA/bnxt_re: Add a check for memory allocation  __alloc_pbl() can return error when memory allocation fails. Driver is not checking the status on one of the instances.(CVE-2024-50209)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:  wifi: iwlegacy: Clear stale interrupts before resuming device  iwl4965 fails upon resume from hibernation on my laptop. The reason seems to be a stale interrupt which isn\u0026apos;t being cleared out before interrupts are enabled. We end up with a race beween the resume trying to bring things back up, and the restart work (queued form the interrupt handler) trying to bring things down. Eventually the whole thing blows up.  Fix the problem by clearing out any stale interrupts before interrupts get enabled during resume.  Here\u0026apos;s a debug log of the indicent: [   12.042589] ieee80211 phy0: il_isr ISR inta 0x00000080, enabled 0xaa00008b, fh 0x00000000 [   12.042625] ieee80211 phy0: il4965_irq_tasklet inta 0x00000080, enabled 0x00000000, fh 0x00000000 [   12.042651] iwl4965 0000:10:00.0: RF_KILL bit toggled to enable radio. [   12.042653] iwl4965 0000:10:00.0: On demand firmware reload [   12.042690] ieee80211 phy0: il4965_irq_tasklet End inta 0x00000000, enabled 0xaa00008b, fh 0x00000000, flags 0x00000282 [   12.052207] ieee80211 phy0: il4965_mac_start enter [   12.052212] ieee80211 phy0: il_prep_station Add STA to driver ID 31: ff:ff:ff:ff:ff:ff [   12.052244] ieee80211 phy0: il4965_set_hw_ready hardware  ready [   12.052324] ieee80211 phy0: il_apm_init Init card\u0026apos;s basic functions [   12.052348] ieee80211 phy0: il_apm_init L1 Enabled; Disabling L0S [   12.055727] ieee80211 phy0: il4965_load_bsm Begin load bsm [   12.056140] ieee80211 phy0: il4965_verify_bsm Begin verify bsm [   12.058642] ieee80211 phy0: il4965_verify_bsm BSM bootstrap uCode image OK [   12.058721] ieee80211 phy0: il4965_load_bsm BSM write complete, poll 1 iterations [   12.058734] ieee80211 phy0: __il4965_up iwl4965 is coming up [   12.058737] ieee80211 phy0: il4965_mac_start Start UP work done. [   12.058757] ieee80211 phy0: __il4965_down iwl4965 is going down [   12.058761] ieee80211 phy0: il_scan_cancel_timeout Scan cancel timeout [   12.058762] ieee80211 phy0: il_do_scan_abort Not performing scan to abort [   12.058765] ieee80211 phy0: il_clear_ucode_stations Clearing ucode stations in driver [   12.058767] ieee80211 phy0: il_clear_ucode_stations No active stations found to be cleared [   12.058819] ieee80211 phy0: _il_apm_stop Stop card, put in low power state [   12.058827] ieee80211 phy0: _il_apm_stop_master stop master [   12.058864] ieee80211 phy0: il4965_clear_free_frames 0 frames on pre-allocated heap on clear. [   12.058869] ieee80211 phy0: Hardware restart was requested [   16.132299] iwl4965 0000:10:00.0: START_ALIVE timeout after 4000ms. [   16.132303] ------------[ cut here ]------------ [   16.132304] Hardware became unavailable upon resume. This could be a software issue prior to suspend or a hardware issue. [   16.132338] WARNING: CPU: 0 PID: 181 at net/mac80211/util.c:1826 ieee80211_reconfig+0x8f/0x14b0 [mac80211] [   16.132390] Modules linked in: ctr ccm sch_fq_codel xt_tcpudp xt_multiport xt_state iptable_filter iptable_nat nf_nat nf_conntrack nf_defrag_ipv4 ip_tables x_tables binfmt_misc joydev mousedev btusb btrtl btintel btbcm bluetooth ecdh_generic ecc iTCO_wdt i2c_dev iwl4965 iwlegacy coretemp snd_hda_codec_analog pcspkr psmouse mac80211 snd_hda_codec_generic libarc4 sdhci_pci cqhci sha256_generic sdhci libsha256 firewire_ohci snd_hda_intel snd_intel_dspcfg mmc_core snd_hda_codec snd_hwdep firewire_core led_class iosf_mbi snd_hda_core uhci_hcd lpc_ich crc_itu_t cfg80211 ehci_pci ehci_hcd snd_pcm usbcore mfd_core rfkill snd_timer snd usb_common soundcore video parport_pc parport intel_agp wmi intel_gtt backlight e1000e agpgart evdev [   16.132456] CPU: 0 UID: 0 PID: 181 Comm: kworker/u8:6 Not tainted 6.11.0-cl+ #143 [   16.132460] Hardware name: Hewlett-Packard HP Compaq 6910p/30BE, BIOS 68MCU Ver. F.19 07/06/2010 [   16.132463] Workqueue: async async_run_entry_fn [   16.132469] RIP: 0010:ieee80211_reconfig+0x8f/0x14b0 [mac80211] [   16.132501] Code: da 02 00 0 ---truncated---(CVE-2024-50234)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:  wifi: ath10k: Fix memory leak in management tx  In the current logic, memory is allocated for storing the MSDU context during management packet TX but this memory is not being freed during management TX completion. Similar leaks are seen in the management TX cleanup logic.  Kmemleak reports this problem as below,  unreferenced object 0xffffff80b64ed250 (size 16):   comm \u0026quot;kworker/u16:7\u0026quot;, pid 148, jiffies 4294687130 (age 714.199s)   hex dump (first 16 bytes):     00 2b d8 d8 80 ff ff ff c4 74 e9 fd 07 00 00 00  .+.......t......   backtrace:     [\u0026lt;ffffffe6e7b245dc\u0026gt;] __kmem_cache_alloc_node+0x1e4/0x2d8     [\u0026lt;ffffffe6e7adde88\u0026gt;] kmalloc_trace+0x48/0x110     [\u0026lt;ffffffe6bbd765fc\u0026gt;] ath10k_wmi_tlv_op_gen_mgmt_tx_send+0xd4/0x1d8 [ath10k_core]     [\u0026lt;ffffffe6bbd3eed4\u0026gt;] ath10k_mgmt_over_wmi_tx_work+0x134/0x298 [ath10k_core]     [\u0026lt;ffffffe6e78d5974\u0026gt;] process_scheduled_works+0x1ac/0x400     [\u0026lt;ffffffe6e78d60b8\u0026gt;] worker_thread+0x208/0x328     [\u0026lt;ffffffe6e78dc890\u0026gt;] kthread+0x100/0x1c0     [\u0026lt;ffffffe6e78166c0\u0026gt;] ret_from_fork+0x10/0x20  Free the memory during completion and cleanup to fix the leak.  Protect the mgmt_pending_tx idr_remove() operation in ath10k_wmi_tlv_op_cleanup_mgmt_tx_send() using ar-\u0026gt;data_lock similar to other instances.  Tested-on: WCN3990 hw1.0 SNOC WLAN.HL.2.0-01387-QCAHLSWMTPLZ-1(CVE-2024-50236)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:  sctp: properly validate chunk size in sctp_sf_ootb()  A size validation fix similar to that in Commit 50619dbf8db7 (\u0026quot;sctp: add size validation when walking chunks\u0026quot;) is also required in sctp_sf_ootb() to address a crash reported by syzbot:    BUG: KMSAN: uninit-value in sctp_sf_ootb+0x7f5/0xce0 net/sctp/sm_statefuns.c:3712   sctp_sf_ootb+0x7f5/0xce0 net/sctp/sm_statefuns.c:3712   sctp_do_sm+0x181/0x93d0 net/sctp/sm_sideeffect.c:1166   sctp_endpoint_bh_rcv+0xc38/0xf90 net/sctp/endpointola.c:407   sctp_inq_push+0x2ef/0x380 net/sctp/inqueue.c:88   sctp_rcv+0x3831/0x3b20 net/sctp/input.c:243   sctp4_rcv+0x42/0x50 net/sctp/protocol.c:1159   ip_protocol_deliver_rcu+0xb51/0x13d0 net/ipv4/ip_input.c:205   ip_local_deliver_finish+0x336/0x500 net/ipv4/ip_input.c:233(CVE-2024-50299)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:  wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()  1. The size of the response packet is not validated. 2. The response buffer is not freed.  Resolve these issues by switching to iwl_mvm_send_cmd_status(), which handles both size validation and frees the buffer.(CVE-2024-53059)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:  media: dvbdev: prevent the risk of out of memory access  The dvbdev contains a static variable used to store dvb minors.  The behavior of it depends if CONFIG_DVB_DYNAMIC_MINORS is set or not. When not set, dvb_register_device() won\u0026apos;t check for boundaries, as it will rely that a previous call to dvb_register_adapter() would already be enforcing it.  On a similar way, dvb_device_open() uses the assumption that the register functions already did the needed checks.  This can be fragile if some device ends using different calls. This also generate warnings on static check analysers like Coverity.  So, add explicit guards to prevent potential risk of OOM issues.(CVE-2024-53063)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:  NFSD: Never decrement pending_async_copies on error  The error flow in nfsd4_copy() calls cleanup_async_copy(), which already decrements nn-\u0026gt;pending_async_copies.(CVE-2024-53073)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:  afs: Fix lock recursion  afs_wake_up_async_call() can incur lock recursion.  The problem is that it is called from AF_RXRPC whilst holding the -\u0026gt;notify_lock, but it tries to take a ref on the afs_call struct in order to pass it to a work queue - but if the afs_call is already queued, we then have an extraneous ref that must be put... calling afs_put_call() may call back down into AF_RXRPC through rxrpc_kernel_shutdown_call(), however, which might try taking the -\u0026gt;notify_lock again.  This case isn\u0026apos;t very common, however, so defer it to a workqueue.  The oops looks something like:    BUG: spinlock recursion on CPU#0, krxrpcio/7001/1646    lock: 0xffff888141399b30, .magic: dead4ead, .owner: krxrpcio/7001/1646, .owner_cpu: 0   CPU: 0 UID: 0 PID: 1646 Comm: krxrpcio/7001 Not tainted 6.12.0-rc2-build3+ #4351   Hardware name: ASUS All Series/H97-PLUS, BIOS 2306 10/09/2014   Call Trace:    \u0026lt;TASK\u0026gt;    dump_stack_lvl+0x47/0x70    do_raw_spin_lock+0x3c/0x90    rxrpc_kernel_shutdown_call+0x83/0xb0    afs_put_call+0xd7/0x180    rxrpc_notify_socket+0xa0/0x190    rxrpc_input_split_jumbo+0x198/0x1d0    rxrpc_input_data+0x14b/0x1e0    ? rxrpc_input_call_packet+0xc2/0x1f0    rxrpc_input_call_event+0xad/0x6b0    rxrpc_input_packet_on_conn+0x1e1/0x210    rxrpc_input_packet+0x3f2/0x4d0    rxrpc_io_thread+0x243/0x410    ? __pfx_rxrpc_io_thread+0x10/0x10    kthread+0xcf/0xe0    ? __pfx_kthread+0x10/0x10    ret_from_fork+0x24/0x40    ? __pfx_kthread+0x10/0x10    ret_from_fork_asm+0x1a/0x30    \u0026lt;/TASK\u0026gt;(CVE-2024-53090)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:  bpf: Check validity of link-\u0026gt;type in bpf_link_show_fdinfo()  If a newly-added link type doesn\u0026apos;t invoke BPF_LINK_TYPE(), accessing bpf_link_type_strs[link-\u0026gt;type] may result in an out-of-bounds access.  To spot such missed invocations early in the future, checking the validity of link-\u0026gt;type in bpf_link_show_fdinfo() and emitting a warning when such invocations are missed.(CVE-2024-53099)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:  fs: Fix uninitialized value issue in from_kuid and from_kgid  ocfs2_setattr() uses attr-\u0026gt;ia_mode, attr-\u0026gt;ia_uid and attr-\u0026gt;ia_gid in a trace point even though ATTR_MODE, ATTR_UID and ATTR_GID aren\u0026apos;t set.  Initialize all fields of newattrs to avoid uninitialized variables, by checking if ATTR_MODE, ATTR_UID, ATTR_GID are initialized, otherwise 0.(CVE-2024-53101)","status":"published","published":"2024-12-06T11:08:00Z","modified":"2026-08-18T01:18:42.563472293Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:42.253598Z"},{"id":"OESA-2024-2521","title":"kernel security update","description":"The Linux Kernel, the operating system core itself.\r\n\r\nSecurity Fix(es):\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:\r\n\r\nserial: sc16is7xx: fix invalid FIFO access with special register set\r\n\r\nWhen enabling access to the special register set, Receiver time-out and\nRHR interrupts can happen. In this case, the IRQ handler will try to read\nfrom the FIFO thru the RHR register at address 0x00, but address 0x00 is\nmapped to DLL register, resulting in erroneous FIFO reading.\r\n\r\nCall graph example:\n    sc16is7xx_startup(): entry\n    sc16is7xx_ms_proc(): entry\n    sc16is7xx_set_termios(): entry\n    sc16is7xx_set_baud(): DLH/DLL = $009C --\u0026gt; access special register set\n    sc16is7xx_port_irq() entry            --\u0026gt; IIR is 0x0C\n    sc16is7xx_handle_rx() entry\n    sc16is7xx_fifo_read(): --\u0026gt; unable to access FIFO (RHR) because it is\n                               mapped to DLL (LCR=LCR_CONF_MODE_A)\n    sc16is7xx_set_baud(): exit --\u0026gt; Restore access to general register set\r\n\r\nFix the problem by claiming the efr_lock mutex when accessing the Special\nregister set.(CVE-2024-44950)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:\r\n\r\ndrm/amd/display: Check link_index before accessing dc-\u0026gt;links[]\r\n\r\n[WHY \u0026amp; HOW]\ndc-\u0026gt;links[] has max size of MAX_LINKS and NULL is return when trying to\naccess with out-of-bound index.\r\n\r\nThis fixes 3 OVERRUN and 1 RESOURCE_LEAK issues reported by Coverity.(CVE-2024-46813)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:  ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()  Blamed commit accidentally removed a check for rt-\u0026gt;rt6i_idev being NULL, as spotted by syzbot:  Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN PTI KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] CPU: 1 UID: 0 PID: 10998 Comm: syz-executor Not tainted 6.11.0-rc6-syzkaller-00208-g625403177711 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024  RIP: 0010:rt6_uncached_list_flush_dev net/ipv6/route.c:177 [inline]  RIP: 0010:rt6_disable_ip+0x33e/0x7e0 net/ipv6/route.c:4914 Code: 41 80 3c 04 00 74 0a e8 90 d0 9b f7 48 8b 7c 24 08 48 8b 07 48 89 44 24 10 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df \u0026lt;80\u0026gt; 3c 08 00 74 08 4c 89 f7 e8 64 d0 9b f7 48 8b 44 24 18 49 39 06 RSP: 0018:ffffc900047374e0 EFLAGS: 00010246 RAX: 0000000000000000 RBX: 1ffff1100fdf8f33 RCX: dffffc0000000000 RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff88807efc78c0 RBP: ffffc900047375d0 R08: 0000000000000003 R09: fffff520008e6e8c R10: dffffc0000000000 R11: fffff520008e6e8c R12: 1ffff1100fdf8f18 R13: ffff88807efc7998 R14: 0000000000000000 R15: ffff88807efc7930 FS:  0000000000000000(0000) GS:ffff8880b8900000(0000) knlGS:0000000000000000 CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000020002a80 CR3: 0000000022f62000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace:  \u0026lt;TASK\u0026gt;   addrconf_ifdown+0x15d/0x1bd0 net/ipv6/addrconf.c:3856  addrconf_notify+0x3cb/0x1020   notifier_call_chain+0x19f/0x3e0 kernel/notifier.c:93   call_netdevice_notifiers_extack net/core/dev.c:2032 [inline]   call_netdevice_notifiers net/core/dev.c:2046 [inline]   unregister_netdevice_many_notify+0xd81/0x1c40 net/core/dev.c:11352   unregister_netdevice_many net/core/dev.c:11414 [inline]   unregister_netdevice_queue+0x303/0x370 net/core/dev.c:11289   unregister_netdevice include/linux/netdevice.h:3129 [inline]   __tun_detach+0x6b9/0x1600 drivers/net/tun.c:685   tun_detach drivers/net/tun.c:701 [inline]   tun_chr_close+0x108/0x1b0 drivers/net/tun.c:3510   __fput+0x24a/0x8a0 fs/file_table.c:422   task_work_run+0x24f/0x310 kernel/task_work.c:228   exit_task_work include/linux/task_work.h:40 [inline]   do_exit+0xa2f/0x27f0 kernel/exit.c:882   do_group_exit+0x207/0x2c0 kernel/exit.c:1031   __do_sys_exit_group kernel/exit.c:1042 [inline]   __se_sys_exit_group kernel/exit.c:1040 [inline]   __x64_sys_exit_group+0x3f/0x40 kernel/exit.c:1040   x64_sys_call+0x2634/0x2640 arch/x86/include/generated/asm/syscalls_64.h:232   do_syscall_x64 arch/x86/entry/common.c:52 [inline]   do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83  entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f1acc77def9 Code: Unable to access opcode bytes at 0x7f1acc77decf. RSP: 002b:00007ffeb26fa738 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f1acc77def9 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 RBP: 00007f1acc7dd508 R08: 00007ffeb26f84d7 R09: 0000000000000003 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 R13: 0000000000000003 R14: 00000000ffffffff R15: 00007ffeb26fa8e0  \u0026lt;/TASK\u0026gt; Modules linked in: ---[ end trace 0000000000000000 ]---  RIP: 0010:rt6_uncached_list_flush_dev net/ipv6/route.c:177 [inline]  RIP: 0010:rt6_disable_ip+0x33e/0x7e0 net/ipv6/route.c:4914 Code: 41 80 3c 04 00 74 0a e8 90 d0 9b f7 48 8b 7c 24 08 48 8b 07 48 89 44 24 10 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df \u0026lt;80\u0026gt; 3c 08 00 74 08 4c 89 f7 e8 64 d0 9b f7 48 8b 44 24 18 49 39 06 RSP: 0018:ffffc900047374e0 EFLAGS: 00010246 RAX: 0000000000000000 RBX: 1ffff1100fdf8f33 RCX: dffffc0000000000 RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff88807efc78c0 R ---truncated---(CVE-2024-47707)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:  wifi: rtw88: always wait for both firmware loading attempts  In \u0026apos;rtw_wait_firmware_completion()\u0026apos;, always wait for both (regular and wowlan) firmware loading attempts. Otherwise if \u0026apos;rtw_usb_intf_init()\u0026apos; has failed in \u0026apos;rtw_usb_probe()\u0026apos;, \u0026apos;rtw_usb_disconnect()\u0026apos; may issue \u0026apos;ieee80211_free_hw()\u0026apos; when one of \u0026apos;rtw_load_firmware_cb()\u0026apos; (usually the wowlan one) is still in progress, causing UAF detected by KASAN.(CVE-2024-47718)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:  scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths  When the HBA is undergoing a reset or is handling an errata event, NULL ptr dereference crashes may occur in routines such as lpfc_sli_flush_io_rings(), lpfc_dev_loss_tmo_callbk(), or lpfc_abort_handler().  Add NULL ptr checks before dereferencing hdwq pointers that may have been freed due to operations colliding with a reset or errata event handler.(CVE-2024-49891)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:  wifi: ath11k: fix array out-of-bound access in SoC stats  Currently, the ath11k_soc_dp_stats::hal_reo_error array is defined with a maximum size of DP_REO_DST_RING_MAX. However, the ath11k_dp_process_rx() function access ath11k_soc_dp_stats::hal_reo_error using the REO destination SRNG ring ID, which is incorrect. SRNG ring ID differ from normal ring ID, and this usage leads to out-of-bounds array access. To fix this issue, modify ath11k_dp_process_rx() to use the normal ring ID directly instead of the SRNG ring ID to avoid out-of-bounds array access.  Tested-on: QCN9074 hw1.0 PCI WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1(CVE-2024-49930)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:  wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit  Syzbot points out that skb_trim() has a sanity check on the existing length of the skb, which can be uninitialised in some error paths. The intent here is clearly just to reset the length to zero before resubmitting, so switch to calling __skb_set_length(skb, 0) directly. In addition, __skb_set_length() already contains a call to skb_reset_tail_pointer(), so remove the redundant call.  The syzbot report came from ath9k_hif_usb_reg_in_cb(), but there\u0026apos;s a similar usage of skb_trim() in ath9k_hif_usb_rx_cb(), change both while we\u0026apos;re at it.(CVE-2024-49938)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:  sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start  In sctp_listen_start() invoked by sctp_inet_listen(), it should set the sk_state back to CLOSED if sctp_autobind() fails due to whatever reason.  Otherwise, next time when calling sctp_inet_listen(), if sctp_sk(sk)-\u0026gt;reuse is already set via setsockopt(SCTP_REUSE_PORT), sctp_sk(sk)-\u0026gt;bind_hash will be dereferenced as sk_state is LISTENING, which causes a crash as bind_hash is NULL.    KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]   RIP: 0010:sctp_inet_listen+0x7f0/0xa20 net/sctp/socket.c:8617   Call Trace:    \u0026lt;TASK\u0026gt;    __sys_listen_socket net/socket.c:1883 [inline]    __sys_listen+0x1b7/0x230 net/socket.c:1894    __do_sys_listen net/socket.c:1902 [inline](CVE-2024-49944)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:  net: ethernet: lantiq_etop: fix memory disclosure  When applying padding, the buffer is not zeroed, which results in memory disclosure. The mentioned data is observed on the wire. This patch uses skb_put_padto() to pad Ethernet frames properly. The mentioned function zeroes the expanded buffer.  In case the packet cannot be padded it is silently dropped. Statistics are also not incremented. This driver does not support statistics in the old 32-bit format or the new 64-bit format. These will be added in the future. In its current form, the patch should be easily backported to stable versions.  Ethernet MACs on Amazon-SE and Danube cannot do padding of the packets in hardware, so software padding must be applied.(CVE-2024-49997)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:  net: Fix an unsafe loop on the list  The kernel may crash when deleting a genetlink family if there are still listeners for that family:  Oops: Kernel access of bad area, sig: 11 [#1]   ...   NIP [c000000000c080bc] netlink_update_socket_mc+0x3c/0xc0   LR [c000000000c0f764] __netlink_clear_multicast_users+0x74/0xc0   Call Trace: __netlink_clear_multicast_users+0x74/0xc0 genl_unregister_family+0xd4/0x2d0  Change the unsafe loop on the list to a safe one, because inside the loop there is an element removal from this list.(CVE-2024-50024)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:  net/sched: accept TCA_STAB only for root qdisc  Most qdiscs maintain their backlog using qdisc_pkt_len(skb) on the assumption it is invariant between the enqueue() and dequeue() handlers.  Unfortunately syzbot can crash a host rather easily using a TBF + SFQ combination, with an STAB on SFQ [1]  We can\u0026apos;t support TCA_STAB on arbitrary level, this would require to maintain per-qdisc storage.  [1] [   88.796496] BUG: kernel NULL pointer dereference, address: 0000000000000000 [   88.798611] #PF: supervisor read access in kernel mode [   88.799014] #PF: error_code(0x0000) - not-present page [   88.799506] PGD 0 P4D 0 [   88.799829] Oops: Oops: 0000 [#1] SMP NOPTI [   88.800569] CPU: 14 UID: 0 PID: 2053 Comm: b371744477 Not tainted 6.12.0-rc1-virtme #1117 [   88.801107] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [   88.801779] RIP: 0010:sfq_dequeue (net/sched/sch_sfq.c:272 net/sched/sch_sfq.c:499) sch_sfq [ 88.802544] Code: 0f b7 50 12 48 8d 04 d5 00 00 00 00 48 89 d6 48 29 d0 48 8b 91 c0 01 00 00 48 c1 e0 03 48 01 c2 66 83 7a 1a 00 7e c0 48 8b 3a \u0026lt;4c\u0026gt; 8b 07 4c 89 02 49 89 50 08 48 c7 47 08 00 00 00 00 48 c7 07 00 All code ========    0: 0f b7 50 12           movzwl 0x12(%rax),%edx    4: 48 8d 04 d5 00 00 00  lea    0x0(,%rdx,8),%rax    b: 00    c: 48 89 d6              mov    %rdx,%rsi    f: 48 29 d0              sub    %rdx,%rax   12: 48 8b 91 c0 01 00 00  mov    0x1c0(%rcx),%rdx   19: 48 c1 e0 03           shl    $0x3,%rax   1d: 48 01 c2              add    %rax,%rdx   20: 66 83 7a 1a 00        cmpw   $0x0,0x1a(%rdx)   25: 7e c0                 jle    0xffffffffffffffe7   27: 48 8b 3a              mov    (%rdx),%rdi   2a:* 4c 8b 07              mov    (%rdi),%r8  \u0026lt;-- trapping instruction   2d: 4c 89 02              mov    %r8,(%rdx)   30: 49 89 50 08           mov    %rdx,0x8(%r8)   34: 48 c7 47 08 00 00 00  movq   $0x0,0x8(%rdi)   3b: 00   3c: 48                    rex.W   3d: c7                    .byte 0xc7   3e: 07                    (bad)  ...  Code starting with the faulting instruction ===========================================    0: 4c 8b 07              mov    (%rdi),%r8    3: 4c 89 02              mov    %r8,(%rdx)    6: 49 89 50 08           mov    %rdx,0x8(%r8)    a: 48 c7 47 08 00 00 00  movq   $0x0,0x8(%rdi)   11: 00   12: 48                    rex.W   13: c7                    .byte 0xc7   14: 07                    (bad)  ... [   88.803721] RSP: 0018:ffff9a1f892b7d58 EFLAGS: 00000206 [   88.804032] RAX: 0000000000000000 RBX: ffff9a1f8420c800 RCX: ffff9a1f8420c800 [   88.804560] RDX: ffff9a1f81bc1440 RSI: 0000000000000000 RDI: 0000000000000000 [   88.805056] RBP: ffffffffc04bb0e0 R08: 0000000000000001 R09: 00000000ff7f9a1f [   88.805473] R10: 000000000001001b R11: 0000000000009a1f R12: 0000000000000140 [   88.806194] R13: 0000000000000001 R14: ffff9a1f886df400 R15: ffff9a1f886df4ac [   88.806734] FS:  00007f445601a740(0000) GS:ffff9a2e7fd80000(0000) knlGS:0000000000000000 [   88.807225] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [   88.807672] CR2: 0000000000000000 CR3: 000000050cc46000 CR4: 00000000000006f0 [   88.808165] Call Trace: [   88.808459]  \u0026lt;TASK\u0026gt; [   88.808710] ? __die (arch/x86/kernel/dumpstack.c:421 arch/x86/kernel/dumpstack.c:434) [   88.809261] ? page_fault_oops (arch/x86/mm/fault.c:715) [   88.809561] ? exc_page_fault (./arch/x86/include/asm/irqflags.h:26 ./arch/x86/include/asm/irqflags.h:87 ./arch/x86/include/asm/irqflags.h:147 arch/x86/mm/fault.c:1489 arch/x86/mm/fault.c:1539) [   88.809806] ? asm_exc_page_fault (./arch/x86/include/asm/idtentry.h:623) [   88.810074] ? sfq_dequeue (net/sched/sch_sfq.c:272 net/sched/sch_sfq.c:499) sch_sfq [   88.810411] sfq_reset (net/sched/sch_sfq.c:525) sch_sfq [   88.810671] qdisc_reset (./include/linux/skbuff.h:2135 ./include/linux/skbuff.h:2441 ./include/linux/skbuff.h:3304 ./include/linux/skbuff.h:3310 net/sched/sch_g ---truncated---(CVE-2024-50039)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:  Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change  rfcomm_sk_state_change attempts to use sock_lock so it must never be called with it locked but rfcomm_sock_ioctl always attempt to lock it causing the following trace:  ====================================================== WARNING: possible circular locking dependency detected 6.8.0-syzkaller-08951-gfe46a7dd189e #0 Not tainted ------------------------------------------------------ syz-executor386/5093 is trying to acquire lock: ffff88807c396258 (sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM){+.+.}-{0:0}, at: lock_sock include/net/sock.h:1671 [inline] ffff88807c396258 (sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM){+.+.}-{0:0}, at: rfcomm_sk_state_change+0x5b/0x310 net/bluetooth/rfcomm/sock.c:73  but task is already holding lock: ffff88807badfd28 (\u0026amp;d-\u0026gt;lock){+.+.}-{3:3}, at: __rfcomm_dlc_close+0x226/0x6a0 net/bluetooth/rfcomm/core.c:491(CVE-2024-50044)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:  nvme-pci: fix race condition between reset and nvme_dev_disable()  nvme_dev_disable() modifies the dev-\u0026gt;online_queues field, therefore nvme_pci_update_nr_queues() should avoid racing against it, otherwise we could end up passing invalid values to blk_mq_update_nr_hw_queues().   WARNING: CPU: 39 PID: 61303 at drivers/pci/msi/api.c:347           pci_irq_get_affinity+0x187/0x210  Workqueue: nvme-reset-wq nvme_reset_work [nvme]  RIP: 0010:pci_irq_get_affinity+0x187/0x210  Call Trace:   \u0026lt;TASK\u0026gt;   ? blk_mq_pci_map_queues+0x87/0x3c0   ? pci_irq_get_affinity+0x187/0x210   blk_mq_pci_map_queues+0x87/0x3c0   nvme_pci_map_queues+0x189/0x460 [nvme]   blk_mq_update_nr_hw_queues+0x2a/0x40   nvme_reset_work+0x1be/0x2a0 [nvme]  Fix the bug by locking the shutdown_lock mutex before using dev-\u0026gt;online_queues. Give up if nvme_dev_disable() is running or if it has been executed already.(CVE-2024-50135)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:  Bluetooth: bnep: fix wild-memory-access in proto_unregister  There\u0026apos;s issue as follows:   KASAN: maybe wild-memory-access in range [0xdead...108-0xdead...10f]   CPU: 3 UID: 0 PID: 2805 Comm: rmmod Tainted: G        W   RIP: 0010:proto_unregister+0xee/0x400   Call Trace:    \u0026lt;TASK\u0026gt;    __do_sys_delete_module+0x318/0x580    do_syscall_64+0xc1/0x1d0    entry_SYSCALL_64_after_hwframe+0x77/0x7f  As bnep_init() ignore bnep_sock_init()\u0026apos;s return value, and bnep_sock_init() will cleanup all resource. Then when remove bnep module will call bnep_sock_cleanup() to cleanup sock\u0026apos;s resource. To solve above issue just return bnep_sock_init()\u0026apos;s return value in bnep_exit().(CVE-2024-50148)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:  net: systemport: fix potential memory leak in bcm_sysport_xmit()  The bcm_sysport_xmit() returns NETDEV_TX_OK without freeing skb in case of dma_map_single() fails, add dev_kfree_skb() to fix it.(CVE-2024-50171)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:  pinctrl: ocelot: fix system hang on level based interrupts  The current implementation only calls chained_irq_enter() and chained_irq_exit() if it detects pending interrupts.  ``` for (i = 0; i \u0026lt; info-\u0026gt;stride; i++) {  uregmap_read(info-\u0026gt;map, id_reg + 4 * i, \u0026amp;reg);  if (!reg)   continue;   chained_irq_enter(parent_chip, desc); ```  However, in case of GPIO pin configured in level mode and the parent controller configured in edge mode, GPIO interrupt might be lowered by the hardware. In the result, if the interrupt is short enough, the parent interrupt is still pending while the GPIO interrupt is cleared; chained_irq_enter() never gets called and the system hangs trying to service the parent interrupt.  Moving chained_irq_enter() and chained_irq_exit() outside the for loop ensures that they are called even when GPIO interrupt is lowered by the hardware.  The similar code with chained_irq_enter() / chained_irq_exit() functions wrapping interrupt checking loop may be found in many other drivers: ``` grep -r -A 10 chained_irq_enter drivers/pinctrl ```(CVE-2024-50196)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:  RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages  Avoid memory corruption while setting up Level-2 PBL pages for the non MR resources when num_pages \u0026gt; 256K.  There will be a single PDE page address (contiguous pages in the case of \u0026gt; PAGE_SIZE), but, current logic assumes multiple pages, leading to invalid memory access after 256K PBL entries in the PDE.(CVE-2024-50208)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:  RDMA/bnxt_re: Add a check for memory allocation  __alloc_pbl() can return error when memory allocation fails. Driver is not checking the status on one of the instances.(CVE-2024-50209)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:  wifi: iwlegacy: Clear stale interrupts before resuming device  iwl4965 fails upon resume from hibernation on my laptop. The reason seems to be a stale interrupt which isn\u0026apos;t being cleared out before interrupts are enabled. We end up with a race beween the resume trying to bring things back up, and the restart work (queued form the interrupt handler) trying to bring things down. Eventually the whole thing blows up.  Fix the problem by clearing out any stale interrupts before interrupts get enabled during resume.  Here\u0026apos;s a debug log of the indicent: [   12.042589] ieee80211 phy0: il_isr ISR inta 0x00000080, enabled 0xaa00008b, fh 0x00000000 [   12.042625] ieee80211 phy0: il4965_irq_tasklet inta 0x00000080, enabled 0x00000000, fh 0x00000000 [   12.042651] iwl4965 0000:10:00.0: RF_KILL bit toggled to enable radio. [   12.042653] iwl4965 0000:10:00.0: On demand firmware reload [   12.042690] ieee80211 phy0: il4965_irq_tasklet End inta 0x00000000, enabled 0xaa00008b, fh 0x00000000, flags 0x00000282 [   12.052207] ieee80211 phy0: il4965_mac_start enter [   12.052212] ieee80211 phy0: il_prep_station Add STA to driver ID 31: ff:ff:ff:ff:ff:ff [   12.052244] ieee80211 phy0: il4965_set_hw_ready hardware  ready [   12.052324] ieee80211 phy0: il_apm_init Init card\u0026apos;s basic functions [   12.052348] ieee80211 phy0: il_apm_init L1 Enabled; Disabling L0S [   12.055727] ieee80211 phy0: il4965_load_bsm Begin load bsm [   12.056140] ieee80211 phy0: il4965_verify_bsm Begin verify bsm [   12.058642] ieee80211 phy0: il4965_verify_bsm BSM bootstrap uCode image OK [   12.058721] ieee80211 phy0: il4965_load_bsm BSM write complete, poll 1 iterations [   12.058734] ieee80211 phy0: __il4965_up iwl4965 is coming up [   12.058737] ieee80211 phy0: il4965_mac_start Start UP work done. [   12.058757] ieee80211 phy0: __il4965_down iwl4965 is going down [   12.058761] ieee80211 phy0: il_scan_cancel_timeout Scan cancel timeout [   12.058762] ieee80211 phy0: il_do_scan_abort Not performing scan to abort [   12.058765] ieee80211 phy0: il_clear_ucode_stations Clearing ucode stations in driver [   12.058767] ieee80211 phy0: il_clear_ucode_stations No active stations found to be cleared [   12.058819] ieee80211 phy0: _il_apm_stop Stop card, put in low power state [   12.058827] ieee80211 phy0: _il_apm_stop_master stop master [   12.058864] ieee80211 phy0: il4965_clear_free_frames 0 frames on pre-allocated heap on clear. [   12.058869] ieee80211 phy0: Hardware restart was requested [   16.132299] iwl4965 0000:10:00.0: START_ALIVE timeout after 4000ms. [   16.132303] ------------[ cut here ]------------ [   16.132304] Hardware became unavailable upon resume. This could be a software issue prior to suspend or a hardware issue. [   16.132338] WARNING: CPU: 0 PID: 181 at net/mac80211/util.c:1826 ieee80211_reconfig+0x8f/0x14b0 [mac80211] [   16.132390] Modules linked in: ctr ccm sch_fq_codel xt_tcpudp xt_multiport xt_state iptable_filter iptable_nat nf_nat nf_conntrack nf_defrag_ipv4 ip_tables x_tables binfmt_misc joydev mousedev btusb btrtl btintel btbcm bluetooth ecdh_generic ecc iTCO_wdt i2c_dev iwl4965 iwlegacy coretemp snd_hda_codec_analog pcspkr psmouse mac80211 snd_hda_codec_generic libarc4 sdhci_pci cqhci sha256_generic sdhci libsha256 firewire_ohci snd_hda_intel snd_intel_dspcfg mmc_core snd_hda_codec snd_hwdep firewire_core led_class iosf_mbi snd_hda_core uhci_hcd lpc_ich crc_itu_t cfg80211 ehci_pci ehci_hcd snd_pcm usbcore mfd_core rfkill snd_timer snd usb_common soundcore video parport_pc parport intel_agp wmi intel_gtt backlight e1000e agpgart evdev [   16.132456] CPU: 0 UID: 0 PID: 181 Comm: kworker/u8:6 Not tainted 6.11.0-cl+ #143 [   16.132460] Hardware name: Hewlett-Packard HP Compaq 6910p/30BE, BIOS 68MCU Ver. F.19 07/06/2010 [   16.132463] Workqueue: async async_run_entry_fn [   16.132469] RIP: 0010:ieee80211_reconfig+0x8f/0x14b0 [mac80211] [   16.132501] Code: da 02 00 0 ---truncated---(CVE-2024-50234)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:  wifi: ath10k: Fix memory leak in management tx  In the current logic, memory is allocated for storing the MSDU context during management packet TX but this memory is not being freed during management TX completion. Similar leaks are seen in the management TX cleanup logic.  Kmemleak reports this problem as below,  unreferenced object 0xffffff80b64ed250 (size 16):   comm \u0026quot;kworker/u16:7\u0026quot;, pid 148, jiffies 4294687130 (age 714.199s)   hex dump (first 16 bytes):     00 2b d8 d8 80 ff ff ff c4 74 e9 fd 07 00 00 00  .+.......t......   backtrace:     [\u0026lt;ffffffe6e7b245dc\u0026gt;] __kmem_cache_alloc_node+0x1e4/0x2d8     [\u0026lt;ffffffe6e7adde88\u0026gt;] kmalloc_trace+0x48/0x110     [\u0026lt;ffffffe6bbd765fc\u0026gt;] ath10k_wmi_tlv_op_gen_mgmt_tx_send+0xd4/0x1d8 [ath10k_core]     [\u0026lt;ffffffe6bbd3eed4\u0026gt;] ath10k_mgmt_over_wmi_tx_work+0x134/0x298 [ath10k_core]     [\u0026lt;ffffffe6e78d5974\u0026gt;] process_scheduled_works+0x1ac/0x400     [\u0026lt;ffffffe6e78d60b8\u0026gt;] worker_thread+0x208/0x328     [\u0026lt;ffffffe6e78dc890\u0026gt;] kthread+0x100/0x1c0     [\u0026lt;ffffffe6e78166c0\u0026gt;] ret_from_fork+0x10/0x20  Free the memory during completion and cleanup to fix the leak.  Protect the mgmt_pending_tx idr_remove() operation in ath10k_wmi_tlv_op_cleanup_mgmt_tx_send() using ar-\u0026gt;data_lock similar to other instances.  Tested-on: WCN3990 hw1.0 SNOC WLAN.HL.2.0-01387-QCAHLSWMTPLZ-1(CVE-2024-50236)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:  sctp: properly validate chunk size in sctp_sf_ootb()  A size validation fix similar to that in Commit 50619dbf8db7 (\u0026quot;sctp: add size validation when walking chunks\u0026quot;) is also required in sctp_sf_ootb() to address a crash reported by syzbot:    BUG: KMSAN: uninit-value in sctp_sf_ootb+0x7f5/0xce0 net/sctp/sm_statefuns.c:3712   sctp_sf_ootb+0x7f5/0xce0 net/sctp/sm_statefuns.c:3712   sctp_do_sm+0x181/0x93d0 net/sctp/sm_sideeffect.c:1166   sctp_endpoint_bh_rcv+0xc38/0xf90 net/sctp/endpointola.c:407   sctp_inq_push+0x2ef/0x380 net/sctp/inqueue.c:88   sctp_rcv+0x3831/0x3b20 net/sctp/input.c:243   sctp4_rcv+0x42/0x50 net/sctp/protocol.c:1159   ip_protocol_deliver_rcu+0xb51/0x13d0 net/ipv4/ip_input.c:205   ip_local_deliver_finish+0x336/0x500 net/ipv4/ip_input.c:233(CVE-2024-50299)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:  wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()  1. The size of the response packet is not validated. 2. The response buffer is not freed.  Resolve these issues by switching to iwl_mvm_send_cmd_status(), which handles both size validation and frees the buffer.(CVE-2024-53059)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:  media: dvbdev: prevent the risk of out of memory access  The dvbdev contains a static variable used to store dvb minors.  The behavior of it depends if CONFIG_DVB_DYNAMIC_MINORS is set or not. When not set, dvb_register_device() won\u0026apos;t check for boundaries, as it will rely that a previous call to dvb_register_adapter() would already be enforcing it.  On a similar way, dvb_device_open() uses the assumption that the register functions already did the needed checks.  This can be fragile if some device ends using different calls. This also generate warnings on static check analysers like Coverity.  So, add explicit guards to prevent potential risk of OOM issues.(CVE-2024-53063)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:  NFSD: Never decrement pending_async_copies on error  The error flow in nfsd4_copy() calls cleanup_async_copy(), which already decrements nn-\u0026gt;pending_async_copies.(CVE-2024-53073)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:  afs: Fix lock recursion  afs_wake_up_async_call() can incur lock recursion.  The problem is that it is called from AF_RXRPC whilst holding the -\u0026gt;notify_lock, but it tries to take a ref on the afs_call struct in order to pass it to a work queue - but if the afs_call is already queued, we then have an extraneous ref that must be put... calling afs_put_call() may call back down into AF_RXRPC through rxrpc_kernel_shutdown_call(), however, which might try taking the -\u0026gt;notify_lock again.  This case isn\u0026apos;t very common, however, so defer it to a workqueue.  The oops looks something like:    BUG: spinlock recursion on CPU#0, krxrpcio/7001/1646    lock: 0xffff888141399b30, .magic: dead4ead, .owner: krxrpcio/7001/1646, .owner_cpu: 0   CPU: 0 UID: 0 PID: 1646 Comm: krxrpcio/7001 Not tainted 6.12.0-rc2-build3+ #4351   Hardware name: ASUS All Series/H97-PLUS, BIOS 2306 10/09/2014   Call Trace:    \u0026lt;TASK\u0026gt;    dump_stack_lvl+0x47/0x70    do_raw_spin_lock+0x3c/0x90    rxrpc_kernel_shutdown_call+0x83/0xb0    afs_put_call+0xd7/0x180    rxrpc_notify_socket+0xa0/0x190    rxrpc_input_split_jumbo+0x198/0x1d0    rxrpc_input_data+0x14b/0x1e0    ? rxrpc_input_call_packet+0xc2/0x1f0    rxrpc_input_call_event+0xad/0x6b0    rxrpc_input_packet_on_conn+0x1e1/0x210    rxrpc_input_packet+0x3f2/0x4d0    rxrpc_io_thread+0x243/0x410    ? __pfx_rxrpc_io_thread+0x10/0x10    kthread+0xcf/0xe0    ? __pfx_kthread+0x10/0x10    ret_from_fork+0x24/0x40    ? __pfx_kthread+0x10/0x10    ret_from_fork_asm+0x1a/0x30    \u0026lt;/TASK\u0026gt;(CVE-2024-53090)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:  bpf: Check validity of link-\u0026gt;type in bpf_link_show_fdinfo()  If a newly-added link type doesn\u0026apos;t invoke BPF_LINK_TYPE(), accessing bpf_link_type_strs[link-\u0026gt;type] may result in an out-of-bounds access.  To spot such missed invocations early in the future, checking the validity of link-\u0026gt;type in bpf_link_show_fdinfo() and emitting a warning when such invocations are missed.(CVE-2024-53099)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:  fs: Fix uninitialized value issue in from_kuid and from_kgid  ocfs2_setattr() uses attr-\u0026gt;ia_mode, attr-\u0026gt;ia_uid and attr-\u0026gt;ia_gid in a trace point even though ATTR_MODE, ATTR_UID and ATTR_GID aren\u0026apos;t set.  Initialize all fields of newattrs to avoid uninitialized variables, by checking if ATTR_MODE, ATTR_UID, ATTR_GID are initialized, otherwise 0.(CVE-2024-53101)","status":"published","published":"2024-12-06T11:08:00Z","modified":"2026-08-18T01:18:42.63232514Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:42.253598Z"},{"id":"OESA-2024-2522","title":"kernel security update","description":"The Linux Kernel, the operating system core itself.\r\n\r\nSecurity Fix(es):\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:\r\n\r\nKVM: SVM: WARN on vNMI + NMI window iff NMIs are outright masked\r\n\r\nWhen requesting an NMI window, WARN on vNMI support being enabled if and\nonly if NMIs are actually masked, i.e. if the vCPU is already handling an\nNMI.  KVM\u0026apos;s ABI for NMIs that arrive simultanesouly (from KVM\u0026apos;s point of\nview) is to inject one NMI and pend the other.  When using vNMI, KVM pends\nthe second NMI simply by setting V_NMI_PENDING, and lets the CPU do the\nrest (hardware automatically sets V_NMI_BLOCKING when an NMI is injected).\r\n\r\nHowever, if KVM can\u0026apos;t immediately inject an NMI, e.g. because the vCPU is\nin an STI shadow or is running with GIF=0, then KVM will request an NMI\nwindow and trigger the WARN (but still function correctly).\r\n\r\nWhether or not the GIF=0 case makes sense is debatable, as the intent of\nKVM\u0026apos;s behavior is to provide functionality that is as close to real\nhardware as possible.  E.g. if two NMIs are sent in quick succession, the\nprobability of both NMIs arriving in an STI shadow is infinitesimally low\non real hardware, but significantly larger in a virtual environment, e.g.\nif the vCPU is preempted in the STI shadow.  For GIF=0, the argument isn\u0026apos;t\nas clear cut, because the window where two NMIs can collide is much larger\nin bare metal (though still small).\r\n\r\nThat said, KVM should not have divergent behavior for the GIF=0 case based\non whether or not vNMI support is enabled.  And KVM has allowed\nsimultaneous NMIs with GIF=0 for over a decade, since commit 7460fb4a3400\n(\u0026quot;KVM: Fix simultaneous NMIs\u0026quot;).  I.e. KVM\u0026apos;s GIF=0 handling shouldn\u0026apos;t be\nmodified without a *really* good reason to do so, and if KVM\u0026apos;s behavior\nwere to be modified, it should be done irrespective of vNMI support.(CVE-2024-39483)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:\r\n\r\nserial: sc16is7xx: fix invalid FIFO access with special register set\r\n\r\nWhen enabling access to the special register set, Receiver time-out and\nRHR interrupts can happen. In this case, the IRQ handler will try to read\nfrom the FIFO thru the RHR register at address 0x00, but address 0x00 is\nmapped to DLL register, resulting in erroneous FIFO reading.\r\n\r\nCall graph example:\n    sc16is7xx_startup(): entry\n    sc16is7xx_ms_proc(): entry\n    sc16is7xx_set_termios(): entry\n    sc16is7xx_set_baud(): DLH/DLL = $009C --\u0026gt; access special register set\n    sc16is7xx_port_irq() entry            --\u0026gt; IIR is 0x0C\n    sc16is7xx_handle_rx() entry\n    sc16is7xx_fifo_read(): --\u0026gt; unable to access FIFO (RHR) because it is\n                               mapped to DLL (LCR=LCR_CONF_MODE_A)\n    sc16is7xx_set_baud(): exit --\u0026gt; Restore access to general register set\r\n\r\nFix the problem by claiming the efr_lock mutex when accessing the Special\nregister set.(CVE-2024-44950)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:\r\n\r\ns390/dasd: fix error recovery leading to data corruption on ESE devices\r\n\r\nExtent Space Efficient (ESE) or thin provisioned volumes need to be\nformatted on demand during usual IO processing.\r\n\r\nThe dasd_ese_needs_format function checks for error codes that signal\nthe non existence of a proper track format.\r\n\r\nThe check for incorrect length is to imprecise since other error cases\nleading to transport of insufficient data also have this flag set.\nThis might lead to data corruption in certain error cases for example\nduring a storage server warmstart.\r\n\r\nFix by removing the check for incorrect length and replacing by\nexplicitly checking for invalid track format in transport mode.\r\n\r\nAlso remove the check for file protected since this is not a valid\nESE handling case.(CVE-2024-45026)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:\r\n\r\ndrm/amd/display: Add missing NULL pointer check within dpcd_extend_address_range\r\n\r\n[Why \u0026amp; How]\nASSERT if return NULL from kcalloc.(CVE-2024-46808)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:\r\n\r\ndrm/amd/display: Check link_index before accessing dc-\u0026gt;links[]\r\n\r\n[WHY \u0026amp; HOW]\ndc-\u0026gt;links[] has max size of MAX_LINKS and NULL is return when trying to\naccess with out-of-bound index.\r\n\r\nThis fixes 3 OVERRUN and 1 RESOURCE_LEAK issues reported by Coverity.(CVE-2024-46813)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:\r\n\r\nwifi: iwlwifi: mvm: use IWL_FW_CHECK for link ID check\r\n\r\nThe lookup function iwl_mvm_rcu_fw_link_id_to_link_conf() is\nnormally called with input from the firmware, so it should use\nIWL_FW_CHECK() instead of WARN_ON().(CVE-2024-46825)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:  scsi: sd: Fix off-by-one error in sd_read_block_characteristics()  Ff the device returns page 0xb1 with length 8 (happens with qemu v2.x, for example), sd_read_block_characteristics() may attempt an out-of-bounds memory access when accessing the zoned field at offset 8.(CVE-2024-47682)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:  block, bfq: fix possible UAF for bfqq-\u0026gt;bic with merge chain  1) initial state, three tasks:    Process 1       Process 2 Process 3    (BIC1)          (BIC2)   (BIC3)     |  Λ            |  Λ    |  Λ     |  |            |  |    |  |     V  |            V  |    V  |     bfqq1           bfqq2    bfqq3 process ref:    1      1      1  2) bfqq1 merged to bfqq2:    Process 1       Process 2 Process 3    (BIC1)          (BIC2)   (BIC3)     |               |    |  Λ     \\--------------\\|    |  |                     V    V  |     bfqq1---------\u0026gt;bfqq2    bfqq3 process ref:    0      2      1  3) bfqq2 merged to bfqq3:    Process 1       Process 2 Process 3    (BIC1)          (BIC2)   (BIC3)   here -\u0026gt; Λ                |    |     \\--------------\\ \\-------------\\|                     V    V     bfqq1---------\u0026gt;bfqq2----------\u0026gt;bfqq3 process ref:    0      1      3  In this case, IO from Process 1 will get bfqq2 from BIC1 first, and then get bfqq3 through merge chain, and finially handle IO by bfqq3. Howerver, current code will think bfqq2 is owned by BIC1, like initial state, and set bfqq2-\u0026gt;bic to BIC1.  bfq_insert_request -\u0026gt; by Process 1  bfqq = bfq_init_rq(rq)   bfqq = bfq_get_bfqq_handle_split    bfqq = bic_to_bfqq    -\u0026gt; get bfqq2 from BIC1  bfqq-\u0026gt;ref++  rq-\u0026gt;elv.priv[0] = bic  rq-\u0026gt;elv.priv[1] = bfqq  if (bfqq_process_refs(bfqq) == 1)   bfqq-\u0026gt;bic = bic   -\u0026gt; record BIC1 to bfqq2    __bfq_insert_request    new_bfqq = bfq_setup_cooperator    -\u0026gt; get bfqq3 from bfqq2-\u0026gt;new_bfqq    bfqq_request_freed(bfqq)    new_bfqq-\u0026gt;ref++    rq-\u0026gt;elv.priv[1] = new_bfqq    -\u0026gt; handle IO by bfqq3  Fix the problem by checking bfqq is from merge chain fist. And this might fix a following problem reported by our syzkaller(unreproducible):  ================================================================== BUG: KASAN: slab-use-after-free in bfq_do_early_stable_merge block/bfq-iosched.c:5692 [inline] BUG: KASAN: slab-use-after-free in bfq_do_or_sched_stable_merge block/bfq-iosched.c:5805 [inline] BUG: KASAN: slab-use-after-free in bfq_get_queue+0x25b0/0x2610 block/bfq-iosched.c:5889 Write of size 1 at addr ffff888123839eb8 by task kworker/0:1H/18595  CPU: 0 PID: 18595 Comm: kworker/0:1H Tainted: G             L     6.6.0-07439-gba2303cacfda #6 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 Workqueue: kblockd blk_mq_requeue_work Call Trace:  \u0026lt;TASK\u0026gt;  __dump_stack lib/dump_stack.c:88 [inline]  dump_stack_lvl+0x91/0xf0 lib/dump_stack.c:106  print_address_description mm/kasan/report.c:364 [inline]  print_report+0x10d/0x610 mm/kasan/report.c:475  kasan_report+0x8e/0xc0 mm/kasan/report.c:588  bfq_do_early_stable_merge block/bfq-iosched.c:5692 [inline]  bfq_do_or_sched_stable_merge block/bfq-iosched.c:5805 [inline]  bfq_get_queue+0x25b0/0x2610 block/bfq-iosched.c:5889  bfq_get_bfqq_handle_split+0x169/0x5d0 block/bfq-iosched.c:6757  bfq_init_rq block/bfq-iosched.c:6876 [inline]  bfq_insert_request block/bfq-iosched.c:6254 [inline]  bfq_insert_requests+0x1112/0x5cf0 block/bfq-iosched.c:6304  blk_mq_insert_request+0x290/0x8d0 block/blk-mq.c:2593  blk_mq_requeue_work+0x6bc/0xa70 block/blk-mq.c:1502  process_one_work kernel/workqueue.c:2627 [inline]  process_scheduled_works+0x432/0x13f0 kernel/workqueue.c:2700  worker_thread+0x6f2/0x1160 kernel/workqueue.c:2781  kthread+0x33c/0x440 kernel/kthread.c:388  ret_from_fork+0x4d/0x80 arch/x86/kernel/process.c:147  ret_from_fork_asm+0x1b/0x30 arch/x86/entry/entry_64.S:305  \u0026lt;/TASK\u0026gt;  Allocated by task 20776:  kasan_save_stack+0x20/0x40 mm/kasan/common.c:45  kasan_set_track+0x25/0x30 mm/kasan/common.c:52  __kasan_slab_alloc+0x87/0x90 mm/kasan/common.c:328  kasan_slab_alloc include/linux/kasan.h:188 [inline]  slab_post_alloc_hook mm/slab.h:763 [inline]  slab_alloc_node mm/slub.c:3458 [inline]  kmem_cache_alloc_node+0x1a4/0x6f0 mm/slub.c:3503  ioc_create_icq block/blk-ioc.c:370 [inline] ---truncated---(CVE-2024-47706)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:  wifi: mt76: mt7996: use hweight16 to get correct tx antenna  The chainmask is u16 so using hweight8 cannot get correct tx_ant. Without this patch, the tx_ant of band 2 would be -1 and lead to the following issue: BUG: KASAN: stack-out-of-bounds in mt7996_mcu_add_sta+0x12e0/0x16e0 [mt7996e](CVE-2024-47714)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:  wifi: mt76: mt7915: fix oops on non-dbdc mt7986  mt7915_band_config() sets band_idx = 1 on the main phy for mt7986 with MT7975_ONE_ADIE or MT7976_ONE_ADIE.  Commit 0335c034e726 (\u0026quot;wifi: mt76: fix race condition related to checking tx queue fill status\u0026quot;) introduced a dereference of the phys array indirectly indexed by band_idx via wcid-\u0026gt;phy_idx in mt76_wcid_cleanup(). This caused the following Oops on affected mt7986 devices:   Unable to handle kernel read from unreadable memory at virtual address 0000000000000024  Mem abort info:    ESR = 0x0000000096000005    EC = 0x25: DABT (current EL), IL = 32 bits    SET = 0, FnV = 0    EA = 0, S1PTW = 0    FSC = 0x05: level 1 translation fault  Data abort info:    ISV = 0, ISS = 0x00000005    CM = 0, WnR = 0  user pgtable: 4k pages, 39-bit VAs, pgdp=0000000042545000  [0000000000000024] pgd=0000000000000000, p4d=0000000000000000, pud=0000000000000000  Internal error: Oops: 0000000096000005 [#1] SMP  Modules linked in: ... mt7915e mt76_connac_lib mt76 mac80211 cfg80211 ...  CPU: 2 PID: 1631 Comm: hostapd Not tainted 5.15.150 #0  Hardware name: ZyXEL EX5700 (Telenor) (DT)  pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)  pc : mt76_wcid_cleanup+0x84/0x22c [mt76]  lr : mt76_wcid_cleanup+0x64/0x22c [mt76]  sp : ffffffc00a803700  x29: ffffffc00a803700 x28: ffffff80008f7300 x27: ffffff80003f3c00  x26: ffffff80000a7880 x25: ffffffc008c26e00 x24: 0000000000000001  x23: ffffffc000a68114 x22: 0000000000000000 x21: ffffff8004172cc8  x20: ffffffc00a803748 x19: ffffff8004152020 x18: 0000000000000000  x17: 00000000000017c0 x16: ffffffc008ef5000 x15: 0000000000000be0  x14: ffffff8004172e28 x13: ffffff8004172e28 x12: 0000000000000000  x11: 0000000000000000 x10: ffffff8004172e30 x9 : ffffff8004172e28  x8 : 0000000000000000 x7 : ffffff8004156020 x6 : 0000000000000000  x5 : 0000000000000031 x4 : 0000000000000000 x3 : 0000000000000001  x2 : 0000000000000000 x1 : ffffff80008f7300 x0 : 0000000000000024  Call trace:   mt76_wcid_cleanup+0x84/0x22c [mt76]   __mt76_sta_remove+0x70/0xbc [mt76]   mt76_sta_state+0x8c/0x1a4 [mt76]   mt7915_eeprom_get_power_delta+0x11e4/0x23a0 [mt7915e]   drv_sta_state+0x144/0x274 [mac80211]   sta_info_move_state+0x1cc/0x2a4 [mac80211]   sta_set_sinfo+0xaf8/0xc24 [mac80211]   sta_info_destroy_addr_bss+0x4c/0x6c [mac80211]    ieee80211_color_change_finish+0x1c08/0x1e70 [mac80211]   cfg80211_check_station_change+0x1360/0x4710 [cfg80211]   genl_family_rcv_msg_doit+0xb4/0x110   genl_rcv_msg+0xd0/0x1bc   netlink_rcv_skb+0x58/0x120   genl_rcv+0x34/0x50   netlink_unicast+0x1f0/0x2ec   netlink_sendmsg+0x198/0x3d0   ____sys_sendmsg+0x1b0/0x210   ___sys_sendmsg+0x80/0xf0   __sys_sendmsg+0x44/0xa0   __arm64_sys_sendmsg+0x20/0x30   invoke_syscall.constprop.0+0x4c/0xe0   do_el0_svc+0x40/0xd0   el0_svc+0x14/0x4c   el0t_64_sync_handler+0x100/0x110   el0t_64_sync+0x15c/0x160  Code: d2800002 910092c0 52800023 f9800011 (885f7c01)  ---[ end trace 7e42dd9a39ed2281 ]---  Fix by using mt76_dev_phy() which will map band_idx to the correct phy for all hardware combinations.(CVE-2024-47715)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:  wifi: rtw88: always wait for both firmware loading attempts  In \u0026apos;rtw_wait_firmware_completion()\u0026apos;, always wait for both (regular and wowlan) firmware loading attempts. Otherwise if \u0026apos;rtw_usb_intf_init()\u0026apos; has failed in \u0026apos;rtw_usb_probe()\u0026apos;, \u0026apos;rtw_usb_disconnect()\u0026apos; may issue \u0026apos;ieee80211_free_hw()\u0026apos; when one of \u0026apos;rtw_load_firmware_cb()\u0026apos; (usually the wowlan one) is still in progress, causing UAF detected by KASAN.(CVE-2024-47718)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:  bonding: Fix unnecessary warnings and logs from bond_xdp_get_xmit_slave()  syzbot reported a WARNING in bond_xdp_get_xmit_slave. To reproduce this[1], one bond device (bond1) has xdpdrv, which increases bpf_master_redirect_enabled_key. Another bond device (bond0) which is unsupported by XDP but its slave (veth3) has xdpgeneric that returns XDP_TX. This triggers WARN_ON_ONCE() from the xdp_master_redirect(). To reduce unnecessary warnings and improve log management, we need to delete the WARN_ON_ONCE() and add ratelimit to the netdev_err().  [1] Steps to reproduce:     # Needs tx_xdp with return XDP_TX;     ip l add veth0 type veth peer veth1     ip l add veth3 type veth peer veth4     ip l add bond0 type bond mode 6 # BOND_MODE_ALB, unsupported by XDP     ip l add bond1 type bond # BOND_MODE_ROUNDROBIN by default     ip l set veth0 master bond1     ip l set bond1 up     # Increases bpf_master_redirect_enabled_key     ip l set dev bond1 xdpdrv object tx_xdp.o section xdp_tx     ip l set veth3 master bond0     ip l set bond0 up     ip l set veth4 up     # Triggers WARN_ON_ONCE() from the xdp_master_redirect()     ip l set veth3 xdpgeneric object tx_xdp.o section xdp_tx(CVE-2024-47734)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:  f2fs: Require FMODE_WRITE for atomic write ioctls  The F2FS ioctls for starting and committing atomic writes check for inode_owner_or_capable(), but this does not give LSMs like SELinux or Landlock an opportunity to deny the write access - if the caller\u0026apos;s FSUID matches the inode\u0026apos;s UID, inode_owner_or_capable() immediately returns true.  There are scenarios where LSMs want to deny a process the ability to write particular files, even files that the FSUID of the process owns; but this can currently partially be bypassed using atomic write ioctls in two ways:   - F2FS_IOC_START_ATOMIC_REPLACE + F2FS_IOC_COMMIT_ATOMIC_WRITE can    truncate an inode to size 0  - F2FS_IOC_START_ATOMIC_WRITE + F2FS_IOC_ABORT_ATOMIC_WRITE can revert    changes another process concurrently made to a file  Fix it by requiring FMODE_WRITE for these operations, just like for F2FS_IOC_MOVE_RANGE. Since any legitimate caller should only be using these ioctls when intending to write into the file, that seems unlikely to break anything.(CVE-2024-47740)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:  RDMA/hns: Fix Use-After-Free of rsv_qp on HIP08  Currently rsv_qp is freed before ib_unregister_device() is called on HIP08. During the time interval, users can still dereg MR and rsv_qp will be used in this process, leading to a UAF. Move the release of rsv_qp after calling ib_unregister_device() to fix it.(CVE-2024-47750)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:  media: mediatek: vcodec: Fix H264 multi stateless decoder smatch warning  Fix a smatch static checker warning on vdec_h264_req_multi_if.c. Which leads to a kernel crash when fb is NULL.(CVE-2024-47754)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:  tpm: Clean up TPM space after command failure  tpm_dev_transmit prepares the TPM space before attempting command transmission. However if the command fails no rollback of this preparation is done. This can result in transient handles being leaked if the device is subsequently closed with no further commands performed.  Fix this by flushing the space in the event of command transmission failure.(CVE-2024-49851)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:  bpf: Fix helper writes to read-only maps  Lonial found an issue that despite user- and BPF-side frozen BPF map (like in case of .rodata), it was still possible to write into it from a BPF program side through specific helpers having ARG_PTR_TO_{LONG,INT} as arguments.  In check_func_arg() when the argument is as mentioned, the meta-\u0026gt;raw_mode is never set. Later, check_helper_mem_access(), under the case of PTR_TO_MAP_VALUE as register base type, it assumes BPF_READ for the subsequent call to check_map_access_type() and given the BPF map is read-only it succeeds.  The helpers really need to be annotated as ARG_PTR_TO_{LONG,INT} | MEM_UNINIT when results are written into them as opposed to read out of them. The latter indicates that it\u0026apos;s okay to pass a pointer to uninitialized memory as the memory is written to anyway.  However, ARG_PTR_TO_{LONG,INT} is a special case of ARG_PTR_TO_FIXED_SIZE_MEM just with additional alignment requirement. So it is better to just get rid of the ARG_PTR_TO_{LONG,INT} special cases altogether and reuse the fixed size memory types. For this, add MEM_ALIGNED to additionally ensure alignment given these helpers write directly into the args via *\u0026lt;ptr\u0026gt; = val. The .arg*_size has been initialized reflecting the actual sizeof(*\u0026lt;ptr\u0026gt;).  MEM_ALIGNED can only be used in combination with MEM_FIXED_SIZE annotated argument types, since in !MEM_FIXED_SIZE cases the verifier does not know the buffer size a priori and therefore cannot blindly write *\u0026lt;ptr\u0026gt; = val.(CVE-2024-49861)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:  drm/amd/pm: ensure the fw_info is not null before using it  This resolves the dereference null return value warning reported by Coverity.(CVE-2024-49890)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:  scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths  When the HBA is undergoing a reset or is handling an errata event, NULL ptr dereference crashes may occur in routines such as lpfc_sli_flush_io_rings(), lpfc_dev_loss_tmo_callbk(), or lpfc_abort_handler().  Add NULL ptr checks before dereferencing hdwq pointers that may have been freed due to operations colliding with a reset or errata event handler.(CVE-2024-49891)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:  drm/amd/display: Check null pointers before using dc-\u0026gt;clk_mgr  [WHY \u0026amp; HOW] dc-\u0026gt;clk_mgr is null checked previously in the same function, indicating it might be null.  Passing \u0026quot;dc\u0026quot; to \u0026quot;dc-\u0026gt;hwss.apply_idle_power_optimizations\u0026quot;, which dereferences null \u0026quot;dc-\u0026gt;clk_mgr\u0026quot;. (The function pointer resolves to \u0026quot;dcn35_apply_idle_power_optimizations\u0026quot;.)  This fixes 1 FORWARD_NULL issue reported by Coverity.(CVE-2024-49907)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:  wifi: iwlwifi: mvm: avoid NULL pointer dereference  iwl_mvm_tx_skb_sta() and iwl_mvm_tx_mpdu() verify that the mvmvsta pointer is not NULL. It retrieves this pointer using iwl_mvm_sta_from_mac80211, which is dereferencing the ieee80211_sta pointer. If sta is NULL, iwl_mvm_sta_from_mac80211 will dereference a NULL pointer. Fix this by checking the sta pointer before retrieving the mvmsta from it. If sta is not NULL, then mvmsta isn\u0026apos;t either.(CVE-2024-49929)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:  aoe: fix the potential use-after-free problem in more places  For fixing CVE-2023-6270, f98364e92662 (\u0026quot;aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts\u0026quot;) makes tx() calling dev_put() instead of doing in aoecmd_cfg_pkts(). It avoids that the tx() runs into use-after-free.  Then Nicolai Stange found more places in aoe have potential use-after-free problem with tx(). e.g. revalidate(), aoecmd_ata_rw(), resend(), probe() and aoecmd_cfg_rsp(). Those functions also use aoenet_xmit() to push packet to tx queue. So they should also use dev_hold() to increase the refcnt of skb-\u0026gt;dev.  On the other hand, moving dev_put() to tx() causes that the refcnt of skb-\u0026gt;dev be reduced to a negative value, because corresponding dev_hold() are not called in revalidate(), aoecmd_ata_rw(), resend(), probe(), and aoecmd_cfg_rsp(). This patch fixed this issue.(CVE-2024-49982)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:  net/mlx5: Fix error path in multi-packet WQE transmit  Remove the erroneous unmap in case no DMA mapping was established  The multi-packet WQE transmit code attempts to obtain a DMA mapping for the skb. This could fail, e.g. under memory pressure, when the IOMMU driver just can\u0026apos;t allocate more memory for page tables. While the code tries to handle this in the path below the err_unmap label it erroneously unmaps one entry from the sq\u0026apos;s FIFO list of active mappings. Since the current map attempt failed this unmap is removing some random DMA mapping that might still be required. If the PCI function now presents that IOVA, the IOMMU may assumes a rogue DMA access and e.g. on s390 puts the PCI function in error state.  The erroneous behavior was seen in a stress-test environment that created memory pressure.(CVE-2024-50001)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:  exec: don\u0026apos;t WARN for racy path_noexec check  Both i_mode and noexec checks wrapped in WARN_ON stem from an artifact of the previous implementation. They used to legitimately check for the condition, but that got moved up in two commits: 633fb6ac3980 (\u0026quot;exec: move S_ISREG() check earlier\u0026quot;) 0fd338b2d2cd (\u0026quot;exec: move path_noexec() check earlier\u0026quot;)  Instead of being removed said checks are WARN_ON\u0026apos;ed instead, which has some debug value.  However, the spurious path_noexec check is racy, resulting in unwarranted warnings should someone race with setting the noexec flag.  One can note there is more to perm-checking whether execve is allowed and none of the conditions are guaranteed to still hold after they were tested for.  Additionally this does not validate whether the code path did any perm checking to begin with -- it will pass if the inode happens to be regular.  Keep the redundant path_noexec() check even though it\u0026apos;s mindless nonsense checking for guarantee that isn\u0026apos;t given so drop the WARN.  Reword the commentary and do small tidy ups while here.  [brauner: keep redundant path_noexec() check](CVE-2024-50010)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:  net: phy: Remove LED entry from LEDs list on unregister  Commit c938ab4da0eb (\u0026quot;net: phy: Manual remove LEDs to ensure correct ordering\u0026quot;) correctly fixed a problem with using devm_ but missed removing the LED entry from the LEDs list.  This cause kernel panic on specific scenario where the port for the PHY is torn down and up and the kmod for the PHY is removed.  On setting the port down the first time, the assosiacted LEDs are correctly unregistered. The associated kmod for the PHY is now removed. The kmod is now added again and the port is now put up, the associated LED are registered again. On putting the port down again for the second time after these step, the LED list now have 4 elements. With the first 2 already unregistered previously and the 2 new one registered again.  This cause a kernel panic as the first 2 element should have been removed.  Fix this by correctly removing the element when LED is unregistered.(CVE-2024-50023)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:  Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change  rfcomm_sk_state_change attempts to use sock_lock so it must never be called with it locked but rfcomm_sock_ioctl always attempt to lock it causing the following trace:  ====================================================== WARNING: possible circular locking dependency detected 6.8.0-syzkaller-08951-gfe46a7dd189e #0 Not tainted ------------------------------------------------------ syz-executor386/5093 is trying to acquire lock: ffff88807c396258 (sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM){+.+.}-{0:0}, at: lock_sock include/net/sock.h:1671 [inline] ffff88807c396258 (sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM){+.+.}-{0:0}, at: rfcomm_sk_state_change+0x5b/0x310 net/bluetooth/rfcomm/sock.c:73  but task is already holding lock: ffff88807badfd28 (\u0026amp;d-\u0026gt;lock){+.+.}-{3:3}, at: __rfcomm_dlc_close+0x226/0x6a0 net/bluetooth/rfcomm/core.c:491(CVE-2024-50044)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:  fbcon: Fix a NULL pointer dereference issue in fbcon_putcs  syzbot has found a NULL pointer dereference bug in fbcon. Here is the simplified C reproducer:  struct param {  uint8_t type;  struct tiocl_selection ts; };  int main() {  struct fb_con2fbmap con2fb;  struct param param;   int fd = open(\u0026quot;/dev/fb1\u0026quot;, 0, 0);   con2fb.console = 0x19;  con2fb.framebuffer = 0;  ioctl(fd, FBIOPUT_CON2FBMAP, \u0026amp;con2fb);   param.type = 2;  param.ts.xs = 0; param.ts.ys = 0;  param.ts.xe = 0; param.ts.ye = 0;  param.ts.sel_mode = 0;   int fd1 = open(\u0026quot;/dev/tty1\u0026quot;, O_RDWR, 0);  ioctl(fd1, TIOCLINUX, \u0026amp;param);   con2fb.console = 1;  con2fb.framebuffer = 0;  ioctl(fd, FBIOPUT_CON2FBMAP, \u0026amp;con2fb);   return 0; }  After calling ioctl(fd1, TIOCLINUX, \u0026amp;param), the subsequent ioctl(fd, FBIOPUT_CON2FBMAP, \u0026amp;con2fb) causes the kernel to follow a different execution path:   set_con2fb_map   -\u0026gt; con2fb_init_display    -\u0026gt; fbcon_set_disp     -\u0026gt; redraw_screen      -\u0026gt; hide_cursor       -\u0026gt; clear_selection        -\u0026gt; highlight         -\u0026gt; invert_screen          -\u0026gt; do_update_region           -\u0026gt; fbcon_putcs            -\u0026gt; ops-\u0026gt;putcs  Since ops-\u0026gt;putcs is a NULL pointer, this leads to a kernel panic. To prevent this, we need to call set_blitting_type() within set_con2fb_map() to properly initialize ops-\u0026gt;putcs.(CVE-2024-50048)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:  Bluetooth: Call iso_exit() on module unload  If iso_init() has been called, iso_exit() must be called on module unload. Without that, the struct proto that iso_init() registered with proto_register() becomes invalid, which could cause unpredictable problems later. In my case, with CONFIG_LIST_HARDENED and CONFIG_BUG_ON_DATA_CORRUPTION enabled, loading the module again usually triggers this BUG():    list_add corruption. next-\u0026gt;prev should be prev (ffffffffb5355fd0),     but was 0000000000000068. (next=ffffffffc0a010d0).   ------------[ cut here ]------------   kernel BUG at lib/list_debug.c:29!   Oops: invalid opcode: 0000 [#1] PREEMPT SMP PTI   CPU: 1 PID: 4159 Comm: modprobe Not tainted 6.10.11-4+bt2-ao-desktop #1   RIP: 0010:__list_add_valid_or_report+0x61/0xa0   ...     __list_add_valid_or_report+0x61/0xa0     proto_register+0x299/0x320     hci_sock_init+0x16/0xc0 [bluetooth]     bt_init+0x68/0xd0 [bluetooth]     __pfx_bt_init+0x10/0x10 [bluetooth]     do_one_initcall+0x80/0x2f0     do_init_module+0x8b/0x230     __do_sys_init_module+0x15f/0x190     do_syscall_64+0x68/0x110   ...(CVE-2024-50078)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:  ksmbd: fix user-after-free from session log off  There is racy issue between smb2 session log off and smb2 session setup. It will cause user-after-free from session log off. This add session_lock when setting SMB2_SESSION_EXPIRED and referece count to session struct not to free session while it is being used.(CVE-2024-50086)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:  iommu/vt-d: Fix incorrect pci_for_each_dma_alias() for non-PCI devices  Previously, the domain_context_clear() function incorrectly called pci_for_each_dma_alias() to set up context entries for non-PCI devices. This could lead to kernel hangs or other unexpected behavior.  Add a check to only call pci_for_each_dma_alias() for PCI devices. For non-PCI devices, domain_context_clear_one() is called directly.(CVE-2024-50101)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:  drm/amd/display: Disable PSR-SU on Parade 08-01 TCON too  Stuart Hayhurst has found that both at bootup and fullscreen VA-API video is leading to black screens for around 1 second and kernel WARNING [1] traces when calling dmub_psr_enable() with Parade 08-01 TCON.  These symptoms all go away with PSR-SU disabled for this TCON, so disable it for now while DMUB traces [2] from the failure can be analyzed and the failure state properly root caused.  (cherry picked from commit afb634a6823d8d9db23c5fb04f79c5549349628b)(CVE-2024-50108)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:  net: sched: use RCU read-side critical section in taprio_dump()  Fix possible use-after-free in \u0026apos;taprio_dump()\u0026apos; by adding RCU read-side critical section there. Never seen on x86 but found on a KASAN-enabled arm64 system when investigating https://syzkaller.appspot.com/bug?extid=b65e0af58423fc8a73aa:  [T15862] BUG: KASAN: slab-use-after-free in taprio_dump+0xa0c/0xbb0 [T15862] Read of size 4 at addr ffff0000d4bb88f8 by task repro/15862 [T15862] [T15862] CPU: 0 UID: 0 PID: 15862 Comm: repro Not tainted 6.11.0-rc1-00293-gdefaf1a2113a-dirty #2 [T15862] Hardware name: QEMU QEMU Virtual Machine, BIOS edk2-20240524-5.fc40 05/24/2024 [T15862] Call trace: [T15862]  dump_backtrace+0x20c/0x220 [T15862]  show_stack+0x2c/0x40 [T15862]  dump_stack_lvl+0xf8/0x174 [T15862]  print_report+0x170/0x4d8 [T15862]  kasan_report+0xb8/0x1d4 [T15862]  __asan_report_load4_noabort+0x20/0x2c [T15862]  taprio_dump+0xa0c/0xbb0 [T15862]  tc_fill_qdisc+0x540/0x1020 [T15862]  qdisc_notify.isra.0+0x330/0x3a0 [T15862]  tc_modify_qdisc+0x7b8/0x1838 [T15862]  rtnetlink_rcv_msg+0x3c8/0xc20 [T15862]  netlink_rcv_skb+0x1f8/0x3d4 [T15862]  rtnetlink_rcv+0x28/0x40 [T15862]  netlink_unicast+0x51c/0x790 [T15862]  netlink_sendmsg+0x79c/0xc20 [T15862]  __sock_sendmsg+0xe0/0x1a0 [T15862]  ____sys_sendmsg+0x6c0/0x840 [T15862]  ___sys_sendmsg+0x1ac/0x1f0 [T15862]  __sys_sendmsg+0x110/0x1d0 [T15862]  __arm64_sys_sendmsg+0x74/0xb0 [T15862]  invoke_syscall+0x88/0x2e0 [T15862]  el0_svc_common.constprop.0+0xe4/0x2a0 [T15862]  do_el0_svc+0x44/0x60 [T15862]  el0_svc+0x50/0x184 [T15862]  el0t_64_sync_handler+0x120/0x12c [T15862]  el0t_64_sync+0x190/0x194 [T15862] [T15862] Allocated by task 15857: [T15862]  kasan_save_stack+0x3c/0x70 [T15862]  kasan_save_track+0x20/0x3c [T15862]  kasan_save_alloc_info+0x40/0x60 [T15862]  __kasan_kmalloc+0xd4/0xe0 [T15862]  __kmalloc_cache_noprof+0x194/0x334 [T15862]  taprio_change+0x45c/0x2fe0 [T15862]  tc_modify_qdisc+0x6a8/0x1838 [T15862]  rtnetlink_rcv_msg+0x3c8/0xc20 [T15862]  netlink_rcv_skb+0x1f8/0x3d4 [T15862]  rtnetlink_rcv+0x28/0x40 [T15862]  netlink_unicast+0x51c/0x790 [T15862]  netlink_sendmsg+0x79c/0xc20 [T15862]  __sock_sendmsg+0xe0/0x1a0 [T15862]  ____sys_sendmsg+0x6c0/0x840 [T15862]  ___sys_sendmsg+0x1ac/0x1f0 [T15862]  __sys_sendmsg+0x110/0x1d0 [T15862]  __arm64_sys_sendmsg+0x74/0xb0 [T15862]  invoke_syscall+0x88/0x2e0 [T15862]  el0_svc_common.constprop.0+0xe4/0x2a0 [T15862]  do_el0_svc+0x44/0x60 [T15862]  el0_svc+0x50/0x184 [T15862]  el0t_64_sync_handler+0x120/0x12c [T15862]  el0t_64_sync+0x190/0x194 [T15862] [T15862] Freed by task 6192: [T15862]  kasan_save_stack+0x3c/0x70 [T15862]  kasan_save_track+0x20/0x3c [T15862]  kasan_save_free_info+0x4c/0x80 [T15862]  poison_slab_object+0x110/0x160 [T15862]  __kasan_slab_free+0x3c/0x74 [T15862]  kfree+0x134/0x3c0 [T15862]  taprio_free_sched_cb+0x18c/0x220 [T15862]  rcu_core+0x920/0x1b7c [T15862]  rcu_core_si+0x10/0x1c [T15862]  handle_softirqs+0x2e8/0xd64 [T15862]  __do_softirq+0x14/0x20(CVE-2024-50126)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:  net: sched: fix use-after-free in taprio_change()  In \u0026apos;taprio_change()\u0026apos;, \u0026apos;admin\u0026apos; pointer may become dangling due to sched switch / removal caused by \u0026apos;advance_sched()\u0026apos;, and critical section protected by \u0026apos;q-\u0026gt;current_entry_lock\u0026apos; is too small to prevent from such a scenario (which causes use-after-free detected by KASAN). Fix this by prefer \u0026apos;rcu_replace_pointer()\u0026apos; over \u0026apos;rcu_assign_pointer()\u0026apos; to update \u0026apos;admin\u0026apos; immediately before an attempt to schedule freeing.(CVE-2024-50127)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:  net: wwan: fix global oob in wwan_rtnl_policy  The variable wwan_rtnl_link_ops assign a *bigger* maxtype which leads to a global out-of-bounds read when parsing the netlink attributes. Exactly same bug cause as the oob fixed in commit b33fb5b801c6 (\u0026quot;net: qualcomm: rmnet: fix global oob in rmnet_policy\u0026quot;).  ================================================================== BUG: KASAN: global-out-of-bounds in validate_nla lib/nlattr.c:388 [inline] BUG: KASAN: global-out-of-bounds in __nla_validate_parse+0x19d7/0x29a0 lib/nlattr.c:603 Read of size 1 at addr ffffffff8b09cb60 by task syz.1.66276/323862  CPU: 0 PID: 323862 Comm: syz.1.66276 Not tainted 6.1.70 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.13.0-1ubuntu1.1 04/01/2014 Call Trace:  \u0026lt;TASK\u0026gt;  __dump_stack lib/dump_stack.c:88 [inline]  dump_stack_lvl+0x177/0x231 lib/dump_stack.c:106  print_address_description mm/kasan/report.c:284 [inline]  print_report+0x14f/0x750 mm/kasan/report.c:395  kasan_report+0x139/0x170 mm/kasan/report.c:495  validate_nla lib/nlattr.c:388 [inline]  __nla_validate_parse+0x19d7/0x29a0 lib/nlattr.c:603  __nla_parse+0x3c/0x50 lib/nlattr.c:700  nla_parse_nested_deprecated include/net/netlink.h:1269 [inline]  __rtnl_newlink net/core/rtnetlink.c:3514 [inline]  rtnl_newlink+0x7bc/0x1fd0 net/core/rtnetlink.c:3623  rtnetlink_rcv_msg+0x794/0xef0 net/core/rtnetlink.c:6122  netlink_rcv_skb+0x1de/0x420 net/netlink/af_netlink.c:2508  netlink_unicast_kernel net/netlink/af_netlink.c:1326 [inline]  netlink_unicast+0x74b/0x8c0 net/netlink/af_netlink.c:1352  netlink_sendmsg+0x882/0xb90 net/netlink/af_netlink.c:1874  sock_sendmsg_nosec net/socket.c:716 [inline]  __sock_sendmsg net/socket.c:728 [inline]  ____sys_sendmsg+0x5cc/0x8f0 net/socket.c:2499  ___sys_sendmsg+0x21c/0x290 net/socket.c:2553  __sys_sendmsg net/socket.c:2582 [inline]  __do_sys_sendmsg net/socket.c:2591 [inline]  __se_sys_sendmsg+0x19e/0x270 net/socket.c:2589  do_syscall_x64 arch/x86/entry/common.c:51 [inline]  do_syscall_64+0x45/0x90 arch/x86/entry/common.c:81  entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7f67b19a24ad RSP: 002b:00007f67b17febb8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 00007f67b1b45f80 RCX: 00007f67b19a24ad RDX: 0000000000000000 RSI: 0000000020005e40 RDI: 0000000000000004 RBP: 00007f67b1a1e01d R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffd2513764f R14: 00007ffd251376e0 R15: 00007f67b17fed40  \u0026lt;/TASK\u0026gt;  The buggy address belongs to the variable:  wwan_rtnl_policy+0x20/0x40  The buggy address belongs to the physical page: page:ffffea00002c2700 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0xb09c flags: 0xfff00000001000(reserved|node=0|zone=1|lastcpupid=0x7ff) raw: 00fff00000001000 ffffea00002c2708 ffffea00002c2708 0000000000000000 raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 page dumped because: kasan: bad access detected page_owner info is not present (never set?)  Memory state around the buggy address:  ffffffff8b09ca00: 05 f9 f9 f9 05 f9 f9 f9 00 01 f9 f9 00 01 f9 f9  ffffffff8b09ca80: 00 00 00 05 f9 f9 f9 f9 00 00 03 f9 f9 f9 f9 f9 \u0026gt;ffffffff8b09cb00: 00 00 00 00 05 f9 f9 f9 00 00 00 00 f9 f9 f9 f9                                                        ^  ffffffff8b09cb80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ==================================================================  According to the comment of `nla_parse_nested_deprecated`, use correct size `IFLA_WWAN_MAX` here to fix this issue.(CVE-2024-50128)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:  netfilter: bpf: must hold reference on net namespace  BUG: KASAN: slab-use-after-free in __nf_unregister_net_hook+0x640/0x6b0 Read of size 8 at addr ffff8880106fe400 by task repro/72= bpf_nf_link_release+0xda/0x1e0 bpf_link_free+0x139/0x2d0 bpf_link_release+0x68/0x80 __fput+0x414/0xb60  Eric says:  It seems that bpf was able to defer the __nf_unregister_net_hook()  after exit()/close() time.  Perhaps a netns reference is missing, because the netns has been  dismantled/freed already.  bpf_nf_link_attach() does :  link-\u0026gt;net = net;  But I do not see a reference being taken on net.  Add such a reference and release it after hook unreg. Note that I was unable to get syzbot reproducer to work, so I do not know if this resolves this splat.(CVE-2024-50130)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:  nvme-pci: fix race condition between reset and nvme_dev_disable()  nvme_dev_disable() modifies the dev-\u0026gt;online_queues field, therefore nvme_pci_update_nr_queues() should avoid racing against it, otherwise we could end up passing invalid values to blk_mq_update_nr_hw_queues().   WARNING: CPU: 39 PID: 61303 at drivers/pci/msi/api.c:347           pci_irq_get_affinity+0x187/0x210  Workqueue: nvme-reset-wq nvme_reset_work [nvme]  RIP: 0010:pci_irq_get_affinity+0x187/0x210  Call Trace:   \u0026lt;TASK\u0026gt;   ? blk_mq_pci_map_queues+0x87/0x3c0   ? pci_irq_get_affinity+0x187/0x210   blk_mq_pci_map_queues+0x87/0x3c0   nvme_pci_map_queues+0x189/0x460 [nvme]   blk_mq_update_nr_hw_queues+0x2a/0x40   nvme_reset_work+0x1be/0x2a0 [nvme]  Fix the bug by locking the shutdown_lock mutex before using dev-\u0026gt;online_queues. Give up if nvme_dev_disable() is running or if it has been executed already.(CVE-2024-50135)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:  reset: starfive: jh71x0: Fix accessing the empty member on JH7110 SoC  data-\u0026gt;asserted will be NULL on JH7110 SoC since commit 82327b127d41 (\u0026quot;reset: starfive: Add StarFive JH7110 reset driver\u0026quot;) was added. Add the judgment condition to avoid errors when calling reset_control_status on JH7110 SoC.(CVE-2024-50137)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:  KVM: arm64: Fix shift-out-of-bounds bug  Fix a shift-out-of-bounds bug reported by UBSAN when running VM with MTE enabled host kernel.  UBSAN: shift-out-of-bounds in arch/arm64/kvm/sys_regs.c:1988:14 shift exponent 33 is too large for 32-bit type \u0026apos;int\u0026apos; CPU: 26 UID: 0 PID: 7629 Comm: qemu-kvm Not tainted 6.12.0-rc2 #34 Hardware name: IEI NF5280R7/Mitchell MB, BIOS 00.00. 2024-10-12 09:28:54 10/14/2024 Call trace:  dump_backtrace+0xa0/0x128  show_stack+0x20/0x38  dump_stack_lvl+0x74/0x90  dump_stack+0x18/0x28  __ubsan_handle_shift_out_of_bounds+0xf8/0x1e0  reset_clidr+0x10c/0x1c8  kvm_reset_sys_regs+0x50/0x1c8  kvm_reset_vcpu+0xec/0x2b0  __kvm_vcpu_set_target+0x84/0x158  kvm_vcpu_set_target+0x138/0x168  kvm_arch_vcpu_ioctl_vcpu_init+0x40/0x2b0  kvm_arch_vcpu_ioctl+0x28c/0x4b8  kvm_vcpu_ioctl+0x4bc/0x7a8  __arm64_sys_ioctl+0xb4/0x100  invoke_syscall+0x70/0x100  el0_svc_common.constprop.0+0x48/0xf0  do_el0_svc+0x24/0x38  el0_svc+0x3c/0x158  el0t_64_sync_handler+0x120/0x130  el0t_64_sync+0x194/0x198(CVE-2024-50139)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:  usb: typec: altmode should keep reference to parent  The altmode device release refers to its parent device, but without keeping a reference to it.  When registering the altmode, get a reference to the parent and put it in the release function.  Before this fix, when using CONFIG_DEBUG_KOBJECT_RELEASE, we see issues like this:  [   43.572860] kobject: \u0026apos;port0.0\u0026apos; (ffff8880057ba008): kobject_release, parent 0000000000000000 (delayed 3000) [   43.573532] kobject: \u0026apos;port0.1\u0026apos; (ffff8880057bd008): kobject_release, parent 0000000000000000 (delayed 1000) [   43.574407] kobject: \u0026apos;port0\u0026apos; (ffff8880057b9008): kobject_release, parent 0000000000000000 (delayed 3000) [   43.575059] kobject: \u0026apos;port1.0\u0026apos; (ffff8880057ca008): kobject_release, parent 0000000000000000 (delayed 4000) [   43.575908] kobject: \u0026apos;port1.1\u0026apos; (ffff8880057c9008): kobject_release, parent 0000000000000000 (delayed 4000) [   43.576908] kobject: \u0026apos;typec\u0026apos; (ffff8880062dbc00): kobject_release, parent 0000000000000000 (delayed 4000) [   43.577769] kobject: \u0026apos;port1\u0026apos; (ffff8880057bf008): kobject_release, parent 0000000000000000 (delayed 3000) [   46.612867] ================================================================== [   46.613402] BUG: KASAN: slab-use-after-free in typec_altmode_release+0x38/0x129 [   46.614003] Read of size 8 at addr ffff8880057b9118 by task kworker/2:1/48 [   46.614538] [   46.614668] CPU: 2 UID: 0 PID: 48 Comm: kworker/2:1 Not tainted 6.12.0-rc1-00138-gedbae730ad31 #535 [   46.615391] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.15.0-1 04/01/2014 [   46.616042] Workqueue: events kobject_delayed_cleanup [   46.616446] Call Trace: [   46.616648]  \u0026lt;TASK\u0026gt; [   46.616820]  dump_stack_lvl+0x5b/0x7c [   46.617112]  ? typec_altmode_release+0x38/0x129 [   46.617470]  print_report+0x14c/0x49e [   46.617769]  ? rcu_read_unlock_sched+0x56/0x69 [   46.618117]  ? __virt_addr_valid+0x19a/0x1ab [   46.618456]  ? kmem_cache_debug_flags+0xc/0x1d [   46.618807]  ? typec_altmode_release+0x38/0x129 [   46.619161]  kasan_report+0x8d/0xb4 [   46.619447]  ? typec_altmode_release+0x38/0x129 [   46.619809]  ? process_scheduled_works+0x3cb/0x85f [   46.620185]  typec_altmode_release+0x38/0x129 [   46.620537]  ? process_scheduled_works+0x3cb/0x85f [   46.620907]  device_release+0xaf/0xf2 [   46.621206]  kobject_delayed_cleanup+0x13b/0x17a [   46.621584]  process_scheduled_works+0x4f6/0x85f [   46.621955]  ? __pfx_process_scheduled_works+0x10/0x10 [   46.622353]  ? hlock_class+0x31/0x9a [   46.622647]  ? lock_acquired+0x361/0x3c3 [   46.622956]  ? move_linked_works+0x46/0x7d [   46.623277]  worker_thread+0x1ce/0x291 [   46.623582]  ? __kthread_parkme+0xc8/0xdf [   46.623900]  ? __pfx_worker_thread+0x10/0x10 [   46.624236]  kthread+0x17e/0x190 [   46.624501]  ? kthread+0xfb/0x190 [   46.624756]  ? __pfx_kthread+0x10/0x10 [   46.625015]  ret_from_fork+0x20/0x40 [   46.625268]  ? __pfx_kthread+0x10/0x10 [   46.625532]  ret_from_fork_asm+0x1a/0x30 [   46.625805]  \u0026lt;/TASK\u0026gt; [   46.625953] [   46.626056] Allocated by task 678: [   46.626287]  kasan_save_stack+0x24/0x44 [   46.626555]  kasan_save_track+0x14/0x2d [   46.626811]  __kasan_kmalloc+0x3f/0x4d [   46.627049]  __kmalloc_noprof+0x1bf/0x1f0 [   46.627362]  typec_register_port+0x23/0x491 [   46.627698]  cros_typec_probe+0x634/0xbb6 [   46.628026]  platform_probe+0x47/0x8c [   46.628311]  really_probe+0x20a/0x47d [   46.628605]  device_driver_attach+0x39/0x72 [   46.628940]  bind_store+0x87/0xd7 [   46.629213]  kernfs_fop_write_iter+0x1aa/0x218 [   46.629574]  vfs_write+0x1d6/0x29b [   46.629856]  ksys_write+0xcd/0x13b [   46.630128]  do_syscall_64+0xd4/0x139 [   46.630420]  entry_SYSCALL_64_after_hwframe+0x76/0x7e [   46.630820] [   46.630946] Freed by task 48: [   46.631182]  kasan_save_stack+0x24/0x44 [   46.631493]  kasan_save_track+0x14/0x2d [   46.631799]  kasan_save_free_info+0x3f/0x4d [   46.632144]  __kasan_slab_free+0x37/0x45 [   46.632474] ---truncated---(CVE-2024-50150)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:  netdevsim: use cond_resched() in nsim_dev_trap_report_work()  I am still seeing many syzbot reports hinting that syzbot might fool nsim_dev_trap_report_work() with hundreds of ports [1]  Lets use cond_resched(), and system_unbound_wq instead of implicit system_wq.  [1] INFO: task syz-executor:20633 blocked for more than 143 seconds.       Not tainted 6.12.0-rc2-syzkaller-00205-g1d227fcc7222 #0 \u0026quot;echo 0 \u0026gt; /proc/sys/kernel/hung_task_timeout_secs\u0026quot; disables this message. task:syz-executor    state:D stack:25856 pid:20633 tgid:20633 ppid:1      flags:0x00004006 ... NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 16760 Comm: kworker/1:0 Not tainted 6.12.0-rc2-syzkaller-00205-g1d227fcc7222 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 Workqueue: events nsim_dev_trap_report_work  RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70 kernel/kcov.c:210 Code: 89 fb e8 23 00 00 00 48 8b 3d 04 fb 9c 0c 48 89 de 5b e9 c3 c7 5d 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 \u0026lt;f3\u0026gt; 0f 1e fa 48 8b 04 24 65 48 8b 0c 25 c0 d7 03 00 65 8b 15 60 f0 RSP: 0018:ffffc90000a187e8 EFLAGS: 00000246 RAX: 0000000000000100 RBX: ffffc90000a188e0 RCX: ffff888027d3bc00 RDX: ffff888027d3bc00 RSI: 0000000000000000 RDI: 0000000000000000 RBP: ffff88804a2e6000 R08: ffffffff8a4bc495 R09: ffffffff89da3577 R10: 0000000000000004 R11: ffffffff8a4bc2b0 R12: dffffc0000000000 R13: ffff88806573b503 R14: dffffc0000000000 R15: ffff8880663cca00 FS:  0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fc90a747f98 CR3: 000000000e734000 CR4: 00000000003526f0 DR0: 0000000000000000 DR1: 000000000000002b DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 Call Trace:  \u0026lt;NMI\u0026gt;  \u0026lt;/NMI\u0026gt;  \u0026lt;TASK\u0026gt;   __local_bh_enable_ip+0x1bb/0x200 kernel/softirq.c:382   spin_unlock_bh include/linux/spinlock.h:396 [inline]   nsim_dev_trap_report drivers/net/netdevsim/dev.c:820 [inline]   nsim_dev_trap_report_work+0x75d/0xaa0 drivers/net/netdevsim/dev.c:850   process_one_work kernel/workqueue.c:3229 [inline]   process_scheduled_works+0xa63/0x1850 kernel/workqueue.c:3310   worker_thread+0x870/0xd30 kernel/workqueue.c:3391   kthread+0x2f0/0x390 kernel/kthread.c:389   ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147   ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244  \u0026lt;/TASK\u0026gt;(CVE-2024-50155)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:  RDMA/bnxt_re: Fix out of bound check  Driver exports pacing stats only on GenP5 and P7 adapters. But while parsing the pacing stats, driver has a check for \u0026quot;rdev-\u0026gt;dbr_pacing\u0026quot;.  This caused a trace when KASAN is enabled.  BUG: KASAN: slab-out-of-bounds in bnxt_re_get_hw_stats+0x2b6a/0x2e00 [bnxt_re] Write of size 8 at addr ffff8885942a6340 by task modprobe/4809(CVE-2024-50158)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:  bpf: Make sure internal and UAPI bpf_redirect flags don\u0026apos;t overlap  The bpf_redirect_info is shared between the SKB and XDP redirect paths, and the two paths use the same numeric flag values in the ri-\u0026gt;flags field (specifically, BPF_F_BROADCAST == BPF_F_NEXTHOP). This means that if skb bpf_redirect_neigh() is used with a non-NULL params argument and, subsequently, an XDP redirect is performed using the same bpf_redirect_info struct, the XDP path will get confused and end up crashing, which syzbot managed to trigger.  With the stack-allocated bpf_redirect_info, the structure is no longer shared between the SKB and XDP paths, so the crash doesn\u0026apos;t happen anymore. However, different code paths using identically-numbered flag values in the same struct field still seems like a bit of a mess, so this patch cleans that up by moving the flag definitions together and redefining the three flags in BPF_F_REDIRECT_INTERNAL to not overlap with the flags used for XDP. It also adds a BUILD_BUG_ON() check to make sure the overlap is not re-introduced by mistake.(CVE-2024-50163)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:  bpf: Fix overloading of MEM_UNINIT\u0026apos;s meaning  Lonial reported an issue in the BPF verifier where check_mem_size_reg() has the following code:      if (!tnum_is_const(reg-\u0026gt;var_off))         /* For unprivileged variable accesses, disable raw          * mode so that the program is required to          * initialize all the memory that the helper could          * just partially fill up.          */          meta = NULL;  This means that writes are not checked when the register containing the size of the passed buffer has not a fixed size. Through this bug, a BPF program can write to a map which is marked as read-only, for example, .rodata global maps.  The problem is that MEM_UNINIT\u0026apos;s initial meaning that \u0026quot;the passed buffer to the BPF helper does not need to be initialized\u0026quot; which was added back in commit 435faee1aae9 (\u0026quot;bpf, verifier: add ARG_PTR_TO_RAW_STACK type\u0026quot;) got overloaded over time with \u0026quot;the passed buffer is being written to\u0026quot;.  The problem however is that checks such as the above which were added later via 06c1c049721a (\u0026quot;bpf: allow helpers access to variable memory\u0026quot;) set meta to NULL in order force the user to always initialize the passed buffer to the helper. Due to the current double meaning of MEM_UNINIT, this bypasses verifier write checks to the memory (not boundary checks though) and only assumes the latter memory is read instead.  Fix this by reverting MEM_UNINIT back to its original meaning, and having MEM_WRITE as an annotation to BPF helpers in order to then trigger the BPF verifier checks for writing to memory.  Some notes: check_arg_pair_ok() ensures that for ARG_CONST_SIZE{,_OR_ZERO} we can access fn-\u0026gt;arg_type[arg - 1] since it must contain a preceding ARG_PTR_TO_MEM. For check_mem_reg() the meta argument can be removed altogether since we do check both BPF_READ and BPF_WRITE. Same for the equivalent check_kfunc_mem_size_reg().(CVE-2024-50164)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:  drm/vc4: Stop the active perfmon before being destroyed  Upon closing the file descriptor, the active performance monitor is not stopped. Although all perfmons are destroyed in `vc4_perfmon_close_file()`, the active performance monitor\u0026apos;s pointer (`vc4-\u0026gt;active_perfmon`) is still retained.  If we open a new file descriptor and submit a few jobs with performance monitors, the driver will attempt to stop the active performance monitor using the stale pointer in `vc4-\u0026gt;active_perfmon`. However, this pointer is no longer valid because the previous process has already terminated, and all performance monitors associated with it have been destroyed and freed.  To fix this, when the active performance monitor belongs to a given process, explicitly stop it before destroying and freeing it.(CVE-2024-50187)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:  net: phy: dp83869: fix memory corruption when enabling fiber  When configuring the fiber port, the DP83869 PHY driver incorrectly calls linkmode_set_bit() with a bit mask (1 \u0026lt;\u0026lt; 10) rather than a bit number (10). This corrupts some other memory location -- in case of arm64 the priv pointer in the same structure.  Since the advertising flags are updated from supported at the end of the function the incorrect line isn\u0026apos;t needed at all and can be removed.(CVE-2024-50188)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:  pinctrl: ocelot: fix system hang on level based interrupts  The current implementation only calls chained_irq_enter() and chained_irq_exit() if it detects pending interrupts.  ``` for (i = 0; i \u0026lt; info-\u0026gt;stride; i++) {  uregmap_read(info-\u0026gt;map, id_reg + 4 * i, \u0026amp;reg);  if (!reg)   continue;   chained_irq_enter(parent_chip, desc); ```  However, in case of GPIO pin configured in level mode and the parent controller configured in edge mode, GPIO interrupt might be lowered by the hardware. In the result, if the interrupt is short enough, the parent interrupt is still pending while the GPIO interrupt is cleared; chained_irq_enter() never gets called and the system hangs trying to service the parent interrupt.  Moving chained_irq_enter() and chained_irq_exit() outside the for loop ensures that they are called even when GPIO interrupt is lowered by the hardware.  The similar code with chained_irq_enter() / chained_irq_exit() functions wrapping interrupt checking loop may be found in many other drivers: ``` grep -r -A 10 chained_irq_enter drivers/pinctrl ```(CVE-2024-50196)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:  drm/radeon: Fix encoder-\u0026gt;possible_clones  Include the encoder itself in its possible_clones bitmask. In the past nothing validated that drivers were populating possible_clones correctly, but that changed in commit 74d2aacbe840 (\u0026quot;drm: Validate encoder-\u0026gt;possible_clones\u0026quot;). Looks like radeon never got the memo and is still not following the rules 100% correctly.  This results in some warnings during driver initialization: Bogus possible_clones: [ENCODER:46:TV-46] possible_clones=0x4 (full encoder mask=0x7) WARNING: CPU: 0 PID: 170 at drivers/gpu/drm/drm_mode_config.c:615 drm_mode_config_validate+0x113/0x39c ...  (cherry picked from commit 3b6e7d40649c0d75572039aff9d0911864c689db)(CVE-2024-50201)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:  udf: refactor inode_bmap() to handle error  Refactor inode_bmap() to handle error since udf_next_aext() can return error now. On situations like ftruncate, udf_extend_file() can now detect errors and bail out early without resorting to checking for particular offsets and assuming internal behavior of these functions.(CVE-2024-50211)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:  ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow  Syzbot reported a kernel BUG in ocfs2_truncate_inline.  There are two reasons for this: first, the parameter value passed is greater than ocfs2_max_inline_data_with_xattr, second, the start and end parameters of ocfs2_truncate_inline are \u0026quot;unsigned int\u0026quot;.  So, we need to add a sanity check for byte_start and byte_len right before ocfs2_truncate_inline() in ocfs2_remove_inode_range(), if they are greater than ocfs2_max_inline_data_with_xattr return -EINVAL.(CVE-2024-50218)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:  iov_iter: fix copy_page_from_iter_atomic() if KMAP_LOCAL_FORCE_MAP  generic/077 on x86_32 CONFIG_DEBUG_KMAP_LOCAL_FORCE_MAP=y with highmem, on huge=always tmpfs, issues a warning and then hangs (interruptibly):  WARNING: CPU: 5 PID: 3517 at mm/highmem.c:622 kunmap_local_indexed+0x62/0xc9 CPU: 5 UID: 0 PID: 3517 Comm: cp Not tainted 6.12.0-rc4 #2 ... copy_page_from_iter_atomic+0xa6/0x5ec generic_perform_write+0xf6/0x1b4 shmem_file_write_iter+0x54/0x67  Fix copy_page_from_iter_atomic() by limiting it in that case (include/linux/skbuff.h skb_frag_must_loop() does similar).  But going forward, perhaps CONFIG_DEBUG_KMAP_LOCAL_FORCE_MAP is too surprising, has outlived its usefulness, and should just be removed?(CVE-2024-50222)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:  cxl/port: Fix use-after-free, permit out-of-order decoder shutdown  In support of investigating an initialization failure report [1], cxl_test was updated to register mock memory-devices after the mock root-port/bus device had been registered. That led to cxl_test crashing with a use-after-free bug with the following signature:      cxl_port_attach_region: cxl region3: cxl_host_bridge.0:port3 decoder3.0 add: mem0:decoder7.0 @ 0 next: cxl_switch_uport.0 nr_eps: 1 nr_targets: 1     cxl_port_attach_region: cxl region3: cxl_host_bridge.0:port3 decoder3.0 add: mem4:decoder14.0 @ 1 next: cxl_switch_uport.0 nr_eps: 2 nr_targets: 1     cxl_port_setup_targets: cxl region3: cxl_switch_uport.0:port6 target[0] = cxl_switch_dport.0 for mem0:decoder7.0 @ 0 1)  cxl_port_setup_targets: cxl region3: cxl_switch_uport.0:port6 target[1] = cxl_switch_dport.4 for mem4:decoder14.0 @ 1     [..]     cxld_unregister: cxl decoder14.0:     cxl_region_decode_reset: cxl_region region3:     mock_decoder_reset: cxl_port port3: decoder3.0 reset 2)  mock_decoder_reset: cxl_port port3: decoder3.0: out of order reset, expected decoder3.1     cxl_endpoint_decoder_release: cxl decoder14.0:     [..]     cxld_unregister: cxl decoder7.0: 3)  cxl_region_decode_reset: cxl_region region3:     Oops: general protection fault, probably for non-canonical address 0x6b6b6b6b6b6b6bc3: 0000 [#1] PREEMPT SMP PTI     [..]     RIP: 0010:to_cxl_port+0x8/0x60 [cxl_core]     [..]     Call Trace:      \u0026lt;TASK\u0026gt;      cxl_region_decode_reset+0x69/0x190 [cxl_core]      cxl_region_detach+0xe8/0x210 [cxl_core]      cxl_decoder_kill_region+0x27/0x40 [cxl_core]      cxld_unregister+0x5d/0x60 [cxl_core]  At 1) a region has been established with 2 endpoint decoders (7.0 and 14.0). Those endpoints share a common switch-decoder in the topology (3.0). At teardown, 2), decoder14.0 is the first to be removed and hits the \u0026quot;out of order reset case\u0026quot; in the switch decoder. The effect though is that region3 cleanup is aborted leaving it in-tact and referencing decoder14.0. At 3) the second attempt to teardown region3 trips over the stale decoder14.0 object which has long since been deleted.  The fix here is to recognize that the CXL specification places no mandate on in-order shutdown of switch-decoders, the driver enforces in-order allocation, and hardware enforces in-order commit. So, rather than fail and leave objects dangling, always remove them.  In support of making cxl_region_decode_reset() always succeed, cxl_region_invalidate_memregion() failures are turned into warnings. Crashing the kernel is ok there since system integrity is at risk if caches cannot be managed around physical address mutation events like CXL region destruction.  A new device_for_each_child_reverse_from() is added to cleanup port-\u0026gt;commit_end after all dependent decoders have been disabled. In other words if decoders are allocated 0-\u0026gt;1-\u0026gt;2 and disabled 1-\u0026gt;2-\u0026gt;0 then port-\u0026gt;commit_end only decrements from 2 after 2 has been disabled, and it decrements all the way to zero since 1 was disabled previously.(CVE-2024-50226)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:  nilfs2: fix potential deadlock with newly created symlinks  Syzbot reported that page_symlink(), called by nilfs_symlink(), triggers memory reclamation involving the filesystem layer, which can result in circular lock dependencies among the reader/writer semaphore nilfs-\u0026gt;ns_segctor_sem, s_writers percpu_rwsem (intwrite) and the fs_reclaim pseudo lock.  This is because after commit 21fc61c73c39 (\u0026quot;don\u0026apos;t put symlink bodies in pagecache into highmem\u0026quot;), the gfp flags of the page cache for symbolic links are overwritten to GFP_KERNEL via inode_nohighmem().  This is not a problem for symlinks read from the backing device, because the __GFP_FS flag is dropped after inode_nohighmem() is called.  However, when a new symlink is created with nilfs_symlink(), the gfp flags remain overwritten to GFP_KERNEL.  Then, memory allocation called from page_symlink() etc.  triggers memory reclamation including the FS layer, which may call nilfs_evict_inode() or nilfs_dirty_inode().  And these can cause a deadlock if they are called while nilfs-\u0026gt;ns_segctor_sem is held:  Fix this issue by dropping the __GFP_FS flag from the page cache GFP flags of newly created symlinks in the same way that nilfs_new_inode() and __nilfs_read_inode() do, as a workaround until we adopt nofs allocation scope consistently or improve the locking constraints.(CVE-2024-50229)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:  wifi: cfg80211: clear wdev-\u0026gt;cqm_config pointer on free  When we free wdev-\u0026gt;cqm_config when unregistering, we also need to clear out the pointer since the same wdev/netdev may get re-registered in another network namespace, then destroyed later, running this code again, which results in a double-free.(CVE-2024-50235)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:  netdevsim: Add trailing zero to terminate the string in nsim_nexthop_bucket_activity_write()  This was found by a static analyzer. We should not forget the trailing zero after copy_from_user() if we will further do some string operations, sscanf() in this case. Adding a trailing zero will ensure that the function performs properly.(CVE-2024-50259)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:  macsec: Fix use-after-free while sending the offloading packet  KASAN reports the following UAF. The metadata_dst, which is used to store the SCI value for macsec offload, is already freed by metadata_dst_free() in macsec_free_netdev(), while driver still use it for sending the packet.  To fix this issue, dst_release() is used instead to release metadata_dst. So it is not freed instantly in macsec_free_netdev() if still referenced by skb.   BUG: KASAN: slab-use-after-free in mlx5e_xmit+0x1e8f/0x4190 [mlx5_core]  Read of size 2 at addr ffff88813e42e038 by task kworker/7:2/714  [...]  Workqueue: mld mld_ifc_work  Call Trace:   \u0026lt;TASK\u0026gt;   dump_stack_lvl+0x51/0x60   print_report+0xc1/0x600   kasan_report+0xab/0xe0   mlx5e_xmit+0x1e8f/0x4190 [mlx5_core]   dev_hard_start_xmit+0x120/0x530   sch_direct_xmit+0x149/0x11e0   __qdisc_run+0x3ad/0x1730   __dev_queue_xmit+0x1196/0x2ed0   vlan_dev_hard_start_xmit+0x32e/0x510 [8021q]   dev_hard_start_xmit+0x120/0x530   __dev_queue_xmit+0x14a7/0x2ed0   macsec_start_xmit+0x13e9/0x2340   dev_hard_start_xmit+0x120/0x530   __dev_queue_xmit+0x14a7/0x2ed0   ip6_finish_output2+0x923/0x1a70   ip6_finish_output+0x2d7/0x970   ip6_output+0x1ce/0x3a0   NF_HOOK.constprop.0+0x15f/0x190   mld_sendpack+0x59a/0xbd0   mld_ifc_work+0x48a/0xa80   process_one_work+0x5aa/0xe50   worker_thread+0x79c/0x1290   kthread+0x28f/0x350   ret_from_fork+0x2d/0x70   ret_from_fork_asm+0x11/0x20   \u0026lt;/TASK\u0026gt;   Allocated by task 3922:   kasan_save_stack+0x20/0x40   kasan_save_track+0x10/0x30   __kasan_kmalloc+0x77/0x90   __kmalloc_noprof+0x188/0x400   metadata_dst_alloc+0x1f/0x4e0   macsec_newlink+0x914/0x1410   __rtnl_newlink+0xe08/0x15b0   rtnl_newlink+0x5f/0x90   rtnetlink_rcv_msg+0x667/0xa80   netlink_rcv_skb+0x12c/0x360   netlink_unicast+0x551/0x770   netlink_sendmsg+0x72d/0xbd0   __sock_sendmsg+0xc5/0x190   ____sys_sendmsg+0x52e/0x6a0   ___sys_sendmsg+0xeb/0x170   __sys_sendmsg+0xb5/0x140   do_syscall_64+0x4c/0x100   entry_SYSCALL_64_after_hwframe+0x4b/0x53   Freed by task 4011:   kasan_save_stack+0x20/0x40   kasan_save_track+0x10/0x30   kasan_save_free_info+0x37/0x50   poison_slab_object+0x10c/0x190   __kasan_slab_free+0x11/0x30   kfree+0xe0/0x290   macsec_free_netdev+0x3f/0x140   netdev_run_todo+0x450/0xc70   rtnetlink_rcv_msg+0x66f/0xa80   netlink_rcv_skb+0x12c/0x360   netlink_unicast+0x551/0x770   netlink_sendmsg+0x72d/0xbd0   __sock_sendmsg+0xc5/0x190   ____sys_sendmsg+0x52e/0x6a0   ___sys_sendmsg+0xeb/0x170   __sys_sendmsg+0xb5/0x140   do_syscall_64+0x4c/0x100   entry_SYSCALL_64_after_hwframe+0x4b/0x53(CVE-2024-50261)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:  vsock/virtio: Initialization of the dangling pointer occurring in vsk-\u0026gt;trans  During loopback communication, a dangling pointer can be created in vsk-\u0026gt;trans, potentially leading to a Use-After-Free condition.  This issue is resolved by initializing vsk-\u0026gt;trans to NULL.(CVE-2024-50264)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:  dm cache: fix potential out-of-bounds access on the first resume  Out-of-bounds access occurs if the fast device is expanded unexpectedly before the first-time resume of the cache table. This happens because expanding the fast device requires reloading the cache table for cache_create to allocate new in-core data structures that fit the new size, and the check in cache_preresume is not performed during the first resume, leading to the issue.  Reproduce steps:  1. prepare component devices:  dmsetup create cmeta --table \u0026quot;0 8192 linear /dev/sdc 0\u0026quot; dmsetup create cdata --table \u0026quot;0 65536 linear /dev/sdc 8192\u0026quot; dmsetup create corig --table \u0026quot;0 524288 linear /dev/sdc 262144\u0026quot; dd if=/dev/zero of=/dev/mapper/cmeta bs=4k count=1 oflag=direct  2. load a cache table of 512 cache blocks, and deliberately expand the    fast device before resuming the cache, making the in-core data    structures inadequate.  dmsetup create cache --notable dmsetup reload cache --table \u0026quot;0 524288 cache /dev/mapper/cmeta \\ /dev/mapper/cdata /dev/mapper/corig 128 2 metadata2 writethrough smq 0\u0026quot; dmsetup reload cdata --table \u0026quot;0 131072 linear /dev/sdc 8192\u0026quot; dmsetup resume cdata dmsetup resume cache  3. suspend the cache to write out the in-core dirty bitset and hint    array, leading to out-of-bounds access to the dirty bitset at offset    0x40:  dmsetup suspend cache  KASAN reports:    BUG: KASAN: vmalloc-out-of-bounds in is_dirty_callback+0x2b/0x80   Read of size 8 at addr ffffc90000085040 by task dmsetup/90    (...snip...)   The buggy address belongs to the virtual mapping at    [ffffc90000085000, ffffc90000087000) created by:    cache_ctr+0x176a/0x35f0    (...snip...)   Memory state around the buggy address:    ffffc90000084f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8    ffffc90000084f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8   \u0026gt;ffffc90000085000: 00 00 00 00 00 00 00 00 f8 f8 f8 f8 f8 f8 f8 f8                                              ^    ffffc90000085080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8    ffffc90000085100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8  Fix by checking the size change on the first resume.(CVE-2024-50278)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:  drm/amdgpu: add missing size check in amdgpu_debugfs_gprwave_read()  Avoid a possible buffer overflow if size is larger than 4K.  (cherry picked from commit f5d873f5825b40d886d03bd2aede91d4cf002434)(CVE-2024-50282)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:  ksmbd: check outstanding simultaneous SMB operations  If Client send simultaneous SMB operations to ksmbd, It exhausts too much memory through the \u0026quot;ksmbd_work_cache”. It will cause OOM issue. ksmbd has a credit mechanism but it can\u0026apos;t handle this problem. This patch add the check if it exceeds max credits to prevent this problem by assuming that one smb request consumes at least one credit.(CVE-2024-50285)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:  ksmbd: fix slab-use-after-free in ksmbd_smb2_session_create  There is a race condition between ksmbd_smb2_session_create and ksmbd_expire_session. This patch add missing sessions_table_lock while adding/deleting session from global session table.(CVE-2024-50286)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:  regulator: rtq2208: Fix uninitialized use of regulator_config  Fix rtq2208 driver uninitialized use to cause kernel error.(CVE-2024-50300)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:  ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_init_flow()  There are code paths from which the function is called without holding the RCU read lock, resulting in a suspicious RCU usage warning [1].  Fix by using l3mdev_master_upper_ifindex_by_index() which will acquire the RCU read lock before calling l3mdev_master_upper_ifindex_by_index_rcu().  [1] WARNING: suspicious RCU usage 6.12.0-rc3-custom-gac8f72681cf2 #141 Not tainted ----------------------------- net/core/dev.c:876 RCU-list traversed in non-reader section!!  other info that might help us debug this:  rcu_scheduler_active = 2, debug_locks = 1 1 lock held by ip/361:  #0: ffffffff86fc7cb0 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x377/0xf60  stack backtrace: CPU: 3 UID: 0 PID: 361 Comm: ip Not tainted 6.12.0-rc3-custom-gac8f72681cf2 #141 Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 Call Trace:  \u0026lt;TASK\u0026gt;  dump_stack_lvl+0xba/0x110  lockdep_rcu_suspicious.cold+0x4f/0xd6  dev_get_by_index_rcu+0x1d3/0x210  l3mdev_master_upper_ifindex_by_index_rcu+0x2b/0xf0  ip_tunnel_bind_dev+0x72f/0xa00  ip_tunnel_newlink+0x368/0x7a0  ipgre_newlink+0x14c/0x170  __rtnl_newlink+0x1173/0x19c0  rtnl_newlink+0x6c/0xa0  rtnetlink_rcv_msg+0x3cc/0xf60  netlink_rcv_skb+0x171/0x450  netlink_unicast+0x539/0x7f0  netlink_sendmsg+0x8c1/0xd80  ____sys_sendmsg+0x8f9/0xc20  ___sys_sendmsg+0x197/0x1e0  __sys_sendmsg+0x122/0x1f0  do_syscall_64+0xbb/0x1d0  entry_SYSCALL_64_after_hwframe+0x77/0x7f(CVE-2024-53042)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:  wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()  1. The size of the response packet is not validated. 2. The response buffer is not freed.  Resolve these issues by switching to iwl_mvm_send_cmd_status(), which handles both size validation and frees the buffer.(CVE-2024-53059)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:  drm/amdgpu: prevent NULL pointer dereference if ATIF is not supported  acpi_evaluate_object() may return AE_NOT_FOUND (failure), which would result in dereferencing buffer.pointer (obj) while being NULL.  Although this case may be unrealistic for the current code, it is still better to protect against possible bugs.  Bail out also when status is AE_NOT_FOUND.  This fixes 1 FORWARD_NULL issue reported by Coverity Report: CID 1600951:  Null pointer dereferences  (FORWARD_NULL)  (cherry picked from commit 91c9e221fe2553edf2db71627d8453f083de87a1)(CVE-2024-53060)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:  NFSD: Never decrement pending_async_copies on error  The error flow in nfsd4_copy() calls cleanup_async_copy(), which already decrements nn-\u0026gt;pending_async_copies.(CVE-2024-53073)\r\n\r\nIn the Linux kernel, the following vulnerability has been resolved:  afs: Fix lock recursion  afs_wake_up_async_call() can incur lock recursion.  The problem is that it is called from AF_RXRPC whilst holding the -\u0026gt;notify_lock, but it tries to take a ref on the afs_call struct in order to pass it to a work queue - but if the afs_call is already queued, we then have an extraneous ref that must be put... calling afs_put_call() may call back down into AF_RXRPC through rxrpc_kernel_shutdown_call(), however, which might try taking the -\u0026gt;notify_lock again.  This case isn\u0026apos;t very common, however, so defer it to a workqueue.  The oops looks something like:    BUG: spinlock recursion on CPU#0, krxrpcio/7001/1646    lock: 0xffff888141399b30, .magic: dead4ead, .owner: krxrpcio/7001/1646, .owner_cpu: 0   CPU: 0 UID: 0 PID: 1646 Comm: krxrpcio/7001 Not tainted 6.12.0-rc2-build3+ #4351   Hardware name: ASUS All Series/H97-PLUS, BIOS 2306 10/09/2014   Call Trace:    \u0026lt;TASK\u0026gt;    dump_stack_lvl+0x47/0x70    do_raw_spin_lock+0x3c/0x90    rxrpc_kernel_shutdown_call+0x83/0xb0    afs_put_call+0xd7/0x180    rxrpc_notify_socket+0xa0/0x190    rxrpc_input_split_jumbo+0x198/0x1d0    rxrpc_input_data+0x14b/0x1e0    ? rxrpc_input_call_packet+0xc2/0x1f0    rxrpc_input_call_event+0xad/0x6b0    rxrpc_input_packet_on_conn+0x1e1/0x210    rxrpc_input_packet+0x3f2/0x4d0    rxrpc_io_thread+0x243/0x410    ? __pfx_rxrpc_io_thread+0x10/0x10    kthread+0xcf/0xe0    ? __pfx_kthread+0x10/0x10    ret_from_fork+0x24/0x40    ? __pfx_kthread+0x10/0x10    ret_from_fork_asm+0x1a/0x30    \u0026lt;/TASK\u0026gt;(CVE-2024-53090)","status":"published","published":"2024-12-06T11:08:00Z","modified":"2026-08-18T01:18:42.676431453Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:42.253598Z"},{"id":"UBUNTU-CVE-2024-53073","description":"In the Linux kernel, the following vulnerability has been resolved: NFSD: Never decrement pending_async_copies on error The error flow in nfsd4_copy() calls cleanup_async_copy(), which already decrements nn-\u003epending_async_copies.","status":"published","published":"2024-11-19T18:15:00Z","modified":"2026-11-12T17:24:34.967002984Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-12T18:04:19.91053Z"},{"id":"SUSE-SU-2026:24550-1","title":"Security update for the Linux Kernel","description":"\nThe SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues:\n\nThe following security issues were fixed:\n\n- CVE-2025-68219: cifs: fix memory leak in smb3_fs_context_parse_param error path (bsc#1255222).\n- CVE-2026-31708: smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path (bsc#1264022).\n- CVE-2026-31709: smb: client: validate the whole DACL before rewriting it in cifsacl (bsc#1264024).\n- CVE-2026-43350: smb: client: require a full NFS mode SID before reading mode bits (bsc#1264985).\n- CVE-2026-46155: smb/client: fix out-of-bounds read in smb2_compound_op() (bsc#1267720).\n- CVE-2026-64324: udf: validate free block extents against the partition length (bsc#1273970).\n- CVE-2026-64370: posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (bsc#1273805).\n- CVE-2026-64380: smb: client: harden POSIX SID length parsing (bsc#1273557).\n- CVE-2026-64413: netfilter: ebtables: zero chainstack array (bsc#1274082).\n- CVE-2026-64435: audit: Fix data races of skb_queue_len() readers on audit_queue (bsc#1274080).\n- CVE-2026-68186: binfmt_misc: set have_execfd only once the interpreter is opened (bsc#1274949).\n- CVE-2026-68447: drm/amdkfd: clamp v9 CRIU control stack checkpoint copy to BO size (bsc#1276280).\n- CVE-2026-72010: cgroup/cpuset: rebind mm mempolicy to effective_mems, not mems_allowed (bsc#1276776).\n- CVE-2026-72110: bpf,fork: wipe -\u003ebpf_storage before bailouts that access it (bsc#1277357).\n- CVE-2026-72111: bpf: Reset register bounds before narrowing retval range in check_mem_access() (bsc#1277389).\n- CVE-2026-72127: netdev-genl: report NAPI thread PID in the caller's pid namespace (bsc#1277542).\n- CVE-2026-72250: netfilter: nf_conntrack_reasm: guard mac_header adjustment after IPv6 defrag (bsc#1277663).\n- CVE-2026-72253: netfilter: nf_conntrack_sip: validate skb_dst() before accessing it (bsc#1277665).\n- CVE-2026-72318: cifs: validate DFS referral string offsets (bsc#1275939).\n- CVE-2026-72400: seg6: validate SRH length before reading fixed fields (bsc#1278030).\n- CVE-2026-72405: net: udp_tunnel: prevent double queueing in udp_tunnel_nic_device_sync (bsc#1278033).\n- CVE-2026-72416: netfilter: nft_compat: ebtables emulation must reject non-bridge targets (bsc#1278041).\n- CVE-2026-72428: bpf: Fix stack slot index in nospec checks (bsc#1278050).\n- CVE-2026-74368: wifi: ath12k: fix memory leak in ath12k_wifi7_dp_rx_h_verify_tkip_mic() (bsc#1277103).\n- CVE-2026-74399: evm: terminate and bound the evm_xattrs read buffer (bsc#1278319).\n- CVE-2026-74565: netfilter: nf_tables: make nft_object rhltable per table (bsc#1275568).\n- CVE-2026-74613: vsock/virtio: avoid refilling the RX queue after teardown (bsc#1277903).\n- CVE-2026-74620: net/sched: act_gact, act_police: range check the fallback control action (bsc#1277044).\n- CVE-2026-74624: netfilter: nf_conntrack: defer invalid log until after unlock (bsc#1277599).\n- CVE-2026-74715: net: netfilter: Make ct zone opts configurable for bpf ct helpers (bsc#1277890).\n- CVE-2026-74720: bpf: Preserve pointer state for commuted arithmetic (bsc#1276574).\n- CVE-2026-74746: netfilter: flowtable: publish GC-visible tuple last (bsc#1278101).\n- CVE-2026-74748: netfilter: ipset: fix refcount race between list:set GC and swap (bsc#1277578).\n- CVE-2026-80572: Input: byd - synchronize timer deletion before freeing private data (bsc#1277338).\n- CVE-2026-80602: perf/x86/amd/lbr: Fix kernel address leakage (bsc#1278123).\n- CVE-2026-80637: netfilter: synproxy: fix unaligned memory access in timestamp adjustment (bsc#1278343).\n- CVE-2026-80684: KVM: s390: pci: Fix NULL dereference on AIBV allocation failure (bsc#1277467).\n- CVE-2026-80709: s390/zcrypt: Fix wrong domain value verification with EP11 CPRBs (bsc#1278202).\n- CVE-2026-80717: sctp: validate Adaptation Indication parameter length (bsc#1277836).\n- CVE-2026-80755: selinux: reject a permission value exceeding the class permission count (bsc#1278415).\n- CVE-2026-80757: selinux: reject a class permission count below its inherited common (bsc#1278711).\n- CVE-2026-80808: ext4: stop retrying saturated xattr cache entries (bsc#1279795).\n- CVE-2026-80809: ocfs2: fix missing metadata reservation for large xattrs (bsc#1279606).\n- CVE-2026-80855: fuse: fix invalidate lock leak on open O_TRUNC DAX failure (bsc#1279564).\n- CVE-2026-80879: ocfs2: fix circular locking dependency in ocfs2_dio_end_io_write (bsc#1279494).\n- CVE-2026-80881: ocfs2: fix buffer head management in ocfs2_read_blocks() (bsc#1279496).\n- CVE-2026-80978: ip6_gre: fix hardware header length for NBMA tunnels (bsc#1280253).\n- CVE-2026-80988: NTB: ntb_transport: Fail TX enqueue when the QP link is down (bsc#1280266).\n- CVE-2026-89491: ocfs2: cluster: don't sleep while holding o2hb_live_lock in o2hb_region_pin() (bsc#1280472).\n- CVE-2026-89494: ocfs2: validate lengths in dlm_mig_lockres_handler (bsc#1280520).\n- CVE-2026-89495: ocfs2: bound namelen in dlm_migrate_request_handler (bsc#1280569).\n- CVE-2026-89537: SUNRPC: Reject short RFC 4121 MIC tokens in gss_krb5_verify_mic_v2 (bsc#1280713).\n- CVE-2026-89554: mptcp: fix uninitialized local_id in syncookie MP_JOIN reconstruction (bsc#1280736).\n- CVE-2026-89559: libnvdimm/labels: Prevent integer overflow in __nd_label_validate() (bsc#1280554).\n- CVE-2026-89560: landlock: Require LANDLOCK_ACCESS_FS_MAKE_REG for whiteout creation (bsc#1280806).\n- CVE-2026-89595: fsnotify: Fix stale object mask after concurrent mark updates (bsc#1280834).\n- CVE-2026-89608: ecryptfs: pass packet set buffer size to parser (bsc#1280826).\n- CVE-2026-89637: smb: client: fix UAF and buffer leak in cifs_check_trans2() for malformed secondary T2 (bsc#1280492).\n- CVE-2026-89642: cifs: call pagecache_isize_extended() in cifs_setsize() when extending (bsc#1280970).\n- CVE-2026-89649: ceph: bound xattr value length in __build_xattrs() (bsc#1280434).\n- CVE-2026-89654: ceph: fix UAF in check_new_map() on session freed during unlock (bsc#1280415).\n- CVE-2026-89655: ceph: fix UAF in __kick_flushing_caps() on cf entry freed during unlock (bsc#1280398).\n- CVE-2026-89656: libceph: reject buckets with mismatched CRUSH ids (bsc#1280563).\n- CVE-2026-89657: libceph: validate OSD extent maps before cursor advance (bsc#1280545).\n- CVE-2026-89751: x86/tdx: Fix off-by-one in port I/O handling (bsc#1280822).\n- CVE-2026-89761: apparmor: fix out-of-bounds write when null terminating a label vec (bsc#1280745).\n- CVE-2026-89786: ext4: fix out-of-bounds read in ext4_read_inline_dir() (bsc#1280976).\n- CVE-2026-89787: ext4: check dir entry fits before reading the hash trailer in ext4_search_dir() (bsc#1280977).\n- CVE-2026-90042: ceph: properly decrypt filenames in vmalloc() buffers (bsc#1280948).\n- CVE-2026-90057: slip: remove slip_hangup() to fix use-after-free in slip_receive_buf() (bsc#1281650).\n- CVE-2026-90081: net/rds: use wq_has_sleeper() in rds_cong_map_updated() (bsc#1281490).\n- CVE-2026-90092: Bluetooth: L2CAP: reject accept queue add unless BT_LISTEN (bsc#1281384).\n- CVE-2026-90103: NFSv4.2: fix LAYOUTSTATS send buffer exhaustion (bsc#1281538).\n- CVE-2026-90107: net/smc: free pending qentry in smc_llc_flow_stop() before memset (bsc#1281510).\n- CVE-2026-90114: net: bridge: Reject descending VLAN tunnel ranges (bsc#1281509).\n- CVE-2026-90128: vdpa/mlx5: fix wrong list iterated in add_direct_chain error path (bsc#1281577).\n- CVE-2026-90138: vsock: don't check the listener's sk_err in vsock_accept() (bsc#1281535).\n- CVE-2026-90148: NFSv4: Fix incorrect argument passed to nfs4_delete_lease() in nfs4_add_lease() (bsc#1281551).\n- CVE-2026-90227: nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (bsc#1281705).\n- CVE-2026-90230: nvme: Add the DHCHAP maximum HD IDs (bsc#1281715).\n- CVE-2026-90393: bpf: Fix potential UAF in bpf_netns_link_update_prog (bsc#1282289).\n- CVE-2026-93054: uio: Fix stale info pointer in failed registration path (bsc#1282276).\n- CVE-2026-93228: svcrdma: Reject Write/Reply chunks with segcount 0 (bsc#1282697).\n- CVE-2026-93231: lockd: fix swapped arguments in nlmsvc_match_ip() (bsc#1282778).\n- CVE-2026-93250: vxlan: mdb: Fix use-after-free in vxlan_mdb_flush() (bsc#1282677).\n- CVE-2026-93262: md/raid5-ppl: fix use-after-free in ppl_do_flush() (bsc#1283004).\n- CVE-2026-93795: blk-cgroup: fix leaks and online flag on radix_tree_insert failure (bsc#1283155).\n- CVE-2026-93798: btrfs: fix reloc root cleanup in merge_reloc_roots() (bsc#1282769).\n- CVE-2026-93817: perf: Fix addr_filter_ranges lifetime (bsc#1283017).\n- CVE-2026-93828: exfat: fix handling of damaged volume in exfat_create_upcase_table() (bsc#1282890).\n- CVE-2026-93830: net: stmmac: xgmac2: disable RBUE in default RX interrupt mask (bsc#1282889).\n- CVE-2026-97554: smb: client: avoid using uninitialized SIDs in cifs_posix_to_fattr() (bsc#1283850).\n- CVE-2026-97556: smb: client: avoid leaking refcount when cifs_sb_tlink() fails (bsc#1283853).\n- CVE-2026-97558: smb: client: fix cifsFileInfo reference leak in deferred close (bsc#1283855).\n- CVE-2026-97559: smb: client: fail DACL rewrite when the new DACL exceeds 64K (bsc#1283856).\n- CVE-2026-97561: smb: client: honor forceuid/forcegid when mapping SIDs to uid/gid (bsc#1283858).\n- CVE-2026-97562: smb: client: pin DFS superblock in iterator callback (bsc#1283862).\n- CVE-2026-97563: smb: client: reject out-of-bounds DataOffset in CIFSSMBRead() (bsc#1283877).\n- CVE-2026-97565: smb: client: reject short READ responses in CIFSSMBRead() (bsc#1283793).\n- CVE-2026-97575: media: v4l2-ctrls: validate AV1 tile counts (bsc#1283337).\n- CVE-2026-97596: ipvs: reject invalid states in connection template sync records (bsc#1283941).\n- CVE-2026-97603: idpf: disable DIM work before freeing q_vectors (bsc#1283782).\n- CVE-2026-97612: net: mpls: clear inner_protocol when the last label is popped (bsc#1283967).\n- CVE-2026-97954: net/rds: fix tcp stream corruption with large pages (bsc#1283113).\n- CVE-2026-97963: net: stmmac: initialize ptp_lock at probe time (bsc#1282984).\n- CVE-2026-97964: ppp_synctty: ensure a writeable skb header (bsc#1282962).\n- CVE-2026-97965: vxlan: initialize _md in vxlan_xmit_one() (bsc#1282963).\n- CVE-2026-97991: vdpa_sim_blk: reject out-of-range sector starts (bsc#1283356).\n- CVE-2026-97993: vhost-vdpa: don't install the eventfd_ctx_fdget() error in config_ctx (bsc#1283339).\n- CVE-2026-98014: net/mlx5: E-Switch, prevent mc_list repopulation during vport disable (bsc#1283668).\n- CVE-2026-98022: net: cap tx_queue_len at S16_MAX to prevent oversized ring allocations (bsc#1283810).\n- CVE-2026-98023: vxlan: reject dynamic fdb entries that reference a nexthop id (bsc#1283960).\n- CVE-2026-98031: nexthop: Initialize extack in remove_nh_grp_entry() (bsc#1283662).\n- CVE-2026-98041: bpf: Don't predict JMP32 pointer vs zero comparisons (bsc#1284064).\n- CVE-2026-98068: net/rds: don't let rds_conn_shutdown() consume a concurrent drop (bsc#1283903).\n- CVE-2026-98069: net/rds: acquire the fastpath locks in rds_conn_shutdown() (bsc#1283863).\n- CVE-2026-98070: net/rds: acquire RDS_IN_XMIT in rds_tcp_reset_callbacks() (bsc#1283916).\n- CVE-2026-98071: net/rds: clear cp_flags bits individually in rds_conn_path_reset() (bsc#1283842).\n- CVE-2026-98072: net/rds: use wq_has_sleeper() in release_in_xmit() (bsc#1283846).\n- CVE-2026-98074: bonding: do not clear curr_active_slave prematurely when releasing all slaves (bsc#1283871).\n- CVE-2026-98078: ipvs: fix reversed sequence option serialization (bsc#1284150).\n- CVE-2026-98095: af_packet: Don't cast tpacket_hdr.tp_len to int in tpacket_parse_header() (bsc#1283921).\n- CVE-2026-98122: vxlan: mdb: Fix use-after-free in vxlan_mdb_remote_src_del() (bsc#1283886).\n- CVE-2026-98124: smb/client: invalidate fscache for fallocate range operations (bsc#1283821).\n- CVE-2026-98125: smb/client: fix stale page cache in insert/collapse range (bsc#1283812).\n- CVE-2026-98126: smb/client: validate new EOF for zero range (bsc#1283859).\n- CVE-2026-98127: smb/client: validate new EOF for insert range (bsc#1283873).\n- CVE-2026-98154: nvme-rdma: fix -EIO cleanup order in queue_rq (bsc#1283418).\n- CVE-2026-98158: ppp_async: drop the errored frame instead of resetting its headroom (bsc#1283933).\n- CVE-2026-98167: smb: client: fix server-\u003etotal_read for compound encrypted PDUs (bsc#1284422).\n- CVE-2026-98169: smb: client: fix potential OOB read in smb3_enum_snapshots() (bsc#1284298).\n- CVE-2026-98170: smb: client: fix OOB struct field reads in move_smb2_ea_to_cifs() (bsc#1284310).\n- CVE-2026-98175: smb: client: cancel reconnect work in clean_demultiplex_info() (bsc#1284312).\n- CVE-2026-98257: rds: ib: use rds_conn_drop() on protocol version mismatch (bsc#1284346).\n- CVE-2026-98258: posix-cpu-timers: Prevent freeing a timer which is queued on the expiry list (bsc#1284584).\n- CVE-2026-98261: cifs: Fix server use-after-free in cifs_chan_skip_or_disable() (bsc#1284605).\n- CVE-2026-98264: ALSA: virtio: reset device before deleting virtqueues (bsc#1284363).\n- CVE-2026-98282: powerpc/iommu: Fix the overflow validation in iommu_tce_check_ioba (bsc#1284360).\n- CVE-2026-98283: KVM: PPC: Book3S HV: fix use-after-free in kvmhv_emulate_tlbie_all_lpid() (bsc#1284595).\n- CVE-2026-98306: seg6: set IPSKB_L3SLAVE from IP6SKB_L3SLAVE on IPIP decapsulation (bsc#1284505).\n- CVE-2026-98368: esp: downgrade zerocopy managed frags before mutating skb frags (bsc#1284498).\n- CVE-2026-98374: tcp: fix use-after-free of retransmit_skb_hint in tcp_send_synack() (bsc#1284740).\n- CVE-2026-98432: ipv4: free inet_opt and ireq_opt after an RCU grace period (bsc#1285685).\n- CVE-2026-98471: KVM: SEV: Do cache maintenance on the source VM during intra-host migration (bsc#1286240).\n- CVE-2026-98631: xsk: Use a 32-bit compare in xsk_map_gen_lookup (bsc#1286233).\n- CVE-2026-99131: xfs: fix capability check in xfs (bsc#1288668).\n- CVE-2026-100071: net: hsr: free learned nodes on device setup failure (bsc#1282870).\n\nThe following non security issues were fixed:\n\n- accel/qaic: reject BO sizes that overflow page count (git-fixes).\n- ACPI: CPPC: Validate the _CPC package header (git-fixes).\n- ACPI: extlog: Validate elog record length before walking sections (git-fixes).\n- ACPI: PCI: pci_link: clear driver_data before free (git-fixes).\n- ACPI: pfr_update: zero-initialize capability query result (git-fixes).\n- ACPI: PM: Drop parent state update from acpi_device_get_power() (git-fixes).\n- ACPI: tables: handle failed initrd override mappings (git-fixes).\n- ACPI: TAD: Rearrange RT data validation checking (stable-fixes).\n- ACPI: video: Fix backlight unregistration ordering (git-fixes).\n- ACPICA: Fix memory leak in acpi_ds_create_field() (git-fixes).\n- ACPICA: Fix PCC OperationRegion command offsets (git-fixes).\n- ACPICA: Initialize parser_state.aml_end in acpi_install_method() (git-fixes).\n- ALSA: 6fire: take stream_mutex in the Digital Thru control (git-fixes).\n- ALSA: aloop: Keep the timer source alive until card release (git-fixes).\n- ALSA: caiaq: Fix races at MIDI URB and trigger accesses (git-fixes).\n- ALSA: caiaq: Fix the Kore controller key map (git-fixes).\n- ALSA: caiaq: Register card at the final step (git-fixes).\n- ALSA: caiaq: Serialize access to the EP1 command buffer (git-fixes).\n- ALSA: compress: add missing OPEN-state gate to SET_METADATA (git-fixes).\n- ALSA: control: Fix virtual master creation reference in kernel-doc (git-fixes).\n- ALSA: cs46xx: fix unit mismatch in DSP code area bounds check (git-fixes).\n- ALSA: hda/hdmi: clamp num_cvts against cvt_nids in hdmi_read_pin_conn (git-fixes).\n- ALSA: hda/hdmi: clamp sad_count in ELD proc write handler (git-fixes).\n- ALSA: hda: Add NULL check for the driver pointer at unsol event work (git-fixes).\n- ALSA: hda: Avoid non-operational GPU warning at regular device removal (git-fixes).\n- ALSA: hda: Fix potential UAF for gating jack (git-fixes).\n- ALSA: hda: intel: Cancel delayed work at shutdown, too (git-fixes).\n- ALSA: hda: Reject codec reset on ASoC (ext_ops) buses (git-fixes).\n- ALSA: jack: Fix kctl free at error in snd_jack_kctl_new() (git-fixes).\n- ALSA: line6: Clear prev_fbuf on capture buffer release (git-fixes).\n- ALSA: line6: Fix potential OOB write in line6_capture_copy() (git-fixes).\n- ALSA: line6: Reject too small max packet sizes (git-fixes).\n- ALSA: line6: Use kzalloc() for PCM buffer allocation (git-fixes).\n- ALSA: pcm: Fix driver_tstamp value reporting (git-fixes).\n- ALSA: pcm: Protect channel-map reads against runtime detach (git-fixes).\n- ALSA: pcm: Protect the unregister notifier traversal (git-fixes).\n- ALSA: pcm: Remove channel-map controls before freeing substreams (git-fixes).\n- ALSA: pcm: Unlink substreams before releasing them (git-fixes).\n- ALSA: seq: oss: Skip events until fully initialized (git-fixes).\n- ALSA: sh: aica: Fix spu_memset() stride (git-fixes).\n- ALSA: ump: Correct return size of fill_rpn() (git-fixes).\n- ALSA: usb-audio: Use fixed control index for us16x08 mixer elements (git-fixes).\n- ALSA: via82xx: use helper to activate DXS controls (git-fixes).\n- ASoC: adau17x1: return cache sync errors from resume (git-fixes).\n- ASoC: ak4642: return cache sync errors from resume (git-fixes).\n- ASoC: amd: acp: Fix .close() being skipped on rollback (git-fixes).\n- ASoC: amd: ps: Fix acp63_pdm_dma_close() being skipped on rollback (git-fixes).\n- ASoC: amd: ps: Fix acp63_sdw_dma_close() being skipped on rollback (git-fixes).\n- ASoC: amd: raven: Fix acp3x_dma_close() being skipped on rollback (git-fixes).\n- ASoC: amd: raven: Fix memory leak in acp3x_dma_close() (git-fixes).\n- ASoC: amd: renoir: Fix acp_pdm_dma_close() being skipped on rollback (git-fixes).\n- ASoC: amd: vangogh: Fix acp5x_dma_close() being skipped on rollback (git-fixes).\n- ASoC: amd: yc: Add DMI quirk for Acer Aspire Go 15 (AG15-21P) (stable-fixes).\n- ASoC: amd: yc: Fix acp6x_pdm_dma_close() being skipped on rollback (git-fixes).\n- ASoC: arizona-jack: Fix runtime PM imbalance in arizona_start_hpdet_acc_id() (git-fixes).\n- ASoC: atmel-i2s: fix MCK generator error handling (git-fixes).\n- ASoC: atmel-i2s: use optional API for gclk (git-fixes).\n- ASoC: atmel-i2s: use optional API for muxclk (git-fixes).\n- ASoC: atmel: atmel-pcm-pdc: Fix atmel_pcm_close() being skipped on rollback (git-fixes).\n- ASoC: codecs: da732x: Fix definition of ADC2 EQ Overall Volume control (git-fixes).\n- ASoC: codecs: es*: Modify the registers related to ALC RECOVERY (git-fixes).\n- ASoC: codecs: rt5659: propagate GPIO errors (git-fixes).\n- ASoC: codecs: rt5682s: disable jack detection work on shutdown (git-fixes).\n- ASoC: codecs: sta32x: Fix definition of Ch2 and Ch3 Volume Bypass controls (git-fixes).\n- ASoC: codecs: sta32x: Fix definition of limiter threshold controls (git-fixes).\n- ASoC: codecs: sta350: Fix definition of Ch2 and Ch3 Volume Bypass controls (git-fixes).\n- ASoC: codecs: sta350: Fix definition of limiter threshold controls (git-fixes).\n- ASoC: codecs: tlv320adc3xxx: Fix definition of AGC Target Level control (git-fixes).\n- ASoC: codecs: wcd9335: Fix SLIM interface device leak in wcd9335_slim_status() (git-fixes).\n- ASoC: codecs: wm5100: Fix definition of EQ3 Band 1 Volume control (git-fixes).\n- ASoC: codecs: wm8510: Fix definition of ADC Inversion Switch control (git-fixes).\n- ASoC: codecs: wm8737: Fix definition of zero cross switches (git-fixes).\n- ASoC: codecs: wm8750: Fix definition of ALC Capture NG Type control (git-fixes).\n- ASoC: codecs: wm8955: Fix definition of Treble Cutoff control (git-fixes).\n- ASoC: codecs: wm8983: Fix definition of ADC 128x Oversampling control (git-fixes).\n- ASoC: codecs: wm8985: Fix definition of ADC 128x Oversampling control (git-fixes).\n- ASoC: codecs: wm8990: Fix definition of LOMIX AINLMUX Bypass Volume control (git-fixes).\n- ASoC: codecs: wm8990: Fix definition of right input PGA controls (git-fixes).\n- ASoC: codecs: wm8991: Fix definition of LOMIX AINLMUX Bypass Volume control (git-fixes).\n- ASoC: codecs: wm8991: Fix definition of right input PGA controls (git-fixes).\n- ASoC: codecs: wm8994: Fix definition of WM8958 noise gate hold time controls (git-fixes).\n- ASoC: codecs: wm8994: Fix runtime PM leak in wm8994_mic_detect() (git-fixes).\n- ASoC: codecs: wm_hubs: Fix definition of MIXINR to MIXOUTR volume control (git-fixes).\n- ASoC: codecs: wsa883x: disable runtime PM on unbind (git-fixes).\n- ASoC: codecs: wsa884x: disable runtime PM on unbind (git-fixes).\n- ASoC: cs42l56: Remove the ADC Mute Switch control (git-fixes).\n- ASoC: es8316: return cache sync errors from resume (git-fixes).\n- ASoC: fsl_asrc: check the second front-end DMA channel (git-fixes).\n- ASoC: fsl_asrc: use regmap_write_bits to update clock source registers (git-fixes).\n- ASoC: hdac_hda: Balance the runtime PM disable in codec remove (git-fixes).\n- ASoC: hdac_hda: Keep runtime PM state in sync across codec remove/probe (git-fixes).\n- ASoC: hdac_hda: Restore the codec device type on unbind (git-fixes).\n- ASoC: imx-pcm-rpmsg: Fix imx_rpmsg_pcm_close() being skipped on rollback (git-fixes).\n- ASoC: intel: atom: Fix .shutdown() being skipped on rollback (git-fixes).\n- ASoC: Intel: atom: Fix platform device leak on probe failure (git-fixes).\n- ASoC: Intel: avs: Prevent module info underflow (git-fixes).\n- ASoC: Intel: avs: Unprepare a stream when recovery occurs (git-fixes).\n- ASoC: mediatek: common: Handle constraint return value in FE startup (git-fixes).\n- ASoC: mediatek: mt6797: fix wrong unwind order and error code in enable_clock (git-fixes).\n- ASoC: mediatek: mt8183: Fix APLL enable error handling (git-fixes).\n- ASoC: mediatek: mt8183: Fix clock handling in mux disable path (git-fixes).\n- ASoC: mediatek: mt8183: Fix wrong clock cleanup on clk_set_parent() failure (git-fixes).\n- ASoC: mediatek: mt8186: Fix AFE clock error handling (git-fixes).\n- ASoC: mediatek: mt8186: Fix APLL enable error handling (git-fixes).\n- ASoC: mediatek: mt8186: Fix APLL mux setting error handling (git-fixes).\n- ASoC: mediatek: mt8186: Fix clock handling in mux disable path (git-fixes).\n- ASoC: mediatek: mt8186: Fix MCK error handling (git-fixes).\n- ASoC: mediatek: mt8188: Handle constraint return value in FE startup (git-fixes).\n- ASoC: mediatek: mt8188: mt8188-afe-clk: Handle clock enable errors (git-fixes).\n- ASoC: mediatek: mt8188: mt8188-afe-clk: Handle tuner clock enable errors (git-fixes).\n- ASoC: mediatek: mt8188: mt8188-afe-clk: Propagate regmap update errors (git-fixes).\n- ASoC: mediatek: mt8188: mt8188-afe-pcm: Handle runtime resume errors (git-fixes).\n- ASoC: mediatek: mt8192-mt6359: Fix error handling in MTKAIF calibration (git-fixes).\n- ASoC: mediatek: mt8192: check return values in mt8192_afe_gpio_init() (git-fixes).\n- ASoC: mediatek: mt8192: fix AFE clock error handling (git-fixes).\n- ASoC: mediatek: mt8192: fix APLL mux error handling (git-fixes).\n- ASoC: mediatek: mt8192: fix error handling in APLL enable functions (git-fixes).\n- ASoC: mediatek: mt8192: fix MCK clock error handling (git-fixes).\n- ASoC: mediatek: mt8192: Handle regcache_sync() failure in runtime resume (git-fixes).\n- ASoC: mediatek: mt8192: Propagate errors in TDM DAI DAPM event handlers (git-fixes).\n- ASoC: mediatek: mt8192: Propagate mt8192_afe_gpio_request() errors in ADDA DAI (git-fixes).\n- ASoC: mediatek: mt8192: switch to devm_clk_get_optional() (git-fixes).\n- ASoC: mediatek: mt8195: Check paired MEMIF clock enable in FE trigger (git-fixes).\n- ASoC: mediatek: mt8195: Fix ETDM MCLK error handling (git-fixes).\n- ASoC: mediatek: mt8195: Fix ETDM probe error handling (git-fixes).\n- ASoC: mediatek: mt8195: Fix ETDM startup error handling (git-fixes).\n- ASoC: mediatek: mt8195: Fix FE startup error handling (git-fixes).\n- ASoC: mediatek: mt8195: Fix HDMI TX startup error handling (git-fixes).\n- ASoC: mediatek: mt8195: Fix main clock error handling (git-fixes).\n- ASoC: mediatek: mt8195: Fix paired memif clock error handling (git-fixes).\n- ASoC: mediatek: mt8195: Fix register access clock error handling (git-fixes).\n- ASoC: mediatek: mt8195: Fix runtime resume error handling (git-fixes).\n- ASoC: mediatek: mt8195: Fix timing system clock error handling (git-fixes).\n- ASoC: mediatek: mt8195: Fix tuner clock error handling (git-fixes).\n- ASoC: mediatek: mt8195: Propagate IRQ lookup errors (git-fixes).\n- ASoC: mt6359-accdet: manage private workqueues with devres (git-fixes).\n- ASoC: nau8540: return cache sync errors from resume (git-fixes).\n- ASoC: ops: Fix return value in snd_soc_limit_volume() (git-fixes).\n- ASoC: qcom: q6apm: clear g_apm on driver removal (git-fixes).\n- ASoC: qcom: qdsp6: q6afe: fix clk vote response type mismatch (git-fixes).\n- ASoC: rockchip: rockchip_i2s: Handle runtime PM resume failures in set_fmt (git-fixes).\n- ASoC: rt711-sdca: always cancel jack work on remove (git-fixes).\n- ASoC: rt711-sdw: always cancel jack work on remove (git-fixes).\n- ASoC: rt712-sdca-dmic: fix drvdata type in the gain controls (git-fixes).\n- ASoC: rt712-sdca: always cancel jack work on remove (git-fixes).\n- ASoC: rt722-sdca: always cancel jack work on remove (git-fixes).\n- ASoC: rt1011: return cache sync errors from resume (git-fixes).\n- ASoC: rt1016: return cache sync errors from resume (git-fixes).\n- ASoC: rt1305: return cache sync errors from resume (git-fixes).\n- ASoC: rt1308: return cache sync errors from resume (git-fixes).\n- ASoC: rt5616: return cache sync errors from resume (git-fixes).\n- ASoC: rt5659: return cache sync errors from resume (git-fixes).\n- ASoC: rt5660: return cache sync errors from resume (git-fixes).\n- ASoC: rt5665: return cache sync errors from resume (git-fixes).\n- ASoC: rt5682-sdw: always cancel jack work on remove (git-fixes).\n- ASoC: soc-ac97: Fix error handling in snd_soc_new_ac97_component() (git-fixes).\n- ASoC: soc-component: Fix return type of snd_soc_pcm_component_pointer() (git-fixes).\n- ASoC: ti: davinci-mcasp: Fix runtime PM imbalance in __davinci_mcasp_set_clkdiv() (git-fixes).\n- ASoC: wcd9335: Fix device reference leak in wcd9335_slim_status() (git-fixes).\n- ASoC: wcd-mbhc-v2: Fix incorrect properties names and typos (git-fixes).\n- ASoC: wm8994: don't lose the AIF clock ratio when staying at 32kHz SYSCLK (git-fixes).\n- ASoC: wm8994: fix MCLK gating for AIF clocks sourced from MCLK2 (git-fixes).\n- ASoC: wm8994: fix MCLK index used for setting MCLK rate (git-fixes).\n- ASoC: wm8994: Fix runtime PM imbalance in wm8994_component_probe() (git-fixes).\n- ASoC: wm8994: follow AIF clock source changes in MCLK gating (git-fixes).\n- ASoC: xilinx: formatter_pcm: Fix read-modify-write of AUD_CTRL in hw_params (git-fixes).\n- asymmetric_keys: reject trust keys without IDs (git-fixes).\n- ata: libata-scsi: abort multi-sector pass-through commands when multi_count is 0 (git-fixes).\n- ata: libata-scsi: Fix ata_scsi_hotplug() reference in kernel-doc (git-fixes).\n- ata: pata_parport: fix parport attach idr_alloc for (git-fixes).\n- ata: pata_parport: Fix use-after-free in new_device_store (git-fixes).\n- ata: sata_fsl: Fix use-after-free of host_priv on probe() failure (git-fixes).\n- backlight: lm3630a: Cancel delayed work before destroying workqueue (git-fixes).\n- backlight: qcom-wled: Fix NULL pointer dereference in wled_remove() (git-fixes).\n- backlight: qcom-wled: Fix unbalanced OVP IRQ enable at probe (git-fixes).\n- backlight: qcom-wled: Fix WLED3 brightness register stride (git-fixes).\n- Bluetooth: 6lowpan: Drain RCU readers on registration failure (git-fixes).\n- Bluetooth: 6lowpan: Pin module for 6lowpan_control debugfs file (git-fixes).\n- Bluetooth: 6LoWPAN: Use RCU-safe device list removal (git-fixes).\n- Bluetooth: Add missing newline to bt_dev_{err,warn}_ratelimited() (git-fixes).\n- Bluetooth: btintel: fix buffer over-read in btintel_hw_error() (git-fixes).\n- Bluetooth: btintel: validate DDC record lengths (git-fixes).\n- Bluetooth: btqcomsmd: Convert to platform remove callback returning void (stable-fixes).\n- Bluetooth: btqcomsmd: destroy RPMsg endpoints before freeing hci_dev (git-fixes).\n- Bluetooth: btusb: Add IMC Networks QCA9377 to quirks table (stable-fixes).\n- Bluetooth: hci_conn: Lock parent access during enhanced SCO setup (git-fixes).\n- Bluetooth: hci_core: free the HCI ID if naming fails (git-fixes).\n- Bluetooth: hci_core: Keep RCU protection through LTK filtering (git-fixes).\n- Bluetooth: hci_debugfs: Pin module for debugfs file operations (git-fixes).\n- Bluetooth: hci_sync: don't drain cmd_sync backlog on unregister (git-fixes).\n- Bluetooth: hci_sync: Fix inquiry cache use-after-free (git-fixes).\n- Bluetooth: hci_sync: fix mesh adv timeout units (git-fixes).\n- Bluetooth: hci_sync: Protect IRK identity reads with RCU (git-fixes).\n- Bluetooth: hci_sync: Serialize devcoredump reset during device open (git-fixes).\n- Bluetooth: hci_vhci: Pin module for debugfs file operations (git-fixes).\n- Bluetooth: ISO: Hold the listener during disconnect notification (git-fixes).\n- Bluetooth: L2CAP: hold chan in l2cap_ecred_conn_rsp() (git-fixes).\n- Bluetooth: L2CAP: hold l2cap_conn::lock in l2cap_connect_cfm() (git-fixes).\n- Bluetooth: L2CAP: Reject invalid TxWindow in configuration requests (git-fixes).\n- Bluetooth: L2CAP: Reject mode changes on connected channels (git-fixes).\n- Bluetooth: L2CAP: Use default TxWindow for zero socket option (git-fixes).\n- Bluetooth: MGMT: Fix leaking instance on Add Extended Advertising Parameters (git-fixes).\n- Bluetooth: MGMT: Fix pending state of instances added without HCI traffic (git-fixes).\n- Bluetooth: MGMT: Reject quality report requests during unregister (git-fixes).\n- Bluetooth: msft: Lock failed probe cleanup against feature readers (git-fixes).\n- Bluetooth: RFCOMM: Fix initial port reference race (git-fixes).\n- Bluetooth: selftest: Pin module for selftest debugfs file operations (git-fixes).\n- bus: arm-cci: Drop cci-control-port node reference in __cci_ace_get_port() (git-fixes).\n- bus: arm-cci: Drop CPU node reference in cci_ace_init_ports() (git-fixes).\n- bus: fsl-mc: register the object drivers after misc_class exists (git-fixes).\n- char: scx200_gpio: check cdev_add() return value (git-fixes).\n- checkpatch: skip CamelCase cache for --no-tree without root (git-fixes).\n- cifs: Pass unbyteswapped eof value into SMB2_set_eof() (git-fixes).\n- comedi: comedi_parport: validate the IRQ supplied by userspace (git-fixes).\n- comedi: dmm32at: validate the IRQ supplied by userspace (git-fixes).\n- comedi: dt2811: fix shift-out-of-bounds in IRQ check (git-fixes).\n- comedi: dt2814: validate the IRQ supplied by userspace (git-fixes).\n- comedi: ni_atmio16d: validate the IRQ supplied by userspace (git-fixes).\n- comedi: pcmmio: validate the IRQ supplied by userspace (git-fixes).\n- comedi: pcmuio: validate the IRQs supplied by userspace (git-fixes).\n- crypto: amlogic - Fix DMA memory leak in cipher error path (git-fixes).\n- crypto: amlogic - Fix IRQ handler return value and fallthrough logic (git-fixes).\n- crypto: asymmetric_keys - fix OOB read in pefile_parse_binary (git-fixes).\n- crypto: atmel - handle authenc requests without plaintext (git-fixes).\n- crypto: atmel-aes - fix AADLENR for standalone GHASH (git-fixes).\n- crypto: atmel-sha - reject initialization without a device (git-fixes).\n- crypto: atmel-tdes - sync output bounce buffer before DMA (git-fixes).\n- crypto: atmel-tdes - zero-initialize device state (git-fixes).\n- crypto: caam - fix double-free in caam_rsa_set_priv_key_form() (git-fixes).\n- crypto: ccp - kill v3 IRQ tasklet during teardown (git-fixes).\n- crypto: ccp - kill v5 IRQ tasklet during teardown (git-fixes).\n- crypto: hisilicon/hpre - fix ECDH destination DMA mapping (git-fixes).\n- crypto: hisilicon/hpre - fix GFP flags for dma_alloc_coherent (git-fixes).\n- crypto: hisilicon/hpre - fix pointer dereference before length check (git-fixes).\n- crypto: hisilicon/hpre - remove dma_free_coherent on NULL req-\u003edst in ECDH (git-fixes).\n- crypto: hisilicon/hpre - return -EOVERFLOW for small ECDH output buffer (git-fixes).\n- crypto: qat - avoid OOB read when stripping RSA leading zeros (git-fixes).\n- crypto: qat - fix active_devs leak on crypto alg registration failure (git-fixes).\n- crypto: qat - fix use of destroyed vf2pf_lock on VF restart (git-fixes).\n- crypto: qat - initialise state_lock on every path in adf_devmgr_add_dev() (git-fixes).\n- crypto: qat - release instance on DH fallback allocation failure (git-fixes).\n- crypto: qat - zero the VF migration state buffer on save (git-fixes).\n- crypto: tcrypt - Avoid reading req-\u003ebase after submission (git-fixes).\n- dmaengine: altera-msgdma: initialize state before requesting IRQ (git-fixes).\n- dmaengine: at_hdmac: Fix use-after-free by proper tasklet cleanup (git-fixes).\n- dmaengine: bestcomm: set bcom_eng to NULL on probe failure (git-fixes).\n- dmaengine: dw-axi-dmac: convert clock handling to clk_bulk API (git-fixes).\n- dmaengine: dw-axi-dmac: Fix AXI burst length encoding (git-fixes).\n- dmaengine: dw-axi-dmac: Fix CH_CFG2 channel priority position (git-fixes).\n- dmaengine: dw-axi-dmac: Fix LLI dump out-of-bounds access (git-fixes).\n- dmaengine: fsl_raid: avoid free_q underflow in free_chan_resources (git-fixes).\n- dmaengine: fsl_raid: don't invoke client callback under desc_lock (git-fixes).\n- dmaengine: fsl_raid: zero CF descriptor pool allocations (git-fixes).\n- dmaengine: img-mdc: Fix runtime PM usage counter leak (git-fixes).\n- dmaengine: ioat: disable relaxed ordering before registering the device (git-fixes).\n- dmaengine: mediatek: hsdma: fix runtime PM leak on init failure (git-fixes).\n- dmaengine: mv_xor: kill tasklet on channel add error path (git-fixes).\n- dmaengine: plx_dma: fix NULL pointer deref in plx_dma_isr() (git-fixes).\n- dmaengine: qcom: bam_dma: Defer IRQ trigger type to device tree (git-fixes).\n- dmaengine: qcom: bam_dma: free interrupt before the clock in error path (git-fixes).\n- dmaengine: sprd: use clk_bulk API to fix clock imbalance (git-fixes).\n- dmaengine: sun6i-dma: Fix use-after-free in error handling paths (git-fixes).\n- dmaengine: xilinx_dma: Fix MCDMA descriptor fields based on DMA direction (git-fixes).\n- Documentation: rs485: Pull uart_get_rs485_mode() from serial_core.c (git-fixes).\n- Documentation: virt: Fix the struct snp_guest_request_ioctl name in sev-guest.rst (git-fixes).\n- driver core: Limit the messages on a refused uevent (git-fixes).\n- drivers/base/node: fix UAF on device_register() failure (git-fixes).\n- drm/amd/display: assign missing trace entry in amdgpu_dm_dc_clocks_state (git-fixes).\n- drm/amd/display: Fix direct scanout alpha on some DRM_FORMATs (stable-fixes).\n- drm/amd/display: Fix swap in median3() for DSC rate control (git-fixes).\n- drm/amd/display: fix vready offset assignment in dcn_optc_lock_unlock_state (git-fixes).\n- drm/amd/display: Force GAMCOR for subsampled surfaces with PQ/Gamma22/HLG (git-fixes).\n- drm/amd/display: remove duplicated prev_p_state_change_support assignment (git-fixes).\n- drm/amd/display: take a runtime PM reference only when a CRTC turns on (git-fixes).\n- drm/amd/display: Use kcalloc() instead of kzalloc() (stable-fixes).\n- drm/amd/display: use right type for amdgpu_dc_performance event entries (git-fixes).\n- drm/amd/pm: bound SCLK FCW range entries to the table size (git-fixes).\n- drm/amdgpu/atombios: drop empty function (stable-fixes).\n- drm/amdgpu/gfx6: fix firmware leak on teardown (stable-fixes).\n- drm/amdgpu/sdma3: Work around POLL_REGMEM / FENCE hang (stable-fixes).\n- drm/amdgpu: Check for multiplication overflow in checkpoint stack (bsc#1276280).\n- drm/amdgpu: make Mac FB workaround generic (stable-fixes).\n- drm/amdgpu: reject ANONONLY userptrs that span multiple VMAs (git-fixes).\n- drm/amdgpu: Remove unused amdgpu_i2c functions (stable-fixes).\n- drm/amdgpu: reset VI ASIC on MacBookPro14,3 (stable-fixes).\n- drm/amdgpu: reset VI ASIC on MacBookPro15,1 (stable-fixes).\n- drm/amdgpu: rework i2c init and fini (stable-fixes).\n- drm/amdgpu: serialize vblank counter reads against GPU reset (stable-fixes).\n- drm/amdgpu: Use dbg level for VBIOS check messages (stable-fixes).\n- drm/amdkfd: evict the queues only once for CRIU PROCESS_INFO (git-fixes).\n- drm/amdkfd: Fix checkpoint-restore on multi-xcc (bsc#1276280).\n- drm/amdkfd: fix doorbell allocation race creating duplicate allocations (git-fixes).\n- drm/amdkfd: validate SRAT subtables before parsing (git-fixes).\n- drm/bridge: analogix_dp: Restore mandatory samsung DP DT properties (git-fixes).\n- drm/exynos/fimd: fix register offset type in fimd_trigger() (git-fixes).\n- drm/imx/lcdc: avoid duplicate clk_per enable (git-fixes).\n- drm/komeda: Fix bits parsing of GLB_CORE_ID (git-fixes).\n- drm/mali-dp: Fix runtime PM leak in malidp_crtc_atomic_enable() (git-fixes).\n- drm/msm/a6xx: Fix secondary rail vote in ARC votes (git-fixes).\n- drm/msm/a6xx: fix use-after-free of OPP in a6xx_pm_resume (git-fixes).\n- drm/msm/dp: don't report link training success after a reinit (git-fixes).\n- drm/msm/dpu: disable the slave encoder before the master (git-fixes).\n- drm/msm/hdmi_phy: Cleanup after msm_hdmi_phy_resource_enable() failure (git-fixes).\n- drm/msm/mdp5: drop cursor pipe for msm8x76 (git-fixes).\n- drm/msm: Properly handle msm_ioremap() without name (git-fixes).\n- drm/nouveau/svm: drain fault handler before freeing svmm (git-fixes).\n- drm/nouveau: cancel the DP IRQ work before freeing the connector (git-fixes).\n- drm/nouveau: disable the fence uevent work instead of just cancelling it (git-fixes).\n- drm/nouveau: don't dereference outp before checking it in nouveau_dp_irq (git-fixes).\n- drm/nouveau: reject zero-size notifier object allocation (git-fixes).\n- drm/omap: dsi: avoid sending bta sync all the time in writes (git-fixes).\n- drm/panel: ebbg-ft8719: Set prepare_prev_first (git-fixes).\n- drm/panfrost: Explicitly enable MMU interrupts at device init (git-fixes).\n- drm/panfrost: Prevent division by 0 (git-fixes).\n- drm/tegra: Don't pass an ERR_PTR to drm_syncobj_replace_fence() (git-fixes).\n- drm/tegra: Drop reference on postfence (git-fixes).\n- drm/tegra: Fix syncobj_in wait return value check (git-fixes).\n- drm: of: Fix drm_of_get_data_lanes_count_ep() return value documentation (git-fixes).\n- fbdev: atmel_lcdfb: Prevent FIFO work after removal (git-fixes).\n- fbdev: gxt4500: Release WC setup on probe failure (git-fixes).\n- fbdev: sh_mobile_lcdc: check for fb_deferred_io_init() error (git-fixes).\n- fbdev: smscufx: check for fb_deferred_io_init() error (git-fixes).\n- fbdev: ssd1307fb: check for fb_deferred_io_init() error (git-fixes).\n- fbdev: udlfb: check for fb_deferred_io_init() error (git-fixes).\n- fbdev: udlfb: don't rebuild the mode list while the framebuffer is in use (git-fixes).\n- fbdev: xen-fbfront: check for fb_deferred_io_init() error (git-fixes).\n- firewire: cdev: Fix FW_CDEV_IOC_CREATE_ISO_CONTEXT references in kernel-doc (git-fixes).\n- firmware: cs_dsp: clear dsp-\u003erunning on the cs_dsp_run() error path (git-fixes).\n- firmware: imx: dsp: fix mailbox channel leak on kasprintf failure (git-fixes).\n- fpga: Fix of_fpga_mgr_get() reference in fpga_mgr_lock() docs (git-fixes).\n- gpio: crystalcove: add missing MODULE_ALIAS() (git-fixes).\n- gpio: davinci: Clear interrupt status in every bank on suspend (git-fixes).\n- gpio: mxc: fix both_edges bit operations (git-fixes).\n- gpio: mxc: fix wakeup_pads bit operations (git-fixes).\n- gpio: mxc: use BIT() macro (stable-fixes).\n- gpio: mxc: use lock guards for the generic GPIO chip lock (stable-fixes).\n- gpio: pca953x: Preserve wakeup accounting on parent IRQ failure (git-fixes).\n- HID: alps: unregister DualPoint Stick input device on remove (git-fixes).\n- HID: amd_sfh: Remove unsupported motion-state field from accelerometer report (git-fixes).\n- HID: amd_sfh: Use report type from request node (git-fixes).\n- HID: core: Add reserved item tag for main items (stable-fixes).\n- HID: core: Fix out-of-bounds left shift by 32 in s32ton() (git-fixes).\n- HID: cougar: reject short special-key reports (git-fixes).\n- HID: cp2112: validate response report lengths (git-fixes).\n- HID: elo: reject short touchscreen reports (git-fixes).\n- HID: hid-alps: Use pm_ptr instead of #ifdef CONFIG_PM (stable-fixes).\n- HID: hid-steam: Make client_opened a counter (stable-fixes).\n- HID: logitech-dj: validate unnumbered keyboard reports (git-fixes).\n- HID: mcp2221: clear rxbuf after I2C/SMBus transfer completes (git-fixes).\n- HID: mcp2221: fix OOB write in mcp2221_raw_event() (stable-fixes).\n- HID: mcp2221: validate response report length (git-fixes).\n- HID: picoLCD: check for fb_deferred_io_init() error (git-fixes).\n- HID: pxrc: reject short input reports (git-fixes).\n- HID: rate-limit hid_warn to prevent log flooding (stable-fixes).\n- HID: roccat: isku: reject short button reports (git-fixes).\n- HID: roccat: koneplus: reject short button reports (git-fixes).\n- HID: roccat: konepure: reject short button reports (git-fixes).\n- HID: roccat: kovaplus: reject short button reports (git-fixes).\n- HID: roccat: pyra: reject short button reports (git-fixes).\n- HID: roccat: ryos: reject short special reports (git-fixes).\n- HID: roccat: savu: reject short special reports (git-fixes).\n- HID: wacom: fix wacom_intuos_irq NULL pen_input deref (git-fixes).\n- HID: zydacron: validate key report length (git-fixes).\n- hwmon: (coretemp) Refresh the temperature on the first read (git-fixes).\n- hwmon: (corsair-cpro) Make wait_input_report_lock IRQ safe (git-fixes).\n- hwmon: (lm70) Fix rounding of negative temperatures (git-fixes).\n- hwmon: (lm95245) Fix negative temperature conversion (git-fixes).\n- hwmon: (sht3x) Return the consumed count for heater writes (git-fixes).\n- hwrng: amd - report partial reads in non-blocking mode (git-fixes).\n- hwrng: ba431 - fix reported byte count (git-fixes).\n- hwrng: cctrng - Fix runtime PM usage counter leak (git-fixes).\n- hwrng: core - reject unknown RNG names (git-fixes).\n- hwrng: intel - return -ENOMEM when ioremap() fails (git-fixes).\n- hwrng: intel - return -ENOMEM when kmalloc_obj() fails (git-fixes).\n- hwrng: starfive - propagate clock and reset errors (git-fixes).\n- i2c: acpi: Fix adapter reference leak in i2c_acpi_new_device_by_fwnode() (git-fixes).\n- i2c: at91: release DMA channels when probe defers (git-fixes).\n- i2c: designware: queue only one read command for block reads (git-fixes).\n- i2c: mt7621: fix copying uninitialized kernel stack with reduced page_len (git-fixes).\n- i2c: qcom-cci: Fix HALT_ACK reset request being dropped (git-fixes).\n- i2c: xiic: don't clobber msg-\u003elen to signal block-read completion (git-fixes).\n- i2c: xiic: Relocate xiic_i2c_runtime_suspend and xiic_i2c_runtime_resume to facilitate atomic mode (stable-fixes).\n- iio: accel: adis16201: fix channel order for buffer mode (git-fixes).\n- iio: accel: kionix-kx022a: Fix IPOL macro name (git-fixes).\n- iio: accel: kxcjk-1013: Disable autosuspend on remove (git-fixes).\n- iio: accel: mma9551: disable autosuspend on remove (git-fixes).\n- iio: accel: mma9553: disable autosuspend on remove (git-fixes).\n- iio: adc: aspeed: propagate reset deassert errors (git-fixes).\n- iio: adc: aspeed: Simplify with dev_err_probe (stable-fixes).\n- iio: adc: at91-sama5d2: disable autosuspend on remove (git-fixes).\n- iio: adc: stm32: fix minimum sampling time values (git-fixes).\n- iio: adc: ti-adc128s052: validate SPI match data (git-fixes).\n- iio: core: add accessors 'masklength' (stable-fixes).\n- iio: dac: ad5758: Fix alignment for DMA safety (git-fixes).\n- iio: dac: ad5758: Fix the offset calculation (git-fixes).\n- iio: dac: ad5758: Reject out-of-range raw values (git-fixes).\n- iio: humidity: hts221: report available values via read_avail() (git-fixes).\n- iio: imu: adis16400: Check return value of spi_setup() (git-fixes).\n- iio: light: ltrf216a: Return floating point values (stable-fixes).\n- iio: pressure: dps310: fix CFG_REG bit definitions (git-fixes).\n- iio: temperature: tmp117: fix calibbias cache update on I2C write failure (git-fixes).\n- Input: atkbd - skip deactivate for Lenovo IdeaPad Slim 3 15IWC11 (stable-fixes).\n- Input: da7280 - fix input device parent assignment (git-fixes).\n- Input: drv2665 - fix input device parent assignment (git-fixes).\n- Input: drv2667 - fix input device parent assignment (git-fixes).\n- Input: i8042 - add nomux quirk for Fujitsu LIFEBOOK U7410 (stable-fixes).\n- Input: lkkbd - disable pending work before freeing device (stable-fixes).\n- Input: maple_keyb - fix key press detection (git-fixes).\n- Input: maplecontrol - emit EV_SYN report after reporting events (git-fixes).\n- Input: matrix-keymap - reject keycodes above KEY_MAX (git-fixes).\n- Input: synaptics - add LEN205b entry to smbus_pnp_ids for ThinkPad T490 (stable-fixes).\n- Input: tps6507x-ts - fix input device parent assignment (git-fixes).\n- Input: xpad - add support for Corsair Novablade Pro (stable-fixes).\n- kernel-binary.spec.in: Emulate kabi.pl error when suse-kabi-tools is used.\n- kobject: fix out-of-bounds access in kobject_action_type() (git-fixes).\n- kobject: Fix the kobj_set_name reference in kset_register() kernel-doc (git-fixes).\n- KVM: SEV: Do cache maintenance on the source VM *before* clearing SEV state (git-fixes).\n- leds: flash: Prevent using uninitialized variable in flash_fault_show() (git-fixes).\n- leds: lm3692x: Fix regulator/gpio leak and wrong enabled state on last write failure (git-fixes).\n- leds: lp8860: Fix device_node leak in lp8860_probe() (git-fixes).\n- leds: pca9532: Check i2c_smbus_read_byte_data() return value (git-fixes).\n- lib/decompress_bunzip2: fix off-by-one in run-length bounds check (git-fixes).\n- lib: decompress_bunzip2: fix integer overflow in run-length decoding (git-fixes).\n- lib: validate in-memory LZ4 chunk length (git-fixes).\n- mac80211: tx: Use info-\u003eflags in ieee80211_tx_h_select_key() (git-fixes).\n- media: adv748x: Fix endpoint reference leaks on probe failure (git-fixes).\n- media: adv7180: Initialize mutex before ancillary clients (git-fixes).\n- media: adv7604: avoid negative array index in log_status when cp_read fails (git-fixes).\n- media: amphion: fix runtime PM imbalance on probe failure (git-fixes).\n- media: amphion: prevent unbind while video instances are open (git-fixes).\n- media: atmel-isi: release unregistered video device on remove (git-fixes).\n- media: au0828: Fix media device leak in au0828_usb_probe() (git-fixes).\n- media: au0828: fix use-after-free in bulk_timeout timer on disconnect (git-fixes).\n- media: au0828: Free URBs when starting DVB streaming fails (git-fixes).\n- media: cx18: Disable PCI device on probe failure (git-fixes).\n- media: cx88: Disable PCI device on MPEG initialization failure (git-fixes).\n- media: cx231xx-audio: drain wq_trigger before audio fini (git-fixes).\n- media: cx231xx: Fix cleanup path on failure (git-fixes).\n- media: cx23885: Fix use-after-free in cx23885_finidev due to race condition (git-fixes).\n- media: cx23885: unregister DVB bus when SP2 CI setup fails (git-fixes).\n- media: em28xx: fix double free in em28xx_alloc_urbs (git-fixes).\n- media: em28xx: reject audio endpoint with zero packet size (git-fixes).\n- media: exynos4-is: Fix a race between s_stream(0) and the interrupt handler (git-fixes).\n- media: go7007: bound EZ-USB I2C transfers to the usb_buf size (git-fixes).\n- media: go7007: unregister the I2C adapter on USB probe failure (git-fixes).\n- media: gspca: use vb2_video_unregister_device() on disconnect (git-fixes).\n- media: hackrf: fix use-after-free in hackrf_alloc_urbs() error path (git-fixes).\n- media: hantro: Disable multicore support (stable-fixes).\n- media: hantro: disable runtime PM before hardware teardown (git-fixes).\n- media: hantro: Harden MPEG-2 control access against NULL (git-fixes).\n- media: i2c: ar0521: remove duplicate media entity cleanup (git-fixes).\n- media: i2c: ov5648: Fix a data race on state-\u003estreaming (git-fixes).\n- media: i2c: ov8856: fix debug message to report actual CSI-2 lane count (git-fixes).\n- media: i2c: tc358743: add missing color-space strings (git-fixes).\n- media: imon: fix use-after-free in display_close via dev_dbg (git-fixes).\n- media: imx-jpeg: cancel timeout worker when streaming stops (git-fixes).\n- media: imx-jpeg: finish the job on device_run() error paths (git-fixes).\n- media: ir-hix5hd2: Ensure rdev is setup before interrupts are enabled (git-fixes).\n- media: ir_toy: Validate the maximum tx carrier (git-fixes).\n- media: m2m-deinterlace: fix default capture field (git-fixes).\n- media: marvell-cam: fix unmet dependency for VIDEO_MMP_CAMERA (git-fixes).\n- media: marvell: manage the MMP camera clock provider (git-fixes).\n- media: mediatek: jpeg: Avoid context access after job finish (git-fixes).\n- media: mediatek: jpeg: retry HW selection after successful wait (git-fixes).\n- media: mediatek: vpu: free IRQ before destroying watchdog workqueue (git-fixes).\n- media: mediatek: vpu: release reserved memory on remove (git-fixes).\n- media: meson-ir-tx: Ensure clock is disabled on unbind (git-fixes).\n- media: meson-ir-tx: Ensure probe error is propagated (git-fixes).\n- media: meson-ir-tx: Prevent divide by zero in meson_irtx_prepare_pulse() (git-fixes).\n- media: meson: vdec: size capture planes from the aligned canvas (git-fixes).\n- media: microchip-csi2dc: fix async notifier leak on probe error path (git-fixes).\n- media: microchip-isc: disable histogram and flush AWB work on teardown (git-fixes).\n- media: microchip-isc: do not touch WB registers when not streaming (git-fixes).\n- media: microchip-isc: fix PM runtime leak in AWB work handler (git-fixes).\n- media: microchip-isc: synchronize the IRQ before disabling clocks on stop (git-fixes).\n- media: mtk-jpeg: Fix runtime PM leak in mtk_jpegdec_worker() (git-fixes).\n- media: mtk-jpeg: Fix runtime PM leak in mtk_jpegenc_worker() (git-fixes).\n- media: platform: mtk-mdp3: Fix device reference leak in mdp_comp_init() (git-fixes).\n- media: pvrusb2: Fix USB parent device leak in class_dev_create() (git-fixes).\n- media: rc: fintek-cir: process a full RX buffer instead of overflowing it (git-fixes).\n- media: rc: mce_kbd: Fix inconsistent locking of keylock (git-fixes).\n- media: redrat3: Ensure all urbs are suspended (git-fixes).\n- media: redrat3: Ensure we don't read beyond the end of the packet (git-fixes).\n- media: redrat3: fix UAF in probe error path leaving rc device registered (git-fixes).\n- media: require two-byte Cypress type 04 records (git-fixes).\n- media: rtl28xxu: fix SDR platform device leak (git-fixes).\n- media: saa7146: Initialize interrupt lock before requesting IRQ (git-fixes).\n- media: streamzap: Add missing rc_unregister_device() (git-fixes).\n- media: stv090x: bound DiSEqC reply length to msg size (git-fixes).\n- media: stv0900: bound DiSEqC reply length to msg size (git-fixes).\n- media: tw68: balance PCI enable on cleanup (git-fixes).\n- media: tw686x: fix V4L2 device lifetime on probe failure (git-fixes).\n- media: uvcvideo: Fix NULL deref on events for uninitialized controls (git-fixes).\n- media: v4l2-ctrls: do nothing if controls == NULL in cluster functions (git-fixes).\n- media: venus: Drop session events without an instance (git-fixes).\n- media: vicodec: fix NULL deref on oversized frame (git-fixes).\n- media: vicodec: fix out-of-bounds write on under-rounded coded dimensions (git-fixes).\n- media: vicodec: make encoder CAPTURE dimensions read-only (git-fixes).\n- media: vicodec: zero-initialize stateful decoder heap buffers (git-fixes).\n- media: vidtv: fix frontend reference leak on unbind (git-fixes).\n- media: vidtv: fix uaf in vidtv_bridge_on_new_pkts_avail (git-fixes).\n- media: vim2m: keep transaction buffer count stable while streaming (git-fixes).\n- media: vivid: round the height down to the vertical subsampling factor (git-fixes).\n- media: vpif_display: Fix i2c adapter reference leak in vpif_probe() (git-fixes).\n- mfd: ab8500: Fix child device leaks on probe failure (git-fixes).\n- mfd: da9150: Balance IRQ wake on teardown (git-fixes).\n- mfd: intel_quark_i2c_gpio: Manage the fixed-rate clock (git-fixes).\n- mfd: tps65217: Check return value when masking interrupt sources (git-fixes).\n- mfd: tps65217: Fix NULL pointer dereference on IRQ init failure (git-fixes).\n- mfd: wcd934x: Fix NULL pointer dereference on IRQ probe deferral (git-fixes).\n- mfd: wcd934x: set DMA mask on parent to silence \"DMA mask not set\" (git-fixes).\n- misc: enclosure: fix UAF on device_register() failure (git-fixes).\n- mm, vmscan: flush tlb before large folio is freed (bsc#1250656).\n- mm: introduce num_pages_contiguous() (bsc#1284243).\n- mtd: amd76xrom: Fix PCI device reference leak in amd76xrom_init_one() (git-fixes).\n- mtd: block: prevent reclaim I/O during request processing (git-fixes).\n- mtd: Call get_wunit() on the master partition (git-fixes).\n- mtd: cfi_cmdset_0002: cap the write-buffer chunk at 256 bytes on an x8 device (git-fixes).\n- mtd: maps: l440gx: Fix double put of the ISA bridge in init_l440gx() (git-fixes).\n- mtd: maps: l440gx: Fix double put of the PM device in init_l440gx() (git-fixes).\n- mtd: maps: pci: balance PCI enable on cleanup (git-fixes).\n- mtd: parsers: qcom: fix offset/size overflow on large partitions (git-fixes).\n- mtd: rawnand: atmel: Fix MCK clock leak in atmel_nand_controller_init() (git-fixes).\n- mtd: rawnand: pl353: fix clk reference leak in pl35x_nfc_setup_interface() (git-fixes).\n- mtd: rawnand: sunxi: reject ECC maximization on small pages (git-fixes).\n- mtd: spi-nor: sfdp: check the length of the SCCR map (git-fixes).\n- mtd: spi-nor: sfdp: check the length of the xSPI Profile 1.0 table (git-fixes).\n- mtd: spi-nor: Unprepare legacy controllers upon RWW wait interruption (git-fixes).\n- mtd: spinand: Fix spinand_manufacturer_ops kernel-doc (git-fixes).\n- net/rds: tcp: don't force RDS_CONN_RESETTING over a concurrent shutdown (git-fixes).\n- net/rds: use clear_bit_unlock() in release_refill() (git-fixes).\n- net: usb: cdc_mbim: don't enable BHs in tx_fixup under netpoll (git-fixes).\n- net: usb: cdc_ncm: don't enable BHs in tx_fixup under netpoll (git-fixes).\n- net: usb: lan78xx: reject invalid EEPROM write requests (git-fixes).\n- net: usb: pegasus: check rx pkt_len against the received length (git-fixes).\n- net: usb: pegasus: do not advance rx_skb-\u003edata on dropped frames (git-fixes).\n- net: usb: r8153_ecm: reject short register reads (git-fixes).\n- net: usb: sierra_net: reject short firmware attribute reads (git-fixes).\n- net: wwan: iosm: validate msg_head before indexing msg_ring (git-fixes).\n- PCI/AER: Fix memory leak in aer_recover_queue() on kfifo buffer overflow (git-fixes).\n- PCI/P2PDMA: Gate the host bridge whitelist warning on verbose (git-fixes).\n- PCI/sysfs: Handle a malformed _DSM result in acpi_attr_is_visible() (git-fixes).\n- PCI/sysfs: Pass the device name length in UTF-16 code units (git-fixes).\n- PCI/sysfs: Stop reporting _DSM failures as -EPERM (git-fixes).\n- PCI: aardvark: Disable PHY on probe failures (git-fixes).\n- PCI: cadence: Preserve all error codes in cdns_plat_pcie_probe() (git-fixes).\n- PCI: Disable MSI for ULi M1575 EHCI controller (git-fixes).\n- PCI: dra7xx: Fix clock enable leak on probe failure (git-fixes).\n- PCI: endpoint: pci-epf-vntb: Pass PF/VF number when BAR programming (git-fixes).\n- PCI: endpoint: pci-epf-vntb: Serialize virtual PCI bus scan (git-fixes).\n- PCI: Fix out-of-bounds MMIO read in nvme_disable_and_flr() (git-fixes).\n- PCI: qcom: Honor IOMMU provider's #iommu-cells in qcom_pcie_config_sid_1_9_0() (git-fixes).\n- PCI: rockchip-host: Do not attempt 5.0 GT/s retraining (git-fixes).\n- PCI: xgene: Use managed clock for PCIe controller (git-fixes).\n- peci: aspeed: Initialize state before requesting IRQ (git-fixes).\n- phy: cadence: Sierra: Do not modify register when getting parent clock (git-fixes).\n- phy: core: Fix race-condition between _of_phy_get() and try_module_get() (git-fixes).\n- phy: HiSilicon: Fix error handling in hi3670_pcie_allclk_ctrl() (git-fixes).\n- phy: hisilicon: hi3670: Fix OF node and device reference leaks (git-fixes).\n- pinctrl: mediatek: mt7629: fix the 2.4 GHz Wi-Fi pin mode array (git-fixes).\n- pinctrl: sprd: free maps on DT map failure (git-fixes).\n- pinctrl: stm32: Fix fwnode reference leak in stm32_gpiolib_register_bank() (git-fixes).\n- platform/chrome: cros_ec_proto: Fix deferred response (git-fixes).\n- platform/olpc: Reserve space for a string terminator (git-fixes).\n- platform/x86/amd/pmc: Fix RTC reference leak in amd_pmc_verify_czn_rtc() (git-fixes).\n- platform/x86/amd: Stop counting intermediate cycles with metrics table (git-fixes).\n- platform/x86/intel-uncore-freq: Continue restoring limits on resume (git-fixes).\n- platform/x86: asus-wmi: validate custom fan curves on enable (git-fixes).\n- platform/x86: gpd pocket fan: Cancel work before releasing GPIOs (git-fixes).\n- platform/x86: hp-wmi: fix heap OOB read and memory corruption in hp_wmi_perform_query() (git-fixes).\n- platform/x86: ibm_rtl: Fix potential OOB read at signature search (git-fixes).\n- platform/x86: intel_telemetry: initialize default trace verbosity (git-fixes).\n- platform/x86: msi-ec: Report valid charge thresholds when unset (git-fixes).\n- power: supply: ab8500: Preserve battery termination current (git-fixes).\n- power: supply: ab8500_btemp: Fix event temperature reporting (git-fixes).\n- power: supply: ab8500_charger: Decode AB8505 USB status (git-fixes).\n- power: supply: ab8500_charger: Fix AC charger re-enable (git-fixes).\n- power: supply: ab8500_charger: Handle detection errors (git-fixes).\n- power: supply: ab8500_charger: Recover inactive AB8505 charger (git-fixes).\n- power: supply: ab8500_charger: Respect AB8505 register layout (git-fixes).\n- power: supply: ab8500_charger: Retry AB8505 USB detection (git-fixes).\n- power: supply: ab8500_charger: Skip absent AB8505 main charger (git-fixes).\n- power: supply: ab8500_fg: Accept status from supplied power (git-fixes).\n- power: supply: ab8500_fg: Avoid reserved AB8505 CCConf bit (git-fixes).\n- power: supply: ab8500_fg: Finalize current measurements (git-fixes).\n- power: supply: ab8500_fg: Report sub-percent charge changes (git-fixes).\n- power: supply: bq2515x: Propagate charge-enable read errors (git-fixes).\n- power: supply: charger-manager: Convert to platform remove callback returning void (stable-fixes).\n- power: supply: generic-adc-battery: fix status with no supplier (git-fixes).\n- power: supply: generic-adc-battery: Propagate charged GPIO errors (git-fixes).\n- power: supply: gpio-charger: Report discharging without input power (git-fixes).\n- power: supply: lp8788-charger: Convert to platform remove callback returning void (stable-fixes).\n- power: supply: lp8788-charger: fix use-after-free on remove (git-fixes).\n- power: supply: lp8788: Use devm_power_supply_register() helper (stable-fixes).\n- power: supply: mp2629: Use the full batt_impedance_compensation name in the ABI document (git-fixes).\n- power: supply: qcom_battmgr: report full batteries (git-fixes).\n- power: supply: qcom_battmgr: report the USB type from USB_ADAP_TYPE (git-fixes).\n- power: supply: sbs-battery: disable polling before supply teardown (git-fixes).\n- pwm: mtk-disp: Fix period readback (git-fixes).\n- RDMA/core: Add rdma_restrack_begin/abort/commit_del() operations (git-fixes).\n- regulator: ab8500: Fix AB8505 VANA voltage selectors (git-fixes).\n- regulator: ab8500: Handle AB8505 VINTCORE selector 7 (git-fixes).\n- regulator: ab8500: Propagate mode enable read errors (git-fixes).\n- regulator: ab8500: Test dedicated enable bits only (git-fixes).\n- regulator: ab8500: Treat cut 1.0 VAUX3 as fixed (git-fixes).\n- regulator: core: Fix c_rdev reference leak in regulator_resolve_coupling() (git-fixes).\n- regulator: core: Fix coupled regulators reference leak on removal (git-fixes).\n- regulator: core: Fix rdev reference leak in regulator_resolve_supply() (git-fixes).\n- regulator: mp886x: check get_voltage_sel() return value (git-fixes).\n- regulator: mp886x: fix pontential division by zero (git-fixes).\n- regulator: mp886x: fix vsel_mask (git-fixes).\n- regulator: rt6190: Fix runtime PM imbalance in rt6190_out_enable() (git-fixes).\n- Reinstate \"resource: avoid unnecessary lookups in find_next_iomem_res()\" (bsc#1284243).\n- Revert \"mkspec: Exclude rt flavor from kernel-syms dependencies\" (bsc#1244337).\n- Revert \"rpm/mkspec: Fix missing kernel-syms-rt creation\" (bsc#1244337).\n- Revert \"wifi: mac80211: do not use old MBSSID elements\" (git-fixes).\n- rtc: abx80x: fix error check after i2c_smbus_read in read_alarm() (git-fixes).\n- rtc: abx80x: properly handle shared IRQs (git-fixes).\n- rtc: ac100: Assign .num before accessing .hws (git-fixes).\n- rtc: cmos: Disable ACPI RTC event before handling it (git-fixes).\n- rtc: dev: zero-initialize struct rtc_wkalrm to prevent information leak (git-fixes).\n- rtc: ds1685: arm the wake-up alarm at power-off only if an alarm is set (git-fixes).\n- rtc: ds1685: do not sleep in the power-off handler (git-fixes).\n- rtc: ftrtc010: fix integer overflow in time calculation (git-fixes).\n- rtc: mpfs: Fix alarm register word order (git-fixes).\n- rtc: mpfs: fix unchecked devm_clk_get() error pointer in probe() (git-fixes).\n- rtc: s35390a: Add missing newline to dev_err (git-fixes).\n- rtc: s35390a: Fix alarm not disabling (git-fixes).\n- rtc: spear: initialize IRQ state before requesting alarm IRQ (git-fixes).\n- selftests/alsa: Do not take another control's event as our own (git-fixes).\n- serial: 8250_lpss: do not touch uninitialized line in ehl_serial_exit() (git-fixes).\n- serial: core: shut down initialized port on removal (git-fixes).\n- serial: max310x: don't clobber the TX break bit in set_termios (git-fixes).\n- serial: pmac_zilog: push received data to the port that received it (git-fixes).\n- serial: pmac_zilog: report received breaks (git-fixes).\n- slimbus: messaging: fix leaked PM vote on tid allocation failure (git-fixes).\n- smb: client: fix next_buffer UAF and NextCommand bounds in compound PDUs (git-fixes).\n- smb: client: use kzalloc to zero-initialize security descriptor buffer (git-fixes).\n- smb: common: change the data type of num_aces to le16 (git-fixes).\n- soc/tegra: flowctrl: Release OF node reference on error (git-fixes).\n- soc: fsl: cpm1: tsa: Fix clock leak in tsa_of_parse_tdms() (git-fixes).\n- soc: fsl: dpio: Fix cleanup on IRQ registration failure (git-fixes).\n- soc: fsl: dpio: Free the IRQ before releasing the I/O object (git-fixes).\n- soc: qcom: apr: clean up failed service registrations (git-fixes).\n- soc: ti: k3-ringacc: Correct ring API kernel-doc (git-fixes).\n- soc: ti: k3-ringacc: Fix DMA ring initialization kernel-doc (git-fixes).\n- soundwire: intel: initialise quirk_mask before reading it (git-fixes).\n- spi: amd: fix len==0 underflow and FIFO overflow (git-fixes).\n- spi: bcm63xx-hsspi: Disable runtime PM on remove (git-fixes).\n- spi: Fix the return value in spi_new_ancillary_device() kernel-doc (git-fixes).\n- spi: jcore: fix divide-by-zero when speed_hz is zero (git-fixes).\n- spi: mtk-nor: fix runtime PM usage count leak in probe error path (git-fixes).\n- spi: mxic: fix ps_clk leak in runtime resume (git-fixes).\n- spi: npcm-fiu: limit UMA data_size to the 16-byte staging buffer (git-fixes).\n- spi: omap2-mcspi: Remove unbalanced pm_runtime_put_sync() calls (git-fixes).\n- spi: spi-sun4i: sun4i_spi_fill_fifo(): always apply A10 FIFO fill level workaround (git-fixes).\n- spi: spi-sun4i: sun4i_spi_transfer_one(): fix transfers for SUN4I_FIFO_DEPTH (git-fixes).\n- spi: zynq-qspi: fix address buffer corruption and support 4-byte address (git-fixes).\n- staging: iio: adc: ad7816: Fix DMA safety issues in SPI transfers (git-fixes).\n- staging: media: av7110: fix corrupted BER reporting in sp8870 (git-fixes).\n- staging: media: imx: csc-scaler: fix ipu_image_convert_run leak on queue error (git-fixes).\n- staging: rtl8723bs: clean up redundant \u0026 parentheses (stable-fixes).\n- Staging: rtl8723bs: Delete dead code from update_current_network() (stable-fixes).\n- staging: rtl8723bs: fix buffer over-read in rtw_update_protection (git-fixes).\n- staging: rtl8723bs: fix RX buffer OOB write from device-reported length (git-fixes).\n- Staging: rtl8723bs: Remove dead code from _rtw_free_network() (stable-fixes).\n- staging: sm750fb: free cmap on framebuffer release (git-fixes).\n- thermal/drivers/sprd: validate the sensor id from the device tree (git-fixes).\n- thermal: Fix CPU mask truncation in power limit trace event (git-fixes).\n- thermal: intel: int340x: Fix temperature selection around 0 C (git-fixes).\n- thermal: intel: powerclamp: Reject invalid window_size values (git-fixes).\n- thermal: ti-soc-thermal: Fix the return value in ti_bandgap_get_sensor_data() kernel-doc (git-fixes).\n- thunderbolt: Disable CL states for the Anker Prime TB5 dock (stable-fixes).\n- thunderbolt: Do not RPM complete unrelated subtrees on unplug (git-fixes).\n- tools/thermal/tmon: Fix string truncation warning in optarg copy (git-fixes).\n- tpm: fix zero-length read discarding the pending response (git-fixes).\n- tpm: tpm_nsc: fix NULL pointer dereference on init failure (git-fixes).\n- tpm: tpm_nsc: stop using the cleanup callback as dev.release (git-fixes).\n- tty: add break_wait kernel-doc (git-fixes).\n- tty: vcc: hold port lock when clearing tty pointer in vcc_cleanup (stable-fixes).\n- tty: vcc: zero-initialize control packet in vcc_send_ctl() (stable-fixes).\n- usb-storage: alauda: check the return value of alauda_read_map() (git-fixes).\n- usb-storage: alauda: do not do DMA from the stack (git-fixes).\n- usb-storage: alauda: fix out-of-bounds zone index (git-fixes).\n- USB: cdc-acm: fix urb leak on disconnect (git-fixes).\n- usb: chipidea: udc: fix DMA and SG cleanup in _ep_nuke() (stable-fixes).\n- usb: dwc3: clear forceRM when issuing EndTransfer (git-fixes).\n- usb: dwc3: gadget: Fix use-after-free in dwc3_gadget_free_endpoints due to race condition (git-fixes).\n- usb: dwc3: gadget: Reinitiate stream for all host NoStream behavior (stable-fixes).\n- usb: fotg210: validate endpoint index in ep0 handlers (git-fixes).\n- usb: gadget: composite: avoid warning on aborted delayed status (git-fixes).\n- usb: gadget: dummy_hcd: fix SuperSpeed ep0 maxpacket (git-fixes).\n- usb: gadget: dummy_hcd: prevent unbind via sysfs (git-fixes).\n- usb: gadget: f_fs: Fix Use-After-Free in AIO error path (git-fixes).\n- usb: gadget: f_mass_storage: ignore class requests while inactive (git-fixes).\n- usb: gadget: f_midi: Annotate struct f_midi with __counted_by (stable-fixes).\n- usb: gadget: f_midi: initialize work in f_midi_alloc() (git-fixes).\n- USB: gadget: ffs: fix mm lifetime handling (stable-fixes).\n- usb: gadget: functionfs: Factorize wait-for-endpoint code (stable-fixes).\n- USB: gadgetfs: do not WARN about excessively large memory allocations (git-fixes).\n- usb: image: microtek: stop SG processing after transfer errors (git-fixes).\n- usb: musb: da8xx: depopulate OF children on probe failure (git-fixes).\n- usb: musb: da8xx: depopulate OF children on remove (git-fixes).\n- usb: ohci-spear: disable controller wakeup on removal (git-fixes).\n- usb: ohci-spear: Remove unnecessary NULL check before clk_disable_unprepare() (stable-fixes).\n- USB: pci-quirks: Release EHCI device reference (git-fixes).\n- USB: serial: cp210x: add Corsair AX1500i Power Supply (stable-fixes).\n- USB: serial: option: add Compal EXC-T1 support (stable-fixes).\n- USB: serial: option: add Compal EXM-G1x support (stable-fixes).\n- USB: serial: option: add Quectel EG060W (stable-fixes).\n- USB: serial: option: add Quectel RG660QB (stable-fixes).\n- USB: serial: option: add support for SIMCom SIM8260C (stable-fixes).\n- USB: serial: sierra: fix urb leak on write completion (git-fixes).\n- USB: serial: usb_wwan: fix urb leak on disconnect (git-fixes).\n- usb: typec: ucsi_ccg: Add retry mechanism in ccg_read (git-fixes).\n- USB: usbmon: fix null-ptr-deref in mon_bus_remove() when mon_bus_init() fails (git-fixes).\n- usbnet: fix EVENT_RX_PAUSED race in usbnet_skb_return() (git-fixes).\n- usbnet: fix smp_processor_id() use in preemptible context (git-fixes).\n- vfio/type1: batch vfio_find_vpfn() in function vfio_unpin_pages_remote() (bsc#1284243).\n- vfio/type1: conditional rescheduling while pinning (bsc#1284243).\n- vfio/type1: introduce a new member has_rsvd for struct vfio_dma (bsc#1284243).\n- vfio/type1: optimize vfio_pin_pages_remote() (bsc#1284243).\n- vfio/type1: optimize vfio_unpin_pages_remote() (bsc#1284243).\n- vt: skip screen update for DEC alignment test on backgroup consoles (git-fixes).\n- watchdog: mediatek: Apply the driver's mode to a watchdog left running (git-fixes).\n- wifi: ath6kl: don't take RTNL in del_virtual_intf (git-fixes).\n- wifi: ath9k: delete channel-context timers on deinit (git-fixes).\n- wifi: ath10k: avoid IDR mutation during TX cleanup (git-fixes).\n- wifi: ath11k: avoid IDR mutation during pending mgmt TX cleanup (git-fixes).\n- wifi: ath11k: avoid IDR mutation during vif mgmt TX cleanup (git-fixes).\n- wifi: ath11k: disable interrupts during firmware crash recovery (git-fixes).\n- wifi: ath11k: fix locking problem in ath11k_dp_rx_tid_del_func() (git-fixes).\n- wifi: ath11k: fix NULL dereference in ahb remove when QMI init incomplete (git-fixes).\n- wifi: ath11k: Fix possible memory leak in ath11k_dp_srng_setup() (git-fixes).\n- wifi: ath11k: fix sporadic WLAN initialization failures (git-fixes).\n- wifi: ath11k: fix unbalanced IRQ enable/disable during suspend/resume (git-fixes).\n- wifi: ath11k: modify null check logic in ath11k_ce_rx_post_pipe() (git-fixes).\n- wifi: ath11k: reset ar-\u003enum_stations on hardware start (git-fixes).\n- wifi: ath11k: unregister PM notifier on QMI init failure path (git-fixes).\n- wifi: ath12k: avoid IDR mutation during vif mgmt TX cleanup (git-fixes).\n- wifi: ath12k: fix incorrect TID updation in DP monitor status path (stable-fixes).\n- wifi: ath12k: fix struct hal_rx_phyrx_rssi_legacy_info (stable-fixes).\n- wifi: ath12k: fix the fetching of combined rssi (git-fixes).\n- wifi: ath12k: Free allocated CE IRQs on request_irq() failure (git-fixes).\n- wifi: b43: don't pass unterminated string to sscanf() (git-fixes).\n- wifi: b43: fix use-after-free in b43_bcma_remove() (git-fixes).\n- wifi: b43legacy: debugfs: NUL terminate string in debugfs (git-fixes).\n- wifi: brcmsmac: Adjust txpwrindex value in nphy_ipa_rxcal_gaintbl_2GHz (git-fixes).\n- wifi: carl9170: NUL terminate string in debugfs (git-fixes).\n- wifi: cfg80211: allow zero HE OBSS PD offsets (git-fixes).\n- wifi: cfg80211: preserve hidden-group beacon IE ownership (git-fixes).\n- wifi: cfg80211: reject duplicate wiphy cipher suite entries (stable-fixes).\n- wifi: cfg80211: track SSID regardless of country data (git-fixes).\n- wifi: cw1200: fix TX padding OOB read leaking heap data to device (git-fixes).\n- wifi: iwlegacy: 3945: free EEPROM data on remove (git-fixes).\n- wifi: iwlwifi: dvm: pair transport op-mode enter/leave (stable-fixes).\n- wifi: iwlwifi: mvm: remove mvm prefix from iwl_mvm_tx_resp* (stable-fixes).\n- wifi: iwlwifi: mvm: validate TX_CMD response layout (stable-fixes).\n- wifi: mac80211: account proxy paths against the mesh path limit (git-fixes).\n- wifi: mac80211: Add 802.3 multicast encapsulation offload support (stable-fixes).\n- wifi: mac80211: Add multicast to unicast support for 802.3 path (stable-fixes).\n- wifi: mac80211: Add sta pointer sanity check in ieee80211_8023_xmit() (stable-fixes).\n- wifi: mac80211: clear fragment cache entry 'is_protected' (git-fixes).\n- wifi: mac80211: don't call ieee80211_handle_reconfig_failure when not needed (stable-fixes).\n- wifi: mac80211: don't reset the TXQ scheduling round number (git-fixes).\n- wifi: mac80211: don't send encap offload frames unencrypted (git-fixes).\n- wifi: mac80211: drain PS delivery work during station teardown (git-fixes).\n- wifi: mac80211: drop encap offload frames with a tainted key (git-fixes).\n- wifi: mac80211: Fix a race when expiring a mesh path (git-fixes).\n- wifi: mac80211: fix encryption tailroom (git-fixes).\n- wifi: mac80211: fix key selection for encap offload frames (git-fixes).\n- wifi: mac80211: fix mesh fast xmit path deletion UAF (git-fixes).\n- wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (stable-fixes).\n- wifi: mac80211: fix swapped fq_overlimit/fq_overmemory in aqm debugfs (git-fixes).\n- wifi: mac80211: Fix the return value in mesh_path_add() kernel-doc (git-fixes).\n- wifi: mac80211: fix unauthorised port check for encap offload (git-fixes).\n- wifi: mac80211: handle empty FILS association request payload (git-fixes).\n- wifi: mac80211: init radiotap iter after length checks (git-fixes).\n- wifi: mac80211: kill wake_txqs_tasklet on unregistration (git-fixes).\n- wifi: mac80211: limit injected HT/VHT MCSes (git-fixes).\n- wifi: mac80211: mesh: use hlist_add_head_rcu() (git-fixes).\n- wifi: mac80211: minstrel_ht: validate fixed rate index (git-fixes).\n- wifi: mac80211: prevent AP VLAN tx from other interfaces (git-fixes).\n- wifi: mac80211: refactor populating mesh related fields in sinfo (stable-fixes).\n- wifi: mac80211: release mesh path quota on failed additions (git-fixes).\n- wifi: mac80211: reserve MME tailroom for protected beacons (git-fixes).\n- wifi: mac80211: set info-\u003eband for 802.3 encap offload frames (git-fixes).\n- wifi: mac80211: use link address as TA for non-MLO 4-addr station on MLD AP (git-fixes).\n- wifi: mt76: feed the station RSSI average from the chain signals (git-fixes).\n- wifi: mt76: fix memory leak in USB TX path (git-fixes).\n- wifi: mt76: Fix of_node reference leak in mt76_get_rate_power_limits() (git-fixes).\n- wifi: mt76: fix unlocked wcid check in mt76_tx_status_skb_add() (git-fixes).\n- wifi: mt76: fix wcid-\u003epktid corruption in mt76_wcid_cleanup() (git-fixes).\n- wifi: mt76: mt76x02: validate RX padding before use (git-fixes).\n- wifi: mt76: mt76x02: validate TX-status rate index before mac80211 handoff (git-fixes).\n- wifi: mt76: mt792x: fix UAF in SDIO TX path when out of memory (git-fixes).\n- wifi: mt76: mt7603: don't drop short frames looped back on PS entry (git-fixes).\n- wifi: mt76: mt7615: cancel reset work during unregister (git-fixes).\n- wifi: mt76: mt7615: do not tear down BSS/STA state for monitor vifs (git-fixes).\n- wifi: mt76: mt7615: read MT7663 temperature from the correct offset (git-fixes).\n- wifi: mt76: mt7615: usb: fix source overread in mt7663u_copy (git-fixes).\n- wifi: mt76: mt7615: validate MCU response lengths (git-fixes).\n- wifi: mt76: mt7915: allocate vif wcid in the same range as stations (stable-fixes).\n- wifi: mt76: mt7915: bound the device EEPROM address before the EFUSE copy (git-fixes).\n- wifi: mt76: mt7915: check default EEPROM firmware size before copying (git-fixes).\n- wifi: mt76: mt7915: clear wcid mask under mutex after RCU pointer clear (git-fixes).\n- wifi: mt76: mt7915: Fix an error handling path in mt7915_add_interface() (git-fixes).\n- wifi: mt76: mt7915: guard firmware memory dump write on disabled memdump (git-fixes).\n- wifi: mt76: mt7915: set correct background radar capability (stable-fixes).\n- wifi: mt76: mt7915: unregister thermal cooling device on hwmon failure (git-fixes).\n- wifi: mt76: mt7921: check drv_pmctrl return in the PCIe reset path (git-fixes).\n- wifi: mt76: mt7921: fix lock inversion between dev-\u003emutex and iflist_mtx (git-fixes).\n- wifi: mt76: mt7921: fix the lock inversion in suspend and resume (git-fixes).\n- wifi: mt76: mt7925: check drv_pmctrl return in the PCIe reset path (git-fixes).\n- wifi: mt76: mt7925: fix lock inversion between dev-\u003emutex and iflist_mtx (git-fixes).\n- wifi: mt76: mt7925: fix the lock inversion in suspend and resume (git-fixes).\n- wifi: mt76: mt7925: honour mac80211's FIF_FCSFAIL instead of hardcoding drop_err (git-fixes).\n- wifi: mt76: mt7925: restore the reset state when fw_pmctrl fails (git-fixes).\n- wifi: mt76: mt7996: fix PLE free page and AC queue register offsets (git-fixes).\n- wifi: mt76: mt7996: validate firmware event lengths before parsing (git-fixes).\n- wifi: mt76: usb: fix source overread in mt76u_copy (git-fixes).\n- wifi: mwifiex: append hotfix number to firmware version string (git-fixes).\n- wifi: p54: validate firmware record lengths (stable-fixes).\n- wifi: rtw88: debugfs: don't vzalloc(0) when rsvd_page is read unconfigured (git-fixes).\n- wifi: rtw88: debugfs: support multiple adapters debugging (stable-fixes).\n- wifi: rtw88: fix out-of-bounds CAM write when key table is full (git-fixes).\n- wifi: rtw88: sdio: zero the padding added to a TX transfer (git-fixes).\n- wifi: rtw89: 8851b: fix swapped DPK channel/bandwidth backup fields (git-fixes).\n- wifi: rtw89: cap firmware section_num before parsing (git-fixes).\n- wifi: wfx: fix possible device hang during init (git-fixes).\n- wifi: wfx: fix use-after-free of the cooling work on device removal (git-fixes).\n- wifi: wfx: validate MIB read length before copying to caller (git-fixes).\n- wwan: wwan_hwsim: Pin module for debugfs file operations (git-fixes).\n- xhci: dbc: lock the minor IDR on registration failure (git-fixes).\n","status":"published","published":"2026-11-03T19:25:57Z","modified":"2026-11-06T17:23:11.195914364Z","updated_at":"2026-11-06T18:05:03.243497Z"},{"id":"SUSE-SU-2026:24619-1","title":"Security update for the Linux Kernel","description":"\nThe SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues:\n\nThe following security issues were fixed:\n\n- CVE-2025-68219: cifs: fix memory leak in smb3_fs_context_parse_param error path (bsc#1255222).\n- CVE-2026-31708: smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path (bsc#1264022).\n- CVE-2026-31709: smb: client: validate the whole DACL before rewriting it in cifsacl (bsc#1264024).\n- CVE-2026-43350: smb: client: require a full NFS mode SID before reading mode bits (bsc#1264985).\n- CVE-2026-46155: smb/client: fix out-of-bounds read in smb2_compound_op() (bsc#1267720).\n- CVE-2026-64324: udf: validate free block extents against the partition length (bsc#1273970).\n- CVE-2026-64370: posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (bsc#1273805).\n- CVE-2026-64380: smb: client: harden POSIX SID length parsing (bsc#1273557).\n- CVE-2026-64413: netfilter: ebtables: zero chainstack array (bsc#1274082).\n- CVE-2026-64435: audit: Fix data races of skb_queue_len() readers on audit_queue (bsc#1274080).\n- CVE-2026-68186: binfmt_misc: set have_execfd only once the interpreter is opened (bsc#1274949).\n- CVE-2026-68447: drm/amdkfd: clamp v9 CRIU control stack checkpoint copy to BO size (bsc#1276280).\n- CVE-2026-72010: cgroup/cpuset: rebind mm mempolicy to effective_mems, not mems_allowed (bsc#1276776).\n- CVE-2026-72110: bpf,fork: wipe -\u003ebpf_storage before bailouts that access it (bsc#1277357).\n- CVE-2026-72111: bpf: Reset register bounds before narrowing retval range in check_mem_access() (bsc#1277389).\n- CVE-2026-72127: netdev-genl: report NAPI thread PID in the caller's pid namespace (bsc#1277542).\n- CVE-2026-72250: netfilter: nf_conntrack_reasm: guard mac_header adjustment after IPv6 defrag (bsc#1277663).\n- CVE-2026-72253: netfilter: nf_conntrack_sip: validate skb_dst() before accessing it (bsc#1277665).\n- CVE-2026-72318: cifs: validate DFS referral string offsets (bsc#1275939).\n- CVE-2026-72400: seg6: validate SRH length before reading fixed fields (bsc#1278030).\n- CVE-2026-72405: net: udp_tunnel: prevent double queueing in udp_tunnel_nic_device_sync (bsc#1278033).\n- CVE-2026-72416: netfilter: nft_compat: ebtables emulation must reject non-bridge targets (bsc#1278041).\n- CVE-2026-72428: bpf: Fix stack slot index in nospec checks (bsc#1278050).\n- CVE-2026-74368: wifi: ath12k: fix memory leak in ath12k_wifi7_dp_rx_h_verify_tkip_mic() (bsc#1277103).\n- CVE-2026-74399: evm: terminate and bound the evm_xattrs read buffer (bsc#1278319).\n- CVE-2026-74565: netfilter: nf_tables: make nft_object rhltable per table (bsc#1275568).\n- CVE-2026-74613: vsock/virtio: avoid refilling the RX queue after teardown (bsc#1277903).\n- CVE-2026-74620: net/sched: act_gact, act_police: range check the fallback control action (bsc#1277044).\n- CVE-2026-74624: netfilter: nf_conntrack: defer invalid log until after unlock (bsc#1277599).\n- CVE-2026-74715: net: netfilter: Make ct zone opts configurable for bpf ct helpers (bsc#1277890).\n- CVE-2026-74720: bpf: Preserve pointer state for commuted arithmetic (bsc#1276574).\n- CVE-2026-74746: netfilter: flowtable: publish GC-visible tuple last (bsc#1278101).\n- CVE-2026-74748: netfilter: ipset: fix refcount race between list:set GC and swap (bsc#1277578).\n- CVE-2026-80572: Input: byd - synchronize timer deletion before freeing private data (bsc#1277338).\n- CVE-2026-80602: perf/x86/amd/lbr: Fix kernel address leakage (bsc#1278123).\n- CVE-2026-80637: netfilter: synproxy: fix unaligned memory access in timestamp adjustment (bsc#1278343).\n- CVE-2026-80684: KVM: s390: pci: Fix NULL dereference on AIBV allocation failure (bsc#1277467).\n- CVE-2026-80709: s390/zcrypt: Fix wrong domain value verification with EP11 CPRBs (bsc#1278202).\n- CVE-2026-80717: sctp: validate Adaptation Indication parameter length (bsc#1277836).\n- CVE-2026-80755: selinux: reject a permission value exceeding the class permission count (bsc#1278415).\n- CVE-2026-80757: selinux: reject a class permission count below its inherited common (bsc#1278711).\n- CVE-2026-80808: ext4: stop retrying saturated xattr cache entries (bsc#1279795).\n- CVE-2026-80809: ocfs2: fix missing metadata reservation for large xattrs (bsc#1279606).\n- CVE-2026-80855: fuse: fix invalidate lock leak on open O_TRUNC DAX failure (bsc#1279564).\n- CVE-2026-80879: ocfs2: fix circular locking dependency in ocfs2_dio_end_io_write (bsc#1279494).\n- CVE-2026-80881: ocfs2: fix buffer head management in ocfs2_read_blocks() (bsc#1279496).\n- CVE-2026-80978: ip6_gre: fix hardware header length for NBMA tunnels (bsc#1280253).\n- CVE-2026-80988: NTB: ntb_transport: Fail TX enqueue when the QP link is down (bsc#1280266).\n- CVE-2026-89491: ocfs2: cluster: don't sleep while holding o2hb_live_lock in o2hb_region_pin() (bsc#1280472).\n- CVE-2026-89494: ocfs2: validate lengths in dlm_mig_lockres_handler (bsc#1280520).\n- CVE-2026-89495: ocfs2: bound namelen in dlm_migrate_request_handler (bsc#1280569).\n- CVE-2026-89537: SUNRPC: Reject short RFC 4121 MIC tokens in gss_krb5_verify_mic_v2 (bsc#1280713).\n- CVE-2026-89554: mptcp: fix uninitialized local_id in syncookie MP_JOIN reconstruction (bsc#1280736).\n- CVE-2026-89559: libnvdimm/labels: Prevent integer overflow in __nd_label_validate() (bsc#1280554).\n- CVE-2026-89560: landlock: Require LANDLOCK_ACCESS_FS_MAKE_REG for whiteout creation (bsc#1280806).\n- CVE-2026-89595: fsnotify: Fix stale object mask after concurrent mark updates (bsc#1280834).\n- CVE-2026-89608: ecryptfs: pass packet set buffer size to parser (bsc#1280826).\n- CVE-2026-89637: smb: client: fix UAF and buffer leak in cifs_check_trans2() for malformed secondary T2 (bsc#1280492).\n- CVE-2026-89642: cifs: call pagecache_isize_extended() in cifs_setsize() when extending (bsc#1280970).\n- CVE-2026-89649: ceph: bound xattr value length in __build_xattrs() (bsc#1280434).\n- CVE-2026-89654: ceph: fix UAF in check_new_map() on session freed during unlock (bsc#1280415).\n- CVE-2026-89655: ceph: fix UAF in __kick_flushing_caps() on cf entry freed during unlock (bsc#1280398).\n- CVE-2026-89656: libceph: reject buckets with mismatched CRUSH ids (bsc#1280563).\n- CVE-2026-89657: libceph: validate OSD extent maps before cursor advance (bsc#1280545).\n- CVE-2026-89751: x86/tdx: Fix off-by-one in port I/O handling (bsc#1280822).\n- CVE-2026-89761: apparmor: fix out-of-bounds write when null terminating a label vec (bsc#1280745).\n- CVE-2026-89786: ext4: fix out-of-bounds read in ext4_read_inline_dir() (bsc#1280976).\n- CVE-2026-89787: ext4: check dir entry fits before reading the hash trailer in ext4_search_dir() (bsc#1280977).\n- CVE-2026-90042: ceph: properly decrypt filenames in vmalloc() buffers (bsc#1280948).\n- CVE-2026-90057: slip: remove slip_hangup() to fix use-after-free in slip_receive_buf() (bsc#1281650).\n- CVE-2026-90081: net/rds: use wq_has_sleeper() in rds_cong_map_updated() (bsc#1281490).\n- CVE-2026-90092: Bluetooth: L2CAP: reject accept queue add unless BT_LISTEN (bsc#1281384).\n- CVE-2026-90103: NFSv4.2: fix LAYOUTSTATS send buffer exhaustion (bsc#1281538).\n- CVE-2026-90107: net/smc: free pending qentry in smc_llc_flow_stop() before memset (bsc#1281510).\n- CVE-2026-90114: net: bridge: Reject descending VLAN tunnel ranges (bsc#1281509).\n- CVE-2026-90128: vdpa/mlx5: fix wrong list iterated in add_direct_chain error path (bsc#1281577).\n- CVE-2026-90138: vsock: don't check the listener's sk_err in vsock_accept() (bsc#1281535).\n- CVE-2026-90148: NFSv4: Fix incorrect argument passed to nfs4_delete_lease() in nfs4_add_lease() (bsc#1281551).\n- CVE-2026-90227: nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (bsc#1281705).\n- CVE-2026-90230: nvme: Add the DHCHAP maximum HD IDs (bsc#1281715).\n- CVE-2026-90393: bpf: Fix potential UAF in bpf_netns_link_update_prog (bsc#1282289).\n- CVE-2026-93054: uio: Fix stale info pointer in failed registration path (bsc#1282276).\n- CVE-2026-93228: svcrdma: Reject Write/Reply chunks with segcount 0 (bsc#1282697).\n- CVE-2026-93231: lockd: fix swapped arguments in nlmsvc_match_ip() (bsc#1282778).\n- CVE-2026-93250: vxlan: mdb: Fix use-after-free in vxlan_mdb_flush() (bsc#1282677).\n- CVE-2026-93262: md/raid5-ppl: fix use-after-free in ppl_do_flush() (bsc#1283004).\n- CVE-2026-93795: blk-cgroup: fix leaks and online flag on radix_tree_insert failure (bsc#1283155).\n- CVE-2026-93798: btrfs: fix reloc root cleanup in merge_reloc_roots() (bsc#1282769).\n- CVE-2026-93817: perf: Fix addr_filter_ranges lifetime (bsc#1283017).\n- CVE-2026-93828: exfat: fix handling of damaged volume in exfat_create_upcase_table() (bsc#1282890).\n- CVE-2026-93830: net: stmmac: xgmac2: disable RBUE in default RX interrupt mask (bsc#1282889).\n- CVE-2026-97554: smb: client: avoid using uninitialized SIDs in cifs_posix_to_fattr() (bsc#1283850).\n- CVE-2026-97556: smb: client: avoid leaking refcount when cifs_sb_tlink() fails (bsc#1283853).\n- CVE-2026-97558: smb: client: fix cifsFileInfo reference leak in deferred close (bsc#1283855).\n- CVE-2026-97559: smb: client: fail DACL rewrite when the new DACL exceeds 64K (bsc#1283856).\n- CVE-2026-97561: smb: client: honor forceuid/forcegid when mapping SIDs to uid/gid (bsc#1283858).\n- CVE-2026-97562: smb: client: pin DFS superblock in iterator callback (bsc#1283862).\n- CVE-2026-97563: smb: client: reject out-of-bounds DataOffset in CIFSSMBRead() (bsc#1283877).\n- CVE-2026-97565: smb: client: reject short READ responses in CIFSSMBRead() (bsc#1283793).\n- CVE-2026-97575: media: v4l2-ctrls: validate AV1 tile counts (bsc#1283337).\n- CVE-2026-97596: ipvs: reject invalid states in connection template sync records (bsc#1283941).\n- CVE-2026-97603: idpf: disable DIM work before freeing q_vectors (bsc#1283782).\n- CVE-2026-97612: net: mpls: clear inner_protocol when the last label is popped (bsc#1283967).\n- CVE-2026-97954: net/rds: fix tcp stream corruption with large pages (bsc#1283113).\n- CVE-2026-97963: net: stmmac: initialize ptp_lock at probe time (bsc#1282984).\n- CVE-2026-97964: ppp_synctty: ensure a writeable skb header (bsc#1282962).\n- CVE-2026-97965: vxlan: initialize _md in vxlan_xmit_one() (bsc#1282963).\n- CVE-2026-97991: vdpa_sim_blk: reject out-of-range sector starts (bsc#1283356).\n- CVE-2026-97993: vhost-vdpa: don't install the eventfd_ctx_fdget() error in config_ctx (bsc#1283339).\n- CVE-2026-98014: net/mlx5: E-Switch, prevent mc_list repopulation during vport disable (bsc#1283668).\n- CVE-2026-98022: net: cap tx_queue_len at S16_MAX to prevent oversized ring allocations (bsc#1283810).\n- CVE-2026-98023: vxlan: reject dynamic fdb entries that reference a nexthop id (bsc#1283960).\n- CVE-2026-98031: nexthop: Initialize extack in remove_nh_grp_entry() (bsc#1283662).\n- CVE-2026-98041: bpf: Don't predict JMP32 pointer vs zero comparisons (bsc#1284064).\n- CVE-2026-98068: net/rds: don't let rds_conn_shutdown() consume a concurrent drop (bsc#1283903).\n- CVE-2026-98069: net/rds: acquire the fastpath locks in rds_conn_shutdown() (bsc#1283863).\n- CVE-2026-98070: net/rds: acquire RDS_IN_XMIT in rds_tcp_reset_callbacks() (bsc#1283916).\n- CVE-2026-98071: net/rds: clear cp_flags bits individually in rds_conn_path_reset() (bsc#1283842).\n- CVE-2026-98072: net/rds: use wq_has_sleeper() in release_in_xmit() (bsc#1283846).\n- CVE-2026-98074: bonding: do not clear curr_active_slave prematurely when releasing all slaves (bsc#1283871).\n- CVE-2026-98078: ipvs: fix reversed sequence option serialization (bsc#1284150).\n- CVE-2026-98095: af_packet: Don't cast tpacket_hdr.tp_len to int in tpacket_parse_header() (bsc#1283921).\n- CVE-2026-98122: vxlan: mdb: Fix use-after-free in vxlan_mdb_remote_src_del() (bsc#1283886).\n- CVE-2026-98124: smb/client: invalidate fscache for fallocate range operations (bsc#1283821).\n- CVE-2026-98125: smb/client: fix stale page cache in insert/collapse range (bsc#1283812).\n- CVE-2026-98126: smb/client: validate new EOF for zero range (bsc#1283859).\n- CVE-2026-98127: smb/client: validate new EOF for insert range (bsc#1283873).\n- CVE-2026-98154: nvme-rdma: fix -EIO cleanup order in queue_rq (bsc#1283418).\n- CVE-2026-98158: ppp_async: drop the errored frame instead of resetting its headroom (bsc#1283933).\n- CVE-2026-98167: smb: client: fix server-\u003etotal_read for compound encrypted PDUs (bsc#1284422).\n- CVE-2026-98169: smb: client: fix potential OOB read in smb3_enum_snapshots() (bsc#1284298).\n- CVE-2026-98170: smb: client: fix OOB struct field reads in move_smb2_ea_to_cifs() (bsc#1284310).\n- CVE-2026-98175: smb: client: cancel reconnect work in clean_demultiplex_info() (bsc#1284312).\n- CVE-2026-98257: rds: ib: use rds_conn_drop() on protocol version mismatch (bsc#1284346).\n- CVE-2026-98258: posix-cpu-timers: Prevent freeing a timer which is queued on the expiry list (bsc#1284584).\n- CVE-2026-98261: cifs: Fix server use-after-free in cifs_chan_skip_or_disable() (bsc#1284605).\n- CVE-2026-98264: ALSA: virtio: reset device before deleting virtqueues (bsc#1284363).\n- CVE-2026-98282: powerpc/iommu: Fix the overflow validation in iommu_tce_check_ioba (bsc#1284360).\n- CVE-2026-98283: KVM: PPC: Book3S HV: fix use-after-free in kvmhv_emulate_tlbie_all_lpid() (bsc#1284595).\n- CVE-2026-98306: seg6: set IPSKB_L3SLAVE from IP6SKB_L3SLAVE on IPIP decapsulation (bsc#1284505).\n- CVE-2026-98368: esp: downgrade zerocopy managed frags before mutating skb frags (bsc#1284498).\n- CVE-2026-98374: tcp: fix use-after-free of retransmit_skb_hint in tcp_send_synack() (bsc#1284740).\n- CVE-2026-98432: ipv4: free inet_opt and ireq_opt after an RCU grace period (bsc#1285685).\n- CVE-2026-98471: KVM: SEV: Do cache maintenance on the source VM during intra-host migration (bsc#1286240).\n- CVE-2026-98631: xsk: Use a 32-bit compare in xsk_map_gen_lookup (bsc#1286233).\n- CVE-2026-99131: xfs: fix capability check in xfs (bsc#1288668).\n- CVE-2026-100071: net: hsr: free learned nodes on device setup failure (bsc#1282870).\n\nThe following non security issues were fixed:\n\n- accel/qaic: reject BO sizes that overflow page count (git-fixes).\n- ACPI: CPPC: Validate the _CPC package header (git-fixes).\n- ACPI: extlog: Validate elog record length before walking sections (git-fixes).\n- ACPI: PCI: pci_link: clear driver_data before free (git-fixes).\n- ACPI: pfr_update: zero-initialize capability query result (git-fixes).\n- ACPI: PM: Drop parent state update from acpi_device_get_power() (git-fixes).\n- ACPI: tables: handle failed initrd override mappings (git-fixes).\n- ACPI: TAD: Rearrange RT data validation checking (stable-fixes).\n- ACPI: video: Fix backlight unregistration ordering (git-fixes).\n- ACPICA: Fix memory leak in acpi_ds_create_field() (git-fixes).\n- ACPICA: Fix PCC OperationRegion command offsets (git-fixes).\n- ACPICA: Initialize parser_state.aml_end in acpi_install_method() (git-fixes).\n- ALSA: 6fire: take stream_mutex in the Digital Thru control (git-fixes).\n- ALSA: aloop: Keep the timer source alive until card release (git-fixes).\n- ALSA: caiaq: Fix races at MIDI URB and trigger accesses (git-fixes).\n- ALSA: caiaq: Fix the Kore controller key map (git-fixes).\n- ALSA: caiaq: Register card at the final step (git-fixes).\n- ALSA: caiaq: Serialize access to the EP1 command buffer (git-fixes).\n- ALSA: compress: add missing OPEN-state gate to SET_METADATA (git-fixes).\n- ALSA: control: Fix virtual master creation reference in kernel-doc (git-fixes).\n- ALSA: cs46xx: fix unit mismatch in DSP code area bounds check (git-fixes).\n- ALSA: hda/hdmi: clamp num_cvts against cvt_nids in hdmi_read_pin_conn (git-fixes).\n- ALSA: hda/hdmi: clamp sad_count in ELD proc write handler (git-fixes).\n- ALSA: hda: Add NULL check for the driver pointer at unsol event work (git-fixes).\n- ALSA: hda: Avoid non-operational GPU warning at regular device removal (git-fixes).\n- ALSA: hda: Fix potential UAF for gating jack (git-fixes).\n- ALSA: hda: intel: Cancel delayed work at shutdown, too (git-fixes).\n- ALSA: hda: Reject codec reset on ASoC (ext_ops) buses (git-fixes).\n- ALSA: jack: Fix kctl free at error in snd_jack_kctl_new() (git-fixes).\n- ALSA: line6: Clear prev_fbuf on capture buffer release (git-fixes).\n- ALSA: line6: Fix potential OOB write in line6_capture_copy() (git-fixes).\n- ALSA: line6: Reject too small max packet sizes (git-fixes).\n- ALSA: line6: Use kzalloc() for PCM buffer allocation (git-fixes).\n- ALSA: pcm: Fix driver_tstamp value reporting (git-fixes).\n- ALSA: pcm: Protect channel-map reads against runtime detach (git-fixes).\n- ALSA: pcm: Protect the unregister notifier traversal (git-fixes).\n- ALSA: pcm: Remove channel-map controls before freeing substreams (git-fixes).\n- ALSA: pcm: Unlink substreams before releasing them (git-fixes).\n- ALSA: seq: oss: Skip events until fully initialized (git-fixes).\n- ALSA: sh: aica: Fix spu_memset() stride (git-fixes).\n- ALSA: ump: Correct return size of fill_rpn() (git-fixes).\n- ALSA: usb-audio: Use fixed control index for us16x08 mixer elements (git-fixes).\n- ALSA: via82xx: use helper to activate DXS controls (git-fixes).\n- ASoC: adau17x1: return cache sync errors from resume (git-fixes).\n- ASoC: ak4642: return cache sync errors from resume (git-fixes).\n- ASoC: amd: acp: Fix .close() being skipped on rollback (git-fixes).\n- ASoC: amd: ps: Fix acp63_pdm_dma_close() being skipped on rollback (git-fixes).\n- ASoC: amd: ps: Fix acp63_sdw_dma_close() being skipped on rollback (git-fixes).\n- ASoC: amd: raven: Fix acp3x_dma_close() being skipped on rollback (git-fixes).\n- ASoC: amd: raven: Fix memory leak in acp3x_dma_close() (git-fixes).\n- ASoC: amd: renoir: Fix acp_pdm_dma_close() being skipped on rollback (git-fixes).\n- ASoC: amd: vangogh: Fix acp5x_dma_close() being skipped on rollback (git-fixes).\n- ASoC: amd: yc: Add DMI quirk for Acer Aspire Go 15 (AG15-21P) (stable-fixes).\n- ASoC: amd: yc: Fix acp6x_pdm_dma_close() being skipped on rollback (git-fixes).\n- ASoC: arizona-jack: Fix runtime PM imbalance in arizona_start_hpdet_acc_id() (git-fixes).\n- ASoC: atmel-i2s: fix MCK generator error handling (git-fixes).\n- ASoC: atmel-i2s: use optional API for gclk (git-fixes).\n- ASoC: atmel-i2s: use optional API for muxclk (git-fixes).\n- ASoC: atmel: atmel-pcm-pdc: Fix atmel_pcm_close() being skipped on rollback (git-fixes).\n- ASoC: codecs: da732x: Fix definition of ADC2 EQ Overall Volume control (git-fixes).\n- ASoC: codecs: es*: Modify the registers related to ALC RECOVERY (git-fixes).\n- ASoC: codecs: rt5659: propagate GPIO errors (git-fixes).\n- ASoC: codecs: rt5682s: disable jack detection work on shutdown (git-fixes).\n- ASoC: codecs: sta32x: Fix definition of Ch2 and Ch3 Volume Bypass controls (git-fixes).\n- ASoC: codecs: sta32x: Fix definition of limiter threshold controls (git-fixes).\n- ASoC: codecs: sta350: Fix definition of Ch2 and Ch3 Volume Bypass controls (git-fixes).\n- ASoC: codecs: sta350: Fix definition of limiter threshold controls (git-fixes).\n- ASoC: codecs: tlv320adc3xxx: Fix definition of AGC Target Level control (git-fixes).\n- ASoC: codecs: wcd9335: Fix SLIM interface device leak in wcd9335_slim_status() (git-fixes).\n- ASoC: codecs: wm5100: Fix definition of EQ3 Band 1 Volume control (git-fixes).\n- ASoC: codecs: wm8510: Fix definition of ADC Inversion Switch control (git-fixes).\n- ASoC: codecs: wm8737: Fix definition of zero cross switches (git-fixes).\n- ASoC: codecs: wm8750: Fix definition of ALC Capture NG Type control (git-fixes).\n- ASoC: codecs: wm8955: Fix definition of Treble Cutoff control (git-fixes).\n- ASoC: codecs: wm8983: Fix definition of ADC 128x Oversampling control (git-fixes).\n- ASoC: codecs: wm8985: Fix definition of ADC 128x Oversampling control (git-fixes).\n- ASoC: codecs: wm8990: Fix definition of LOMIX AINLMUX Bypass Volume control (git-fixes).\n- ASoC: codecs: wm8990: Fix definition of right input PGA controls (git-fixes).\n- ASoC: codecs: wm8991: Fix definition of LOMIX AINLMUX Bypass Volume control (git-fixes).\n- ASoC: codecs: wm8991: Fix definition of right input PGA controls (git-fixes).\n- ASoC: codecs: wm8994: Fix definition of WM8958 noise gate hold time controls (git-fixes).\n- ASoC: codecs: wm8994: Fix runtime PM leak in wm8994_mic_detect() (git-fixes).\n- ASoC: codecs: wm_hubs: Fix definition of MIXINR to MIXOUTR volume control (git-fixes).\n- ASoC: codecs: wsa883x: disable runtime PM on unbind (git-fixes).\n- ASoC: codecs: wsa884x: disable runtime PM on unbind (git-fixes).\n- ASoC: cs42l56: Remove the ADC Mute Switch control (git-fixes).\n- ASoC: es8316: return cache sync errors from resume (git-fixes).\n- ASoC: fsl_asrc: check the second front-end DMA channel (git-fixes).\n- ASoC: fsl_asrc: use regmap_write_bits to update clock source registers (git-fixes).\n- ASoC: hdac_hda: Balance the runtime PM disable in codec remove (git-fixes).\n- ASoC: hdac_hda: Keep runtime PM state in sync across codec remove/probe (git-fixes).\n- ASoC: hdac_hda: Restore the codec device type on unbind (git-fixes).\n- ASoC: imx-pcm-rpmsg: Fix imx_rpmsg_pcm_close() being skipped on rollback (git-fixes).\n- ASoC: intel: atom: Fix .shutdown() being skipped on rollback (git-fixes).\n- ASoC: Intel: atom: Fix platform device leak on probe failure (git-fixes).\n- ASoC: Intel: avs: Prevent module info underflow (git-fixes).\n- ASoC: Intel: avs: Unprepare a stream when recovery occurs (git-fixes).\n- ASoC: mediatek: common: Handle constraint return value in FE startup (git-fixes).\n- ASoC: mediatek: mt6797: fix wrong unwind order and error code in enable_clock (git-fixes).\n- ASoC: mediatek: mt8183: Fix APLL enable error handling (git-fixes).\n- ASoC: mediatek: mt8183: Fix clock handling in mux disable path (git-fixes).\n- ASoC: mediatek: mt8183: Fix wrong clock cleanup on clk_set_parent() failure (git-fixes).\n- ASoC: mediatek: mt8186: Fix AFE clock error handling (git-fixes).\n- ASoC: mediatek: mt8186: Fix APLL enable error handling (git-fixes).\n- ASoC: mediatek: mt8186: Fix APLL mux setting error handling (git-fixes).\n- ASoC: mediatek: mt8186: Fix clock handling in mux disable path (git-fixes).\n- ASoC: mediatek: mt8186: Fix MCK error handling (git-fixes).\n- ASoC: mediatek: mt8188: Handle constraint return value in FE startup (git-fixes).\n- ASoC: mediatek: mt8188: mt8188-afe-clk: Handle clock enable errors (git-fixes).\n- ASoC: mediatek: mt8188: mt8188-afe-clk: Handle tuner clock enable errors (git-fixes).\n- ASoC: mediatek: mt8188: mt8188-afe-clk: Propagate regmap update errors (git-fixes).\n- ASoC: mediatek: mt8188: mt8188-afe-pcm: Handle runtime resume errors (git-fixes).\n- ASoC: mediatek: mt8192-mt6359: Fix error handling in MTKAIF calibration (git-fixes).\n- ASoC: mediatek: mt8192: check return values in mt8192_afe_gpio_init() (git-fixes).\n- ASoC: mediatek: mt8192: fix AFE clock error handling (git-fixes).\n- ASoC: mediatek: mt8192: fix APLL mux error handling (git-fixes).\n- ASoC: mediatek: mt8192: fix error handling in APLL enable functions (git-fixes).\n- ASoC: mediatek: mt8192: fix MCK clock error handling (git-fixes).\n- ASoC: mediatek: mt8192: Handle regcache_sync() failure in runtime resume (git-fixes).\n- ASoC: mediatek: mt8192: Propagate errors in TDM DAI DAPM event handlers (git-fixes).\n- ASoC: mediatek: mt8192: Propagate mt8192_afe_gpio_request() errors in ADDA DAI (git-fixes).\n- ASoC: mediatek: mt8192: switch to devm_clk_get_optional() (git-fixes).\n- ASoC: mediatek: mt8195: Check paired MEMIF clock enable in FE trigger (git-fixes).\n- ASoC: mediatek: mt8195: Fix ETDM MCLK error handling (git-fixes).\n- ASoC: mediatek: mt8195: Fix ETDM probe error handling (git-fixes).\n- ASoC: mediatek: mt8195: Fix ETDM startup error handling (git-fixes).\n- ASoC: mediatek: mt8195: Fix FE startup error handling (git-fixes).\n- ASoC: mediatek: mt8195: Fix HDMI TX startup error handling (git-fixes).\n- ASoC: mediatek: mt8195: Fix main clock error handling (git-fixes).\n- ASoC: mediatek: mt8195: Fix paired memif clock error handling (git-fixes).\n- ASoC: mediatek: mt8195: Fix register access clock error handling (git-fixes).\n- ASoC: mediatek: mt8195: Fix runtime resume error handling (git-fixes).\n- ASoC: mediatek: mt8195: Fix timing system clock error handling (git-fixes).\n- ASoC: mediatek: mt8195: Fix tuner clock error handling (git-fixes).\n- ASoC: mediatek: mt8195: Propagate IRQ lookup errors (git-fixes).\n- ASoC: mt6359-accdet: manage private workqueues with devres (git-fixes).\n- ASoC: nau8540: return cache sync errors from resume (git-fixes).\n- ASoC: ops: Fix return value in snd_soc_limit_volume() (git-fixes).\n- ASoC: qcom: q6apm: clear g_apm on driver removal (git-fixes).\n- ASoC: qcom: qdsp6: q6afe: fix clk vote response type mismatch (git-fixes).\n- ASoC: rockchip: rockchip_i2s: Handle runtime PM resume failures in set_fmt (git-fixes).\n- ASoC: rt711-sdca: always cancel jack work on remove (git-fixes).\n- ASoC: rt711-sdw: always cancel jack work on remove (git-fixes).\n- ASoC: rt712-sdca-dmic: fix drvdata type in the gain controls (git-fixes).\n- ASoC: rt712-sdca: always cancel jack work on remove (git-fixes).\n- ASoC: rt722-sdca: always cancel jack work on remove (git-fixes).\n- ASoC: rt1011: return cache sync errors from resume (git-fixes).\n- ASoC: rt1016: return cache sync errors from resume (git-fixes).\n- ASoC: rt1305: return cache sync errors from resume (git-fixes).\n- ASoC: rt1308: return cache sync errors from resume (git-fixes).\n- ASoC: rt5616: return cache sync errors from resume (git-fixes).\n- ASoC: rt5659: return cache sync errors from resume (git-fixes).\n- ASoC: rt5660: return cache sync errors from resume (git-fixes).\n- ASoC: rt5665: return cache sync errors from resume (git-fixes).\n- ASoC: rt5682-sdw: always cancel jack work on remove (git-fixes).\n- ASoC: soc-ac97: Fix error handling in snd_soc_new_ac97_component() (git-fixes).\n- ASoC: soc-component: Fix return type of snd_soc_pcm_component_pointer() (git-fixes).\n- ASoC: ti: davinci-mcasp: Fix runtime PM imbalance in __davinci_mcasp_set_clkdiv() (git-fixes).\n- ASoC: wcd9335: Fix device reference leak in wcd9335_slim_status() (git-fixes).\n- ASoC: wcd-mbhc-v2: Fix incorrect properties names and typos (git-fixes).\n- ASoC: wm8994: don't lose the AIF clock ratio when staying at 32kHz SYSCLK (git-fixes).\n- ASoC: wm8994: fix MCLK gating for AIF clocks sourced from MCLK2 (git-fixes).\n- ASoC: wm8994: fix MCLK index used for setting MCLK rate (git-fixes).\n- ASoC: wm8994: Fix runtime PM imbalance in wm8994_component_probe() (git-fixes).\n- ASoC: wm8994: follow AIF clock source changes in MCLK gating (git-fixes).\n- ASoC: xilinx: formatter_pcm: Fix read-modify-write of AUD_CTRL in hw_params (git-fixes).\n- asymmetric_keys: reject trust keys without IDs (git-fixes).\n- ata: libata-scsi: abort multi-sector pass-through commands when multi_count is 0 (git-fixes).\n- ata: libata-scsi: Fix ata_scsi_hotplug() reference in kernel-doc (git-fixes).\n- ata: pata_parport: fix parport attach idr_alloc for (git-fixes).\n- ata: pata_parport: Fix use-after-free in new_device_store (git-fixes).\n- ata: sata_fsl: Fix use-after-free of host_priv on probe() failure (git-fixes).\n- backlight: lm3630a: Cancel delayed work before destroying workqueue (git-fixes).\n- backlight: qcom-wled: Fix NULL pointer dereference in wled_remove() (git-fixes).\n- backlight: qcom-wled: Fix unbalanced OVP IRQ enable at probe (git-fixes).\n- backlight: qcom-wled: Fix WLED3 brightness register stride (git-fixes).\n- Bluetooth: 6lowpan: Drain RCU readers on registration failure (git-fixes).\n- Bluetooth: 6lowpan: Pin module for 6lowpan_control debugfs file (git-fixes).\n- Bluetooth: 6LoWPAN: Use RCU-safe device list removal (git-fixes).\n- Bluetooth: Add missing newline to bt_dev_{err,warn}_ratelimited() (git-fixes).\n- Bluetooth: btintel: fix buffer over-read in btintel_hw_error() (git-fixes).\n- Bluetooth: btintel: validate DDC record lengths (git-fixes).\n- Bluetooth: btqcomsmd: Convert to platform remove callback returning void (stable-fixes).\n- Bluetooth: btqcomsmd: destroy RPMsg endpoints before freeing hci_dev (git-fixes).\n- Bluetooth: btusb: Add IMC Networks QCA9377 to quirks table (stable-fixes).\n- Bluetooth: hci_conn: Lock parent access during enhanced SCO setup (git-fixes).\n- Bluetooth: hci_core: free the HCI ID if naming fails (git-fixes).\n- Bluetooth: hci_core: Keep RCU protection through LTK filtering (git-fixes).\n- Bluetooth: hci_debugfs: Pin module for debugfs file operations (git-fixes).\n- Bluetooth: hci_sync: don't drain cmd_sync backlog on unregister (git-fixes).\n- Bluetooth: hci_sync: Fix inquiry cache use-after-free (git-fixes).\n- Bluetooth: hci_sync: fix mesh adv timeout units (git-fixes).\n- Bluetooth: hci_sync: Protect IRK identity reads with RCU (git-fixes).\n- Bluetooth: hci_sync: Serialize devcoredump reset during device open (git-fixes).\n- Bluetooth: hci_vhci: Pin module for debugfs file operations (git-fixes).\n- Bluetooth: ISO: Hold the listener during disconnect notification (git-fixes).\n- Bluetooth: L2CAP: hold chan in l2cap_ecred_conn_rsp() (git-fixes).\n- Bluetooth: L2CAP: hold l2cap_conn::lock in l2cap_connect_cfm() (git-fixes).\n- Bluetooth: L2CAP: Reject invalid TxWindow in configuration requests (git-fixes).\n- Bluetooth: L2CAP: Reject mode changes on connected channels (git-fixes).\n- Bluetooth: L2CAP: Use default TxWindow for zero socket option (git-fixes).\n- Bluetooth: MGMT: Fix leaking instance on Add Extended Advertising Parameters (git-fixes).\n- Bluetooth: MGMT: Fix pending state of instances added without HCI traffic (git-fixes).\n- Bluetooth: MGMT: Reject quality report requests during unregister (git-fixes).\n- Bluetooth: msft: Lock failed probe cleanup against feature readers (git-fixes).\n- Bluetooth: RFCOMM: Fix initial port reference race (git-fixes).\n- Bluetooth: selftest: Pin module for selftest debugfs file operations (git-fixes).\n- bus: arm-cci: Drop cci-control-port node reference in __cci_ace_get_port() (git-fixes).\n- bus: arm-cci: Drop CPU node reference in cci_ace_init_ports() (git-fixes).\n- bus: fsl-mc: register the object drivers after misc_class exists (git-fixes).\n- char: scx200_gpio: check cdev_add() return value (git-fixes).\n- checkpatch: skip CamelCase cache for --no-tree without root (git-fixes).\n- cifs: Pass unbyteswapped eof value into SMB2_set_eof() (git-fixes).\n- comedi: comedi_parport: validate the IRQ supplied by userspace (git-fixes).\n- comedi: dmm32at: validate the IRQ supplied by userspace (git-fixes).\n- comedi: dt2811: fix shift-out-of-bounds in IRQ check (git-fixes).\n- comedi: dt2814: validate the IRQ supplied by userspace (git-fixes).\n- comedi: ni_atmio16d: validate the IRQ supplied by userspace (git-fixes).\n- comedi: pcmmio: validate the IRQ supplied by userspace (git-fixes).\n- comedi: pcmuio: validate the IRQs supplied by userspace (git-fixes).\n- crypto: amlogic - Fix DMA memory leak in cipher error path (git-fixes).\n- crypto: amlogic - Fix IRQ handler return value and fallthrough logic (git-fixes).\n- crypto: asymmetric_keys - fix OOB read in pefile_parse_binary (git-fixes).\n- crypto: atmel - handle authenc requests without plaintext (git-fixes).\n- crypto: atmel-aes - fix AADLENR for standalone GHASH (git-fixes).\n- crypto: atmel-sha - reject initialization without a device (git-fixes).\n- crypto: atmel-tdes - sync output bounce buffer before DMA (git-fixes).\n- crypto: atmel-tdes - zero-initialize device state (git-fixes).\n- crypto: caam - fix double-free in caam_rsa_set_priv_key_form() (git-fixes).\n- crypto: ccp - kill v3 IRQ tasklet during teardown (git-fixes).\n- crypto: ccp - kill v5 IRQ tasklet during teardown (git-fixes).\n- crypto: hisilicon/hpre - fix ECDH destination DMA mapping (git-fixes).\n- crypto: hisilicon/hpre - fix GFP flags for dma_alloc_coherent (git-fixes).\n- crypto: hisilicon/hpre - fix pointer dereference before length check (git-fixes).\n- crypto: hisilicon/hpre - remove dma_free_coherent on NULL req-\u003edst in ECDH (git-fixes).\n- crypto: hisilicon/hpre - return -EOVERFLOW for small ECDH output buffer (git-fixes).\n- crypto: qat - avoid OOB read when stripping RSA leading zeros (git-fixes).\n- crypto: qat - fix active_devs leak on crypto alg registration failure (git-fixes).\n- crypto: qat - fix use of destroyed vf2pf_lock on VF restart (git-fixes).\n- crypto: qat - initialise state_lock on every path in adf_devmgr_add_dev() (git-fixes).\n- crypto: qat - release instance on DH fallback allocation failure (git-fixes).\n- crypto: qat - zero the VF migration state buffer on save (git-fixes).\n- crypto: tcrypt - Avoid reading req-\u003ebase after submission (git-fixes).\n- dmaengine: altera-msgdma: initialize state before requesting IRQ (git-fixes).\n- dmaengine: at_hdmac: Fix use-after-free by proper tasklet cleanup (git-fixes).\n- dmaengine: bestcomm: set bcom_eng to NULL on probe failure (git-fixes).\n- dmaengine: dw-axi-dmac: convert clock handling to clk_bulk API (git-fixes).\n- dmaengine: dw-axi-dmac: Fix AXI burst length encoding (git-fixes).\n- dmaengine: dw-axi-dmac: Fix CH_CFG2 channel priority position (git-fixes).\n- dmaengine: dw-axi-dmac: Fix LLI dump out-of-bounds access (git-fixes).\n- dmaengine: fsl_raid: avoid free_q underflow in free_chan_resources (git-fixes).\n- dmaengine: fsl_raid: don't invoke client callback under desc_lock (git-fixes).\n- dmaengine: fsl_raid: zero CF descriptor pool allocations (git-fixes).\n- dmaengine: img-mdc: Fix runtime PM usage counter leak (git-fixes).\n- dmaengine: ioat: disable relaxed ordering before registering the device (git-fixes).\n- dmaengine: mediatek: hsdma: fix runtime PM leak on init failure (git-fixes).\n- dmaengine: mv_xor: kill tasklet on channel add error path (git-fixes).\n- dmaengine: plx_dma: fix NULL pointer deref in plx_dma_isr() (git-fixes).\n- dmaengine: qcom: bam_dma: Defer IRQ trigger type to device tree (git-fixes).\n- dmaengine: qcom: bam_dma: free interrupt before the clock in error path (git-fixes).\n- dmaengine: sprd: use clk_bulk API to fix clock imbalance (git-fixes).\n- dmaengine: sun6i-dma: Fix use-after-free in error handling paths (git-fixes).\n- dmaengine: xilinx_dma: Fix MCDMA descriptor fields based on DMA direction (git-fixes).\n- Documentation: rs485: Pull uart_get_rs485_mode() from serial_core.c (git-fixes).\n- Documentation: virt: Fix the struct snp_guest_request_ioctl name in sev-guest.rst (git-fixes).\n- driver core: Limit the messages on a refused uevent (git-fixes).\n- drivers/base/node: fix UAF on device_register() failure (git-fixes).\n- drm/amd/display: assign missing trace entry in amdgpu_dm_dc_clocks_state (git-fixes).\n- drm/amd/display: Fix direct scanout alpha on some DRM_FORMATs (stable-fixes).\n- drm/amd/display: Fix swap in median3() for DSC rate control (git-fixes).\n- drm/amd/display: fix vready offset assignment in dcn_optc_lock_unlock_state (git-fixes).\n- drm/amd/display: Force GAMCOR for subsampled surfaces with PQ/Gamma22/HLG (git-fixes).\n- drm/amd/display: remove duplicated prev_p_state_change_support assignment (git-fixes).\n- drm/amd/display: take a runtime PM reference only when a CRTC turns on (git-fixes).\n- drm/amd/display: Use kcalloc() instead of kzalloc() (stable-fixes).\n- drm/amd/display: use right type for amdgpu_dc_performance event entries (git-fixes).\n- drm/amd/pm: bound SCLK FCW range entries to the table size (git-fixes).\n- drm/amdgpu/atombios: drop empty function (stable-fixes).\n- drm/amdgpu/gfx6: fix firmware leak on teardown (stable-fixes).\n- drm/amdgpu/sdma3: Work around POLL_REGMEM / FENCE hang (stable-fixes).\n- drm/amdgpu: Check for multiplication overflow in checkpoint stack (bsc#1276280).\n- drm/amdgpu: make Mac FB workaround generic (stable-fixes).\n- drm/amdgpu: reject ANONONLY userptrs that span multiple VMAs (git-fixes).\n- drm/amdgpu: Remove unused amdgpu_i2c functions (stable-fixes).\n- drm/amdgpu: reset VI ASIC on MacBookPro14,3 (stable-fixes).\n- drm/amdgpu: reset VI ASIC on MacBookPro15,1 (stable-fixes).\n- drm/amdgpu: rework i2c init and fini (stable-fixes).\n- drm/amdgpu: serialize vblank counter reads against GPU reset (stable-fixes).\n- drm/amdgpu: Use dbg level for VBIOS check messages (stable-fixes).\n- drm/amdkfd: evict the queues only once for CRIU PROCESS_INFO (git-fixes).\n- drm/amdkfd: Fix checkpoint-restore on multi-xcc (bsc#1276280).\n- drm/amdkfd: fix doorbell allocation race creating duplicate allocations (git-fixes).\n- drm/amdkfd: validate SRAT subtables before parsing (git-fixes).\n- drm/bridge: analogix_dp: Restore mandatory samsung DP DT properties (git-fixes).\n- drm/exynos/fimd: fix register offset type in fimd_trigger() (git-fixes).\n- drm/imx/lcdc: avoid duplicate clk_per enable (git-fixes).\n- drm/komeda: Fix bits parsing of GLB_CORE_ID (git-fixes).\n- drm/mali-dp: Fix runtime PM leak in malidp_crtc_atomic_enable() (git-fixes).\n- drm/msm/a6xx: Fix secondary rail vote in ARC votes (git-fixes).\n- drm/msm/a6xx: fix use-after-free of OPP in a6xx_pm_resume (git-fixes).\n- drm/msm/dp: don't report link training success after a reinit (git-fixes).\n- drm/msm/dpu: disable the slave encoder before the master (git-fixes).\n- drm/msm/hdmi_phy: Cleanup after msm_hdmi_phy_resource_enable() failure (git-fixes).\n- drm/msm/mdp5: drop cursor pipe for msm8x76 (git-fixes).\n- drm/msm: Properly handle msm_ioremap() without name (git-fixes).\n- drm/nouveau/svm: drain fault handler before freeing svmm (git-fixes).\n- drm/nouveau: cancel the DP IRQ work before freeing the connector (git-fixes).\n- drm/nouveau: disable the fence uevent work instead of just cancelling it (git-fixes).\n- drm/nouveau: don't dereference outp before checking it in nouveau_dp_irq (git-fixes).\n- drm/nouveau: reject zero-size notifier object allocation (git-fixes).\n- drm/omap: dsi: avoid sending bta sync all the time in writes (git-fixes).\n- drm/panel: ebbg-ft8719: Set prepare_prev_first (git-fixes).\n- drm/panfrost: Explicitly enable MMU interrupts at device init (git-fixes).\n- drm/panfrost: Prevent division by 0 (git-fixes).\n- drm/tegra: Don't pass an ERR_PTR to drm_syncobj_replace_fence() (git-fixes).\n- drm/tegra: Drop reference on postfence (git-fixes).\n- drm/tegra: Fix syncobj_in wait return value check (git-fixes).\n- drm: of: Fix drm_of_get_data_lanes_count_ep() return value documentation (git-fixes).\n- fbdev: atmel_lcdfb: Prevent FIFO work after removal (git-fixes).\n- fbdev: gxt4500: Release WC setup on probe failure (git-fixes).\n- fbdev: sh_mobile_lcdc: check for fb_deferred_io_init() error (git-fixes).\n- fbdev: smscufx: check for fb_deferred_io_init() error (git-fixes).\n- fbdev: ssd1307fb: check for fb_deferred_io_init() error (git-fixes).\n- fbdev: udlfb: check for fb_deferred_io_init() error (git-fixes).\n- fbdev: udlfb: don't rebuild the mode list while the framebuffer is in use (git-fixes).\n- fbdev: xen-fbfront: check for fb_deferred_io_init() error (git-fixes).\n- firewire: cdev: Fix FW_CDEV_IOC_CREATE_ISO_CONTEXT references in kernel-doc (git-fixes).\n- firmware: cs_dsp: clear dsp-\u003erunning on the cs_dsp_run() error path (git-fixes).\n- firmware: imx: dsp: fix mailbox channel leak on kasprintf failure (git-fixes).\n- fpga: Fix of_fpga_mgr_get() reference in fpga_mgr_lock() docs (git-fixes).\n- gpio: crystalcove: add missing MODULE_ALIAS() (git-fixes).\n- gpio: davinci: Clear interrupt status in every bank on suspend (git-fixes).\n- gpio: mxc: fix both_edges bit operations (git-fixes).\n- gpio: mxc: fix wakeup_pads bit operations (git-fixes).\n- gpio: mxc: use BIT() macro (stable-fixes).\n- gpio: mxc: use lock guards for the generic GPIO chip lock (stable-fixes).\n- gpio: pca953x: Preserve wakeup accounting on parent IRQ failure (git-fixes).\n- HID: alps: unregister DualPoint Stick input device on remove (git-fixes).\n- HID: amd_sfh: Remove unsupported motion-state field from accelerometer report (git-fixes).\n- HID: amd_sfh: Use report type from request node (git-fixes).\n- HID: core: Add reserved item tag for main items (stable-fixes).\n- HID: core: Fix out-of-bounds left shift by 32 in s32ton() (git-fixes).\n- HID: cougar: reject short special-key reports (git-fixes).\n- HID: cp2112: validate response report lengths (git-fixes).\n- HID: elo: reject short touchscreen reports (git-fixes).\n- HID: hid-alps: Use pm_ptr instead of #ifdef CONFIG_PM (stable-fixes).\n- HID: hid-steam: Make client_opened a counter (stable-fixes).\n- HID: logitech-dj: validate unnumbered keyboard reports (git-fixes).\n- HID: mcp2221: clear rxbuf after I2C/SMBus transfer completes (git-fixes).\n- HID: mcp2221: fix OOB write in mcp2221_raw_event() (stable-fixes).\n- HID: mcp2221: validate response report length (git-fixes).\n- HID: picoLCD: check for fb_deferred_io_init() error (git-fixes).\n- HID: pxrc: reject short input reports (git-fixes).\n- HID: rate-limit hid_warn to prevent log flooding (stable-fixes).\n- HID: roccat: isku: reject short button reports (git-fixes).\n- HID: roccat: koneplus: reject short button reports (git-fixes).\n- HID: roccat: konepure: reject short button reports (git-fixes).\n- HID: roccat: kovaplus: reject short button reports (git-fixes).\n- HID: roccat: pyra: reject short button reports (git-fixes).\n- HID: roccat: ryos: reject short special reports (git-fixes).\n- HID: roccat: savu: reject short special reports (git-fixes).\n- HID: wacom: fix wacom_intuos_irq NULL pen_input deref (git-fixes).\n- HID: zydacron: validate key report length (git-fixes).\n- hwmon: (coretemp) Refresh the temperature on the first read (git-fixes).\n- hwmon: (corsair-cpro) Make wait_input_report_lock IRQ safe (git-fixes).\n- hwmon: (lm70) Fix rounding of negative temperatures (git-fixes).\n- hwmon: (lm95245) Fix negative temperature conversion (git-fixes).\n- hwmon: (sht3x) Return the consumed count for heater writes (git-fixes).\n- hwrng: amd - report partial reads in non-blocking mode (git-fixes).\n- hwrng: ba431 - fix reported byte count (git-fixes).\n- hwrng: cctrng - Fix runtime PM usage counter leak (git-fixes).\n- hwrng: core - reject unknown RNG names (git-fixes).\n- hwrng: intel - return -ENOMEM when ioremap() fails (git-fixes).\n- hwrng: intel - return -ENOMEM when kmalloc_obj() fails (git-fixes).\n- hwrng: starfive - propagate clock and reset errors (git-fixes).\n- i2c: acpi: Fix adapter reference leak in i2c_acpi_new_device_by_fwnode() (git-fixes).\n- i2c: at91: release DMA channels when probe defers (git-fixes).\n- i2c: designware: queue only one read command for block reads (git-fixes).\n- i2c: mt7621: fix copying uninitialized kernel stack with reduced page_len (git-fixes).\n- i2c: qcom-cci: Fix HALT_ACK reset request being dropped (git-fixes).\n- i2c: xiic: don't clobber msg-\u003elen to signal block-read completion (git-fixes).\n- i2c: xiic: Relocate xiic_i2c_runtime_suspend and xiic_i2c_runtime_resume to facilitate atomic mode (stable-fixes).\n- iio: accel: adis16201: fix channel order for buffer mode (git-fixes).\n- iio: accel: kionix-kx022a: Fix IPOL macro name (git-fixes).\n- iio: accel: kxcjk-1013: Disable autosuspend on remove (git-fixes).\n- iio: accel: mma9551: disable autosuspend on remove (git-fixes).\n- iio: accel: mma9553: disable autosuspend on remove (git-fixes).\n- iio: adc: aspeed: propagate reset deassert errors (git-fixes).\n- iio: adc: aspeed: Simplify with dev_err_probe (stable-fixes).\n- iio: adc: at91-sama5d2: disable autosuspend on remove (git-fixes).\n- iio: adc: stm32: fix minimum sampling time values (git-fixes).\n- iio: adc: ti-adc128s052: validate SPI match data (git-fixes).\n- iio: core: add accessors 'masklength' (stable-fixes).\n- iio: dac: ad5758: Fix alignment for DMA safety (git-fixes).\n- iio: dac: ad5758: Fix the offset calculation (git-fixes).\n- iio: dac: ad5758: Reject out-of-range raw values (git-fixes).\n- iio: humidity: hts221: report available values via read_avail() (git-fixes).\n- iio: imu: adis16400: Check return value of spi_setup() (git-fixes).\n- iio: light: ltrf216a: Return floating point values (stable-fixes).\n- iio: pressure: dps310: fix CFG_REG bit definitions (git-fixes).\n- iio: temperature: tmp117: fix calibbias cache update on I2C write failure (git-fixes).\n- Input: atkbd - skip deactivate for Lenovo IdeaPad Slim 3 15IWC11 (stable-fixes).\n- Input: da7280 - fix input device parent assignment (git-fixes).\n- Input: drv2665 - fix input device parent assignment (git-fixes).\n- Input: drv2667 - fix input device parent assignment (git-fixes).\n- Input: i8042 - add nomux quirk for Fujitsu LIFEBOOK U7410 (stable-fixes).\n- Input: lkkbd - disable pending work before freeing device (stable-fixes).\n- Input: maple_keyb - fix key press detection (git-fixes).\n- Input: maplecontrol - emit EV_SYN report after reporting events (git-fixes).\n- Input: matrix-keymap - reject keycodes above KEY_MAX (git-fixes).\n- Input: synaptics - add LEN205b entry to smbus_pnp_ids for ThinkPad T490 (stable-fixes).\n- Input: tps6507x-ts - fix input device parent assignment (git-fixes).\n- Input: xpad - add support for Corsair Novablade Pro (stable-fixes).\n- kernel-binary.spec.in: Emulate kabi.pl error when suse-kabi-tools is used.\n- kobject: fix out-of-bounds access in kobject_action_type() (git-fixes).\n- kobject: Fix the kobj_set_name reference in kset_register() kernel-doc (git-fixes).\n- KVM: SEV: Do cache maintenance on the source VM *before* clearing SEV state (git-fixes).\n- leds: flash: Prevent using uninitialized variable in flash_fault_show() (git-fixes).\n- leds: lm3692x: Fix regulator/gpio leak and wrong enabled state on last write failure (git-fixes).\n- leds: lp8860: Fix device_node leak in lp8860_probe() (git-fixes).\n- leds: pca9532: Check i2c_smbus_read_byte_data() return value (git-fixes).\n- lib/decompress_bunzip2: fix off-by-one in run-length bounds check (git-fixes).\n- lib: decompress_bunzip2: fix integer overflow in run-length decoding (git-fixes).\n- lib: validate in-memory LZ4 chunk length (git-fixes).\n- mac80211: tx: Use info-\u003eflags in ieee80211_tx_h_select_key() (git-fixes).\n- media: adv748x: Fix endpoint reference leaks on probe failure (git-fixes).\n- media: adv7180: Initialize mutex before ancillary clients (git-fixes).\n- media: adv7604: avoid negative array index in log_status when cp_read fails (git-fixes).\n- media: amphion: fix runtime PM imbalance on probe failure (git-fixes).\n- media: amphion: prevent unbind while video instances are open (git-fixes).\n- media: atmel-isi: release unregistered video device on remove (git-fixes).\n- media: au0828: Fix media device leak in au0828_usb_probe() (git-fixes).\n- media: au0828: fix use-after-free in bulk_timeout timer on disconnect (git-fixes).\n- media: au0828: Free URBs when starting DVB streaming fails (git-fixes).\n- media: cx18: Disable PCI device on probe failure (git-fixes).\n- media: cx88: Disable PCI device on MPEG initialization failure (git-fixes).\n- media: cx231xx-audio: drain wq_trigger before audio fini (git-fixes).\n- media: cx231xx: Fix cleanup path on failure (git-fixes).\n- media: cx23885: Fix use-after-free in cx23885_finidev due to race condition (git-fixes).\n- media: cx23885: unregister DVB bus when SP2 CI setup fails (git-fixes).\n- media: em28xx: fix double free in em28xx_alloc_urbs (git-fixes).\n- media: em28xx: reject audio endpoint with zero packet size (git-fixes).\n- media: exynos4-is: Fix a race between s_stream(0) and the interrupt handler (git-fixes).\n- media: go7007: bound EZ-USB I2C transfers to the usb_buf size (git-fixes).\n- media: go7007: unregister the I2C adapter on USB probe failure (git-fixes).\n- media: gspca: use vb2_video_unregister_device() on disconnect (git-fixes).\n- media: hackrf: fix use-after-free in hackrf_alloc_urbs() error path (git-fixes).\n- media: hantro: Disable multicore support (stable-fixes).\n- media: hantro: disable runtime PM before hardware teardown (git-fixes).\n- media: hantro: Harden MPEG-2 control access against NULL (git-fixes).\n- media: i2c: ar0521: remove duplicate media entity cleanup (git-fixes).\n- media: i2c: ov5648: Fix a data race on state-\u003estreaming (git-fixes).\n- media: i2c: ov8856: fix debug message to report actual CSI-2 lane count (git-fixes).\n- media: i2c: tc358743: add missing color-space strings (git-fixes).\n- media: imon: fix use-after-free in display_close via dev_dbg (git-fixes).\n- media: imx-jpeg: cancel timeout worker when streaming stops (git-fixes).\n- media: imx-jpeg: finish the job on device_run() error paths (git-fixes).\n- media: ir-hix5hd2: Ensure rdev is setup before interrupts are enabled (git-fixes).\n- media: ir_toy: Validate the maximum tx carrier (git-fixes).\n- media: m2m-deinterlace: fix default capture field (git-fixes).\n- media: marvell-cam: fix unmet dependency for VIDEO_MMP_CAMERA (git-fixes).\n- media: marvell: manage the MMP camera clock provider (git-fixes).\n- media: mediatek: jpeg: Avoid context access after job finish (git-fixes).\n- media: mediatek: jpeg: retry HW selection after successful wait (git-fixes).\n- media: mediatek: vpu: free IRQ before destroying watchdog workqueue (git-fixes).\n- media: mediatek: vpu: release reserved memory on remove (git-fixes).\n- media: meson-ir-tx: Ensure clock is disabled on unbind (git-fixes).\n- media: meson-ir-tx: Ensure probe error is propagated (git-fixes).\n- media: meson-ir-tx: Prevent divide by zero in meson_irtx_prepare_pulse() (git-fixes).\n- media: meson: vdec: size capture planes from the aligned canvas (git-fixes).\n- media: microchip-csi2dc: fix async notifier leak on probe error path (git-fixes).\n- media: microchip-isc: disable histogram and flush AWB work on teardown (git-fixes).\n- media: microchip-isc: do not touch WB registers when not streaming (git-fixes).\n- media: microchip-isc: fix PM runtime leak in AWB work handler (git-fixes).\n- media: microchip-isc: synchronize the IRQ before disabling clocks on stop (git-fixes).\n- media: mtk-jpeg: Fix runtime PM leak in mtk_jpegdec_worker() (git-fixes).\n- media: mtk-jpeg: Fix runtime PM leak in mtk_jpegenc_worker() (git-fixes).\n- media: platform: mtk-mdp3: Fix device reference leak in mdp_comp_init() (git-fixes).\n- media: pvrusb2: Fix USB parent device leak in class_dev_create() (git-fixes).\n- media: rc: fintek-cir: process a full RX buffer instead of overflowing it (git-fixes).\n- media: rc: mce_kbd: Fix inconsistent locking of keylock (git-fixes).\n- media: redrat3: Ensure all urbs are suspended (git-fixes).\n- media: redrat3: Ensure we don't read beyond the end of the packet (git-fixes).\n- media: redrat3: fix UAF in probe error path leaving rc device registered (git-fixes).\n- media: require two-byte Cypress type 04 records (git-fixes).\n- media: rtl28xxu: fix SDR platform device leak (git-fixes).\n- media: saa7146: Initialize interrupt lock before requesting IRQ (git-fixes).\n- media: streamzap: Add missing rc_unregister_device() (git-fixes).\n- media: stv090x: bound DiSEqC reply length to msg size (git-fixes).\n- media: stv0900: bound DiSEqC reply length to msg size (git-fixes).\n- media: tw68: balance PCI enable on cleanup (git-fixes).\n- media: tw686x: fix V4L2 device lifetime on probe failure (git-fixes).\n- media: uvcvideo: Fix NULL deref on events for uninitialized controls (git-fixes).\n- media: v4l2-ctrls: do nothing if controls == NULL in cluster functions (git-fixes).\n- media: venus: Drop session events without an instance (git-fixes).\n- media: vicodec: fix NULL deref on oversized frame (git-fixes).\n- media: vicodec: fix out-of-bounds write on under-rounded coded dimensions (git-fixes).\n- media: vicodec: make encoder CAPTURE dimensions read-only (git-fixes).\n- media: vicodec: zero-initialize stateful decoder heap buffers (git-fixes).\n- media: vidtv: fix frontend reference leak on unbind (git-fixes).\n- media: vidtv: fix uaf in vidtv_bridge_on_new_pkts_avail (git-fixes).\n- media: vim2m: keep transaction buffer count stable while streaming (git-fixes).\n- media: vivid: round the height down to the vertical subsampling factor (git-fixes).\n- media: vpif_display: Fix i2c adapter reference leak in vpif_probe() (git-fixes).\n- mfd: ab8500: Fix child device leaks on probe failure (git-fixes).\n- mfd: da9150: Balance IRQ wake on teardown (git-fixes).\n- mfd: intel_quark_i2c_gpio: Manage the fixed-rate clock (git-fixes).\n- mfd: tps65217: Check return value when masking interrupt sources (git-fixes).\n- mfd: tps65217: Fix NULL pointer dereference on IRQ init failure (git-fixes).\n- mfd: wcd934x: Fix NULL pointer dereference on IRQ probe deferral (git-fixes).\n- mfd: wcd934x: set DMA mask on parent to silence \"DMA mask not set\" (git-fixes).\n- misc: enclosure: fix UAF on device_register() failure (git-fixes).\n- mm, vmscan: flush tlb before large folio is freed (bsc#1250656).\n- mm: introduce num_pages_contiguous() (bsc#1284243).\n- mtd: amd76xrom: Fix PCI device reference leak in amd76xrom_init_one() (git-fixes).\n- mtd: block: prevent reclaim I/O during request processing (git-fixes).\n- mtd: Call get_wunit() on the master partition (git-fixes).\n- mtd: cfi_cmdset_0002: cap the write-buffer chunk at 256 bytes on an x8 device (git-fixes).\n- mtd: maps: l440gx: Fix double put of the ISA bridge in init_l440gx() (git-fixes).\n- mtd: maps: l440gx: Fix double put of the PM device in init_l440gx() (git-fixes).\n- mtd: maps: pci: balance PCI enable on cleanup (git-fixes).\n- mtd: parsers: qcom: fix offset/size overflow on large partitions (git-fixes).\n- mtd: rawnand: atmel: Fix MCK clock leak in atmel_nand_controller_init() (git-fixes).\n- mtd: rawnand: pl353: fix clk reference leak in pl35x_nfc_setup_interface() (git-fixes).\n- mtd: rawnand: sunxi: reject ECC maximization on small pages (git-fixes).\n- mtd: spi-nor: sfdp: check the length of the SCCR map (git-fixes).\n- mtd: spi-nor: sfdp: check the length of the xSPI Profile 1.0 table (git-fixes).\n- mtd: spi-nor: Unprepare legacy controllers upon RWW wait interruption (git-fixes).\n- mtd: spinand: Fix spinand_manufacturer_ops kernel-doc (git-fixes).\n- net/rds: tcp: don't force RDS_CONN_RESETTING over a concurrent shutdown (git-fixes).\n- net/rds: use clear_bit_unlock() in release_refill() (git-fixes).\n- net: usb: cdc_mbim: don't enable BHs in tx_fixup under netpoll (git-fixes).\n- net: usb: cdc_ncm: don't enable BHs in tx_fixup under netpoll (git-fixes).\n- net: usb: lan78xx: reject invalid EEPROM write requests (git-fixes).\n- net: usb: pegasus: check rx pkt_len against the received length (git-fixes).\n- net: usb: pegasus: do not advance rx_skb-\u003edata on dropped frames (git-fixes).\n- net: usb: r8153_ecm: reject short register reads (git-fixes).\n- net: usb: sierra_net: reject short firmware attribute reads (git-fixes).\n- net: wwan: iosm: validate msg_head before indexing msg_ring (git-fixes).\n- PCI/AER: Fix memory leak in aer_recover_queue() on kfifo buffer overflow (git-fixes).\n- PCI/P2PDMA: Gate the host bridge whitelist warning on verbose (git-fixes).\n- PCI/sysfs: Handle a malformed _DSM result in acpi_attr_is_visible() (git-fixes).\n- PCI/sysfs: Pass the device name length in UTF-16 code units (git-fixes).\n- PCI/sysfs: Stop reporting _DSM failures as -EPERM (git-fixes).\n- PCI: aardvark: Disable PHY on probe failures (git-fixes).\n- PCI: cadence: Preserve all error codes in cdns_plat_pcie_probe() (git-fixes).\n- PCI: Disable MSI for ULi M1575 EHCI controller (git-fixes).\n- PCI: dra7xx: Fix clock enable leak on probe failure (git-fixes).\n- PCI: endpoint: pci-epf-vntb: Pass PF/VF number when BAR programming (git-fixes).\n- PCI: endpoint: pci-epf-vntb: Serialize virtual PCI bus scan (git-fixes).\n- PCI: Fix out-of-bounds MMIO read in nvme_disable_and_flr() (git-fixes).\n- PCI: qcom: Honor IOMMU provider's #iommu-cells in qcom_pcie_config_sid_1_9_0() (git-fixes).\n- PCI: rockchip-host: Do not attempt 5.0 GT/s retraining (git-fixes).\n- PCI: xgene: Use managed clock for PCIe controller (git-fixes).\n- peci: aspeed: Initialize state before requesting IRQ (git-fixes).\n- phy: cadence: Sierra: Do not modify register when getting parent clock (git-fixes).\n- phy: core: Fix race-condition between _of_phy_get() and try_module_get() (git-fixes).\n- phy: HiSilicon: Fix error handling in hi3670_pcie_allclk_ctrl() (git-fixes).\n- phy: hisilicon: hi3670: Fix OF node and device reference leaks (git-fixes).\n- pinctrl: mediatek: mt7629: fix the 2.4 GHz Wi-Fi pin mode array (git-fixes).\n- pinctrl: sprd: free maps on DT map failure (git-fixes).\n- pinctrl: stm32: Fix fwnode reference leak in stm32_gpiolib_register_bank() (git-fixes).\n- platform/chrome: cros_ec_proto: Fix deferred response (git-fixes).\n- platform/olpc: Reserve space for a string terminator (git-fixes).\n- platform/x86/amd/pmc: Fix RTC reference leak in amd_pmc_verify_czn_rtc() (git-fixes).\n- platform/x86/amd: Stop counting intermediate cycles with metrics table (git-fixes).\n- platform/x86/intel-uncore-freq: Continue restoring limits on resume (git-fixes).\n- platform/x86: asus-wmi: validate custom fan curves on enable (git-fixes).\n- platform/x86: gpd pocket fan: Cancel work before releasing GPIOs (git-fixes).\n- platform/x86: hp-wmi: fix heap OOB read and memory corruption in hp_wmi_perform_query() (git-fixes).\n- platform/x86: ibm_rtl: Fix potential OOB read at signature search (git-fixes).\n- platform/x86: intel_telemetry: initialize default trace verbosity (git-fixes).\n- platform/x86: msi-ec: Report valid charge thresholds when unset (git-fixes).\n- power: supply: ab8500: Preserve battery termination current (git-fixes).\n- power: supply: ab8500_btemp: Fix event temperature reporting (git-fixes).\n- power: supply: ab8500_charger: Decode AB8505 USB status (git-fixes).\n- power: supply: ab8500_charger: Fix AC charger re-enable (git-fixes).\n- power: supply: ab8500_charger: Handle detection errors (git-fixes).\n- power: supply: ab8500_charger: Recover inactive AB8505 charger (git-fixes).\n- power: supply: ab8500_charger: Respect AB8505 register layout (git-fixes).\n- power: supply: ab8500_charger: Retry AB8505 USB detection (git-fixes).\n- power: supply: ab8500_charger: Skip absent AB8505 main charger (git-fixes).\n- power: supply: ab8500_fg: Accept status from supplied power (git-fixes).\n- power: supply: ab8500_fg: Avoid reserved AB8505 CCConf bit (git-fixes).\n- power: supply: ab8500_fg: Finalize current measurements (git-fixes).\n- power: supply: ab8500_fg: Report sub-percent charge changes (git-fixes).\n- power: supply: bq2515x: Propagate charge-enable read errors (git-fixes).\n- power: supply: charger-manager: Convert to platform remove callback returning void (stable-fixes).\n- power: supply: generic-adc-battery: fix status with no supplier (git-fixes).\n- power: supply: generic-adc-battery: Propagate charged GPIO errors (git-fixes).\n- power: supply: gpio-charger: Report discharging without input power (git-fixes).\n- power: supply: lp8788-charger: Convert to platform remove callback returning void (stable-fixes).\n- power: supply: lp8788-charger: fix use-after-free on remove (git-fixes).\n- power: supply: lp8788: Use devm_power_supply_register() helper (stable-fixes).\n- power: supply: mp2629: Use the full batt_impedance_compensation name in the ABI document (git-fixes).\n- power: supply: qcom_battmgr: report full batteries (git-fixes).\n- power: supply: qcom_battmgr: report the USB type from USB_ADAP_TYPE (git-fixes).\n- power: supply: sbs-battery: disable polling before supply teardown (git-fixes).\n- pwm: mtk-disp: Fix period readback (git-fixes).\n- RDMA/core: Add rdma_restrack_begin/abort/commit_del() operations (git-fixes).\n- regulator: ab8500: Fix AB8505 VANA voltage selectors (git-fixes).\n- regulator: ab8500: Handle AB8505 VINTCORE selector 7 (git-fixes).\n- regulator: ab8500: Propagate mode enable read errors (git-fixes).\n- regulator: ab8500: Test dedicated enable bits only (git-fixes).\n- regulator: ab8500: Treat cut 1.0 VAUX3 as fixed (git-fixes).\n- regulator: core: Fix c_rdev reference leak in regulator_resolve_coupling() (git-fixes).\n- regulator: core: Fix coupled regulators reference leak on removal (git-fixes).\n- regulator: core: Fix rdev reference leak in regulator_resolve_supply() (git-fixes).\n- regulator: mp886x: check get_voltage_sel() return value (git-fixes).\n- regulator: mp886x: fix pontential division by zero (git-fixes).\n- regulator: mp886x: fix vsel_mask (git-fixes).\n- regulator: rt6190: Fix runtime PM imbalance in rt6190_out_enable() (git-fixes).\n- Reinstate \"resource: avoid unnecessary lookups in find_next_iomem_res()\" (bsc#1284243).\n- Revert \"mkspec: Exclude rt flavor from kernel-syms dependencies\" (bsc#1244337).\n- Revert \"rpm/mkspec: Fix missing kernel-syms-rt creation\" (bsc#1244337).\n- Revert \"wifi: mac80211: do not use old MBSSID elements\" (git-fixes).\n- rtc: abx80x: fix error check after i2c_smbus_read in read_alarm() (git-fixes).\n- rtc: abx80x: properly handle shared IRQs (git-fixes).\n- rtc: ac100: Assign .num before accessing .hws (git-fixes).\n- rtc: cmos: Disable ACPI RTC event before handling it (git-fixes).\n- rtc: dev: zero-initialize struct rtc_wkalrm to prevent information leak (git-fixes).\n- rtc: ds1685: arm the wake-up alarm at power-off only if an alarm is set (git-fixes).\n- rtc: ds1685: do not sleep in the power-off handler (git-fixes).\n- rtc: ftrtc010: fix integer overflow in time calculation (git-fixes).\n- rtc: mpfs: Fix alarm register word order (git-fixes).\n- rtc: mpfs: fix unchecked devm_clk_get() error pointer in probe() (git-fixes).\n- rtc: s35390a: Add missing newline to dev_err (git-fixes).\n- rtc: s35390a: Fix alarm not disabling (git-fixes).\n- rtc: spear: initialize IRQ state before requesting alarm IRQ (git-fixes).\n- selftests/alsa: Do not take another control's event as our own (git-fixes).\n- serial: 8250_lpss: do not touch uninitialized line in ehl_serial_exit() (git-fixes).\n- serial: core: shut down initialized port on removal (git-fixes).\n- serial: max310x: don't clobber the TX break bit in set_termios (git-fixes).\n- serial: pmac_zilog: push received data to the port that received it (git-fixes).\n- serial: pmac_zilog: report received breaks (git-fixes).\n- slimbus: messaging: fix leaked PM vote on tid allocation failure (git-fixes).\n- smb: client: fix next_buffer UAF and NextCommand bounds in compound PDUs (git-fixes).\n- smb: client: use kzalloc to zero-initialize security descriptor buffer (git-fixes).\n- smb: common: change the data type of num_aces to le16 (git-fixes).\n- soc/tegra: flowctrl: Release OF node reference on error (git-fixes).\n- soc: fsl: cpm1: tsa: Fix clock leak in tsa_of_parse_tdms() (git-fixes).\n- soc: fsl: dpio: Fix cleanup on IRQ registration failure (git-fixes).\n- soc: fsl: dpio: Free the IRQ before releasing the I/O object (git-fixes).\n- soc: qcom: apr: clean up failed service registrations (git-fixes).\n- soc: ti: k3-ringacc: Correct ring API kernel-doc (git-fixes).\n- soc: ti: k3-ringacc: Fix DMA ring initialization kernel-doc (git-fixes).\n- soundwire: intel: initialise quirk_mask before reading it (git-fixes).\n- spi: amd: fix len==0 underflow and FIFO overflow (git-fixes).\n- spi: bcm63xx-hsspi: Disable runtime PM on remove (git-fixes).\n- spi: Fix the return value in spi_new_ancillary_device() kernel-doc (git-fixes).\n- spi: jcore: fix divide-by-zero when speed_hz is zero (git-fixes).\n- spi: mtk-nor: fix runtime PM usage count leak in probe error path (git-fixes).\n- spi: mxic: fix ps_clk leak in runtime resume (git-fixes).\n- spi: npcm-fiu: limit UMA data_size to the 16-byte staging buffer (git-fixes).\n- spi: omap2-mcspi: Remove unbalanced pm_runtime_put_sync() calls (git-fixes).\n- spi: spi-sun4i: sun4i_spi_fill_fifo(): always apply A10 FIFO fill level workaround (git-fixes).\n- spi: spi-sun4i: sun4i_spi_transfer_one(): fix transfers for SUN4I_FIFO_DEPTH (git-fixes).\n- spi: zynq-qspi: fix address buffer corruption and support 4-byte address (git-fixes).\n- staging: iio: adc: ad7816: Fix DMA safety issues in SPI transfers (git-fixes).\n- staging: media: av7110: fix corrupted BER reporting in sp8870 (git-fixes).\n- staging: media: imx: csc-scaler: fix ipu_image_convert_run leak on queue error (git-fixes).\n- staging: rtl8723bs: clean up redundant \u0026 parentheses (stable-fixes).\n- Staging: rtl8723bs: Delete dead code from update_current_network() (stable-fixes).\n- staging: rtl8723bs: fix buffer over-read in rtw_update_protection (git-fixes).\n- staging: rtl8723bs: fix RX buffer OOB write from device-reported length (git-fixes).\n- Staging: rtl8723bs: Remove dead code from _rtw_free_network() (stable-fixes).\n- staging: sm750fb: free cmap on framebuffer release (git-fixes).\n- thermal/drivers/sprd: validate the sensor id from the device tree (git-fixes).\n- thermal: Fix CPU mask truncation in power limit trace event (git-fixes).\n- thermal: intel: int340x: Fix temperature selection around 0 C (git-fixes).\n- thermal: intel: powerclamp: Reject invalid window_size values (git-fixes).\n- thermal: ti-soc-thermal: Fix the return value in ti_bandgap_get_sensor_data() kernel-doc (git-fixes).\n- thunderbolt: Disable CL states for the Anker Prime TB5 dock (stable-fixes).\n- thunderbolt: Do not RPM complete unrelated subtrees on unplug (git-fixes).\n- tools/thermal/tmon: Fix string truncation warning in optarg copy (git-fixes).\n- tpm: fix zero-length read discarding the pending response (git-fixes).\n- tpm: tpm_nsc: fix NULL pointer dereference on init failure (git-fixes).\n- tpm: tpm_nsc: stop using the cleanup callback as dev.release (git-fixes).\n- tty: add break_wait kernel-doc (git-fixes).\n- tty: vcc: hold port lock when clearing tty pointer in vcc_cleanup (stable-fixes).\n- tty: vcc: zero-initialize control packet in vcc_send_ctl() (stable-fixes).\n- usb-storage: alauda: check the return value of alauda_read_map() (git-fixes).\n- usb-storage: alauda: do not do DMA from the stack (git-fixes).\n- usb-storage: alauda: fix out-of-bounds zone index (git-fixes).\n- USB: cdc-acm: fix urb leak on disconnect (git-fixes).\n- usb: chipidea: udc: fix DMA and SG cleanup in _ep_nuke() (stable-fixes).\n- usb: dwc3: clear forceRM when issuing EndTransfer (git-fixes).\n- usb: dwc3: gadget: Fix use-after-free in dwc3_gadget_free_endpoints due to race condition (git-fixes).\n- usb: dwc3: gadget: Reinitiate stream for all host NoStream behavior (stable-fixes).\n- usb: fotg210: validate endpoint index in ep0 handlers (git-fixes).\n- usb: gadget: composite: avoid warning on aborted delayed status (git-fixes).\n- usb: gadget: dummy_hcd: fix SuperSpeed ep0 maxpacket (git-fixes).\n- usb: gadget: dummy_hcd: prevent unbind via sysfs (git-fixes).\n- usb: gadget: f_fs: Fix Use-After-Free in AIO error path (git-fixes).\n- usb: gadget: f_mass_storage: ignore class requests while inactive (git-fixes).\n- usb: gadget: f_midi: Annotate struct f_midi with __counted_by (stable-fixes).\n- usb: gadget: f_midi: initialize work in f_midi_alloc() (git-fixes).\n- USB: gadget: ffs: fix mm lifetime handling (stable-fixes).\n- usb: gadget: functionfs: Factorize wait-for-endpoint code (stable-fixes).\n- USB: gadgetfs: do not WARN about excessively large memory allocations (git-fixes).\n- usb: image: microtek: stop SG processing after transfer errors (git-fixes).\n- usb: musb: da8xx: depopulate OF children on probe failure (git-fixes).\n- usb: musb: da8xx: depopulate OF children on remove (git-fixes).\n- usb: ohci-spear: disable controller wakeup on removal (git-fixes).\n- usb: ohci-spear: Remove unnecessary NULL check before clk_disable_unprepare() (stable-fixes).\n- USB: pci-quirks: Release EHCI device reference (git-fixes).\n- USB: serial: cp210x: add Corsair AX1500i Power Supply (stable-fixes).\n- USB: serial: option: add Compal EXC-T1 support (stable-fixes).\n- USB: serial: option: add Compal EXM-G1x support (stable-fixes).\n- USB: serial: option: add Quectel EG060W (stable-fixes).\n- USB: serial: option: add Quectel RG660QB (stable-fixes).\n- USB: serial: option: add support for SIMCom SIM8260C (stable-fixes).\n- USB: serial: sierra: fix urb leak on write completion (git-fixes).\n- USB: serial: usb_wwan: fix urb leak on disconnect (git-fixes).\n- usb: typec: ucsi_ccg: Add retry mechanism in ccg_read (git-fixes).\n- USB: usbmon: fix null-ptr-deref in mon_bus_remove() when mon_bus_init() fails (git-fixes).\n- usbnet: fix EVENT_RX_PAUSED race in usbnet_skb_return() (git-fixes).\n- usbnet: fix smp_processor_id() use in preemptible context (git-fixes).\n- vfio/type1: batch vfio_find_vpfn() in function vfio_unpin_pages_remote() (bsc#1284243).\n- vfio/type1: conditional rescheduling while pinning (bsc#1284243).\n- vfio/type1: introduce a new member has_rsvd for struct vfio_dma (bsc#1284243).\n- vfio/type1: optimize vfio_pin_pages_remote() (bsc#1284243).\n- vfio/type1: optimize vfio_unpin_pages_remote() (bsc#1284243).\n- vt: skip screen update for DEC alignment test on backgroup consoles (git-fixes).\n- watchdog: mediatek: Apply the driver's mode to a watchdog left running (git-fixes).\n- wifi: ath6kl: don't take RTNL in del_virtual_intf (git-fixes).\n- wifi: ath9k: delete channel-context timers on deinit (git-fixes).\n- wifi: ath10k: avoid IDR mutation during TX cleanup (git-fixes).\n- wifi: ath11k: avoid IDR mutation during pending mgmt TX cleanup (git-fixes).\n- wifi: ath11k: avoid IDR mutation during vif mgmt TX cleanup (git-fixes).\n- wifi: ath11k: disable interrupts during firmware crash recovery (git-fixes).\n- wifi: ath11k: fix locking problem in ath11k_dp_rx_tid_del_func() (git-fixes).\n- wifi: ath11k: fix NULL dereference in ahb remove when QMI init incomplete (git-fixes).\n- wifi: ath11k: Fix possible memory leak in ath11k_dp_srng_setup() (git-fixes).\n- wifi: ath11k: fix sporadic WLAN initialization failures (git-fixes).\n- wifi: ath11k: fix unbalanced IRQ enable/disable during suspend/resume (git-fixes).\n- wifi: ath11k: modify null check logic in ath11k_ce_rx_post_pipe() (git-fixes).\n- wifi: ath11k: reset ar-\u003enum_stations on hardware start (git-fixes).\n- wifi: ath11k: unregister PM notifier on QMI init failure path (git-fixes).\n- wifi: ath12k: avoid IDR mutation during vif mgmt TX cleanup (git-fixes).\n- wifi: ath12k: fix incorrect TID updation in DP monitor status path (stable-fixes).\n- wifi: ath12k: fix struct hal_rx_phyrx_rssi_legacy_info (stable-fixes).\n- wifi: ath12k: fix the fetching of combined rssi (git-fixes).\n- wifi: ath12k: Free allocated CE IRQs on request_irq() failure (git-fixes).\n- wifi: b43: don't pass unterminated string to sscanf() (git-fixes).\n- wifi: b43: fix use-after-free in b43_bcma_remove() (git-fixes).\n- wifi: b43legacy: debugfs: NUL terminate string in debugfs (git-fixes).\n- wifi: brcmsmac: Adjust txpwrindex value in nphy_ipa_rxcal_gaintbl_2GHz (git-fixes).\n- wifi: carl9170: NUL terminate string in debugfs (git-fixes).\n- wifi: cfg80211: allow zero HE OBSS PD offsets (git-fixes).\n- wifi: cfg80211: preserve hidden-group beacon IE ownership (git-fixes).\n- wifi: cfg80211: reject duplicate wiphy cipher suite entries (stable-fixes).\n- wifi: cfg80211: track SSID regardless of country data (git-fixes).\n- wifi: cw1200: fix TX padding OOB read leaking heap data to device (git-fixes).\n- wifi: iwlegacy: 3945: free EEPROM data on remove (git-fixes).\n- wifi: iwlwifi: dvm: pair transport op-mode enter/leave (stable-fixes).\n- wifi: iwlwifi: mvm: remove mvm prefix from iwl_mvm_tx_resp* (stable-fixes).\n- wifi: iwlwifi: mvm: validate TX_CMD response layout (stable-fixes).\n- wifi: mac80211: account proxy paths against the mesh path limit (git-fixes).\n- wifi: mac80211: Add 802.3 multicast encapsulation offload support (stable-fixes).\n- wifi: mac80211: Add multicast to unicast support for 802.3 path (stable-fixes).\n- wifi: mac80211: Add sta pointer sanity check in ieee80211_8023_xmit() (stable-fixes).\n- wifi: mac80211: clear fragment cache entry 'is_protected' (git-fixes).\n- wifi: mac80211: don't call ieee80211_handle_reconfig_failure when not needed (stable-fixes).\n- wifi: mac80211: don't reset the TXQ scheduling round number (git-fixes).\n- wifi: mac80211: don't send encap offload frames unencrypted (git-fixes).\n- wifi: mac80211: drain PS delivery work during station teardown (git-fixes).\n- wifi: mac80211: drop encap offload frames with a tainted key (git-fixes).\n- wifi: mac80211: Fix a race when expiring a mesh path (git-fixes).\n- wifi: mac80211: fix encryption tailroom (git-fixes).\n- wifi: mac80211: fix key selection for encap offload frames (git-fixes).\n- wifi: mac80211: fix mesh fast xmit path deletion UAF (git-fixes).\n- wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (stable-fixes).\n- wifi: mac80211: fix swapped fq_overlimit/fq_overmemory in aqm debugfs (git-fixes).\n- wifi: mac80211: Fix the return value in mesh_path_add() kernel-doc (git-fixes).\n- wifi: mac80211: fix unauthorised port check for encap offload (git-fixes).\n- wifi: mac80211: handle empty FILS association request payload (git-fixes).\n- wifi: mac80211: init radiotap iter after length checks (git-fixes).\n- wifi: mac80211: kill wake_txqs_tasklet on unregistration (git-fixes).\n- wifi: mac80211: limit injected HT/VHT MCSes (git-fixes).\n- wifi: mac80211: mesh: use hlist_add_head_rcu() (git-fixes).\n- wifi: mac80211: minstrel_ht: validate fixed rate index (git-fixes).\n- wifi: mac80211: prevent AP VLAN tx from other interfaces (git-fixes).\n- wifi: mac80211: refactor populating mesh related fields in sinfo (stable-fixes).\n- wifi: mac80211: release mesh path quota on failed additions (git-fixes).\n- wifi: mac80211: reserve MME tailroom for protected beacons (git-fixes).\n- wifi: mac80211: set info-\u003eband for 802.3 encap offload frames (git-fixes).\n- wifi: mac80211: use link address as TA for non-MLO 4-addr station on MLD AP (git-fixes).\n- wifi: mt76: feed the station RSSI average from the chain signals (git-fixes).\n- wifi: mt76: fix memory leak in USB TX path (git-fixes).\n- wifi: mt76: Fix of_node reference leak in mt76_get_rate_power_limits() (git-fixes).\n- wifi: mt76: fix unlocked wcid check in mt76_tx_status_skb_add() (git-fixes).\n- wifi: mt76: fix wcid-\u003epktid corruption in mt76_wcid_cleanup() (git-fixes).\n- wifi: mt76: mt76x02: validate RX padding before use (git-fixes).\n- wifi: mt76: mt76x02: validate TX-status rate index before mac80211 handoff (git-fixes).\n- wifi: mt76: mt792x: fix UAF in SDIO TX path when out of memory (git-fixes).\n- wifi: mt76: mt7603: don't drop short frames looped back on PS entry (git-fixes).\n- wifi: mt76: mt7615: cancel reset work during unregister (git-fixes).\n- wifi: mt76: mt7615: do not tear down BSS/STA state for monitor vifs (git-fixes).\n- wifi: mt76: mt7615: read MT7663 temperature from the correct offset (git-fixes).\n- wifi: mt76: mt7615: usb: fix source overread in mt7663u_copy (git-fixes).\n- wifi: mt76: mt7615: validate MCU response lengths (git-fixes).\n- wifi: mt76: mt7915: allocate vif wcid in the same range as stations (stable-fixes).\n- wifi: mt76: mt7915: bound the device EEPROM address before the EFUSE copy (git-fixes).\n- wifi: mt76: mt7915: check default EEPROM firmware size before copying (git-fixes).\n- wifi: mt76: mt7915: clear wcid mask under mutex after RCU pointer clear (git-fixes).\n- wifi: mt76: mt7915: Fix an error handling path in mt7915_add_interface() (git-fixes).\n- wifi: mt76: mt7915: guard firmware memory dump write on disabled memdump (git-fixes).\n- wifi: mt76: mt7915: set correct background radar capability (stable-fixes).\n- wifi: mt76: mt7915: unregister thermal cooling device on hwmon failure (git-fixes).\n- wifi: mt76: mt7921: check drv_pmctrl return in the PCIe reset path (git-fixes).\n- wifi: mt76: mt7921: fix lock inversion between dev-\u003emutex and iflist_mtx (git-fixes).\n- wifi: mt76: mt7921: fix the lock inversion in suspend and resume (git-fixes).\n- wifi: mt76: mt7925: check drv_pmctrl return in the PCIe reset path (git-fixes).\n- wifi: mt76: mt7925: fix lock inversion between dev-\u003emutex and iflist_mtx (git-fixes).\n- wifi: mt76: mt7925: fix the lock inversion in suspend and resume (git-fixes).\n- wifi: mt76: mt7925: honour mac80211's FIF_FCSFAIL instead of hardcoding drop_err (git-fixes).\n- wifi: mt76: mt7925: restore the reset state when fw_pmctrl fails (git-fixes).\n- wifi: mt76: mt7996: fix PLE free page and AC queue register offsets (git-fixes).\n- wifi: mt76: mt7996: validate firmware event lengths before parsing (git-fixes).\n- wifi: mt76: usb: fix source overread in mt76u_copy (git-fixes).\n- wifi: mwifiex: append hotfix number to firmware version string (git-fixes).\n- wifi: p54: validate firmware record lengths (stable-fixes).\n- wifi: rtw88: debugfs: don't vzalloc(0) when rsvd_page is read unconfigured (git-fixes).\n- wifi: rtw88: debugfs: support multiple adapters debugging (stable-fixes).\n- wifi: rtw88: fix out-of-bounds CAM write when key table is full (git-fixes).\n- wifi: rtw88: sdio: zero the padding added to a TX transfer (git-fixes).\n- wifi: rtw89: 8851b: fix swapped DPK channel/bandwidth backup fields (git-fixes).\n- wifi: rtw89: cap firmware section_num before parsing (git-fixes).\n- wifi: wfx: fix possible device hang during init (git-fixes).\n- wifi: wfx: fix use-after-free of the cooling work on device removal (git-fixes).\n- wifi: wfx: validate MIB read length before copying to caller (git-fixes).\n- wwan: wwan_hwsim: Pin module for debugfs file operations (git-fixes).\n- xhci: dbc: lock the minor IDR on registration failure (git-fixes).\n","status":"published","published":"2026-11-03T18:30:06Z","modified":"2026-11-12T17:23:17.579773894Z","updated_at":"2026-11-12T18:02:05.26944Z"},{"id":"SUSE-SU-2026:5091-1","title":"Security update for the Linux Kernel","description":"\nThe SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues:\n\nThe following security issues were fixed:\n\n- CVE-2025-68219: cifs: fix memory leak in smb3_fs_context_parse_param error path (bsc#1255222).\n- CVE-2026-31708: smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path (bsc#1264022).\n- CVE-2026-31709: smb: client: validate the whole DACL before rewriting it in cifsacl (bsc#1264024).\n- CVE-2026-43350: smb: client: require a full NFS mode SID before reading mode bits (bsc#1264985).\n- CVE-2026-46155: smb/client: fix out-of-bounds read in smb2_compound_op() (bsc#1267720).\n- CVE-2026-64370: posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (bsc#1273805).\n- CVE-2026-64380: smb: client: harden POSIX SID length parsing (bsc#1273557).\n- CVE-2026-64430: NTB: epf: Avoid calling pci_irq_vector() from hardirq context (bsc#1274257).\n- CVE-2026-64435: audit: Fix data races of skb_queue_len() readers on audit_queue (bsc#1274080).\n- CVE-2026-68186: binfmt_misc: set have_execfd only once the interpreter is opened (bsc#1274949).\n- CVE-2026-68436: drm/amd/display: use kvzalloc to allocate struct dc (bsc#1276275).\n- CVE-2026-68447: drm/amdkfd: clamp v9 CRIU control stack checkpoint copy to BO size (bsc#1276280).\n- CVE-2026-68460: f2fs: fix potential deadlock in f2fs_balance_fs() (bsc#1276774).\n- CVE-2026-72010: cgroup/cpuset: rebind mm mempolicy to effective_mems, not mems_allowed (bsc#1276776).\n- CVE-2026-72073: mmc: vub300: fix use-after-free on probe failure (bsc#1277157).\n- CVE-2026-72110: bpf,fork: wipe -\u003ebpf_storage before bailouts that access it (bsc#1277357).\n- CVE-2026-72111: bpf: Reset register bounds before narrowing retval range in check_mem_access() (bsc#1277389).\n- CVE-2026-72250: netfilter: nf_conntrack_reasm: guard mac_header adjustment after IPv6 defrag (bsc#1277663).\n- CVE-2026-72253: netfilter: nf_conntrack_sip: validate skb_dst() before accessing it (bsc#1277665).\n- CVE-2026-72318: cifs: validate DFS referral string offsets (bsc#1275939).\n- CVE-2026-72405: net: udp_tunnel: prevent double queueing in udp_tunnel_nic_device_sync (bsc#1278033).\n- CVE-2026-72416: netfilter: nft_compat: ebtables emulation must reject non-bridge targets (bsc#1278041).\n- CVE-2026-72428: bpf: Fix stack slot index in nospec checks (bsc#1278050).\n- CVE-2026-74368: wifi: ath12k: fix memory leak in ath12k_wifi7_dp_rx_h_verify_tkip_mic() (bsc#1277103).\n- CVE-2026-74472: ublk: reset kernel-owned dev_info fields in ublk_ctrl_add_dev() (bsc#1277785).\n- CVE-2026-74613: vsock/virtio: avoid refilling the RX queue after teardown (bsc#1277903).\n- CVE-2026-74620: net/sched: act_gact, act_police: range check the fallback control action (bsc#1277044).\n- CVE-2026-74624: netfilter: nf_conntrack: defer invalid log until after unlock (bsc#1277599).\n- CVE-2026-74715: net: netfilter: Make ct zone opts configurable for bpf ct helpers (bsc#1277890).\n- CVE-2026-74746: netfilter: flowtable: publish GC-visible tuple last (bsc#1278101).\n- CVE-2026-74748: netfilter: ipset: fix refcount race between list:set GC and swap (bsc#1277578).\n- CVE-2026-80572: Input: byd - synchronize timer deletion before freeing private data (bsc#1277338).\n- CVE-2026-80602: perf/x86/amd/lbr: Fix kernel address leakage (bsc#1278123).\n- CVE-2026-80637: netfilter: synproxy: fix unaligned memory access in timestamp adjustment (bsc#1278343).\n- CVE-2026-80717: sctp: validate Adaptation Indication parameter length (bsc#1277836).\n- CVE-2026-80755: selinux: reject a permission value exceeding the class permission count (bsc#1278415).\n- CVE-2026-80757: selinux: reject a class permission count below its inherited common (bsc#1278711).\n- CVE-2026-80808: ext4: stop retrying saturated xattr cache entries (bsc#1279795).\n- CVE-2026-80809: ocfs2: fix missing metadata reservation for large xattrs (bsc#1279606).\n- CVE-2026-80855: fuse: fix invalidate lock leak on open O_TRUNC DAX failure (bsc#1279564).\n- CVE-2026-80879: ocfs2: fix circular locking dependency in ocfs2_dio_end_io_write (bsc#1279494).\n- CVE-2026-80881: ocfs2: fix buffer head management in ocfs2_read_blocks() (bsc#1279496).\n- CVE-2026-80978: ip6_gre: fix hardware header length for NBMA tunnels (bsc#1280253).\n- CVE-2026-89491: ocfs2: cluster: don't sleep while holding o2hb_live_lock in o2hb_region_pin() (bsc#1280472).\n- CVE-2026-89494: ocfs2: validate lengths in dlm_mig_lockres_handler (bsc#1280520).\n- CVE-2026-89495: ocfs2: bound namelen in dlm_migrate_request_handler (bsc#1280569).\n- CVE-2026-89537: SUNRPC: Reject short RFC 4121 MIC tokens in gss_krb5_verify_mic_v2 (bsc#1280713).\n- CVE-2026-89560: landlock: Require LANDLOCK_ACCESS_FS_MAKE_REG for whiteout creation (bsc#1280806).\n- CVE-2026-89595: fsnotify: Fix stale object mask after concurrent mark updates (bsc#1280834).\n- CVE-2026-89608: ecryptfs: pass packet set buffer size to parser (bsc#1280826).\n- CVE-2026-89637: smb: client: fix UAF and buffer leak in cifs_check_trans2() for malformed secondary T2 (bsc#1280492).\n- CVE-2026-89649: ceph: bound xattr value length in __build_xattrs() (bsc#1280434).\n- CVE-2026-89654: ceph: fix UAF in check_new_map() on session freed during unlock (bsc#1280415).\n- CVE-2026-89655: ceph: fix UAF in __kick_flushing_caps() on cf entry freed during unlock (bsc#1280398).\n- CVE-2026-89656: libceph: reject buckets with mismatched CRUSH ids (bsc#1280563).\n- CVE-2026-89657: libceph: validate OSD extent maps before cursor advance (bsc#1280545).\n- CVE-2026-89751: x86/tdx: Fix off-by-one in port I/O handling (bsc#1280822).\n- CVE-2026-89761: apparmor: fix out-of-bounds write when null terminating a label vec (bsc#1280745).\n- CVE-2026-89786: ext4: fix out-of-bounds read in ext4_read_inline_dir() (bsc#1280976).\n- CVE-2026-89787: ext4: check dir entry fits before reading the hash trailer in ext4_search_dir() (bsc#1280977).\n- CVE-2026-90042: ceph: properly decrypt filenames in vmalloc() buffers (bsc#1280948).\n- CVE-2026-90092: Bluetooth: L2CAP: reject accept queue add unless BT_LISTEN (bsc#1281384).\n- CVE-2026-90128: vdpa/mlx5: fix wrong list iterated in add_direct_chain error path (bsc#1281577).\n- CVE-2026-90148: NFSv4: Fix incorrect argument passed to nfs4_delete_lease() in nfs4_add_lease() (bsc#1281551).\n- CVE-2026-90227: nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (bsc#1281705).\n- CVE-2026-90393: bpf: Fix potential UAF in bpf_netns_link_update_prog (bsc#1282289).\n- CVE-2026-93054: uio: Fix stale info pointer in failed registration path (bsc#1282276).\n- CVE-2026-93228: svcrdma: Reject Write/Reply chunks with segcount 0 (bsc#1282697).\n- CVE-2026-93262: md/raid5-ppl: fix use-after-free in ppl_do_flush() (bsc#1283004).\n- CVE-2026-93795: blk-cgroup: fix leaks and online flag on radix_tree_insert failure (bsc#1283155).\n- CVE-2026-93798: btrfs: fix reloc root cleanup in merge_reloc_roots() (bsc#1282769).\n- CVE-2026-93817: perf: Fix addr_filter_ranges lifetime (bsc#1283017).\n- CVE-2026-97575: media: v4l2-ctrls: validate AV1 tile counts (bsc#1283337).\n- CVE-2026-97605: erofs: preserve LZMA decoders on resize failure (bsc#1283173).\n- CVE-2026-97926: ufs: validate cylinder group metadata before caching it (bsc#1283887).\n- CVE-2026-98041: bpf: Don't predict JMP32 pointer vs zero comparisons (bsc#1284064).\n- CVE-2026-98086: ALSA: ump: do not touch legacy_rmidi before it exists (bsc#1283785).\n- CVE-2026-98264: ALSA: virtio: reset device before deleting virtqueues (bsc#1284363).\n- CVE-2026-98306: seg6: set IPSKB_L3SLAVE from IP6SKB_L3SLAVE on IPIP decapsulation (bsc#1284505).\n- CVE-2026-98368: esp: downgrade zerocopy managed frags before mutating skb frags (bsc#1284498).\n- CVE-2026-98374: tcp: fix use-after-free of retransmit_skb_hint in tcp_send_synack() (bsc#1284740).\n- CVE-2026-98432: ipv4: free inet_opt and ireq_opt after an RCU grace period (bsc#1285685).\n- CVE-2026-98471: KVM: SEV: Do cache maintenance on the source VM during intra-host migration (bsc#1286240).\n\nThe following non security issues were fixed:\n\n- accel/qaic: reject BO sizes that overflow page count (git-fixes).\n- ACPI: CPPC: Validate the _CPC package header (git-fixes).\n- ACPI: extlog: Validate elog record length before walking sections (git-fixes).\n- ACPI: PCI: pci_link: clear driver_data before free (git-fixes).\n- ACPI: pfr_update: zero-initialize capability query result (git-fixes).\n- ACPI: PM: Drop parent state update from acpi_device_get_power() (git-fixes).\n- ACPI: tables: handle failed initrd override mappings (git-fixes).\n- ACPI: TAD: Rearrange RT data validation checking (stable-fixes).\n- ACPI: video: Fix backlight unregistration ordering (git-fixes).\n- ACPICA: Fix memory leak in acpi_ds_create_field() (git-fixes).\n- ACPICA: Fix PCC OperationRegion command offsets (git-fixes).\n- ALSA: 6fire: take stream_mutex in the Digital Thru control (git-fixes).\n- ALSA: aloop: Keep the timer source alive until card release (git-fixes).\n- ALSA: caiaq: Allow zero-length packet handling for EP1 (git-fixes).\n- ALSA: caiaq: Fix races at MIDI URB and trigger accesses (git-fixes).\n- ALSA: caiaq: Fix the Kore controller key map (git-fixes).\n- ALSA: caiaq: Register card at the final step (git-fixes).\n- ALSA: caiaq: Serialize access to the EP1 command buffer (git-fixes).\n- ALSA: compress: add missing OPEN-state gate to SET_METADATA (git-fixes).\n- ALSA: compress: fix buffer leak on failed SET_PARAMS (git-fixes).\n- ALSA: compress: reject buffer geometry change on gapless next_track (git-fixes).\n- ALSA: control: Fix virtual master creation reference in kernel-doc (git-fixes).\n- ALSA: cs46xx: fix unit mismatch in DSP code area bounds check (git-fixes).\n- ALSA: hda/hdmi: clamp num_cvts against cvt_nids in hdmi_read_pin_conn (git-fixes).\n- ALSA: hda/hdmi: clamp sad_count in ELD proc write handler (git-fixes).\n- ALSA: hda: Add NULL check for the driver pointer at unsol event work (git-fixes).\n- ALSA: hda: Avoid non-operational GPU warning at regular device removal (git-fixes).\n- ALSA: hda: Fix potential UAF for gating jack (git-fixes).\n- ALSA: hda: intel: Cancel delayed work at shutdown, too (git-fixes).\n- ALSA: info: Fix memory leak at card removal (git-fixes).\n- ALSA: jack: Fix kctl free at error in snd_jack_kctl_new() (git-fixes).\n- ALSA: jack: Remove debugfs before freeing unregistered jacks (git-fixes).\n- ALSA: line6: Clear prev_fbuf on capture buffer release (git-fixes).\n- ALSA: line6: Fix potential OOB write in line6_capture_copy() (git-fixes).\n- ALSA: line6: Reject too small max packet sizes (git-fixes).\n- ALSA: line6: Use kzalloc() for PCM buffer allocation (git-fixes).\n- ALSA: pcm: Fix driver_tstamp value reporting (git-fixes).\n- ALSA: pcm: Protect channel-map reads against runtime detach (git-fixes).\n- ALSA: pcm: Protect delay DMA sync against concurrent HW_FREE (git-fixes).\n- ALSA: pcm: Protect delay DMA sync in forward and rewind, too (git-fixes).\n- ALSA: pcm: Protect the unregister notifier traversal (git-fixes).\n- ALSA: pcm: Remove channel-map controls before freeing substreams (git-fixes).\n- ALSA: pcm: Unlink substreams before releasing them (git-fixes).\n- ALSA: rawmidi: Drain input work before freeing the runtime (git-fixes).\n- ALSA: seq: Fix missing direction and ump_group handling in 32bit compat ioctl (git-fixes).\n- ALSA: seq: oss: Skip events until fully initialized (git-fixes).\n- ALSA: ump: Avoid dereference with max_src_size=0 (git-fixes).\n- ALSA: ump: Correct return size of fill_rpn() (git-fixes).\n- ALSA: usb-audio: Use fixed control index for us16x08 mixer elements (git-fixes).\n- ALSA: via82xx: use helper to activate DXS controls (git-fixes).\n- ALSA: vmaster: Protect follower lookup and setup (git-fixes).\n- ASoC: adau17x1: return cache sync errors from resume (git-fixes).\n- ASoC: ak4642: return cache sync errors from resume (git-fixes).\n- ASoC: amd: acp: Fix .close() being skipped on rollback (git-fixes).\n- ASoC: amd: ps: Fix acp63_pdm_dma_close() being skipped on rollback (git-fixes).\n- ASoC: amd: ps: Fix acp63_sdw_dma_close() being skipped on rollback (git-fixes).\n- ASoC: amd: raven: Fix acp3x_dma_close() being skipped on rollback (git-fixes).\n- ASoC: amd: renoir: Fix acp_pdm_dma_close() being skipped on rollback (git-fixes).\n- ASoC: amd: vangogh: Fix acp5x_dma_close() being skipped on rollback (git-fixes).\n- ASoC: amd: yc: Add DMI quirk for Acer Aspire Go 15 (AG15-21P) (stable-fixes).\n- ASoC: amd: yc: Fix acp6x_pdm_dma_close() being skipped on rollback (git-fixes).\n- ASoC: arizona-jack: Fix runtime PM imbalance in arizona_start_hpdet_acc_id() (git-fixes).\n- ASoC: atmel-i2s: fix MCK generator error handling (git-fixes).\n- ASoC: atmel-i2s: use optional API for gclk (git-fixes).\n- ASoC: atmel-i2s: use optional API for muxclk (git-fixes).\n- ASoC: atmel: atmel-pcm-pdc: Fix atmel_pcm_close() being skipped on rollback (git-fixes).\n- ASoC: codecs: da732x: Fix definition of ADC2 EQ Overall Volume control (git-fixes).\n- ASoC: codecs: lpass-wsa-macro: use v2.5 Compander1 addresses on v2.5+ (git-fixes).\n- ASoC: codecs: rt5659: propagate GPIO errors (git-fixes).\n- ASoC: codecs: rt5682s: disable jack detection work on shutdown (git-fixes).\n- ASoC: codecs: sta32x: Fix definition of Ch2 and Ch3 Volume Bypass controls (git-fixes).\n- ASoC: codecs: sta32x: Fix definition of limiter threshold controls (git-fixes).\n- ASoC: codecs: sta350: Fix definition of Ch2 and Ch3 Volume Bypass controls (git-fixes).\n- ASoC: codecs: sta350: Fix definition of limiter threshold controls (git-fixes).\n- ASoC: codecs: tlv320adc3xxx: Fix definition of AGC Target Level control (git-fixes).\n- ASoC: codecs: wcd9335: Fix SLIM interface device leak in wcd9335_slim_status() (git-fixes).\n- ASoC: codecs: wm5100: Fix definition of EQ3 Band 1 Volume control (git-fixes).\n- ASoC: codecs: wm8510: Fix definition of ADC Inversion Switch control (git-fixes).\n- ASoC: codecs: wm8737: Fix definition of zero cross switches (git-fixes).\n- ASoC: codecs: wm8750: Fix definition of ALC Capture NG Type control (git-fixes).\n- ASoC: codecs: wm8955: Fix definition of Treble Cutoff control (git-fixes).\n- ASoC: codecs: wm8983: Fix definition of ADC 128x Oversampling control (git-fixes).\n- ASoC: codecs: wm8985: Fix definition of ADC 128x Oversampling control (git-fixes).\n- ASoC: codecs: wm8990: Fix definition of LOMIX AINLMUX Bypass Volume control (git-fixes).\n- ASoC: codecs: wm8990: Fix definition of right input PGA controls (git-fixes).\n- ASoC: codecs: wm8991: Fix definition of LOMIX AINLMUX Bypass Volume control (git-fixes).\n- ASoC: codecs: wm8991: Fix definition of right input PGA controls (git-fixes).\n- ASoC: codecs: wm8994: Fix definition of WM8958 noise gate hold time controls (git-fixes).\n- ASoC: codecs: wm8994: Fix runtime PM leak in wm8994_mic_detect() (git-fixes).\n- ASoC: codecs: wm_hubs: Fix definition of MIXINR to MIXOUTR volume control (git-fixes).\n- ASoC: dwc: Use OF match data again for StarFive JH7110 (git-fixes).\n- ASoC: es8316: return cache sync errors from resume (git-fixes).\n- ASoC: es8326: report resume restore errors (git-fixes).\n- ASoC: fsl_asrc: check the second front-end DMA channel (git-fixes).\n- ASoC: fsl_asrc: use regmap_write_bits to update clock source registers (git-fixes).\n- ASoC: imx-pcm-rpmsg: Fix imx_rpmsg_pcm_close() being skipped on rollback (git-fixes).\n- ASoC: intel: atom: Fix .shutdown() being skipped on rollback (git-fixes).\n- ASoC: Intel: atom: Fix platform device leak on probe failure (git-fixes).\n- ASoC: Intel: avs: Prevent module info underflow (git-fixes).\n- ASoC: Intel: avs: Unprepare a stream when recovery occurs (git-fixes).\n- ASoC: mediatek: common: Handle constraint return value in FE startup (git-fixes).\n- ASoC: mediatek: common: Keep codec references until the card is bound (git-fixes).\n- ASoC: mediatek: mt6797: fix wrong unwind order and error code in enable_clock (git-fixes).\n- ASoC: mediatek: mt8183: Fix APLL enable error handling (git-fixes).\n- ASoC: mediatek: mt8183: Fix clock handling in mux disable path (git-fixes).\n- ASoC: mediatek: mt8183: Fix wrong clock cleanup on clk_set_parent() failure (git-fixes).\n- ASoC: mediatek: mt8186: Fix AFE clock error handling (git-fixes).\n- ASoC: mediatek: mt8186: Fix APLL enable error handling (git-fixes).\n- ASoC: mediatek: mt8186: Fix APLL mux setting error handling (git-fixes).\n- ASoC: mediatek: mt8186: Fix clock handling in mux disable path (git-fixes).\n- ASoC: mediatek: mt8186: Fix MCK error handling (git-fixes).\n- ASoC: mediatek: mt8188: Handle constraint return value in FE startup (git-fixes).\n- ASoC: mediatek: mt8188: mt8188-afe-clk: Handle clock enable errors (git-fixes).\n- ASoC: mediatek: mt8188: mt8188-afe-clk: Handle tuner clock enable errors (git-fixes).\n- ASoC: mediatek: mt8188: mt8188-afe-clk: Propagate regmap update errors (git-fixes).\n- ASoC: mediatek: mt8188: mt8188-afe-pcm: Handle runtime resume errors (git-fixes).\n- ASoC: mediatek: mt8192-mt6359: Fix error handling in MTKAIF calibration (git-fixes).\n- ASoC: mediatek: mt8192: check return values in mt8192_afe_gpio_init() (git-fixes).\n- ASoC: mediatek: mt8192: fix AFE clock error handling (git-fixes).\n- ASoC: mediatek: mt8192: fix APLL mux error handling (git-fixes).\n- ASoC: mediatek: mt8192: fix error handling in APLL enable functions (git-fixes).\n- ASoC: mediatek: mt8192: fix MCK clock error handling (git-fixes).\n- ASoC: mediatek: mt8192: Handle regcache_sync() failure in runtime resume (git-fixes).\n- ASoC: mediatek: mt8192: Propagate errors in I2S DAI DAPM event handlers (git-fixes).\n- ASoC: mediatek: mt8192: Propagate errors in TDM DAI DAPM event handlers (git-fixes).\n- ASoC: mediatek: mt8192: Propagate mt8192_afe_gpio_request() errors in ADDA DAI (git-fixes).\n- ASoC: mediatek: mt8192: switch to devm_clk_get_optional() (git-fixes).\n- ASoC: mediatek: mt8195: Check paired MEMIF clock enable in FE trigger (git-fixes).\n- ASoC: mediatek: mt8195: Fix ETDM MCLK error handling (git-fixes).\n- ASoC: mediatek: mt8195: Fix ETDM probe error handling (git-fixes).\n- ASoC: mediatek: mt8195: Fix ETDM startup error handling (git-fixes).\n- ASoC: mediatek: mt8195: Fix FE startup error handling (git-fixes).\n- ASoC: mediatek: mt8195: Fix HDMI TX startup error handling (git-fixes).\n- ASoC: mediatek: mt8195: Fix main clock error handling (git-fixes).\n- ASoC: mediatek: mt8195: Fix paired memif clock error handling (git-fixes).\n- ASoC: mediatek: mt8195: Fix register access clock error handling (git-fixes).\n- ASoC: mediatek: mt8195: Fix runtime resume error handling (git-fixes).\n- ASoC: mediatek: mt8195: Fix timing system clock error handling (git-fixes).\n- ASoC: mediatek: mt8195: Fix tuner clock error handling (git-fixes).\n- ASoC: mediatek: mt8195: Propagate IRQ lookup errors (git-fixes).\n- ASoC: mt6359-accdet: manage private workqueues with devres (git-fixes).\n- ASoC: nau8540: return cache sync errors from resume (git-fixes).\n- ASoC: ops: Fix return value in snd_soc_limit_volume() (git-fixes).\n- ASoC: qcom: q6apm: clear g_apm on driver removal (git-fixes).\n- ASoC: qcom: q6apm: reset the hw pointer with the fragment queue (git-fixes).\n- ASoC: rockchip: rockchip_i2s: Handle runtime PM resume failures in set_fmt (git-fixes).\n- ASoC: rt711-sdca: always cancel jack work on remove (git-fixes).\n- ASoC: rt711-sdw: always cancel jack work on remove (git-fixes).\n- ASoC: rt712-sdca-dmic: fix drvdata type in the gain controls (git-fixes).\n- ASoC: rt712-sdca: always cancel jack work on remove (git-fixes).\n- ASoC: rt722-sdca: always cancel jack work on remove (git-fixes).\n- ASoC: rt1011: return cache sync errors from resume (git-fixes).\n- ASoC: rt1016: return cache sync errors from resume (git-fixes).\n- ASoC: rt1305: return cache sync errors from resume (git-fixes).\n- ASoC: rt1308: return cache sync errors from resume (git-fixes).\n- ASoC: rt5616: return cache sync errors from resume (git-fixes).\n- ASoC: rt5659: return cache sync errors from resume (git-fixes).\n- ASoC: rt5660: return cache sync errors from resume (git-fixes).\n- ASoC: rt5665: return cache sync errors from resume (git-fixes).\n- ASoC: rt5682-sdw: always cancel jack work on remove (git-fixes).\n- ASoC: soc-ac97: Fix error handling in snd_soc_new_ac97_component() (git-fixes).\n- ASoC: soc-component: Fix return type of snd_soc_pcm_component_pointer() (git-fixes).\n- ASoC: soc-topology-test: Check return value of kunit_device_register() (git-fixes).\n- ASoC: SOF: amd: fix amd_sof_acp_remove() teardown ordering (git-fixes).\n- ASoC: SOF: imx: Prevent stack OOB read in DSP panic dump (git-fixes).\n- ASoC: ti: davinci-mcasp: Fix runtime PM imbalance in __davinci_mcasp_set_clkdiv() (git-fixes).\n- ASoC: wcd9335: Fix device reference leak in wcd9335_slim_status() (git-fixes).\n- ASoC: wcd-mbhc-v2: Fix incorrect properties names and typos (git-fixes).\n- ASoC: wm8994: Fix runtime PM imbalance in wm8994_component_probe() (git-fixes).\n- asymmetric_keys: reject trust keys without IDs (git-fixes).\n- ata: libata-scsi: abort multi-sector pass-through commands when multi_count is 0 (git-fixes).\n- ata: libata-scsi: Fix ata_scsi_hotplug() reference in kernel-doc (git-fixes).\n- ata: pata_parport: fix parport attach idr_alloc for (git-fixes).\n- ata: pata_parport: Fix use-after-free in new_device_store (git-fixes).\n- ata: sata_fsl: Fix use-after-free of host_priv on probe() failure (git-fixes).\n- backlight: lm3630a: Cancel delayed work before destroying workqueue (git-fixes).\n- backlight: qcom-wled: Fix NULL pointer dereference in wled_remove() (git-fixes).\n- backlight: qcom-wled: Fix unbalanced OVP IRQ enable at probe (git-fixes).\n- backlight: qcom-wled: Fix WLED3 brightness register stride (git-fixes).\n- Bluetooth: 6lowpan: Drain RCU readers on registration failure (git-fixes).\n- Bluetooth: 6lowpan: Pin module for 6lowpan_control debugfs file (git-fixes).\n- Bluetooth: 6LoWPAN: Use RCU-safe device list removal (git-fixes).\n- Bluetooth: Add missing newline to bt_dev_{err,warn}_ratelimited() (git-fixes).\n- Bluetooth: btintel: fix buffer over-read in btintel_hw_error() (git-fixes).\n- Bluetooth: btintel: validate DDC record lengths (git-fixes).\n- Bluetooth: btmtk: fix skb double free on ISO padding failure (git-fixes).\n- Bluetooth: btqcomsmd: Convert to platform remove callback returning void (stable-fixes).\n- Bluetooth: btqcomsmd: destroy RPMsg endpoints before freeing hci_dev (git-fixes).\n- Bluetooth: btusb: Add IMC Networks QCA9377 to quirks table (stable-fixes).\n- Bluetooth: hci_conn: Lock parent access during enhanced SCO setup (git-fixes).\n- Bluetooth: hci_core: free the HCI ID if naming fails (git-fixes).\n- Bluetooth: hci_core: Keep RCU protection through LTK filtering (git-fixes).\n- Bluetooth: hci_debugfs: Pin module for debugfs file operations (git-fixes).\n- Bluetooth: hci_sync: don't drain cmd_sync backlog on unregister (git-fixes).\n- Bluetooth: hci_sync: Fix inquiry cache use-after-free (git-fixes).\n- Bluetooth: hci_sync: fix mesh adv timeout units (git-fixes).\n- Bluetooth: hci_sync: Protect IRK identity reads with RCU (git-fixes).\n- Bluetooth: hci_sync: Serialize devcoredump reset during device open (git-fixes).\n- Bluetooth: hci_vhci: Pin module for debugfs file operations (git-fixes).\n- Bluetooth: ISO: Hold the listener during disconnect notification (git-fixes).\n- Bluetooth: L2CAP: hold chan in l2cap_ecred_conn_rsp() (git-fixes).\n- Bluetooth: L2CAP: hold l2cap_conn::lock in l2cap_connect_cfm() (git-fixes).\n- Bluetooth: L2CAP: refuse __l2cap_chan_add if chan already has conn (git-fixes).\n- Bluetooth: L2CAP: Reject invalid TxWindow in configuration requests (git-fixes).\n- Bluetooth: L2CAP: Reject mode changes on connected channels (git-fixes).\n- Bluetooth: L2CAP: Use default TxWindow for zero socket option (git-fixes).\n- Bluetooth: MGMT: Fix leaking instance on Add Extended Advertising Parameters (git-fixes).\n- Bluetooth: MGMT: Fix pending state of instances added without HCI traffic (git-fixes).\n- Bluetooth: MGMT: Reject quality report requests during unregister (git-fixes).\n- Bluetooth: msft: Lock failed probe cleanup against feature readers (git-fixes).\n- Bluetooth: MSFT: Serialize handle map cleanup with event processing (git-fixes).\n- Bluetooth: RFCOMM: Fix initial port reference race (git-fixes).\n- Bluetooth: selftest: Pin module for selftest debugfs file operations (git-fixes).\n- bus: arm-cci: Drop cci-control-port node reference in __cci_ace_get_port() (git-fixes).\n- bus: arm-cci: Drop CPU node reference in cci_ace_init_ports() (git-fixes).\n- bus: fsl-mc: register the object drivers after misc_class exists (git-fixes).\n- char: scx200_gpio: check cdev_add() return value (git-fixes).\n- comedi: comedi_parport: validate the IRQ supplied by userspace (git-fixes).\n- comedi: dmm32at: validate the IRQ supplied by userspace (git-fixes).\n- comedi: dt2811: fix shift-out-of-bounds in IRQ check (git-fixes).\n- comedi: dt2814: validate the IRQ supplied by userspace (git-fixes).\n- comedi: ni_atmio16d: validate the IRQ supplied by userspace (git-fixes).\n- comedi: pcmmio: validate the IRQ supplied by userspace (git-fixes).\n- comedi: pcmuio: validate the IRQs supplied by userspace (git-fixes).\n- crypto: amlogic - Fix DMA memory leak in cipher error path (git-fixes).\n- crypto: amlogic - Fix IRQ handler return value and fallthrough logic (git-fixes).\n- crypto: asymmetric_keys - fix OOB read in pefile_parse_binary (git-fixes).\n- crypto: atmel - handle authenc requests without plaintext (git-fixes).\n- crypto: atmel-aes - fix AADLENR for standalone GHASH (git-fixes).\n- crypto: atmel-sha - reject initialization without a device (git-fixes).\n- crypto: atmel-tdes - sync output bounce buffer before DMA (git-fixes).\n- crypto: atmel-tdes - zero-initialize device state (git-fixes).\n- crypto: caam - fix double-free in caam_rsa_set_priv_key_form() (git-fixes).\n- crypto: ccp - kill v3 IRQ tasklet during teardown (git-fixes).\n- crypto: ccp - kill v5 IRQ tasklet during teardown (git-fixes).\n- crypto: hisilicon/hpre - fix ECDH destination DMA mapping (git-fixes).\n- crypto: hisilicon/hpre - fix GFP flags for dma_alloc_coherent (git-fixes).\n- crypto: hisilicon/hpre - fix pointer dereference before length check (git-fixes).\n- crypto: hisilicon/hpre - remove dma_free_coherent on NULL req-\u003edst in ECDH (git-fixes).\n- crypto: hisilicon/hpre - return -EOVERFLOW for small ECDH output buffer (git-fixes).\n- crypto: qat - avoid OOB read when stripping RSA leading zeros (git-fixes).\n- crypto: qat - fix active_devs leak on crypto alg registration failure (git-fixes).\n- crypto: qat - fix use of destroyed vf2pf_lock on VF restart (git-fixes).\n- crypto: qat - initialise state_lock on every path in adf_devmgr_add_dev() (git-fixes).\n- crypto: qat - release instance on DH fallback allocation failure (git-fixes).\n- crypto: qat - zero the VF migration state buffer on save (git-fixes).\n- crypto: tcrypt - Avoid reading req-\u003ebase after submission (git-fixes).\n- Documentation: rs485: Pull uart_get_rs485_mode() from serial_core.c (git-fixes).\n- Documentation: virt: Fix the struct snp_guest_request_ioctl name in sev-guest.rst (git-fixes).\n- drivers/base/node: fix UAF on device_register() failure (git-fixes).\n- Drivers: hv: vmbus: add VTL2 redirect connection ID (git-fixes).\n- drm/amd/display: assign missing trace entry in amdgpu_dm_dc_clocks_state (git-fixes).\n- drm/amd/display: disable replay when crc source is enabled (stable-fixes).\n- drm/amd/display: Fix direct scanout alpha on some DRM_FORMATs (stable-fixes).\n- drm/amd/display: fix vready offset assignment in dcn_optc_lock_unlock_state (git-fixes).\n- drm/amd/display: Force GAMCOR for subsampled surfaces with PQ/Gamma22/HLG (git-fixes).\n- drm/amd/display: remove duplicated prev_p_state_change_support assignment (git-fixes).\n- drm/amd/display: Use kcalloc() instead of kzalloc() (stable-fixes).\n- drm/amd/display: use right type for amdgpu_dc_performance event entries (git-fixes).\n- drm/amd/pm: bound SCLK FCW range entries to the table size (git-fixes).\n- drm/amdgpu/atombios: drop empty function (stable-fixes).\n- drm/amdgpu/gfx6: fix firmware leak on teardown (stable-fixes).\n- drm/amdgpu: Check for multiplication overflow in checkpoint stack (bsc#1276280).\n- drm/amdgpu: make Mac FB workaround generic (stable-fixes).\n- drm/amdgpu: Remove unused amdgpu_i2c functions (stable-fixes).\n- drm/amdgpu: reset VI ASIC on MacBookPro14,3 (stable-fixes).\n- drm/amdgpu: reset VI ASIC on MacBookPro15,1 (stable-fixes).\n- drm/amdgpu: rework i2c init and fini (stable-fixes).\n- drm/amdgpu: serialize vblank counter reads against GPU reset (stable-fixes).\n- drm/amdgpu: Update SRIOV Exchange Headers for RAS Telemetry Support (stable-fixes).\n- drm/amdgpu: Use dbg level for VBIOS check messages (stable-fixes).\n- drm/amdkfd: Fix checkpoint-restore on multi-xcc (bsc#1276280).\n- drm/amdkfd: Fix partial migrate issue (stable-fixes).\n- drm/bridge: analogix_dp: Restore mandatory samsung DP DT properties (git-fixes).\n- drm/exynos/fimd: fix register offset type in fimd_trigger() (git-fixes).\n- drm/i915/display: convert I915_STATE_WARN() to struct intel_display (stable-fixes).\n- drm/i915/gmbus: convert to struct intel_display (stable-fixes).\n- drm/i915/vga: Convert VGA code to intel_display (stable-fixes).\n- drm/i915: document range_overflows() and range_end_overflows() macros (stable-fixes).\n- drm/i915: rename range_overflows_end() to range_end_overflows() (stable-fixes).\n- drm/imx/lcdc: avoid duplicate clk_per enable (git-fixes).\n- drm/komeda: Fix bits parsing of GLB_CORE_ID (git-fixes).\n- drm/mali-dp: Fix runtime PM leak in malidp_crtc_atomic_enable() (git-fixes).\n- drm/msm/a6xx: Fix secondary rail vote in ARC votes (git-fixes).\n- drm/msm/a6xx: fix use-after-free of OPP in a6xx_pm_resume (git-fixes).\n- drm/msm/dp: don't report link training success after a reinit (git-fixes).\n- drm/msm/dpu: disable the slave encoder before the master (git-fixes).\n- drm/msm/hdmi_phy: Cleanup after msm_hdmi_phy_resource_enable() failure (git-fixes).\n- drm/msm/mdp5: drop cursor pipe for msm8x76 (git-fixes).\n- drm/msm: Properly handle msm_ioremap() without name (git-fixes).\n- drm/nouveau/svm: drain fault handler before freeing svmm (git-fixes).\n- drm/nouveau: cancel the DP IRQ work before freeing the connector (git-fixes).\n- drm/nouveau: disable the fence uevent work instead of just cancelling it (git-fixes).\n- drm/nouveau: don't dereference outp before checking it in nouveau_dp_irq (git-fixes).\n- drm/nouveau: reject zero-size notifier object allocation (git-fixes).\n- drm/omap: dsi: avoid sending bta sync all the time in writes (git-fixes).\n- drm/panel: ebbg-ft8719: Set prepare_prev_first (git-fixes).\n- drm/panfrost: Explicitly enable MMU interrupts at device init (git-fixes).\n- drm/panfrost: Prevent division by 0 (git-fixes).\n- drm/panthor: Fix TOCTOU race between GROUP_REGISTERED check and erase (git-fixes).\n- drm/panthor: Take reqs_lock in soft_reset for clearing pending_reqs (git-fixes).\n- drm/tegra: Don't pass an ERR_PTR to drm_syncobj_replace_fence() (git-fixes).\n- drm/tegra: Drop reference on postfence (git-fixes).\n- drm/tegra: Fix syncobj_in wait return value check (git-fixes).\n- drm/ttm: return an error when kmapping a BO without pages (git-fixes).\n- drm/vc4: Fix firmware reference leak in vc4_drm_bind() (git-fixes).\n- drm/vc4: Use video aperture helpers (stable-fixes).\n- drm/virtio: Add a helper to map and note the dma addrs and lengths (stable-fixes).\n- drm/virtio: Use drm_gem_plane_helper_prepare_fb() (stable-fixes).\n- drm/vmwgfx: Stop using dev_private to store driver data (stable-fixes).\n- drm: of: Fix drm_of_get_data_lanes_count_ep() return value documentation (git-fixes).\n- fbdev: atmel_lcdfb: Prevent FIFO work after removal (git-fixes).\n- fbdev: gxt4500: Release WC setup on probe failure (git-fixes).\n- fbdev: sh_mobile_lcdc: check for fb_deferred_io_init() error (git-fixes).\n- fbdev: smscufx: check for fb_deferred_io_init() error (git-fixes).\n- fbdev: ssd1307fb: check for fb_deferred_io_init() error (git-fixes).\n- fbdev: udlfb: check for fb_deferred_io_init() error (git-fixes).\n- fbdev: udlfb: don't rebuild the mode list while the framebuffer is in use (git-fixes).\n- fbdev: xen-fbfront: check for fb_deferred_io_init() error (git-fixes).\n- firewire: cdev: Fix FW_CDEV_IOC_CREATE_ISO_CONTEXT references in kernel-doc (git-fixes).\n- firmware: cs_dsp: clear dsp-\u003erunning on the cs_dsp_run() error path (git-fixes).\n- firmware: imx: dsp: fix mailbox channel leak on kasprintf failure (git-fixes).\n- fpga: Fix of_fpga_mgr_get() reference in fpga_mgr_lock() docs (git-fixes).\n- gpio: crystalcove: add missing MODULE_ALIAS() (git-fixes).\n- gpio: davinci: Clear interrupt status in every bank on suspend (git-fixes).\n- gpio: pca953x: Preserve wakeup accounting on parent IRQ failure (git-fixes).\n- HID: alps: unregister DualPoint Stick input device on remove (git-fixes).\n- HID: amd_sfh: Remove unsupported motion-state field from accelerometer report (git-fixes).\n- HID: amd_sfh: Use report type from request node (git-fixes).\n- HID: core: Add reserved item tag for main items (stable-fixes).\n- HID: core: Fix out-of-bounds left shift by 32 in s32ton() (git-fixes).\n- HID: cougar: reject short special-key reports (git-fixes).\n- HID: cp2112: validate response report lengths (git-fixes).\n- HID: elo: reject short touchscreen reports (git-fixes).\n- HID: hid-alps: Use pm_ptr instead of #ifdef CONFIG_PM (stable-fixes).\n- HID: hid-steam: Make client_opened a counter (stable-fixes).\n- HID: logitech-dj: validate unnumbered keyboard reports (git-fixes).\n- HID: mcp2221: clear rxbuf after I2C/SMBus transfer completes (git-fixes).\n- HID: mcp2221: fix OOB write in mcp2221_raw_event() (stable-fixes).\n- HID: mcp2221: validate response report length (git-fixes).\n- HID: picoLCD: check for fb_deferred_io_init() error (git-fixes).\n- HID: pxrc: reject short input reports (git-fixes).\n- HID: rate-limit hid_warn to prevent log flooding (stable-fixes).\n- HID: roccat: isku: reject short button reports (git-fixes).\n- HID: roccat: koneplus: reject short button reports (git-fixes).\n- HID: roccat: konepure: reject short button reports (git-fixes).\n- HID: roccat: kovaplus: reject short button reports (git-fixes).\n- HID: roccat: pyra: reject short button reports (git-fixes).\n- HID: roccat: ryos: reject short special reports (git-fixes).\n- HID: roccat: savu: reject short special reports (git-fixes).\n- HID: wacom: fix wacom_intuos_irq NULL pen_input deref (git-fixes).\n- HID: zydacron: validate key report length (git-fixes).\n- hostfs: fix dev_t handling (git-fixes).\n- hwmon: (coretemp) Refresh the temperature on the first read (git-fixes).\n- hwmon: (corsair-cpro) Make wait_input_report_lock IRQ safe (git-fixes).\n- hwmon: (lm70) Fix rounding of negative temperatures (git-fixes).\n- hwmon: (lm95245) Fix negative temperature conversion (git-fixes).\n- hwmon: (sht3x) Return the consumed count for heater writes (git-fixes).\n- hwrng: amd - report partial reads in non-blocking mode (git-fixes).\n- hwrng: ba431 - fix reported byte count (git-fixes).\n- hwrng: cctrng - Fix runtime PM usage counter leak (git-fixes).\n- hwrng: core - reject unknown RNG names (git-fixes).\n- hwrng: intel - return -ENOMEM when ioremap() fails (git-fixes).\n- hwrng: intel - return -ENOMEM when kmalloc_obj() fails (git-fixes).\n- hwrng: starfive - propagate clock and reset errors (git-fixes).\n- i2c: acpi: Fix adapter reference leak in i2c_acpi_new_device_by_fwnode() (git-fixes).\n- i2c: at91: release DMA channels when probe defers (git-fixes).\n- i2c: designware: queue only one read command for block reads (git-fixes).\n- i2c: mt7621: fix copying uninitialized kernel stack with reduced page_len (git-fixes).\n- i2c: xiic: don't clobber msg-\u003elen to signal block-read completion (git-fixes).\n- i2c: xiic: Relocate xiic_i2c_runtime_suspend and xiic_i2c_runtime_resume to facilitate atomic mode (stable-fixes).\n- iio: accel: adis16201: fix channel order for buffer mode (git-fixes).\n- iio: accel: kionix-kx022a: Fix IPOL macro name (git-fixes).\n- iio: accel: kxcjk-1013: Disable autosuspend on remove (git-fixes).\n- iio: accel: mma9551: disable autosuspend on remove (git-fixes).\n- iio: accel: mma9553: disable autosuspend on remove (git-fixes).\n- iio: adc: aspeed: propagate reset deassert errors (git-fixes).\n- iio: adc: aspeed: Simplify with dev_err_probe (stable-fixes).\n- iio: adc: at91-sama5d2: disable autosuspend on remove (git-fixes).\n- iio: adc: stm32: fix minimum sampling time values (git-fixes).\n- iio: adc: ti-adc128s052: validate SPI match data (git-fixes).\n- iio: core: add accessors 'masklength' (stable-fixes).\n- iio: dac: ad5758: Fix alignment for DMA safety (git-fixes).\n- iio: dac: ad5758: Fix the offset calculation (git-fixes).\n- iio: dac: ad5758: Reject out-of-range raw values (git-fixes).\n- iio: humidity: hts221: report available values via read_avail() (git-fixes).\n- iio: imu: adis16400: Check return value of spi_setup() (git-fixes).\n- iio: light: ltrf216a: Return floating point values (stable-fixes).\n- iio: pressure: dps310: fix CFG_REG bit definitions (git-fixes).\n- iio: temperature: tmp117: fix calibbias cache update on I2C write failure (git-fixes).\n- Input: atkbd - skip deactivate for Lenovo IdeaPad Slim 3 15IWC11 (stable-fixes).\n- Input: da7280 - fix input device parent assignment (git-fixes).\n- Input: drv2665 - fix input device parent assignment (git-fixes).\n- Input: drv2667 - fix input device parent assignment (git-fixes).\n- Input: i8042 - add nomux quirk for Fujitsu LIFEBOOK U7410 (stable-fixes).\n- Input: lkkbd - disable pending work before freeing device (stable-fixes).\n- Input: maple_keyb - fix key press detection (git-fixes).\n- Input: maplecontrol - emit EV_SYN report after reporting events (git-fixes).\n- Input: matrix-keymap - reject keycodes above KEY_MAX (git-fixes).\n- Input: synaptics - add LEN205b entry to smbus_pnp_ids for ThinkPad T490 (stable-fixes).\n- Input: tps6507x-ts - fix input device parent assignment (git-fixes).\n- Input: xpad - add support for Corsair Novablade Pro (stable-fixes).\n- kobject: fix out-of-bounds access in kobject_action_type() (git-fixes).\n- kobject: Fix the kobj_set_name reference in kset_register() kernel-doc (git-fixes).\n- KVM: SEV: Do cache maintenance on the source VM *before* clearing SEV state (git-fixes).\n- landlock: Always allow signals between threads of the same process (git-fixes).\n- landlock: Fix cosmetic change (git-fixes).\n- landlock: Fix non-TCP sockets restriction (git-fixes).\n- landlock: Fix TCP handling of short AF_UNSPEC addresses (git-fixes).\n- landlock: Fix unmarked concurrent access to socket family (git-fixes).\n- leds: flash: Prevent using uninitialized variable in flash_fault_show() (git-fixes).\n- leds: lm3692x: Fix regulator/gpio leak and wrong enabled state on last write failure (git-fixes).\n- leds: lp8860: Fix device_node leak in lp8860_probe() (git-fixes).\n- leds: pca9532: Check i2c_smbus_read_byte_data() return value (git-fixes).\n- mac80211: tx: Use info-\u003eflags in ieee80211_tx_h_select_key() (git-fixes).\n- media: adv748x: Fix endpoint reference leaks on probe failure (git-fixes).\n- media: adv7180: Initialize mutex before ancillary clients (git-fixes).\n- media: adv7604: avoid negative array index in log_status when cp_read fails (git-fixes).\n- media: amphion: fix runtime PM imbalance on probe failure (git-fixes).\n- media: amphion: prevent unbind while video instances are open (git-fixes).\n- media: atmel-isi: release unregistered video device on remove (git-fixes).\n- media: au0828: Fix media device leak in au0828_usb_probe() (git-fixes).\n- media: au0828: fix use-after-free in bulk_timeout timer on disconnect (git-fixes).\n- media: au0828: Free URBs when starting DVB streaming fails (git-fixes).\n- media: cx18: Disable PCI device on probe failure (git-fixes).\n- media: cx88: Disable PCI device on MPEG initialization failure (git-fixes).\n- media: cx231xx-audio: drain wq_trigger before audio fini (git-fixes).\n- media: cx231xx: Fix cleanup path on failure (git-fixes).\n- media: cx23885: Fix use-after-free in cx23885_finidev due to race condition (git-fixes).\n- media: cx23885: unregister DVB bus when SP2 CI setup fails (git-fixes).\n- media: em28xx: fix double free in em28xx_alloc_urbs (git-fixes).\n- media: em28xx: reject audio endpoint with zero packet size (git-fixes).\n- media: exynos4-is: Fix a race between s_stream(0) and the interrupt handler (git-fixes).\n- media: go7007: bound EZ-USB I2C transfers to the usb_buf size (git-fixes).\n- media: go7007: unregister the I2C adapter on USB probe failure (git-fixes).\n- media: gspca: use vb2_video_unregister_device() on disconnect (git-fixes).\n- media: hackrf: fix use-after-free in hackrf_alloc_urbs() error path (git-fixes).\n- media: hantro: Disable multicore support (stable-fixes).\n- media: hantro: disable runtime PM before hardware teardown (git-fixes).\n- media: hantro: Harden MPEG-2 control access against NULL (git-fixes).\n- media: i2c: ar0521: remove duplicate media entity cleanup (git-fixes).\n- media: i2c: ov5648: Fix a data race on state-\u003estreaming (git-fixes).\n- media: i2c: ov8856: fix debug message to report actual CSI-2 lane count (git-fixes).\n- media: i2c: tc358743: add missing color-space strings (git-fixes).\n- media: imon: fix use-after-free in display_close via dev_dbg (git-fixes).\n- media: imx-jpeg: cancel timeout worker when streaming stops (git-fixes).\n- media: imx-jpeg: finish the job on device_run() error paths (git-fixes).\n- media: ir-hix5hd2: Ensure rdev is setup before interrupts are enabled (git-fixes).\n- media: ir_toy: Validate the maximum tx carrier (git-fixes).\n- media: m2m-deinterlace: fix default capture field (git-fixes).\n- media: marvell-cam: fix unmet dependency for VIDEO_MMP_CAMERA (git-fixes).\n- media: marvell: manage the MMP camera clock provider (git-fixes).\n- media: mediatek: jpeg: Avoid context access after job finish (git-fixes).\n- media: mediatek: jpeg: retry HW selection after successful wait (git-fixes).\n- media: mediatek: vpu: free IRQ before destroying watchdog workqueue (git-fixes).\n- media: mediatek: vpu: release reserved memory on remove (git-fixes).\n- media: meson-ir-tx: Ensure clock is disabled on unbind (git-fixes).\n- media: meson-ir-tx: Ensure probe error is propagated (git-fixes).\n- media: meson-ir-tx: Prevent divide by zero in meson_irtx_prepare_pulse() (git-fixes).\n- media: meson: vdec: size capture planes from the aligned canvas (git-fixes).\n- media: microchip-csi2dc: fix async notifier leak on probe error path (git-fixes).\n- media: microchip-isc: disable histogram and flush AWB work on teardown (git-fixes).\n- media: microchip-isc: do not touch WB registers when not streaming (git-fixes).\n- media: microchip-isc: fix PM runtime leak in AWB work handler (git-fixes).\n- media: microchip-isc: synchronize the IRQ before disabling clocks on stop (git-fixes).\n- media: mtk-jpeg: Fix runtime PM leak in mtk_jpegdec_worker() (git-fixes).\n- media: mtk-jpeg: Fix runtime PM leak in mtk_jpegenc_worker() (git-fixes).\n- media: platform: mtk-mdp3: Fix device reference leak in mdp_comp_init() (git-fixes).\n- media: pvrusb2: Fix USB parent device leak in class_dev_create() (git-fixes).\n- media: rc: fintek-cir: process a full RX buffer instead of overflowing it (git-fixes).\n- media: rc: mce_kbd: Fix inconsistent locking of keylock (git-fixes).\n- media: redrat3: Ensure all urbs are suspended (git-fixes).\n- media: redrat3: Ensure we don't read beyond the end of the packet (git-fixes).\n- media: redrat3: fix UAF in probe error path leaving rc device registered (git-fixes).\n- media: require two-byte Cypress type 04 records (git-fixes).\n- media: rtl28xxu: fix SDR platform device leak (git-fixes).\n- media: saa7146: Initialize interrupt lock before requesting IRQ (git-fixes).\n- media: streamzap: Add missing rc_unregister_device() (git-fixes).\n- media: stv090x: bound DiSEqC reply length to msg size (git-fixes).\n- media: stv0900: bound DiSEqC reply length to msg size (git-fixes).\n- media: tw68: balance PCI enable on cleanup (git-fixes).\n- media: tw686x: fix V4L2 device lifetime on probe failure (git-fixes).\n- media: uvcvideo: Fix NULL deref on events for uninitialized controls (git-fixes).\n- media: v4l2-common: Fix P010 format info (git-fixes).\n- media: v4l2-ctrls: do nothing if controls == NULL in cluster functions (git-fixes).\n- media: venus: Drop session events without an instance (git-fixes).\n- media: verisilicon: rockchip: Fix leaks in init (git-fixes).\n- media: vicodec: fix NULL deref on oversized frame (git-fixes).\n- media: vicodec: fix out-of-bounds write on under-rounded coded dimensions (git-fixes).\n- media: vicodec: make encoder CAPTURE dimensions read-only (git-fixes).\n- media: vicodec: zero-initialize stateful decoder heap buffers (git-fixes).\n- media: vidtv: fix frontend reference leak on unbind (git-fixes).\n- media: vidtv: fix uaf in vidtv_bridge_on_new_pkts_avail (git-fixes).\n- media: vim2m: keep transaction buffer count stable while streaming (git-fixes).\n- media: vivid: round the height down to the vertical subsampling factor (git-fixes).\n- media: vpif_display: Fix i2c adapter reference leak in vpif_probe() (git-fixes).\n- mei: vsc-tp: initialize IRQ state before requesting interrupt (git-fixes).\n- mei: vsc: Fix packet CRC computed over pointer size (git-fixes).\n- mfd: ab8500: Fix child device leaks on probe failure (git-fixes).\n- mfd: da9150: Balance IRQ wake on teardown (git-fixes).\n- mfd: intel_quark_i2c_gpio: Manage the fixed-rate clock (git-fixes).\n- mfd: tps65217: Check return value when masking interrupt sources (git-fixes).\n- mfd: tps65217: Fix NULL pointer dereference on IRQ init failure (git-fixes).\n- mfd: wcd934x: Fix NULL pointer dereference on IRQ probe deferral (git-fixes).\n- mfd: wcd934x: set DMA mask on parent to silence 'DMA mask not set' (git-fixes).\n- misc: enclosure: fix UAF on device_register() failure (git-fixes).\n- mm, vmscan: flush tlb before large folio is freed (bsc#1250656).\n- mm: introduce num_pages_contiguous() (bsc#1284243).\n- mtd: amd76xrom: Fix PCI device reference leak in amd76xrom_init_one() (git-fixes).\n- mtd: block: prevent reclaim I/O during request processing (git-fixes).\n- mtd: Call get_wunit() on the master partition (git-fixes).\n- mtd: cfi_cmdset_0002: cap the write-buffer chunk at 256 bytes on an x8 device (git-fixes).\n- mtd: maps: l440gx: Fix double put of the ISA bridge in init_l440gx() (git-fixes).\n- mtd: maps: l440gx: Fix double put of the PM device in init_l440gx() (git-fixes).\n- mtd: maps: pci: balance PCI enable on cleanup (git-fixes).\n- mtd: parsers: qcom: fix offset/size overflow on large partitions (git-fixes).\n- mtd: rawnand: atmel: Fix MCK clock leak in atmel_nand_controller_init() (git-fixes).\n- mtd: rawnand: pl353: fix clk reference leak in pl35x_nfc_setup_interface() (git-fixes).\n- mtd: rawnand: sunxi: reject ECC maximization on small pages (git-fixes).\n- mtd: spi-nor: sfdp: check the length of the SCCR map (git-fixes).\n- mtd: spi-nor: sfdp: check the length of the xSPI Profile 1.0 table (git-fixes).\n- mtd: spi-nor: Unprepare legacy controllers upon RWW wait interruption (git-fixes).\n- mtd: spinand: Fix spinand_manufacturer_ops kernel-doc (git-fixes).\n- net: usb: lan78xx: reject invalid EEPROM write requests (git-fixes).\n- net: usb: r8153_ecm: reject short register reads (git-fixes).\n- net: usb: sierra_net: reject short firmware attribute reads (git-fixes).\n- net: wwan: iosm: validate msg_head before indexing msg_ring (git-fixes).\n- PCI/AER: Fix memory leak in aer_recover_queue() on kfifo buffer overflow (git-fixes).\n- PCI/AER: Fix struct pci_dev reference leak in aer_process_err_devices() (git-fixes).\n- PCI/P2PDMA: Gate the host bridge whitelist warning on verbose (git-fixes).\n- PCI/P2PDMA: Safely terminate ACS redirect lists (git-fixes).\n- PCI/sysfs: Handle a malformed _DSM result in acpi_attr_is_visible() (git-fixes).\n- PCI/sysfs: Pass the device name length in UTF-16 code units (git-fixes).\n- PCI/sysfs: Stop reporting _DSM failures as -EPERM (git-fixes).\n- PCI: aardvark: Disable PHY on probe failures (git-fixes).\n- PCI: cadence: Preserve all error codes in cdns_plat_pcie_probe() (git-fixes).\n- PCI: Disable MSI for ULi M1575 EHCI controller (git-fixes).\n- PCI: dra7xx: Fix clock enable leak on probe failure (git-fixes).\n- PCI: endpoint: pci-epf-vntb: Pass PF/VF number when BAR programming (git-fixes).\n- PCI: endpoint: pci-epf-vntb: Serialize virtual PCI bus scan (git-fixes).\n- PCI: Fix out-of-bounds MMIO read in nvme_disable_and_flr() (git-fixes).\n- PCI: qcom: Honor IOMMU provider's #iommu-cells in qcom_pcie_config_sid_1_9_0() (git-fixes).\n- PCI: rockchip-host: Do not attempt 5.0 GT/s retraining (git-fixes).\n- PCI: xgene: Use managed clock for PCIe controller (git-fixes).\n- peci: aspeed: Initialize state before requesting IRQ (git-fixes).\n- phy: core: Fix race-condition between _of_phy_get() and try_module_get() (git-fixes).\n- pinctrl: mediatek: mt7629: fix the 2.4 GHz Wi-Fi pin mode array (git-fixes).\n- pinctrl: sprd: free maps on DT map failure (git-fixes).\n- pinctrl: stm32: Fix fwnode reference leak in stm32_gpiolib_register_bank() (git-fixes).\n- platform/chrome: cros_ec_proto: Fix deferred response (git-fixes).\n- power: supply: charger-manager: Convert to platform remove callback returning void (stable-fixes).\n- power: supply: lp8788-charger: Convert to platform remove callback returning void (stable-fixes).\n- power: supply: lp8788-charger: fix use-after-free on remove (git-fixes).\n- power: supply: lp8788: Use devm_power_supply_register() helper (stable-fixes).\n- pwm: mtk-disp: Fix period readback (git-fixes).\n- RDMA/core: Add rdma_restrack_begin/abort/commit_del() operations (git-fixes).\n- regulator: ab8500: Fix AB8505 VANA voltage selectors (git-fixes).\n- regulator: ab8500: Handle AB8505 VINTCORE selector 7 (git-fixes).\n- regulator: ab8500: Propagate mode enable read errors (git-fixes).\n- regulator: ab8500: Test dedicated enable bits only (git-fixes).\n- regulator: ab8500: Treat cut 1.0 VAUX3 as fixed (git-fixes).\n- regulator: core: Fix c_rdev reference leak in regulator_resolve_coupling() (git-fixes).\n- regulator: core: Fix coupled regulators reference leak on removal (git-fixes).\n- regulator: core: Fix rdev reference leak in regulator_resolve_supply() (git-fixes).\n- regulator: mp886x: check get_voltage_sel() return value (git-fixes).\n- regulator: mp886x: fix pontential division by zero (git-fixes).\n- regulator: mp886x: fix vsel_mask (git-fixes).\n- regulator: rt6190: Fix runtime PM imbalance in rt6190_out_enable() (git-fixes).\n- Reinstate 'resource: avoid unnecessary lookups in find_next_iomem_res()' (bsc#1284243).\n- Revert 'wifi: mac80211: do not use old MBSSID elements' (git-fixes).\n- rtc: ac100: Assign .num before accessing .hws (git-fixes).\n- rtc: dev: zero-initialize struct rtc_wkalrm to prevent information leak (git-fixes).\n- rtc: mpfs: fix unchecked devm_clk_get() error pointer in probe() (git-fixes).\n- rtc: spear: initialize IRQ state before requesting alarm IRQ (git-fixes).\n- selftests/alsa: Do not take another control's event as our own (git-fixes).\n- selftests/landlock: Add a new test for setuid() (git-fixes).\n- selftests/landlock: Fix build with non-default pthread linking (git-fixes).\n- selftests/landlock: Fix screwed up pointers in the scoped_signal_test (git-fixes).\n- selftests/landlock: Skip scoped_signal subtest with MSG_OOB if not available (git-fixes).\n- selftests/landlock: Split signal_scoping_threads tests (git-fixes).\n- serial: 8250_lpss: do not touch uninitialized line in ehl_serial_exit() (git-fixes).\n- serial: core: shut down initialized port on removal (git-fixes).\n- serial: max310x: don't clobber the TX break bit in set_termios (git-fixes).\n- serial: pmac_zilog: push received data to the port that received it (git-fixes).\n- serial: pmac_zilog: report received breaks (git-fixes).\n- slimbus: messaging: fix leaked PM vote on tid allocation failure (git-fixes).\n- soc/tegra: flowctrl: Release OF node reference on error (git-fixes).\n- soc: fsl: cpm1: tsa: Fix clock leak in tsa_of_parse_tdms() (git-fixes).\n- soc: fsl: dpio: Fix cleanup on IRQ registration failure (git-fixes).\n- soc: fsl: dpio: Free the IRQ before releasing the I/O object (git-fixes).\n- soc: qcom: apr: clean up failed service registrations (git-fixes).\n- soc: ti: k3-ringacc: Correct ring API kernel-doc (git-fixes).\n- soc: ti: k3-ringacc: Fix DMA ring initialization kernel-doc (git-fixes).\n- spi: amd: fix len==0 underflow and FIFO overflow (git-fixes).\n- spi: bcm63xx-hsspi: Disable runtime PM on remove (git-fixes).\n- spi: Fix the return value in spi_new_ancillary_device() kernel-doc (git-fixes).\n- spi: jcore: fix divide-by-zero when speed_hz is zero (git-fixes).\n- spi: mtk-nor: fix runtime PM usage count leak in probe error path (git-fixes).\n- spi: mxic: fix ps_clk leak in runtime resume (git-fixes).\n- spi: npcm-fiu: limit UMA data_size to the 16-byte staging buffer (git-fixes).\n- spi: omap2-mcspi: Remove unbalanced pm_runtime_put_sync() calls (git-fixes).\n- spi: spi-sun4i: sun4i_spi_fill_fifo(): always apply A10 FIFO fill level workaround (git-fixes).\n- spi: spi-sun4i: sun4i_spi_transfer_one(): fix transfers for SUN4I_FIFO_DEPTH (git-fixes).\n- staging: iio: adc: ad7816: Fix DMA safety issues in SPI transfers (git-fixes).\n- staging: media: av7110: fix corrupted BER reporting in sp8870 (git-fixes).\n- staging: media: imx: csc-scaler: fix ipu_image_convert_run leak on queue error (git-fixes).\n- staging: rtl8723bs: clean up redundant \u0026 parentheses (stable-fixes).\n- Staging: rtl8723bs: Delete dead code from update_current_network() (stable-fixes).\n- staging: rtl8723bs: fix buffer over-read in rtw_update_protection (git-fixes).\n- staging: rtl8723bs: fix RX buffer OOB write from device-reported length (git-fixes).\n- Staging: rtl8723bs: Remove dead code from _rtw_free_network() (stable-fixes).\n- staging: sm750fb: free cmap on framebuffer release (git-fixes).\n- thermal/drivers/sprd: validate the sensor id from the device tree (git-fixes).\n- thermal: intel: int340x: Fix temperature selection around 0 C (git-fixes).\n- thermal: intel: powerclamp: Reject invalid window_size values (git-fixes).\n- thermal: ti-soc-thermal: Fix the return value in ti_bandgap_get_sensor_data() kernel-doc (git-fixes).\n- thunderbolt: Disable CL states for the Anker Prime TB5 dock (stable-fixes).\n- thunderbolt: Do not RPM complete unrelated subtrees on unplug (git-fixes).\n- tools/thermal/tmon: Fix string truncation warning in optarg copy (git-fixes).\n- tpm: fix zero-length read discarding the pending response (git-fixes).\n- tpm: tpm_nsc: fix NULL pointer dereference on init failure (git-fixes).\n- tpm: tpm_nsc: stop using the cleanup callback as dev.release (git-fixes).\n- tty: add break_wait kernel-doc (git-fixes).\n- tty: vcc: hold port lock when clearing tty pointer in vcc_cleanup (stable-fixes).\n- tty: vcc: zero-initialize control packet in vcc_send_ctl() (stable-fixes).\n- um: hostfs: avoid issues on inode number reuse by host (git-fixes).\n- usb-storage: alauda: check the return value of alauda_read_map() (git-fixes).\n- usb-storage: alauda: do not do DMA from the stack (git-fixes).\n- usb-storage: alauda: fix out-of-bounds zone index (git-fixes).\n- USB: cdc-acm: fix urb leak on disconnect (git-fixes).\n- usb: chipidea: udc: fix DMA and SG cleanup in _ep_nuke() (stable-fixes).\n- usb: dwc3: clear forceRM when issuing EndTransfer (git-fixes).\n- usb: dwc3: gadget: Fix use-after-free in dwc3_gadget_free_endpoints due to race condition (git-fixes).\n- usb: dwc3: gadget: Reinitiate stream for all host NoStream behavior (stable-fixes).\n- usb: fotg210: validate endpoint index in ep0 handlers (git-fixes).\n- usb: gadget: composite: avoid warning on aborted delayed status (git-fixes).\n- usb: gadget: dummy_hcd: fix SuperSpeed ep0 maxpacket (git-fixes).\n- usb: gadget: dummy_hcd: prevent unbind via sysfs (git-fixes).\n- usb: gadget: f_fs: Fix Use-After-Free in AIO error path (git-fixes).\n- usb: gadget: f_mass_storage: ignore class requests while inactive (git-fixes).\n- usb: gadget: f_midi: Annotate struct f_midi with __counted_by (stable-fixes).\n- usb: gadget: f_midi: initialize work in f_midi_alloc() (git-fixes).\n- USB: gadget: ffs: fix mm lifetime handling (stable-fixes).\n- usb: gadget: functionfs: Factorize wait-for-endpoint code (stable-fixes).\n- usb: image: microtek: stop SG processing after transfer errors (git-fixes).\n- usb: musb: da8xx: depopulate OF children on probe failure (git-fixes).\n- usb: musb: da8xx: depopulate OF children on remove (git-fixes).\n- usb: ohci-spear: disable controller wakeup on removal (git-fixes).\n- usb: ohci-spear: Remove unnecessary NULL check before clk_disable_unprepare() (stable-fixes).\n- USB: pci-quirks: Release EHCI device reference (git-fixes).\n- USB: serial: cp210x: add Corsair AX1500i Power Supply (stable-fixes).\n- USB: serial: option: add Compal EXC-T1 support (stable-fixes).\n- USB: serial: option: add Compal EXM-G1x support (stable-fixes).\n- USB: serial: option: add Quectel EG060W (stable-fixes).\n- USB: serial: option: add Quectel RG660QB (stable-fixes).\n- USB: serial: option: add support for SIMCom SIM8260C (stable-fixes).\n- USB: serial: sierra: fix urb leak on write completion (git-fixes).\n- USB: serial: usb_wwan: fix urb leak on disconnect (git-fixes).\n- usb: typec: ucsi_ccg: Add retry mechanism in ccg_read (git-fixes).\n- USB: usbmon: fix null-ptr-deref in mon_bus_remove() when mon_bus_init() fails (git-fixes).\n- usbnet: fix smp_processor_id() use in preemptible context (git-fixes).\n- vfio/type1: batch vfio_find_vpfn() in function vfio_unpin_pages_remote() (bsc#1284243).\n- vfio/type1: conditional rescheduling while pinning (bsc#1284243).\n- vfio/type1: introduce a new member has_rsvd for struct vfio_dma (bsc#1284243).\n- vfio/type1: optimize vfio_pin_pages_remote() (bsc#1284243).\n- vfio/type1: optimize vfio_unpin_pages_remote() (bsc#1284243).\n- vt: skip screen update for DEC alignment test on backgroup consoles (git-fixes).\n- watchdog: mediatek: Apply the driver's mode to a watchdog left running (git-fixes).\n- wifi: ath6kl: don't take RTNL in del_virtual_intf (git-fixes).\n- wifi: ath9k: delete channel-context timers on deinit (git-fixes).\n- wifi: ath10k: avoid IDR mutation during TX cleanup (git-fixes).\n- wifi: ath11k: avoid IDR mutation during pending mgmt TX cleanup (git-fixes).\n- wifi: ath11k: avoid IDR mutation during vif mgmt TX cleanup (git-fixes).\n- wifi: ath11k: disable interrupts during firmware crash recovery (git-fixes).\n- wifi: ath11k: fix locking problem in ath11k_dp_rx_tid_del_func() (git-fixes).\n- wifi: ath11k: fix NULL dereference in ahb remove when QMI init incomplete (git-fixes).\n- wifi: ath11k: Fix possible memory leak in ath11k_dp_srng_setup() (git-fixes).\n- wifi: ath11k: fix sporadic WLAN initialization failures (git-fixes).\n- wifi: ath11k: fix unbalanced IRQ enable/disable during suspend/resume (git-fixes).\n- wifi: ath11k: modify null check logic in ath11k_ce_rx_post_pipe() (git-fixes).\n- wifi: ath11k: reset ar-\u003enum_stations on hardware start (git-fixes).\n- wifi: ath11k: unregister PM notifier on QMI init failure path (git-fixes).\n- wifi: ath12k: avoid IDR mutation during vif mgmt TX cleanup (git-fixes).\n- wifi: ath12k: fix incorrect TID updation in DP monitor status path (stable-fixes).\n- wifi: ath12k: fix struct hal_rx_phyrx_rssi_legacy_info (stable-fixes).\n- wifi: ath12k: fix the fetching of combined rssi (git-fixes).\n- wifi: ath12k: Free allocated CE IRQs on request_irq() failure (git-fixes).\n- wifi: ath12k: Reserve space for a string terminator (git-fixes).\n- wifi: b43: don't pass unterminated string to sscanf() (git-fixes).\n- wifi: b43: fix use-after-free in b43_bcma_remove() (git-fixes).\n- wifi: b43legacy: debugfs: NUL terminate string in debugfs (git-fixes).\n- wifi: brcmsmac: Adjust txpwrindex value in nphy_ipa_rxcal_gaintbl_2GHz (git-fixes).\n- wifi: carl9170: NUL terminate string in debugfs (git-fixes).\n- wifi: cfg80211: allow zero HE OBSS PD offsets (git-fixes).\n- wifi: cfg80211: preserve hidden-group beacon IE ownership (git-fixes).\n- wifi: cfg80211: reject duplicate wiphy cipher suite entries (stable-fixes).\n- wifi: cfg80211: track SSID regardless of country data (git-fixes).\n- wifi: cw1200: fix TX padding OOB read leaking heap data to device (git-fixes).\n- wifi: iwlegacy: 3945: free EEPROM data on remove (git-fixes).\n- wifi: iwlwifi: dvm: pair transport op-mode enter/leave (stable-fixes).\n- wifi: iwlwifi: mvm: remove mvm prefix from iwl_mvm_tx_resp* (stable-fixes).\n- wifi: iwlwifi: mvm: validate TX_CMD response layout (stable-fixes).\n- wifi: iwlwifi: simplify nested if checks (stable-fixes).\n- wifi: mac80211: account proxy paths against the mesh path limit (git-fixes).\n- wifi: mac80211: Add 802.3 multicast encapsulation offload support (stable-fixes).\n- wifi: mac80211: Add multicast to unicast support for 802.3 path (stable-fixes).\n- wifi: mac80211: Add sta pointer sanity check in ieee80211_8023_xmit() (stable-fixes).\n- wifi: mac80211: clear fragment cache entry 'is_protected' (git-fixes).\n- wifi: mac80211: don't call ieee80211_handle_reconfig_failure when not needed (stable-fixes).\n- wifi: mac80211: don't reset the TXQ scheduling round number (git-fixes).\n- wifi: mac80211: don't send encap offload frames unencrypted (git-fixes).\n- wifi: mac80211: drain PS delivery work during station teardown (git-fixes).\n- wifi: mac80211: drop encap offload frames with a tainted key (git-fixes).\n- wifi: mac80211: Fix a race when expiring a mesh path (git-fixes).\n- wifi: mac80211: fix encryption tailroom (git-fixes).\n- wifi: mac80211: fix key selection for encap offload frames (git-fixes).\n- wifi: mac80211: fix mesh fast xmit path deletion UAF (git-fixes).\n- wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (stable-fixes).\n- wifi: mac80211: fix swapped fq_overlimit/fq_overmemory in aqm debugfs (git-fixes).\n- wifi: mac80211: Fix the return value in mesh_path_add() kernel-doc (git-fixes).\n- wifi: mac80211: fix typo in HE MCS check (stable-fixes).\n- wifi: mac80211: fix unauthorised port check for encap offload (git-fixes).\n- wifi: mac80211: handle empty FILS association request payload (git-fixes).\n- wifi: mac80211: init radiotap iter after length checks (git-fixes).\n- wifi: mac80211: kill wake_txqs_tasklet on unregistration (git-fixes).\n- wifi: mac80211: limit injected HT/VHT MCSes (git-fixes).\n- wifi: mac80211: log link information in ieee80211_determine_chan_mode (stable-fixes).\n- wifi: mac80211: mesh: use hlist_add_head_rcu() (git-fixes).\n- wifi: mac80211: minstrel_ht: validate fixed rate index (git-fixes).\n- wifi: mac80211: prevent AP VLAN tx from other interfaces (git-fixes).\n- wifi: mac80211: refactor populating mesh related fields in sinfo (stable-fixes).\n- wifi: mac80211: release mesh path quota on failed additions (git-fixes).\n- wifi: mac80211: reserve MME tailroom for protected beacons (git-fixes).\n- wifi: mac80211: set info-\u003eband for 802.3 encap offload frames (git-fixes).\n- wifi: mac80211: use link address as TA for non-MLO 4-addr station on MLD AP (git-fixes).\n- wifi: mt76: feed the station RSSI average from the chain signals (git-fixes).\n- wifi: mt76: fix memory leak in USB TX path (git-fixes).\n- wifi: mt76: Fix of_node reference leak in mt76_get_rate_power_limits() (git-fixes).\n- wifi: mt76: fix unlocked wcid check in mt76_tx_status_skb_add() (git-fixes).\n- wifi: mt76: fix wcid-\u003epktid corruption in mt76_wcid_cleanup() (git-fixes).\n- wifi: mt76: mt76x02: validate RX padding before use (git-fixes).\n- wifi: mt76: mt76x02: validate TX-status rate index before mac80211 handoff (git-fixes).\n- wifi: mt76: mt792x: fix UAF in SDIO TX path when out of memory (git-fixes).\n- wifi: mt76: mt7603: don't drop short frames looped back on PS entry (git-fixes).\n- wifi: mt76: mt7615: cancel reset work during unregister (git-fixes).\n- wifi: mt76: mt7615: do not tear down BSS/STA state for monitor vifs (git-fixes).\n- wifi: mt76: mt7615: read MT7663 temperature from the correct offset (git-fixes).\n- wifi: mt76: mt7615: usb: fix source overread in mt7663u_copy (git-fixes).\n- wifi: mt76: mt7615: validate MCU response lengths (git-fixes).\n- wifi: mt76: mt7915: allocate vif wcid in the same range as stations (stable-fixes).\n- wifi: mt76: mt7915: bound the device EEPROM address before the EFUSE copy (git-fixes).\n- wifi: mt76: mt7915: check default EEPROM firmware size before copying (git-fixes).\n- wifi: mt76: mt7915: clear wcid mask under mutex after RCU pointer clear (git-fixes).\n- wifi: mt76: mt7915: Fix an error handling path in mt7915_add_interface() (git-fixes).\n- wifi: mt76: mt7915: guard firmware memory dump write on disabled memdump (git-fixes).\n- wifi: mt76: mt7915: set correct background radar capability (stable-fixes).\n- wifi: mt76: mt7915: unregister thermal cooling device on hwmon failure (git-fixes).\n- wifi: mt76: mt7921: check drv_pmctrl return in the PCIe reset path (git-fixes).\n- wifi: mt76: mt7921: fix lock inversion between dev-\u003emutex and iflist_mtx (git-fixes).\n- wifi: mt76: mt7921: fix the lock inversion in suspend and resume (git-fixes).\n- wifi: mt76: mt7925: check drv_pmctrl return in the PCIe reset path (git-fixes).\n- wifi: mt76: mt7925: fix lock inversion between dev-\u003emutex and iflist_mtx (git-fixes).\n- wifi: mt76: mt7925: fix the lock inversion in suspend and resume (git-fixes).\n- wifi: mt76: mt7925: honour mac80211's FIF_FCSFAIL instead of hardcoding drop_err (git-fixes).\n- wifi: mt76: mt7925: restore the reset state when fw_pmctrl fails (git-fixes).\n- wifi: mt76: mt7996: fix PLE free page and AC queue register offsets (git-fixes).\n- wifi: mt76: mt7996: validate firmware event lengths before parsing (git-fixes).\n- wifi: mt76: usb: fix source overread in mt76u_copy (git-fixes).\n- wifi: mwifiex: append hotfix number to firmware version string (git-fixes).\n- wifi: rtw88: debugfs: don't vzalloc(0) when rsvd_page is read unconfigured (git-fixes).\n- wifi: rtw88: debugfs: support multiple adapters debugging (stable-fixes).\n- wifi: rtw88: fix out-of-bounds CAM write when key table is full (git-fixes).\n- wifi: rtw88: sdio: zero the padding added to a TX transfer (git-fixes).\n- wifi: rtw89: 8851b: fix swapped DPK channel/bandwidth backup fields (git-fixes).\n- wifi: rtw89: cap firmware section_num before parsing (git-fixes).\n- wifi: wfx: fix possible device hang during init (git-fixes).\n- wifi: wfx: fix use-after-free of the cooling work on device removal (git-fixes).\n- wifi: wfx: validate MIB read length before copying to caller (git-fixes).\n- wwan: wwan_hwsim: Pin module for debugfs file operations (git-fixes).\n- x86/hyperv: Avoid using per-cpu output page in hv_apicid_to_vp_index() (git-fixes).\n- x86/PCI: Disable enhanced atomics on AMD NBIO 7.7 and 7.11 (git-fixes).\n- xhci: dbc: lock the minor IDR on registration failure (git-fixes).\n","status":"published","published":"2026-11-03T16:27:43Z","modified":"2026-11-04T14:15:08.544785478Z","updated_at":"2026-11-04T14:31:33.296313Z"}]}}